[Tue Nov 04 01:04:35 2025] [mollywoppersnyb.com] [error] [client 52.45.194.165:60840] [pid 1745855] apache2_util.c(271): [client 52.45.194.165] ModSecurity: Warning. Matched phrase "sys/module" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: sys/module found within ARGS:path: /sys/module/aic79xx"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQnBo-AaSsjislSbotCHMwAAJxk"] [Tue Nov 04 01:06:27 2025] [mollywoppersnyb.com] [error] [client 3.223.181.32:28868] [pid 1745855] apache2_util.c(271): [client 3.223.181.32] ModSecurity: Warning. Matched phrase "sys/module" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: sys/module found within ARGS:path: /sys/module/3w_xxxx"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQnCE-AaSsjislSbotCHoAAAJyk"] [Tue Nov 04 01:15:57 2025] [mollywoppersnyb.com] [error] [client 52.3.156.186:49527] [pid 1745855] apache2_util.c(271): [client 52.3.156.186] ModSecurity: Warning. Matched phrase "sys/dev" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: sys/dev found within ARGS:path: /sys/devices/cpu"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQnETeAaSsjislSbotCPPQAAJ1o"] [Tue Nov 04 01:18:24 2025] [mollywoppersnyb.com] [error] [client 23.23.180.225:48846] [pid 1745855] apache2_util.c(271): [client 23.23.180.225] ModSecurity: Warning. Matched phrase "sys/module" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: sys/module found within ARGS:path: /sys/module/mlxsw_core"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQnE4OAaSsjislSbotCQBQAAJzQ"] [Tue Nov 04 01:19:53 2025] [mollywoppersnyb.com] [error] [client 98.83.72.38:11715] [pid 1745855] apache2_util.c(271): [client 98.83.72.38] ModSecurity: Warning. Matched phrase "sys/class" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: sys/class found within ARGS:path: /sys/class/vc"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQnFOeAaSsjislSbotCQxwAAJx0"] [Tue Nov 04 01:20:04 2025] [mollywoppersnyb.com] [error] [client 52.204.253.129:56727] [pid 1745855] apache2_util.c(271): [client 52.204.253.129] ModSecurity: Warning. Matched phrase "sys/class" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: sys/class found within ARGS:path: /sys/class/pps"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQnFROAaSsjislSbotCRDAAAJ28"] [Tue Nov 04 01:20:45 2025] [mollywoppersnyb.com] [error] [client 52.2.58.41:44159] [pid 1745855] apache2_util.c(271): [client 52.2.58.41] ModSecurity: Warning. Matched phrase "etc/texmf" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: etc/texmf found within ARGS:path: /etc/texmf/web2c"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQnFbeAaSsjislSbotCTeAAAJ6Y"] [Tue Nov 04 01:27:08 2025] [mollywoppersnyb.com] [error] [client 98.82.40.168:13319] [pid 1745855] apache2_util.c(271): [client 98.82.40.168] ModSecurity: Warning. Matched phrase "sys/bus" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: sys/bus found within ARGS:path: /sys/bus/serial-base"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQnG7OAaSsjislSbotCYhQAAJ40"] [Tue Nov 04 01:27:37 2025] [mollywoppersnyb.com] [error] [client 44.207.69.106:24088] [pid 1745855] apache2_util.c(271): [client 44.207.69.106] ModSecurity: Warning. Matched phrase "sys/dev" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: sys/dev found within ARGS:path: /sys/devices/amd_iommu_1"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQnHCeAaSsjislSbotCY6wAAJ3Q"] [Tue Nov 04 01:28:22 2025] [mollywoppersnyb.com] [error] [client 35.172.125.172:63734] [pid 1745855] apache2_util.c(271): [client 35.172.125.172] ModSecurity: Warning. Matched phrase "sys/module" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: sys/module found within ARGS:path: /sys/module/memory_hotplug"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQnHNuAaSsjislSbotCZPwAAJzc"] [Tue Nov 04 01:30:16 2025] [mollywoppersnyb.com] [error] [client 3.208.146.193:16847] [pid 1745855] apache2_util.c(271): [client 3.208.146.193] ModSecurity: Warning. Matched phrase "etc/postfix" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: etc/postfix found within ARGS:path: /etc/postfix/dynamicmaps.cf.d"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQnHqOAaSsjislSbotCapwAAJ50"] [Tue Nov 04 01:41:27 2025] [mollywoppersnyb.com] [error] [client 23.21.204.95:48969] [pid 1745855] apache2_util.c(271): [client 23.21.204.95] ModSecurity: Access denied with code 418 (phase 2). Pattern match "^[\\\\.|/]+(proc/|dev/shm/)" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/99_dreamhost_rules.conf"] [line "53"] [id "1990013"] [msg "Directory traversal"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQnKR-AaSsjislSbotCnsgAAJ3g"] [Tue Nov 04 01:45:19 2025] [mollywoppersnyb.com] [error] [client 52.4.213.199:59514] [pid 1745855] apache2_util.c(271): [client 52.4.213.199] ModSecurity: Access denied with code 418 (phase 2). Pattern match "^[\\\\.|/]+(proc/|dev/shm/)" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/99_dreamhost_rules.conf"] [line "53"] [id "1990013"] [msg "Directory traversal"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQnLL-AaSsjislSbotCqcgAAJ3k"] [Tue Nov 04 01:46:31 2025] [mollywoppersnyb.com] [error] [client 18.214.124.6:65084] [pid 1745855] apache2_util.c(271): [client 18.214.124.6] ModSecurity: Warning. Matched phrase "etc/apt" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: etc/apt found within ARGS:path: /etc/apt/sources.list.d"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQnLd-AaSsjislSbotCrQgAAJ8o"] [Tue Nov 04 01:48:54 2025] [mollywoppersnyb.com] [error] [client 44.206.93.215:38598] [pid 1745855] apache2_util.c(271): [client 44.206.93.215] ModSecurity: Warning. Matched phrase "sys/class" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: sys/class found within ARGS:path: /sys/class/ata_port"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQnMBuAaSsjislSbotCskAAAJ6A"] [Tue Nov 04 01:48:56 2025] [mollywoppersnyb.com] [error] [client 18.215.49.176:65205] [pid 1745855] apache2_util.c(271): [client 18.215.49.176] ModSecurity: Warning. Matched phrase "sys/module" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: sys/module found within ARGS:path: /sys/module/module"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQnMCOAaSsjislSbotCslQAAJ-o"] [Tue Nov 04 01:49:08 2025] [mollywoppersnyb.com] [error] [client 54.84.169.196:49759] [pid 1745855] apache2_util.c(271): [client 54.84.169.196] ModSecurity: Warning. Matched phrase "sys/class" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: sys/class found within ARGS:path: /sys/class/usbmisc"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQnMFOAaSsjislSbotCstQAAJ1M"] [Tue Nov 04 01:49:12 2025] [mollywoppersnyb.com] [error] [client 44.212.131.50:6815] [pid 1745855] apache2_util.c(271): [client 44.212.131.50] ModSecurity: Warning. Matched phrase "sys/module" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: sys/module found within ARGS:path: /sys/module/iosf_mbi"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQnMGOAaSsjislSbotCswgAAJ5Y"] [Tue Nov 04 01:49:48 2025] [mollywoppersnyb.com] [error] [client 3.232.82.72:59006] [pid 1745855] apache2_util.c(271): [client 3.232.82.72] ModSecurity: Warning. Matched phrase "sys/class" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: sys/class found within ARGS:path: /sys/class/dma"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQnMPOAaSsjislSbotCtEgAAJxI"] [Tue Nov 04 01:52:50 2025] [mollywoppersnyb.com] [error] [client 54.83.23.103:29946] [pid 1745855] apache2_util.c(271): [client 54.83.23.103] ModSecurity: Warning. Matched phrase "sys/dev" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: sys/dev found within ARGS:path: /sys/dev/block"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQnM8uAaSsjislSbotCvsAAAJxU"] [Tue Nov 04 01:54:35 2025] [mollywoppersnyb.com] [error] [client 34.197.28.78:60913] [pid 1745855] apache2_util.c(271): [client 34.197.28.78] ModSecurity: Warning. Matched phrase "etc/perl" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: etc/perl found within ARGS:path: /etc/perl/Net"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQnNW-AaSsjislSbotCzDgAAJz4"] [Tue Nov 04 01:56:59 2025] [mollywoppersnyb.com] [error] [client 34.205.170.13:4721] [pid 1745855] apache2_util.c(271): [client 34.205.170.13] ModSecurity: Warning. Matched phrase "sys/class" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: sys/class found within ARGS:path: /sys/class/mem"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQnN6-AaSsjislSbotC1QgAAJ1Y"] [Tue Nov 04 01:57:30 2025] [mollywoppersnyb.com] [error] [client 34.203.111.15:10016] [pid 1745855] apache2_util.c(271): [client 34.203.111.15] ModSecurity: Warning. Matched phrase "sys/fs" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: sys/fs found within ARGS:path: /sys/fs/fuse"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQnOCuAaSsjislSbotC1jAAAJ4A"] [Tue Nov 04 01:58:31 2025] [mollywoppersnyb.com] [error] [client 44.223.116.180:35640] [pid 1745855] apache2_util.c(271): [client 44.223.116.180] ModSecurity: Warning. Matched phrase "var/log" at ARGS:fileloc. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: var/log found within ARGS:fileloc: /var/log/cloud-init.log"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQnOR-AaSsjislSbotC2BAAAJ5M"] [Tue Nov 04 01:58:31 2025] [mollywoppersnyb.com] [error] [client 44.223.116.180:35640] [pid 1745855] apache2_util.c(271): [client 44.223.116.180] ModSecurity: Warning. Matched phrase "var/log" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: var/log found within ARGS:path: /var/log"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQnOR-AaSsjislSbotC2BAAAJ5M"] [Tue Nov 04 01:58:36 2025] [mollywoppersnyb.com] [error] [client 44.206.93.215:36022] [pid 1745855] apache2_util.c(271): [client 44.206.93.215] ModSecurity: Warning. Matched phrase "etc/logrotate.d" at ARGS:fileloc. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: etc/logrotate.d found within ARGS:fileloc: /etc/logrotate.d/ubuntu-pro-client"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQnOTOAaSsjislSbotC2DQAAJ3s"] [Tue Nov 04 01:58:36 2025] [mollywoppersnyb.com] [error] [client 44.206.93.215:36022] [pid 1745855] apache2_util.c(271): [client 44.206.93.215] ModSecurity: Warning. Matched phrase "etc/logrotate.d" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: etc/logrotate.d found within ARGS:path: /etc/logrotate.d"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQnOTOAaSsjislSbotC2DQAAJ3s"] [Tue Nov 04 01:59:59 2025] [mollywoppersnyb.com] [error] [client 34.234.197.175:7605] [pid 1745855] apache2_util.c(271): [client 34.234.197.175] ModSecurity: Warning. Matched phrase "sys/module" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: sys/module found within ARGS:path: /sys/module/usbhid"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQnOn-AaSsjislSbotC2tAAAJ3I"] [Tue Nov 04 02:06:24 2025] [mollywoppersnyb.com] [error] [client 98.84.60.17:65184] [pid 1745855] apache2_util.c(271): [client 98.84.60.17] ModSecurity: Warning. Matched phrase "var/log" at ARGS:fileloc. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: var/log found within ARGS:fileloc: /var/log/wtmp"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQnQIOAaSsjislSbotC6UgAAJ3c"] [Tue Nov 04 02:06:24 2025] [mollywoppersnyb.com] [error] [client 98.84.60.17:65184] [pid 1745855] apache2_util.c(271): [client 98.84.60.17] ModSecurity: Warning. Matched phrase "var/log" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: var/log found within ARGS:path: /var/log"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQnQIOAaSsjislSbotC6UgAAJ3c"] [Tue Nov 04 02:07:51 2025] [mollywoppersnyb.com] [error] [client 98.82.107.102:9148] [pid 1745855] apache2_util.c(271): [client 98.82.107.102] ModSecurity: Warning. Matched phrase "etc/init" at ARGS:fileloc. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: etc/init found within ARGS:fileloc: /etc/init.d/standby"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQnQd-AaSsjislSbotC7CAAAJ88"] [Tue Nov 04 02:07:51 2025] [mollywoppersnyb.com] [error] [client 98.82.107.102:9148] [pid 1745855] apache2_util.c(271): [client 98.82.107.102] ModSecurity: Warning. Matched phrase "etc/init" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: etc/init found within ARGS:path: /etc/init.d"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQnQd-AaSsjislSbotC7CAAAJ88"] [Tue Nov 04 02:09:27 2025] [mollywoppersnyb.com] [error] [client 3.232.82.72:46772] [pid 1745855] apache2_util.c(271): [client 3.232.82.72] ModSecurity: Warning. Matched phrase "etc/cron.d" at ARGS:fileloc. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: etc/cron.d found within ARGS:fileloc: /etc/cron.daily/ntp"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQnQ1-AaSsjislSbotC8AQAAJyM"] [Tue Nov 04 02:09:27 2025] [mollywoppersnyb.com] [error] [client 3.232.82.72:46772] [pid 1745855] apache2_util.c(271): [client 3.232.82.72] ModSecurity: Warning. Matched phrase "etc/cron.d" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: etc/cron.d found within ARGS:path: /etc/cron.daily"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQnQ1-AaSsjislSbotC8AQAAJyM"] [Tue Nov 04 02:11:35 2025] [mollywoppersnyb.com] [error] [client 34.233.219.155:9399] [pid 1745855] apache2_util.c(271): [client 34.233.219.155] ModSecurity: Warning. Matched phrase "etc/init" at ARGS:fileloc. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: etc/init found within ARGS:fileloc: /etc/init.d/zabbix-agent"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQnRV-AaSsjislSbotC-IwAAJ24"] [Tue Nov 04 02:11:35 2025] [mollywoppersnyb.com] [error] [client 34.233.219.155:9399] [pid 1745855] apache2_util.c(271): [client 34.233.219.155] ModSecurity: Warning. Matched phrase "etc/init" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: etc/init found within ARGS:path: /etc/init.d"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQnRV-AaSsjislSbotC-IwAAJ24"] [Tue Nov 04 02:14:03 2025] [mollywoppersnyb.com] [error] [client 52.71.216.196:21449] [pid 1745855] apache2_util.c(271): [client 52.71.216.196] ModSecurity: Warning. Matched phrase "etc/default" at ARGS:fileloc. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: etc/default found within ARGS:fileloc: /etc/default/keyboard"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQnR6-AaSsjislSbotDArQAAJ2w"] [Tue Nov 04 02:14:03 2025] [mollywoppersnyb.com] [error] [client 52.71.216.196:21449] [pid 1745855] apache2_util.c(271): [client 52.71.216.196] ModSecurity: Warning. Matched phrase "etc/default" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: etc/default found within ARGS:path: /etc/default"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQnR6-AaSsjislSbotDArQAAJ2w"] [Tue Nov 04 02:15:37 2025] [mollywoppersnyb.com] [error] [client 98.82.39.241:53775] [pid 1745855] apache2_util.c(271): [client 98.82.39.241] ModSecurity: Warning. Matched phrase "sys/bus" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: sys/bus found within ARGS:path: /sys/bus/workqueue"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQnSSeAaSsjislSbotDCYAAAJ1c"] [Tue Nov 04 02:16:48 2025] [mollywoppersnyb.com] [error] [client 44.215.61.66:16829] [pid 1745855] apache2_util.c(271): [client 44.215.61.66] ModSecurity: Warning. Matched phrase "etc/nginx/" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: etc/nginx/ found within ARGS:path: /etc/nginx/modules-available"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQnSkOAaSsjislSbotDDwQAAJyc"] [Tue Nov 04 02:17:56 2025] [mollywoppersnyb.com] [error] [client 100.29.107.38:16278] [pid 1745855] apache2_util.c(271): [client 100.29.107.38] ModSecurity: Access denied with code 418 (phase 2). Pattern match "^[\\\\.|/]+(proc/|dev/shm/)" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/99_dreamhost_rules.conf"] [line "53"] [id "1990013"] [msg "Directory traversal"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQnS1OAaSsjislSbotDEKAAAJxw"] [Tue Nov 04 02:18:25 2025] [mollywoppersnyb.com] [error] [client 44.223.115.10:13756] [pid 1745855] apache2_util.c(271): [client 44.223.115.10] ModSecurity: Warning. Matched phrase "sys/class" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: sys/class found within ARGS:path: /sys/class/uio"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQnS8eAaSsjislSbotDEQgAAJ1I"] [Tue Nov 04 02:18:28 2025] [mollywoppersnyb.com] [error] [client 100.27.153.9:19502] [pid 1745855] apache2_util.c(271): [client 100.27.153.9] ModSecurity: Warning. Matched phrase "var/spool" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: var/spool found within ARGS:path: /var/spool/postfix"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQnS9OAaSsjislSbotDERQAAJ-I"] [Tue Nov 04 02:21:43 2025] [mollywoppersnyb.com] [error] [client 54.156.55.147:54143] [pid 1745855] apache2_util.c(271): [client 54.156.55.147] ModSecurity: Warning. Matched phrase "etc/init" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: etc/init found within ARGS:path: /etc/initramfs-tools/scripts"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQnTt-AaSsjislSbotDFgQAAJ4k"] [Tue Nov 04 02:21:53 2025] [mollywoppersnyb.com] [error] [client 54.83.180.239:10857] [pid 1745855] apache2_util.c(271): [client 54.83.180.239] ModSecurity: Warning. Matched phrase "sys/fs" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: sys/fs found within ARGS:path: /sys/fs/nfs"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQnTweAaSsjislSbotDFkwAAJxM"] [Tue Nov 04 02:22:47 2025] [mollywoppersnyb.com] [error] [client 50.19.221.48:53633] [pid 1745855] apache2_util.c(271): [client 50.19.221.48] ModSecurity: Warning. Matched phrase "etc/ghostscript" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: etc/ghostscript found within ARGS:path: /etc/ghostscript/cidfmap.d"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQnT9-AaSsjislSbotDF-gAAJ40"] [Tue Nov 04 02:23:13 2025] [mollywoppersnyb.com] [error] [client 3.231.193.38:25656] [pid 1745855] apache2_util.c(271): [client 3.231.193.38] ModSecurity: Access denied with code 418 (phase 2). Pattern match "^[\\\\.|/]+(proc/|dev/shm/)" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/99_dreamhost_rules.conf"] [line "53"] [id "1990013"] [msg "Directory traversal"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQnUEeAaSsjislSbotDGGQAAJyM"] [Tue Nov 04 02:27:06 2025] [mollywoppersnyb.com] [error] [client 52.204.81.148:37109] [pid 1745855] apache2_util.c(271): [client 52.204.81.148] ModSecurity: Warning. Matched phrase "etc/xdg" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: etc/xdg found within ARGS:path: /etc/xdg/systemd"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQnU-uAaSsjislSbotDH1wAAJ9g"] [Tue Nov 04 02:28:37 2025] [mollywoppersnyb.com] [error] [client 100.28.118.16:10570] [pid 1745855] apache2_util.c(271): [client 100.28.118.16] ModSecurity: Warning. Matched phrase "sys/module" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: sys/module found within ARGS:path: /sys/module/crc_t10dif"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQnVVeAaSsjislSbotDIhwAAJ7U"] [Tue Nov 04 02:30:03 2025] [mollywoppersnyb.com] [error] [client 34.194.95.99:43822] [pid 1745855] apache2_util.c(271): [client 34.194.95.99] ModSecurity: Access denied with code 418 (phase 2). Pattern match "^[\\\\.|/]+(proc/|dev/shm/)" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/99_dreamhost_rules.conf"] [line "53"] [id "1990013"] [msg "Directory traversal"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQnVq-AaSsjislSbotDJTAAAJ8U"] [Tue Nov 04 02:30:35 2025] [mollywoppersnyb.com] [error] [client 23.21.225.190:38011] [pid 1745855] apache2_util.c(271): [client 23.21.225.190] ModSecurity: Warning. Matched phrase "sys/module" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: sys/module found within ARGS:path: /sys/module/sata_nv"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQnVy-AaSsjislSbotDJhQAAJ8I"] [Tue Nov 04 02:31:07 2025] [mollywoppersnyb.com] [error] [client 3.213.106.226:14959] [pid 1745855] apache2_util.c(271): [client 3.213.106.226] ModSecurity: Warning. Matched phrase "etc/apparmor" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: etc/apparmor found within ARGS:path: /etc/apparmor.d/local"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQnV6-AaSsjislSbotDJwgAAJ10"] [Tue Nov 04 02:33:11 2025] [mollywoppersnyb.com] [error] [client 3.212.219.113:29815] [pid 1745855] apache2_util.c(271): [client 3.212.219.113] ModSecurity: Warning. Matched phrase "etc/default" at ARGS:fileloc. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: etc/default found within ARGS:fileloc: /etc/default/grub.ucf-dist"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQnWZ-AaSsjislSbotDKpAAAJ1Y"] [Tue Nov 04 02:33:11 2025] [mollywoppersnyb.com] [error] [client 3.212.219.113:29815] [pid 1745855] apache2_util.c(271): [client 3.212.219.113] ModSecurity: Warning. Matched phrase "etc/default" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: etc/default found within ARGS:path: /etc/default"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQnWZ-AaSsjislSbotDKpAAAJ1Y"] [Tue Nov 04 02:43:51 2025] [mollywoppersnyb.com] [error] [client 34.236.41.241:60106] [pid 1745855] apache2_util.c(271): [client 34.236.41.241] ModSecurity: Warning. Matched phrase "sys/dev" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: sys/dev found within ARGS:path: /sys/devices/software"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQnY5-AaSsjislSbotDPMgAAJ-Y"] [Tue Nov 04 02:46:01 2025] [mollywoppersnyb.com] [error] [client 54.80.73.122:55259] [pid 1745855] apache2_util.c(271): [client 54.80.73.122] ModSecurity: Warning. Matched phrase "sys/module" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: sys/module found within ARGS:path: /sys/module/bridge"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQnZaeAaSsjislSbotDP4gAAJ5U"] [Tue Nov 04 02:46:23 2025] [mollywoppersnyb.com] [error] [client 52.7.33.248:7333] [pid 1745855] apache2_util.c(271): [client 52.7.33.248] ModSecurity: Warning. Matched phrase "sys/class" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: sys/class found within ARGS:path: /sys/class/iommu"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQnZf-AaSsjislSbotDP_wAAJxM"] [Tue Nov 04 02:46:46 2025] [mollywoppersnyb.com] [error] [client 34.195.248.30:14712] [pid 1745855] apache2_util.c(271): [client 34.195.248.30] ModSecurity: Warning. Matched phrase "var/log" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: var/log found within ARGS:path: /var/log/apache2"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQnZluAaSsjislSbotDQGgAAJ5A"] [Tue Nov 04 02:47:46 2025] [mollywoppersnyb.com] [error] [client 23.23.99.55:45985] [pid 1745855] apache2_util.c(271): [client 23.23.99.55] ModSecurity: Access denied with code 418 (phase 2). Pattern match "^[\\\\.|/]+(proc/|dev/shm/)" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/99_dreamhost_rules.conf"] [line "53"] [id "1990013"] [msg "Directory traversal"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQnZ0uAaSsjislSbotDQbgAAJyE"] [Tue Nov 04 02:48:09 2025] [mollywoppersnyb.com] [error] [client 98.82.39.241:9468] [pid 1745855] apache2_util.c(271): [client 98.82.39.241] ModSecurity: Warning. Matched phrase "sys/class" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: sys/class found within ARGS:path: /sys/class/aoe"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQnZ6eAaSsjislSbotDQkAAAJ9Y"] [Tue Nov 04 02:55:06 2025] [mollywoppersnyb.com] [error] [client 143.244.42.77:58420] [pid 1745855] mod_access_compat.c(350): AH01797: client denied by server configuration: /home/mollywopper/mollywoppersnyb.com/manager.php [Tue Nov 04 02:55:08 2025] [mollywoppersnyb.com] [error] [client 54.159.18.27:21922] [pid 1745855] apache2_util.c(271): [client 54.159.18.27] ModSecurity: Warning. Matched phrase "sys/bus" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: sys/bus found within ARGS:path: /sys/bus/pci"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQnbjOAaSsjislSbotDTdwAAJ80"] [Tue Nov 04 02:55:35 2025] [mollywoppersnyb.com] [error] [client 34.236.135.14:51803] [pid 1745855] apache2_util.c(271): [client 34.236.135.14] ModSecurity: Warning. Matched phrase "var/log" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: var/log found within ARGS:path: /var/log/account"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQnbp-AaSsjislSbotDTkQAAJ4o"] [Tue Nov 04 02:56:32 2025] [mollywoppersnyb.com] [error] [client 34.205.163.103:33611] [pid 1745855] apache2_util.c(271): [client 34.205.163.103] ModSecurity: Warning. Matched phrase "sys/module" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: sys/module found within ARGS:path: /sys/module/nfs"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQnb4OAaSsjislSbotDT2AAAJzY"] [Tue Nov 04 02:56:44 2025] [mollywoppersnyb.com] [error] [client 54.84.161.62:44430] [pid 1745855] apache2_util.c(271): [client 54.84.161.62] ModSecurity: Warning. Matched phrase "sys/module" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: sys/module found within ARGS:path: /sys/module/hid_sensor_hub"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQnb7OAaSsjislSbotDT4gAAJzA"] [Tue Nov 04 02:57:16 2025] [mollywoppersnyb.com] [error] [client 54.159.18.27:49450] [pid 1745855] apache2_util.c(271): [client 54.159.18.27] ModSecurity: Warning. Matched phrase "sys/module" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: sys/module found within ARGS:path: /sys/module/bnx2x"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQncDOAaSsjislSbotDUBwAAJx0"] [Tue Nov 04 02:57:39 2025] [mollywoppersnyb.com] [error] [client 3.217.171.106:41109] [pid 1745855] apache2_util.c(271): [client 3.217.171.106] ModSecurity: Warning. Matched phrase "sys/module" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: sys/module found within ARGS:path: /sys/module/psmouse"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQncI-AaSsjislSbotDUIAAAJ2Y"] [Tue Nov 04 02:57:53 2025] [mollywoppersnyb.com] [error] [client 18.233.24.238:34052] [pid 1745855] apache2_util.c(271): [client 18.233.24.238] ModSecurity: Warning. Matched phrase "sys/module" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: sys/module found within ARGS:path: /sys/module/dns_resolver"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQncMeAaSsjislSbotDUOQAAJ9A"] [Tue Nov 04 03:09:31 2025] [mollywoppersnyb.com] [error] [client 98.82.40.168:9782] [pid 2509305] apache2_util.c(271): [client 98.82.40.168] ModSecurity: Warning. Matched phrase "var/log" at ARGS:fileloc. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: var/log found within ARGS:fileloc: /var/log/daemon.log.7.gz"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQne6xCnW5FCz3povTuZVQAAAA0"] [Tue Nov 04 03:09:31 2025] [mollywoppersnyb.com] [error] [client 98.82.40.168:9782] [pid 2509305] apache2_util.c(271): [client 98.82.40.168] ModSecurity: Warning. Matched phrase "var/log" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: var/log found within ARGS:path: /var/log"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQne6xCnW5FCz3povTuZVQAAAA0"] [Tue Nov 04 03:12:56 2025] [mollywoppersnyb.com] [error] [client 54.87.95.7:57388] [pid 2509305] apache2_util.c(271): [client 54.87.95.7] ModSecurity: Warning. Matched phrase "sys/module" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: sys/module found within ARGS:path: /sys/module/mptscsih"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQnfuBCnW5FCz3povTubFwAAAFE"] [Tue Nov 04 03:14:15 2025] [mollywoppersnyb.com] [error] [client 184.73.167.217:61208] [pid 2509305] apache2_util.c(271): [client 184.73.167.217] ModSecurity: Warning. Matched phrase "etc/libblockdev" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: etc/libblockdev found within ARGS:path: /etc/libblockdev/conf.d"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQngBxCnW5FCz3povTubygAAABA"] [Tue Nov 04 03:16:54 2025] [mollywoppersnyb.com] [error] [client 44.217.255.167:54398] [pid 2509305] apache2_util.c(271): [client 44.217.255.167] ModSecurity: Warning. Matched phrase "sys/bus" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: sys/bus found within ARGS:path: /sys/bus/acpi"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQngphCnW5FCz3povTucswAAAGI"] [Tue Nov 04 03:18:10 2025] [mollywoppersnyb.com] [error] [client 100.29.107.38:16629] [pid 2509305] apache2_util.c(271): [client 100.29.107.38] ModSecurity: Warning. Matched phrase "sys/bus" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: sys/bus found within ARGS:path: /sys/bus/cpu"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQng8hCnW5FCz3povTudNwAAAIg"] [Tue Nov 04 03:18:32 2025] [mollywoppersnyb.com] [error] [client 18.213.27.222:1990] [pid 2509305] apache2_util.c(271): [client 18.213.27.222] ModSecurity: Warning. Matched phrase "sys/module" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: sys/module found within ARGS:path: /sys/module/srcutree"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQnhCBCnW5FCz3povTudTgAAALw"] [Tue Nov 04 03:20:09 2025] [mollywoppersnyb.com] [error] [client 34.196.237.236:45303] [pid 2509305] apache2_util.c(271): [client 34.196.237.236] ModSecurity: Warning. Matched phrase "sys/module" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: sys/module found within ARGS:path: /sys/module/fb"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQnhaRCnW5FCz3povTud-wAAAD4"] [Tue Nov 04 03:21:50 2025] [mollywoppersnyb.com] [error] [client 44.208.193.63:53513] [pid 2509305] apache2_util.c(271): [client 44.208.193.63] ModSecurity: Warning. Matched phrase "sys/module" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: sys/module found within ARGS:path: /sys/module/ipmi_msghandler"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQnhzhCnW5FCz3povTuelQAAAKI"] [Tue Nov 04 03:22:14 2025] [mollywoppersnyb.com] [error] [client 3.93.211.16:15863] [pid 2509305] apache2_util.c(271): [client 3.93.211.16] ModSecurity: Warning. Matched phrase "sys/module" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: sys/module found within ARGS:path: /sys/module/3w_sas"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQnh5hCnW5FCz3povTufXAAAAJ0"] [Tue Nov 04 03:23:23 2025] [mollywoppersnyb.com] [error] [client 54.235.125.129:46935] [pid 2509305] apache2_util.c(271): [client 54.235.125.129] ModSecurity: Access denied with code 418 (phase 2). Pattern match "^[\\\\.|/]+(proc/|dev/shm/)" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/99_dreamhost_rules.conf"] [line "53"] [id "1990013"] [msg "Directory traversal"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQniKxCnW5FCz3povTufzAAAAKs"] [Tue Nov 04 03:24:24 2025] [mollywoppersnyb.com] [error] [client 44.212.232.231:22006] [pid 2509305] apache2_util.c(271): [client 44.212.232.231] ModSecurity: Warning. Matched phrase "etc/network" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: etc/network found within ARGS:path: /etc/network/if-pre-up.d"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQniaBCnW5FCz3povTugTAAAAKA"] [Tue Nov 04 03:28:07 2025] [mollywoppersnyb.com] [error] [client 100.29.34.97:12737] [pid 2509305] apache2_util.c(271): [client 100.29.34.97] ModSecurity: Access denied with code 418 (phase 2). Pattern match "^[\\\\.|/]+(proc/|dev/shm/)" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/99_dreamhost_rules.conf"] [line "53"] [id "1990013"] [msg "Directory traversal"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQnjRxCnW5FCz3povTuh6AAAAK4"] [Tue Nov 04 03:34:51 2025] [mollywoppersnyb.com] [error] [client 18.207.79.144:1133] [pid 2509305] apache2_util.c(271): [client 18.207.79.144] ModSecurity: Warning. Matched phrase "etc/default" at ARGS:fileloc. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: etc/default found within ARGS:fileloc: /etc/default/cron"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQnk2xCnW5FCz3povTulEAAAAC0"] [Tue Nov 04 03:34:51 2025] [mollywoppersnyb.com] [error] [client 18.207.79.144:1133] [pid 2509305] apache2_util.c(271): [client 18.207.79.144] ModSecurity: Warning. Matched phrase "etc/default" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: etc/default found within ARGS:path: /etc/default"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQnk2xCnW5FCz3povTulEAAAAC0"] [Tue Nov 04 03:39:23 2025] [mollywoppersnyb.com] [error] [client 3.226.34.98:29943] [pid 2509305] apache2_util.c(271): [client 3.226.34.98] ModSecurity: Access denied with code 418 (phase 2). Pattern match "^[\\\\.|/]+(proc/|dev/shm/)" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/99_dreamhost_rules.conf"] [line "53"] [id "1990013"] [msg "Directory traversal"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQnl6xCnW5FCz3povTumiwAAAHE"] [Tue Nov 04 03:42:16 2025] [mollywoppersnyb.com] [error] [client 3.94.156.104:17231] [pid 2509305] apache2_util.c(271): [client 3.94.156.104] ModSecurity: Warning. Matched phrase "sys/module" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: sys/module found within ARGS:path: /sys/module/amd64_edac"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQnmmBCnW5FCz3povTunxwAAAHU"] [Tue Nov 04 03:43:12 2025] [mollywoppersnyb.com] [error] [client 52.204.37.237:19819] [pid 2509305] apache2_util.c(271): [client 52.204.37.237] ModSecurity: Warning. Matched phrase "etc/default" at ARGS:fileloc. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: etc/default found within ARGS:fileloc: /etc/default/networkd-dispatcher"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQnm0BCnW5FCz3povTuocwAAAH8"] [Tue Nov 04 03:43:12 2025] [mollywoppersnyb.com] [error] [client 52.204.37.237:19819] [pid 2509305] apache2_util.c(271): [client 52.204.37.237] ModSecurity: Warning. Matched phrase "etc/default" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: etc/default found within ARGS:path: /etc/default"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQnm0BCnW5FCz3povTuocwAAAH8"] [Tue Nov 04 03:45:47 2025] [mollywoppersnyb.com] [error] [client 100.28.118.16:8615] [pid 2509305] apache2_util.c(271): [client 100.28.118.16] ModSecurity: Warning. Matched phrase "sys/class" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: sys/class found within ARGS:path: /sys/class/spi_transport"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQnnaxCnW5FCz3povTupSAAAAH0"] [Tue Nov 04 03:47:24 2025] [mollywoppersnyb.com] [error] [client 98.83.94.113:29856] [pid 2509305] apache2_util.c(271): [client 98.83.94.113] ModSecurity: Warning. Matched phrase "sys/module" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: sys/module found within ARGS:path: /sys/module/pata_mpiix"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQnnzBCnW5FCz3povTupvQAAAHw"] [Tue Nov 04 03:47:31 2025] [mollywoppersnyb.com] [error] [client 54.147.80.137:36882] [pid 2509305] apache2_util.c(271): [client 54.147.80.137] ModSecurity: Warning. Matched phrase "sys/module" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: sys/module found within ARGS:path: /sys/module/ceph"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQnn0xCnW5FCz3povTupwwAAAIg"] [Tue Nov 04 03:47:48 2025] [mollywoppersnyb.com] [error] [client 34.227.156.153:15375] [pid 2509305] apache2_util.c(271): [client 34.227.156.153] ModSecurity: Warning. Matched phrase "sys/class" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: sys/class found within ARGS:path: /sys/class/dmi"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQnn5BCnW5FCz3povTup0gAAAKQ"] [Tue Nov 04 03:48:21 2025] [mollywoppersnyb.com] [error] [client 44.221.37.41:32341] [pid 2509305] apache2_util.c(271): [client 44.221.37.41] ModSecurity: Warning. Matched phrase "sys/module" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: sys/module found within ARGS:path: /sys/module/cpuidle"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQnoBRCnW5FCz3povTup-wAAANI"] [Tue Nov 04 03:49:09 2025] [mollywoppersnyb.com] [error] [client 44.207.69.106:54787] [pid 2509305] apache2_util.c(271): [client 44.207.69.106] ModSecurity: Warning. Matched phrase "sys/module" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: sys/module found within ARGS:path: /sys/module/megaraid_mbox"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQnoNRCnW5FCz3povTuqPwAAAKM"] [Tue Nov 04 03:49:19 2025] [mollywoppersnyb.com] [error] [client 23.21.228.180:46088] [pid 2509305] apache2_util.c(271): [client 23.21.228.180] ModSecurity: Warning. Matched phrase "etc/apt" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: etc/apt found within ARGS:path: /etc/apt/auth.conf.d"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQnoPxCnW5FCz3povTuqTgAAAMM"] [Tue Nov 04 03:50:01 2025] [mollywoppersnyb.com] [error] [client 44.210.204.255:34542] [pid 2509305] apache2_util.c(271): [client 44.210.204.255] ModSecurity: Warning. Matched phrase "etc/texmf" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: etc/texmf found within ARGS:path: /etc/texmf/texmf.d"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQnoaRCnW5FCz3povTuqwAAAALI"] [Tue Nov 04 03:54:10 2025] [mollywoppersnyb.com] [error] [client 34.206.212.24:54853] [pid 2509305] apache2_util.c(271): [client 34.206.212.24] ModSecurity: Warning. Matched phrase "sys/module" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: sys/module found within ARGS:path: /sys/module/libceph"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQnpYhCnW5FCz3povTutjwAAANs"] [Tue Nov 04 03:54:12 2025] [mollywoppersnyb.com] [error] [client 52.44.174.136:36541] [pid 2509305] apache2_util.c(271): [client 52.44.174.136] ModSecurity: Warning. Matched phrase "sys/module" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: sys/module found within ARGS:path: /sys/module/netpoll"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQnpZBCnW5FCz3povTutlAAAAB4"] [Tue Nov 04 03:54:17 2025] [mollywoppersnyb.com] [error] [client 3.212.205.90:34345] [pid 2509305] apache2_util.c(271): [client 3.212.205.90] ModSecurity: Warning. Matched phrase "var/log" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: var/log found within ARGS:path: /var/log/zabbix"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQnpaRCnW5FCz3povTutngAAABQ"] [Tue Nov 04 03:54:54 2025] [mollywoppersnyb.com] [error] [client 52.202.233.37:8360] [pid 2509305] apache2_util.c(271): [client 52.202.233.37] ModSecurity: Warning. Matched phrase "etc/kernel" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: etc/kernel found within ARGS:path: /etc/kernel/postrm.d"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQnpjhCnW5FCz3povTut4AAAAKk"] [Tue Nov 04 03:55:48 2025] [mollywoppersnyb.com] [error] [client 54.145.82.217:61575] [pid 2509305] apache2_util.c(271): [client 54.145.82.217] ModSecurity: Warning. Matched phrase "sys/module" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: sys/module found within ARGS:path: /sys/module/libahci"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQnpxBCnW5FCz3povTuuQQAAAGk"] [Tue Nov 04 03:56:12 2025] [mollywoppersnyb.com] [error] [client 3.225.9.97:28599] [pid 2509305] apache2_util.c(271): [client 3.225.9.97] ModSecurity: Warning. Matched phrase "sys/module" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: sys/module found within ARGS:path: /sys/module/aic7xxx"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQnp3BCnW5FCz3povTuuegAAANc"] [Tue Nov 04 03:56:21 2025] [mollywoppersnyb.com] [error] [client 184.73.239.35:27822] [pid 2509305] apache2_util.c(271): [client 184.73.239.35] ModSecurity: Warning. Matched phrase "sys/module" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: sys/module found within ARGS:path: /sys/module/nfs_layout_flexfiles"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQnp5RCnW5FCz3povTuuhgAAAMY"] [Tue Nov 04 03:57:50 2025] [mollywoppersnyb.com] [error] [client 44.221.37.41:31241] [pid 2509305] apache2_util.c(271): [client 44.221.37.41] ModSecurity: Warning. Matched phrase "etc/texmf" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: etc/texmf found within ARGS:path: /etc/texmf/dvips"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQnqPhCnW5FCz3povTuvVgAAAHM"] [Tue Nov 04 03:58:05 2025] [mollywoppersnyb.com] [error] [client 100.29.34.97:33405] [pid 2509305] apache2_util.c(271): [client 100.29.34.97] ModSecurity: Warning. Matched phrase "var/log" at ARGS:fileloc. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: var/log found within ARGS:fileloc: /var/log/sshlimit.log"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQnqTRCnW5FCz3povTuvcwAAAG4"] [Tue Nov 04 03:58:05 2025] [mollywoppersnyb.com] [error] [client 100.29.34.97:33405] [pid 2509305] apache2_util.c(271): [client 100.29.34.97] ModSecurity: Warning. Matched phrase "var/log" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: var/log found within ARGS:path: /var/log"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQnqTRCnW5FCz3povTuvcwAAAG4"] [Tue Nov 04 04:06:23 2025] [mollywoppersnyb.com] [error] [client 54.152.163.42:17849] [pid 2509305] apache2_util.c(271): [client 54.152.163.42] ModSecurity: Warning. Matched phrase "sys/module" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: sys/module found within ARGS:path: /sys/module/i2c_i801"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQnsPxCnW5FCz3povTu4HAAAABQ"] [Tue Nov 04 04:11:36 2025] [mollywoppersnyb.com] [error] [client 18.206.47.187:62108] [pid 2509305] apache2_util.c(271): [client 18.206.47.187] ModSecurity: Warning. Matched phrase "etc/udev" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: etc/udev found within ARGS:path: /etc/udev/rules.d"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQnteBCnW5FCz3povTu75QAAABE"] [Tue Nov 04 04:13:22 2025] [mollywoppersnyb.com] [error] [client 54.80.185.200:42739] [pid 2509305] apache2_util.c(271): [client 54.80.185.200] ModSecurity: Warning. Matched phrase "sys/module" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: sys/module found within ARGS:path: /sys/module/megaraid_mm"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQnt4hCnW5FCz3povTu8tQAAAKI"] [Tue Nov 04 04:18:16 2025] [mollywoppersnyb.com] [error] [client 100.29.160.53:43128] [pid 2509305] apache2_util.c(271): [client 100.29.160.53] ModSecurity: Warning. Matched phrase "etc/glvnd" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: etc/glvnd found within ARGS:path: /etc/glvnd/egl_vendor.d"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQnvCBCnW5FCz3povTvBDwAAAJo"] [Tue Nov 04 04:18:45 2025] [mollywoppersnyb.com] [error] [client 54.210.155.69:11746] [pid 2509305] apache2_util.c(271): [client 54.210.155.69] ModSecurity: Warning. Matched phrase "sys/module" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: sys/module found within ARGS:path: /sys/module/fscrypto"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQnvJRCnW5FCz3povTvBtgAAAMM"] [Tue Nov 04 04:21:00 2025] [mollywoppersnyb.com] [error] [client 18.235.81.246:56615] [pid 2509305] apache2_util.c(271): [client 18.235.81.246] ModSecurity: Warning. Matched phrase "sys/module" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: sys/module found within ARGS:path: /sys/module/dm_snapshot"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQnvrBCnW5FCz3povTvIBwAAAFU"] [Tue Nov 04 04:21:41 2025] [mollywoppersnyb.com] [error] [client 52.3.104.214:28058] [pid 2509305] apache2_util.c(271): [client 52.3.104.214] ModSecurity: Warning. Matched phrase "sys/module" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: sys/module found within ARGS:path: /sys/module/bcma"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQnv1RCnW5FCz3povTvKZwAAAFo"] [Tue Nov 04 04:22:33 2025] [mollywoppersnyb.com] [error] [client 52.204.89.12:26985] [pid 2509305] apache2_util.c(271): [client 52.204.89.12] ModSecurity: Warning. Matched phrase "sys/kernel" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: sys/kernel found within ARGS:path: /sys/kernel/livepatch"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQnwCRCnW5FCz3povTvM8wAAAJQ"] [Tue Nov 04 04:24:20 2025] [mollywoppersnyb.com] [error] [client 100.29.63.24:6758] [pid 2509305] apache2_util.c(271): [client 100.29.63.24] ModSecurity: Warning. Matched phrase "etc/apparmor" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: etc/apparmor found within ARGS:path: /etc/apparmor.d/abstractions"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQnwdBCnW5FCz3povTvR6AAAAFo"] [Tue Nov 04 04:32:03 2025] [mollywoppersnyb.com] [error] [client 3.222.190.107:26887] [pid 2509305] apache2_util.c(271): [client 3.222.190.107] ModSecurity: Warning. Matched phrase "var/mail" at ARGS:fileloc. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: var/mail found within ARGS:fileloc: /var/mail/scotthep"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQnyQxCnW5FCz3povTvVXwAAAB4"] [Tue Nov 04 04:32:03 2025] [mollywoppersnyb.com] [error] [client 3.222.190.107:26887] [pid 2509305] apache2_util.c(271): [client 3.222.190.107] ModSecurity: Warning. Matched phrase "var/mail" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: var/mail found within ARGS:path: /var/mail"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQnyQxCnW5FCz3povTvVXwAAAB4"] [Tue Nov 04 04:32:46 2025] [mollywoppersnyb.com] [error] [client 43.155.195.141:52250] [pid 2509305] apache2_util.c(271): [client 43.155.195.141] ModSecurity: Warning. Pattern match "\\\\b(?:keep-alive|close),\\\\s?(?:keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "352"] [id "920210"] [msg "Multiple/Conflicting Connection Header Data Found"] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [hostname "mollywoppersnyb.com"] [uri "/"] [unique_id "aQnybhCnW5FCz3povTvVnAAAAE8"] [Tue Nov 04 04:35:51 2025] [mollywoppersnyb.com] [error] [client 34.205.163.103:14042] [pid 2509305] apache2_util.c(271): [client 34.205.163.103] ModSecurity: Warning. Matched phrase "etc/apache2" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: etc/apache2 found within ARGS:path: /etc/apache2/mods-available"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQnzJxCnW5FCz3povTvZcQAAALs"] [Tue Nov 04 04:35:55 2025] [mollywoppersnyb.com] [error] [client 98.83.226.125:49042] [pid 2509305] apache2_util.c(271): [client 98.83.226.125] ModSecurity: Warning. Matched phrase "etc/default" at ARGS:fileloc. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: etc/default found within ARGS:fileloc: /etc/default/motd-news"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQnzKxCnW5FCz3povTvZlwAAAMQ"] [Tue Nov 04 04:35:55 2025] [mollywoppersnyb.com] [error] [client 98.83.226.125:49042] [pid 2509305] apache2_util.c(271): [client 98.83.226.125] ModSecurity: Warning. Matched phrase "etc/default" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: etc/default found within ARGS:path: /etc/default"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQnzKxCnW5FCz3povTvZlwAAAMQ"] [Tue Nov 04 04:37:43 2025] [mollywoppersnyb.com] [error] [client 52.45.15.233:16379] [pid 2509305] apache2_util.c(271): [client 52.45.15.233] ModSecurity: Warning. Matched phrase "etc/default" at ARGS:fileloc. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: etc/default found within ARGS:fileloc: /etc/default/slrn"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQnzlxCnW5FCz3povTve7gAAAL8"] [Tue Nov 04 04:37:43 2025] [mollywoppersnyb.com] [error] [client 52.45.15.233:16379] [pid 2509305] apache2_util.c(271): [client 52.45.15.233] ModSecurity: Warning. Matched phrase "etc/default" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: etc/default found within ARGS:path: /etc/default"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQnzlxCnW5FCz3povTve7gAAAL8"] [Tue Nov 04 04:40:24 2025] [mollywoppersnyb.com] [error] [client 23.22.105.143:60337] [pid 2509305] apache2_util.c(271): [client 23.22.105.143] ModSecurity: Access denied with code 418 (phase 2). Pattern match "^[\\\\.|/]+(proc/|dev/shm/)" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/99_dreamhost_rules.conf"] [line "53"] [id "1990013"] [msg "Directory traversal"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQn0OBCnW5FCz3povTvrGwAAAGI"] [Tue Nov 04 04:40:35 2025] [mollywoppersnyb.com] [error] [client 52.54.157.23:13680] [pid 2509305] apache2_util.c(271): [client 52.54.157.23] ModSecurity: Access denied with code 418 (phase 2). Pattern match "^[\\\\.|/]+(proc/|dev/shm/)" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/99_dreamhost_rules.conf"] [line "53"] [id "1990013"] [msg "Directory traversal"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQn0QxCnW5FCz3povTvruQAAALk"] [Tue Nov 04 04:40:52 2025] [mollywoppersnyb.com] [error] [client 54.221.203.24:32620] [pid 2509305] apache2_util.c(271): [client 54.221.203.24] ModSecurity: Warning. Matched phrase "var/log" at ARGS:fileloc. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: var/log found within ARGS:fileloc: /var/log/daemon.log.3.gz"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQn0VBCnW5FCz3povTvsYAAAAI4"] [Tue Nov 04 04:40:52 2025] [mollywoppersnyb.com] [error] [client 54.221.203.24:32620] [pid 2509305] apache2_util.c(271): [client 54.221.203.24] ModSecurity: Warning. Matched phrase "var/log" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: var/log found within ARGS:path: /var/log"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQn0VBCnW5FCz3povTvsYAAAAI4"] [Tue Nov 04 04:42:07 2025] [mollywoppersnyb.com] [error] [client 35.169.102.85:10414] [pid 2509305] apache2_util.c(271): [client 35.169.102.85] ModSecurity: Warning. Matched phrase "sys/module" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: sys/module found within ARGS:path: /sys/module/apparmor"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQn0nxCnW5FCz3povTvvtgAAAMM"] [Tue Nov 04 04:42:35 2025] [mollywoppersnyb.com] [error] [client 100.29.164.178:36350] [pid 2509305] apache2_util.c(271): [client 100.29.164.178] ModSecurity: Warning. Matched phrase "etc/cron.hourly" at ARGS:fileloc. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: etc/cron.hourly found within ARGS:fileloc: /etc/cron.hourly/.placeholder"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQn0uxCnW5FCz3povTvwowAAABk"] [Tue Nov 04 04:42:35 2025] [mollywoppersnyb.com] [error] [client 100.29.164.178:36350] [pid 2509305] apache2_util.c(271): [client 100.29.164.178] ModSecurity: Warning. Matched phrase "etc/cron.hourly" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: etc/cron.hourly found within ARGS:path: /etc/cron.hourly"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQn0uxCnW5FCz3povTvwowAAABk"] [Tue Nov 04 04:42:41 2025] [mollywoppersnyb.com] [error] [client 52.203.152.231:13207] [pid 2509305] apache2_util.c(271): [client 52.203.152.231] ModSecurity: Access denied with code 418 (phase 2). Pattern match "^[\\\\.|/]+(proc/|dev/shm/)" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/99_dreamhost_rules.conf"] [line "53"] [id "1990013"] [msg "Directory traversal"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQn0wRCnW5FCz3povTvwyQAAABo"] [Tue Nov 04 04:45:25 2025] [mollywoppersnyb.com] [error] [client 54.83.180.239:55703] [pid 2509305] apache2_util.c(271): [client 54.83.180.239] ModSecurity: Warning. Matched phrase "sys/bus" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: sys/bus found within ARGS:path: /sys/bus/rbd"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQn1ZRCnW5FCz3povTv0ugAAALc"] [Tue Nov 04 04:46:06 2025] [mollywoppersnyb.com] [error] [client 18.206.47.187:27990] [pid 2509305] apache2_util.c(271): [client 18.206.47.187] ModSecurity: Warning. Matched phrase "sys/module" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: sys/module found within ARGS:path: /sys/module/pcnet32"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQn1jhCnW5FCz3povTv1BgAAAJw"] [Tue Nov 04 04:46:21 2025] [mollywoppersnyb.com] [error] [client 52.203.68.145:47716] [pid 2509305] apache2_util.c(271): [client 52.203.68.145] ModSecurity: Warning. Matched phrase "sys/module" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: sys/module found within ARGS:path: /sys/module/fuse"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQn1nRCnW5FCz3povTv1JQAAAA8"] [Tue Nov 04 04:47:32 2025] [mollywoppersnyb.com] [error] [client 18.214.251.19:37027] [pid 2509305] apache2_util.c(271): [client 18.214.251.19] ModSecurity: Warning. Matched phrase "sys/module" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: sys/module found within ARGS:path: /sys/module/dm_multipath"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQn15BCnW5FCz3povTv1twAAALk"] [Tue Nov 04 04:48:25 2025] [mollywoppersnyb.com] [error] [client 98.82.59.253:30958] [pid 2509305] apache2_util.c(271): [client 98.82.59.253] ModSecurity: Warning. Matched phrase "sys/module" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: sys/module found within ARGS:path: /sys/module/nvme_core"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQn2GRCnW5FCz3povTv2YwAAAFI"] [Tue Nov 04 04:53:14 2025] [mollywoppersnyb.com] [error] [client 54.84.93.8:49625] [pid 2509305] apache2_util.c(271): [client 54.84.93.8] ModSecurity: Warning. Matched phrase "sys/kernel" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: sys/kernel found within ARGS:path: /sys/kernel/mm"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQn3OhCnW5FCz3povTsArgAAAGM"] [Tue Nov 04 04:53:48 2025] [mollywoppersnyb.com] [error] [client 3.210.114.189:1784] [pid 2509305] apache2_util.c(271): [client 3.210.114.189] ModSecurity: Warning. Matched phrase "sys/module" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: sys/module found within ARGS:path: /sys/module/nf_conntrack"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQn3XBCnW5FCz3povTsBwAAAAKA"] [Tue Nov 04 04:55:00 2025] [mollywoppersnyb.com] [error] [client 98.82.66.172:24870] [pid 2509305] apache2_util.c(271): [client 98.82.66.172] ModSecurity: Warning. Matched phrase "etc/network" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: etc/network found within ARGS:path: /etc/network/if-down.d"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQn3pBCnW5FCz3povTsEiAAAAKY"] [Tue Nov 04 04:58:43 2025] [mollywoppersnyb.com] [error] [client 18.235.81.246:54890] [pid 2509305] apache2_util.c(271): [client 18.235.81.246] ModSecurity: Warning. Matched phrase "etc/security" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: etc/security found within ARGS:path: /etc/security/limits.d"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQn4gxCnW5FCz3povTsJPwAAADw"] [Tue Nov 04 05:14:04 2025] [mollywoppersnyb.com] [error] [client 98.83.8.142:29960] [pid 224760] apache2_util.c(271): [client 98.83.8.142] ModSecurity: Warning. Matched phrase "sys/class" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: sys/class found within ARGS:path: /sys/class/extcon"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQn8HCBor388jTsvXSP83AAAJ6o"] [Tue Nov 04 05:14:35 2025] [mollywoppersnyb.com] [error] [client 98.84.60.17:20049] [pid 224760] apache2_util.c(271): [client 98.84.60.17] ModSecurity: Warning. Matched phrase "sys/bus" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: sys/bus found within ARGS:path: /sys/bus/memory"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQn8OyBor388jTsvXSP9IQAAJzU"] [Tue Nov 04 05:15:44 2025] [mollywoppersnyb.com] [error] [client 34.224.9.144:61078] [pid 224760] apache2_util.c(271): [client 34.224.9.144] ModSecurity: Warning. Matched phrase "sys/firmware" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: sys/firmware found within ARGS:path: /sys/firmware/dmi"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQn8gCBor388jTsvXSP9dgAAJ9g"] [Tue Nov 04 05:16:15 2025] [mollywoppersnyb.com] [error] [client 35.171.141.42:44954] [pid 224760] apache2_util.c(271): [client 35.171.141.42] ModSecurity: Warning. Matched phrase "sys/fs" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: sys/fs found within ARGS:path: /sys/fs/pstore"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQn8nyBor388jTsvXSP9lwAAJ0w"] [Tue Nov 04 05:17:00 2025] [mollywoppersnyb.com] [error] [client 34.227.156.153:60735] [pid 224760] apache2_util.c(271): [client 34.227.156.153] ModSecurity: Warning. Matched phrase "sys/class" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: sys/class found within ARGS:path: /sys/class/firmware"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQn8zCBor388jTsvXSP93gAAJ8g"] [Tue Nov 04 05:17:36 2025] [mollywoppersnyb.com] [error] [client 50.19.221.48:9397] [pid 224760] apache2_util.c(271): [client 50.19.221.48] ModSecurity: Warning. Matched phrase "sys/dev" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: sys/dev found within ARGS:path: /sys/devices/pci0000:00"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQn88CBor388jTsvXSP-GgAAJ2o"] [Tue Nov 04 05:17:39 2025] [mollywoppersnyb.com] [error] [client 3.231.193.38:48370] [pid 224760] apache2_util.c(271): [client 3.231.193.38] ModSecurity: Warning. Matched phrase "etc/postfix" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: etc/postfix found within ARGS:path: /etc/postfix/postfix-files.d"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQn88yBor388jTsvXSP-IQAAJ3s"] [Tue Nov 04 05:17:52 2025] [mollywoppersnyb.com] [error] [client 44.209.187.99:28420] [pid 224760] apache2_util.c(271): [client 44.209.187.99] ModSecurity: Access denied with code 418 (phase 2). Pattern match "^[\\\\.|/]+(proc/|dev/shm/)" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/99_dreamhost_rules.conf"] [line "53"] [id "1990013"] [msg "Directory traversal"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQn9ACBor388jTsvXSP-PQAAJ7M"] [Tue Nov 04 05:18:52 2025] [mollywoppersnyb.com] [error] [client 44.209.187.99:29922] [pid 224760] apache2_util.c(271): [client 44.209.187.99] ModSecurity: Warning. Matched phrase "sys/kernel" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: sys/kernel found within ARGS:path: /sys/kernel/sunrpc"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQn9PCBor388jTsvXSP-2AAAJ0w"] [Tue Nov 04 05:23:40 2025] [mollywoppersnyb.com] [error] [client 54.156.55.147:53898] [pid 224760] apache2_util.c(271): [client 54.156.55.147] ModSecurity: Warning. Matched phrase "sys/class" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: sys/class found within ARGS:path: /sys/class/net"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQn-XCBor388jTsvXSMBQQAAJxk"] [Tue Nov 04 05:23:46 2025] [mollywoppersnyb.com] [error] [client 3.211.181.86:60972] [pid 224760] apache2_util.c(271): [client 3.211.181.86] ModSecurity: Warning. Matched phrase "var/log" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: var/log found within ARGS:path: /var/log/journal"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQn-YiBor388jTsvXSMBRwAAJx4"] [Tue Nov 04 05:24:00 2025] [mollywoppersnyb.com] [error] [client 54.167.32.123:30379] [pid 224760] apache2_util.c(271): [client 54.167.32.123] ModSecurity: Warning. Matched phrase "sys/module" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: sys/module found within ARGS:path: /sys/module/vt"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQn-cCBor388jTsvXSMBVgAAJ1M"] [Tue Nov 04 05:24:39 2025] [mollywoppersnyb.com] [error] [client 52.200.93.170:40492] [pid 224760] apache2_util.c(271): [client 52.200.93.170] ModSecurity: Warning. Matched phrase "sys/module" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: sys/module found within ARGS:path: /sys/module/hid"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQn-lyBor388jTsvXSMBhgAAJ5Y"] [Tue Nov 04 05:25:49 2025] [mollywoppersnyb.com] [error] [client 3.229.95.193:48400] [pid 224760] apache2_util.c(271): [client 3.229.95.193] ModSecurity: Warning. Matched phrase "sys/kernel" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: sys/kernel found within ARGS:path: /sys/kernel/tracing"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQn-3SBor388jTsvXSMC8QAAJ6g"] [Tue Nov 04 05:26:44 2025] [mollywoppersnyb.com] [error] [client 100.29.155.89:48714] [pid 224760] apache2_util.c(271): [client 100.29.155.89] ModSecurity: Warning. Matched phrase "sys/firmware" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: sys/firmware found within ARGS:path: /sys/firmware/acpi"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQn_FCBor388jTsvXSMDtwAAJ6o"] [Tue Nov 04 05:26:47 2025] [mollywoppersnyb.com] [error] [client 98.83.178.66:25556] [pid 224760] apache2_util.c(271): [client 98.83.178.66] ModSecurity: Warning. Matched phrase "sys/class" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: sys/class found within ARGS:path: /sys/class/devfreq"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQn_FyBor388jTsvXSMDvQAAJ-M"] [Tue Nov 04 05:27:51 2025] [mollywoppersnyb.com] [error] [client 52.1.106.130:45271] [pid 224760] apache2_util.c(271): [client 52.1.106.130] ModSecurity: Warning. Matched phrase "sys/module" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: sys/module found within ARGS:path: /sys/module/i40e"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQn_VyBor388jTsvXSMJDgAAJ0c"] [Tue Nov 04 05:29:36 2025] [mollywoppersnyb.com] [error] [client 54.159.98.248:33272] [pid 224760] apache2_util.c(271): [client 54.159.98.248] ModSecurity: Warning. Matched phrase "etc/gdb" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: etc/gdb found within ARGS:path: /etc/gdb/gdbinit.d"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQn_wCBor388jTsvXSMKbwAAJyc"] [Tue Nov 04 05:30:13 2025] [mollywoppersnyb.com] [error] [client 98.83.72.38:16729] [pid 224760] apache2_util.c(271): [client 98.83.72.38] ModSecurity: Access denied with code 418 (phase 2). Pattern match "^[\\\\.|/]+(proc/|dev/shm/)" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/99_dreamhost_rules.conf"] [line "53"] [id "1990013"] [msg "Directory traversal"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQn_5SBor388jTsvXSMKxQAAJzc"] [Tue Nov 04 05:34:40 2025] [mollywoppersnyb.com] [error] [client 3.230.224.6:10480] [pid 224760] apache2_util.c(271): [client 3.230.224.6] ModSecurity: Warning. Matched phrase "etc/init" at ARGS:fileloc. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: etc/init found within ARGS:fileloc: /etc/init.d/screen-cleanup"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQoA8CBor388jTsvXSMSCgAAJyM"] [Tue Nov 04 05:34:40 2025] [mollywoppersnyb.com] [error] [client 3.230.224.6:10480] [pid 224760] apache2_util.c(271): [client 3.230.224.6] ModSecurity: Warning. Matched phrase "etc/init" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: etc/init found within ARGS:path: /etc/init.d"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQoA8CBor388jTsvXSMSCgAAJyM"]