[Tue Nov 04 01:04:35 2025] [mollywoppersnyb.com] [error] [client 52.45.194.165:60840] [pid 1745855] apache2_util.c(271): [client 52.45.194.165] ModSecurity: Warning. Matched phrase "sys/module" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: sys/module found within ARGS:path: /sys/module/aic79xx"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQnBo-AaSsjislSbotCHMwAAJxk"] [Tue Nov 04 01:06:27 2025] [mollywoppersnyb.com] [error] [client 3.223.181.32:28868] [pid 1745855] apache2_util.c(271): [client 3.223.181.32] ModSecurity: Warning. Matched phrase "sys/module" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: sys/module found within ARGS:path: /sys/module/3w_xxxx"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQnCE-AaSsjislSbotCHoAAAJyk"] [Tue Nov 04 01:15:57 2025] [mollywoppersnyb.com] [error] [client 52.3.156.186:49527] [pid 1745855] apache2_util.c(271): [client 52.3.156.186] ModSecurity: Warning. Matched phrase "sys/dev" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: sys/dev found within ARGS:path: /sys/devices/cpu"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQnETeAaSsjislSbotCPPQAAJ1o"] [Tue Nov 04 01:18:24 2025] [mollywoppersnyb.com] [error] [client 23.23.180.225:48846] [pid 1745855] apache2_util.c(271): [client 23.23.180.225] ModSecurity: Warning. Matched phrase "sys/module" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: sys/module found within ARGS:path: /sys/module/mlxsw_core"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQnE4OAaSsjislSbotCQBQAAJzQ"] [Tue Nov 04 01:19:53 2025] [mollywoppersnyb.com] [error] [client 98.83.72.38:11715] [pid 1745855] apache2_util.c(271): [client 98.83.72.38] ModSecurity: Warning. Matched phrase "sys/class" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: sys/class found within ARGS:path: /sys/class/vc"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQnFOeAaSsjislSbotCQxwAAJx0"] [Tue Nov 04 01:20:04 2025] [mollywoppersnyb.com] [error] [client 52.204.253.129:56727] [pid 1745855] apache2_util.c(271): [client 52.204.253.129] ModSecurity: Warning. Matched phrase "sys/class" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: sys/class found within ARGS:path: /sys/class/pps"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQnFROAaSsjislSbotCRDAAAJ28"] [Tue Nov 04 01:20:45 2025] [mollywoppersnyb.com] [error] [client 52.2.58.41:44159] [pid 1745855] apache2_util.c(271): [client 52.2.58.41] ModSecurity: Warning. Matched phrase "etc/texmf" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: etc/texmf found within ARGS:path: /etc/texmf/web2c"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQnFbeAaSsjislSbotCTeAAAJ6Y"] [Tue Nov 04 01:27:08 2025] [mollywoppersnyb.com] [error] [client 98.82.40.168:13319] [pid 1745855] apache2_util.c(271): [client 98.82.40.168] ModSecurity: Warning. Matched phrase "sys/bus" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: sys/bus found within ARGS:path: /sys/bus/serial-base"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQnG7OAaSsjislSbotCYhQAAJ40"] [Tue Nov 04 01:27:37 2025] [mollywoppersnyb.com] [error] [client 44.207.69.106:24088] [pid 1745855] apache2_util.c(271): [client 44.207.69.106] ModSecurity: Warning. Matched phrase "sys/dev" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: sys/dev found within ARGS:path: /sys/devices/amd_iommu_1"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQnHCeAaSsjislSbotCY6wAAJ3Q"] [Tue Nov 04 01:28:22 2025] [mollywoppersnyb.com] [error] [client 35.172.125.172:63734] [pid 1745855] apache2_util.c(271): [client 35.172.125.172] ModSecurity: Warning. Matched phrase "sys/module" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: sys/module found within ARGS:path: /sys/module/memory_hotplug"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQnHNuAaSsjislSbotCZPwAAJzc"] [Tue Nov 04 01:30:16 2025] [mollywoppersnyb.com] [error] [client 3.208.146.193:16847] [pid 1745855] apache2_util.c(271): [client 3.208.146.193] ModSecurity: Warning. Matched phrase "etc/postfix" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: etc/postfix found within ARGS:path: /etc/postfix/dynamicmaps.cf.d"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQnHqOAaSsjislSbotCapwAAJ50"] [Tue Nov 04 01:41:27 2025] [mollywoppersnyb.com] [error] [client 23.21.204.95:48969] [pid 1745855] apache2_util.c(271): [client 23.21.204.95] ModSecurity: Access denied with code 418 (phase 2). Pattern match "^[\\\\.|/]+(proc/|dev/shm/)" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/99_dreamhost_rules.conf"] [line "53"] [id "1990013"] [msg "Directory traversal"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQnKR-AaSsjislSbotCnsgAAJ3g"] [Tue Nov 04 01:45:19 2025] [mollywoppersnyb.com] [error] [client 52.4.213.199:59514] [pid 1745855] apache2_util.c(271): [client 52.4.213.199] ModSecurity: Access denied with code 418 (phase 2). Pattern match "^[\\\\.|/]+(proc/|dev/shm/)" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/99_dreamhost_rules.conf"] [line "53"] [id "1990013"] [msg "Directory traversal"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQnLL-AaSsjislSbotCqcgAAJ3k"] [Tue Nov 04 01:46:31 2025] [mollywoppersnyb.com] [error] [client 18.214.124.6:65084] [pid 1745855] apache2_util.c(271): [client 18.214.124.6] ModSecurity: Warning. Matched phrase "etc/apt" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: etc/apt found within ARGS:path: /etc/apt/sources.list.d"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQnLd-AaSsjislSbotCrQgAAJ8o"] [Tue Nov 04 01:48:54 2025] [mollywoppersnyb.com] [error] [client 44.206.93.215:38598] [pid 1745855] apache2_util.c(271): [client 44.206.93.215] ModSecurity: Warning. Matched phrase "sys/class" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: sys/class found within ARGS:path: /sys/class/ata_port"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQnMBuAaSsjislSbotCskAAAJ6A"] [Tue Nov 04 01:48:56 2025] [mollywoppersnyb.com] [error] [client 18.215.49.176:65205] [pid 1745855] apache2_util.c(271): [client 18.215.49.176] ModSecurity: Warning. Matched phrase "sys/module" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: sys/module found within ARGS:path: /sys/module/module"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQnMCOAaSsjislSbotCslQAAJ-o"] [Tue Nov 04 01:49:08 2025] [mollywoppersnyb.com] [error] [client 54.84.169.196:49759] [pid 1745855] apache2_util.c(271): [client 54.84.169.196] ModSecurity: Warning. Matched phrase "sys/class" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: sys/class found within ARGS:path: /sys/class/usbmisc"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQnMFOAaSsjislSbotCstQAAJ1M"] [Tue Nov 04 01:49:12 2025] [mollywoppersnyb.com] [error] [client 44.212.131.50:6815] [pid 1745855] apache2_util.c(271): [client 44.212.131.50] ModSecurity: Warning. Matched phrase "sys/module" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: sys/module found within ARGS:path: /sys/module/iosf_mbi"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQnMGOAaSsjislSbotCswgAAJ5Y"] [Tue Nov 04 01:49:48 2025] [mollywoppersnyb.com] [error] [client 3.232.82.72:59006] [pid 1745855] apache2_util.c(271): [client 3.232.82.72] ModSecurity: Warning. Matched phrase "sys/class" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: sys/class found within ARGS:path: /sys/class/dma"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQnMPOAaSsjislSbotCtEgAAJxI"] [Tue Nov 04 01:52:50 2025] [mollywoppersnyb.com] [error] [client 54.83.23.103:29946] [pid 1745855] apache2_util.c(271): [client 54.83.23.103] ModSecurity: Warning. Matched phrase "sys/dev" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: sys/dev found within ARGS:path: /sys/dev/block"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQnM8uAaSsjislSbotCvsAAAJxU"] [Tue Nov 04 01:54:35 2025] [mollywoppersnyb.com] [error] [client 34.197.28.78:60913] [pid 1745855] apache2_util.c(271): [client 34.197.28.78] ModSecurity: Warning. Matched phrase "etc/perl" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: etc/perl found within ARGS:path: /etc/perl/Net"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQnNW-AaSsjislSbotCzDgAAJz4"] [Tue Nov 04 01:56:59 2025] [mollywoppersnyb.com] [error] [client 34.205.170.13:4721] [pid 1745855] apache2_util.c(271): [client 34.205.170.13] ModSecurity: Warning. Matched phrase "sys/class" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: sys/class found within ARGS:path: /sys/class/mem"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQnN6-AaSsjislSbotC1QgAAJ1Y"] [Tue Nov 04 01:57:30 2025] [mollywoppersnyb.com] [error] [client 34.203.111.15:10016] [pid 1745855] apache2_util.c(271): [client 34.203.111.15] ModSecurity: Warning. Matched phrase "sys/fs" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: sys/fs found within ARGS:path: /sys/fs/fuse"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQnOCuAaSsjislSbotC1jAAAJ4A"] [Tue Nov 04 01:58:31 2025] [mollywoppersnyb.com] [error] [client 44.223.116.180:35640] [pid 1745855] apache2_util.c(271): [client 44.223.116.180] ModSecurity: Warning. Matched phrase "var/log" at ARGS:fileloc. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: var/log found within ARGS:fileloc: /var/log/cloud-init.log"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQnOR-AaSsjislSbotC2BAAAJ5M"] [Tue Nov 04 01:58:31 2025] [mollywoppersnyb.com] [error] [client 44.223.116.180:35640] [pid 1745855] apache2_util.c(271): [client 44.223.116.180] ModSecurity: Warning. Matched phrase "var/log" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: var/log found within ARGS:path: /var/log"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQnOR-AaSsjislSbotC2BAAAJ5M"] [Tue Nov 04 01:58:36 2025] [mollywoppersnyb.com] [error] [client 44.206.93.215:36022] [pid 1745855] apache2_util.c(271): [client 44.206.93.215] ModSecurity: Warning. Matched phrase "etc/logrotate.d" at ARGS:fileloc. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: etc/logrotate.d found within ARGS:fileloc: /etc/logrotate.d/ubuntu-pro-client"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQnOTOAaSsjislSbotC2DQAAJ3s"] [Tue Nov 04 01:58:36 2025] [mollywoppersnyb.com] [error] [client 44.206.93.215:36022] [pid 1745855] apache2_util.c(271): [client 44.206.93.215] ModSecurity: Warning. Matched phrase "etc/logrotate.d" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: etc/logrotate.d found within ARGS:path: /etc/logrotate.d"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQnOTOAaSsjislSbotC2DQAAJ3s"] [Tue Nov 04 01:59:59 2025] [mollywoppersnyb.com] [error] [client 34.234.197.175:7605] [pid 1745855] apache2_util.c(271): [client 34.234.197.175] ModSecurity: Warning. Matched phrase "sys/module" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: sys/module found within ARGS:path: /sys/module/usbhid"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQnOn-AaSsjislSbotC2tAAAJ3I"] [Tue Nov 04 02:06:24 2025] [mollywoppersnyb.com] [error] [client 98.84.60.17:65184] [pid 1745855] apache2_util.c(271): [client 98.84.60.17] ModSecurity: Warning. Matched phrase "var/log" at ARGS:fileloc. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: var/log found within ARGS:fileloc: /var/log/wtmp"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQnQIOAaSsjislSbotC6UgAAJ3c"] [Tue Nov 04 02:06:24 2025] [mollywoppersnyb.com] [error] [client 98.84.60.17:65184] [pid 1745855] apache2_util.c(271): [client 98.84.60.17] ModSecurity: Warning. Matched phrase "var/log" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: var/log found within ARGS:path: /var/log"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQnQIOAaSsjislSbotC6UgAAJ3c"] [Tue Nov 04 02:07:51 2025] [mollywoppersnyb.com] [error] [client 98.82.107.102:9148] [pid 1745855] apache2_util.c(271): [client 98.82.107.102] ModSecurity: Warning. Matched phrase "etc/init" at ARGS:fileloc. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: etc/init found within ARGS:fileloc: /etc/init.d/standby"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQnQd-AaSsjislSbotC7CAAAJ88"] [Tue Nov 04 02:07:51 2025] [mollywoppersnyb.com] [error] [client 98.82.107.102:9148] [pid 1745855] apache2_util.c(271): [client 98.82.107.102] ModSecurity: Warning. Matched phrase "etc/init" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: etc/init found within ARGS:path: /etc/init.d"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQnQd-AaSsjislSbotC7CAAAJ88"] [Tue Nov 04 02:09:27 2025] [mollywoppersnyb.com] [error] [client 3.232.82.72:46772] [pid 1745855] apache2_util.c(271): [client 3.232.82.72] ModSecurity: Warning. Matched phrase "etc/cron.d" at ARGS:fileloc. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: etc/cron.d found within ARGS:fileloc: /etc/cron.daily/ntp"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQnQ1-AaSsjislSbotC8AQAAJyM"] [Tue Nov 04 02:09:27 2025] [mollywoppersnyb.com] [error] [client 3.232.82.72:46772] [pid 1745855] apache2_util.c(271): [client 3.232.82.72] ModSecurity: Warning. Matched phrase "etc/cron.d" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: etc/cron.d found within ARGS:path: /etc/cron.daily"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQnQ1-AaSsjislSbotC8AQAAJyM"] [Tue Nov 04 02:11:35 2025] [mollywoppersnyb.com] [error] [client 34.233.219.155:9399] [pid 1745855] apache2_util.c(271): [client 34.233.219.155] ModSecurity: Warning. Matched phrase "etc/init" at ARGS:fileloc. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: etc/init found within ARGS:fileloc: /etc/init.d/zabbix-agent"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQnRV-AaSsjislSbotC-IwAAJ24"] [Tue Nov 04 02:11:35 2025] [mollywoppersnyb.com] [error] [client 34.233.219.155:9399] [pid 1745855] apache2_util.c(271): [client 34.233.219.155] ModSecurity: Warning. Matched phrase "etc/init" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: etc/init found within ARGS:path: /etc/init.d"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQnRV-AaSsjislSbotC-IwAAJ24"] [Tue Nov 04 02:14:03 2025] [mollywoppersnyb.com] [error] [client 52.71.216.196:21449] [pid 1745855] apache2_util.c(271): [client 52.71.216.196] ModSecurity: Warning. Matched phrase "etc/default" at ARGS:fileloc. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: etc/default found within ARGS:fileloc: /etc/default/keyboard"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQnR6-AaSsjislSbotDArQAAJ2w"] [Tue Nov 04 02:14:03 2025] [mollywoppersnyb.com] [error] [client 52.71.216.196:21449] [pid 1745855] apache2_util.c(271): [client 52.71.216.196] ModSecurity: Warning. Matched phrase "etc/default" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: etc/default found within ARGS:path: /etc/default"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQnR6-AaSsjislSbotDArQAAJ2w"] [Tue Nov 04 02:15:37 2025] [mollywoppersnyb.com] [error] [client 98.82.39.241:53775] [pid 1745855] apache2_util.c(271): [client 98.82.39.241] ModSecurity: Warning. Matched phrase "sys/bus" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: sys/bus found within ARGS:path: /sys/bus/workqueue"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQnSSeAaSsjislSbotDCYAAAJ1c"] [Tue Nov 04 02:16:48 2025] [mollywoppersnyb.com] [error] [client 44.215.61.66:16829] [pid 1745855] apache2_util.c(271): [client 44.215.61.66] ModSecurity: Warning. Matched phrase "etc/nginx/" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: etc/nginx/ found within ARGS:path: /etc/nginx/modules-available"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQnSkOAaSsjislSbotDDwQAAJyc"] [Tue Nov 04 02:17:56 2025] [mollywoppersnyb.com] [error] [client 100.29.107.38:16278] [pid 1745855] apache2_util.c(271): [client 100.29.107.38] ModSecurity: Access denied with code 418 (phase 2). Pattern match "^[\\\\.|/]+(proc/|dev/shm/)" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/99_dreamhost_rules.conf"] [line "53"] [id "1990013"] [msg "Directory traversal"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQnS1OAaSsjislSbotDEKAAAJxw"] [Tue Nov 04 02:18:25 2025] [mollywoppersnyb.com] [error] [client 44.223.115.10:13756] [pid 1745855] apache2_util.c(271): [client 44.223.115.10] ModSecurity: Warning. Matched phrase "sys/class" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: sys/class found within ARGS:path: /sys/class/uio"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQnS8eAaSsjislSbotDEQgAAJ1I"] [Tue Nov 04 02:18:28 2025] [mollywoppersnyb.com] [error] [client 100.27.153.9:19502] [pid 1745855] apache2_util.c(271): [client 100.27.153.9] ModSecurity: Warning. Matched phrase "var/spool" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: var/spool found within ARGS:path: /var/spool/postfix"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQnS9OAaSsjislSbotDERQAAJ-I"] [Tue Nov 04 02:21:43 2025] [mollywoppersnyb.com] [error] [client 54.156.55.147:54143] [pid 1745855] apache2_util.c(271): [client 54.156.55.147] ModSecurity: Warning. Matched phrase "etc/init" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: etc/init found within ARGS:path: /etc/initramfs-tools/scripts"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQnTt-AaSsjislSbotDFgQAAJ4k"] [Tue Nov 04 02:21:53 2025] [mollywoppersnyb.com] [error] [client 54.83.180.239:10857] [pid 1745855] apache2_util.c(271): [client 54.83.180.239] ModSecurity: Warning. Matched phrase "sys/fs" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: sys/fs found within ARGS:path: /sys/fs/nfs"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQnTweAaSsjislSbotDFkwAAJxM"] [Tue Nov 04 02:22:47 2025] [mollywoppersnyb.com] [error] [client 50.19.221.48:53633] [pid 1745855] apache2_util.c(271): [client 50.19.221.48] ModSecurity: Warning. Matched phrase "etc/ghostscript" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: etc/ghostscript found within ARGS:path: /etc/ghostscript/cidfmap.d"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQnT9-AaSsjislSbotDF-gAAJ40"] [Tue Nov 04 02:23:13 2025] [mollywoppersnyb.com] [error] [client 3.231.193.38:25656] [pid 1745855] apache2_util.c(271): [client 3.231.193.38] ModSecurity: Access denied with code 418 (phase 2). Pattern match "^[\\\\.|/]+(proc/|dev/shm/)" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/99_dreamhost_rules.conf"] [line "53"] [id "1990013"] [msg "Directory traversal"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQnUEeAaSsjislSbotDGGQAAJyM"] [Tue Nov 04 02:27:06 2025] [mollywoppersnyb.com] [error] [client 52.204.81.148:37109] [pid 1745855] apache2_util.c(271): [client 52.204.81.148] ModSecurity: Warning. Matched phrase "etc/xdg" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: etc/xdg found within ARGS:path: /etc/xdg/systemd"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQnU-uAaSsjislSbotDH1wAAJ9g"] [Tue Nov 04 02:28:37 2025] [mollywoppersnyb.com] [error] [client 100.28.118.16:10570] [pid 1745855] apache2_util.c(271): [client 100.28.118.16] ModSecurity: Warning. Matched phrase "sys/module" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: sys/module found within ARGS:path: /sys/module/crc_t10dif"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQnVVeAaSsjislSbotDIhwAAJ7U"] [Tue Nov 04 02:30:03 2025] [mollywoppersnyb.com] [error] [client 34.194.95.99:43822] [pid 1745855] apache2_util.c(271): [client 34.194.95.99] ModSecurity: Access denied with code 418 (phase 2). Pattern match "^[\\\\.|/]+(proc/|dev/shm/)" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/99_dreamhost_rules.conf"] [line "53"] [id "1990013"] [msg "Directory traversal"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQnVq-AaSsjislSbotDJTAAAJ8U"] [Tue Nov 04 02:30:35 2025] [mollywoppersnyb.com] [error] [client 23.21.225.190:38011] [pid 1745855] apache2_util.c(271): [client 23.21.225.190] ModSecurity: Warning. Matched phrase "sys/module" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: sys/module found within ARGS:path: /sys/module/sata_nv"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQnVy-AaSsjislSbotDJhQAAJ8I"] [Tue Nov 04 02:31:07 2025] [mollywoppersnyb.com] [error] [client 3.213.106.226:14959] [pid 1745855] apache2_util.c(271): [client 3.213.106.226] ModSecurity: Warning. Matched phrase "etc/apparmor" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: etc/apparmor found within ARGS:path: /etc/apparmor.d/local"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQnV6-AaSsjislSbotDJwgAAJ10"] [Tue Nov 04 02:33:11 2025] [mollywoppersnyb.com] [error] [client 3.212.219.113:29815] [pid 1745855] apache2_util.c(271): [client 3.212.219.113] ModSecurity: Warning. Matched phrase "etc/default" at ARGS:fileloc. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: etc/default found within ARGS:fileloc: /etc/default/grub.ucf-dist"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQnWZ-AaSsjislSbotDKpAAAJ1Y"] [Tue Nov 04 02:33:11 2025] [mollywoppersnyb.com] [error] [client 3.212.219.113:29815] [pid 1745855] apache2_util.c(271): [client 3.212.219.113] ModSecurity: Warning. Matched phrase "etc/default" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: etc/default found within ARGS:path: /etc/default"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQnWZ-AaSsjislSbotDKpAAAJ1Y"] [Tue Nov 04 02:43:51 2025] [mollywoppersnyb.com] [error] [client 34.236.41.241:60106] [pid 1745855] apache2_util.c(271): [client 34.236.41.241] ModSecurity: Warning. Matched phrase "sys/dev" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: sys/dev found within ARGS:path: /sys/devices/software"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQnY5-AaSsjislSbotDPMgAAJ-Y"] [Tue Nov 04 02:46:01 2025] [mollywoppersnyb.com] [error] [client 54.80.73.122:55259] [pid 1745855] apache2_util.c(271): [client 54.80.73.122] ModSecurity: Warning. Matched phrase "sys/module" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: sys/module found within ARGS:path: /sys/module/bridge"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQnZaeAaSsjislSbotDP4gAAJ5U"] [Tue Nov 04 02:46:23 2025] [mollywoppersnyb.com] [error] [client 52.7.33.248:7333] [pid 1745855] apache2_util.c(271): [client 52.7.33.248] ModSecurity: Warning. Matched phrase "sys/class" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: sys/class found within ARGS:path: /sys/class/iommu"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQnZf-AaSsjislSbotDP_wAAJxM"] [Tue Nov 04 02:46:46 2025] [mollywoppersnyb.com] [error] [client 34.195.248.30:14712] [pid 1745855] apache2_util.c(271): [client 34.195.248.30] ModSecurity: Warning. Matched phrase "var/log" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: var/log found within ARGS:path: /var/log/apache2"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQnZluAaSsjislSbotDQGgAAJ5A"] [Tue Nov 04 02:47:46 2025] [mollywoppersnyb.com] [error] [client 23.23.99.55:45985] [pid 1745855] apache2_util.c(271): [client 23.23.99.55] ModSecurity: Access denied with code 418 (phase 2). Pattern match "^[\\\\.|/]+(proc/|dev/shm/)" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/99_dreamhost_rules.conf"] [line "53"] [id "1990013"] [msg "Directory traversal"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQnZ0uAaSsjislSbotDQbgAAJyE"] [Tue Nov 04 02:48:09 2025] [mollywoppersnyb.com] [error] [client 98.82.39.241:9468] [pid 1745855] apache2_util.c(271): [client 98.82.39.241] ModSecurity: Warning. Matched phrase "sys/class" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: sys/class found within ARGS:path: /sys/class/aoe"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQnZ6eAaSsjislSbotDQkAAAJ9Y"] [Tue Nov 04 02:55:06 2025] [mollywoppersnyb.com] [error] [client 143.244.42.77:58420] [pid 1745855] mod_access_compat.c(350): AH01797: client denied by server configuration: /home/mollywopper/mollywoppersnyb.com/manager.php [Tue Nov 04 02:55:08 2025] [mollywoppersnyb.com] [error] [client 54.159.18.27:21922] [pid 1745855] apache2_util.c(271): [client 54.159.18.27] ModSecurity: Warning. Matched phrase "sys/bus" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: sys/bus found within ARGS:path: /sys/bus/pci"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQnbjOAaSsjislSbotDTdwAAJ80"] [Tue Nov 04 02:55:35 2025] [mollywoppersnyb.com] [error] [client 34.236.135.14:51803] [pid 1745855] apache2_util.c(271): [client 34.236.135.14] ModSecurity: Warning. Matched phrase "var/log" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: var/log found within ARGS:path: /var/log/account"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQnbp-AaSsjislSbotDTkQAAJ4o"] [Tue Nov 04 02:56:32 2025] [mollywoppersnyb.com] [error] [client 34.205.163.103:33611] [pid 1745855] apache2_util.c(271): [client 34.205.163.103] ModSecurity: Warning. Matched phrase "sys/module" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: sys/module found within ARGS:path: /sys/module/nfs"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQnb4OAaSsjislSbotDT2AAAJzY"] [Tue Nov 04 02:56:44 2025] [mollywoppersnyb.com] [error] [client 54.84.161.62:44430] [pid 1745855] apache2_util.c(271): [client 54.84.161.62] ModSecurity: Warning. Matched phrase "sys/module" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: sys/module found within ARGS:path: /sys/module/hid_sensor_hub"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQnb7OAaSsjislSbotDT4gAAJzA"] [Tue Nov 04 02:57:16 2025] [mollywoppersnyb.com] [error] [client 54.159.18.27:49450] [pid 1745855] apache2_util.c(271): [client 54.159.18.27] ModSecurity: Warning. Matched phrase "sys/module" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: sys/module found within ARGS:path: /sys/module/bnx2x"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQncDOAaSsjislSbotDUBwAAJx0"] [Tue Nov 04 02:57:39 2025] [mollywoppersnyb.com] [error] [client 3.217.171.106:41109] [pid 1745855] apache2_util.c(271): [client 3.217.171.106] ModSecurity: Warning. Matched phrase "sys/module" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: sys/module found within ARGS:path: /sys/module/psmouse"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQncI-AaSsjislSbotDUIAAAJ2Y"] [Tue Nov 04 02:57:53 2025] [mollywoppersnyb.com] [error] [client 18.233.24.238:34052] [pid 1745855] apache2_util.c(271): [client 18.233.24.238] ModSecurity: Warning. Matched phrase "sys/module" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: sys/module found within ARGS:path: /sys/module/dns_resolver"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQncMeAaSsjislSbotDUOQAAJ9A"] [Tue Nov 04 03:09:31 2025] [mollywoppersnyb.com] [error] [client 98.82.40.168:9782] [pid 2509305] apache2_util.c(271): [client 98.82.40.168] ModSecurity: Warning. Matched phrase "var/log" at ARGS:fileloc. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: var/log found within ARGS:fileloc: /var/log/daemon.log.7.gz"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQne6xCnW5FCz3povTuZVQAAAA0"] [Tue Nov 04 03:09:31 2025] [mollywoppersnyb.com] [error] [client 98.82.40.168:9782] [pid 2509305] apache2_util.c(271): [client 98.82.40.168] ModSecurity: Warning. Matched phrase "var/log" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: var/log found within ARGS:path: /var/log"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQne6xCnW5FCz3povTuZVQAAAA0"] [Tue Nov 04 03:12:56 2025] [mollywoppersnyb.com] [error] [client 54.87.95.7:57388] [pid 2509305] apache2_util.c(271): [client 54.87.95.7] ModSecurity: Warning. Matched phrase "sys/module" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: sys/module found within ARGS:path: /sys/module/mptscsih"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQnfuBCnW5FCz3povTubFwAAAFE"] [Tue Nov 04 03:14:15 2025] [mollywoppersnyb.com] [error] [client 184.73.167.217:61208] [pid 2509305] apache2_util.c(271): [client 184.73.167.217] ModSecurity: Warning. Matched phrase "etc/libblockdev" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: etc/libblockdev found within ARGS:path: /etc/libblockdev/conf.d"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQngBxCnW5FCz3povTubygAAABA"] [Tue Nov 04 03:16:54 2025] [mollywoppersnyb.com] [error] [client 44.217.255.167:54398] [pid 2509305] apache2_util.c(271): [client 44.217.255.167] ModSecurity: Warning. Matched phrase "sys/bus" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: sys/bus found within ARGS:path: /sys/bus/acpi"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQngphCnW5FCz3povTucswAAAGI"] [Tue Nov 04 03:18:10 2025] [mollywoppersnyb.com] [error] [client 100.29.107.38:16629] [pid 2509305] apache2_util.c(271): [client 100.29.107.38] ModSecurity: Warning. Matched phrase "sys/bus" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: sys/bus found within ARGS:path: /sys/bus/cpu"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQng8hCnW5FCz3povTudNwAAAIg"] [Tue Nov 04 03:18:32 2025] [mollywoppersnyb.com] [error] [client 18.213.27.222:1990] [pid 2509305] apache2_util.c(271): [client 18.213.27.222] ModSecurity: Warning. Matched phrase "sys/module" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: sys/module found within ARGS:path: /sys/module/srcutree"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQnhCBCnW5FCz3povTudTgAAALw"] [Tue Nov 04 03:20:09 2025] [mollywoppersnyb.com] [error] [client 34.196.237.236:45303] [pid 2509305] apache2_util.c(271): [client 34.196.237.236] ModSecurity: Warning. Matched phrase "sys/module" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: sys/module found within ARGS:path: /sys/module/fb"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQnhaRCnW5FCz3povTud-wAAAD4"] [Tue Nov 04 03:21:50 2025] [mollywoppersnyb.com] [error] [client 44.208.193.63:53513] [pid 2509305] apache2_util.c(271): [client 44.208.193.63] ModSecurity: Warning. Matched phrase "sys/module" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: sys/module found within ARGS:path: /sys/module/ipmi_msghandler"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQnhzhCnW5FCz3povTuelQAAAKI"] [Tue Nov 04 03:22:14 2025] [mollywoppersnyb.com] [error] [client 3.93.211.16:15863] [pid 2509305] apache2_util.c(271): [client 3.93.211.16] ModSecurity: Warning. Matched phrase "sys/module" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: sys/module found within ARGS:path: /sys/module/3w_sas"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQnh5hCnW5FCz3povTufXAAAAJ0"] [Tue Nov 04 03:23:23 2025] [mollywoppersnyb.com] [error] [client 54.235.125.129:46935] [pid 2509305] apache2_util.c(271): [client 54.235.125.129] ModSecurity: Access denied with code 418 (phase 2). Pattern match "^[\\\\.|/]+(proc/|dev/shm/)" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/99_dreamhost_rules.conf"] [line "53"] [id "1990013"] [msg "Directory traversal"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQniKxCnW5FCz3povTufzAAAAKs"] [Tue Nov 04 03:24:24 2025] [mollywoppersnyb.com] [error] [client 44.212.232.231:22006] [pid 2509305] apache2_util.c(271): [client 44.212.232.231] ModSecurity: Warning. Matched phrase "etc/network" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: etc/network found within ARGS:path: /etc/network/if-pre-up.d"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQniaBCnW5FCz3povTugTAAAAKA"] [Tue Nov 04 03:28:07 2025] [mollywoppersnyb.com] [error] [client 100.29.34.97:12737] [pid 2509305] apache2_util.c(271): [client 100.29.34.97] ModSecurity: Access denied with code 418 (phase 2). Pattern match "^[\\\\.|/]+(proc/|dev/shm/)" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/99_dreamhost_rules.conf"] [line "53"] [id "1990013"] [msg "Directory traversal"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQnjRxCnW5FCz3povTuh6AAAAK4"] [Tue Nov 04 03:34:51 2025] [mollywoppersnyb.com] [error] [client 18.207.79.144:1133] [pid 2509305] apache2_util.c(271): [client 18.207.79.144] ModSecurity: Warning. Matched phrase "etc/default" at ARGS:fileloc. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: etc/default found within ARGS:fileloc: /etc/default/cron"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQnk2xCnW5FCz3povTulEAAAAC0"] [Tue Nov 04 03:34:51 2025] [mollywoppersnyb.com] [error] [client 18.207.79.144:1133] [pid 2509305] apache2_util.c(271): [client 18.207.79.144] ModSecurity: Warning. Matched phrase "etc/default" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: etc/default found within ARGS:path: /etc/default"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQnk2xCnW5FCz3povTulEAAAAC0"] [Tue Nov 04 03:39:23 2025] [mollywoppersnyb.com] [error] [client 3.226.34.98:29943] [pid 2509305] apache2_util.c(271): [client 3.226.34.98] ModSecurity: Access denied with code 418 (phase 2). Pattern match "^[\\\\.|/]+(proc/|dev/shm/)" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/99_dreamhost_rules.conf"] [line "53"] [id "1990013"] [msg "Directory traversal"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQnl6xCnW5FCz3povTumiwAAAHE"] [Tue Nov 04 03:42:16 2025] [mollywoppersnyb.com] [error] [client 3.94.156.104:17231] [pid 2509305] apache2_util.c(271): [client 3.94.156.104] ModSecurity: Warning. Matched phrase "sys/module" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: sys/module found within ARGS:path: /sys/module/amd64_edac"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQnmmBCnW5FCz3povTunxwAAAHU"] [Tue Nov 04 03:43:12 2025] [mollywoppersnyb.com] [error] [client 52.204.37.237:19819] [pid 2509305] apache2_util.c(271): [client 52.204.37.237] ModSecurity: Warning. Matched phrase "etc/default" at ARGS:fileloc. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: etc/default found within ARGS:fileloc: /etc/default/networkd-dispatcher"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQnm0BCnW5FCz3povTuocwAAAH8"] [Tue Nov 04 03:43:12 2025] [mollywoppersnyb.com] [error] [client 52.204.37.237:19819] [pid 2509305] apache2_util.c(271): [client 52.204.37.237] ModSecurity: Warning. Matched phrase "etc/default" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: etc/default found within ARGS:path: /etc/default"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQnm0BCnW5FCz3povTuocwAAAH8"] [Tue Nov 04 03:45:47 2025] [mollywoppersnyb.com] [error] [client 100.28.118.16:8615] [pid 2509305] apache2_util.c(271): [client 100.28.118.16] ModSecurity: Warning. Matched phrase "sys/class" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: sys/class found within ARGS:path: /sys/class/spi_transport"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQnnaxCnW5FCz3povTupSAAAAH0"] [Tue Nov 04 03:47:24 2025] [mollywoppersnyb.com] [error] [client 98.83.94.113:29856] [pid 2509305] apache2_util.c(271): [client 98.83.94.113] ModSecurity: Warning. Matched phrase "sys/module" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: sys/module found within ARGS:path: /sys/module/pata_mpiix"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQnnzBCnW5FCz3povTupvQAAAHw"] [Tue Nov 04 03:47:31 2025] [mollywoppersnyb.com] [error] [client 54.147.80.137:36882] [pid 2509305] apache2_util.c(271): [client 54.147.80.137] ModSecurity: Warning. Matched phrase "sys/module" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: sys/module found within ARGS:path: /sys/module/ceph"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQnn0xCnW5FCz3povTupwwAAAIg"] [Tue Nov 04 03:47:48 2025] [mollywoppersnyb.com] [error] [client 34.227.156.153:15375] [pid 2509305] apache2_util.c(271): [client 34.227.156.153] ModSecurity: Warning. Matched phrase "sys/class" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: sys/class found within ARGS:path: /sys/class/dmi"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQnn5BCnW5FCz3povTup0gAAAKQ"] [Tue Nov 04 03:48:21 2025] [mollywoppersnyb.com] [error] [client 44.221.37.41:32341] [pid 2509305] apache2_util.c(271): [client 44.221.37.41] ModSecurity: Warning. Matched phrase "sys/module" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: sys/module found within ARGS:path: /sys/module/cpuidle"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQnoBRCnW5FCz3povTup-wAAANI"] [Tue Nov 04 03:49:09 2025] [mollywoppersnyb.com] [error] [client 44.207.69.106:54787] [pid 2509305] apache2_util.c(271): [client 44.207.69.106] ModSecurity: Warning. Matched phrase "sys/module" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: sys/module found within ARGS:path: /sys/module/megaraid_mbox"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQnoNRCnW5FCz3povTuqPwAAAKM"] [Tue Nov 04 03:49:19 2025] [mollywoppersnyb.com] [error] [client 23.21.228.180:46088] [pid 2509305] apache2_util.c(271): [client 23.21.228.180] ModSecurity: Warning. Matched phrase "etc/apt" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: etc/apt found within ARGS:path: /etc/apt/auth.conf.d"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQnoPxCnW5FCz3povTuqTgAAAMM"] [Tue Nov 04 03:50:01 2025] [mollywoppersnyb.com] [error] [client 44.210.204.255:34542] [pid 2509305] apache2_util.c(271): [client 44.210.204.255] ModSecurity: Warning. Matched phrase "etc/texmf" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: etc/texmf found within ARGS:path: /etc/texmf/texmf.d"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQnoaRCnW5FCz3povTuqwAAAALI"] [Tue Nov 04 03:54:10 2025] [mollywoppersnyb.com] [error] [client 34.206.212.24:54853] [pid 2509305] apache2_util.c(271): [client 34.206.212.24] ModSecurity: Warning. Matched phrase "sys/module" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: sys/module found within ARGS:path: /sys/module/libceph"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQnpYhCnW5FCz3povTutjwAAANs"] [Tue Nov 04 03:54:12 2025] [mollywoppersnyb.com] [error] [client 52.44.174.136:36541] [pid 2509305] apache2_util.c(271): [client 52.44.174.136] ModSecurity: Warning. Matched phrase "sys/module" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: sys/module found within ARGS:path: /sys/module/netpoll"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQnpZBCnW5FCz3povTutlAAAAB4"] [Tue Nov 04 03:54:17 2025] [mollywoppersnyb.com] [error] [client 3.212.205.90:34345] [pid 2509305] apache2_util.c(271): [client 3.212.205.90] ModSecurity: Warning. Matched phrase "var/log" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: var/log found within ARGS:path: /var/log/zabbix"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQnpaRCnW5FCz3povTutngAAABQ"] [Tue Nov 04 03:54:54 2025] [mollywoppersnyb.com] [error] [client 52.202.233.37:8360] [pid 2509305] apache2_util.c(271): [client 52.202.233.37] ModSecurity: Warning. Matched phrase "etc/kernel" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: etc/kernel found within ARGS:path: /etc/kernel/postrm.d"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQnpjhCnW5FCz3povTut4AAAAKk"] [Tue Nov 04 03:55:48 2025] [mollywoppersnyb.com] [error] [client 54.145.82.217:61575] [pid 2509305] apache2_util.c(271): [client 54.145.82.217] ModSecurity: Warning. Matched phrase "sys/module" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: sys/module found within ARGS:path: /sys/module/libahci"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQnpxBCnW5FCz3povTuuQQAAAGk"] [Tue Nov 04 03:56:12 2025] [mollywoppersnyb.com] [error] [client 3.225.9.97:28599] [pid 2509305] apache2_util.c(271): [client 3.225.9.97] ModSecurity: Warning. Matched phrase "sys/module" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: sys/module found within ARGS:path: /sys/module/aic7xxx"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQnp3BCnW5FCz3povTuuegAAANc"] [Tue Nov 04 03:56:21 2025] [mollywoppersnyb.com] [error] [client 184.73.239.35:27822] [pid 2509305] apache2_util.c(271): [client 184.73.239.35] ModSecurity: Warning. Matched phrase "sys/module" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: sys/module found within ARGS:path: /sys/module/nfs_layout_flexfiles"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQnp5RCnW5FCz3povTuuhgAAAMY"] [Tue Nov 04 03:57:50 2025] [mollywoppersnyb.com] [error] [client 44.221.37.41:31241] [pid 2509305] apache2_util.c(271): [client 44.221.37.41] ModSecurity: Warning. Matched phrase "etc/texmf" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: etc/texmf found within ARGS:path: /etc/texmf/dvips"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQnqPhCnW5FCz3povTuvVgAAAHM"] [Tue Nov 04 03:58:05 2025] [mollywoppersnyb.com] [error] [client 100.29.34.97:33405] [pid 2509305] apache2_util.c(271): [client 100.29.34.97] ModSecurity: Warning. Matched phrase "var/log" at ARGS:fileloc. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: var/log found within ARGS:fileloc: /var/log/sshlimit.log"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQnqTRCnW5FCz3povTuvcwAAAG4"] [Tue Nov 04 03:58:05 2025] [mollywoppersnyb.com] [error] [client 100.29.34.97:33405] [pid 2509305] apache2_util.c(271): [client 100.29.34.97] ModSecurity: Warning. Matched phrase "var/log" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: var/log found within ARGS:path: /var/log"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQnqTRCnW5FCz3povTuvcwAAAG4"] [Tue Nov 04 04:06:23 2025] [mollywoppersnyb.com] [error] [client 54.152.163.42:17849] [pid 2509305] apache2_util.c(271): [client 54.152.163.42] ModSecurity: Warning. Matched phrase "sys/module" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: sys/module found within ARGS:path: /sys/module/i2c_i801"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQnsPxCnW5FCz3povTu4HAAAABQ"] [Tue Nov 04 04:11:36 2025] [mollywoppersnyb.com] [error] [client 18.206.47.187:62108] [pid 2509305] apache2_util.c(271): [client 18.206.47.187] ModSecurity: Warning. Matched phrase "etc/udev" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: etc/udev found within ARGS:path: /etc/udev/rules.d"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQnteBCnW5FCz3povTu75QAAABE"] [Tue Nov 04 04:13:22 2025] [mollywoppersnyb.com] [error] [client 54.80.185.200:42739] [pid 2509305] apache2_util.c(271): [client 54.80.185.200] ModSecurity: Warning. Matched phrase "sys/module" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: sys/module found within ARGS:path: /sys/module/megaraid_mm"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQnt4hCnW5FCz3povTu8tQAAAKI"] [Tue Nov 04 04:18:16 2025] [mollywoppersnyb.com] [error] [client 100.29.160.53:43128] [pid 2509305] apache2_util.c(271): [client 100.29.160.53] ModSecurity: Warning. Matched phrase "etc/glvnd" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: etc/glvnd found within ARGS:path: /etc/glvnd/egl_vendor.d"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQnvCBCnW5FCz3povTvBDwAAAJo"] [Tue Nov 04 04:18:45 2025] [mollywoppersnyb.com] [error] [client 54.210.155.69:11746] [pid 2509305] apache2_util.c(271): [client 54.210.155.69] ModSecurity: Warning. Matched phrase "sys/module" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: sys/module found within ARGS:path: /sys/module/fscrypto"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQnvJRCnW5FCz3povTvBtgAAAMM"] [Tue Nov 04 04:21:00 2025] [mollywoppersnyb.com] [error] [client 18.235.81.246:56615] [pid 2509305] apache2_util.c(271): [client 18.235.81.246] ModSecurity: Warning. Matched phrase "sys/module" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: sys/module found within ARGS:path: /sys/module/dm_snapshot"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQnvrBCnW5FCz3povTvIBwAAAFU"] [Tue Nov 04 04:21:41 2025] [mollywoppersnyb.com] [error] [client 52.3.104.214:28058] [pid 2509305] apache2_util.c(271): [client 52.3.104.214] ModSecurity: Warning. Matched phrase "sys/module" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: sys/module found within ARGS:path: /sys/module/bcma"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQnv1RCnW5FCz3povTvKZwAAAFo"] [Tue Nov 04 04:22:33 2025] [mollywoppersnyb.com] [error] [client 52.204.89.12:26985] [pid 2509305] apache2_util.c(271): [client 52.204.89.12] ModSecurity: Warning. Matched phrase "sys/kernel" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: sys/kernel found within ARGS:path: /sys/kernel/livepatch"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQnwCRCnW5FCz3povTvM8wAAAJQ"] [Tue Nov 04 04:24:20 2025] [mollywoppersnyb.com] [error] [client 100.29.63.24:6758] [pid 2509305] apache2_util.c(271): [client 100.29.63.24] ModSecurity: Warning. Matched phrase "etc/apparmor" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: etc/apparmor found within ARGS:path: /etc/apparmor.d/abstractions"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQnwdBCnW5FCz3povTvR6AAAAFo"] [Tue Nov 04 04:32:03 2025] [mollywoppersnyb.com] [error] [client 3.222.190.107:26887] [pid 2509305] apache2_util.c(271): [client 3.222.190.107] ModSecurity: Warning. Matched phrase "var/mail" at ARGS:fileloc. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: var/mail found within ARGS:fileloc: /var/mail/scotthep"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQnyQxCnW5FCz3povTvVXwAAAB4"] [Tue Nov 04 04:32:03 2025] [mollywoppersnyb.com] [error] [client 3.222.190.107:26887] [pid 2509305] apache2_util.c(271): [client 3.222.190.107] ModSecurity: Warning. Matched phrase "var/mail" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: var/mail found within ARGS:path: /var/mail"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQnyQxCnW5FCz3povTvVXwAAAB4"] [Tue Nov 04 04:32:46 2025] [mollywoppersnyb.com] [error] [client 43.155.195.141:52250] [pid 2509305] apache2_util.c(271): [client 43.155.195.141] ModSecurity: Warning. Pattern match "\\\\b(?:keep-alive|close),\\\\s?(?:keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "352"] [id "920210"] [msg "Multiple/Conflicting Connection Header Data Found"] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [hostname "mollywoppersnyb.com"] [uri "/"] [unique_id "aQnybhCnW5FCz3povTvVnAAAAE8"] [Tue Nov 04 04:35:51 2025] [mollywoppersnyb.com] [error] [client 34.205.163.103:14042] [pid 2509305] apache2_util.c(271): [client 34.205.163.103] ModSecurity: Warning. Matched phrase "etc/apache2" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: etc/apache2 found within ARGS:path: /etc/apache2/mods-available"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQnzJxCnW5FCz3povTvZcQAAALs"] [Tue Nov 04 04:35:55 2025] [mollywoppersnyb.com] [error] [client 98.83.226.125:49042] [pid 2509305] apache2_util.c(271): [client 98.83.226.125] ModSecurity: Warning. Matched phrase "etc/default" at ARGS:fileloc. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: etc/default found within ARGS:fileloc: /etc/default/motd-news"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQnzKxCnW5FCz3povTvZlwAAAMQ"] [Tue Nov 04 04:35:55 2025] [mollywoppersnyb.com] [error] [client 98.83.226.125:49042] [pid 2509305] apache2_util.c(271): [client 98.83.226.125] ModSecurity: Warning. Matched phrase "etc/default" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: etc/default found within ARGS:path: /etc/default"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQnzKxCnW5FCz3povTvZlwAAAMQ"] [Tue Nov 04 04:37:43 2025] [mollywoppersnyb.com] [error] [client 52.45.15.233:16379] [pid 2509305] apache2_util.c(271): [client 52.45.15.233] ModSecurity: Warning. Matched phrase "etc/default" at ARGS:fileloc. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: etc/default found within ARGS:fileloc: /etc/default/slrn"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQnzlxCnW5FCz3povTve7gAAAL8"] [Tue Nov 04 04:37:43 2025] [mollywoppersnyb.com] [error] [client 52.45.15.233:16379] [pid 2509305] apache2_util.c(271): [client 52.45.15.233] ModSecurity: Warning. Matched phrase "etc/default" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: etc/default found within ARGS:path: /etc/default"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQnzlxCnW5FCz3povTve7gAAAL8"] [Tue Nov 04 04:40:24 2025] [mollywoppersnyb.com] [error] [client 23.22.105.143:60337] [pid 2509305] apache2_util.c(271): [client 23.22.105.143] ModSecurity: Access denied with code 418 (phase 2). Pattern match "^[\\\\.|/]+(proc/|dev/shm/)" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/99_dreamhost_rules.conf"] [line "53"] [id "1990013"] [msg "Directory traversal"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQn0OBCnW5FCz3povTvrGwAAAGI"] [Tue Nov 04 04:40:35 2025] [mollywoppersnyb.com] [error] [client 52.54.157.23:13680] [pid 2509305] apache2_util.c(271): [client 52.54.157.23] ModSecurity: Access denied with code 418 (phase 2). Pattern match "^[\\\\.|/]+(proc/|dev/shm/)" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/99_dreamhost_rules.conf"] [line "53"] [id "1990013"] [msg "Directory traversal"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQn0QxCnW5FCz3povTvruQAAALk"] [Tue Nov 04 04:40:52 2025] [mollywoppersnyb.com] [error] [client 54.221.203.24:32620] [pid 2509305] apache2_util.c(271): [client 54.221.203.24] ModSecurity: Warning. Matched phrase "var/log" at ARGS:fileloc. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: var/log found within ARGS:fileloc: /var/log/daemon.log.3.gz"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQn0VBCnW5FCz3povTvsYAAAAI4"] [Tue Nov 04 04:40:52 2025] [mollywoppersnyb.com] [error] [client 54.221.203.24:32620] [pid 2509305] apache2_util.c(271): [client 54.221.203.24] ModSecurity: Warning. Matched phrase "var/log" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: var/log found within ARGS:path: /var/log"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQn0VBCnW5FCz3povTvsYAAAAI4"] [Tue Nov 04 04:42:07 2025] [mollywoppersnyb.com] [error] [client 35.169.102.85:10414] [pid 2509305] apache2_util.c(271): [client 35.169.102.85] ModSecurity: Warning. Matched phrase "sys/module" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: sys/module found within ARGS:path: /sys/module/apparmor"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQn0nxCnW5FCz3povTvvtgAAAMM"] [Tue Nov 04 04:42:35 2025] [mollywoppersnyb.com] [error] [client 100.29.164.178:36350] [pid 2509305] apache2_util.c(271): [client 100.29.164.178] ModSecurity: Warning. Matched phrase "etc/cron.hourly" at ARGS:fileloc. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: etc/cron.hourly found within ARGS:fileloc: /etc/cron.hourly/.placeholder"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQn0uxCnW5FCz3povTvwowAAABk"] [Tue Nov 04 04:42:35 2025] [mollywoppersnyb.com] [error] [client 100.29.164.178:36350] [pid 2509305] apache2_util.c(271): [client 100.29.164.178] ModSecurity: Warning. Matched phrase "etc/cron.hourly" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: etc/cron.hourly found within ARGS:path: /etc/cron.hourly"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQn0uxCnW5FCz3povTvwowAAABk"] [Tue Nov 04 04:42:41 2025] [mollywoppersnyb.com] [error] [client 52.203.152.231:13207] [pid 2509305] apache2_util.c(271): [client 52.203.152.231] ModSecurity: Access denied with code 418 (phase 2). Pattern match "^[\\\\.|/]+(proc/|dev/shm/)" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/99_dreamhost_rules.conf"] [line "53"] [id "1990013"] [msg "Directory traversal"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQn0wRCnW5FCz3povTvwyQAAABo"] [Tue Nov 04 04:45:25 2025] [mollywoppersnyb.com] [error] [client 54.83.180.239:55703] [pid 2509305] apache2_util.c(271): [client 54.83.180.239] ModSecurity: Warning. Matched phrase "sys/bus" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: sys/bus found within ARGS:path: /sys/bus/rbd"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQn1ZRCnW5FCz3povTv0ugAAALc"] [Tue Nov 04 04:46:06 2025] [mollywoppersnyb.com] [error] [client 18.206.47.187:27990] [pid 2509305] apache2_util.c(271): [client 18.206.47.187] ModSecurity: Warning. Matched phrase "sys/module" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: sys/module found within ARGS:path: /sys/module/pcnet32"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQn1jhCnW5FCz3povTv1BgAAAJw"] [Tue Nov 04 04:46:21 2025] [mollywoppersnyb.com] [error] [client 52.203.68.145:47716] [pid 2509305] apache2_util.c(271): [client 52.203.68.145] ModSecurity: Warning. Matched phrase "sys/module" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: sys/module found within ARGS:path: /sys/module/fuse"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQn1nRCnW5FCz3povTv1JQAAAA8"] [Tue Nov 04 04:47:32 2025] [mollywoppersnyb.com] [error] [client 18.214.251.19:37027] [pid 2509305] apache2_util.c(271): [client 18.214.251.19] ModSecurity: Warning. Matched phrase "sys/module" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: sys/module found within ARGS:path: /sys/module/dm_multipath"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQn15BCnW5FCz3povTv1twAAALk"] [Tue Nov 04 04:48:25 2025] [mollywoppersnyb.com] [error] [client 98.82.59.253:30958] [pid 2509305] apache2_util.c(271): [client 98.82.59.253] ModSecurity: Warning. Matched phrase "sys/module" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: sys/module found within ARGS:path: /sys/module/nvme_core"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQn2GRCnW5FCz3povTv2YwAAAFI"] [Tue Nov 04 04:53:14 2025] [mollywoppersnyb.com] [error] [client 54.84.93.8:49625] [pid 2509305] apache2_util.c(271): [client 54.84.93.8] ModSecurity: Warning. Matched phrase "sys/kernel" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: sys/kernel found within ARGS:path: /sys/kernel/mm"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQn3OhCnW5FCz3povTsArgAAAGM"] [Tue Nov 04 04:53:48 2025] [mollywoppersnyb.com] [error] [client 3.210.114.189:1784] [pid 2509305] apache2_util.c(271): [client 3.210.114.189] ModSecurity: Warning. Matched phrase "sys/module" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: sys/module found within ARGS:path: /sys/module/nf_conntrack"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQn3XBCnW5FCz3povTsBwAAAAKA"] [Tue Nov 04 04:55:00 2025] [mollywoppersnyb.com] [error] [client 98.82.66.172:24870] [pid 2509305] apache2_util.c(271): [client 98.82.66.172] ModSecurity: Warning. Matched phrase "etc/network" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: etc/network found within ARGS:path: /etc/network/if-down.d"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQn3pBCnW5FCz3povTsEiAAAAKY"] [Tue Nov 04 04:58:43 2025] [mollywoppersnyb.com] [error] [client 18.235.81.246:54890] [pid 2509305] apache2_util.c(271): [client 18.235.81.246] ModSecurity: Warning. Matched phrase "etc/security" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: etc/security found within ARGS:path: /etc/security/limits.d"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQn4gxCnW5FCz3povTsJPwAAADw"] [Tue Nov 04 05:14:04 2025] [mollywoppersnyb.com] [error] [client 98.83.8.142:29960] [pid 224760] apache2_util.c(271): [client 98.83.8.142] ModSecurity: Warning. Matched phrase "sys/class" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: sys/class found within ARGS:path: /sys/class/extcon"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQn8HCBor388jTsvXSP83AAAJ6o"] [Tue Nov 04 05:14:35 2025] [mollywoppersnyb.com] [error] [client 98.84.60.17:20049] [pid 224760] apache2_util.c(271): [client 98.84.60.17] ModSecurity: Warning. Matched phrase "sys/bus" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: sys/bus found within ARGS:path: /sys/bus/memory"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQn8OyBor388jTsvXSP9IQAAJzU"] [Tue Nov 04 05:15:44 2025] [mollywoppersnyb.com] [error] [client 34.224.9.144:61078] [pid 224760] apache2_util.c(271): [client 34.224.9.144] ModSecurity: Warning. Matched phrase "sys/firmware" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: sys/firmware found within ARGS:path: /sys/firmware/dmi"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQn8gCBor388jTsvXSP9dgAAJ9g"] [Tue Nov 04 05:16:15 2025] [mollywoppersnyb.com] [error] [client 35.171.141.42:44954] [pid 224760] apache2_util.c(271): [client 35.171.141.42] ModSecurity: Warning. Matched phrase "sys/fs" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: sys/fs found within ARGS:path: /sys/fs/pstore"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQn8nyBor388jTsvXSP9lwAAJ0w"] [Tue Nov 04 05:17:00 2025] [mollywoppersnyb.com] [error] [client 34.227.156.153:60735] [pid 224760] apache2_util.c(271): [client 34.227.156.153] ModSecurity: Warning. Matched phrase "sys/class" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: sys/class found within ARGS:path: /sys/class/firmware"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQn8zCBor388jTsvXSP93gAAJ8g"] [Tue Nov 04 05:17:36 2025] [mollywoppersnyb.com] [error] [client 50.19.221.48:9397] [pid 224760] apache2_util.c(271): [client 50.19.221.48] ModSecurity: Warning. Matched phrase "sys/dev" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: sys/dev found within ARGS:path: /sys/devices/pci0000:00"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQn88CBor388jTsvXSP-GgAAJ2o"] [Tue Nov 04 05:17:39 2025] [mollywoppersnyb.com] [error] [client 3.231.193.38:48370] [pid 224760] apache2_util.c(271): [client 3.231.193.38] ModSecurity: Warning. Matched phrase "etc/postfix" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: etc/postfix found within ARGS:path: /etc/postfix/postfix-files.d"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQn88yBor388jTsvXSP-IQAAJ3s"] [Tue Nov 04 05:17:52 2025] [mollywoppersnyb.com] [error] [client 44.209.187.99:28420] [pid 224760] apache2_util.c(271): [client 44.209.187.99] ModSecurity: Access denied with code 418 (phase 2). Pattern match "^[\\\\.|/]+(proc/|dev/shm/)" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/99_dreamhost_rules.conf"] [line "53"] [id "1990013"] [msg "Directory traversal"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQn9ACBor388jTsvXSP-PQAAJ7M"] [Tue Nov 04 05:18:52 2025] [mollywoppersnyb.com] [error] [client 44.209.187.99:29922] [pid 224760] apache2_util.c(271): [client 44.209.187.99] ModSecurity: Warning. Matched phrase "sys/kernel" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: sys/kernel found within ARGS:path: /sys/kernel/sunrpc"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQn9PCBor388jTsvXSP-2AAAJ0w"] [Tue Nov 04 05:23:40 2025] [mollywoppersnyb.com] [error] [client 54.156.55.147:53898] [pid 224760] apache2_util.c(271): [client 54.156.55.147] ModSecurity: Warning. Matched phrase "sys/class" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: sys/class found within ARGS:path: /sys/class/net"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQn-XCBor388jTsvXSMBQQAAJxk"] [Tue Nov 04 05:23:46 2025] [mollywoppersnyb.com] [error] [client 3.211.181.86:60972] [pid 224760] apache2_util.c(271): [client 3.211.181.86] ModSecurity: Warning. Matched phrase "var/log" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: var/log found within ARGS:path: /var/log/journal"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQn-YiBor388jTsvXSMBRwAAJx4"] [Tue Nov 04 05:24:00 2025] [mollywoppersnyb.com] [error] [client 54.167.32.123:30379] [pid 224760] apache2_util.c(271): [client 54.167.32.123] ModSecurity: Warning. Matched phrase "sys/module" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: sys/module found within ARGS:path: /sys/module/vt"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQn-cCBor388jTsvXSMBVgAAJ1M"] [Tue Nov 04 05:24:39 2025] [mollywoppersnyb.com] [error] [client 52.200.93.170:40492] [pid 224760] apache2_util.c(271): [client 52.200.93.170] ModSecurity: Warning. Matched phrase "sys/module" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: sys/module found within ARGS:path: /sys/module/hid"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQn-lyBor388jTsvXSMBhgAAJ5Y"] [Tue Nov 04 05:25:49 2025] [mollywoppersnyb.com] [error] [client 3.229.95.193:48400] [pid 224760] apache2_util.c(271): [client 3.229.95.193] ModSecurity: Warning. Matched phrase "sys/kernel" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: sys/kernel found within ARGS:path: /sys/kernel/tracing"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQn-3SBor388jTsvXSMC8QAAJ6g"] [Tue Nov 04 05:26:44 2025] [mollywoppersnyb.com] [error] [client 100.29.155.89:48714] [pid 224760] apache2_util.c(271): [client 100.29.155.89] ModSecurity: Warning. Matched phrase "sys/firmware" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: sys/firmware found within ARGS:path: /sys/firmware/acpi"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQn_FCBor388jTsvXSMDtwAAJ6o"] [Tue Nov 04 05:26:47 2025] [mollywoppersnyb.com] [error] [client 98.83.178.66:25556] [pid 224760] apache2_util.c(271): [client 98.83.178.66] ModSecurity: Warning. Matched phrase "sys/class" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: sys/class found within ARGS:path: /sys/class/devfreq"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQn_FyBor388jTsvXSMDvQAAJ-M"] [Tue Nov 04 05:27:51 2025] [mollywoppersnyb.com] [error] [client 52.1.106.130:45271] [pid 224760] apache2_util.c(271): [client 52.1.106.130] ModSecurity: Warning. Matched phrase "sys/module" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: sys/module found within ARGS:path: /sys/module/i40e"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQn_VyBor388jTsvXSMJDgAAJ0c"] [Tue Nov 04 05:29:36 2025] [mollywoppersnyb.com] [error] [client 54.159.98.248:33272] [pid 224760] apache2_util.c(271): [client 54.159.98.248] ModSecurity: Warning. Matched phrase "etc/gdb" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: etc/gdb found within ARGS:path: /etc/gdb/gdbinit.d"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQn_wCBor388jTsvXSMKbwAAJyc"] [Tue Nov 04 05:30:13 2025] [mollywoppersnyb.com] [error] [client 98.83.72.38:16729] [pid 224760] apache2_util.c(271): [client 98.83.72.38] ModSecurity: Access denied with code 418 (phase 2). Pattern match "^[\\\\.|/]+(proc/|dev/shm/)" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/99_dreamhost_rules.conf"] [line "53"] [id "1990013"] [msg "Directory traversal"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQn_5SBor388jTsvXSMKxQAAJzc"] [Tue Nov 04 05:34:40 2025] [mollywoppersnyb.com] [error] [client 3.230.224.6:10480] [pid 224760] apache2_util.c(271): [client 3.230.224.6] ModSecurity: Warning. Matched phrase "etc/init" at ARGS:fileloc. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: etc/init found within ARGS:fileloc: /etc/init.d/screen-cleanup"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQoA8CBor388jTsvXSMSCgAAJyM"] [Tue Nov 04 05:34:40 2025] [mollywoppersnyb.com] [error] [client 3.230.224.6:10480] [pid 224760] apache2_util.c(271): [client 3.230.224.6] ModSecurity: Warning. Matched phrase "etc/init" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: etc/init found within ARGS:path: /etc/init.d"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQoA8CBor388jTsvXSMSCgAAJyM"] [Tue Nov 04 05:37:27 2025] [mollywoppersnyb.com] [error] [client 3.216.227.216:13697] [pid 224760] apache2_util.c(271): [client 3.216.227.216] ModSecurity: Access denied with code 418 (phase 2). Pattern match "^[\\\\.|/]+(proc/|dev/shm/)" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/99_dreamhost_rules.conf"] [line "53"] [id "1990013"] [msg "Directory traversal"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQoBlyBor388jTsvXSMZBAAAJ4E"] [Tue Nov 04 05:52:20 2025] [mollywoppersnyb.com] [error] [client 3.94.156.104:42998] [pid 224760] apache2_util.c(271): [client 3.94.156.104] ModSecurity: Warning. Matched phrase "sys/module" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: sys/module found within ARGS:path: /sys/module/sch_htb"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQoFFCBor388jTsvXSMrDwAAJ60"] [Tue Nov 04 05:53:08 2025] [mollywoppersnyb.com] [error] [client 34.194.226.74:50822] [pid 224760] apache2_util.c(271): [client 34.194.226.74] ModSecurity: Warning. Matched phrase "etc/php" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: etc/php found within ARGS:path: /etc/php80/conf.d"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQoFRCBor388jTsvXSMrYAAAJ1Y"] [Tue Nov 04 05:54:15 2025] [mollywoppersnyb.com] [error] [client 34.231.77.232:43637] [pid 224760] apache2_util.c(271): [client 34.231.77.232] ModSecurity: Warning. Matched phrase "var/log" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: var/log found within ARGS:path: /var/log/private"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQoFhyBor388jTsvXSMsawAAJ8k"] [Tue Nov 04 05:54:20 2025] [mollywoppersnyb.com] [error] [client 34.206.212.24:56392] [pid 224760] apache2_util.c(271): [client 34.206.212.24] ModSecurity: Warning. Matched phrase "sys/module" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: sys/module found within ARGS:path: /sys/module/xt_recent"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQoFjCBor388jTsvXSMsegAAJ4o"] [Tue Nov 04 05:55:08 2025] [mollywoppersnyb.com] [error] [client 34.206.212.24:48554] [pid 224760] apache2_util.c(271): [client 34.206.212.24] ModSecurity: Warning. Matched phrase "sys/dev" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: sys/dev found within ARGS:path: /sys/devices/breakpoint"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQoFvCBor388jTsvXSMs6AAAJ7Y"] [Tue Nov 04 05:55:17 2025] [mollywoppersnyb.com] [error] [client 34.194.226.74:48587] [pid 224760] apache2_util.c(271): [client 34.194.226.74] ModSecurity: Warning. Matched phrase "etc/php" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: etc/php found within ARGS:path: /dh/etc/php-ini"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQoFxSBor388jTsvXSMs9QAAJ4E"] [Tue Nov 04 05:56:09 2025] [mollywoppersnyb.com] [error] [client 54.157.84.74:20929] [pid 224760] apache2_util.c(271): [client 54.157.84.74] ModSecurity: Warning. Matched phrase "sys/bus" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: sys/bus found within ARGS:path: /sys/bus/usb"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQoF-SBor388jTsvXSMtRgAAJxU"] [Tue Nov 04 05:56:11 2025] [mollywoppersnyb.com] [error] [client 54.156.124.2:45967] [pid 224760] apache2_util.c(271): [client 54.156.124.2] ModSecurity: Warning. Matched phrase "etc/network" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: etc/network found within ARGS:path: /etc/networkd-dispatcher/dormant.d"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQoF-yBor388jTsvXSMtSAAAJ30"] [Tue Nov 04 05:57:48 2025] [mollywoppersnyb.com] [error] [client 54.163.169.168:13717] [pid 224760] apache2_util.c(271): [client 54.163.169.168] ModSecurity: Warning. Matched phrase "sys/fs" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: sys/fs found within ARGS:path: /sys/fs/btrfs"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQoGXCBor388jTsvXSMt8gAAJ40"] [Tue Nov 04 05:58:08 2025] [mollywoppersnyb.com] [error] [client 3.213.46.222:59324] [pid 224760] apache2_util.c(271): [client 3.213.46.222] ModSecurity: Warning. Matched phrase "etc/kernel" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: etc/kernel found within ARGS:path: /etc/kernel/preinst.d"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQoGbyBor388jTsvXSMuEAAAJ7I"] [Tue Nov 04 05:58:52 2025] [mollywoppersnyb.com] [error] [client 3.89.170.186:29760] [pid 224760] apache2_util.c(271): [client 3.89.170.186] ModSecurity: Warning. Matched phrase "etc/iproute2" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: etc/iproute2 found within ARGS:path: /etc/iproute2/rt_tables.d"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQoGnCBor388jTsvXSMuYQAAJxY"] [Tue Nov 04 05:59:13 2025] [mollywoppersnyb.com] [error] [client 23.23.213.182:42229] [pid 224760] apache2_util.c(271): [client 23.23.213.182] ModSecurity: Warning. Matched phrase "sys/module" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: sys/module found within ARGS:path: /sys/module/rtc_cmos"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQoGsSBor388jTsvXSMugAAAJ-4"] [Tue Nov 04 06:02:01 2025] [mollywoppersnyb.com] [error] [client 52.203.65.83:32401] [pid 224760] apache2_util.c(271): [client 52.203.65.83] ModSecurity: Warning. Matched phrase "var/log" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: var/log found within ARGS:path: /var/log/apt"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQoHWSBor388jTsvXSMz_AAAJ7A"] [Tue Nov 04 06:02:12 2025] [mollywoppersnyb.com] [error] [client 3.213.213.161:2955] [pid 224760] apache2_util.c(271): [client 3.213.213.161] ModSecurity: Warning. Matched phrase "sys/module" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: sys/module found within ARGS:path: /sys/module/acpi"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQoHZCBor388jTsvXSM0mQAAJxM"] [Tue Nov 04 06:02:53 2025] [mollywoppersnyb.com] [error] [client 52.6.232.201:38475] [pid 224760] apache2_util.c(271): [client 52.6.232.201] ModSecurity: Warning. Matched phrase "sys/module" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: sys/module found within ARGS:path: /sys/module/842_compress"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQoHjSBor388jTsvXSM10QAAJ44"] [Tue Nov 04 06:03:21 2025] [mollywoppersnyb.com] [error] [client 50.19.221.48:34374] [pid 224760] apache2_util.c(271): [client 50.19.221.48] ModSecurity: Warning. Matched phrase "sys/module" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: sys/module found within ARGS:path: /sys/module/tcp_vegas"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQoHqSBor388jTsvXSM2iAAAJ-8"] [Tue Nov 04 06:05:43 2025] [mollywoppersnyb.com] [error] [client 100.29.160.53:57575] [pid 224760] apache2_util.c(271): [client 100.29.160.53] ModSecurity: Warning. Matched phrase "etc/php" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: etc/php found within ARGS:path: /etc/php56/conf.d"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQoINyBor388jTsvXSM5jgAAJ34"] [Tue Nov 04 06:09:21 2025] [mollywoppersnyb.com] [error] [client 98.84.184.80:57720] [pid 224760] apache2_util.c(271): [client 98.84.184.80] ModSecurity: Access denied with code 418 (phase 2). Pattern match "^[\\\\.|/]+(proc/|dev/shm/)" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/99_dreamhost_rules.conf"] [line "53"] [id "1990013"] [msg "Directory traversal"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQoJESBor388jTsvXSM7qQAAJy0"] [Tue Nov 04 06:09:35 2025] [mollywoppersnyb.com] [error] [client 44.207.69.106:50369] [pid 224760] apache2_util.c(271): [client 44.207.69.106] ModSecurity: Warning. Matched phrase "var/log" at ARGS:fileloc. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: var/log found within ARGS:fileloc: /var/log/sshlimit.log.5.gz"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQoJHyBor388jTsvXSM7xwAAJ3g"] [Tue Nov 04 06:09:35 2025] [mollywoppersnyb.com] [error] [client 44.207.69.106:50369] [pid 224760] apache2_util.c(271): [client 44.207.69.106] ModSecurity: Warning. Matched phrase "var/log" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: var/log found within ARGS:path: /var/log"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQoJHyBor388jTsvXSM7xwAAJ3g"] [Tue Nov 04 06:12:27 2025] [mollywoppersnyb.com] [error] [client 34.192.67.98:39112] [pid 224760] apache2_util.c(271): [client 34.192.67.98] ModSecurity: Warning. Matched phrase "etc/calendar" at ARGS:fileloc. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: etc/calendar found within ARGS:fileloc: /etc/calendar/default"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQoJyyBor388jTsvXSM_8gAAJ5M"] [Tue Nov 04 06:12:27 2025] [mollywoppersnyb.com] [error] [client 34.192.67.98:39112] [pid 224760] apache2_util.c(271): [client 34.192.67.98] ModSecurity: Warning. Matched phrase "etc/calendar" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: etc/calendar found within ARGS:path: /etc/calendar"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQoJyyBor388jTsvXSM_8gAAJ5M"] [Tue Nov 04 06:18:04 2025] [mollywoppersnyb.com] [error] [client 54.147.182.90:13827] [pid 224760] apache2_util.c(271): [client 54.147.182.90] ModSecurity: Access denied with code 418 (phase 2). Pattern match "^[\\\\.|/]+(proc/|dev/shm/)" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/99_dreamhost_rules.conf"] [line "53"] [id "1990013"] [msg "Directory traversal"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQoLHCBor388jTsvXSNN_QAAJ0U"] [Tue Nov 04 06:18:32 2025] [mollywoppersnyb.com] [error] [client 100.29.160.53:53731] [pid 224760] apache2_util.c(271): [client 100.29.160.53] ModSecurity: Warning. Matched phrase "etc/udev" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: etc/udev found within ARGS:path: /etc/udev/hwdb.d"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQoLOCBor388jTsvXSNOzQAAJ14"] [Tue Nov 04 06:19:49 2025] [mollywoppersnyb.com] [error] [client 52.44.148.203:22557] [pid 224760] apache2_util.c(271): [client 52.44.148.203] ModSecurity: Access denied with code 418 (phase 2). Pattern match "^[\\\\.|/]+(proc/|dev/shm/)" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/99_dreamhost_rules.conf"] [line "53"] [id "1990013"] [msg "Directory traversal"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQoLhSBor388jTsvXSNPvQAAJ-E"] [Tue Nov 04 06:19:51 2025] [mollywoppersnyb.com] [error] [client 34.235.239.240:10359] [pid 224760] apache2_util.c(271): [client 34.235.239.240] ModSecurity: Warning. Matched phrase "sys/dev" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: sys/dev found within ARGS:path: /sys/devices/power"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQoLhyBor388jTsvXSNPwAAAJ-A"] [Tue Nov 04 06:21:14 2025] [mollywoppersnyb.com] [error] [client 3.222.190.107:8923] [pid 224760] apache2_util.c(271): [client 3.222.190.107] ModSecurity: Warning. Matched phrase "sys/class" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: sys/class found within ARGS:path: /sys/class/sas_host"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQoL2iBor388jTsvXSNQ1gAAJ-g"] [Tue Nov 04 06:27:13 2025] [mollywoppersnyb.com] [error] [client 54.235.172.108:28366] [pid 713592] apache2_util.c(271): [client 54.235.172.108] ModSecurity: Warning. Matched phrase "var/log" at ARGS:fileloc. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: var/log found within ARGS:fileloc: /var/log/mail.log.1"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQoNQSnUVUFXTjqkq-Za4QAAANo"] [Tue Nov 04 06:27:13 2025] [mollywoppersnyb.com] [error] [client 54.235.172.108:28366] [pid 713592] apache2_util.c(271): [client 54.235.172.108] ModSecurity: Warning. Matched phrase "var/log" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: var/log found within ARGS:path: /var/log"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQoNQSnUVUFXTjqkq-Za4QAAANo"] [Tue Nov 04 06:28:29 2025] [mollywoppersnyb.com] [error] [client 3.210.29.96:30960] [pid 713592] apache2_util.c(271): [client 3.210.29.96] ModSecurity: Warning. Matched phrase "sys/class" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: sys/class found within ARGS:path: /sys/class/ptp"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQoNjSnUVUFXTjqkq-ZbWAAAAE4"] [Tue Nov 04 06:30:53 2025] [mollywoppersnyb.com] [error] [client 54.145.82.217:50279] [pid 713592] apache2_util.c(271): [client 54.145.82.217] ModSecurity: Warning. Matched phrase "etc/network" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: etc/network found within ARGS:path: /etc/NetworkManager/dispatcher.d"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQoOHSnUVUFXTjqkq-ZcUAAAAIU"] [Tue Nov 04 06:32:20 2025] [mollywoppersnyb.com] [error] [client 52.0.218.219:4188] [pid 713592] apache2_util.c(271): [client 52.0.218.219] ModSecurity: Warning. Matched phrase "etc/perl" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: etc/perl found within ARGS:path: /etc/perl/XML"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQoOdCnUVUFXTjqkq-ZdLwAAAKU"] [Tue Nov 04 06:33:46 2025] [mollywoppersnyb.com] [error] [client 44.221.105.234:62012] [pid 713592] apache2_util.c(271): [client 44.221.105.234] ModSecurity: Warning. Matched phrase "sys/class" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: sys/class found within ARGS:path: /sys/class/xt_idletimer"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQoOyinUVUFXTjqkq-Zd0wAAACI"] [Tue Nov 04 06:34:00 2025] [mollywoppersnyb.com] [error] [client 34.192.67.98:28413] [pid 713592] apache2_util.c(271): [client 34.192.67.98] ModSecurity: Warning. Matched phrase "sys/module" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: sys/module found within ARGS:path: /sys/module/scsi_mod"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQoO2CnUVUFXTjqkq-Zd7gAAAHQ"] [Tue Nov 04 06:45:11 2025] [mollywoppersnyb.com] [error] [client 54.83.56.1:8346] [pid 713592] apache2_util.c(271): [client 54.83.56.1] ModSecurity: Warning. Matched phrase "var/log" at ARGS:fileloc. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: var/log found within ARGS:fileloc: /var/log/dpkg.log.1"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQoRdynUVUFXTjqkq-ZoOAAAAKU"] [Tue Nov 04 06:45:11 2025] [mollywoppersnyb.com] [error] [client 54.83.56.1:8346] [pid 713592] apache2_util.c(271): [client 54.83.56.1] ModSecurity: Warning. Matched phrase "var/log" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: var/log found within ARGS:path: /var/log"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQoRdynUVUFXTjqkq-ZoOAAAAKU"] [Tue Nov 04 06:46:19 2025] [mollywoppersnyb.com] [error] [client 3.218.35.239:16547] [pid 713592] apache2_util.c(271): [client 3.218.35.239] ModSecurity: Access denied with code 418 (phase 2). Pattern match "^[\\\\.|/]+(proc/|dev/shm/)" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/99_dreamhost_rules.conf"] [line "53"] [id "1990013"] [msg "Directory traversal"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQoRuynUVUFXTjqkq-ZpYgAAAFo"] [Tue Nov 04 06:46:39 2025] [mollywoppersnyb.com] [error] [client 3.93.98.99:40764] [pid 713592] apache2_util.c(271): [client 3.93.98.99] ModSecurity: Warning. Matched phrase "etc/logrotate.d" at ARGS:fileloc. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: etc/logrotate.d found within ARGS:fileloc: /etc/logrotate.d/stunnel4"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQoRzynUVUFXTjqkq-ZpewAAAKk"] [Tue Nov 04 06:46:39 2025] [mollywoppersnyb.com] [error] [client 3.93.98.99:40764] [pid 713592] apache2_util.c(271): [client 3.93.98.99] ModSecurity: Warning. Matched phrase "etc/logrotate.d" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: etc/logrotate.d found within ARGS:path: /etc/logrotate.d"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQoRzynUVUFXTjqkq-ZpewAAAKk"] [Tue Nov 04 06:48:20 2025] [mollywoppersnyb.com] [error] [client 54.84.93.8:30195] [pid 713592] apache2_util.c(271): [client 54.84.93.8] ModSecurity: Warning. Matched phrase "sys/module" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: sys/module found within ARGS:path: /sys/module/md_mod"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQoSNCnUVUFXTjqkq-ZqgQAAAKg"] [Tue Nov 04 06:48:48 2025] [mollywoppersnyb.com] [error] [client 52.1.106.130:32643] [pid 713592] apache2_util.c(271): [client 52.1.106.130] ModSecurity: Warning. Matched phrase "var/log" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: var/log found within ARGS:path: /var/log/sa"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQoSUCnUVUFXTjqkq-ZrKQAAAMU"] [Tue Nov 04 06:49:40 2025] [mollywoppersnyb.com] [error] [client 3.93.98.99:9779] [pid 713592] apache2_util.c(271): [client 3.93.98.99] ModSecurity: Warning. Matched phrase "sys/class" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: sys/class found within ARGS:path: /sys/class/graphics"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQoShCnUVUFXTjqkq-ZsFgAAAMM"] [Tue Nov 04 06:50:04 2025] [mollywoppersnyb.com] [error] [client 3.220.148.166:17891] [pid 713592] apache2_util.c(271): [client 3.220.148.166] ModSecurity: Warning. Matched phrase "sys/module" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: sys/module found within ARGS:path: /sys/module/via_agp"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQoSnCnUVUFXTjqkq-ZslwAAAAQ"] [Tue Nov 04 06:50:16 2025] [mollywoppersnyb.com] [error] [client 35.171.117.160:47583] [pid 713592] apache2_util.c(271): [client 35.171.117.160] ModSecurity: Warning. Matched phrase "etc/ppp" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: etc/ppp found within ARGS:path: /etc/ppp/ip-down.d"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQoSqCnUVUFXTjqkq-Zs2wAAAG0"] [Tue Nov 04 06:51:09 2025] [mollywoppersnyb.com] [error] [client 54.235.191.179:41772] [pid 713592] apache2_util.c(271): [client 54.235.191.179] ModSecurity: Warning. Matched phrase "sys/class" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: sys/class found within ARGS:path: /sys/class/nvme"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQoS3SnUVUFXTjqkq-Zt_AAAABo"] [Tue Nov 04 06:51:56 2025] [mollywoppersnyb.com] [error] [client 3.229.2.217:17738] [pid 713592] apache2_util.c(271): [client 3.229.2.217] ModSecurity: Warning. Matched phrase "sys/bus" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: sys/bus found within ARGS:path: /sys/bus/serial"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQoTDCnUVUFXTjqkq-Zu6wAAAFI"] [Tue Nov 04 06:52:24 2025] [mollywoppersnyb.com] [error] [client 184.73.68.20:16937] [pid 713592] apache2_util.c(271): [client 184.73.68.20] ModSecurity: Access denied with code 418 (phase 2). Pattern match "^[\\\\.|/]+(proc/|dev/shm/)" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/99_dreamhost_rules.conf"] [line "53"] [id "1990013"] [msg "Directory traversal"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQoTKCnUVUFXTjqkq-ZvbwAAAAw"] [Tue Nov 04 06:53:15 2025] [mollywoppersnyb.com] [error] [client 98.83.177.42:28340] [pid 713592] apache2_util.c(271): [client 98.83.177.42] ModSecurity: Warning. Matched phrase "sys/bus" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: sys/bus found within ARGS:path: /sys/bus/edac"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQoTWynUVUFXTjqkq-ZwSAAAAFk"] [Tue Nov 04 06:53:25 2025] [mollywoppersnyb.com] [error] [client 23.23.104.107:29845] [pid 713592] apache2_util.c(271): [client 23.23.104.107] ModSecurity: Warning. Matched phrase "etc/dkms" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: etc/dkms found within ARGS:path: /etc/dkms/template-dkms-mkdsc"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQoTZSnUVUFXTjqkq-ZwWQAAAF4"] [Tue Nov 04 06:53:53 2025] [mollywoppersnyb.com] [error] [client 44.214.19.8:29578] [pid 713592] apache2_util.c(271): [client 44.214.19.8] ModSecurity: Warning. Matched phrase "sys/module" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: sys/module found within ARGS:path: /sys/module/blk_cgroup"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQoTgSnUVUFXTjqkq-ZwdwAAAJg"] [Tue Nov 04 06:54:01 2025] [mollywoppersnyb.com] [error] [client 44.205.192.249:56340] [pid 713592] apache2_util.c(271): [client 44.205.192.249] ModSecurity: Warning. Matched phrase "sys/module" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: sys/module found within ARGS:path: /sys/module/xz_dec"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQoTiSnUVUFXTjqkq-ZwgAAAAL0"] [Tue Nov 04 06:54:48 2025] [mollywoppersnyb.com] [error] [client 54.164.106.236:40882] [pid 713592] apache2_util.c(271): [client 54.164.106.236] ModSecurity: Warning. Matched phrase "sys/class" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: sys/class found within ARGS:path: /sys/class/nd"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQoTuCnUVUFXTjqkq-ZxAgAAALo"] [Tue Nov 04 07:01:22 2025] [mollywoppersnyb.com] [error] [client 98.82.38.120:40158] [pid 713592] apache2_util.c(271): [client 98.82.38.120] ModSecurity: Warning. Matched phrase "etc/sensors.d" at ARGS:fileloc. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: etc/sensors.d found within ARGS:fileloc: /etc/sensors.d/.placeholder"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQoVQinUVUFXTjqkq-Z9xQAAAGs"] [Tue Nov 04 07:01:22 2025] [mollywoppersnyb.com] [error] [client 98.82.38.120:40158] [pid 713592] apache2_util.c(271): [client 98.82.38.120] ModSecurity: Warning. Matched phrase "etc/sensors.d" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: etc/sensors.d found within ARGS:path: /etc/sensors.d"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQoVQinUVUFXTjqkq-Z9xQAAAGs"] [Tue Nov 04 07:01:31 2025] [mollywoppersnyb.com] [error] [client 35.168.238.50:42131] [pid 713592] apache2_util.c(271): [client 35.168.238.50] ModSecurity: Warning. Matched phrase "sys/module" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: sys/module found within ARGS:path: /sys/module/nbd"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQoVSynUVUFXTjqkq-Z9zgAAAH0"] [Tue Nov 04 07:01:53 2025] [mollywoppersnyb.com] [error] [client 3.232.39.98:5739] [pid 713592] apache2_util.c(271): [client 3.232.39.98] ModSecurity: Access denied with code 418 (phase 2). Pattern match "^[\\\\.|/]+(proc/|dev/shm/)" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/99_dreamhost_rules.conf"] [line "53"] [id "1990013"] [msg "Directory traversal"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQoVYSnUVUFXTjqkq-Z97wAAAJo"] [Tue Nov 04 07:06:55 2025] [mollywoppersnyb.com] [error] [client 54.163.136.244:23396] [pid 713592] apache2_util.c(271): [client 54.163.136.244] ModSecurity: Warning. Matched phrase "var/log" at ARGS:fileloc. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: var/log found within ARGS:fileloc: /var/log/synflood.log.1"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQoWjynUVUFXTjqkq-aBQgAAACI"] [Tue Nov 04 07:06:55 2025] [mollywoppersnyb.com] [error] [client 54.163.136.244:23396] [pid 713592] apache2_util.c(271): [client 54.163.136.244] ModSecurity: Warning. Matched phrase "var/log" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: var/log found within ARGS:path: /var/log"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQoWjynUVUFXTjqkq-aBQgAAACI"] [Tue Nov 04 07:10:23 2025] [mollywoppersnyb.com] [error] [client 44.215.210.112:46210] [pid 713592] apache2_util.c(271): [client 44.215.210.112] ModSecurity: Access denied with code 418 (phase 2). Pattern match "^[\\\\.|/]+(proc/|dev/shm/)" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/99_dreamhost_rules.conf"] [line "53"] [id "1990013"] [msg "Directory traversal"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQoXXynUVUFXTjqkq-aEtQAAABU"] [Tue Nov 04 07:13:51 2025] [mollywoppersnyb.com] [error] [client 52.45.92.83:65095] [pid 713592] apache2_util.c(271): [client 52.45.92.83] ModSecurity: Warning. Matched phrase "sys/kernel" at ARGS:fileloc. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: sys/kernel found within ARGS:fileloc: /sys/kernel/notes"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQoYLynUVUFXTjqkq-aKLQAAAMw"] [Tue Nov 04 07:13:51 2025] [mollywoppersnyb.com] [error] [client 52.45.92.83:65095] [pid 713592] apache2_util.c(271): [client 52.45.92.83] ModSecurity: Warning. Matched phrase "sys/kernel" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: sys/kernel found within ARGS:path: /sys/kernel"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQoYLynUVUFXTjqkq-aKLQAAAMw"] [Tue Nov 04 07:14:03 2025] [mollywoppersnyb.com] [error] [client 54.166.126.132:15031] [pid 713592] apache2_util.c(271): [client 54.166.126.132] ModSecurity: Warning. Matched phrase "etc/php" at ARGS:fileloc. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: etc/php found within ARGS:fileloc: /etc/php80/php.ini.generated"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQoYOynUVUFXTjqkq-aKVgAAAGg"] [Tue Nov 04 07:14:03 2025] [mollywoppersnyb.com] [error] [client 54.166.126.132:15031] [pid 713592] apache2_util.c(271): [client 54.166.126.132] ModSecurity: Warning. Matched phrase "etc/php" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: etc/php found within ARGS:path: /etc/php80"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQoYOynUVUFXTjqkq-aKVgAAAGg"] [Tue Nov 04 07:17:39 2025] [mollywoppersnyb.com] [error] [client 98.84.200.43:65372] [pid 713592] apache2_util.c(271): [client 98.84.200.43] ModSecurity: Warning. Matched phrase "sys/module" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: sys/module found within ARGS:path: /sys/module/lpc_sch"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQoZEynUVUFXTjqkq-aN7gAAABc"] [Tue Nov 04 07:18:49 2025] [mollywoppersnyb.com] [error] [client 34.236.185.101:59388] [pid 713592] apache2_util.c(271): [client 34.236.185.101] ModSecurity: Warning. Matched phrase "sys/module" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: sys/module found within ARGS:path: /sys/module/overlay"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQoZWSnUVUFXTjqkq-aOWgAAAHI"] [Tue Nov 04 07:19:39 2025] [mollywoppersnyb.com] [error] [client 23.23.213.182:61229] [pid 713592] apache2_util.c(271): [client 23.23.213.182] ModSecurity: Warning. Matched phrase "sys/dev" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: sys/dev found within ARGS:path: /sys/devices/system"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQoZiynUVUFXTjqkq-aOtQAAANc"] [Tue Nov 04 07:21:41 2025] [mollywoppersnyb.com] [error] [client 3.213.106.226:21222] [pid 713592] apache2_util.c(271): [client 3.213.106.226] ModSecurity: Access denied with code 418 (phase 2). Pattern match "^[\\\\.|/]+(proc/|dev/shm/)" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/99_dreamhost_rules.conf"] [line "53"] [id "1990013"] [msg "Directory traversal"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQoaBCnUVUFXTjqkq-aPvAAAAIk"] [Tue Nov 04 07:22:29 2025] [mollywoppersnyb.com] [error] [client 44.195.145.102:19107] [pid 713592] apache2_util.c(271): [client 44.195.145.102] ModSecurity: Access denied with code 418 (phase 2). Pattern match "^[\\\\.|/]+(proc/|dev/shm/)" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/99_dreamhost_rules.conf"] [line "53"] [id "1990013"] [msg "Directory traversal"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQoaNSnUVUFXTjqkq-aP_gAAAJE"] [Tue Nov 04 07:23:46 2025] [mollywoppersnyb.com] [error] [client 52.200.251.20:7324] [pid 713592] apache2_util.c(271): [client 52.200.251.20] ModSecurity: Warning. Matched phrase "sys/module" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: sys/module found within ARGS:path: /sys/module/auth_rpcgss"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQoaginUVUFXTjqkq-aRHwAAACs"] [Tue Nov 04 07:25:04 2025] [mollywoppersnyb.com] [error] [client 54.197.114.76:37960] [pid 713592] apache2_util.c(271): [client 54.197.114.76] ModSecurity: Access denied with code 418 (phase 2). Pattern match "^[\\\\.|/]+(proc/|dev/shm/)" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/99_dreamhost_rules.conf"] [line "53"] [id "1990013"] [msg "Directory traversal"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQoa0CnUVUFXTjqkq-aTRAAAAKo"] [Tue Nov 04 07:26:35 2025] [mollywoppersnyb.com] [error] [client 34.231.181.240:24200] [pid 713592] apache2_util.c(271): [client 34.231.181.240] ModSecurity: Warning. Matched phrase "var/log" at ARGS:fileloc. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: var/log found within ARGS:fileloc: /var/log/ubuntu-advantage.log"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQobKynUVUFXTjqkq-aWBAAAADQ"] [Tue Nov 04 07:26:35 2025] [mollywoppersnyb.com] [error] [client 34.231.181.240:24200] [pid 713592] apache2_util.c(271): [client 34.231.181.240] ModSecurity: Warning. Matched phrase "var/log" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: var/log found within ARGS:path: /var/log"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQobKynUVUFXTjqkq-aWBAAAADQ"] [Tue Nov 04 07:28:08 2025] [mollywoppersnyb.com] [error] [client 52.6.97.88:9227] [pid 713592] apache2_util.c(271): [client 52.6.97.88] ModSecurity: Access denied with code 418 (phase 2). Pattern match "^[\\\\.|/]+(proc/|dev/shm/)" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/99_dreamhost_rules.conf"] [line "53"] [id "1990013"] [msg "Directory traversal"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQobiCnUVUFXTjqkq-aXMAAAAAY"] [Tue Nov 04 07:28:10 2025] [mollywoppersnyb.com] [error] [client 18.208.11.93:37671] [pid 713592] apache2_util.c(271): [client 18.208.11.93] ModSecurity: Access denied with code 418 (phase 2). Pattern match "^[\\\\.|/]+(proc/|dev/shm/)" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/99_dreamhost_rules.conf"] [line "53"] [id "1990013"] [msg "Directory traversal"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQobiinUVUFXTjqkq-aXMgAAABI"] [Tue Nov 04 07:28:38 2025] [mollywoppersnyb.com] [error] [client 52.2.83.227:41883] [pid 713592] apache2_util.c(271): [client 52.2.83.227] ModSecurity: Warning. Matched phrase "sys/module" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: sys/module found within ARGS:path: /sys/module/libata"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQobpinUVUFXTjqkq-aXYgAAAEc"] [Tue Nov 04 07:28:40 2025] [mollywoppersnyb.com] [error] [client 54.204.12.115:54909] [pid 713592] apache2_util.c(271): [client 54.204.12.115] ModSecurity: Warning. Matched phrase "var/log" at ARGS:fileloc. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: var/log found within ARGS:fileloc: /var/log/xferlog"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQobqCnUVUFXTjqkq-aXZQAAAM4"] [Tue Nov 04 07:28:40 2025] [mollywoppersnyb.com] [error] [client 54.204.12.115:54909] [pid 713592] apache2_util.c(271): [client 54.204.12.115] ModSecurity: Warning. Matched phrase "var/log" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: var/log found within ARGS:path: /var/log"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQobqCnUVUFXTjqkq-aXZQAAAM4"] [Tue Nov 04 07:29:00 2025] [mollywoppersnyb.com] [error] [client 34.234.197.175:9965] [pid 713592] apache2_util.c(271): [client 34.234.197.175] ModSecurity: Warning. Matched phrase "var/log" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: var/log found within ARGS:path: /var/log/logrotate"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQobvCnUVUFXTjqkq-aXrwAAABc"] [Tue Nov 04 07:29:49 2025] [mollywoppersnyb.com] [error] [client 34.205.163.103:44013] [pid 713592] apache2_util.c(271): [client 34.205.163.103] ModSecurity: Warning. Matched phrase "etc/pulse" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: etc/pulse found within ARGS:path: /etc/pulse/client.conf.d"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQob7SnUVUFXTjqkq-aYcgAAAKo"] [Tue Nov 04 07:30:45 2025] [mollywoppersnyb.com] [error] [client 52.71.218.25:23056] [pid 713592] apache2_util.c(271): [client 52.71.218.25] ModSecurity: Warning. Matched phrase "sys/module" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: sys/module found within ARGS:path: /sys/module/tcp_hybla"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQocJSnUVUFXTjqkq-aY2QAAABg"] [Tue Nov 04 07:33:16 2025] [mollywoppersnyb.com] [error] [client 50.19.102.70:53870] [pid 713592] apache2_util.c(271): [client 50.19.102.70] ModSecurity: Warning. Matched phrase "var/log" at ARGS:fileloc. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: var/log found within ARGS:fileloc: /var/log/cgroup.log.1"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQocvCnUVUFXTjqkq-aaygAAAJk"] [Tue Nov 04 07:33:16 2025] [mollywoppersnyb.com] [error] [client 50.19.102.70:53870] [pid 713592] apache2_util.c(271): [client 50.19.102.70] ModSecurity: Warning. Matched phrase "var/log" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: var/log found within ARGS:path: /var/log"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQocvCnUVUFXTjqkq-aaygAAAJk"] [Tue Nov 04 07:34:27 2025] [mollywoppersnyb.com] [error] [client 98.83.177.42:39955] [pid 713592] apache2_util.c(271): [client 98.83.177.42] ModSecurity: Warning. Matched phrase "var/log" at ARGS:fileloc. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: var/log found within ARGS:fileloc: /var/log/user.log"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQodAynUVUFXTjqkq-abhAAAADg"] [Tue Nov 04 07:34:27 2025] [mollywoppersnyb.com] [error] [client 98.83.177.42:39955] [pid 713592] apache2_util.c(271): [client 98.83.177.42] ModSecurity: Warning. Matched phrase "var/log" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: var/log found within ARGS:path: /var/log"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQodAynUVUFXTjqkq-abhAAAADg"] [Tue Nov 04 07:35:11 2025] [mollywoppersnyb.com] [error] [client 34.193.2.57:38515] [pid 713592] apache2_util.c(271): [client 34.193.2.57] ModSecurity: Warning. Matched phrase "etc/default" at ARGS:fileloc. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: etc/default found within ARGS:fileloc: /etc/default/rsync"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQodLynUVUFXTjqkq-abrgAAAFs"] [Tue Nov 04 07:35:11 2025] [mollywoppersnyb.com] [error] [client 34.193.2.57:38515] [pid 713592] apache2_util.c(271): [client 34.193.2.57] ModSecurity: Warning. Matched phrase "etc/default" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: etc/default found within ARGS:path: /etc/default"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQodLynUVUFXTjqkq-abrgAAAFs"] [Tue Nov 04 07:37:51 2025] [mollywoppersnyb.com] [error] [client 54.156.124.2:38364] [pid 713592] apache2_util.c(271): [client 54.156.124.2] ModSecurity: Warning. Matched phrase "etc/logrotate.d" at ARGS:fileloc. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: etc/logrotate.d found within ARGS:fileloc: /etc/logrotate.d/rsyslog"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQodzynUVUFXTjqkq-acfAAAAG4"] [Tue Nov 04 07:37:51 2025] [mollywoppersnyb.com] [error] [client 54.156.124.2:38364] [pid 713592] apache2_util.c(271): [client 54.156.124.2] ModSecurity: Warning. Matched phrase "etc/logrotate.d" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: etc/logrotate.d found within ARGS:path: /etc/logrotate.d"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQodzynUVUFXTjqkq-acfAAAAG4"] [Tue Nov 04 07:40:04 2025] [mollywoppersnyb.com] [error] [client 18.233.24.238:29910] [pid 713592] apache2_util.c(271): [client 18.233.24.238] ModSecurity: Access denied with code 418 (phase 2). Pattern match "^[\\\\.|/]+(proc/|dev/shm/)" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/99_dreamhost_rules.conf"] [line "53"] [id "1990013"] [msg "Directory traversal"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQoeUynUVUFXTjqkq-ad3AAAAN4"] [Tue Nov 04 07:43:39 2025] [mollywoppersnyb.com] [error] [client 34.231.181.240:35066] [pid 713592] apache2_util.c(271): [client 34.231.181.240] ModSecurity: Warning. Matched phrase "etc/mysql" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: etc/mysql found within ARGS:path: /etc/mysql/mariadb.conf.d"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQofKynUVUFXTjqkq-ahgAAAALI"] [Tue Nov 04 07:46:35 2025] [mollywoppersnyb.com] [error] [client 3.225.9.97:49385] [pid 713592] apache2_util.c(271): [client 3.225.9.97] ModSecurity: Warning. Matched phrase "etc/kernel" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: etc/kernel found within ARGS:path: /etc/kernel/install.d"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQof2ynUVUFXTjqkq-alrAAAACI"] [Tue Nov 04 07:51:18 2025] [mollywoppersnyb.com] [error] [client 52.6.232.201:61875] [pid 713592] apache2_util.c(271): [client 52.6.232.201] ModSecurity: Access denied with code 418 (phase 2). Pattern match "^[\\\\.|/]+(proc/|dev/shm/)" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/99_dreamhost_rules.conf"] [line "53"] [id "1990013"] [msg "Directory traversal"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQog9inUVUFXTjqkq-angwAAADo"] [Tue Nov 04 07:52:44 2025] [mollywoppersnyb.com] [error] [client 18.205.127.11:14667] [pid 713592] apache2_util.c(271): [client 18.205.127.11] ModSecurity: Warning. Matched phrase "sys/bus" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: sys/bus found within ARGS:path: /sys/bus/clocksource"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQohTCnUVUFXTjqkq-apCgAAAE4"] [Tue Nov 04 07:53:26 2025] [mollywoppersnyb.com] [error] [client 35.170.205.140:5585] [pid 713592] apache2_util.c(271): [client 35.170.205.140] ModSecurity: Warning. Matched phrase "sys/class" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: sys/class found within ARGS:path: /sys/class/input"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQohdinUVUFXTjqkq-apwgAAALs"] [Tue Nov 04 07:53:51 2025] [mollywoppersnyb.com] [error] [client 18.207.79.144:46557] [pid 713592] apache2_util.c(271): [client 18.207.79.144] ModSecurity: Warning. Matched phrase "etc/init" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: etc/init found within ARGS:path: /etc/initramfs-tools/conf.d"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQohjynUVUFXTjqkq-aqIwAAALQ"] [Tue Nov 04 07:53:52 2025] [mollywoppersnyb.com] [error] [client 3.209.174.110:23595] [pid 713592] apache2_util.c(271): [client 3.209.174.110] ModSecurity: Warning. Matched phrase "sys/dev" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: sys/dev found within ARGS:path: /sys/devices/amd_iommu_2"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQohkCnUVUFXTjqkq-aqJwAAAGY"] [Tue Nov 04 07:54:33 2025] [mollywoppersnyb.com] [error] [client 52.5.232.250:39839] [pid 713592] apache2_util.c(271): [client 52.5.232.250] ModSecurity: Warning. Matched phrase "etc/php" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: etc/php found within ARGS:path: /etc/php71/conf.d"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQohuSnUVUFXTjqkq-aqxgAAAHk"] [Tue Nov 04 07:56:29 2025] [mollywoppersnyb.com] [error] [client 44.195.145.102:21012] [pid 713592] apache2_util.c(271): [client 44.195.145.102] ModSecurity: Warning. Matched phrase "etc/modsecurity" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: etc/modsecurity found within ARGS:path: /etc/modsecurity/crs"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQoiLSnUVUFXTjqkq-athQAAAJ0"] [Tue Nov 04 07:56:34 2025] [mollywoppersnyb.com] [error] [client 18.206.47.187:62391] [pid 713592] apache2_util.c(271): [client 18.206.47.187] ModSecurity: Warning. Matched phrase "sys/module" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: sys/module found within ARGS:path: /sys/module/intel_soc_dts_thermal"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQoiMinUVUFXTjqkq-atwQAAAIU"] [Tue Nov 04 07:56:55 2025] [mollywoppersnyb.com] [error] [client 35.173.38.202:59441] [pid 713592] apache2_util.c(271): [client 35.173.38.202] ModSecurity: Warning. Matched phrase "sys/class" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: sys/class found within ARGS:path: /sys/class/i2c-dev"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQoiRynUVUFXTjqkq-aurQAAALw"] [Tue Nov 04 07:58:06 2025] [mollywoppersnyb.com] [error] [client 18.215.77.19:43512] [pid 713592] apache2_util.c(271): [client 18.215.77.19] ModSecurity: Warning. Matched phrase "etc/php" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: etc/php found within ARGS:path: /etc/php82/conf.d"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQoijinUVUFXTjqkq-azFQAAAIw"] [Tue Nov 04 07:58:40 2025] [mollywoppersnyb.com] [error] [client 3.218.35.239:63940] [pid 713592] apache2_util.c(271): [client 3.218.35.239] ModSecurity: Warning. Matched phrase "sys/module" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: sys/module found within ARGS:path: /sys/module/pkcs7_test_key"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQoisCnUVUFXTjqkq-a1GAAAACs"] [Tue Nov 04 07:59:15 2025] [mollywoppersnyb.com] [error] [client 54.88.84.219:57587] [pid 713592] apache2_util.c(271): [client 54.88.84.219] ModSecurity: Warning. Matched phrase "sys/module" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: sys/module found within ARGS:path: /sys/module/hid_monterey"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQoi0ynUVUFXTjqkq-a3CgAAAIU"] [Tue Nov 04 07:59:42 2025] [mollywoppersnyb.com] [error] [client 44.213.202.136:41586] [pid 713592] apache2_util.c(271): [client 44.213.202.136] ModSecurity: Warning. Matched phrase "sys/module" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: sys/module found within ARGS:path: /sys/module/ip_set"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQoi7inUVUFXTjqkq-a3sAAAAAM"] [Tue Nov 04 08:00:12 2025] [mollywoppersnyb.com] [error] [client 100.28.204.82:2400] [pid 713592] apache2_util.c(271): [client 100.28.204.82] ModSecurity: Warning. Matched phrase "sys/module" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: sys/module found within ARGS:path: /sys/module/sunrpc"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQojDCnUVUFXTjqkq-a4YQAAADI"] [Tue Nov 04 08:00:16 2025] [mollywoppersnyb.com] [error] [client 52.200.58.199:27974] [pid 713592] apache2_util.c(271): [client 52.200.58.199] ModSecurity: Warning. Matched phrase "sys/module" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: sys/module found within ARGS:path: /sys/module/megaraid"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQojECnUVUFXTjqkq-a4awAAABc"] [Tue Nov 04 08:01:12 2025] [mollywoppersnyb.com] [error] [client 100.28.118.16:8522] [pid 713592] apache2_util.c(271): [client 100.28.118.16] ModSecurity: Warning. Matched phrase "etc/dkms" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: etc/dkms found within ARGS:path: /etc/dkms/template-dkms-mkbmdeb"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQojSCnUVUFXTjqkq-a5zgAAABg"] [Tue Nov 04 08:01:37 2025] [mollywoppersnyb.com] [error] [client 54.84.161.62:4137] [pid 713592] apache2_util.c(271): [client 54.84.161.62] ModSecurity: Access denied with code 418 (phase 2). Pattern match "^[\\\\.|/]+(proc/|dev/shm/)" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/99_dreamhost_rules.conf"] [line "53"] [id "1990013"] [msg "Directory traversal"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQojYSnUVUFXTjqkq-a6KwAAANo"] [Tue Nov 04 08:06:32 2025] [mollywoppersnyb.com] [error] [client 54.235.172.96:31705] [pid 713592] apache2_util.c(271): [client 54.235.172.96] ModSecurity: Access denied with code 418 (phase 2). Pattern match "^[\\\\.|/]+(proc/|dev/shm/)" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/99_dreamhost_rules.conf"] [line "53"] [id "1990013"] [msg "Directory traversal"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQokiCnUVUFXTjqkq-bA7QAAAHY"] [Tue Nov 04 08:10:55 2025] [mollywoppersnyb.com] [error] [client 107.23.62.75:65184] [pid 1282982] apache2_util.c(271): [client 107.23.62.75] ModSecurity: Warning. Matched phrase "etc/logrotate.d" at ARGS:fileloc. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: etc/logrotate.d found within ARGS:fileloc: /etc/logrotate.d/wtmp"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQoljxJVLo9V9rlY6BU4bQAATtU"] [Tue Nov 04 08:10:55 2025] [mollywoppersnyb.com] [error] [client 107.23.62.75:65184] [pid 1282982] apache2_util.c(271): [client 107.23.62.75] ModSecurity: Warning. Matched phrase "etc/logrotate.d" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: etc/logrotate.d found within ARGS:path: /etc/logrotate.d"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQoljxJVLo9V9rlY6BU4bQAATtU"] [Tue Nov 04 08:21:13 2025] [mollywoppersnyb.com] [error] [client 3.224.104.67:35687] [pid 1282982] apache2_util.c(271): [client 3.224.104.67] ModSecurity: Warning. Matched phrase "sys/module" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: sys/module found within ARGS:path: /sys/module/firmware_class"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQon-RJVLo9V9rlY6BVM7wAATi0"] [Tue Nov 04 08:23:33 2025] [mollywoppersnyb.com] [error] [client 18.210.58.238:61188] [pid 1282982] apache2_util.c(271): [client 18.210.58.238] ModSecurity: Warning. Matched phrase "sys/module" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: sys/module found within ARGS:path: /sys/module/i2c_isch"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQoohRJVLo9V9rlY6BVRZwAATiI"] [Tue Nov 04 08:24:08 2025] [mollywoppersnyb.com] [error] [client 52.205.113.104:30751] [pid 1282982] apache2_util.c(271): [client 52.205.113.104] ModSecurity: Warning. Matched phrase "sys/module" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: sys/module found within ARGS:path: /sys/module/btrfs"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQooqBJVLo9V9rlY6BVSbgAATlo"] [Tue Nov 04 08:25:55 2025] [mollywoppersnyb.com] [error] [client 3.222.85.38:18768] [pid 1282982] apache2_util.c(271): [client 3.222.85.38] ModSecurity: Warning. Matched phrase "sys/module" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: sys/module found within ARGS:path: /sys/module/amd64_agp"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQopExJVLo9V9rlY6BVWMAAATqM"] [Tue Nov 04 08:27:38 2025] [mollywoppersnyb.com] [error] [client 18.205.127.11:18910] [pid 1282982] apache2_util.c(271): [client 18.205.127.11] ModSecurity: Warning. Matched phrase "sys/bus" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: sys/bus found within ARGS:path: /sys/bus/nd"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQopehJVLo9V9rlY6BVZiwAATpg"] [Tue Nov 04 08:29:27 2025] [mollywoppersnyb.com] [error] [client 54.197.178.107:46856] [pid 1282982] apache2_util.c(271): [client 54.197.178.107] ModSecurity: Warning. Matched phrase "sys/kernel" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: sys/kernel found within ARGS:path: /sys/kernel/cgroup"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQop5xJVLo9V9rlY6BVcYQAATpw"] [Tue Nov 04 08:29:41 2025] [mollywoppersnyb.com] [error] [client 52.3.127.170:46077] [pid 1282982] apache2_util.c(271): [client 52.3.127.170] ModSecurity: Warning. Matched phrase "sys/kernel" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: sys/kernel found within ARGS:path: /sys/kernel/config"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQop9RJVLo9V9rlY6BVcxQAATv0"] [Tue Nov 04 08:29:50 2025] [mollywoppersnyb.com] [error] [client 50.19.102.70:34535] [pid 1282982] apache2_util.c(271): [client 50.19.102.70] ModSecurity: Warning. Matched phrase "sys/class" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: sys/class found within ARGS:path: /sys/class/leds"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQop_hJVLo9V9rlY6BVc5QAATmw"] [Tue Nov 04 08:32:38 2025] [mollywoppersnyb.com] [error] [client 18.235.81.246:43740] [pid 1282982] apache2_util.c(271): [client 18.235.81.246] ModSecurity: Warning. Matched phrase "etc/init" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: etc/init found within ARGS:path: /etc/initramfs-tools/hooks"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQoqphJVLo9V9rlY6BVe-QAATog"] [Tue Nov 04 08:32:49 2025] [mollywoppersnyb.com] [error] [client 3.209.174.110:29165] [pid 1282982] apache2_util.c(271): [client 3.209.174.110] ModSecurity: Access denied with code 418 (phase 2). Pattern match "^[\\\\.|/]+(proc/|dev/shm/)" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/99_dreamhost_rules.conf"] [line "53"] [id "1990013"] [msg "Directory traversal"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQoqsRJVLo9V9rlY6BVfHwAATiU"] [Tue Nov 04 08:34:33 2025] [mollywoppersnyb.com] [error] [client 52.45.15.233:26739] [pid 1282982] apache2_util.c(271): [client 52.45.15.233] ModSecurity: Access denied with code 418 (phase 2). Pattern match "^[\\\\.|/]+(proc/|dev/shm/)" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/99_dreamhost_rules.conf"] [line "53"] [id "1990013"] [msg "Directory traversal"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQorGRJVLo9V9rlY6BVgNAAATic"] [Tue Nov 04 08:37:01 2025] [mollywoppersnyb.com] [error] [client 34.196.6.199:10596] [pid 1282982] apache2_util.c(271): [client 34.196.6.199] ModSecurity: Warning. Matched phrase "etc/x11" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: etc/x11 found within ARGS:path: /etc/X11/Xreset.d"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQorrRJVLo9V9rlY6BVhQAAATjM"] [Tue Nov 04 08:38:01 2025] [mollywoppersnyb.com] [error] [client 54.84.161.62:5847] [pid 1282982] apache2_util.c(271): [client 54.84.161.62] ModSecurity: Access denied with code 418 (phase 2). Pattern match "^[\\\\.|/]+(proc/|dev/shm/)" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/99_dreamhost_rules.conf"] [line "53"] [id "1990013"] [msg "Directory traversal"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQor6RJVLo9V9rlY6BViCQAATjw"] [Tue Nov 04 08:39:22 2025] [mollywoppersnyb.com] [error] [client 3.221.222.168:17993] [pid 1282982] apache2_util.c(271): [client 3.221.222.168] ModSecurity: Warning. Matched phrase "etc/polkit-1" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: etc/polkit-1 found within ARGS:path: /etc/polkit-1/localauthority.conf.d"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQosOhJVLo9V9rlY6BVjOQAATkU"] [Tue Nov 04 08:40:05 2025] [mollywoppersnyb.com] [error] [client 98.82.107.102:1039] [pid 1282982] apache2_util.c(271): [client 98.82.107.102] ModSecurity: Warning. Matched phrase "etc/default" at ARGS:fileloc. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: etc/default found within ARGS:fileloc: /etc/default/ntpdate"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQosZRJVLo9V9rlY6BVjogAATlM"] [Tue Nov 04 08:40:05 2025] [mollywoppersnyb.com] [error] [client 98.82.107.102:1039] [pid 1282982] apache2_util.c(271): [client 98.82.107.102] ModSecurity: Warning. Matched phrase "etc/default" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: etc/default found within ARGS:path: /etc/default"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQosZRJVLo9V9rlY6BVjogAATlM"] [Tue Nov 04 08:41:13 2025] [mollywoppersnyb.com] [error] [client 54.84.161.62:22386] [pid 1282982] apache2_util.c(271): [client 54.84.161.62] ModSecurity: Access denied with code 418 (phase 2). Pattern match "^[\\\\.|/]+(proc/|dev/shm/)" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/99_dreamhost_rules.conf"] [line "53"] [id "1990013"] [msg "Directory traversal"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQosqRJVLo9V9rlY6BVkEQAATuo"] [Tue Nov 04 08:41:41 2025] [mollywoppersnyb.com] [error] [client 44.207.207.36:37236] [pid 1282982] apache2_util.c(271): [client 44.207.207.36] ModSecurity: Warning. Matched phrase "sys/module" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: sys/module found within ARGS:path: /sys/module/x86_pkg_temp_thermal"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQosxRJVLo9V9rlY6BVkUwAATmQ"] [Tue Nov 04 08:43:41 2025] [mollywoppersnyb.com] [error] [client 3.214.176.44:16737] [pid 1282982] apache2_util.c(271): [client 3.214.176.44] ModSecurity: Warning. Matched phrase "var/mail" at ARGS:fileloc. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: var/mail found within ARGS:fileloc: /var/mail/root"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQotPRJVLo9V9rlY6BVlYQAATpc"] [Tue Nov 04 08:43:41 2025] [mollywoppersnyb.com] [error] [client 3.214.176.44:16737] [pid 1282982] apache2_util.c(271): [client 3.214.176.44] ModSecurity: Warning. Matched phrase "var/mail" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: var/mail found within ARGS:path: /var/mail"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQotPRJVLo9V9rlY6BVlYQAATpc"] [Tue Nov 04 08:57:51 2025] [mollywoppersnyb.com] [error] [client 34.231.181.240:51203] [pid 1282982] apache2_util.c(271): [client 34.231.181.240] ModSecurity: Warning. Matched phrase "sys/module" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: sys/module found within ARGS:path: /sys/module/pata_atiixp"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQowjxJVLo9V9rlY6BVsJAAATmE"] [Tue Nov 04 08:58:21 2025] [mollywoppersnyb.com] [error] [client 44.205.180.155:4649] [pid 1282982] apache2_util.c(271): [client 44.205.180.155] ModSecurity: Warning. Matched phrase "sys/module" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: sys/module found within ARGS:path: /sys/module/ata_piix"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQowrRJVLo9V9rlY6BVsfAAATiw"] [Tue Nov 04 08:58:25 2025] [mollywoppersnyb.com] [error] [client 23.23.212.212:7874] [pid 1282982] apache2_util.c(271): [client 23.23.212.212] ModSecurity: Warning. Matched phrase "/tmp/" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: /tmp/ found within ARGS:path: /var/tmp/pagan_uploads"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQowsRJVLo9V9rlY6BVshQAATvA"] [Tue Nov 04 08:59:02 2025] [mollywoppersnyb.com] [error] [client 50.17.193.48:34914] [pid 1282982] apache2_util.c(271): [client 50.17.193.48] ModSecurity: Warning. Matched phrase "sys/class" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: sys/class found within ARGS:path: /sys/class/infiniband"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQow1hJVLo9V9rlY6BVsyQAATtk"] [Tue Nov 04 08:59:07 2025] [mollywoppersnyb.com] [error] [client 34.233.219.155:61687] [pid 1282982] apache2_util.c(271): [client 34.233.219.155] ModSecurity: Warning. Matched phrase "sys/module" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: sys/module found within ARGS:path: /sys/module/ohci_pci"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQow2xJVLo9V9rlY6BVszwAAToY"] [Tue Nov 04 08:59:25 2025] [mollywoppersnyb.com] [error] [client 34.203.111.15:55016] [pid 1282982] apache2_util.c(271): [client 34.203.111.15] ModSecurity: Access denied with code 418 (phase 2). Pattern match "^[\\\\.|/]+(proc/|dev/shm/)" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/99_dreamhost_rules.conf"] [line "53"] [id "1990013"] [msg "Directory traversal"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQow7RJVLo9V9rlY6BVs3wAATj0"] [Tue Nov 04 09:01:31 2025] [mollywoppersnyb.com] [error] [client 52.204.174.139:3737] [pid 1282982] apache2_util.c(271): [client 52.204.174.139] ModSecurity: Access denied with code 418 (phase 2). Pattern match "^[\\\\.|/]+(proc/|dev/shm/)" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/99_dreamhost_rules.conf"] [line "53"] [id "1990013"] [msg "Directory traversal"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQoxaxJVLo9V9rlY6BVt1AAATkc"] [Tue Nov 04 09:02:45 2025] [mollywoppersnyb.com] [error] [client 52.205.113.104:46545] [pid 1282982] apache2_util.c(271): [client 52.205.113.104] ModSecurity: Warning. Matched phrase "var/log" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: var/log found within ARGS:path: /var/log/nginx"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQoxtRJVLo9V9rlY6BVuRgAATsU"] [Tue Nov 04 09:04:38 2025] [mollywoppersnyb.com] [error] [client 3.94.199.128:10980] [pid 1282982] apache2_util.c(271): [client 3.94.199.128] ModSecurity: Warning. Matched phrase "sys/module" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: sys/module found within ARGS:path: /sys/module/bnxt_en"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQoyJhJVLo9V9rlY6BVvigAATtY"] [Tue Nov 04 09:04:42 2025] [mollywoppersnyb.com] [error] [client 52.200.58.199:1471] [pid 1282982] apache2_util.c(271): [client 52.200.58.199] ModSecurity: Warning. Matched phrase "sys/class" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: sys/class found within ARGS:path: /sys/class/tty"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQoyKhJVLo9V9rlY6BVvswAAToM"] [Tue Nov 04 09:06:37 2025] [mollywoppersnyb.com] [error] [client 98.82.40.168:59901] [pid 1282982] apache2_util.c(271): [client 98.82.40.168] ModSecurity: Access denied with code 418 (phase 2). Pattern match "^[\\\\.|/]+(proc/|dev/shm/)" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/99_dreamhost_rules.conf"] [line "53"] [id "1990013"] [msg "Directory traversal"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQoynRJVLo9V9rlY6BVyDAAATik"] [Tue Nov 04 09:11:53 2025] [mollywoppersnyb.com] [error] [client 54.91.122.193:58118] [pid 1282982] apache2_util.c(271): [client 54.91.122.193] ModSecurity: Warning. Matched phrase "var/log" at ARGS:fileloc. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: var/log found within ARGS:fileloc: /var/log/user.log.1"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQoz2RJVLo9V9rlY6BV1LQAATuI"] [Tue Nov 04 09:11:53 2025] [mollywoppersnyb.com] [error] [client 54.91.122.193:58118] [pid 1282982] apache2_util.c(271): [client 54.91.122.193] ModSecurity: Warning. Matched phrase "var/log" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: var/log found within ARGS:path: /var/log"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQoz2RJVLo9V9rlY6BV1LQAATuI"] [Tue Nov 04 09:17:13 2025] [mollywoppersnyb.com] [error] [client 44.221.105.234:19312] [pid 1282982] apache2_util.c(271): [client 44.221.105.234] ModSecurity: Warning. Matched phrase "etc/logrotate.d" at ARGS:fileloc. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: etc/logrotate.d found within ARGS:fileloc: /etc/logrotate.d/proftpd-core"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQo1GBJVLo9V9rlY6BV62AAATtg"] [Tue Nov 04 09:17:13 2025] [mollywoppersnyb.com] [error] [client 44.221.105.234:19312] [pid 1282982] apache2_util.c(271): [client 44.221.105.234] ModSecurity: Warning. Matched phrase "etc/logrotate.d" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: etc/logrotate.d found within ARGS:path: /etc/logrotate.d"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQo1GBJVLo9V9rlY6BV62AAATtg"] [Tue Nov 04 09:20:05 2025] [mollywoppersnyb.com] [error] [client 52.205.113.104:46660] [pid 1282982] apache2_util.c(271): [client 52.205.113.104] ModSecurity: Warning. Matched phrase "etc/logrotate.d" at ARGS:fileloc. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: etc/logrotate.d found within ARGS:fileloc: /etc/logrotate.d/apt"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQo1xRJVLo9V9rlY6BV9fQAATjQ"] [Tue Nov 04 09:20:05 2025] [mollywoppersnyb.com] [error] [client 52.205.113.104:46660] [pid 1282982] apache2_util.c(271): [client 52.205.113.104] ModSecurity: Warning. Matched phrase "etc/logrotate.d" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: etc/logrotate.d found within ARGS:path: /etc/logrotate.d"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQo1xRJVLo9V9rlY6BV9fQAATjQ"] [Tue Nov 04 09:20:06 2025] [mollywoppersnyb.com] [error] [client 54.156.248.117:19731] [pid 1282982] apache2_util.c(271): [client 54.156.248.117] ModSecurity: Warning. Matched phrase "etc/logrotate.d" at ARGS:fileloc. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: etc/logrotate.d found within ARGS:fileloc: /etc/logrotate.d/aptitude"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQo1xhJVLo9V9rlY6BV9fgAATko"] [Tue Nov 04 09:20:06 2025] [mollywoppersnyb.com] [error] [client 54.156.248.117:19731] [pid 1282982] apache2_util.c(271): [client 54.156.248.117] ModSecurity: Warning. Matched phrase "etc/logrotate.d" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: etc/logrotate.d found within ARGS:path: /etc/logrotate.d"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQo1xhJVLo9V9rlY6BV9fgAATko"] [Tue Nov 04 09:21:05 2025] [mollywoppersnyb.com] [error] [client 3.210.29.96:20265] [pid 1282982] apache2_util.c(271): [client 3.210.29.96] ModSecurity: Warning. Matched phrase "sys/module" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: sys/module found within ARGS:path: /sys/module/e1000"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQo2ARJVLo9V9rlY6BV-eQAATps"] [Tue Nov 04 09:21:45 2025] [mollywoppersnyb.com] [error] [client 98.82.63.147:3765] [pid 1282982] apache2_util.c(271): [client 98.82.63.147] ModSecurity: Warning. Matched phrase "sys/class" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: sys/class found within ARGS:path: /sys/class/rtc"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQo2KRJVLo9V9rlY6BV_aAAATtk"] [Tue Nov 04 09:22:05 2025] [mollywoppersnyb.com] [error] [client 100.24.167.60:63501] [pid 1282982] apache2_util.c(271): [client 100.24.167.60] ModSecurity: Warning. Matched phrase "sys/class" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: sys/class found within ARGS:path: /sys/class/power_supply"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQo2PRJVLo9V9rlY6BV_wQAATlQ"] [Tue Nov 04 09:22:38 2025] [mollywoppersnyb.com] [error] [client 44.223.232.55:7129] [pid 1282982] apache2_util.c(271): [client 44.223.232.55] ModSecurity: Warning. Matched phrase "sys/module" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: sys/module found within ARGS:path: /sys/module/workqueue"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQo2XhJVLo9V9rlY6BWAPAAATj0"] [Tue Nov 04 09:23:53 2025] [mollywoppersnyb.com] [error] [client 54.159.98.248:40831] [pid 1282982] apache2_util.c(271): [client 54.159.98.248] ModSecurity: Warning. Matched phrase "var/spool" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: var/spool found within ARGS:path: /var/spool/rsyslog"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQo2qRJVLo9V9rlY6BWBSwAATsM"] [Tue Nov 04 09:28:07 2025] [mollywoppersnyb.com] [error] [client 44.218.170.184:46296] [pid 1282982] apache2_util.c(271): [client 44.218.170.184] ModSecurity: Warning. Matched phrase "sys/module" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: sys/module found within ARGS:path: /sys/module/ehci_pci"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQo3pxJVLo9V9rlY6BWF6gAAToo"] [Tue Nov 04 09:34:13 2025] [mollywoppersnyb.com] [error] [client 54.243.63.52:58406] [pid 1282982] apache2_util.c(271): [client 54.243.63.52] ModSecurity: Warning. Matched phrase "sys/dev" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: sys/dev found within ARGS:path: /sys/devices/amd_iommu_0"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQo5FRJVLo9V9rlY6BWKhAAATrg"] [Tue Nov 04 09:34:35 2025] [mollywoppersnyb.com] [error] [client 35.169.102.85:29783] [pid 1282982] apache2_util.c(271): [client 35.169.102.85] ModSecurity: Warning. Matched phrase "etc/vmware" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: etc/vmware found within ARGS:path: /etc/vmware-tools/vgauth"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQo5KxJVLo9V9rlY6BWK6QAATl0"] [Tue Nov 04 09:34:42 2025] [mollywoppersnyb.com] [error] [client 44.195.145.102:43958] [pid 1282982] apache2_util.c(271): [client 44.195.145.102] ModSecurity: Warning. Matched phrase "sys/class" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: sys/class found within ARGS:path: /sys/class/sas_end_device"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQo5MhJVLo9V9rlY6BWLBwAATqc"] [Tue Nov 04 09:36:46 2025] [mollywoppersnyb.com] [error] [client 52.204.174.139:36557] [pid 1282982] apache2_util.c(271): [client 52.204.174.139] ModSecurity: Warning. Matched phrase "sys/module" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: sys/module found within ARGS:path: /sys/module/dw_dmac_pci"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQo5rhJVLo9V9rlY6BWOIAAATig"] [Tue Nov 04 09:36:53 2025] [mollywoppersnyb.com] [error] [client 54.157.99.244:53301] [pid 1282982] apache2_util.c(271): [client 54.157.99.244] ModSecurity: Access denied with code 418 (phase 2). Pattern match "^[\\\\.|/]+(proc/|dev/shm/)" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/99_dreamhost_rules.conf"] [line "53"] [id "1990013"] [msg "Directory traversal"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQo5tRJVLo9V9rlY6BWORwAATjA"] [Tue Nov 04 09:37:57 2025] [mollywoppersnyb.com] [error] [client 43.166.128.187:50310] [pid 1282982] apache2_util.c(271): [client 43.166.128.187] ModSecurity: Warning. Pattern match "\\\\b(?:keep-alive|close),\\\\s?(?:keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "352"] [id "920210"] [msg "Multiple/Conflicting Connection Header Data Found"] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [hostname "www.mollywoppersnyb.com"] [uri "/"] [unique_id "aQo59RJVLo9V9rlY6BWPtwAATnA"] [Tue Nov 04 09:37:59 2025] [mollywoppersnyb.com] [error] [client 43.166.128.187:50680] [pid 1282982] apache2_util.c(271): [client 43.166.128.187] ModSecurity: Warning. Pattern match "\\\\b(?:keep-alive|close),\\\\s?(?:keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "352"] [id "920210"] [msg "Multiple/Conflicting Connection Header Data Found"] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [hostname "mollywoppersnyb.com"] [uri "/"] [unique_id "aQo59xJVLo9V9rlY6BWPxwAATnc"] [Tue Nov 04 09:38:58 2025] [mollywoppersnyb.com] [error] [client 98.84.184.80:16298] [pid 1282982] apache2_util.c(271): [client 98.84.184.80] ModSecurity: Warning. Matched phrase "/tmp/" at ARGS:fileloc. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: /tmp/ found within ARGS:fileloc: /var/tmp/.created"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQo6MhJVLo9V9rlY6BWRkwAATrk"] [Tue Nov 04 09:51:49 2025] [mollywoppersnyb.com] [error] [client 43.165.65.75:55812] [pid 1282982] apache2_util.c(271): [client 43.165.65.75] ModSecurity: Warning. Pattern match "\\\\b(?:keep-alive|close),\\\\s?(?:keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "352"] [id "920210"] [msg "Multiple/Conflicting Connection Header Data Found"] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [hostname "mollywoppersnyb.com"] [uri "/"] [unique_id "aQo9NRJVLo9V9rlY6BWlHQAATts"] [Tue Nov 04 09:52:37 2025] [mollywoppersnyb.com] [error] [client 34.206.212.24:30331] [pid 1282982] apache2_util.c(271): [client 34.206.212.24] ModSecurity: Warning. Matched phrase "sys/kernel" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: sys/kernel found within ARGS:path: /sys/kernel/security"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQo9ZRJVLo9V9rlY6BWl6QAATsk"] [Tue Nov 04 09:52:53 2025] [mollywoppersnyb.com] [error] [client 54.85.126.86:21992] [pid 1282982] apache2_util.c(271): [client 54.85.126.86] ModSecurity: Warning. Matched phrase "sys/bus" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: sys/bus found within ARGS:path: /sys/bus/hid"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQo9dRJVLo9V9rlY6BWmFQAATv4"] [Tue Nov 04 09:53:09 2025] [mollywoppersnyb.com] [error] [client 98.83.226.125:46491] [pid 1282982] apache2_util.c(271): [client 98.83.226.125] ModSecurity: Warning. Matched phrase "sys/module" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: sys/module found within ARGS:path: /sys/module/usb_storage"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQo9hRJVLo9V9rlY6BWmUgAATtM"] [Tue Nov 04 09:55:48 2025] [mollywoppersnyb.com] [error] [client 54.85.7.119:5278] [pid 1282982] apache2_util.c(271): [client 54.85.7.119] ModSecurity: Access denied with code 418 (phase 2). Pattern match "^[\\\\.|/]+(proc/|dev/shm/)" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/99_dreamhost_rules.conf"] [line "53"] [id "1990013"] [msg "Directory traversal"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQo-JBJVLo9V9rlY6BWp4wAATms"] [Tue Nov 04 09:56:33 2025] [mollywoppersnyb.com] [error] [client 3.216.13.10:2203] [pid 1282982] apache2_util.c(271): [client 3.216.13.10] ModSecurity: Access denied with code 418 (phase 2). Pattern match "^[\\\\.|/]+(proc/|dev/shm/)" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/99_dreamhost_rules.conf"] [line "53"] [id "1990013"] [msg "Directory traversal"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQo-URJVLo9V9rlY6BWqugAATsI"] [Tue Nov 04 09:57:34 2025] [mollywoppersnyb.com] [error] [client 3.219.80.71:30083] [pid 1282982] apache2_util.c(271): [client 3.219.80.71] ModSecurity: Warning. Matched phrase "sys/dev" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: sys/dev found within ARGS:path: /sys/devices/uprobe"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQo-jhJVLo9V9rlY6BWr9wAATog"] [Tue Nov 04 09:58:14 2025] [mollywoppersnyb.com] [error] [client 3.229.95.193:54770] [pid 1282982] apache2_util.c(271): [client 3.229.95.193] ModSecurity: Warning. Matched phrase "sys/class" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: sys/class found within ARGS:path: /sys/class/devlink"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQo-thJVLo9V9rlY6BWsqgAATuY"] [Tue Nov 04 09:58:18 2025] [mollywoppersnyb.com] [error] [client 3.224.205.25:38270] [pid 1282982] apache2_util.c(271): [client 3.224.205.25] ModSecurity: Warning. Matched phrase "sys/class" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: sys/class found within ARGS:path: /sys/class/ata_device"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQo-uhJVLo9V9rlY6BWsvAAATiM"] [Tue Nov 04 10:00:02 2025] [mollywoppersnyb.com] [error] [client 54.221.203.24:46720] [pid 1282982] apache2_util.c(271): [client 54.221.203.24] ModSecurity: Warning. Matched phrase "sys/module" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: sys/module found within ARGS:path: /sys/module/rcupdate"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQo_IhJVLo9V9rlY6BWuxAAATk8"] [Tue Nov 04 10:00:21 2025] [mollywoppersnyb.com] [error] [client 52.6.232.201:17668] [pid 1282982] apache2_util.c(271): [client 52.6.232.201] ModSecurity: Warning. Matched phrase "sys/module" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: sys/module found within ARGS:path: /sys/module/dm_bufio"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQo_NRJVLo9V9rlY6BWvKgAATq0"] [Tue Nov 04 10:00:35 2025] [mollywoppersnyb.com] [error] [client 54.197.114.76:55538] [pid 1282982] apache2_util.c(271): [client 54.197.114.76] ModSecurity: Warning. Matched phrase "sys/module" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: sys/module found within ARGS:path: /sys/module/intel_agp"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQo_QxJVLo9V9rlY6BWvhwAATn0"] [Tue Nov 04 10:01:48 2025] [mollywoppersnyb.com] [error] [client 98.83.177.42:51201] [pid 1282982] apache2_util.c(271): [client 98.83.177.42] ModSecurity: Warning. Matched phrase "sys/class" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: sys/class found within ARGS:path: /sys/class/sas_expander"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQo_jBJVLo9V9rlY6BWxqgAATs0"] [Tue Nov 04 10:02:53 2025] [mollywoppersnyb.com] [error] [client 43.157.175.122:45872] [pid 1282982] apache2_util.c(271): [client 43.157.175.122] ModSecurity: Warning. Pattern match "\\\\b(?:keep-alive|close),\\\\s?(?:keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "352"] [id "920210"] [msg "Multiple/Conflicting Connection Header Data Found"] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [hostname "mollywoppersnyb.com"] [uri "/"] [unique_id "aQo_zRJVLo9V9rlY6BWyqQAATtk"] [Tue Nov 04 10:03:53 2025] [mollywoppersnyb.com] [error] [client 3.232.82.72:1739] [pid 1282982] apache2_util.c(271): [client 3.232.82.72] ModSecurity: Access denied with code 418 (phase 2). Pattern match "^[\\\\.|/]+(proc/|dev/shm/)" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/99_dreamhost_rules.conf"] [line "53"] [id "1990013"] [msg "Directory traversal"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQpACRJVLo9V9rlY6BWzNAAATok"] [Tue Nov 04 10:11:33 2025] [mollywoppersnyb.com] [error] [client 52.70.209.13:54512] [pid 1968239] apache2_util.c(271): [client 52.70.209.13] ModSecurity: Warning. Matched phrase "sys/module" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: sys/module found within ARGS:path: /sys/module/mpt3sas"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQpB1QaNjVe36UHwl_fn4gAAAHU"] [Tue Nov 04 10:12:06 2025] [mollywoppersnyb.com] [error] [client 43.159.138.217:55358] [pid 1968239] apache2_util.c(271): [client 43.159.138.217] ModSecurity: Warning. Pattern match "\\\\b(?:keep-alive|close),\\\\s?(?:keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "352"] [id "920210"] [msg "Multiple/Conflicting Connection Header Data Found"] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [hostname "mollywoppersnyb.com"] [uri "/"] [unique_id "aQpB9QaNjVe36UHwl_foOQAAABM"] [Tue Nov 04 10:13:33 2025] [mollywoppersnyb.com] [error] [client 98.82.39.241:12154] [pid 1968239] apache2_util.c(271): [client 98.82.39.241] ModSecurity: Warning. Matched phrase "var/log" at ARGS:fileloc. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: var/log found within ARGS:fileloc: /var/log/btmp"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQpCTQaNjVe36UHwl_fpJQAAALc"] [Tue Nov 04 10:13:33 2025] [mollywoppersnyb.com] [error] [client 98.82.39.241:12154] [pid 1968239] apache2_util.c(271): [client 98.82.39.241] ModSecurity: Warning. Matched phrase "var/log" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: var/log found within ARGS:path: /var/log"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQpCTQaNjVe36UHwl_fpJQAAALc"] [Tue Nov 04 10:14:14 2025] [mollywoppersnyb.com] [error] [client 170.106.72.178:43020] [pid 1968239] apache2_util.c(271): [client 170.106.72.178] ModSecurity: Warning. Pattern match "\\\\b(?:keep-alive|close),\\\\s?(?:keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "352"] [id "920210"] [msg "Multiple/Conflicting Connection Header Data Found"] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [hostname "mollywoppersnyb.com"] [uri "/"] [unique_id "aQpCdgaNjVe36UHwl_fpxgAAANw"] [Tue Nov 04 10:18:00 2025] [mollywoppersnyb.com] [error] [client 44.223.115.10:37223] [pid 1968239] apache2_util.c(271): [client 44.223.115.10] ModSecurity: Warning. Matched phrase "etc/logrotate.d" at ARGS:fileloc. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: etc/logrotate.d found within ARGS:fileloc: /etc/logrotate.d/postfix"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQpDWAaNjVe36UHwl_fsWgAAALY"] [Tue Nov 04 10:18:00 2025] [mollywoppersnyb.com] [error] [client 44.223.115.10:37223] [pid 1968239] apache2_util.c(271): [client 44.223.115.10] ModSecurity: Warning. Matched phrase "etc/logrotate.d" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: etc/logrotate.d found within ARGS:path: /etc/logrotate.d"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQpDWAaNjVe36UHwl_fsWgAAALY"] [Tue Nov 04 10:23:16 2025] [mollywoppersnyb.com] [error] [client 129.226.213.145:59730] [pid 1968239] apache2_util.c(271): [client 129.226.213.145] ModSecurity: Warning. Pattern match "\\\\b(?:keep-alive|close),\\\\s?(?:keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "352"] [id "920210"] [msg "Multiple/Conflicting Connection Header Data Found"] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [hostname "mollywoppersnyb.com"] [uri "/"] [unique_id "aQpElAaNjVe36UHwl_fwXgAAAKI"] [Tue Nov 04 10:23:57 2025] [mollywoppersnyb.com] [error] [client 34.204.150.196:3549] [pid 1968239] apache2_util.c(271): [client 34.204.150.196] ModSecurity: Warning. Matched phrase "var/log" at ARGS:fileloc. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: var/log found within ARGS:fileloc: /var/log/ftp.log.1"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQpEvQaNjVe36UHwl_fwxgAAAEI"] [Tue Nov 04 10:23:57 2025] [mollywoppersnyb.com] [error] [client 34.204.150.196:3549] [pid 1968239] apache2_util.c(271): [client 34.204.150.196] ModSecurity: Warning. Matched phrase "var/log" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: var/log found within ARGS:path: /var/log"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQpEvQaNjVe36UHwl_fwxgAAAEI"] [Tue Nov 04 10:26:58 2025] [mollywoppersnyb.com] [error] [client 35.169.102.85:56779] [pid 1968239] apache2_util.c(271): [client 35.169.102.85] ModSecurity: Warning. Matched phrase "etc/emacs" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: etc/emacs found within ARGS:path: /etc/emacs/site-start.d"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQpFcgaNjVe36UHwl_fycAAAAIg"] [Tue Nov 04 10:30:21 2025] [mollywoppersnyb.com] [error] [client 34.197.28.78:19809] [pid 1968239] apache2_util.c(271): [client 34.197.28.78] ModSecurity: Warning. Matched phrase "sys/bus" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: sys/bus found within ARGS:path: /sys/bus/platform"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQpGPQaNjVe36UHwl_f1aQAAAGU"] [Tue Nov 04 10:31:31 2025] [mollywoppersnyb.com] [error] [client 18.214.238.178:54275] [pid 1968239] apache2_util.c(271): [client 18.214.238.178] ModSecurity: Warning. Matched phrase "usr/share/adduser" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: usr/share/adduser found within ARGS:path: /usr/share/adduser"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQpGgwaNjVe36UHwl_f2MQAAANU"] [Tue Nov 04 10:33:26 2025] [mollywoppersnyb.com] [error] [client 54.221.203.24:61783] [pid 1968239] apache2_util.c(271): [client 54.221.203.24] ModSecurity: Warning. Matched phrase "etc/apparmor" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: etc/apparmor found within ARGS:path: /etc/apparmor.d/abi"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQpG9gaNjVe36UHwl_f3aAAAACM"] [Tue Nov 04 10:34:03 2025] [mollywoppersnyb.com] [error] [client 44.213.202.136:21501] [pid 1968239] apache2_util.c(271): [client 44.213.202.136] ModSecurity: Access denied with code 418 (phase 2). Pattern match "^[\\\\.|/]+(proc/|dev/shm/)" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/99_dreamhost_rules.conf"] [line "53"] [id "1990013"] [msg "Directory traversal"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQpHGwaNjVe36UHwl_f3zQAAAG4"] [Tue Nov 04 10:36:05 2025] [mollywoppersnyb.com] [error] [client 34.234.197.175:60328] [pid 1968239] apache2_util.c(271): [client 34.234.197.175] ModSecurity: Warning. Matched phrase "sys/module" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: sys/module found within ARGS:path: /sys/module/sysrq"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQpHlQaNjVe36UHwl_f6wAAAAAo"] [Tue Nov 04 10:36:34 2025] [mollywoppersnyb.com] [error] [client 3.230.69.161:33200] [pid 1968239] apache2_util.c(271): [client 3.230.69.161] ModSecurity: Warning. Matched phrase "sys/bus" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: sys/bus found within ARGS:path: /sys/bus/dax"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQpHsgaNjVe36UHwl_f7bQAAAEk"] [Tue Nov 04 10:37:22 2025] [mollywoppersnyb.com] [error] [client 98.82.40.168:38722] [pid 1968239] apache2_util.c(271): [client 98.82.40.168] ModSecurity: Warning. Matched phrase "sys/module" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: sys/module found within ARGS:path: /sys/module/iavf"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQpH4gaNjVe36UHwl_f76gAAADE"] [Tue Nov 04 10:37:30 2025] [mollywoppersnyb.com] [error] [client 52.203.65.83:63578] [pid 1968239] apache2_util.c(271): [client 52.203.65.83] ModSecurity: Warning. Matched phrase "sys/module" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: sys/module found within ARGS:path: /sys/module/spurious"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQpH6gaNjVe36UHwl_f8EwAAAME"] [Tue Nov 04 10:38:09 2025] [mollywoppersnyb.com] [error] [client 52.0.41.164:50389] [pid 1968239] apache2_util.c(271): [client 52.0.41.164] ModSecurity: Access denied with code 418 (phase 2). Pattern match "^[\\\\.|/]+(proc/|dev/shm/)" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/99_dreamhost_rules.conf"] [line "53"] [id "1990013"] [msg "Directory traversal"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQpIEQaNjVe36UHwl_f89QAAAKs"] [Tue Nov 04 10:40:33 2025] [mollywoppersnyb.com] [error] [client 52.1.106.130:15734] [pid 1968239] apache2_util.c(271): [client 52.1.106.130] ModSecurity: Warning. Matched phrase "etc/php" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: etc/php found within ARGS:path: /etc/php74/conf.d"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQpIoQaNjVe36UHwl_f_sgAAAIw"] [Tue Nov 04 10:40:59 2025] [mollywoppersnyb.com] [error] [client 43.167.245.18:58214] [pid 1968239] apache2_util.c(271): [client 43.167.245.18] ModSecurity: Warning. Pattern match "\\\\b(?:keep-alive|close),\\\\s?(?:keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "352"] [id "920210"] [msg "Multiple/Conflicting Connection Header Data Found"] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [hostname "mollywoppersnyb.com"] [uri "/"] [unique_id "aQpIuwaNjVe36UHwl_f_9AAAADg"] [Tue Nov 04 10:42:29 2025] [mollywoppersnyb.com] [error] [client 54.235.125.129:52315] [pid 1968239] apache2_util.c(271): [client 54.235.125.129] ModSecurity: Warning. Matched phrase "var/log" at ARGS:fileloc. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: var/log found within ARGS:fileloc: /var/log/mail.log"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQpJFQaNjVe36UHwl_cArQAAAGI"] [Tue Nov 04 10:42:29 2025] [mollywoppersnyb.com] [error] [client 54.235.125.129:52315] [pid 1968239] apache2_util.c(271): [client 54.235.125.129] ModSecurity: Warning. Matched phrase "var/log" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: var/log found within ARGS:path: /var/log"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQpJFQaNjVe36UHwl_cArQAAAGI"] [Tue Nov 04 10:52:05 2025] [mollywoppersnyb.com] [error] [client 52.54.249.218:27712] [pid 1968239] apache2_util.c(271): [client 52.54.249.218] ModSecurity: Warning. Matched phrase "etc/apport" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: etc/apport found within ARGS:path: /etc/apport/blacklist.d"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQpLVQaNjVe36UHwl_cGuwAAAIY"] [Tue Nov 04 10:52:16 2025] [mollywoppersnyb.com] [error] [client 52.1.106.130:33599] [pid 1968239] apache2_util.c(271): [client 52.1.106.130] ModSecurity: Warning. Matched phrase "etc/init" at ARGS:fileloc. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: etc/init found within ARGS:fileloc: /etc/init.d/open-iscsi"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQpLYAaNjVe36UHwl_cG2QAAAFw"] [Tue Nov 04 10:52:16 2025] [mollywoppersnyb.com] [error] [client 52.1.106.130:33599] [pid 1968239] apache2_util.c(271): [client 52.1.106.130] ModSecurity: Warning. Matched phrase "etc/init" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: etc/init found within ARGS:path: /etc/init.d"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQpLYAaNjVe36UHwl_cG2QAAAFw"] [Tue Nov 04 10:53:42 2025] [mollywoppersnyb.com] [error] [client 52.44.229.124:63314] [pid 1968239] apache2_util.c(271): [client 52.44.229.124] ModSecurity: Warning. Matched phrase "etc/nginx/" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: etc/nginx/ found within ARGS:path: /etc/nginx/conf.d"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQpLtgaNjVe36UHwl_cJIQAAAEo"] [Tue Nov 04 10:54:12 2025] [mollywoppersnyb.com] [error] [client 43.153.96.233:47286] [pid 1968239] apache2_util.c(271): [client 43.153.96.233] ModSecurity: Warning. Pattern match "\\\\b(?:keep-alive|close),\\\\s?(?:keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "352"] [id "920210"] [msg "Multiple/Conflicting Connection Header Data Found"] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [hostname "mollywoppersnyb.com"] [uri "/"] [unique_id "aQpL1AaNjVe36UHwl_cJTwAAAJg"] [Tue Nov 04 10:54:45 2025] [mollywoppersnyb.com] [error] [client 184.72.84.154:16166] [pid 1968239] apache2_util.c(271): [client 184.72.84.154] ModSecurity: Warning. Matched phrase "sys/module" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: sys/module found within ARGS:path: /sys/module/e100"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQpL9QaNjVe36UHwl_cJqQAAAJk"] [Tue Nov 04 10:55:18 2025] [mollywoppersnyb.com] [error] [client 52.70.138.176:21215] [pid 1968239] apache2_util.c(271): [client 52.70.138.176] ModSecurity: Warning. Matched phrase "etc/x11" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: etc/x11 found within ARGS:path: /etc/X11/Xresources"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQpMFgaNjVe36UHwl_cJ_wAAACo"] [Tue Nov 04 10:55:25 2025] [mollywoppersnyb.com] [error] [client 54.92.171.106:53542] [pid 1968239] apache2_util.c(271): [client 54.92.171.106] ModSecurity: Access denied with code 418 (phase 2). Pattern match "^[\\\\.|/]+(proc/|dev/shm/)" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/99_dreamhost_rules.conf"] [line "53"] [id "1990013"] [msg "Directory traversal"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQpMHQaNjVe36UHwl_cKEQAAAIo"] [Tue Nov 04 10:56:21 2025] [mollywoppersnyb.com] [error] [client 98.82.63.147:30418] [pid 1968239] apache2_util.c(271): [client 98.82.63.147] ModSecurity: Warning. Matched phrase "sys/module" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: sys/module found within ARGS:path: /sys/module/igbvf"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQpMVQaNjVe36UHwl_cKtQAAAK0"] [Tue Nov 04 10:59:22 2025] [mollywoppersnyb.com] [error] [client 34.194.226.74:19591] [pid 1968239] apache2_util.c(271): [client 34.194.226.74] ModSecurity: Warning. Matched phrase "sys/module" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: sys/module found within ARGS:path: /sys/module/mlx4_core"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQpNCgaNjVe36UHwl_cL7QAAAMg"] [Tue Nov 04 10:59:47 2025] [mollywoppersnyb.com] [error] [client 44.223.116.149:11674] [pid 1968239] apache2_util.c(271): [client 44.223.116.149] ModSecurity: Warning. Matched phrase "sys/class" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: sys/class found within ARGS:path: /sys/class/scsi_host"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQpNIwaNjVe36UHwl_cMXgAAAFE"] [Tue Nov 04 11:00:41 2025] [mollywoppersnyb.com] [error] [client 54.147.182.90:29063] [pid 1968239] apache2_util.c(271): [client 54.147.182.90] ModSecurity: Warning. Matched phrase "sys/dev" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: sys/dev found within ARGS:path: /sys/devices/platform"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQpNWQaNjVe36UHwl_cNRAAAAJI"] [Tue Nov 04 11:02:09 2025] [mollywoppersnyb.com] [error] [client 50.16.72.185:48698] [pid 1968239] apache2_util.c(271): [client 50.16.72.185] ModSecurity: Warning. Matched phrase "etc/network" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: etc/network found within ARGS:path: /etc/network/if-post-down.d"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQpNsQaNjVe36UHwl_cO2wAAAKY"] [Tue Nov 04 11:02:26 2025] [mollywoppersnyb.com] [error] [client 44.223.115.10:15126] [pid 1968239] apache2_util.c(271): [client 44.223.115.10] ModSecurity: Warning. Matched phrase "sys/module" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: sys/module found within ARGS:path: /sys/module/arcmsr"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQpNwgaNjVe36UHwl_cPDQAAAMw"] [Tue Nov 04 11:02:38 2025] [mollywoppersnyb.com] [error] [client 3.209.174.110:37769] [pid 1968239] apache2_util.c(271): [client 3.209.174.110] ModSecurity: Warning. Matched phrase "sys/module" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: sys/module found within ARGS:path: /sys/module/ib_core"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQpNzgaNjVe36UHwl_cPKwAAAHk"] [Tue Nov 04 11:03:05 2025] [mollywoppersnyb.com] [error] [client 52.71.216.196:36440] [pid 1968239] apache2_util.c(271): [client 52.71.216.196] ModSecurity: Warning. Matched phrase "etc/network" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: etc/network found within ARGS:path: /etc/networkd-dispatcher/off.d"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQpN6QaNjVe36UHwl_cPhwAAALw"] [Tue Nov 04 11:03:28 2025] [mollywoppersnyb.com] [error] [client 170.106.161.78:58842] [pid 1968239] apache2_util.c(271): [client 170.106.161.78] ModSecurity: Warning. Pattern match "\\\\b(?:keep-alive|close),\\\\s?(?:keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "352"] [id "920210"] [msg "Multiple/Conflicting Connection Header Data Found"] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [hostname "mollywoppersnyb.com"] [uri "/"] [unique_id "aQpOAAaNjVe36UHwl_cPzAAAAAI"] [Tue Nov 04 11:03:29 2025] [mollywoppersnyb.com] [error] [client 34.197.28.78:14669] [pid 1968239] apache2_util.c(271): [client 34.197.28.78] ModSecurity: Warning. Matched phrase "etc/skel" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: etc/skel found within ARGS:path: /dh/etc/skel"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQpOAQaNjVe36UHwl_cPzgAAADs"] [Tue Nov 04 11:04:34 2025] [mollywoppersnyb.com] [error] [client 54.145.82.217:35760] [pid 1968239] apache2_util.c(271): [client 54.145.82.217] ModSecurity: Warning. Matched phrase "sys/dev" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: sys/dev found within ARGS:path: /sys/devices/tracepoint"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQpOQgaNjVe36UHwl_cQhQAAAEs"] [Tue Nov 04 11:05:01 2025] [mollywoppersnyb.com] [error] [client 184.72.84.154:62195] [pid 1968239] apache2_util.c(271): [client 184.72.84.154] ModSecurity: Warning. Matched phrase "sys/module" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: sys/module found within ARGS:path: /sys/module/amd_pmf"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQpOXQaNjVe36UHwl_cQxgAAACE"] [Tue Nov 04 11:05:26 2025] [mollywoppersnyb.com] [error] [client 54.197.114.76:47204] [pid 1968239] apache2_util.c(271): [client 54.197.114.76] ModSecurity: Access denied with code 418 (phase 2). Pattern match "^[\\\\.|/]+(proc/|dev/shm/)" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/99_dreamhost_rules.conf"] [line "53"] [id "1990013"] [msg "Directory traversal"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQpOdgaNjVe36UHwl_cRBQAAAHc"] [Tue Nov 04 11:05:56 2025] [mollywoppersnyb.com] [error] [client 44.208.193.63:25056] [pid 1968239] apache2_util.c(271): [client 44.208.193.63] ModSecurity: Warning. Matched phrase "sys/module" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: sys/module found within ARGS:path: /sys/module/wireguard"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQpOlAaNjVe36UHwl_cRbAAAAMQ"] [Tue Nov 04 11:08:25 2025] [mollywoppersnyb.com] [error] [client 3.215.59.93:33592] [pid 1968239] apache2_util.c(271): [client 3.215.59.93] ModSecurity: Warning. Matched phrase "sys/kernel" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: sys/kernel found within ARGS:path: /sys/kernel/irq"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQpPKQaNjVe36UHwl_cS2wAAAGc"] [Tue Nov 04 11:11:21 2025] [mollywoppersnyb.com] [error] [client 3.220.148.166:38027] [pid 1968239] apache2_util.c(271): [client 3.220.148.166] ModSecurity: Warning. Matched phrase "sys/module" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: sys/module found within ARGS:path: /sys/module/hid_chicony"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQpP2QaNjVe36UHwl_cUFwAAAJA"] [Tue Nov 04 11:11:25 2025] [mollywoppersnyb.com] [error] [client 3.226.34.98:27071] [pid 1968239] apache2_util.c(271): [client 3.226.34.98] ModSecurity: Warning. Matched phrase "etc/logrotate.d" at ARGS:fileloc. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: etc/logrotate.d found within ARGS:fileloc: /etc/logrotate.d/proftpd"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQpP3QaNjVe36UHwl_cUHAAAADU"] [Tue Nov 04 11:11:25 2025] [mollywoppersnyb.com] [error] [client 3.226.34.98:27071] [pid 1968239] apache2_util.c(271): [client 3.226.34.98] ModSecurity: Warning. Matched phrase "etc/logrotate.d" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: etc/logrotate.d found within ARGS:path: /etc/logrotate.d"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQpP3QaNjVe36UHwl_cUHAAAADU"] [Tue Nov 04 11:11:53 2025] [mollywoppersnyb.com] [error] [client 170.106.72.178:60136] [pid 1968239] apache2_util.c(271): [client 170.106.72.178] ModSecurity: Warning. Pattern match "\\\\b(?:keep-alive|close),\\\\s?(?:keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "352"] [id "920210"] [msg "Multiple/Conflicting Connection Header Data Found"] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [hostname "mollywoppersnyb.com"] [uri "/"] [unique_id "aQpP-QaNjVe36UHwl_cU5wAAAGM"] [Tue Nov 04 11:20:44 2025] [mollywoppersnyb.com] [error] [client 52.205.222.214:35883] [pid 1968239] apache2_util.c(271): [client 52.205.222.214] ModSecurity: Warning. Matched phrase "var/log" at ARGS:fileloc. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: var/log found within ARGS:fileloc: /var/log/dpkg.log"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQpSDAaNjVe36UHwl_cc9AAAADY"] [Tue Nov 04 11:20:44 2025] [mollywoppersnyb.com] [error] [client 52.205.222.214:35883] [pid 1968239] apache2_util.c(271): [client 52.205.222.214] ModSecurity: Warning. Matched phrase "var/log" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: var/log found within ARGS:path: /var/log"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQpSDAaNjVe36UHwl_cc9AAAADY"] [Tue Nov 04 11:23:25 2025] [mollywoppersnyb.com] [error] [client 3.222.190.107:60768] [pid 1968239] apache2_util.c(271): [client 3.222.190.107] ModSecurity: Warning. Matched phrase "sys/block" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: sys/block found within ARGS:path: /sys/block/md10"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQpSrQaNjVe36UHwl_ceegAAAKU"] [Tue Nov 04 11:26:25 2025] [mollywoppersnyb.com] [error] [client 54.92.171.106:45805] [pid 1968239] apache2_util.c(271): [client 54.92.171.106] ModSecurity: Warning. Matched phrase "etc/logcheck" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: etc/logcheck found within ARGS:path: /etc/logcheck/violations.d"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQpTYQaNjVe36UHwl_cg-QAAANA"] [Tue Nov 04 11:26:49 2025] [mollywoppersnyb.com] [error] [client 34.231.181.240:3120] [pid 1968239] apache2_util.c(271): [client 34.231.181.240] ModSecurity: Warning. Matched phrase "sys/module" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: sys/module found within ARGS:path: /sys/module/fscache"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQpTeQaNjVe36UHwl_chxAAAAGw"] [Tue Nov 04 11:26:53 2025] [mollywoppersnyb.com] [error] [client 44.223.115.10:11450] [pid 1968239] apache2_util.c(271): [client 44.223.115.10] ModSecurity: Warning. Matched phrase "sys/dev" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: sys/dev found within ARGS:path: /sys/devices/kprobe"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQpTfQaNjVe36UHwl_ch4wAAAK0"] [Tue Nov 04 11:27:21 2025] [mollywoppersnyb.com] [error] [client 35.174.253.85:48558] [pid 1968239] apache2_util.c(271): [client 35.174.253.85] ModSecurity: Warning. Matched phrase "sys/module" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: sys/module found within ARGS:path: /sys/module/cpufreq"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQpTmQaNjVe36UHwl_cirgAAACI"] [Tue Nov 04 11:27:38 2025] [mollywoppersnyb.com] [error] [client 23.21.148.226:57933] [pid 1968239] apache2_util.c(271): [client 23.21.148.226] ModSecurity: Warning. Matched phrase "sys/module" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: sys/module found within ARGS:path: /sys/module/ipv6"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQpTqgaNjVe36UHwl_cjXwAAAMo"] [Tue Nov 04 11:27:42 2025] [mollywoppersnyb.com] [error] [client 35.169.240.53:22281] [pid 1968239] apache2_util.c(271): [client 35.169.240.53] ModSecurity: Warning. Matched phrase "etc/network" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: etc/network found within ARGS:path: /etc/networkd-dispatcher/no-carrier.d"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQpTrgaNjVe36UHwl_cjdgAAACI"] [Tue Nov 04 11:28:29 2025] [mollywoppersnyb.com] [error] [client 44.213.202.136:33918] [pid 1968239] apache2_util.c(271): [client 44.213.202.136] ModSecurity: Warning. Matched phrase "sys/class" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: sys/class found within ARGS:path: /sys/class/regulator"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQpT3QaNjVe36UHwl_ckxAAAANk"] [Tue Nov 04 11:31:34 2025] [mollywoppersnyb.com] [error] [client 3.229.164.203:50324] [pid 1968239] apache2_util.c(271): [client 3.229.164.203] ModSecurity: Warning. Matched phrase "sys/class" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: sys/class found within ARGS:path: /sys/class/cpuid"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQpUlgaNjVe36UHwl_cnCQAAAEY"] [Tue Nov 04 11:33:13 2025] [mollywoppersnyb.com] [error] [client 44.221.227.90:9308] [pid 1968239] apache2_util.c(271): [client 44.221.227.90] ModSecurity: Warning. Matched phrase "sys/module" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: sys/module found within ARGS:path: /sys/module/pata_sl82c105"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQpU-QaNjVe36UHwl_coLwAAAJU"] [Tue Nov 04 11:34:15 2025] [mollywoppersnyb.com] [error] [client 101.33.80.42:49374] [pid 1968239] apache2_util.c(271): [client 101.33.80.42] ModSecurity: Warning. Pattern match "\\\\b(?:keep-alive|close),\\\\s?(?:keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "352"] [id "920210"] [msg "Multiple/Conflicting Connection Header Data Found"] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [hostname "mollywoppersnyb.com"] [uri "/"] [unique_id "aQpVNwaNjVe36UHwl_co2AAAAK0"] [Tue Nov 04 11:34:18 2025] [mollywoppersnyb.com] [error] [client 34.206.193.60:59576] [pid 1968239] apache2_util.c(271): [client 34.206.193.60] ModSecurity: Warning. Matched phrase "etc/default" at ARGS:fileloc. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: etc/default found within ARGS:fileloc: /etc/default/locale"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQpVOgaNjVe36UHwl_co3QAAALQ"] [Tue Nov 04 11:34:18 2025] [mollywoppersnyb.com] [error] [client 34.206.193.60:59576] [pid 1968239] apache2_util.c(271): [client 34.206.193.60] ModSecurity: Warning. Matched phrase "etc/default" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: etc/default found within ARGS:path: /etc/default"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQpVOgaNjVe36UHwl_co3QAAALQ"] [Tue Nov 04 11:36:02 2025] [mollywoppersnyb.com] [error] [client 98.82.39.241:38833] [pid 1968239] apache2_util.c(271): [client 98.82.39.241] ModSecurity: Warning. Matched phrase "sys/bus" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: sys/bus found within ARGS:path: /sys/bus/pnp"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQpVogaNjVe36UHwl_cpxwAAAEQ"] [Tue Nov 04 11:36:49 2025] [mollywoppersnyb.com] [error] [client 54.157.99.244:47239] [pid 1968239] apache2_util.c(271): [client 54.157.99.244] ModSecurity: Warning. Matched phrase "sys/module" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: sys/module found within ARGS:path: /sys/module/e1000e"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQpV0QaNjVe36UHwl_cqjwAAAKM"] [Tue Nov 04 11:38:21 2025] [mollywoppersnyb.com] [error] [client 18.232.12.157:26907] [pid 1968239] apache2_util.c(271): [client 18.232.12.157] ModSecurity: Warning. Matched phrase "etc/fwupd" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: etc/fwupd found within ARGS:path: /etc/fwupd/remotes.d"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQpWLQaNjVe36UHwl_crcgAAALA"] [Tue Nov 04 11:39:29 2025] [mollywoppersnyb.com] [error] [client 44.210.213.220:23904] [pid 1968239] apache2_util.c(271): [client 44.210.213.220] ModSecurity: Warning. Matched phrase "sys/dev" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: sys/dev found within ARGS:path: /sys/devices/LNXSYSTM:00"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQpWcQaNjVe36UHwl_cr6gAAAHg"] [Tue Nov 04 11:41:56 2025] [mollywoppersnyb.com] [error] [client 34.197.28.78:52257] [pid 2605604] apache2_util.c(271): [client 34.197.28.78] ModSecurity: Warning. Matched phrase "etc/apparmor" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: etc/apparmor found within ARGS:path: /etc/apparmor.d/disable"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQpXBPABcG6zKJ1Ek2yDnAAATi8"] [Tue Nov 04 11:44:17 2025] [mollywoppersnyb.com] [error] [client 34.230.124.21:12437] [pid 2605604] apache2_util.c(271): [client 34.230.124.21] ModSecurity: Warning. Matched phrase "sys/module" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: sys/module found within ARGS:path: /sys/module/hid_ezkey"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQpXkfABcG6zKJ1Ek2yE9AAATmk"] [Tue Nov 04 11:45:05 2025] [mollywoppersnyb.com] [error] [client 100.29.160.53:64676] [pid 2605604] apache2_util.c(271): [client 100.29.160.53] ModSecurity: Warning. Matched phrase "etc/php" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: etc/php found within ARGS:path: /etc/php73/conf.d"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQpXwfABcG6zKJ1Ek2yFeAAAToE"] [Tue Nov 04 11:47:08 2025] [mollywoppersnyb.com] [error] [client 43.131.253.14:46140] [pid 2605604] apache2_util.c(271): [client 43.131.253.14] ModSecurity: Warning. Pattern match "\\\\b(?:keep-alive|close),\\\\s?(?:keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "352"] [id "920210"] [msg "Multiple/Conflicting Connection Header Data Found"] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [hostname "mollywoppersnyb.com"] [uri "/"] [unique_id "aQpYPPABcG6zKJ1Ek2yGXQAATpY"] [Tue Nov 04 11:55:01 2025] [mollywoppersnyb.com] [error] [client 54.210.152.179:10891] [pid 2605604] apache2_util.c(271): [client 54.210.152.179] ModSecurity: Warning. Matched phrase "/tmp/" at ARGS:fileloc. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: /tmp/ found within ARGS:fileloc: /var/tmp/.cache"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQpaFfABcG6zKJ1Ek2yOJAAATkY"] [Tue Nov 04 11:55:05 2025] [mollywoppersnyb.com] [error] [client 34.225.243.131:57359] [pid 2605604] apache2_util.c(271): [client 34.225.243.131] ModSecurity: Warning. Matched phrase "etc/logrotate.d" at ARGS:fileloc. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: etc/logrotate.d found within ARGS:fileloc: /etc/logrotate.d/ndn-parked-logs"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQpaGfABcG6zKJ1Ek2yOKgAATlw"] [Tue Nov 04 11:55:05 2025] [mollywoppersnyb.com] [error] [client 34.225.243.131:57359] [pid 2605604] apache2_util.c(271): [client 34.225.243.131] ModSecurity: Warning. Matched phrase "etc/logrotate.d" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: etc/logrotate.d found within ARGS:path: /etc/logrotate.d"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQpaGfABcG6zKJ1Ek2yOKgAATlw"] [Tue Nov 04 11:58:03 2025] [mollywoppersnyb.com] [error] [client 43.130.40.120:46572] [pid 2605604] apache2_util.c(271): [client 43.130.40.120] ModSecurity: Warning. Pattern match "\\\\b(?:keep-alive|close),\\\\s?(?:keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "352"] [id "920210"] [msg "Multiple/Conflicting Connection Header Data Found"] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [hostname "mollywoppersnyb.com"] [uri "/"] [unique_id "aQpay_ABcG6zKJ1Ek2yPZQAATno"] [Tue Nov 04 11:58:26 2025] [mollywoppersnyb.com] [error] [client 35.171.141.42:58944] [pid 2605604] apache2_util.c(271): [client 35.171.141.42] ModSecurity: Warning. Matched phrase "sys/class" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: sys/class found within ARGS:path: /sys/class/pci_bus"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQpa4vABcG6zKJ1Ek2yPjAAATtM"] [Tue Nov 04 11:59:45 2025] [mollywoppersnyb.com] [error] [client 3.93.211.16:12965] [pid 2605604] apache2_util.c(271): [client 3.93.211.16] ModSecurity: Warning. Matched phrase "var/log" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: var/log found within ARGS:path: /var/log/proftpd"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQpbMfABcG6zKJ1Ek2yP_QAATq0"] [Tue Nov 04 12:00:05 2025] [mollywoppersnyb.com] [error] [client 44.215.61.66:27713] [pid 2605604] apache2_util.c(271): [client 44.215.61.66] ModSecurity: Warning. Matched phrase "var/log" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: var/log found within ARGS:path: /var/log/mod_sec"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQpbRfABcG6zKJ1Ek2yQIwAATlE"] [Tue Nov 04 12:00:51 2025] [mollywoppersnyb.com] [error] [client 50.19.79.213:52933] [pid 2605604] apache2_util.c(271): [client 50.19.79.213] ModSecurity: Warning. Matched phrase "sys/module" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: sys/module found within ARGS:path: /sys/module/mptbase"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQpbc_ABcG6zKJ1Ek2yQZwAATsk"] [Tue Nov 04 12:06:33 2025] [mollywoppersnyb.com] [error] [client 54.167.32.123:6046] [pid 2605604] apache2_util.c(271): [client 54.167.32.123] ModSecurity: Warning. Matched phrase "sys/module" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: sys/module found within ARGS:path: /sys/module/pata_amd"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQpcyfABcG6zKJ1Ek2yTiQAATpg"] [Tue Nov 04 12:08:43 2025] [mollywoppersnyb.com] [error] [client 43.166.238.12:39942] [pid 2605604] apache2_util.c(271): [client 43.166.238.12] ModSecurity: Warning. Pattern match "\\\\b(?:keep-alive|close),\\\\s?(?:keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "352"] [id "920210"] [msg "Multiple/Conflicting Connection Header Data Found"] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [hostname "mollywoppersnyb.com"] [uri "/"] [unique_id "aQpdS_ABcG6zKJ1Ek2yUcQAATsQ"] [Tue Nov 04 12:14:00 2025] [mollywoppersnyb.com] [error] [client 3.210.223.61:45145] [pid 2605604] apache2_util.c(271): [client 3.210.223.61] ModSecurity: Warning. Matched phrase "etc/gss" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: etc/gss found within ARGS:path: /etc/gss/mech.d"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQpeiPABcG6zKJ1Ek2yWygAATsw"] [Tue Nov 04 12:21:49 2025] [mollywoppersnyb.com] [error] [client 23.21.119.232:60259] [pid 2605604] apache2_util.c(271): [client 23.21.119.232] ModSecurity: Access denied with code 418 (phase 2). Pattern match "^[\\\\.|/]+(proc/|dev/shm/)" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/99_dreamhost_rules.conf"] [line "53"] [id "1990013"] [msg "Directory traversal"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQpgXfABcG6zKJ1Ek2yatgAATsI"] [Tue Nov 04 12:22:01 2025] [mollywoppersnyb.com] [error] [client 3.221.50.71:9587] [pid 2605604] apache2_util.c(271): [client 3.221.50.71] ModSecurity: Warning. Matched phrase "etc/logrotate.d" at ARGS:fileloc. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: etc/logrotate.d found within ARGS:fileloc: /etc/logrotate.d/modsec"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQpgafABcG6zKJ1Ek2yaxAAATqQ"] [Tue Nov 04 12:22:01 2025] [mollywoppersnyb.com] [error] [client 3.221.50.71:9587] [pid 2605604] apache2_util.c(271): [client 3.221.50.71] ModSecurity: Warning. Matched phrase "etc/logrotate.d" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: etc/logrotate.d found within ARGS:path: /etc/logrotate.d"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQpgafABcG6zKJ1Ek2yaxAAATqQ"] [Tue Nov 04 12:22:33 2025] [mollywoppersnyb.com] [error] [client 177.75.16.85:19487] [pid 2605604] apache2_util.c(271): [client 177.75.16.85] ModSecurity: Warning. Matched phrase "Mozlila" at REQUEST_HEADERS:User-Agent. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-913-SCANNER-DETECTION.conf"] [line "56"] [id "913100"] [msg "Found User-Agent associated with security scanner"] [data "Matched Data: Mozlila found within REQUEST_HEADERS:User-Agent: Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-reputation-scanner"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/118/224/541/310"] [tag "PCI/6.5.10"] [hostname "mollywoppersnyb.com"] [uri "/wp-content/plugins/about.php"] [unique_id "aQpgifABcG6zKJ1Ek2ybIgAATpQ"] [Tue Nov 04 12:22:33 2025] [mollywoppersnyb.com] [error] [client 177.75.16.85:19487] [pid 2605604] mod_access_compat.c(350): AH01797: client denied by server configuration: /home/mollywopper/mollywoppersnyb.com/wp-content/plugins/about.php [Tue Nov 04 12:23:13 2025] [mollywoppersnyb.com] [error] [client 177.75.16.85:19334] [pid 2605604] apache2_util.c(271): [client 177.75.16.85] ModSecurity: Warning. Matched phrase "Mozlila" at REQUEST_HEADERS:User-Agent. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-913-SCANNER-DETECTION.conf"] [line "56"] [id "913100"] [msg "Found User-Agent associated with security scanner"] [data "Matched Data: Mozlila found within REQUEST_HEADERS:User-Agent: Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-reputation-scanner"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/118/224/541/310"] [tag "PCI/6.5.10"] [hostname "mollywoppersnyb.com"] [uri "/geju.php"] [unique_id "aQpgsfABcG6zKJ1Ek2ybowAAToI"] [Tue Nov 04 12:23:13 2025] [mollywoppersnyb.com] [error] [client 177.75.16.85:19334] [pid 2605604] mod_access_compat.c(350): AH01797: client denied by server configuration: /home/mollywopper/mollywoppersnyb.com/geju.php [Tue Nov 04 12:23:20 2025] [mollywoppersnyb.com] [error] [client 177.75.16.85:19363] [pid 2605604] apache2_util.c(271): [client 177.75.16.85] ModSecurity: Warning. Matched phrase "Mozlila" at REQUEST_HEADERS:User-Agent. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-913-SCANNER-DETECTION.conf"] [line "56"] [id "913100"] [msg "Found User-Agent associated with security scanner"] [data "Matched Data: Mozlila found within REQUEST_HEADERS:User-Agent: Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-reputation-scanner"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/118/224/541/310"] [tag "PCI/6.5.10"] [hostname "mollywoppersnyb.com"] [uri "/wp.php"] [unique_id "aQpguPABcG6zKJ1Ek2ybsAAATpY"] [Tue Nov 04 12:23:20 2025] [mollywoppersnyb.com] [error] [client 177.75.16.85:19363] [pid 2605604] mod_access_compat.c(350): AH01797: client denied by server configuration: /home/mollywopper/mollywoppersnyb.com/wp.php [Tue Nov 04 12:23:37 2025] [mollywoppersnyb.com] [error] [client 34.202.88.37:43073] [pid 2605604] apache2_util.c(271): [client 34.202.88.37] ModSecurity: Warning. Matched phrase "sys/module" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: sys/module found within ARGS:path: /sys/module/netfs"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQpgyfABcG6zKJ1Ek2yb0wAATsY"] [Tue Nov 04 12:23:45 2025] [mollywoppersnyb.com] [error] [client 18.205.91.101:61744] [pid 2605604] apache2_util.c(271): [client 18.205.91.101] ModSecurity: Warning. Matched phrase "sys/module" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: sys/module found within ARGS:path: /sys/module/keyboard"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQpg0fABcG6zKJ1Ek2yb5AAATtw"] [Tue Nov 04 12:23:58 2025] [mollywoppersnyb.com] [error] [client 54.87.62.248:15018] [pid 2605604] apache2_util.c(271): [client 54.87.62.248] ModSecurity: Warning. Matched phrase "sys/fs" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: sys/fs found within ARGS:path: /sys/fs/ext4"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQpg3vABcG6zKJ1Ek2yb8wAATkQ"] [Tue Nov 04 12:24:25 2025] [mollywoppersnyb.com] [error] [client 34.225.138.57:48184] [pid 2605604] apache2_util.c(271): [client 34.225.138.57] ModSecurity: Access denied with code 418 (phase 2). Pattern match "^[\\\\.|/]+(proc/|dev/shm/)" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/99_dreamhost_rules.conf"] [line "53"] [id "1990013"] [msg "Directory traversal"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQpg-fABcG6zKJ1Ek2ycHwAATnI"] [Tue Nov 04 12:25:49 2025] [mollywoppersnyb.com] [error] [client 44.207.252.58:28249] [pid 2605604] apache2_util.c(271): [client 44.207.252.58] ModSecurity: Warning. Matched phrase "sys/class" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: sys/class found within ARGS:path: /sys/class/sas_device"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQphTfABcG6zKJ1Ek2ydsQAATuQ"] [Tue Nov 04 12:26:53 2025] [mollywoppersnyb.com] [error] [client 52.5.242.243:53156] [pid 2605604] apache2_util.c(271): [client 52.5.242.243] ModSecurity: Warning. Matched phrase "sys/module" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: sys/module found within ARGS:path: /sys/module/nmi_backtrace"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQphjfABcG6zKJ1Ek2ye_AAATvQ"] [Tue Nov 04 12:27:48 2025] [mollywoppersnyb.com] [error] [client 43.133.187.11:44796] [pid 2605604] apache2_util.c(271): [client 43.133.187.11] ModSecurity: Warning. Pattern match "\\\\b(?:keep-alive|close),\\\\s?(?:keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "352"] [id "920210"] [msg "Multiple/Conflicting Connection Header Data Found"] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [hostname "mollywoppersnyb.com"] [uri "/"] [unique_id "aQphxPABcG6zKJ1Ek2ygBgAATnY"] [Tue Nov 04 12:29:08 2025] [mollywoppersnyb.com] [error] [client 52.0.63.151:22662] [pid 2605604] apache2_util.c(271): [client 52.0.63.151] ModSecurity: Warning. Matched phrase "sys/class" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: sys/class found within ARGS:path: /sys/class/thermal"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQpiFPABcG6zKJ1Ek2yiAwAATpU"] [Tue Nov 04 12:29:14 2025] [mollywoppersnyb.com] [error] [client 44.207.69.106:58968] [pid 2605604] apache2_util.c(271): [client 44.207.69.106] ModSecurity: Warning. Matched phrase "sys/module" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: sys/module found within ARGS:path: /sys/module/bnx2"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQpiGvABcG6zKJ1Ek2yiMwAAToU"] [Tue Nov 04 12:29:25 2025] [mollywoppersnyb.com] [error] [client 18.235.158.19:35849] [pid 2605604] apache2_util.c(271): [client 18.235.158.19] ModSecurity: Warning. Matched phrase "etc/pki" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: etc/pki found within ARGS:path: /etc/pki/fwupd-metadata"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQpiJfABcG6zKJ1Ek2yieQAATic"] [Tue Nov 04 12:29:33 2025] [mollywoppersnyb.com] [error] [client 3.89.176.255:59261] [pid 2605604] apache2_util.c(271): [client 3.89.176.255] ModSecurity: Warning. Matched phrase "sys/dev" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: sys/dev found within ARGS:path: /sys/devices/pci0000:80"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQpiLfABcG6zKJ1Ek2yipAAATl8"] [Tue Nov 04 12:30:39 2025] [mollywoppersnyb.com] [error] [client 44.205.192.249:64749] [pid 2605604] apache2_util.c(271): [client 44.205.192.249] ModSecurity: Warning. Matched phrase "sys/bus" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: sys/bus found within ARGS:path: /sys/bus/event_source"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQpib_ABcG6zKJ1Ek2yjiAAATtM"] [Tue Nov 04 12:32:38 2025] [mollywoppersnyb.com] [error] [client 54.84.93.8:8998] [pid 2605604] apache2_util.c(271): [client 54.84.93.8] ModSecurity: Warning. Matched phrase "sys/module" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: sys/module found within ARGS:path: /sys/module/clocksource"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQpi5vABcG6zKJ1Ek2yldwAATvY"] [Tue Nov 04 12:32:41 2025] [mollywoppersnyb.com] [error] [client 52.22.64.232:64196] [pid 2605604] apache2_util.c(271): [client 52.22.64.232] ModSecurity: Warning. Matched phrase "sys/dev" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: sys/dev found within ARGS:path: /sys/devices/ibs_op"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQpi6fABcG6zKJ1Ek2yliwAATuA"] [Tue Nov 04 12:32:46 2025] [mollywoppersnyb.com] [error] [client 34.239.85.139:13335] [pid 2605604] apache2_util.c(271): [client 34.239.85.139] ModSecurity: Warning. Matched phrase "sys/module" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: sys/module found within ARGS:path: /sys/module/netconsole"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQpi7vABcG6zKJ1Ek2ylqAAATlI"] [Tue Nov 04 12:34:26 2025] [mollywoppersnyb.com] [error] [client 44.221.180.179:39307] [pid 2605604] apache2_util.c(271): [client 44.221.180.179] ModSecurity: Warning. Matched phrase "etc/systemd" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: etc/systemd found within ARGS:path: /etc/systemd/user"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQpjUvABcG6zKJ1Ek2ymRgAATls"] [Tue Nov 04 12:35:33 2025] [mollywoppersnyb.com] [error] [client 3.81.253.213:5431] [pid 2605604] apache2_util.c(271): [client 3.81.253.213] ModSecurity: Warning. Matched phrase "sys/bus" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: sys/bus found within ARGS:path: /sys/bus/auxiliary"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQpjlfABcG6zKJ1Ek2yoEgAATuM"] [Tue Nov 04 12:36:43 2025] [mollywoppersnyb.com] [error] [client 52.21.62.139:4546] [pid 2605604] apache2_util.c(271): [client 52.21.62.139] ModSecurity: Access denied with code 418 (phase 2). Pattern match "^[\\\\.|/]+(proc/|dev/shm/)" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/99_dreamhost_rules.conf"] [line "53"] [id "1990013"] [msg "Directory traversal"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQpj2_ABcG6zKJ1Ek2yr2AAATt0"] [Tue Nov 04 12:38:23 2025] [mollywoppersnyb.com] [error] [client 177.75.16.85:18908] [pid 2605604] apache2_util.c(271): [client 177.75.16.85] ModSecurity: Warning. Matched phrase "Mozlila" at REQUEST_HEADERS:User-Agent. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-913-SCANNER-DETECTION.conf"] [line "56"] [id "913100"] [msg "Found User-Agent associated with security scanner"] [data "Matched Data: Mozlila found within REQUEST_HEADERS:User-Agent: Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-reputation-scanner"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/118/224/541/310"] [tag "PCI/6.5.10"] [hostname "mollywoppersnyb.com"] [uri "/wp-content/plugins/about.php"] [unique_id "aQpkP_ABcG6zKJ1Ek2yzTwAATpg"] [Tue Nov 04 12:38:23 2025] [mollywoppersnyb.com] [error] [client 177.75.16.85:18908] [pid 2605604] mod_access_compat.c(350): AH01797: client denied by server configuration: /home/mollywopper/mollywoppersnyb.com/wp-content/plugins/about.php [Tue Nov 04 12:38:23 2025] [mollywoppersnyb.com] [error] [client 177.75.16.85:18628] [pid 2605604] mod_access_compat.c(350): AH01797: client denied by server configuration: /home/mollywopper/mollywoppersnyb.com/wp-admin/network/index.php [Tue Nov 04 12:38:23 2025] [mollywoppersnyb.com] [error] [client 177.75.16.85:18559] [pid 2605604] apache2_util.c(271): [client 177.75.16.85] ModSecurity: Warning. Matched phrase "Mozlila" at REQUEST_HEADERS:User-Agent. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-913-SCANNER-DETECTION.conf"] [line "56"] [id "913100"] [msg "Found User-Agent associated with security scanner"] [data "Matched Data: Mozlila found within REQUEST_HEADERS:User-Agent: Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-reputation-scanner"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/118/224/541/310"] [tag "PCI/6.5.10"] [hostname "mollywoppersnyb.com"] [uri "/inputs.php"] [unique_id "aQpkP_ABcG6zKJ1Ek2yzVAAATsY"] [Tue Nov 04 12:38:25 2025] [mollywoppersnyb.com] [error] [client 177.75.16.85:18834] [pid 2605604] apache2_util.c(271): [client 177.75.16.85] ModSecurity: Warning. Matched phrase "Mozlila" at REQUEST_HEADERS:User-Agent. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-913-SCANNER-DETECTION.conf"] [line "56"] [id "913100"] [msg "Found User-Agent associated with security scanner"] [data "Matched Data: Mozlila found within REQUEST_HEADERS:User-Agent: Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-reputation-scanner"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/118/224/541/310"] [tag "PCI/6.5.10"] [hostname "mollywoppersnyb.com"] [uri "/geju.php"] [unique_id "aQpkQfABcG6zKJ1Ek2yzZwAATuw"] [Tue Nov 04 12:38:25 2025] [mollywoppersnyb.com] [error] [client 177.75.16.85:18834] [pid 2605604] mod_access_compat.c(350): AH01797: client denied by server configuration: /home/mollywopper/mollywoppersnyb.com/geju.php [Tue Nov 04 12:38:26 2025] [mollywoppersnyb.com] [error] [client 177.75.16.85:18744] [pid 2605604] apache2_util.c(271): [client 177.75.16.85] ModSecurity: Warning. Matched phrase "Mozlila" at REQUEST_HEADERS:User-Agent. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-913-SCANNER-DETECTION.conf"] [line "56"] [id "913100"] [msg "Found User-Agent associated with security scanner"] [data "Matched Data: Mozlila found within REQUEST_HEADERS:User-Agent: Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-reputation-scanner"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/118/224/541/310"] [tag "PCI/6.5.10"] [hostname "mollywoppersnyb.com"] [uri "/wp.php"] [unique_id "aQpkQvABcG6zKJ1Ek2yzhgAATjo"] [Tue Nov 04 12:38:26 2025] [mollywoppersnyb.com] [error] [client 177.75.16.85:18744] [pid 2605604] mod_access_compat.c(350): AH01797: client denied by server configuration: /home/mollywopper/mollywoppersnyb.com/wp.php [Tue Nov 04 12:38:41 2025] [mollywoppersnyb.com] [error] [client 98.83.94.113:3534] [pid 2605604] apache2_util.c(271): [client 98.83.94.113] ModSecurity: Warning. Matched phrase "sys/class" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: sys/class found within ARGS:path: /sys/class/raid_devices"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQpkUfABcG6zKJ1Ek2y0IQAATkY"] [Tue Nov 04 12:41:41 2025] [mollywoppersnyb.com] [error] [client 44.212.145.46:35439] [pid 2605604] apache2_util.c(271): [client 44.212.145.46] ModSecurity: Warning. Matched phrase "sys/kernel" at ARGS:fileloc. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: sys/kernel found within ARGS:fileloc: /sys/kernel/rcu_normal"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQplBfABcG6zKJ1Ek2y4qgAATvo"] [Tue Nov 04 12:41:41 2025] [mollywoppersnyb.com] [error] [client 44.212.145.46:35439] [pid 2605604] apache2_util.c(271): [client 44.212.145.46] ModSecurity: Warning. Matched phrase "sys/kernel" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: sys/kernel found within ARGS:path: /sys/kernel"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQplBfABcG6zKJ1Ek2y4qgAATvo"] [Tue Nov 04 12:42:27 2025] [mollywoppersnyb.com] [error] [client 43.165.189.206:33762] [pid 2605604] apache2_util.c(271): [client 43.165.189.206] ModSecurity: Warning. Pattern match "\\\\b(?:keep-alive|close),\\\\s?(?:keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "352"] [id "920210"] [msg "Multiple/Conflicting Connection Header Data Found"] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [hostname "mollywoppersnyb.com"] [uri "/"] [unique_id "aQplM_ABcG6zKJ1Ek2y5OwAATv4"] [Tue Nov 04 12:44:57 2025] [mollywoppersnyb.com] [error] [client 18.204.89.56:5585] [pid 2605604] apache2_util.c(271): [client 18.204.89.56] ModSecurity: Access denied with code 418 (phase 2). Pattern match "^[\\\\.|/]+(proc/|dev/shm/)" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/99_dreamhost_rules.conf"] [line "53"] [id "1990013"] [msg "Directory traversal"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQplyfABcG6zKJ1Ek2y6eAAATkQ"] [Tue Nov 04 12:45:53 2025] [mollywoppersnyb.com] [error] [client 3.213.106.226:11180] [pid 2605604] apache2_util.c(271): [client 3.213.106.226] ModSecurity: Warning. Matched phrase "sys/module" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: sys/module found within ARGS:path: /sys/module/kgdboc"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQpmAfABcG6zKJ1Ek2y6uQAATog"] [Tue Nov 04 12:48:41 2025] [mollywoppersnyb.com] [error] [client 43.159.149.216:51168] [pid 2605604] apache2_util.c(271): [client 43.159.149.216] ModSecurity: Warning. Pattern match "\\\\b(?:keep-alive|close),\\\\s?(?:keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "352"] [id "920210"] [msg "Multiple/Conflicting Connection Header Data Found"] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [hostname "mollywoppersnyb.com"] [uri "/"] [unique_id "aQpmqfABcG6zKJ1Ek2y72wAATmA"] [Tue Nov 04 12:56:49 2025] [mollywoppersnyb.com] [error] [client 52.70.123.241:64440] [pid 2605604] apache2_util.c(271): [client 52.70.123.241] ModSecurity: Warning. Matched phrase "sys/module" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: sys/module found within ARGS:path: /sys/module/ip_vs"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQpokfABcG6zKJ1Ek2zAVwAAToQ"] [Tue Nov 04 12:58:37 2025] [mollywoppersnyb.com] [error] [client 43.159.145.149:53508] [pid 2605604] apache2_util.c(271): [client 43.159.145.149] ModSecurity: Warning. Pattern match "\\\\b(?:keep-alive|close),\\\\s?(?:keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "352"] [id "920210"] [msg "Multiple/Conflicting Connection Header Data Found"] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [hostname "mollywoppersnyb.com"] [uri "/"] [unique_id "aQpo_fABcG6zKJ1Ek2zA-wAATtQ"] [Tue Nov 04 12:58:37 2025] [mollywoppersnyb.com] [error] [client 43.159.145.149:53508] [pid 2605604] apache2_util.c(271): [client 43.159.145.149] ModSecurity: Warning. Matched phrase ".bashrc" at ARGS:fileloc. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: .bashrc found within ARGS:fileloc: /home/mollywopper/.bashrc"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/"] [unique_id "aQpo_fABcG6zKJ1Ek2zA-wAATtQ"] [Tue Nov 04 12:59:50 2025] [mollywoppersnyb.com] [error] [client 34.202.88.37:26438] [pid 2605604] apache2_util.c(271): [client 34.202.88.37] ModSecurity: Warning. Matched phrase "sys/module" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: sys/module found within ARGS:path: /sys/module/kernel"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQppRvABcG6zKJ1Ek2zBaAAATqE"] [Tue Nov 04 13:00:02 2025] [mollywoppersnyb.com] [error] [client 107.22.208.39:25466] [pid 2605604] apache2_util.c(271): [client 107.22.208.39] ModSecurity: Warning. Matched phrase "sys/class" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: sys/class found within ARGS:path: /sys/class/scsi_generic"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQppUvABcG6zKJ1Ek2zBggAATmk"] [Tue Nov 04 13:05:21 2025] [mollywoppersnyb.com] [error] [client 44.221.37.41:16338] [pid 2605604] apache2_util.c(271): [client 44.221.37.41] ModSecurity: Warning. Matched phrase "etc/init" at ARGS:fileloc. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: etc/init found within ARGS:fileloc: /etc/init.d/iscsid"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQpqkfABcG6zKJ1Ek2zFPwAATsg"] [Tue Nov 04 13:05:21 2025] [mollywoppersnyb.com] [error] [client 44.221.37.41:16338] [pid 2605604] apache2_util.c(271): [client 44.221.37.41] ModSecurity: Warning. Matched phrase "etc/init" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: etc/init found within ARGS:path: /etc/init.d"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQpqkfABcG6zKJ1Ek2zFPwAATsg"] [Tue Nov 04 13:07:58 2025] [mollywoppersnyb.com] [error] [client 52.0.218.219:65224] [pid 2605604] apache2_util.c(271): [client 52.0.218.219] ModSecurity: Warning. Matched phrase "sys/module" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: sys/module found within ARGS:path: /sys/module/pstore"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQprLvABcG6zKJ1Ek2zGkQAATt8"] [Tue Nov 04 13:08:09 2025] [mollywoppersnyb.com] [error] [client 98.83.10.183:47347] [pid 2605604] apache2_util.c(271): [client 98.83.10.183] ModSecurity: Warning. Matched phrase "sys/module" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: sys/module found within ARGS:path: /sys/module/tg3"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQprOfABcG6zKJ1Ek2zGpwAATv8"] [Tue Nov 04 13:08:55 2025] [mollywoppersnyb.com] [error] [client 54.221.203.24:57552] [pid 2605604] apache2_util.c(271): [client 54.221.203.24] ModSecurity: Access denied with code 418 (phase 2). Pattern match "^[\\\\.|/]+(proc/|dev/shm/)" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/99_dreamhost_rules.conf"] [line "53"] [id "1990013"] [msg "Directory traversal"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQprZ_ABcG6zKJ1Ek2zHSwAATm0"] [Tue Nov 04 13:09:02 2025] [mollywoppersnyb.com] [error] [client 54.209.100.30:61513] [pid 2605604] apache2_util.c(271): [client 54.209.100.30] ModSecurity: Warning. Matched phrase "etc/vmware" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: etc/vmware found within ARGS:path: /etc/vmware-tools/scripts"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQprbvABcG6zKJ1Ek2zHWQAATms"] [Tue Nov 04 13:09:04 2025] [mollywoppersnyb.com] [error] [client 44.207.252.58:26264] [pid 2605604] apache2_util.c(271): [client 44.207.252.58] ModSecurity: Warning. Matched phrase "sys/module" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: sys/module found within ARGS:path: /sys/module/mousedev"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQprcPABcG6zKJ1Ek2zHXQAATqo"] [Tue Nov 04 13:13:49 2025] [mollywoppersnyb.com] [error] [client 3.221.244.28:59695] [pid 2605604] apache2_util.c(271): [client 3.221.244.28] ModSecurity: Warning. Matched phrase "etc/logrotate.d" at ARGS:fileloc. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: etc/logrotate.d found within ARGS:fileloc: /etc/logrotate.d/synflood"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQpsjfABcG6zKJ1Ek2zM6gAATs8"] [Tue Nov 04 13:13:49 2025] [mollywoppersnyb.com] [error] [client 3.221.244.28:59695] [pid 2605604] apache2_util.c(271): [client 3.221.244.28] ModSecurity: Warning. Matched phrase "etc/logrotate.d" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: etc/logrotate.d found within ARGS:path: /etc/logrotate.d"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQpsjfABcG6zKJ1Ek2zM6gAATs8"] [Tue Nov 04 13:17:08 2025] [mollywoppersnyb.com] [error] [client 18.210.58.238:33565] [pid 2605604] apache2_util.c(271): [client 18.210.58.238] ModSecurity: Warning. Matched phrase "var/log" at ARGS:fileloc. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: var/log found within ARGS:fileloc: /var/log/cgroup.log"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQptVPABcG6zKJ1Ek2zUlgAATig"] [Tue Nov 04 13:17:08 2025] [mollywoppersnyb.com] [error] [client 18.210.58.238:33565] [pid 2605604] apache2_util.c(271): [client 18.210.58.238] ModSecurity: Warning. Matched phrase "var/log" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: var/log found within ARGS:path: /var/log"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQptVPABcG6zKJ1Ek2zUlgAATig"] [Tue Nov 04 13:19:12 2025] [mollywoppersnyb.com] [error] [client 35.173.18.61:45826] [pid 2605604] apache2_util.c(271): [client 35.173.18.61] ModSecurity: Warning. Matched phrase "etc/init" at ARGS:fileloc. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: etc/init found within ARGS:fileloc: /etc/init.d/prepstandby"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQpt0PABcG6zKJ1Ek2zVbAAATtI"] [Tue Nov 04 13:19:12 2025] [mollywoppersnyb.com] [error] [client 35.173.18.61:45826] [pid 2605604] apache2_util.c(271): [client 35.173.18.61] ModSecurity: Warning. Matched phrase "etc/init" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: etc/init found within ARGS:path: /etc/init.d"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQpt0PABcG6zKJ1Ek2zVbAAATtI"] [Tue Nov 04 13:23:01 2025] [mollywoppersnyb.com] [error] [client 44.205.180.155:18435] [pid 2605604] apache2_util.c(271): [client 44.205.180.155] ModSecurity: Warning. Matched phrase "var/spool" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: var/spool found within ARGS:path: /var/spool/cron"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQputfABcG6zKJ1Ek2zXhQAATus"] [Tue Nov 04 13:23:54 2025] [mollywoppersnyb.com] [error] [client 44.223.232.55:8417] [pid 2605604] apache2_util.c(271): [client 44.223.232.55] ModSecurity: Warning. Matched phrase "etc/php" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: etc/php found within ARGS:path: /etc/php81/conf.d"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQpu6vABcG6zKJ1Ek2zYRQAATm0"] [Tue Nov 04 13:25:29 2025] [mollywoppersnyb.com] [error] [client 52.202.52.82:63657] [pid 2605604] apache2_util.c(271): [client 52.202.52.82] ModSecurity: Warning. Matched phrase "etc/dkms" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: etc/dkms found within ARGS:path: /etc/dkms/template-dkms-mkdeb"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQpvSfABcG6zKJ1Ek2zZkwAATps"] [Tue Nov 04 13:26:05 2025] [mollywoppersnyb.com] [error] [client 3.215.59.93:36298] [pid 2605604] apache2_util.c(271): [client 3.215.59.93] ModSecurity: Warning. Matched phrase "etc/fail2ban" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: etc/fail2ban found within ARGS:path: /etc/fail2ban/filter.d"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQpvbfABcG6zKJ1Ek2zZ1AAATio"] [Tue Nov 04 13:27:58 2025] [mollywoppersnyb.com] [error] [client 54.210.152.179:9328] [pid 2605604] apache2_util.c(271): [client 54.210.152.179] ModSecurity: Warning. Matched phrase "etc/apport" at ARGS:fileloc. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: etc/apport found within ARGS:fileloc: /etc/apport/crashdb.conf"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQpv3vABcG6zKJ1Ek2zapwAATsg"] [Tue Nov 04 13:27:58 2025] [mollywoppersnyb.com] [error] [client 54.210.152.179:9328] [pid 2605604] apache2_util.c(271): [client 54.210.152.179] ModSecurity: Warning. Matched phrase "etc/apport" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: etc/apport found within ARGS:path: /etc/apport"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQpv3vABcG6zKJ1Ek2zapwAATsg"] [Tue Nov 04 13:28:37 2025] [mollywoppersnyb.com] [error] [client 54.144.185.255:60425] [pid 2605604] apache2_util.c(271): [client 54.144.185.255] ModSecurity: Warning. Matched phrase "sys/class" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: sys/class found within ARGS:path: /sys/class/bsg"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQpwBfABcG6zKJ1Ek2za_QAATt8"] [Tue Nov 04 13:28:53 2025] [mollywoppersnyb.com] [error] [client 3.213.46.222:20682] [pid 2605604] apache2_util.c(271): [client 3.213.46.222] ModSecurity: Warning. Matched phrase "sys/class" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: sys/class found within ARGS:path: /sys/class/bdi"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQpwFfABcG6zKJ1Ek2zbHgAATig"] [Tue Nov 04 13:28:57 2025] [mollywoppersnyb.com] [error] [client 98.82.39.241:20435] [pid 2605604] apache2_util.c(271): [client 98.82.39.241] ModSecurity: Warning. Matched phrase "sys/module" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: sys/module found within ARGS:path: /sys/module/i2c_ismt"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQpwGfABcG6zKJ1Ek2zbKgAATsQ"] [Tue Nov 04 13:29:10 2025] [mollywoppersnyb.com] [error] [client 35.173.18.61:55174] [pid 2605604] apache2_util.c(271): [client 35.173.18.61] ModSecurity: Warning. Matched phrase "sys/module" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: sys/module found within ARGS:path: /sys/module/rcutree"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQpwJvABcG6zKJ1Ek2zbSQAAToU"] [Tue Nov 04 13:30:30 2025] [mollywoppersnyb.com] [error] [client 3.212.86.97:45445] [pid 2605604] apache2_util.c(271): [client 3.212.86.97] ModSecurity: Warning. Matched phrase "sys/dev" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: sys/dev found within ARGS:path: /sys/devices/rbd"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQpwdvABcG6zKJ1Ek2zb9wAATo4"] [Tue Nov 04 13:30:34 2025] [mollywoppersnyb.com] [error] [client 3.232.102.111:65211] [pid 2605604] apache2_util.c(271): [client 3.232.102.111] ModSecurity: Warning. Matched phrase "sys/bus" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: sys/bus found within ARGS:path: /sys/bus/bcma"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQpwevABcG6zKJ1Ek2zb_AAATsg"] [Tue Nov 04 13:30:50 2025] [mollywoppersnyb.com] [error] [client 107.23.62.75:47919] [pid 2605604] apache2_util.c(271): [client 107.23.62.75] ModSecurity: Warning. Matched phrase "sys/bus" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: sys/bus found within ARGS:path: /sys/bus/scsi"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQpwivABcG6zKJ1Ek2zcIwAAToE"] [Tue Nov 04 13:33:35 2025] [mollywoppersnyb.com] [error] [client 52.4.238.8:12895] [pid 2605604] apache2_util.c(271): [client 52.4.238.8] ModSecurity: Warning. Matched phrase "etc/pm" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: etc/pm found within ARGS:path: /etc/pm/sleep.d"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQpxL_ABcG6zKJ1Ek2zdQwAATvw"] [Tue Nov 04 13:33:37 2025] [mollywoppersnyb.com] [error] [client 52.205.113.104:4650] [pid 2605604] apache2_util.c(271): [client 52.205.113.104] ModSecurity: Warning. Matched phrase "etc/network" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: etc/network found within ARGS:path: /etc/network/if-up.d"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQpxMfABcG6zKJ1Ek2zdRQAAToo"] [Tue Nov 04 13:34:43 2025] [mollywoppersnyb.com] [error] [client 107.20.255.194:42365] [pid 2605604] apache2_util.c(271): [client 107.20.255.194] ModSecurity: Warning. Matched phrase "sys/module" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: sys/module found within ARGS:path: /sys/module/mlx5_core"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQpxc_ABcG6zKJ1Ek2zdvQAATj4"] [Tue Nov 04 13:36:06 2025] [mollywoppersnyb.com] [error] [client 3.94.157.25:25291] [pid 2605604] apache2_util.c(271): [client 3.94.157.25] ModSecurity: Warning. Matched phrase "sys/module" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: sys/module found within ARGS:path: /sys/module/page_alloc"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQpxxvABcG6zKJ1Ek2zegAAATrk"] [Tue Nov 04 13:36:54 2025] [mollywoppersnyb.com] [error] [client 34.199.252.22:36556] [pid 2605604] apache2_util.c(271): [client 34.199.252.22] ModSecurity: Warning. Matched phrase "etc/logcheck" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: etc/logcheck found within ARGS:path: /etc/logcheck/ignore.d.server"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQpx9vABcG6zKJ1Ek2zfBgAATuk"] [Tue Nov 04 13:38:21 2025] [mollywoppersnyb.com] [error] [client 3.215.59.93:20874] [pid 2605604] apache2_util.c(271): [client 3.215.59.93] ModSecurity: Warning. Matched phrase "etc/php" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: etc/php found within ARGS:path: /etc/php72/conf.d"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQpyTfABcG6zKJ1Ek2zgWQAATnc"] [Tue Nov 04 13:40:33 2025] [mollywoppersnyb.com] [error] [client 34.206.212.24:38570] [pid 2605604] apache2_util.c(271): [client 34.206.212.24] ModSecurity: Warning. Matched phrase "sys/module" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: sys/module found within ARGS:path: /sys/module/nfs_layout_nfsv41_files"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQpy0fABcG6zKJ1Ek2zjGgAATok"] [Tue Nov 04 13:44:29 2025] [mollywoppersnyb.com] [error] [client 44.194.139.149:30300] [pid 253361] apache2_util.c(271): [client 44.194.139.149] ModSecurity: Access denied with code 418 (phase 2). Pattern match "^[\\\\.|/]+(proc/|dev/shm/)" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/99_dreamhost_rules.conf"] [line "53"] [id "1990013"] [msg "Directory traversal"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQpzvaoDBGJur-9DEx5-tAAAAK4"] [Tue Nov 04 13:50:21 2025] [mollywoppersnyb.com] [error] [client 100.29.63.24:17205] [pid 253361] apache2_util.c(271): [client 100.29.63.24] ModSecurity: Warning. Matched phrase "etc/default" at ARGS:fileloc. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: etc/default found within ARGS:fileloc: /etc/default/dbus"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQp1HaoDBGJur-9DEx6CZQAAADU"] [Tue Nov 04 13:50:21 2025] [mollywoppersnyb.com] [error] [client 100.29.63.24:17205] [pid 253361] apache2_util.c(271): [client 100.29.63.24] ModSecurity: Warning. Matched phrase "etc/default" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: etc/default found within ARGS:path: /etc/default"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQp1HaoDBGJur-9DEx6CZQAAADU"] [Tue Nov 04 13:51:37 2025] [mollywoppersnyb.com] [error] [client 44.193.115.232:29280] [pid 253361] apache2_util.c(271): [client 44.193.115.232] ModSecurity: Warning. Matched phrase "etc/default" at ARGS:fileloc. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: etc/default found within ARGS:fileloc: /etc/default/proftpd"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQp1aaoDBGJur-9DEx6C2AAAAEU"] [Tue Nov 04 13:51:37 2025] [mollywoppersnyb.com] [error] [client 44.193.115.232:29280] [pid 253361] apache2_util.c(271): [client 44.193.115.232] ModSecurity: Warning. Matched phrase "etc/default" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: etc/default found within ARGS:path: /etc/default"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQp1aaoDBGJur-9DEx6C2AAAAEU"] [Tue Nov 04 13:57:13 2025] [mollywoppersnyb.com] [error] [client 52.7.33.248:39237] [pid 253361] apache2_util.c(271): [client 52.7.33.248] ModSecurity: Warning. Matched phrase "sys/dev" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: sys/dev found within ARGS:path: /sys/devices/msr"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQp2uaoDBGJur-9DEx6GwQAAAKU"] [Tue Nov 04 13:58:42 2025] [mollywoppersnyb.com] [error] [client 3.213.106.226:40084] [pid 253361] apache2_util.c(271): [client 3.213.106.226] ModSecurity: Access denied with code 418 (phase 2). Pattern match "^[\\\\.|/]+(proc/|dev/shm/)" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/99_dreamhost_rules.conf"] [line "53"] [id "1990013"] [msg "Directory traversal"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQp3EqoDBGJur-9DEx6HnQAAADQ"] [Tue Nov 04 13:59:17 2025] [mollywoppersnyb.com] [error] [client 34.236.41.241:46284] [pid 253361] apache2_util.c(271): [client 34.236.41.241] ModSecurity: Warning. Matched phrase "sys/bus" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: sys/bus found within ARGS:path: /sys/bus/pci_express"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQp3NaoDBGJur-9DEx6H0QAAAG8"] [Tue Nov 04 13:59:25 2025] [mollywoppersnyb.com] [error] [client 54.235.172.96:35763] [pid 253361] apache2_util.c(271): [client 54.235.172.96] ModSecurity: Warning. Matched phrase "var/log" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: var/log found within ARGS:path: /var/log/acct"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQp3PaoDBGJur-9DEx6H4QAAAMo"] [Tue Nov 04 14:00:10 2025] [mollywoppersnyb.com] [error] [client 3.212.205.90:10116] [pid 253361] apache2_util.c(271): [client 3.212.205.90] ModSecurity: Warning. Matched phrase "sys/kernel" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: sys/kernel found within ARGS:path: /sys/kernel/software_nodes"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQp3aqoDBGJur-9DEx6IMwAAAIM"] [Tue Nov 04 14:01:02 2025] [mollywoppersnyb.com] [error] [client 18.205.127.11:8971] [pid 253361] apache2_util.c(271): [client 18.205.127.11] ModSecurity: Warning. Matched phrase "sys/dev" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: sys/dev found within ARGS:path: /sys/devices/amd_df"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQp3nqoDBGJur-9DEx6IiAAAADc"] [Tue Nov 04 14:01:25 2025] [mollywoppersnyb.com] [error] [client 54.84.250.51:26665] [pid 253361] apache2_util.c(271): [client 54.84.250.51] ModSecurity: Warning. Matched phrase "sys/class" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: sys/class found within ARGS:path: /sys/class/sas_port"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQp3taoDBGJur-9DEx6IswAAAKk"] [Tue Nov 04 14:01:30 2025] [mollywoppersnyb.com] [error] [client 54.198.33.233:4033] [pid 253361] apache2_util.c(271): [client 54.198.33.233] ModSecurity: Warning. Matched phrase "etc/x11" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: etc/x11 found within ARGS:path: /etc/X11/app-defaults"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQp3uqoDBGJur-9DEx6IxQAAAL8"] [Tue Nov 04 14:01:48 2025] [mollywoppersnyb.com] [error] [client 52.5.242.243:22333] [pid 253361] apache2_util.c(271): [client 52.5.242.243] ModSecurity: Warning. Matched phrase "etc/apt" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: etc/apt found within ARGS:path: /etc/apt/apt.conf.d"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQp3zKoDBGJur-9DEx6JBQAAADI"] [Tue Nov 04 14:01:55 2025] [mollywoppersnyb.com] [error] [client 100.28.204.82:30820] [pid 253361] apache2_util.c(271): [client 100.28.204.82] ModSecurity: Warning. Matched phrase "etc/java" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: etc/java found within ARGS:path: /etc/java-8-openjdk/security"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQp306oDBGJur-9DEx6JSAAAAH0"] [Tue Nov 04 14:04:05 2025] [mollywoppersnyb.com] [error] [client 100.29.63.24:16365] [pid 253361] apache2_util.c(271): [client 100.29.63.24] ModSecurity: Warning. Matched phrase "etc/apparmor" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: etc/apparmor found within ARGS:path: /etc/apparmor.d/tunables"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQp4VKoDBGJur-9DEx6K2AAAAGs"] [Tue Nov 04 14:05:13 2025] [mollywoppersnyb.com] [error] [client 54.235.158.162:22098] [pid 253361] apache2_util.c(271): [client 54.235.158.162] ModSecurity: Warning. Matched phrase "sys/module" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: sys/module found within ARGS:path: /sys/module/xhci_pci"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQp4maoDBGJur-9DEx6MNAAAAIE"] [Tue Nov 04 14:06:42 2025] [mollywoppersnyb.com] [error] [client 23.23.99.55:41665] [pid 253361] apache2_util.c(271): [client 23.23.99.55] ModSecurity: Warning. Matched phrase "sys/module" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: sys/module found within ARGS:path: /sys/module/rbd"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQp48qoDBGJur-9DEx6NIQAAAJ4"] [Tue Nov 04 14:16:29 2025] [mollywoppersnyb.com] [error] [client 52.70.123.241:44888] [pid 253361] apache2_util.c(271): [client 52.70.123.241] ModSecurity: Warning. Matched phrase "etc/muttrc.d" at ARGS:fileloc. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: etc/muttrc.d found within ARGS:fileloc: /etc/Muttrc.d/gpg.rc"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQp7PaoDBGJur-9DEx6UqgAAAL0"] [Tue Nov 04 14:16:29 2025] [mollywoppersnyb.com] [error] [client 52.70.123.241:44888] [pid 253361] apache2_util.c(271): [client 52.70.123.241] ModSecurity: Warning. Matched phrase "etc/muttrc.d" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: etc/muttrc.d found within ARGS:path: /etc/Muttrc.d"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQp7PaoDBGJur-9DEx6UqgAAAL0"] [Tue Nov 04 14:16:57 2025] [mollywoppersnyb.com] [error] [client 44.217.255.167:64517] [pid 253361] apache2_util.c(271): [client 44.217.255.167] ModSecurity: Access denied with code 418 (phase 2). Pattern match "^[\\\\.|/]+(proc/|dev/shm/)" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/99_dreamhost_rules.conf"] [line "53"] [id "1990013"] [msg "Directory traversal"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQp7WaoDBGJur-9DEx6VwQAAAFc"] [Tue Nov 04 14:18:24 2025] [mollywoppersnyb.com] [error] [client 3.222.190.107:27309] [pid 253361] apache2_util.c(271): [client 3.222.190.107] ModSecurity: Warning. Matched phrase "etc/init" at ARGS:fileloc. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: etc/init found within ARGS:fileloc: /etc/init.d/grub-common"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQp7sKoDBGJur-9DEx6ZGwAAANE"] [Tue Nov 04 14:18:24 2025] [mollywoppersnyb.com] [error] [client 3.222.190.107:27309] [pid 253361] apache2_util.c(271): [client 3.222.190.107] ModSecurity: Warning. Matched phrase "etc/init" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: etc/init found within ARGS:path: /etc/init.d"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQp7sKoDBGJur-9DEx6ZGwAAANE"] [Tue Nov 04 14:22:59 2025] [mollywoppersnyb.com] [error] [client 54.225.148.123:3691] [pid 253361] apache2_util.c(271): [client 54.225.148.123] ModSecurity: Warning. Matched phrase "usr/lib/php" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: usr/lib/php found within ARGS:path: /usr/lib/php"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQp8w6oDBGJur-9DEx6eWgAAAAI"] [Tue Nov 04 14:26:09 2025] [mollywoppersnyb.com] [error] [client 52.44.174.136:11544] [pid 253361] apache2_util.c(271): [client 52.44.174.136] ModSecurity: Warning. Matched phrase "sys/module" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: sys/module found within ARGS:path: /sys/module/i2c_algo_bit"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQp9gaoDBGJur-9DEx6fdAAAACs"] [Tue Nov 04 14:30:37 2025] [mollywoppersnyb.com] [error] [client 34.230.124.21:44595] [pid 253361] apache2_util.c(271): [client 34.230.124.21] ModSecurity: Warning. Matched phrase "etc/apt" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: etc/apt found within ARGS:path: /etc/apt/trusted.gpg.d"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQp-jaoDBGJur-9DEx6hRAAAAHM"] [Tue Nov 04 14:30:46 2025] [mollywoppersnyb.com] [error] [client 52.22.87.224:15259] [pid 253361] apache2_util.c(271): [client 52.22.87.224] ModSecurity: Warning. Matched phrase "sys/module" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: sys/module found within ARGS:path: /sys/module/tcp_cubic"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQp-lqoDBGJur-9DEx6hXgAAAIU"] [Tue Nov 04 14:30:50 2025] [mollywoppersnyb.com] [error] [client 98.82.40.168:45576] [pid 253361] apache2_util.c(271): [client 98.82.40.168] ModSecurity: Warning. Matched phrase "var/log" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: var/log found within ARGS:path: /var/log/unattended-upgrades"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQp-mqoDBGJur-9DEx6hZQAAAGM"] [Tue Nov 04 14:31:54 2025] [mollywoppersnyb.com] [error] [client 100.24.149.244:51680] [pid 253361] apache2_util.c(271): [client 100.24.149.244] ModSecurity: Warning. Matched phrase "sys/module" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: sys/module found within ARGS:path: /sys/module/sit"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQp-2qoDBGJur-9DEx6iNwAAAGc"] [Tue Nov 04 14:32:11 2025] [mollywoppersnyb.com] [error] [client 54.156.55.147:48072] [pid 253361] apache2_util.c(271): [client 54.156.55.147] ModSecurity: Warning. Matched phrase "var/log" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: var/log found within ARGS:path: /var/log/stunnel4"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQp-66oDBGJur-9DEx6iUQAAAK4"] [Tue Nov 04 14:32:13 2025] [mollywoppersnyb.com] [error] [client 44.196.118.6:38094] [pid 253361] apache2_util.c(271): [client 44.196.118.6] ModSecurity: Warning. Matched phrase "sys/class" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: sys/class found within ARGS:path: /sys/class/nvme-generic"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQp-7aoDBGJur-9DEx6iVQAAABI"] [Tue Nov 04 14:33:21 2025] [mollywoppersnyb.com] [error] [client 52.2.83.227:47804] [pid 253361] apache2_util.c(271): [client 52.2.83.227] ModSecurity: Warning. Matched phrase "var/log" at ARGS:fileloc. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: var/log found within ARGS:fileloc: /var/log/daemon.log.1"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQp_MKoDBGJur-9DEx6i0wAAAAo"] [Tue Nov 04 14:33:21 2025] [mollywoppersnyb.com] [error] [client 52.2.83.227:47804] [pid 253361] apache2_util.c(271): [client 52.2.83.227] ModSecurity: Warning. Matched phrase "var/log" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: var/log found within ARGS:path: /var/log"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQp_MKoDBGJur-9DEx6i0wAAAAo"] [Tue Nov 04 14:38:21 2025] [mollywoppersnyb.com] [error] [client 3.226.34.98:23028] [pid 253361] apache2_util.c(271): [client 3.226.34.98] ModSecurity: Warning. Matched phrase "etc/logrotate.d" at ARGS:fileloc. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: etc/logrotate.d found within ARGS:fileloc: /etc/logrotate.d/sshlimit"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQqAXaoDBGJur-9DEx6lOgAAAHU"] [Tue Nov 04 14:38:21 2025] [mollywoppersnyb.com] [error] [client 3.226.34.98:23028] [pid 253361] apache2_util.c(271): [client 3.226.34.98] ModSecurity: Warning. Matched phrase "etc/logrotate.d" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: etc/logrotate.d found within ARGS:path: /etc/logrotate.d"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQqAXaoDBGJur-9DEx6lOgAAAHU"] [Tue Nov 04 14:38:33 2025] [mollywoppersnyb.com] [error] [client 23.23.213.182:24792] [pid 253361] apache2_util.c(271): [client 23.23.213.182] ModSecurity: Warning. Matched phrase "etc/default" at ARGS:fileloc. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: etc/default found within ARGS:fileloc: /etc/default/ntp"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQqAaaoDBGJur-9DEx6lSQAAADw"] [Tue Nov 04 14:38:33 2025] [mollywoppersnyb.com] [error] [client 23.23.213.182:24792] [pid 253361] apache2_util.c(271): [client 23.23.213.182] ModSecurity: Warning. Matched phrase "etc/default" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: etc/default found within ARGS:path: /etc/default"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQqAaaoDBGJur-9DEx6lSQAAADw"] [Tue Nov 04 14:40:41 2025] [mollywoppersnyb.com] [error] [client 52.2.4.213:28388] [pid 253361] apache2_util.c(271): [client 52.2.4.213] ModSecurity: Warning. Matched phrase "etc/logrotate.d" at ARGS:fileloc. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: etc/logrotate.d found within ARGS:fileloc: /etc/logrotate.d/bootlog"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQqA6aoDBGJur-9DEx6mYwAAABE"] [Tue Nov 04 14:40:41 2025] [mollywoppersnyb.com] [error] [client 52.2.4.213:28388] [pid 253361] apache2_util.c(271): [client 52.2.4.213] ModSecurity: Warning. Matched phrase "etc/logrotate.d" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: etc/logrotate.d found within ARGS:path: /etc/logrotate.d"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQqA6aoDBGJur-9DEx6mYwAAABE"] [Tue Nov 04 14:44:49 2025] [mollywoppersnyb.com] [error] [client 34.227.156.153:10502] [pid 253361] apache2_util.c(271): [client 34.227.156.153] ModSecurity: Warning. Matched phrase "etc/cron.weekly" at ARGS:fileloc. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: etc/cron.weekly found within ARGS:fileloc: /etc/cron.weekly/man-db"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQqB4aoDBGJur-9DEx6oiQAAACA"] [Tue Nov 04 14:44:49 2025] [mollywoppersnyb.com] [error] [client 34.227.156.153:10502] [pid 253361] apache2_util.c(271): [client 34.227.156.153] ModSecurity: Warning. Matched phrase "etc/cron.weekly" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: etc/cron.weekly found within ARGS:path: /etc/cron.weekly"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQqB4aoDBGJur-9DEx6oiQAAACA"] [Tue Nov 04 14:47:49 2025] [mollywoppersnyb.com] [error] [client 3.223.181.32:60953] [pid 253361] apache2_util.c(271): [client 3.223.181.32] ModSecurity: Warning. Matched phrase "sys/kernel" at ARGS:fileloc. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: sys/kernel found within ARGS:fileloc: /sys/kernel/kexec_crash_loaded"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQqClaoDBGJur-9DEx6qLQAAAAA"] [Tue Nov 04 14:47:49 2025] [mollywoppersnyb.com] [error] [client 3.223.181.32:60953] [pid 253361] apache2_util.c(271): [client 3.223.181.32] ModSecurity: Warning. Matched phrase "sys/kernel" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: sys/kernel found within ARGS:path: /sys/kernel"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQqClaoDBGJur-9DEx6qLQAAAAA"] [Tue Nov 04 14:52:23 2025] [mollywoppersnyb.com] [error] [client 52.54.95.127:13726] [pid 253361] apache2_util.c(271): [client 52.54.95.127] ModSecurity: Warning. Matched phrase "sys/class" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: sys/class found within ARGS:path: /sys/class/hwmon"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQqDp6oDBGJur-9DEx6wRQAAAJU"] [Tue Nov 04 14:52:49 2025] [mollywoppersnyb.com] [error] [client 18.214.186.220:62821] [pid 253361] apache2_util.c(271): [client 18.214.186.220] ModSecurity: Warning. Matched phrase "sys/class" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: sys/class found within ARGS:path: /sys/class/vtconsole"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQqDwaoDBGJur-9DEx6xRAAAADk"] [Tue Nov 04 14:55:58 2025] [mollywoppersnyb.com] [warn] [client 3.223.134.5:1574] [pid 253361] fcgid_bridge.c(409): (32)Broken pipe: mod_fcgid: ap_pass_brigade failed in handle_request_ipc function [Tue Nov 04 14:56:45 2025] [mollywoppersnyb.com] [error] [client 34.194.14.255:35796] [pid 253361] apache2_util.c(271): [client 34.194.14.255] ModSecurity: Warning. Matched phrase "etc/fonts" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: etc/fonts found within ARGS:path: /etc/fonts/conf.d"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQqEraoDBGJur-9DEx6zuwAAANI"] [Tue Nov 04 14:59:38 2025] [mollywoppersnyb.com] [error] [client 98.83.94.113:64076] [pid 253361] apache2_util.c(271): [client 98.83.94.113] ModSecurity: Warning. Matched phrase "var/log" at ARGS:fileloc. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: var/log found within ARGS:fileloc: /var/log/daemon.log"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQqFWqoDBGJur-9DEx60pAAAABY"] [Tue Nov 04 14:59:38 2025] [mollywoppersnyb.com] [error] [client 98.83.94.113:64076] [pid 253361] apache2_util.c(271): [client 98.83.94.113] ModSecurity: Warning. Matched phrase "var/log" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: var/log found within ARGS:path: /var/log"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQqFWqoDBGJur-9DEx60pAAAABY"] [Tue Nov 04 15:01:35 2025] [mollywoppersnyb.com] [error] [client 34.205.170.13:32253] [pid 253361] apache2_util.c(271): [client 34.205.170.13] ModSecurity: Access denied with code 418 (phase 2). Pattern match "^[\\\\.|/]+(proc/|dev/shm/)" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/99_dreamhost_rules.conf"] [line "53"] [id "1990013"] [msg "Directory traversal"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQqFz6oDBGJur-9DEx62CgAAAIc"] [Tue Nov 04 15:04:18 2025] [mollywoppersnyb.com] [error] [client 52.54.15.103:51164] [pid 253361] apache2_util.c(271): [client 52.54.15.103] ModSecurity: Warning. Matched phrase "sys/module" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: sys/module found within ARGS:path: /sys/module/nfsd"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQqGcqoDBGJur-9DEx63fgAAAEw"] [Tue Nov 04 15:04:38 2025] [mollywoppersnyb.com] [error] [client 98.84.60.17:52498] [pid 253361] apache2_util.c(271): [client 98.84.60.17] ModSecurity: Warning. Matched phrase "etc/proftpd" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: etc/proftpd found within ARGS:path: /etc/proftpd/conf.d"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQqGhqoDBGJur-9DEx63nwAAAMo"] [Tue Nov 04 15:05:14 2025] [mollywoppersnyb.com] [error] [client 98.84.60.17:17705] [pid 253361] apache2_util.c(271): [client 98.84.60.17] ModSecurity: Warning. Matched phrase "sys/module" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: sys/module found within ARGS:path: /sys/module/dm_raid"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQqGqqoDBGJur-9DEx63zQAAABQ"] [Tue Nov 04 15:07:01 2025] [mollywoppersnyb.com] [error] [client 54.83.23.103:65481] [pid 253361] apache2_util.c(271): [client 54.83.23.103] ModSecurity: Warning. Matched phrase "sys/kernel" at ARGS:fileloc. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: sys/kernel found within ARGS:fileloc: /sys/kernel/oops_count"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQqHFKoDBGJur-9DEx64hAAAAKs"] [Tue Nov 04 15:07:01 2025] [mollywoppersnyb.com] [error] [client 54.83.23.103:65481] [pid 253361] apache2_util.c(271): [client 54.83.23.103] ModSecurity: Warning. Matched phrase "sys/kernel" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: sys/kernel found within ARGS:path: /sys/kernel"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQqHFKoDBGJur-9DEx64hAAAAKs"] [Tue Nov 04 15:09:17 2025] [mollywoppersnyb.com] [error] [client 184.73.239.35:22323] [pid 253361] apache2_util.c(271): [client 184.73.239.35] ModSecurity: Warning. Matched phrase "var/log" at ARGS:fileloc. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: var/log found within ARGS:fileloc: /var/log/sshlimit.log.4.gz"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQqHnKoDBGJur-9DEx65eAAAALs"] [Tue Nov 04 15:09:17 2025] [mollywoppersnyb.com] [error] [client 184.73.239.35:22323] [pid 253361] apache2_util.c(271): [client 184.73.239.35] ModSecurity: Warning. Matched phrase "var/log" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: var/log found within ARGS:path: /var/log"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQqHnKoDBGJur-9DEx65eAAAALs"] [Tue Nov 04 15:09:45 2025] [mollywoppersnyb.com] [error] [client 18.232.11.247:17219] [pid 253361] apache2_util.c(271): [client 18.232.11.247] ModSecurity: Warning. Matched phrase "var/run/utmp" at ARGS:fileloc. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: var/run/utmp found within ARGS:fileloc: /var/run/utmp"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQqHuaoDBGJur-9DEx66IAAAAJs"] [Tue Nov 04 15:13:12 2025] [mollywoppersnyb.com] [error] [client 34.197.28.78:28198] [pid 253361] apache2_util.c(271): [client 34.197.28.78] ModSecurity: Warning. Matched phrase "etc/default" at ARGS:fileloc. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: etc/default found within ARGS:fileloc: /etc/default/smartmontools"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQqIiKoDBGJur-9DEx6-YwAAALc"] [Tue Nov 04 15:13:12 2025] [mollywoppersnyb.com] [error] [client 34.197.28.78:28198] [pid 253361] apache2_util.c(271): [client 34.197.28.78] ModSecurity: Warning. Matched phrase "etc/default" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: etc/default found within ARGS:path: /etc/default"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQqIiKoDBGJur-9DEx6-YwAAALc"] [Tue Nov 04 15:16:24 2025] [mollywoppersnyb.com] [error] [client 3.230.69.161:50567] [pid 253361] apache2_util.c(271): [client 3.230.69.161] ModSecurity: Warning. Matched phrase "etc/init" at ARGS:fileloc. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: etc/init found within ARGS:fileloc: /etc/init.d/udev"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQqJSKoDBGJur-9DEx7EBAAAACY"] [Tue Nov 04 15:16:24 2025] [mollywoppersnyb.com] [error] [client 3.230.69.161:50567] [pid 253361] apache2_util.c(271): [client 3.230.69.161] ModSecurity: Warning. Matched phrase "etc/init" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: etc/init found within ARGS:path: /etc/init.d"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQqJSKoDBGJur-9DEx7EBAAAACY"] [Tue Nov 04 15:20:57 2025] [mollywoppersnyb.com] [error] [client 34.197.28.78:20005] [pid 253361] apache2_util.c(271): [client 34.197.28.78] ModSecurity: Warning. Matched phrase "etc/.java" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: etc/.java found within ARGS:path: /etc/.java/.systemPrefs"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQqKWaoDBGJur-9DEx7KXgAAAEs"] [Tue Nov 04 15:25:37 2025] [mollywoppersnyb.com] [error] [client 23.21.179.27:2090] [pid 253361] apache2_util.c(271): [client 23.21.179.27] ModSecurity: Warning. Matched phrase "sys/class" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: sys/class found within ARGS:path: /sys/class/scsi_disk"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQqLcaoDBGJur-9DEx7MnQAAAEs"] [Tue Nov 04 15:30:49 2025] [mollywoppersnyb.com] [error] [client 34.195.60.66:32646] [pid 253361] apache2_util.c(271): [client 34.195.60.66] ModSecurity: Warning. Matched phrase "etc/php" at ARGS:fileloc. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: etc/php found within ARGS:fileloc: /etc/php81/php.ini.generated"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQqMqaoDBGJur-9DEx7QuAAAAIc"] [Tue Nov 04 15:30:49 2025] [mollywoppersnyb.com] [error] [client 34.195.60.66:32646] [pid 253361] apache2_util.c(271): [client 34.195.60.66] ModSecurity: Warning. Matched phrase "etc/php" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: etc/php found within ARGS:path: /etc/php81"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQqMqaoDBGJur-9DEx7QuAAAAIc"] [Tue Nov 04 15:31:57 2025] [mollywoppersnyb.com] [error] [client 52.200.93.170:57202] [pid 253361] apache2_util.c(271): [client 52.200.93.170] ModSecurity: Warning. Matched phrase "var/log" at ARGS:fileloc. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: var/log found within ARGS:fileloc: /var/log/sshlimit.log.6.gz"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQqM7aoDBGJur-9DEx7RUwAAAHc"] [Tue Nov 04 15:31:57 2025] [mollywoppersnyb.com] [error] [client 52.200.93.170:57202] [pid 253361] apache2_util.c(271): [client 52.200.93.170] ModSecurity: Warning. Matched phrase "var/log" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: var/log found within ARGS:path: /var/log"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQqM7aoDBGJur-9DEx7RUwAAAHc"] [Tue Nov 04 15:35:37 2025] [mollywoppersnyb.com] [error] [client 34.227.156.153:4457] [pid 940448] apache2_util.c(271): [client 34.227.156.153] ModSecurity: Warning. Matched phrase "sys/module" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: sys/module found within ARGS:path: /sys/module/tcp_nv"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQqNyXoPlY_LfN-NKIu08QAAAEo"] [Tue Nov 04 15:36:49 2025] [mollywoppersnyb.com] [error] [client 3.220.148.166:62580] [pid 940448] apache2_util.c(271): [client 3.220.148.166] ModSecurity: Warning. Matched phrase "var/log" at ARGS:fileloc. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: var/log found within ARGS:fileloc: /var/log/cloud-init-output.log"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQqOEXoPlY_LfN-NKIu1QgAAACo"] [Tue Nov 04 15:36:49 2025] [mollywoppersnyb.com] [error] [client 3.220.148.166:62580] [pid 940448] apache2_util.c(271): [client 3.220.148.166] ModSecurity: Warning. Matched phrase "var/log" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: var/log found within ARGS:path: /var/log"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQqOEXoPlY_LfN-NKIu1QgAAACo"] [Tue Nov 04 15:43:16 2025] [mollywoppersnyb.com] [error] [client 44.209.187.99:44189] [pid 940448] apache2_util.c(271): [client 44.209.187.99] ModSecurity: Warning. Matched phrase "var/log" at ARGS:fileloc. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: var/log found within ARGS:fileloc: /var/log/daemon.log.2.gz"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQqPlHoPlY_LfN-NKIu4VAAAAMY"] [Tue Nov 04 15:43:16 2025] [mollywoppersnyb.com] [error] [client 44.209.187.99:44189] [pid 940448] apache2_util.c(271): [client 44.209.187.99] ModSecurity: Warning. Matched phrase "var/log" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: var/log found within ARGS:path: /var/log"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQqPlHoPlY_LfN-NKIu4VAAAAMY"] [Tue Nov 04 15:44:05 2025] [mollywoppersnyb.com] [error] [client 18.210.58.238:24609] [pid 940448] apache2_util.c(271): [client 18.210.58.238] ModSecurity: Warning. Matched phrase "var/log" at ARGS:fileloc. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: var/log found within ARGS:fileloc: /var/log/dmesg"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQqPxXoPlY_LfN-NKIu4sAAAAJY"] [Tue Nov 04 15:44:05 2025] [mollywoppersnyb.com] [error] [client 18.210.58.238:24609] [pid 940448] apache2_util.c(271): [client 18.210.58.238] ModSecurity: Warning. Matched phrase "var/log" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: var/log found within ARGS:path: /var/log"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQqPxXoPlY_LfN-NKIu4sAAAAJY"] [Tue Nov 04 15:45:28 2025] [mollywoppersnyb.com] [error] [client 52.205.141.124:18156] [pid 940448] apache2_util.c(271): [client 52.205.141.124] ModSecurity: Access denied with code 418 (phase 2). Pattern match "^[\\\\.|/]+(proc/|dev/shm/)" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/99_dreamhost_rules.conf"] [line "53"] [id "1990013"] [msg "Directory traversal"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQqQGHoPlY_LfN-NKIu5PwAAACE"] [Tue Nov 04 15:46:01 2025] [mollywoppersnyb.com] [error] [client 52.2.4.213:28754] [pid 940448] apache2_util.c(271): [client 52.2.4.213] ModSecurity: Access denied with code 418 (phase 2). Pattern match "^[\\\\.|/]+(proc/|dev/shm/)" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/99_dreamhost_rules.conf"] [line "53"] [id "1990013"] [msg "Directory traversal"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQqQOHoPlY_LfN-NKIu5bAAAAJg"] [Tue Nov 04 15:47:45 2025] [mollywoppersnyb.com] [error] [client 54.90.244.132:2352] [pid 940448] apache2_util.c(271): [client 54.90.244.132] ModSecurity: Warning. Matched phrase "etc/systemd" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: etc/systemd found within ARGS:path: /etc/systemd/network"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQqQoXoPlY_LfN-NKIu6DgAAAAc"] [Tue Nov 04 15:48:01 2025] [mollywoppersnyb.com] [error] [client 18.213.102.186:12221] [pid 940448] apache2_util.c(271): [client 18.213.102.186] ModSecurity: Warning. Matched phrase "etc/ssl" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: etc/ssl found within ARGS:path: /etc/ssl/certs"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQqQsXoPlY_LfN-NKIu6XAAAAJw"] [Tue Nov 04 15:49:05 2025] [mollywoppersnyb.com] [error] [client 52.70.123.241:14066] [pid 940448] apache2_util.c(271): [client 52.70.123.241] ModSecurity: Warning. Matched phrase "var/log" at ARGS:fileloc. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: var/log found within ARGS:fileloc: /var/log/ubuntu-advantage.log.1"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQqQ8XoPlY_LfN-NKIu60QAAAH4"] [Tue Nov 04 15:49:05 2025] [mollywoppersnyb.com] [error] [client 52.70.123.241:14066] [pid 940448] apache2_util.c(271): [client 52.70.123.241] ModSecurity: Warning. Matched phrase "var/log" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: var/log found within ARGS:path: /var/log"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQqQ8XoPlY_LfN-NKIu60QAAAH4"] [Tue Nov 04 15:54:17 2025] [mollywoppersnyb.com] [error] [client 52.2.4.213:39650] [pid 940448] apache2_util.c(271): [client 52.2.4.213] ModSecurity: Warning. Matched phrase "sys/kernel" at ARGS:fileloc. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: sys/kernel found within ARGS:fileloc: /sys/kernel/crash_elfcorehdr_size"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQqSKXoPlY_LfN-NKIu8qQAAAAY"] [Tue Nov 04 15:54:17 2025] [mollywoppersnyb.com] [error] [client 52.2.4.213:39650] [pid 940448] apache2_util.c(271): [client 52.2.4.213] ModSecurity: Warning. Matched phrase "sys/kernel" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: sys/kernel found within ARGS:path: /sys/kernel"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQqSKXoPlY_LfN-NKIu8qQAAAAY"] [Tue Nov 04 15:59:13 2025] [mollywoppersnyb.com] [error] [client 100.29.34.97:33853] [pid 940448] apache2_util.c(271): [client 100.29.34.97] ModSecurity: Warning. Matched phrase "etc/php" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: etc/php found within ARGS:path: /etc/php84/conf.d"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQqTUXoPlY_LfN-NKIu_DAAAAGM"] [Tue Nov 04 16:00:37 2025] [mollywoppersnyb.com] [error] [client 52.73.6.26:61755] [pid 940448] apache2_util.c(271): [client 52.73.6.26] ModSecurity: Warning. Matched phrase "sys/module" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: sys/module found within ARGS:path: /sys/module/i2c_piix4"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQqTpXoPlY_LfN-NKIvAbQAAAJk"] [Tue Nov 04 16:00:41 2025] [mollywoppersnyb.com] [error] [client 54.166.104.83:33129] [pid 940448] apache2_util.c(271): [client 54.166.104.83] ModSecurity: Warning. Matched phrase "etc/network" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: etc/network found within ARGS:path: /etc/NetworkManager/conf.d"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQqTqXoPlY_LfN-NKIvAdQAAAKw"] [Tue Nov 04 16:01:33 2025] [mollywoppersnyb.com] [error] [client 54.83.180.239:27763] [pid 940448] apache2_util.c(271): [client 54.83.180.239] ModSecurity: Access denied with code 418 (phase 2). Pattern match "^[\\\\.|/]+(proc/|dev/shm/)" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/99_dreamhost_rules.conf"] [line "53"] [id "1990013"] [msg "Directory traversal"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQqT3XoPlY_LfN-NKIvA4AAAAH0"] [Tue Nov 04 16:08:45 2025] [mollywoppersnyb.com] [error] [client 54.198.33.233:63627] [pid 940448] apache2_util.c(271): [client 54.198.33.233] ModSecurity: Warning. Matched phrase "var/log" at ARGS:fileloc. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: var/log found within ARGS:fileloc: /var/log/kern.log.1"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQqVjXoPlY_LfN-NKIvEZwAAAHA"] [Tue Nov 04 16:08:45 2025] [mollywoppersnyb.com] [error] [client 54.198.33.233:63627] [pid 940448] apache2_util.c(271): [client 54.198.33.233] ModSecurity: Warning. Matched phrase "var/log" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: var/log found within ARGS:path: /var/log"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQqVjXoPlY_LfN-NKIvEZwAAAHA"] [Tue Nov 04 16:08:53 2025] [mollywoppersnyb.com] [error] [client 52.4.213.199:24025] [pid 940448] apache2_util.c(271): [client 52.4.213.199] ModSecurity: Warning. Matched phrase "var/mail" at ARGS:fileloc. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: var/mail found within ARGS:fileloc: /var/mail/ketang"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQqVlXoPlY_LfN-NKIvEgwAAALc"] [Tue Nov 04 16:08:53 2025] [mollywoppersnyb.com] [error] [client 52.4.213.199:24025] [pid 940448] apache2_util.c(271): [client 52.4.213.199] ModSecurity: Warning. Matched phrase "var/mail" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: var/mail found within ARGS:path: /var/mail"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQqVlXoPlY_LfN-NKIvEgwAAALc"] [Tue Nov 04 16:10:41 2025] [mollywoppersnyb.com] [error] [client 18.235.81.246:54350] [pid 940448] apache2_util.c(271): [client 18.235.81.246] ModSecurity: Warning. Matched phrase "var/log" at ARGS:fileloc. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: var/log found within ARGS:fileloc: /var/log/synflood.log"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQqWAHoPlY_LfN-NKIvFewAAAAg"] [Tue Nov 04 16:10:41 2025] [mollywoppersnyb.com] [error] [client 18.235.81.246:54350] [pid 940448] apache2_util.c(271): [client 18.235.81.246] ModSecurity: Warning. Matched phrase "var/log" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: var/log found within ARGS:path: /var/log"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQqWAHoPlY_LfN-NKIvFewAAAAg"] [Tue Nov 04 16:17:12 2025] [mollywoppersnyb.com] [error] [client 52.71.203.206:54035] [pid 940448] apache2_util.c(271): [client 52.71.203.206] ModSecurity: Warning. Matched phrase "etc/muttrc.d" at ARGS:fileloc. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: etc/muttrc.d found within ARGS:fileloc: /etc/Muttrc.d/compressed-folders.rc"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQqXiHoPlY_LfN-NKIvJlAAAABA"] [Tue Nov 04 16:17:12 2025] [mollywoppersnyb.com] [error] [client 52.71.203.206:54035] [pid 940448] apache2_util.c(271): [client 52.71.203.206] ModSecurity: Warning. Matched phrase "etc/muttrc.d" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: etc/muttrc.d found within ARGS:path: /etc/Muttrc.d"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQqXiHoPlY_LfN-NKIvJlAAAABA"] [Tue Nov 04 16:23:32 2025] [mollywoppersnyb.com] [error] [client 3.90.73.206:12684] [pid 940448] apache2_util.c(271): [client 3.90.73.206] ModSecurity: Warning. Matched phrase "etc/java" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: etc/java found within ARGS:path: /etc/java-8-openjdk/images"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQqZBHoPlY_LfN-NKIvPoAAAAH0"] [Tue Nov 04 16:23:56 2025] [mollywoppersnyb.com] [error] [client 18.204.89.56:10860] [pid 940448] apache2_util.c(271): [client 18.204.89.56] ModSecurity: Access denied with code 418 (phase 2). Pattern match "^[\\\\.|/]+(proc/|dev/shm/)" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/99_dreamhost_rules.conf"] [line "53"] [id "1990013"] [msg "Directory traversal"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQqZHHoPlY_LfN-NKIvQTwAAAMk"] [Tue Nov 04 16:27:53 2025] [mollywoppersnyb.com] [error] [client 3.221.222.168:26593] [pid 940448] apache2_util.c(271): [client 3.221.222.168] ModSecurity: Warning. Matched phrase "etc/iproute2" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: etc/iproute2 found within ARGS:path: /etc/iproute2/rt_protos.d"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQqaCXoPlY_LfN-NKIvSNgAAAG4"] [Tue Nov 04 16:30:45 2025] [mollywoppersnyb.com] [error] [client 54.83.240.58:7446] [pid 940448] apache2_util.c(271): [client 54.83.240.58] ModSecurity: Warning. Matched phrase "sys/kernel" at ARGS:fileloc. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: sys/kernel found within ARGS:fileloc: /sys/kernel/profiling"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQqatXoPlY_LfN-NKIvT2AAAANg"] [Tue Nov 04 16:30:45 2025] [mollywoppersnyb.com] [error] [client 54.83.240.58:7446] [pid 940448] apache2_util.c(271): [client 54.83.240.58] ModSecurity: Warning. Matched phrase "sys/kernel" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: sys/kernel found within ARGS:path: /sys/kernel"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQqatXoPlY_LfN-NKIvT2AAAANg"] [Tue Nov 04 16:31:04 2025] [mollywoppersnyb.com] [error] [client 44.215.61.66:21396] [pid 940448] apache2_util.c(271): [client 44.215.61.66] ModSecurity: Warning. Matched phrase "etc/network" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: etc/network found within ARGS:path: /etc/network/interfaces.d"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQqayHoPlY_LfN-NKIvUBAAAAHU"] [Tue Nov 04 16:37:13 2025] [mollywoppersnyb.com] [error] [client 184.73.239.35:52254] [pid 940448] apache2_util.c(271): [client 184.73.239.35] ModSecurity: Warning. Matched phrase "sys/module" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: sys/module found within ARGS:path: /sys/module/efi_pstore"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQqcOXoPlY_LfN-NKIvYSQAAAC4"] [Tue Nov 04 16:37:16 2025] [mollywoppersnyb.com] [error] [client 35.171.141.42:52812] [pid 940448] apache2_util.c(271): [client 35.171.141.42] ModSecurity: Warning. Matched phrase "etc/polkit-1" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: etc/polkit-1 found within ARGS:path: /etc/polkit-1/localauthority"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQqcPHoPlY_LfN-NKIvYUAAAAEs"] [Tue Nov 04 16:39:01 2025] [mollywoppersnyb.com] [error] [client 34.233.219.155:30360] [pid 940448] apache2_util.c(271): [client 34.233.219.155] ModSecurity: Warning. Matched phrase "etc/lvm" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: etc/lvm found within ARGS:path: /etc/lvm/profile"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQqcpXoPlY_LfN-NKIvZMwAAADU"] [Tue Nov 04 16:40:17 2025] [mollywoppersnyb.com] [error] [client 50.19.102.70:25561] [pid 940448] apache2_util.c(271): [client 50.19.102.70] ModSecurity: Warning. Matched phrase "/tmp/" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: /tmp/ found within ARGS:path: /var/tmp/pagan_chunks"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQqc8XoPlY_LfN-NKIvZqQAAAAc"] [Tue Nov 04 16:42:45 2025] [mollywoppersnyb.com] [error] [client 18.215.49.176:27358] [pid 940448] apache2_util.c(271): [client 18.215.49.176] ModSecurity: Warning. Matched phrase "etc/dbus-1" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: etc/dbus-1 found within ARGS:path: /etc/dbus-1/session.d"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQqdhXoPlY_LfN-NKIvazQAAAG8"] [Tue Nov 04 16:43:08 2025] [mollywoppersnyb.com] [error] [client 3.210.114.189:49788] [pid 940448] apache2_util.c(271): [client 3.210.114.189] ModSecurity: Warning. Matched phrase "etc/network" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: etc/network found within ARGS:path: /etc/networkd-dispatcher/degraded.d"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQqdnHoPlY_LfN-NKIva_AAAAAk"] [Tue Nov 04 16:43:21 2025] [mollywoppersnyb.com] [error] [client 185.180.13.99:43225] [pid 940448] mod_access_compat.c(350): AH01797: client denied by server configuration: /home/mollywopper/mollywoppersnyb.com/.well-known/acme-challenge/index.php [Tue Nov 04 16:43:36 2025] [mollywoppersnyb.com] [error] [client 54.83.56.1:19958] [pid 940448] apache2_util.c(271): [client 54.83.56.1] ModSecurity: Warning. Matched phrase "var/log" at ARGS:fileloc. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: var/log found within ARGS:fileloc: /var/log/sshlimit.log.2.gz"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQqduHoPlY_LfN-NKIvbLQAAAGI"] [Tue Nov 04 16:43:36 2025] [mollywoppersnyb.com] [error] [client 54.83.56.1:19958] [pid 940448] apache2_util.c(271): [client 54.83.56.1] ModSecurity: Warning. Matched phrase "var/log" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: var/log found within ARGS:path: /var/log"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQqduHoPlY_LfN-NKIvbLQAAAGI"] [Tue Nov 04 16:45:49 2025] [mollywoppersnyb.com] [error] [client 52.54.95.127:26799] [pid 940448] apache2_util.c(271): [client 52.54.95.127] ModSecurity: Warning. Matched phrase "etc/init" at ARGS:fileloc. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: etc/init found within ARGS:fileloc: /etc/init.d/dbus"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQqePXoPlY_LfN-NKIvcUAAAANs"] [Tue Nov 04 16:45:49 2025] [mollywoppersnyb.com] [error] [client 52.54.95.127:26799] [pid 940448] apache2_util.c(271): [client 52.54.95.127] ModSecurity: Warning. Matched phrase "etc/init" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: etc/init found within ARGS:path: /etc/init.d"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQqePXoPlY_LfN-NKIvcUAAAANs"] [Tue Nov 04 16:46:20 2025] [mollywoppersnyb.com] [error] [client 54.84.250.51:11171] [pid 940448] apache2_util.c(271): [client 54.84.250.51] ModSecurity: Warning. Matched phrase "etc/init" at ARGS:fileloc. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: etc/init found within ARGS:fileloc: /etc/init.d/ipmievd"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQqeXHoPlY_LfN-NKIvcdgAAAFU"] [Tue Nov 04 16:46:20 2025] [mollywoppersnyb.com] [error] [client 54.84.250.51:11171] [pid 940448] apache2_util.c(271): [client 54.84.250.51] ModSecurity: Warning. Matched phrase "etc/init" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: etc/init found within ARGS:path: /etc/init.d"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQqeXHoPlY_LfN-NKIvcdgAAAFU"] [Tue Nov 04 16:55:57 2025] [mollywoppersnyb.com] [error] [client 54.85.126.86:1528] [pid 940448] apache2_util.c(271): [client 54.85.126.86] ModSecurity: Warning. Matched phrase "var/log" at ARGS:fileloc. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: var/log found within ARGS:fileloc: /var/log/wtmp.1"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQqgnXoPlY_LfN-NKIvhJgAAANc"] [Tue Nov 04 16:55:57 2025] [mollywoppersnyb.com] [error] [client 54.85.126.86:1528] [pid 940448] apache2_util.c(271): [client 54.85.126.86] ModSecurity: Warning. Matched phrase "var/log" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: var/log found within ARGS:path: /var/log"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQqgnXoPlY_LfN-NKIvhJgAAANc"] [Tue Nov 04 17:01:24 2025] [mollywoppersnyb.com] [error] [client 18.209.201.119:58342] [pid 940448] apache2_util.c(271): [client 18.209.201.119] ModSecurity: Warning. Matched phrase "etc/php" at ARGS:fileloc. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: etc/php found within ARGS:fileloc: /etc/php84/php.ini.generated"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQqh5HoPlY_LfN-NKIvj1QAAAF4"] [Tue Nov 04 17:01:24 2025] [mollywoppersnyb.com] [error] [client 18.209.201.119:58342] [pid 940448] apache2_util.c(271): [client 18.209.201.119] ModSecurity: Warning. Matched phrase "etc/php" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: etc/php found within ARGS:path: /etc/php84"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQqh5HoPlY_LfN-NKIvj1QAAAF4"] [Tue Nov 04 17:05:24 2025] [mollywoppersnyb.com] [error] [client 23.23.103.31:51637] [pid 940448] apache2_util.c(271): [client 23.23.103.31] ModSecurity: Warning. Matched phrase "etc/muttrc.d" at ARGS:fileloc. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: etc/muttrc.d found within ARGS:fileloc: /etc/Muttrc.d/smime.rc"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQqi1HoPlY_LfN-NKIvlYQAAAGw"] [Tue Nov 04 17:05:24 2025] [mollywoppersnyb.com] [error] [client 23.23.103.31:51637] [pid 940448] apache2_util.c(271): [client 23.23.103.31] ModSecurity: Warning. Matched phrase "etc/muttrc.d" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: etc/muttrc.d found within ARGS:path: /etc/Muttrc.d"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQqi1HoPlY_LfN-NKIvlYQAAAGw"] [Tue Nov 04 17:06:33 2025] [mollywoppersnyb.com] [error] [client 52.2.58.41:40609] [pid 940448] apache2_util.c(271): [client 52.2.58.41] ModSecurity: Warning. Matched phrase "etc/default" at ARGS:fileloc. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: etc/default found within ARGS:fileloc: /etc/default/grub"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQqjGXoPlY_LfN-NKIvl1gAAAGw"] [Tue Nov 04 17:06:33 2025] [mollywoppersnyb.com] [error] [client 52.2.58.41:40609] [pid 940448] apache2_util.c(271): [client 52.2.58.41] ModSecurity: Warning. Matched phrase "etc/default" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: etc/default found within ARGS:path: /etc/default"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQqjGXoPlY_LfN-NKIvl1gAAAGw"] [Tue Nov 04 17:15:05 2025] [mollywoppersnyb.com] [error] [client 35.169.102.85:58446] [pid 940448] apache2_util.c(271): [client 35.169.102.85] ModSecurity: Warning. Matched phrase "etc/logrotate.d" at ARGS:fileloc. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: etc/logrotate.d found within ARGS:fileloc: /etc/logrotate.d/ufw"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQqlGXoPlY_LfN-NKIvq0wAAAIo"] [Tue Nov 04 17:15:05 2025] [mollywoppersnyb.com] [error] [client 35.169.102.85:58446] [pid 940448] apache2_util.c(271): [client 35.169.102.85] ModSecurity: Warning. Matched phrase "etc/logrotate.d" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: etc/logrotate.d found within ARGS:path: /etc/logrotate.d"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQqlGXoPlY_LfN-NKIvq0wAAAIo"] [Tue Nov 04 17:17:12 2025] [mollywoppersnyb.com] [error] [client 52.70.123.241:30363] [pid 940448] apache2_util.c(271): [client 52.70.123.241] ModSecurity: Warning. Matched phrase "etc/rcs.d" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: etc/rcs.d found within ARGS:path: /etc/rcS.d"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/"] [unique_id "aQqlmHoPlY_LfN-NKIvr8gAAAJI"] [Tue Nov 04 17:19:08 2025] [mollywoppersnyb.com] [error] [client 35.174.141.243:29833] [pid 940448] apache2_util.c(271): [client 35.174.141.243] ModSecurity: Warning. Matched phrase "sys/dev" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: sys/dev found within ARGS:path: /sys/devices/ibs_fetch/subsystem"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQqmDHoPlY_LfN-NKIvsywAAACY"] [Tue Nov 04 17:21:05 2025] [mollywoppersnyb.com] [error] [client 52.202.233.37:60511] [pid 940448] apache2_util.c(271): [client 52.202.233.37] ModSecurity: Access denied with code 418 (phase 2). Pattern match "^[\\\\.|/]+(proc/|dev/shm/)" at ARGS:fileloc. [file "/etc/modsecurity/mod_sec3_CRS/99_dreamhost_rules.conf"] [line "53"] [id "1990013"] [msg "Directory traversal"] [hostname "mollywoppersnyb.com"] [uri "/"] [unique_id "aQqmgXoPlY_LfN-NKIvtkwAAAMM"] [Tue Nov 04 17:24:29 2025] [mollywoppersnyb.com] [error] [client 3.94.40.182:41011] [pid 940448] apache2_util.c(271): [client 3.94.40.182] ModSecurity: Warning. Matched phrase "sys/class" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: sys/class found within ARGS:path: /sys/class/ata_link/link4"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQqnTXoPlY_LfN-NKIvvFwAAAKo"] [Tue Nov 04 17:24:48 2025] [mollywoppersnyb.com] [error] [client 54.145.82.217:6903] [pid 940448] apache2_util.c(271): [client 54.145.82.217] ModSecurity: Warning. Matched phrase "sys/dev" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: sys/dev found within ARGS:path: /sys/dev/char/3:23"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQqnYHoPlY_LfN-NKIvvNAAAALQ"] [Tue Nov 04 17:25:09 2025] [mollywoppersnyb.com] [error] [client 34.231.45.47:2968] [pid 940448] apache2_util.c(271): [client 34.231.45.47] ModSecurity: Warning. Matched phrase "sys/dev" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: sys/dev found within ARGS:path: /sys/dev/char/3:20"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQqndXoPlY_LfN-NKIvvYAAAAFo"] [Tue Nov 04 17:31:40 2025] [mollywoppersnyb.com] [error] [client 80.97.160.166:52256] [pid 940448] mod_access_compat.c(350): AH01797: client denied by server configuration: /home/mollywopper/mollywoppersnyb.com/.well-known/acme-challenge/index.php [Tue Nov 04 17:31:44 2025] [mollywoppersnyb.com] [error] [client 54.159.18.27:17841] [pid 940448] apache2_util.c(271): [client 54.159.18.27] ModSecurity: Warning. Matched phrase "sys/dev" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: sys/dev found within ARGS:path: /sys/devices/msr/subsystem"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQqpAHoPlY_LfN-NKIvxoQAAAJI"] [Tue Nov 04 17:31:57 2025] [mollywoppersnyb.com] [error] [client 54.83.56.1:60678] [pid 940448] apache2_util.c(271): [client 54.83.56.1] ModSecurity: Warning. Matched phrase "sys/class" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: sys/class found within ARGS:path: /sys/class/pci_bus/0000:c2"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQqpDXoPlY_LfN-NKIvxvwAAAK8"] [Tue Nov 04 17:33:32 2025] [mollywoppersnyb.com] [error] [client 3.90.73.206:17539] [pid 1649003] apache2_util.c(271): [client 3.90.73.206] ModSecurity: Warning. Matched phrase "sys/kernel" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: sys/kernel found within ARGS:path: /sys/kernel/irq/414"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQqpbOY4CQXI3AdwZ6n4XQAATqo"] [Tue Nov 04 17:34:13 2025] [mollywoppersnyb.com] [error] [client 52.54.157.23:2965] [pid 1649003] apache2_util.c(271): [client 52.54.157.23] ModSecurity: Warning. Matched phrase "sys/class" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: sys/class found within ARGS:path: /sys/class/cpuid/cpu110"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQqpleY4CQXI3AdwZ6n4rwAATmM"] [Tue Nov 04 17:44:13 2025] [mollywoppersnyb.com] [error] [client 54.156.124.2:39835] [pid 1649003] apache2_util.c(271): [client 54.156.124.2] ModSecurity: Warning. Matched phrase "sys/dev" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: sys/dev found within ARGS:path: /sys/devices/virtual/vc"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQqr7eY4CQXI3AdwZ6n-iQAATp8"] [Tue Nov 04 17:44:16 2025] [mollywoppersnyb.com] [error] [client 23.23.214.190:16450] [pid 1649003] apache2_util.c(271): [client 23.23.214.190] ModSecurity: Warning. Matched phrase "sys/class" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: sys/class found within ARGS:path: /sys/class/ata_port/ata8"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQqr8OY4CQXI3AdwZ6n-jAAATp0"] [Tue Nov 04 17:44:32 2025] [mollywoppersnyb.com] [error] [client 44.195.145.102:60849] [pid 1649003] apache2_util.c(271): [client 44.195.145.102] ModSecurity: Warning. Matched phrase "sys/class" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: sys/class found within ARGS:path: /sys/class/tty/tty7"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQqsAOY4CQXI3AdwZ6n-ngAATrI"] [Tue Nov 04 17:57:36 2025] [mollywoppersnyb.com] [error] [client 44.213.36.21:23002] [pid 1649003] apache2_util.c(271): [client 44.213.36.21] ModSecurity: Warning. Matched phrase "sys/dev" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: sys/dev found within ARGS:path: /sys/dev/char/4:5"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQqvEOY4CQXI3AdwZ6kEZgAATns"] [Tue Nov 04 17:59:33 2025] [mollywoppersnyb.com] [error] [client 54.84.250.51:37090] [pid 1649003] apache2_util.c(271): [client 54.84.250.51] ModSecurity: Warning. Matched phrase "sys/dev" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: sys/dev found within ARGS:path: /sys/dev/char/3:122"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQqvheY4CQXI3AdwZ6kFIAAATsY"] [Tue Nov 04 18:00:21 2025] [mollywoppersnyb.com] [error] [client 34.231.118.144:18379] [pid 1649003] apache2_util.c(271): [client 34.231.118.144] ModSecurity: Warning. Matched phrase "sys/class" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: sys/class found within ARGS:path: /sys/class/tty/ttyd2"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQqvteY4CQXI3AdwZ6kFiwAATuo"] [Tue Nov 04 18:00:33 2025] [mollywoppersnyb.com] [error] [client 100.28.204.82:39171] [pid 1649003] apache2_util.c(271): [client 100.28.204.82] ModSecurity: Warning. Matched phrase "sys/class" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: sys/class found within ARGS:path: /sys/class/tty/ttyS14"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQqvweY4CQXI3AdwZ6kFmAAATuY"] [Tue Nov 04 18:05:28 2025] [mollywoppersnyb.com] [error] [client 54.225.199.17:21490] [pid 1649003] apache2_util.c(271): [client 54.225.199.17] ModSecurity: Warning. Matched phrase "sys/module" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: sys/module found within ARGS:path: /sys/module/rbd/parameters"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQqw6OY4CQXI3AdwZ6kHTgAATqY"] [Tue Nov 04 18:05:48 2025] [mollywoppersnyb.com] [error] [client 44.223.115.10:23066] [pid 1649003] apache2_util.c(271): [client 44.223.115.10] ModSecurity: Warning. Matched phrase "sys/class" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: sys/class found within ARGS:path: /sys/class/tty/ttyva"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQqw_OY4CQXI3AdwZ6kHYgAATv4"] [Tue Nov 04 18:08:05 2025] [mollywoppersnyb.com] [error] [client 3.209.174.110:40163] [pid 1649003] apache2_util.c(271): [client 3.209.174.110] ModSecurity: Warning. Matched phrase "sys/bus" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: sys/bus found within ARGS:path: /sys/bus/pnp/drivers"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQqxheY4CQXI3AdwZ6kIpAAATpA"] [Tue Nov 04 18:08:36 2025] [mollywoppersnyb.com] [error] [client 184.73.35.182:36148] [pid 1649003] apache2_util.c(271): [client 184.73.35.182] ModSecurity: Warning. Matched phrase "sys/class" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: sys/class found within ARGS:path: /sys/class/tty/ptyt1"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQqxpOY4CQXI3AdwZ6kI4AAATuY"] [Tue Nov 04 18:11:44 2025] [mollywoppersnyb.com] [error] [client 52.5.242.243:62305] [pid 1649003] apache2_util.c(271): [client 52.5.242.243] ModSecurity: Warning. Matched phrase "sys/kernel" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: sys/kernel found within ARGS:path: /sys/kernel/irq/750"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQqyYOY4CQXI3AdwZ6kKXwAATnY"] [Tue Nov 04 18:14:21 2025] [mollywoppersnyb.com] [error] [client 18.210.58.238:43611] [pid 1649003] apache2_util.c(271): [client 18.210.58.238] ModSecurity: Warning. Matched phrase "sys/class" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: sys/class found within ARGS:path: /sys/class/thermal/cooling_device9"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQqy_eY4CQXI3AdwZ6kLWAAATmA"] [Tue Nov 04 18:15:08 2025] [mollywoppersnyb.com] [error] [client 3.217.171.106:53753] [pid 1649003] apache2_util.c(271): [client 3.217.171.106] ModSecurity: Warning. Matched phrase "etc/default" at ARGS:fileloc. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: etc/default found within ARGS:fileloc: /etc/default/open-iscsi"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQqzLOY4CQXI3AdwZ6kLqAAATkU"] [Tue Nov 04 18:15:08 2025] [mollywoppersnyb.com] [error] [client 3.217.171.106:53753] [pid 1649003] apache2_util.c(271): [client 3.217.171.106] ModSecurity: Warning. Matched phrase "etc/default" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: etc/default found within ARGS:path: /etc/default"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQqzLOY4CQXI3AdwZ6kLqAAATkU"] [Tue Nov 04 18:16:21 2025] [mollywoppersnyb.com] [error] [client 18.213.240.226:23767] [pid 1649003] apache2_util.c(271): [client 18.213.240.226] ModSecurity: Warning. Matched phrase "etc/default" at ARGS:fileloc. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: etc/default found within ARGS:fileloc: /etc/default/debsums"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQqzdeY4CQXI3AdwZ6kMIAAATlU"] [Tue Nov 04 18:16:21 2025] [mollywoppersnyb.com] [error] [client 18.213.240.226:23767] [pid 1649003] apache2_util.c(271): [client 18.213.240.226] ModSecurity: Warning. Matched phrase "etc/default" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: etc/default found within ARGS:path: /etc/default"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQqzdeY4CQXI3AdwZ6kMIAAATlU"] [Tue Nov 04 18:21:33 2025] [mollywoppersnyb.com] [error] [client 34.234.197.175:23869] [pid 1649003] apache2_util.c(271): [client 34.234.197.175] ModSecurity: Warning. Matched phrase "sys/class" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: sys/class found within ARGS:path: /sys/class/vc/vcsu1"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQq0reY4CQXI3AdwZ6kOTwAATo4"] [Tue Nov 04 18:22:05 2025] [mollywoppersnyb.com] [error] [client 34.195.248.30:53395] [pid 1649003] apache2_util.c(271): [client 34.195.248.30] ModSecurity: Warning. Matched phrase "sys/class" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: sys/class found within ARGS:path: /sys/class/tty/ptybc"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQq0zeY4CQXI3AdwZ6kOgAAATuY"] [Tue Nov 04 18:22:21 2025] [mollywoppersnyb.com] [error] [client 3.224.104.67:56880] [pid 1649003] apache2_util.c(271): [client 3.224.104.67] ModSecurity: Warning. Matched phrase "sys/dev" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: sys/dev found within ARGS:path: /sys/dev/char/2:54"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQq03eY4CQXI3AdwZ6kOpQAATlA"] [Tue Nov 04 18:22:37 2025] [mollywoppersnyb.com] [error] [client 54.210.152.179:37911] [pid 1649003] apache2_util.c(271): [client 54.210.152.179] ModSecurity: Warning. Matched phrase "sys/class" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: sys/class found within ARGS:path: /sys/class/tty/ptyd3"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQq07eY4CQXI3AdwZ6kO0gAATtY"] [Tue Nov 04 18:23:41 2025] [mollywoppersnyb.com] [error] [client 35.171.117.160:58857] [pid 1649003] apache2_util.c(271): [client 35.171.117.160] ModSecurity: Warning. Matched phrase "etc/skel" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: etc/skel found within ARGS:path: /etc/skel"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/"] [unique_id "aQq1LeY4CQXI3AdwZ6kPQQAATq0"] [Tue Nov 04 18:25:05 2025] [mollywoppersnyb.com] [error] [client 52.203.152.231:56453] [pid 1649003] apache2_util.c(271): [client 52.203.152.231] ModSecurity: Warning. Matched phrase "sys/class" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: sys/class found within ARGS:path: /sys/class/tty/ptyv9"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQq1geY4CQXI3AdwZ6kP0AAATrM"] [Tue Nov 04 18:25:45 2025] [mollywoppersnyb.com] [error] [client 184.73.68.20:60059] [pid 1649003] apache2_util.c(271): [client 184.73.68.20] ModSecurity: Warning. Matched phrase "sys/module" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: sys/module found within ARGS:path: /sys/module/mlx5_core/parameters"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQq1qeY4CQXI3AdwZ6kQEQAATmM"] [Tue Nov 04 18:27:37 2025] [mollywoppersnyb.com] [error] [client 23.23.99.55:34740] [pid 1649003] apache2_util.c(271): [client 23.23.99.55] ModSecurity: Warning. Matched phrase "sys/block" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: sys/block found within ARGS:path: /sys/block/md0/queue"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQq2GeY4CQXI3AdwZ6kR3gAATuk"] [Tue Nov 04 18:27:50 2025] [mollywoppersnyb.com] [error] [client 52.45.15.233:18559] [pid 1649003] apache2_util.c(271): [client 52.45.15.233] ModSecurity: Warning. Matched phrase "etc/init" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: etc/init found within ARGS:path: /etc/initramfs-tools"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/"] [unique_id "aQq2JuY4CQXI3AdwZ6kSIgAATpw"] [Tue Nov 04 18:28:41 2025] [mollywoppersnyb.com] [error] [client 52.205.222.214:50911] [pid 1649003] apache2_util.c(271): [client 52.205.222.214] ModSecurity: Warning. Matched phrase "sys/dev" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: sys/dev found within ARGS:path: /sys/devices/amd_l3/subsystem"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQq2WeY4CQXI3AdwZ6kTPwAATqU"] [Tue Nov 04 18:28:45 2025] [mollywoppersnyb.com] [error] [client 52.70.209.13:37215] [pid 1649003] apache2_util.c(271): [client 52.70.209.13] ModSecurity: Warning. Matched phrase "etc/ssl" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: etc/ssl found within ARGS:path: /etc/ssl"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/"] [unique_id "aQq2XeY4CQXI3AdwZ6kTUAAATnA"] [Tue Nov 04 18:28:53 2025] [mollywoppersnyb.com] [error] [client 44.209.89.189:36830] [pid 1649003] apache2_util.c(271): [client 44.209.89.189] ModSecurity: Warning. Matched phrase "/tmp/" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: /tmp/ found within ARGS:path: /var/tmp/cloud-init/app_167"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQq2ZeY4CQXI3AdwZ6kTcwAATpg"] [Tue Nov 04 18:29:33 2025] [mollywoppersnyb.com] [error] [client 3.217.171.106:8534] [pid 1649003] apache2_util.c(271): [client 3.217.171.106] ModSecurity: Warning. Matched phrase "sys/class" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: sys/class found within ARGS:path: /sys/class/tty/ttyt2"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQq2jeY4CQXI3AdwZ6kT0gAATm0"] [Tue Nov 04 18:29:42 2025] [mollywoppersnyb.com] [error] [client 50.16.248.61:37419] [pid 1649003] apache2_util.c(271): [client 50.16.248.61] ModSecurity: Warning. Matched phrase "sys/class" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: sys/class found within ARGS:path: /sys/class/tty/ttyd3"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQq2luY4CQXI3AdwZ6kT6AAATog"] [Tue Nov 04 18:30:29 2025] [mollywoppersnyb.com] [error] [client 98.84.200.43:34573] [pid 1649003] apache2_util.c(271): [client 98.84.200.43] ModSecurity: Warning. Matched phrase "sys/class" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: sys/class found within ARGS:path: /sys/class/tty/ttyb6"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQq2xeY4CQXI3AdwZ6kUUwAATkk"] [Tue Nov 04 18:32:25 2025] [mollywoppersnyb.com] [error] [client 52.203.68.145:32897] [pid 1649003] apache2_util.c(271): [client 52.203.68.145] ModSecurity: Warning. Matched phrase "sys/class" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: sys/class found within ARGS:path: /sys/class/tty/ptysb"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQq3OeY4CQXI3AdwZ6kVRQAATts"] [Tue Nov 04 18:32:53 2025] [mollywoppersnyb.com] [error] [client 34.205.163.103:57574] [pid 1649003] apache2_util.c(271): [client 34.205.163.103] ModSecurity: Warning. Matched phrase "sys/kernel" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: sys/kernel found within ARGS:path: /sys/kernel/irq/140"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQq3VeY4CQXI3AdwZ6kVqAAATjg"] [Tue Nov 04 18:33:14 2025] [mollywoppersnyb.com] [error] [client 54.235.172.96:4871] [pid 1649003] apache2_util.c(271): [client 54.235.172.96] ModSecurity: Warning. Matched phrase "sys/dev" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: sys/dev found within ARGS:path: /sys/dev/char/2:79"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQq3auY4CQXI3AdwZ6kWHgAATnw"] [Tue Nov 04 18:34:09 2025] [mollywoppersnyb.com] [error] [client 23.21.225.190:26010] [pid 1649003] apache2_util.c(271): [client 23.21.225.190] ModSecurity: Warning. Matched phrase "sys/dev" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: sys/dev found within ARGS:path: /sys/dev/char/4:17"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQq3oeY4CQXI3AdwZ6kXSAAATiY"] [Tue Nov 04 18:35:45 2025] [mollywoppersnyb.com] [error] [client 3.211.105.134:6365] [pid 1649003] apache2_util.c(271): [client 3.211.105.134] ModSecurity: Warning. Matched phrase "sys/dev" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: sys/dev found within ARGS:path: /sys/devices/virtual/mem"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQq4AeY4CQXI3AdwZ6kZJwAATmg"] [Tue Nov 04 18:35:49 2025] [mollywoppersnyb.com] [error] [client 54.88.84.219:56993] [pid 1649003] apache2_util.c(271): [client 54.88.84.219] ModSecurity: Warning. Matched phrase "sys/bus" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: sys/bus found within ARGS:path: /sys/bus/bcma/devices"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQq4BeY4CQXI3AdwZ6kZMQAATl0"] [Tue Nov 04 18:36:00 2025] [mollywoppersnyb.com] [error] [client 52.204.174.139:59355] [pid 1649003] apache2_util.c(271): [client 52.204.174.139] ModSecurity: Warning. Matched phrase "etc/mail" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: etc/mail found within ARGS:path: /etc/mail/domains/p"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQq4EOY4CQXI3AdwZ6kZbgAATn4"] [Tue Nov 04 18:36:08 2025] [mollywoppersnyb.com] [error] [client 52.203.65.83:39520] [pid 1649003] apache2_util.c(271): [client 52.203.65.83] ModSecurity: Warning. Matched phrase "etc/mail" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: etc/mail found within ARGS:path: /etc/mail/domains/o"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQq4GOY4CQXI3AdwZ6kZlQAATlg"] [Tue Nov 04 18:36:45 2025] [mollywoppersnyb.com] [error] [client 52.21.62.139:27590] [pid 1649003] apache2_util.c(271): [client 52.21.62.139] ModSecurity: Warning. Matched phrase "etc/mail" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: etc/mail found within ARGS:path: /etc/mail/domains/3"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQq4PeY4CQXI3AdwZ6kaoQAATpw"] [Tue Nov 04 18:38:13 2025] [mollywoppersnyb.com] [error] [client 23.23.99.55:28945] [pid 1649003] apache2_util.c(271): [client 23.23.99.55] ModSecurity: Warning. Matched phrase "sys/class" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: sys/class found within ARGS:path: /sys/class/nvme-subsystem/nvme-subsys7"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQq4leY4CQXI3AdwZ6kc8QAATtU"] [Tue Nov 04 18:38:37 2025] [mollywoppersnyb.com] [error] [client 204.12.208.18:64019] [pid 1649003] mod_access_compat.c(350): AH01797: client denied by server configuration: /home/mollywopper/mollywoppersnyb.com/.well-known/acme-challenge/index.php [Tue Nov 04 18:41:29 2025] [mollywoppersnyb.com] [error] [client 100.28.133.214:17227] [pid 1649003] apache2_util.c(271): [client 100.28.133.214] ModSecurity: Warning. Matched phrase "sys/class" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: sys/class found within ARGS:path: /sys/class/tty/ptyz9"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQq5WeY4CQXI3AdwZ6kjcQAATuc"] [Tue Nov 04 18:42:01 2025] [mollywoppersnyb.com] [error] [client 52.6.5.24:45365] [pid 1649003] apache2_util.c(271): [client 52.6.5.24] ModSecurity: Warning. Matched phrase "sys/bus" at ARGS:fileloc. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: sys/bus found within ARGS:fileloc: /sys/bus/pnp/drivers_probe"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQq5eeY4CQXI3AdwZ6kjpAAATrc"] [Tue Nov 04 18:42:01 2025] [mollywoppersnyb.com] [error] [client 52.6.5.24:45365] [pid 1649003] apache2_util.c(271): [client 52.6.5.24] ModSecurity: Warning. Matched phrase "sys/bus" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: sys/bus found within ARGS:path: /sys/bus/pnp"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQq5eeY4CQXI3AdwZ6kjpAAATrc"] [Tue Nov 04 18:43:09 2025] [mollywoppersnyb.com] [error] [client 3.223.181.32:20921] [pid 1649003] apache2_util.c(271): [client 3.223.181.32] ModSecurity: Warning. Matched phrase "sys/kernel" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: sys/kernel found within ARGS:path: /sys/kernel/irq/1116"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQq5veY4CQXI3AdwZ6kkDgAATsM"] [Tue Nov 04 18:43:32 2025] [mollywoppersnyb.com] [error] [client 52.0.218.219:15910] [pid 1649003] apache2_util.c(271): [client 52.0.218.219] ModSecurity: Warning. Matched phrase "sys/kernel" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: sys/kernel found within ARGS:path: /sys/kernel/irq/907"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQq51OY4CQXI3AdwZ6kkUAAATqI"] [Tue Nov 04 18:46:17 2025] [mollywoppersnyb.com] [error] [client 54.159.18.27:31606] [pid 1649003] apache2_util.c(271): [client 54.159.18.27] ModSecurity: Warning. Matched phrase "sys/class" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: sys/class found within ARGS:path: /sys/class/tty/tty6"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQq6eeY4CQXI3AdwZ6kmRQAATvw"] [Tue Nov 04 18:50:01 2025] [mollywoppersnyb.com] [error] [client 18.205.91.101:49747] [pid 1649003] apache2_util.c(271): [client 18.205.91.101] ModSecurity: Warning. Matched phrase "sys/class" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: sys/class found within ARGS:path: /sys/class/tty/ttys1"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQq7WeY4CQXI3AdwZ6kqGAAAToY"] [Tue Nov 04 18:50:18 2025] [mollywoppersnyb.com] [error] [client 52.44.229.124:59405] [pid 1649003] apache2_util.c(271): [client 52.44.229.124] ModSecurity: Warning. Matched phrase "sys/class" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: sys/class found within ARGS:path: /sys/class/tty/ttys8"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQq7auY4CQXI3AdwZ6kqmAAATqQ"] [Tue Nov 04 18:50:33 2025] [mollywoppersnyb.com] [error] [client 52.71.46.142:18661] [pid 1649003] apache2_util.c(271): [client 52.71.46.142] ModSecurity: Warning. Matched phrase "sys/dev" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: sys/dev found within ARGS:path: /sys/devices/system/clockevents"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQq7eeY4CQXI3AdwZ6kq9wAATv0"] [Tue Nov 04 18:51:21 2025] [mollywoppersnyb.com] [error] [client 44.212.106.171:4529] [pid 1649003] apache2_util.c(271): [client 44.212.106.171] ModSecurity: Warning. Matched phrase "sys/kernel" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: sys/kernel found within ARGS:path: /sys/kernel/irq/1015"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQq7qeY4CQXI3AdwZ6ksZgAATmk"] [Tue Nov 04 18:51:45 2025] [mollywoppersnyb.com] [error] [client 54.156.248.117:18002] [pid 1649003] apache2_util.c(271): [client 54.156.248.117] ModSecurity: Warning. Matched phrase "sys/kernel" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: sys/kernel found within ARGS:path: /sys/kernel/mm/ksm"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQq7weY4CQXI3AdwZ6ktCwAATk8"] [Tue Nov 04 18:52:53 2025] [mollywoppersnyb.com] [error] [client 3.221.222.168:43137] [pid 1649003] apache2_util.c(271): [client 3.221.222.168] ModSecurity: Warning. Matched phrase "sys/kernel" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: sys/kernel found within ARGS:path: /sys/kernel/irq/826"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQq8BeY4CQXI3AdwZ6kuGQAATiE"] [Tue Nov 04 18:53:33 2025] [mollywoppersnyb.com] [error] [client 52.22.64.232:16196] [pid 1649003] apache2_util.c(271): [client 52.22.64.232] ModSecurity: Warning. Matched phrase "sys/kernel" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: sys/kernel found within ARGS:path: /sys/kernel/irq/285"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQq8LeY4CQXI3AdwZ6kuYgAAToU"] [Tue Nov 04 18:54:01 2025] [mollywoppersnyb.com] [error] [client 54.159.98.248:46170] [pid 1649003] apache2_util.c(271): [client 54.159.98.248] ModSecurity: Warning. Matched phrase "etc/imagemagick-6" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: etc/imagemagick-6 found within ARGS:path: /etc/ImageMagick-6"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/"] [unique_id "aQq8SeY4CQXI3AdwZ6kuoAAATlk"] [Tue Nov 04 18:54:18 2025] [mollywoppersnyb.com] [error] [client 3.210.29.96:14958] [pid 1649003] apache2_util.c(271): [client 3.210.29.96] ModSecurity: Warning. Matched phrase "sys/class" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: sys/class found within ARGS:path: /sys/class/vtconsole/vtcon1"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQq8WuY4CQXI3AdwZ6kutAAATtw"] [Tue Nov 04 18:55:33 2025] [mollywoppersnyb.com] [error] [client 54.225.148.123:31578] [pid 1649003] apache2_util.c(271): [client 54.225.148.123] ModSecurity: Warning. Matched phrase "etc/binfmt.d" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: etc/binfmt.d found within ARGS:path: /etc/binfmt.d"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/"] [unique_id "aQq8peY4CQXI3AdwZ6kvUQAATts"] [Tue Nov 04 18:57:28 2025] [mollywoppersnyb.com] [error] [client 3.213.213.161:30486] [pid 1649003] apache2_util.c(271): [client 3.213.213.161] ModSecurity: Access denied with code 418 (phase 2). Pattern match "^[\\\\.|/]+(proc/|dev/shm/)" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/99_dreamhost_rules.conf"] [line "53"] [id "1990013"] [msg "Directory traversal"] [hostname "mollywoppersnyb.com"] [uri "/"] [unique_id "aQq9GOY4CQXI3AdwZ6kwDwAATjg"] [Tue Nov 04 18:57:33 2025] [mollywoppersnyb.com] [error] [client 54.235.172.108:18660] [pid 1649003] apache2_util.c(271): [client 54.235.172.108] ModSecurity: Warning. Matched phrase "sys/class" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: sys/class found within ARGS:path: /sys/class/input/input1"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQq9HeY4CQXI3AdwZ6kwFAAATrI"] [Tue Nov 04 18:57:58 2025] [mollywoppersnyb.com] [error] [client 54.235.172.96:7686] [pid 1649003] apache2_util.c(271): [client 54.235.172.96] ModSecurity: Warning. Matched phrase "sys/bus" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: sys/bus found within ARGS:path: /sys/bus/pnp/devices"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQq9NuY4CQXI3AdwZ6kwawAATsM"] [Tue Nov 04 18:58:21 2025] [mollywoppersnyb.com] [error] [client 34.224.132.215:42640] [pid 1649003] apache2_util.c(271): [client 34.224.132.215] ModSecurity: Warning. Matched phrase "sys/class" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: sys/class found within ARGS:path: /sys/class/tty/tty"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQq9TeY4CQXI3AdwZ6kwjQAATic"] [Tue Nov 04 18:58:34 2025] [mollywoppersnyb.com] [error] [client 52.201.155.215:27697] [pid 1649003] apache2_util.c(271): [client 52.201.155.215] ModSecurity: Warning. Matched phrase "etc/rc3.d" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: etc/rc3.d found within ARGS:path: /etc/rc3.d"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/"] [unique_id "aQq9WuY4CQXI3AdwZ6kwswAATow"] [Tue Nov 04 18:59:38 2025] [mollywoppersnyb.com] [error] [client 34.233.114.237:35255] [pid 1649003] apache2_util.c(271): [client 34.233.114.237] ModSecurity: Warning. Matched phrase "sys/dev" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: sys/dev found within ARGS:path: /sys/dev/char/203:0"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQq9muY4CQXI3AdwZ6kxBwAATtk"] [Tue Nov 04 18:59:41 2025] [mollywoppersnyb.com] [error] [client 34.231.118.144:62164] [pid 1649003] apache2_util.c(271): [client 34.231.118.144] ModSecurity: Warning. Matched phrase "sys/class" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: sys/class found within ARGS:path: /sys/class/tty/ttyze"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQq9neY4CQXI3AdwZ6kxCgAAToc"] [Tue Nov 04 19:00:41 2025] [mollywoppersnyb.com] [error] [client 34.194.95.99:50411] [pid 1649003] apache2_util.c(271): [client 34.194.95.99] ModSecurity: Warning. Matched phrase "sys/kernel" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: sys/kernel found within ARGS:path: /sys/kernel/irq/459"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQq92eY4CQXI3AdwZ6kxeAAATko"] [Tue Nov 04 19:00:57 2025] [mollywoppersnyb.com] [error] [client 35.172.125.172:6831] [pid 1649003] apache2_util.c(271): [client 35.172.125.172] ModSecurity: Warning. Matched phrase "sys/dev" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: sys/dev found within ARGS:path: /sys/dev/char/203:5"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQq96eY4CQXI3AdwZ6kxjgAATmE"] [Tue Nov 04 19:01:12 2025] [mollywoppersnyb.com] [error] [client 34.231.45.47:27950] [pid 1649003] apache2_util.c(271): [client 34.231.45.47] ModSecurity: Warning. Matched phrase "sys/kernel" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: sys/kernel found within ARGS:path: /sys/kernel/irq/1110"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQq9-OY4CQXI3AdwZ6kxoQAATrI"] [Tue Nov 04 19:02:40 2025] [mollywoppersnyb.com] [error] [client 107.20.25.33:43803] [pid 1649003] apache2_util.c(271): [client 107.20.25.33] ModSecurity: Warning. Matched phrase "sys/dev" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: sys/dev found within ARGS:path: /sys/dev/char/2:152"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQq-UOY4CQXI3AdwZ6kyPAAATjI"] [Tue Nov 04 19:03:05 2025] [mollywoppersnyb.com] [error] [client 34.231.181.240:10355] [pid 1649003] apache2_util.c(271): [client 34.231.181.240] ModSecurity: Warning. Matched phrase "sys/kernel" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: sys/kernel found within ARGS:path: /sys/kernel/irq/1025"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQq-aeY4CQXI3AdwZ6kyXAAATnU"] [Tue Nov 04 19:03:13 2025] [mollywoppersnyb.com] [error] [client 54.210.152.179:23148] [pid 1649003] apache2_util.c(271): [client 54.210.152.179] ModSecurity: Warning. Matched phrase "sys/module" at ARGS:fileloc. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: sys/module found within ARGS:fileloc: /sys/module/zswap/uevent"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQq-ceY4CQXI3AdwZ6kyZwAAToE"] [Tue Nov 04 19:03:13 2025] [mollywoppersnyb.com] [error] [client 54.210.152.179:23148] [pid 1649003] apache2_util.c(271): [client 54.210.152.179] ModSecurity: Warning. Matched phrase "sys/module" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: sys/module found within ARGS:path: /sys/module/zswap"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQq-ceY4CQXI3AdwZ6kyZwAAToE"] [Tue Nov 04 19:04:53 2025] [mollywoppersnyb.com] [error] [client 52.22.87.224:52849] [pid 1649003] apache2_util.c(271): [client 52.22.87.224] ModSecurity: Warning. Matched phrase "sys/kernel" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: sys/kernel found within ARGS:path: /sys/kernel/irq/182"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQq-1eY4CQXI3AdwZ6kzFAAATr0"] [Tue Nov 04 19:05:12 2025] [mollywoppersnyb.com] [error] [client 54.147.80.137:34880] [pid 1649003] apache2_util.c(271): [client 54.147.80.137] ModSecurity: Warning. Matched phrase "sys/kernel" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: sys/kernel found within ARGS:path: /sys/kernel/irq/348"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQq-6OY4CQXI3AdwZ6kzMAAATms"] [Tue Nov 04 19:05:49 2025] [mollywoppersnyb.com] [error] [client 54.167.32.123:44055] [pid 1649003] apache2_util.c(271): [client 54.167.32.123] ModSecurity: Warning. Matched phrase "sys/class" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: sys/class found within ARGS:path: /sys/class/pci_bus/0000:47"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQq_DeY4CQXI3AdwZ6kzmQAATks"] [Tue Nov 04 19:06:08 2025] [mollywoppersnyb.com] [error] [client 18.210.58.238:40473] [pid 1649003] apache2_util.c(271): [client 18.210.58.238] ModSecurity: Warning. Matched phrase "sys/dev" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: sys/dev found within ARGS:path: /sys/dev/char/3:132"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQq_IOY4CQXI3AdwZ6kzrwAATls"] [Tue Nov 04 19:06:24 2025] [mollywoppersnyb.com] [error] [client 52.45.15.233:46075] [pid 1649003] apache2_util.c(271): [client 52.45.15.233] ModSecurity: Warning. Matched phrase "sys/kernel" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: sys/kernel found within ARGS:path: /sys/kernel/irq/763"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQq_MOY4CQXI3AdwZ6kz3QAATqo"] [Tue Nov 04 19:06:57 2025] [mollywoppersnyb.com] [error] [client 3.229.2.217:23037] [pid 1649003] apache2_util.c(271): [client 3.229.2.217] ModSecurity: Warning. Matched phrase "sys/class" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: sys/class found within ARGS:path: /sys/class/misc/megadev0"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQq_UeY4CQXI3AdwZ6k0UgAAToQ"] [Tue Nov 04 19:11:20 2025] [mollywoppersnyb.com] [error] [client 52.204.253.129:2086] [pid 1649003] apache2_util.c(271): [client 52.204.253.129] ModSecurity: Access denied with code 418 (phase 2). Pattern match "^[\\\\.|/]+(proc/|dev/shm/)" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/99_dreamhost_rules.conf"] [line "53"] [id "1990013"] [msg "Directory traversal"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQrAWOY4CQXI3AdwZ6k18wAATn0"] [Tue Nov 04 19:13:05 2025] [mollywoppersnyb.com] [error] [client 52.5.242.243:44609] [pid 1649003] apache2_util.c(271): [client 52.5.242.243] ModSecurity: Warning. Matched phrase "sys/class" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: sys/class found within ARGS:path: /sys/class/tty/ttyS1"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQrAweY4CQXI3AdwZ6k2hQAATkg"] [Tue Nov 04 19:13:41 2025] [mollywoppersnyb.com] [error] [client 100.29.128.75:62407] [pid 1649003] apache2_util.c(271): [client 100.29.128.75] ModSecurity: Warning. Matched phrase "etc/mail" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: etc/mail found within ARGS:path: /etc/mail/domains/g"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQrA5eY4CQXI3AdwZ6k2tQAATtw"] [Tue Nov 04 19:14:04 2025] [mollywoppersnyb.com] [error] [client 54.235.125.129:45932] [pid 1649003] apache2_util.c(271): [client 54.235.125.129] ModSecurity: Warning. Matched phrase "etc/systemd" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: etc/systemd found within ARGS:path: /etc/systemd/system/sockets.target.wants"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQrA_OY4CQXI3AdwZ6k21QAATt8"] [Tue Nov 04 19:14:16 2025] [mollywoppersnyb.com] [error] [client 54.225.181.161:27780] [pid 1649003] apache2_util.c(271): [client 54.225.181.161] ModSecurity: Warning. Matched phrase "sys/class" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: sys/class found within ARGS:path: /sys/class/tty/ttyz0"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQrBCOY4CQXI3AdwZ6k24wAATqY"] [Tue Nov 04 19:16:29 2025] [mollywoppersnyb.com] [error] [client 50.19.79.213:46968] [pid 1649003] apache2_util.c(271): [client 50.19.79.213] ModSecurity: Warning. Matched phrase "sys/class" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: sys/class found within ARGS:path: /sys/class/cpuid/cpu5"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQrBjeY4CQXI3AdwZ6k34QAATqk"] [Tue Nov 04 19:17:33 2025] [mollywoppersnyb.com] [error] [client 52.3.104.214:42745] [pid 1649003] apache2_util.c(271): [client 52.3.104.214] ModSecurity: Warning. Matched phrase "sys/kernel" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: sys/kernel found within ARGS:path: /sys/kernel/iommu_groups/24"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQrBzeY4CQXI3AdwZ6k4VgAATn0"] [Tue Nov 04 19:18:13 2025] [mollywoppersnyb.com] [error] [client 3.215.59.93:34345] [pid 1649003] apache2_util.c(271): [client 3.215.59.93] ModSecurity: Warning. Matched phrase "sys/bus" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: sys/bus found within ARGS:path: /sys/bus/machinecheck/devices"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQrB9eY4CQXI3AdwZ6k4mgAATtM"] [Tue Nov 04 19:18:33 2025] [mollywoppersnyb.com] [error] [client 54.166.126.132:33366] [pid 1649003] apache2_util.c(271): [client 54.166.126.132] ModSecurity: Warning. Matched phrase "sys/class" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: sys/class found within ARGS:path: /sys/class/tty/ttyuc"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQrCCeY4CQXI3AdwZ6k4tQAATtc"] [Tue Nov 04 19:18:43 2025] [mollywoppersnyb.com] [error] [client 3.219.80.71:25016] [pid 1649003] apache2_util.c(271): [client 3.219.80.71] ModSecurity: Warning. Matched phrase "sys/class" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: sys/class found within ARGS:path: /sys/class/tty/ttyu9"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQrCE-Y4CQXI3AdwZ6k4wwAATjE"] [Tue Nov 04 19:19:45 2025] [mollywoppersnyb.com] [error] [client 54.209.100.30:60311] [pid 1649003] apache2_util.c(271): [client 54.209.100.30] ModSecurity: Warning. Matched phrase "sys/kernel" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: sys/kernel found within ARGS:path: /sys/kernel/irq/1111"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQrCUeY4CQXI3AdwZ6k5HwAATps"] [Tue Nov 04 19:20:44 2025] [mollywoppersnyb.com] [error] [client 54.210.152.179:49442] [pid 1649003] apache2_util.c(271): [client 54.210.152.179] ModSecurity: Warning. Matched phrase "sys/dev" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: sys/dev found within ARGS:path: /sys/dev/char/2:250"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQrCjOY4CQXI3AdwZ6k5ogAATrA"] [Tue Nov 04 19:20:57 2025] [mollywoppersnyb.com] [error] [client 44.206.65.8:37970] [pid 1649003] apache2_util.c(271): [client 44.206.65.8] ModSecurity: Warning. Matched phrase "sys/class" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: sys/class found within ARGS:path: /sys/class/vc/vcsa1"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQrCmeY4CQXI3AdwZ6k50QAATjc"] [Tue Nov 04 19:21:25 2025] [mollywoppersnyb.com] [error] [client 100.28.133.214:2438] [pid 1649003] apache2_util.c(271): [client 100.28.133.214] ModSecurity: Warning. Matched phrase "etc/ghostscript" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: etc/ghostscript found within ARGS:path: /etc/ghostscript"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/"] [unique_id "aQrCteY4CQXI3AdwZ6k6HAAATlA"] [Tue Nov 04 19:21:53 2025] [mollywoppersnyb.com] [error] [client 44.206.93.215:33614] [pid 1649003] apache2_util.c(271): [client 44.206.93.215] ModSecurity: Warning. Matched phrase "sys/class" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: sys/class found within ARGS:path: /sys/class/tty/ptyuc"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQrC0eY4CQXI3AdwZ6k6TgAATu0"] [Tue Nov 04 19:22:09 2025] [mollywoppersnyb.com] [error] [client 54.197.178.107:31093] [pid 1649003] apache2_util.c(271): [client 54.197.178.107] ModSecurity: Warning. Matched phrase "sys/dev" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: sys/dev found within ARGS:path: /sys/dev/char/3:36"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQrC4eY4CQXI3AdwZ6k6YwAATrk"] [Tue Nov 04 19:22:21 2025] [mollywoppersnyb.com] [error] [client 184.73.47.24:22963] [pid 1649003] apache2_util.c(271): [client 184.73.47.24] ModSecurity: Warning. Matched phrase "sys/dev" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: sys/dev found within ARGS:path: /sys/dev/char/2:96"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQrC7eY4CQXI3AdwZ6k6cgAATmo"] [Tue Nov 04 19:22:37 2025] [mollywoppersnyb.com] [error] [client 52.4.76.156:2118] [pid 1649003] apache2_util.c(271): [client 52.4.76.156] ModSecurity: Warning. Matched phrase "sys/module" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: sys/module found within ARGS:path: /sys/module/hid_apple/drivers"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQrC_eY4CQXI3AdwZ6k6mAAATrA"] [Tue Nov 04 19:22:46 2025] [mollywoppersnyb.com] [error] [client 18.204.89.56:35536] [pid 1649003] apache2_util.c(271): [client 18.204.89.56] ModSecurity: Warning. Matched phrase "etc/opt" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: etc/opt found within ARGS:path: /etc/opt"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/"] [unique_id "aQrDBuY4CQXI3AdwZ6k6pAAAToY"] [Tue Nov 04 19:24:09 2025] [mollywoppersnyb.com] [error] [client 3.227.180.70:15939] [pid 1649003] apache2_util.c(271): [client 3.227.180.70] ModSecurity: Access denied with code 418 (phase 2). Pattern match "^[\\\\.|/]+(proc/|dev/shm/)" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/99_dreamhost_rules.conf"] [line "53"] [id "1990013"] [msg "Directory traversal"] [hostname "mollywoppersnyb.com"] [uri "/"] [unique_id "aQrDWeY4CQXI3AdwZ6k7hwAATuI"] [Tue Nov 04 19:24:38 2025] [mollywoppersnyb.com] [error] [client 23.21.148.226:47928] [pid 1649003] apache2_util.c(271): [client 23.21.148.226] ModSecurity: Warning. Matched phrase "sys/class" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: sys/class found within ARGS:path: /sys/class/tty/ttyx0"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQrDduY4CQXI3AdwZ6k7wQAATuw"] [Tue Nov 04 19:25:49 2025] [mollywoppersnyb.com] [error] [client 34.192.67.98:42228] [pid 1649003] apache2_util.c(271): [client 34.192.67.98] ModSecurity: Warning. Matched phrase "sys/bus" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: sys/bus found within ARGS:path: /sys/bus/container/drivers"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQrDveY4CQXI3AdwZ6k8LAAATiQ"] [Tue Nov 04 19:26:05 2025] [mollywoppersnyb.com] [error] [client 35.173.38.202:34645] [pid 1649003] apache2_util.c(271): [client 35.173.38.202] ModSecurity: Warning. Matched phrase "sys/dev" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: sys/dev found within ARGS:path: /sys/dev/char/2:3"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQrDzeY4CQXI3AdwZ6k8PAAATkc"] [Tue Nov 04 19:26:29 2025] [mollywoppersnyb.com] [error] [client 23.23.99.55:63973] [pid 1649003] apache2_util.c(271): [client 23.23.99.55] ModSecurity: Warning. Matched phrase "etc/systemd" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: etc/systemd found within ARGS:path: /etc/systemd/system/timers.target.wants"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQrD5eY4CQXI3AdwZ6k8YAAATss"] [Tue Nov 04 19:26:48 2025] [mollywoppersnyb.com] [error] [client 100.29.160.53:47923] [pid 1649003] apache2_util.c(271): [client 100.29.160.53] ModSecurity: Warning. Matched phrase "sys/class" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: sys/class found within ARGS:path: /sys/class/vc/vcs"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQrD-OY4CQXI3AdwZ6k8eQAATkw"] [Tue Nov 04 19:28:48 2025] [mollywoppersnyb.com] [error] [client 184.73.195.18:54832] [pid 1649003] apache2_util.c(271): [client 184.73.195.18] ModSecurity: Warning. Matched phrase "sys/dev" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: sys/dev found within ARGS:path: /sys/dev/char/89:0"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQrEcOY4CQXI3AdwZ6k9GAAATus"] [Tue Nov 04 19:29:37 2025] [mollywoppersnyb.com] [error] [client 34.234.206.30:27411] [pid 1649003] apache2_util.c(271): [client 34.234.206.30] ModSecurity: Warning. Matched phrase "sys/dev" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: sys/dev found within ARGS:path: /sys/dev/char/2:91"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQrEoeY4CQXI3AdwZ6k9WAAATmY"] [Tue Nov 04 19:31:03 2025] [mollywoppersnyb.com] [error] [client 180.110.203.108:45421] [pid 1649003] apache2_util.c(271): [client 180.110.203.108] ModSecurity: Warning. Pattern match "\\\\b(?:keep-alive|close),\\\\s?(?:keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "352"] [id "920210"] [msg "Multiple/Conflicting Connection Header Data Found"] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [hostname "mollywoppersnyb.com"] [uri "/"] [unique_id "aQrE9-Y4CQXI3AdwZ6k93gAATuQ"] [Tue Nov 04 19:31:09 2025] [mollywoppersnyb.com] [error] [client 18.232.11.247:56299] [pid 1649003] apache2_util.c(271): [client 18.232.11.247] ModSecurity: Warning. Matched phrase "sys/class" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: sys/class found within ARGS:path: /sys/class/tty/ptyxc"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQrE_OY4CQXI3AdwZ6k94gAATn8"] [Tue Nov 04 19:31:36 2025] [mollywoppersnyb.com] [error] [client 54.163.169.168:60396] [pid 1649003] apache2_util.c(271): [client 54.163.169.168] ModSecurity: Warning. Matched phrase "sys/class" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: sys/class found within ARGS:path: /sys/class/tty/tty23"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQrFGOY4CQXI3AdwZ6k99AAATiw"] [Tue Nov 04 19:31:49 2025] [mollywoppersnyb.com] [error] [client 54.147.182.90:11107] [pid 1649003] apache2_util.c(271): [client 54.147.182.90] ModSecurity: Warning. Matched phrase "sys/dev" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: sys/dev found within ARGS:path: /sys/dev/char/3:59"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQrFJeY4CQXI3AdwZ6k-BgAATiI"] [Tue Nov 04 19:33:45 2025] [mollywoppersnyb.com] [error] [client 98.82.66.172:28327] [pid 1649003] apache2_util.c(271): [client 98.82.66.172] ModSecurity: Warning. Matched phrase "sys/dev" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: sys/dev found within ARGS:path: /sys/dev/char/2:48"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQrFmeY4CQXI3AdwZ6k_AwAATvU"] [Tue Nov 04 19:35:36 2025] [mollywoppersnyb.com] [error] [client 3.93.98.99:30193] [pid 1649003] apache2_util.c(271): [client 3.93.98.99] ModSecurity: Warning. Matched phrase "sys/dev" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: sys/dev found within ARGS:path: /sys/dev/char/3:111"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQrGCOY4CQXI3AdwZ6kSxPVQI1NVg8-7rmwQAAADw"] [Tue Nov 04 23:40:16 2025] [mollywoppersnyb.com] [error] [client 35.171.117.160:13014] [pid 528553] apache2_util.c(271): [client 35.171.117.160] ModSecurity: Warning. Matched phrase "sys/kernel" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: sys/kernel found within ARGS:path: /sys/kernel/irq/1022"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQr_YCxPVQI1NVg8-7rnQgAAAEM"] [Tue Nov 04 23:40:45 2025] [mollywoppersnyb.com] [error] [client 52.71.218.25:29371] [pid 528553] apache2_util.c(271): [client 52.71.218.25] ModSecurity: Warning. Matched phrase "sys/dev" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: sys/dev found within ARGS:path: /sys/dev/char/4:21"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQr_fSxPVQI1NVg8-7rnZgAAAAg"] [Tue Nov 04 23:41:09 2025] [mollywoppersnyb.com] [error] [client 54.86.59.155:34737] [pid 528553] apache2_util.c(271): [client 54.86.59.155] ModSecurity: Warning. Matched phrase "sys/dev" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: sys/dev found within ARGS:path: /sys/dev/char/2:28"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQr_lSxPVQI1NVg8-7rngwAAAME"] [Tue Nov 04 23:42:13 2025] [mollywoppersnyb.com] [error] [client 52.5.242.243:17269] [pid 528553] apache2_util.c(271): [client 52.5.242.243] ModSecurity: Warning. Matched phrase "sys/kernel" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: sys/kernel found within ARGS:path: /sys/kernel/irq/42"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQr_1SxPVQI1NVg8-7rn4gAAAKU"] [Tue Nov 04 23:42:49 2025] [mollywoppersnyb.com] [error] [client 52.71.218.25:4552] [pid 528553] apache2_util.c(271): [client 52.71.218.25] ModSecurity: Warning. Matched phrase "sys/kernel" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: sys/kernel found within ARGS:path: /sys/kernel/irq/167"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQr