[Mon Nov 03 01:09:12 2025] [mollywoppersnyb.com] [error] [client 54.157.84.74:7975] [pid 2431893] apache2_util.c(271): [client 54.157.84.74] ModSecurity: Warning. Matched phrase "etc/rc3.d" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: etc/rc3.d found within ARGS:path: /etc/rc3.d"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQhxOOFz6qCmcnZZFiQ2PwAAJ3I"] [Mon Nov 03 01:12:40 2025] [mollywoppersnyb.com] [error] [client 52.203.65.83:13936] [pid 2431893] apache2_util.c(271): [client 52.203.65.83] ModSecurity: Warning. Matched phrase "etc/perl" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: etc/perl found within ARGS:path: /etc/perl"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQhyCOFz6qCmcnZZFiQ4egAAJ5Q"] [Mon Nov 03 01:12:49 2025] [mollywoppersnyb.com] [error] [client 43.153.54.138:42322] [pid 2431893] apache2_util.c(271): [client 43.153.54.138] ModSecurity: Warning. Pattern match "\\\\b(?:keep-alive|close),\\\\s?(?:keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "352"] [id "920210"] [msg "Multiple/Conflicting Connection Header Data Found"] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [hostname "www.mollywoppersnyb.com"] [uri "/"] [unique_id "aQhyEeFz6qCmcnZZFiQ4hAAAJ68"] [Mon Nov 03 01:12:50 2025] [mollywoppersnyb.com] [error] [client 43.153.54.138:43330] [pid 2431893] apache2_util.c(271): [client 43.153.54.138] ModSecurity: Warning. Pattern match "\\\\b(?:keep-alive|close),\\\\s?(?:keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "352"] [id "920210"] [msg "Multiple/Conflicting Connection Header Data Found"] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [hostname "mollywoppersnyb.com"] [uri "/"] [unique_id "aQhyEuFz6qCmcnZZFiQ4hgAAJ7o"] [Mon Nov 03 01:19:38 2025] [mollywoppersnyb.com] [error] [client 54.225.181.161:57806] [pid 2431893] apache2_util.c(271): [client 54.225.181.161] ModSecurity: Warning. Matched phrase "etc/mail" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: etc/mail found within ARGS:path: /etc/mail"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQhzquFz6qCmcnZZFiQ8eQAAJ7U"] [Mon Nov 03 01:26:12 2025] [mollywoppersnyb.com] [error] [client 43.159.135.203:54582] [pid 2431893] apache2_util.c(271): [client 43.159.135.203] ModSecurity: Warning. Pattern match "\\\\b(?:keep-alive|close),\\\\s?(?:keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "352"] [id "920210"] [msg "Multiple/Conflicting Connection Header Data Found"] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [hostname "mollywoppersnyb.com"] [uri "/"] [unique_id "aQh1NOFz6qCmcnZZFiRAbAAAJ-E"] [Mon Nov 03 01:35:32 2025] [mollywoppersnyb.com] [error] [client 44.205.74.196:64650] [pid 2431893] apache2_util.c(271): [client 44.205.74.196] ModSecurity: Warning. Matched phrase "etc/terminfo" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: etc/terminfo found within ARGS:path: /etc/terminfo"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQh3ZOFz6qCmcnZZFiRGeQAAJ0o"] [Mon Nov 03 01:37:09 2025] [mollywoppersnyb.com] [error] [client 43.153.54.14:40296] [pid 2431893] apache2_util.c(271): [client 43.153.54.14] ModSecurity: Warning. Pattern match "\\\\b(?:keep-alive|close),\\\\s?(?:keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "352"] [id "920210"] [msg "Multiple/Conflicting Connection Header Data Found"] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [hostname "mollywoppersnyb.com"] [uri "/"] [unique_id "aQh3xeFz6qCmcnZZFiRG0gAAJ-s"] [Mon Nov 03 01:47:13 2025] [mollywoppersnyb.com] [error] [client 3.217.171.106:10388] [pid 2431893] apache2_util.c(271): [client 3.217.171.106] ModSecurity: Warning. Matched phrase "etc/monit" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: etc/monit found within ARGS:path: /etc/monit"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQh6IeFz6qCmcnZZFiRK8gAAJx0"] [Mon Nov 03 01:49:31 2025] [mollywoppersnyb.com] [error] [client 43.166.128.86:53920] [pid 2431893] apache2_util.c(271): [client 43.166.128.86] ModSecurity: Warning. Pattern match "\\\\b(?:keep-alive|close),\\\\s?(?:keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "352"] [id "920210"] [msg "Multiple/Conflicting Connection Header Data Found"] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [hostname "mollywoppersnyb.com"] [uri "/"] [unique_id "aQh6q-Fz6qCmcnZZFiRMOgAAJ7k"] [Mon Nov 03 01:55:52 2025] [mollywoppersnyb.com] [error] [client 162.62.213.187:40702] [pid 2431893] apache2_util.c(271): [client 162.62.213.187] ModSecurity: Warning. Pattern match "\\\\b(?:keep-alive|close),\\\\s?(?:keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "352"] [id "920210"] [msg "Multiple/Conflicting Connection Header Data Found"] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [hostname "mollywoppersnyb.com"] [uri "/"] [unique_id "aQh8KOFz6qCmcnZZFiROiAAAJ-g"] [Mon Nov 03 01:56:19 2025] [mollywoppersnyb.com] [error] [client 100.28.44.58:44674] [pid 2431893] apache2_util.c(271): [client 100.28.44.58] ModSecurity: Access denied with code 418 (phase 2). Pattern match "^[\\\\.|/]+(proc/|dev/shm/)" at ARGS:fileloc. [file "/etc/modsecurity/mod_sec3_CRS/99_dreamhost_rules.conf"] [line "53"] [id "1990013"] [msg "Directory traversal"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQh8Q-Fz6qCmcnZZFiROrgAAJy0"] [Mon Nov 03 02:02:11 2025] [mollywoppersnyb.com] [error] [client 18.213.102.186:27771] [pid 2431893] apache2_util.c(271): [client 18.213.102.186] ModSecurity: Access denied with code 418 (phase 2). Pattern match "^[\\\\.|/]+(proc/|dev/shm/)" at ARGS:fileloc. [file "/etc/modsecurity/mod_sec3_CRS/99_dreamhost_rules.conf"] [line "53"] [id "1990013"] [msg "Directory traversal"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQh9o-Fz6qCmcnZZFiRR2AAAJ4Q"] [Mon Nov 03 02:06:24 2025] [mollywoppersnyb.com] [error] [client 44.206.93.215:9217] [pid 2431893] apache2_util.c(271): [client 44.206.93.215] ModSecurity: Warning. Matched phrase "etc/update-manager" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: etc/update-manager found within ARGS:path: /etc/update-manager"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQh-oOFz6qCmcnZZFiRVfwAAJzI"] [Mon Nov 03 02:07:20 2025] [mollywoppersnyb.com] [error] [client 98.80.130.239:23865] [pid 2431893] apache2_util.c(271): [client 98.80.130.239] ModSecurity: Warning. Matched phrase "etc/rsyslog.d" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: etc/rsyslog.d found within ARGS:path: /etc/rsyslog.d"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQh-2OFz6qCmcnZZFiRWTgAAJ7Y"] [Mon Nov 03 02:07:32 2025] [mollywoppersnyb.com] [error] [client 44.217.177.142:59625] [pid 2431893] apache2_util.c(271): [client 44.217.177.142] ModSecurity: Warning. Matched phrase "etc/pki" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: etc/pki found within ARGS:path: /etc/pki"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQh-5OFz6qCmcnZZFiRWewAAJy8"] [Mon Nov 03 02:12:23 2025] [mollywoppersnyb.com] [error] [client 52.45.29.57:37365] [pid 2431893] apache2_util.c(271): [client 52.45.29.57] ModSecurity: Warning. Matched phrase "etc/snmp" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: etc/snmp found within ARGS:path: /etc/snmp"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQiAB-Fz6qCmcnZZFiRZewAAJ0o"] [Mon Nov 03 02:16:54 2025] [mollywoppersnyb.com] [error] [client 43.159.143.187:49116] [pid 2431893] apache2_util.c(271): [client 43.159.143.187] ModSecurity: Warning. Pattern match "\\\\b(?:keep-alive|close),\\\\s?(?:keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "352"] [id "920210"] [msg "Multiple/Conflicting Connection Header Data Found"] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [hostname "mollywoppersnyb.com"] [uri "/"] [unique_id "aQiBFuFz6qCmcnZZFiRcUQAAJ80"] [Mon Nov 03 02:17:21 2025] [mollywoppersnyb.com] [error] [client 34.194.226.74:39334] [pid 2431893] apache2_util.c(271): [client 34.194.226.74] ModSecurity: Warning. Matched phrase "etc/php" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: etc/php found within ARGS:path: /etc/php73"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQiBMeFz6qCmcnZZFiRcgQAAJ2k"] [Mon Nov 03 02:26:39 2025] [mollywoppersnyb.com] [error] [client 54.221.203.24:34593] [pid 2431893] apache2_util.c(271): [client 54.221.203.24] ModSecurity: Access denied with code 418 (phase 2). Pattern match "^[\\\\.|/]+(proc/|dev/shm/)" at ARGS:fileloc. [file "/etc/modsecurity/mod_sec3_CRS/99_dreamhost_rules.conf"] [line "53"] [id "1990013"] [msg "Directory traversal"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQiDX-Fz6qCmcnZZFiRhaAAAJyk"] [Mon Nov 03 02:26:54 2025] [mollywoppersnyb.com] [error] [client 43.135.139.165:53618] [pid 2431893] apache2_util.c(271): [client 43.135.139.165] ModSecurity: Warning. Pattern match "\\\\b(?:keep-alive|close),\\\\s?(?:keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "352"] [id "920210"] [msg "Multiple/Conflicting Connection Header Data Found"] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [hostname "mollywoppersnyb.com"] [uri "/"] [unique_id "aQiDbuFz6qCmcnZZFiRheAAAJzs"] [Mon Nov 03 02:35:01 2025] [mollywoppersnyb.com] [error] [client 43.167.245.18:50926] [pid 2431893] apache2_util.c(271): [client 43.167.245.18] ModSecurity: Warning. Pattern match "\\\\b(?:keep-alive|close),\\\\s?(?:keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "352"] [id "920210"] [msg "Multiple/Conflicting Connection Header Data Found"] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [hostname "mollywoppersnyb.com"] [uri "/"] [unique_id "aQiFVeFz6qCmcnZZFiRlGgAAJyA"] [Mon Nov 03 02:35:37 2025] [mollywoppersnyb.com] [error] [client 18.213.70.100:19268] [pid 2431893] apache2_util.c(271): [client 18.213.70.100] ModSecurity: Warning. Matched phrase "etc/muttrc.d" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: etc/muttrc.d found within ARGS:path: /etc/Muttrc.d"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQiFeeFz6qCmcnZZFiRlrQAAJ-w"] [Mon Nov 03 02:38:43 2025] [mollywoppersnyb.com] [error] [client 98.82.107.102:42665] [pid 2431893] apache2_util.c(271): [client 98.82.107.102] ModSecurity: Warning. Matched phrase "etc/apparmor" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: etc/apparmor found within ARGS:path: /etc/apparmor.d"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQiGM-Fz6qCmcnZZFiRm8AAAJ4I"] [Mon Nov 03 02:38:58 2025] [mollywoppersnyb.com] [error] [client 212.111.89.87:57671] [pid 2431893] mod_access_compat.c(350): AH01797: client denied by server configuration: /home/mollywopper/mollywoppersnyb.com/wp-includes/index.php [Mon Nov 03 02:39:01 2025] [mollywoppersnyb.com] [error] [client 212.111.89.87:57671] [pid 2431893] mod_access_compat.c(350): AH01797: client denied by server configuration: /home/mollywopper/mollywoppersnyb.com/wp-content/uploads/index.php [Mon Nov 03 02:39:03 2025] [mollywoppersnyb.com] [error] [client 212.111.89.87:57671] [pid 2431893] mod_access_compat.c(350): AH01797: client denied by server configuration: /home/mollywopper/mollywoppersnyb.com/wp-content/uploads/2025/index.php [Mon Nov 03 02:39:04 2025] [mollywoppersnyb.com] [error] [client 212.111.89.87:57671] [pid 2431893] mod_access_compat.c(350): AH01797: client denied by server configuration: /home/mollywopper/mollywoppersnyb.com/wp-content/uploads/2024/index.php [Mon Nov 03 02:39:05 2025] [mollywoppersnyb.com] [error] [client 212.111.89.87:57671] [pid 2431893] mod_access_compat.c(350): AH01797: client denied by server configuration: /home/mollywopper/mollywoppersnyb.com/wp-content/uploads/2023/index.php [Mon Nov 03 02:39:06 2025] [mollywoppersnyb.com] [error] [client 212.111.89.87:57671] [pid 2431893] mod_access_compat.c(350): AH01797: client denied by server configuration: /home/mollywopper/mollywoppersnyb.com/wp-content/uploads/2022/index.php [Mon Nov 03 02:39:07 2025] [mollywoppersnyb.com] [error] [client 212.111.89.87:57671] [pid 2431893] mod_access_compat.c(350): AH01797: client denied by server configuration: /home/mollywopper/mollywoppersnyb.com/wp-content/uploads/2021/index.php [Mon Nov 03 02:39:07 2025] [mollywoppersnyb.com] [error] [client 212.111.89.87:57671] [pid 2431893] mod_access_compat.c(350): AH01797: client denied by server configuration: /home/mollywopper/mollywoppersnyb.com/wp-content/themes/index.php [Mon Nov 03 02:39:08 2025] [mollywoppersnyb.com] [error] [client 52.73.142.41:4726] [pid 2431893] apache2_util.c(271): [client 52.73.142.41] ModSecurity: Warning. Matched phrase "etc/php" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: etc/php found within ARGS:path: /etc/php83"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQiGTOFz6qCmcnZZFiRnLQAAJ8M"] [Mon Nov 03 02:39:14 2025] [mollywoppersnyb.com] [error] [client 212.111.89.87:57671] [pid 2431893] mod_access_compat.c(350): AH01797: client denied by server configuration: /home/mollywopper/mollywoppersnyb.com/wp-content/plugins/index.php [Mon Nov 03 02:39:16 2025] [mollywoppersnyb.com] [error] [client 54.156.55.147:51848] [pid 2431893] apache2_util.c(271): [client 54.156.55.147] ModSecurity: Warning. Matched phrase "sys/dev" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: sys/dev found within ARGS:path: /sys/devices"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQiGVOFz6qCmcnZZFiRnSgAAJzI"] [Mon Nov 03 02:39:20 2025] [mollywoppersnyb.com] [error] [client 212.111.89.87:57671] [pid 2431893] mod_access_compat.c(350): AH01797: client denied by server configuration: /home/mollywopper/mollywoppersnyb.com/.well-known/index.php [Mon Nov 03 02:40:19 2025] [mollywoppersnyb.com] [error] [client 52.2.58.41:30319] [pid 2431893] apache2_util.c(271): [client 52.2.58.41] ModSecurity: Warning. Matched phrase "etc/php" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: etc/php found within ARGS:path: /etc/php80"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQiGk-Fz6qCmcnZZFiRnuQAAJ8M"] [Mon Nov 03 02:40:20 2025] [mollywoppersnyb.com] [error] [client 18.209.201.119:8262] [pid 2431893] apache2_util.c(271): [client 18.209.201.119] ModSecurity: Warning. Matched phrase "etc/imagemagick-6" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: etc/imagemagick-6 found within ARGS:path: /etc/ImageMagick-6"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQiGlOFz6qCmcnZZFiRnuwAAJ-w"] [Mon Nov 03 02:46:14 2025] [mollywoppersnyb.com] [error] [client 52.200.54.136:56311] [pid 2431893] apache2_util.c(271): [client 52.200.54.136] ModSecurity: Warning. Matched phrase "etc/ssh" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: etc/ssh found within ARGS:path: /etc/ssh"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQiH9uFz6qCmcnZZFiRrCAAAJ7Q"] [Mon Nov 03 02:55:54 2025] [mollywoppersnyb.com] [error] [client 43.133.187.11:47574] [pid 2431893] apache2_util.c(271): [client 43.133.187.11] ModSecurity: Warning. Pattern match "\\\\b(?:keep-alive|close),\\\\s?(?:keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "352"] [id "920210"] [msg "Multiple/Conflicting Connection Header Data Found"] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [hostname "mollywoppersnyb.com"] [uri "/"] [unique_id "aQiKOuFz6qCmcnZZFiRw9wAAJzc"] [Mon Nov 03 03:02:04 2025] [mollywoppersnyb.com] [error] [client 18.210.58.238:18544] [pid 112876] apache2_util.c(271): [client 18.210.58.238] ModSecurity: Warning. Matched phrase "etc/sysstat" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: etc/sysstat found within ARGS:path: /etc/sysstat"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQiLrObZWGNuV4I6tNLnBwAAAMg"] [Mon Nov 03 03:02:07 2025] [mollywoppersnyb.com] [error] [client 44.207.252.58:36952] [pid 112876] apache2_util.c(271): [client 44.207.252.58] ModSecurity: Warning. Matched phrase "etc/pm" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: etc/pm found within ARGS:path: /etc/pm"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQiLr-bZWGNuV4I6tNLnCwAAANA"] [Mon Nov 03 03:04:51 2025] [mollywoppersnyb.com] [error] [client 43.155.129.131:46938] [pid 112876] apache2_util.c(271): [client 43.155.129.131] ModSecurity: Warning. Pattern match "\\\\b(?:keep-alive|close),\\\\s?(?:keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "352"] [id "920210"] [msg "Multiple/Conflicting Connection Header Data Found"] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [hostname "mollywoppersnyb.com"] [uri "/"] [unique_id "aQiMU-bZWGNuV4I6tNLoIwAAABs"] [Mon Nov 03 03:04:52 2025] [mollywoppersnyb.com] [warn] [client 43.155.129.131:46938] [pid 112876] fcgid_bridge.c(409): (104)Connection reset by peer: mod_fcgid: ap_pass_brigade failed in handle_request_ipc function [Mon Nov 03 03:06:09 2025] [mollywoppersnyb.com] [error] [client 52.70.123.241:32460] [pid 112876] apache2_util.c(271): [client 52.70.123.241] ModSecurity: Warning. Matched phrase "etc/init" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: etc/init found within ARGS:path: /etc/init.d"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQiMoebZWGNuV4I6tNLooQAAANE"] [Mon Nov 03 03:06:53 2025] [mollywoppersnyb.com] [error] [client 34.225.87.80:36536] [pid 112876] apache2_util.c(271): [client 34.225.87.80] ModSecurity: Warning. Matched phrase "etc/ppp" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: etc/ppp found within ARGS:path: /etc/ppp"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQiMzebZWGNuV4I6tNLpAwAAAJY"] [Mon Nov 03 03:07:19 2025] [mollywoppersnyb.com] [error] [client 50.19.221.48:26257] [pid 112876] apache2_util.c(271): [client 50.19.221.48] ModSecurity: Warning. Matched phrase "etc/w3m" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: etc/w3m found within ARGS:path: /etc/w3m"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQiM5-bZWGNuV4I6tNLpIQAAANs"] [Mon Nov 03 03:07:28 2025] [mollywoppersnyb.com] [error] [client 35.174.253.85:41266] [pid 112876] apache2_util.c(271): [client 35.174.253.85] ModSecurity: Warning. Matched phrase "etc/binfmt.d" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: etc/binfmt.d found within ARGS:path: /etc/binfmt.d"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQiM8ObZWGNuV4I6tNLpLgAAAA4"] [Mon Nov 03 03:10:11 2025] [mollywoppersnyb.com] [error] [client 3.81.253.213:26740] [pid 112876] apache2_util.c(271): [client 3.81.253.213] ModSecurity: Access denied with code 418 (phase 2). Pattern match "^[\\\\.|/]+(proc/|dev/shm/)" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/99_dreamhost_rules.conf"] [line "53"] [id "1990013"] [msg "Directory traversal"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQiNk-bZWGNuV4I6tNLqYAAAADk"] [Mon Nov 03 03:15:41 2025] [mollywoppersnyb.com] [error] [client 3.213.85.234:12052] [pid 112876] apache2_util.c(271): [client 3.213.85.234] ModSecurity: Warning. Matched phrase "sys/firmware" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: sys/firmware found within ARGS:path: /sys/firmware"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQiO3ebZWGNuV4I6tNLtSgAAAIQ"] [Mon Nov 03 03:15:48 2025] [mollywoppersnyb.com] [error] [client 54.197.102.71:10270] [pid 112876] apache2_util.c(271): [client 54.197.102.71] ModSecurity: Warning. Matched phrase "etc/skel" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: etc/skel found within ARGS:path: /etc/skel"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQiO5ObZWGNuV4I6tNLtVwAAAJo"] [Mon Nov 03 03:16:01 2025] [mollywoppersnyb.com] [error] [client 3.90.73.206:64004] [pid 112876] apache2_util.c(271): [client 3.90.73.206] ModSecurity: Warning. Matched phrase "etc/vmware" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: etc/vmware found within ARGS:path: /etc/vmware-tools"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQiO8ebZWGNuV4I6tNLtagAAALc"] [Mon Nov 03 03:21:54 2025] [mollywoppersnyb.com] [error] [client 130.195.218.214:46586] [pid 112876] mod_access_compat.c(350): AH01797: client denied by server configuration: /home/mollywopper/mollywoppersnyb.com/manager.php [Mon Nov 03 03:27:15 2025] [mollywoppersnyb.com] [error] [client 43.157.46.118:56762] [pid 112876] apache2_util.c(271): [client 43.157.46.118] ModSecurity: Warning. Pattern match "\\\\b(?:keep-alive|close),\\\\s?(?:keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "352"] [id "920210"] [msg "Multiple/Conflicting Connection Header Data Found"] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [hostname "mollywoppersnyb.com"] [uri "/"] [unique_id "aQiRk-bZWGNuV4I6tNKucgAAAD4"] [Mon Nov 03 03:33:32 2025] [mollywoppersnyb.com] [error] [client 52.44.229.124:36576] [pid 112876] apache2_util.c(271): [client 52.44.229.124] ModSecurity: Warning. Matched phrase "etc/udisks2" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: etc/udisks2 found within ARGS:path: /etc/udisks2"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQiTDObZWGNuV4I6tNLfGQAAAH8"] [Mon Nov 03 03:35:19 2025] [mollywoppersnyb.com] [error] [client 43.157.170.126:42994] [pid 112876] apache2_util.c(271): [client 43.157.170.126] ModSecurity: Warning. Pattern match "\\\\b(?:keep-alive|close),\\\\s?(?:keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "352"] [id "920210"] [msg "Multiple/Conflicting Connection Header Data Found"] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [hostname "mollywoppersnyb.com"] [uri "/"] [unique_id "aQiTd-bZWGNuV4I6tNLgrQAAAJI"] [Mon Nov 03 03:36:29 2025] [mollywoppersnyb.com] [error] [client 23.21.148.226:59627] [pid 112876] apache2_util.c(271): [client 23.21.148.226] ModSecurity: Access denied with code 418 (phase 2). Pattern match "^[\\\\.|/]+(proc/|dev/shm/)" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/99_dreamhost_rules.conf"] [line "53"] [id "1990013"] [msg "Directory traversal"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQiTvebZWGNuV4I6tNLhKgAAAEs"] [Mon Nov 03 03:37:14 2025] [mollywoppersnyb.com] [error] [client 98.84.60.17:24743] [pid 112876] apache2_util.c(271): [client 98.84.60.17] ModSecurity: Warning. Matched phrase "etc/apport" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: etc/apport found within ARGS:path: /etc/apport"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQiT6ubZWGNuV4I6tNLheQAAAMY"] [Mon Nov 03 03:37:32 2025] [mollywoppersnyb.com] [error] [client 69.167.12.37:49840] [pid 112876] mod_access_compat.c(350): AH01797: client denied by server configuration: /home/mollywopper/mollywoppersnyb.com/wp-admin/install.php [Mon Nov 03 03:37:34 2025] [mollywoppersnyb.com] [error] [client 18.207.79.144:30215] [pid 112876] apache2_util.c(271): [client 18.207.79.144] ModSecurity: Warning. Matched phrase "etc/libblockdev" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: etc/libblockdev found within ARGS:path: /etc/libblockdev"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQiT_ubZWGNuV4I6tNLhpQAAALs"] [Mon Nov 03 03:47:08 2025] [mollywoppersnyb.com] [error] [client 170.106.147.63:45536] [pid 112876] apache2_util.c(271): [client 170.106.147.63] ModSecurity: Warning. Pattern match "\\\\b(?:keep-alive|close),\\\\s?(?:keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "352"] [id "920210"] [msg "Multiple/Conflicting Connection Header Data Found"] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [hostname "mollywoppersnyb.com"] [uri "/"] [unique_id "aQiWPObZWGNuV4I6tNLnPwAAANg"] [Mon Nov 03 04:01:04 2025] [mollywoppersnyb.com] [error] [client 52.200.58.199:36385] [pid 112876] apache2_util.c(271): [client 52.200.58.199] ModSecurity: Warning. Matched phrase "etc/ubuntu-advantage" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: etc/ubuntu-advantage found within ARGS:path: /etc/ubuntu-advantage"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQiZgObZWGNuV4I6tNLurgAAAME"] [Mon Nov 03 04:06:40 2025] [mollywoppersnyb.com] [error] [client 52.44.229.124:46172] [pid 112876] apache2_util.c(271): [client 52.44.229.124] ModSecurity: Warning. Matched phrase "etc/php" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: etc/php found within ARGS:path: /etc/php82"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQia0ObZWGNuV4I6tNLxjAAAANM"] [Mon Nov 03 04:10:32 2025] [mollywoppersnyb.com] [error] [client 18.211.39.188:54452] [pid 112876] apache2_util.c(271): [client 18.211.39.188] ModSecurity: Warning. Matched phrase "etc/proftpd" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: etc/proftpd found within ARGS:path: /etc/proftpd"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQibuObZWGNuV4I6tNLzqQAAAJw"] [Mon Nov 03 04:12:57 2025] [mollywoppersnyb.com] [error] [client 3.221.50.71:2893] [pid 112876] apache2_util.c(271): [client 3.221.50.71] ModSecurity: Warning. Matched phrase "etc/rc1.d" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: etc/rc1.d found within ARGS:path: /etc/rc1.d"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQicSebZWGNuV4I6tNL08gAAAEc"] [Mon Nov 03 04:30:31 2025] [mollywoppersnyb.com] [error] [client 54.145.82.217:46790] [pid 112876] apache2_util.c(271): [client 54.145.82.217] ModSecurity: Access denied with code 418 (phase 2). Pattern match "^[\\\\.|/]+(proc/|dev/shm/)" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/99_dreamhost_rules.conf"] [line "53"] [id "1990013"] [msg "Directory traversal"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQigZ-bZWGNuV4I6tNL8PwAAALQ"] [Mon Nov 03 04:30:36 2025] [mollywoppersnyb.com] [error] [client 98.82.40.168:55110] [pid 112876] apache2_util.c(271): [client 98.82.40.168] ModSecurity: Warning. Matched phrase "etc/polkit-1" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: etc/polkit-1 found within ARGS:path: /etc/polkit-1"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQigbObZWGNuV4I6tNL8RQAAAHE"] [Mon Nov 03 04:31:32 2025] [mollywoppersnyb.com] [error] [client 98.84.131.195:29579] [pid 112876] apache2_util.c(271): [client 98.84.131.195] ModSecurity: Warning. Matched phrase "etc/php" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: etc/php found within ARGS:path: /etc/php74"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQigpObZWGNuV4I6tNL8sgAAAME"] [Mon Nov 03 04:35:14 2025] [mollywoppersnyb.com] [error] [client 98.80.130.239:44638] [pid 112876] apache2_util.c(271): [client 98.80.130.239] ModSecurity: Warning. Matched phrase "etc/udev" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: etc/udev found within ARGS:path: /etc/udev"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQihgubZWGNuV4I6tNL-twAAAHM"] [Mon Nov 03 04:35:30 2025] [mollywoppersnyb.com] [error] [client 52.205.113.104:21859] [pid 112876] apache2_util.c(271): [client 52.205.113.104] ModSecurity: Warning. Matched phrase "etc/packagekit" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: etc/packagekit found within ARGS:path: /etc/PackageKit"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQihkubZWGNuV4I6tNL-zwAAAAU"] [Mon Nov 03 05:03:29 2025] [mollywoppersnyb.com] [error] [client 34.199.252.22:8671] [pid 802365] apache2_util.c(271): [client 34.199.252.22] ModSecurity: Warning. Matched phrase "etc/python" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: etc/python found within ARGS:path: /etc/python2.7"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQioIcirZPDKgD7A0qHIqQAAJ20"] [Mon Nov 03 05:07:57 2025] [mollywoppersnyb.com] [error] [client 54.197.114.76:50610] [pid 802365] apache2_util.c(271): [client 54.197.114.76] ModSecurity: Warning. Matched phrase "etc/mc" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: etc/mc found within ARGS:path: /etc/mc"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQipLcirZPDKgD7A0qHLCgAAJ9I"] [Mon Nov 03 05:10:05 2025] [mollywoppersnyb.com] [error] [client 34.231.118.144:35061] [pid 802365] apache2_util.c(271): [client 34.231.118.144] ModSecurity: Warning. Matched phrase "etc/gdb" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: etc/gdb found within ARGS:path: /etc/gdb"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQiprcirZPDKgD7A0qHMOAAAJ9Y"] [Mon Nov 03 05:20:51 2025] [mollywoppersnyb.com] [error] [client 100.28.44.58:11543] [pid 802365] apache2_util.c(271): [client 100.28.44.58] ModSecurity: Warning. Matched phrase "etc/hostname" at ARGS:fileloc. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: etc/hostname found within ARGS:fileloc: /etc/hostname"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQisM8irZPDKgD7A0qHRXwAAJ5g"] [Mon Nov 03 05:35:03 2025] [mollywoppersnyb.com] [error] [client 44.207.252.58:39766] [pid 802365] apache2_util.c(271): [client 44.207.252.58] ModSecurity: Warning. Matched phrase "etc/dictionaries-common" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: etc/dictionaries-common found within ARGS:path: /etc/dictionaries-common"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQivh8irZPDKgD7A0qHYIAAAJyk"] [Mon Nov 03 05:39:55 2025] [mollywoppersnyb.com] [error] [client 35.174.141.243:17817] [pid 802365] apache2_util.c(271): [client 35.174.141.243] ModSecurity: Warning. Matched phrase "etc/x11" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: etc/x11 found within ARGS:path: /etc/X11"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQiwq8irZPDKgD7A0qHaXAAAJ6E"] [Mon Nov 03 05:57:16 2025] [mollywoppersnyb.com] [error] [client 44.205.192.249:36104] [pid 802365] apache2_util.c(271): [client 44.205.192.249] ModSecurity: Warning. Matched phrase "etc/rc6.d" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: etc/rc6.d found within ARGS:path: /etc/rc6.d"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQi0vMirZPDKgD7A0qHibgAAJ0U"] [Mon Nov 03 06:00:11 2025] [mollywoppersnyb.com] [error] [client 18.233.24.238:19636] [pid 802365] apache2_util.c(271): [client 18.233.24.238] ModSecurity: Warning. Matched phrase "etc/lynx" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: etc/lynx found within ARGS:path: /etc/lynx"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQi1a8irZPDKgD7A0qHkHgAAJ0U"] [Mon Nov 03 06:04:23 2025] [mollywoppersnyb.com] [error] [client 54.85.109.140:28308] [pid 802365] apache2_util.c(271): [client 54.85.109.140] ModSecurity: Warning. Matched phrase "etc/php" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: etc/php found within ARGS:path: /etc/php"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQi2Z8irZPDKgD7A0qHmjwAAJ18"] [Mon Nov 03 06:04:34 2025] [mollywoppersnyb.com] [error] [client 3.216.86.144:52462] [pid 802365] apache2_util.c(271): [client 3.216.86.144] ModSecurity: Warning. Matched phrase "etc/dbus-1" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: etc/dbus-1 found within ARGS:path: /etc/dbus-1"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQi2csirZPDKgD7A0qHmnwAAJ3w"] [Mon Nov 03 06:09:44 2025] [mollywoppersnyb.com] [error] [client 43.135.186.135:46744] [pid 802365] apache2_util.c(271): [client 43.135.186.135] ModSecurity: Warning. Pattern match "\\\\b(?:keep-alive|close),\\\\s?(?:keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "352"] [id "920210"] [msg "Multiple/Conflicting Connection Header Data Found"] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [hostname "www.mollywoppersnyb.com"] [uri "/"] [unique_id "aQi3qMirZPDKgD7A0qHr5wAAJ-E"] [Mon Nov 03 06:09:45 2025] [mollywoppersnyb.com] [error] [client 43.135.186.135:47278] [pid 802365] apache2_util.c(271): [client 43.135.186.135] ModSecurity: Warning. Pattern match "\\\\b(?:keep-alive|close),\\\\s?(?:keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "352"] [id "920210"] [msg "Multiple/Conflicting Connection Header Data Found"] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [hostname "mollywoppersnyb.com"] [uri "/"] [unique_id "aQi3qcirZPDKgD7A0qHr6AAAJyk"] [Mon Nov 03 06:21:43 2025] [mollywoppersnyb.com] [error] [client 44.217.177.142:7705] [pid 802365] apache2_util.c(271): [client 44.217.177.142] ModSecurity: Access denied with code 418 (phase 2). Pattern match "^[\\\\.|/]+(proc/|dev/shm/)" at ARGS:fileloc. [file "/etc/modsecurity/mod_sec3_CRS/99_dreamhost_rules.conf"] [line "53"] [id "1990013"] [msg "Directory traversal"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQi6d8irZPDKgD7A0qHzRwAAJzQ"] [Mon Nov 03 06:28:24 2025] [mollywoppersnyb.com] [error] [client 44.209.89.189:10593] [pid 802365] apache2_util.c(271): [client 44.209.89.189] ModSecurity: Warning. Matched phrase "etc/dkms" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: etc/dkms found within ARGS:path: /etc/dkms"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQi8CMirZPDKgD7A0qH3hAAAJ00"] [Mon Nov 03 06:30:44 2025] [mollywoppersnyb.com] [error] [client 43.157.98.187:41340] [pid 802365] apache2_util.c(271): [client 43.157.98.187] ModSecurity: Warning. Pattern match "\\\\b(?:keep-alive|close),\\\\s?(?:keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "352"] [id "920210"] [msg "Multiple/Conflicting Connection Header Data Found"] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [hostname "mollywoppersnyb.com"] [uri "/"] [unique_id "aQi8lMirZPDKgD7A0qH4TwAAJ6E"] [Mon Nov 03 06:31:58 2025] [mollywoppersnyb.com] [error] [client 3.221.50.71:57272] [pid 802365] apache2_util.c(271): [client 3.221.50.71] ModSecurity: Warning. Matched phrase "sys/module" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: sys/module found within ARGS:path: /sys/module"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQi83sirZPDKgD7A0qH41QAAJ6E"] [Mon Nov 03 06:39:33 2025] [mollywoppersnyb.com] [error] [client 3.217.171.106:36522] [pid 802365] apache2_util.c(271): [client 3.217.171.106] ModSecurity: Warning. Matched phrase "etc/sgml" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: etc/sgml found within ARGS:path: /etc/sgml"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQi-pcirZPDKgD7A0qH9dgAAJ5o"] [Mon Nov 03 06:44:22 2025] [mollywoppersnyb.com] [error] [client 43.159.143.139:37056] [pid 802365] apache2_util.c(271): [client 43.159.143.139] ModSecurity: Warning. Pattern match "\\\\b(?:keep-alive|close),\\\\s?(?:keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "352"] [id "920210"] [msg "Multiple/Conflicting Connection Header Data Found"] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [hostname "mollywoppersnyb.com"] [uri "/"] [unique_id "aQi_xsirZPDKgD7A0qEACgAAJ4k"] [Mon Nov 03 06:50:27 2025] [mollywoppersnyb.com] [error] [client 3.213.213.161:58053] [pid 1470817] apache2_util.c(271): [client 3.213.213.161] ModSecurity: Access denied with code 418 (phase 2). Pattern match "^[\\\\.|/]+(proc/|dev/shm/)" at ARGS:fileloc. [file "/etc/modsecurity/mod_sec3_CRS/99_dreamhost_rules.conf"] [line "53"] [id "1990013"] [msg "Directory traversal"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQjBMxxuRO3cQ_oBGaEiYAAAAKQ"] [Mon Nov 03 06:55:06 2025] [mollywoppersnyb.com] [error] [client 43.131.243.61:43814] [pid 1470817] apache2_util.c(271): [client 43.131.243.61] ModSecurity: Warning. Pattern match "\\\\b(?:keep-alive|close),\\\\s?(?:keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "352"] [id "920210"] [msg "Multiple/Conflicting Connection Header Data Found"] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [hostname "mollywoppersnyb.com"] [uri "/"] [unique_id "aQjCShxuRO3cQ_oBGaEljgAAAFU"] [Mon Nov 03 07:01:09 2025] [mollywoppersnyb.com] [error] [client 52.200.58.199:37114] [pid 1470817] apache2_util.c(271): [client 52.200.58.199] ModSecurity: Warning. Matched phrase "etc/openal" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: etc/openal found within ARGS:path: /etc/openal"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQjDtRxuRO3cQ_oBGaEpXgAAALk"] [Mon Nov 03 07:05:22 2025] [mollywoppersnyb.com] [error] [client 35.171.117.160:64898] [pid 1470817] apache2_util.c(271): [client 35.171.117.160] ModSecurity: Access denied with code 418 (phase 2). Pattern match "^[\\\\.|/]+(proc/|dev/shm/)" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/99_dreamhost_rules.conf"] [line "53"] [id "1990013"] [msg "Directory traversal"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQjEshxuRO3cQ_oBGaEsuQAAAHY"] [Mon Nov 03 07:06:10 2025] [mollywoppersnyb.com] [error] [client 43.166.136.153:40462] [pid 1470817] apache2_util.c(271): [client 43.166.136.153] ModSecurity: Warning. Pattern match "\\\\b(?:keep-alive|close),\\\\s?(?:keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "352"] [id "920210"] [msg "Multiple/Conflicting Connection Header Data Found"] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [hostname "mollywoppersnyb.com"] [uri "/"] [unique_id "aQjE4hxuRO3cQ_oBGaEtLAAAADQ"] [Mon Nov 03 07:14:48 2025] [mollywoppersnyb.com] [error] [client 43.157.174.69:50142] [pid 1470817] apache2_util.c(271): [client 43.157.174.69] ModSecurity: Warning. Pattern match "\\\\b(?:keep-alive|close),\\\\s?(?:keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "352"] [id "920210"] [msg "Multiple/Conflicting Connection Header Data Found"] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [hostname "mollywoppersnyb.com"] [uri "/"] [unique_id "aQjG6BxuRO3cQ_oBGaEzVgAAAEQ"] [Mon Nov 03 07:21:52 2025] [mollywoppersnyb.com] [error] [client 18.208.11.93:48499] [pid 1470817] apache2_util.c(271): [client 18.208.11.93] ModSecurity: Warning. Matched phrase "etc/systemd" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: etc/systemd found within ARGS:path: /etc/systemd"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQjIkBxuRO3cQ_oBGaE3OQAAAE0"] [Mon Nov 03 07:29:44 2025] [mollywoppersnyb.com] [error] [client 44.207.207.36:7821] [pid 1470817] apache2_util.c(271): [client 44.207.207.36] ModSecurity: Warning. Matched phrase "etc/php" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: etc/php found within ARGS:path: /etc/php56"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQjKaBxuRO3cQ_oBGaE9AwAAAJ4"] [Mon Nov 03 07:45:09 2025] [mollywoppersnyb.com] [error] [client 43.153.74.75:56702] [pid 1470817] apache2_util.c(271): [client 43.153.74.75] ModSecurity: Warning. Pattern match "\\\\b(?:keep-alive|close),\\\\s?(?:keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "352"] [id "920210"] [msg "Multiple/Conflicting Connection Header Data Found"] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [hostname "mollywoppersnyb.com"] [uri "/"] [unique_id "aQjOBRxuRO3cQ_oBGaFIMAAAAEU"] [Mon Nov 03 07:55:15 2025] [mollywoppersnyb.com] [error] [client 43.135.185.59:36658] [pid 1470817] apache2_util.c(271): [client 43.135.185.59] ModSecurity: Warning. Pattern match "\\\\b(?:keep-alive|close),\\\\s?(?:keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "352"] [id "920210"] [msg "Multiple/Conflicting Connection Header Data Found"] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [hostname "mollywoppersnyb.com"] [uri "/"] [unique_id "aQjQYxxuRO3cQ_oBGaFP1gAAACQ"] [Mon Nov 03 07:55:15 2025] [mollywoppersnyb.com] [error] [client 43.135.185.59:36658] [pid 1470817] apache2_util.c(271): [client 43.135.185.59] ModSecurity: Warning. Matched phrase ".htaccess" at ARGS:fileloc. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: .htaccess found within ARGS:fileloc: /home/mollywopper/mollywoppersnyb.com/.well-known/.htaccess"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/"] [unique_id "aQjQYxxuRO3cQ_oBGaFP1gAAACQ"] [Mon Nov 03 08:00:32 2025] [mollywoppersnyb.com] [error] [client 35.171.117.160:16746] [pid 1470817] apache2_util.c(271): [client 35.171.117.160] ModSecurity: Warning. Matched phrase "etc/ssl" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: etc/ssl found within ARGS:path: /etc/ssl"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQjRoBxuRO3cQ_oBGaFVQgAAAFI"] [Mon Nov 03 08:02:05 2025] [mollywoppersnyb.com] [error] [client 34.196.6.199:2725] [pid 1470817] apache2_util.c(271): [client 34.196.6.199] ModSecurity: Access denied with code 418 (phase 2). Pattern match "^[\\\\.|/]+(proc/|dev/shm/)" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/99_dreamhost_rules.conf"] [line "53"] [id "1990013"] [msg "Directory traversal"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQjR_RxuRO3cQ_oBGaFWSgAAAF8"] [Mon Nov 03 08:04:13 2025] [mollywoppersnyb.com] [error] [client 44.223.193.255:43210] [pid 1470817] apache2_util.c(271): [client 44.223.193.255] ModSecurity: Warning. Matched phrase "etc/cron.d" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: etc/cron.d found within ARGS:path: /etc/cron.daily"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQjSfRxuRO3cQ_oBGaFYDgAAAKU"] [Mon Nov 03 08:05:20 2025] [mollywoppersnyb.com] [error] [client 43.130.116.87:43150] [pid 1470817] apache2_util.c(271): [client 43.130.116.87] ModSecurity: Warning. Pattern match "\\\\b(?:keep-alive|close),\\\\s?(?:keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "352"] [id "920210"] [msg "Multiple/Conflicting Connection Header Data Found"] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [hostname "mollywoppersnyb.com"] [uri "/"] [unique_id "aQjSwBxuRO3cQ_oBGaFY3wAAADg"] [Mon Nov 03 08:14:58 2025] [mollywoppersnyb.com] [error] [client 170.106.15.3:53358] [pid 1470817] apache2_util.c(271): [client 170.106.15.3] ModSecurity: Warning. Pattern match "\\\\b(?:keep-alive|close),\\\\s?(?:keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "352"] [id "920210"] [msg "Multiple/Conflicting Connection Header Data Found"] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [hostname "mollywoppersnyb.com"] [uri "/"] [unique_id "aQjVAhxuRO3cQ_oBGaFfAgAAANs"] [Mon Nov 03 08:14:58 2025] [mollywoppersnyb.com] [error] [client 170.106.15.3:53358] [pid 1470817] apache2_util.c(271): [client 170.106.15.3] ModSecurity: Warning. Matched phrase ".htaccess" at ARGS:fileloc. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: .htaccess found within ARGS:fileloc: /home/mollywopper/mollywoppersnyb.com/.well-known/acme-challenge/.htaccess"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/"] [unique_id "aQjVAhxuRO3cQ_oBGaFfAgAAANs"] [Mon Nov 03 08:18:35 2025] [mollywoppersnyb.com] [error] [client 34.236.135.14:54822] [pid 1470817] apache2_util.c(271): [client 34.236.135.14] ModSecurity: Access denied with code 418 (phase 2). Pattern match "^[\\\\.|/]+(proc/|dev/shm/)" at ARGS:fileloc. [file "/etc/modsecurity/mod_sec3_CRS/99_dreamhost_rules.conf"] [line "53"] [id "1990013"] [msg "Directory traversal"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQjV2xxuRO3cQ_oBGaFg8AAAAJ0"] [Mon Nov 03 08:19:09 2025] [mollywoppersnyb.com] [error] [client 172.207.243.125:12926] [pid 1470817] apache2_util.c(271): [client 172.207.243.125] ModSecurity: Warning. Matched phrase "Mozlila" at REQUEST_HEADERS:User-Agent. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-913-SCANNER-DETECTION.conf"] [line "56"] [id "913100"] [msg "Found User-Agent associated with security scanner"] [data "Matched Data: Mozlila found within REQUEST_HEADERS:User-Agent: Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-reputation-scanner"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/118/224/541/310"] [tag "PCI/6.5.10"] [hostname "mollywoppersnyb.com"] [uri "/ALFA_DATA/alfacgiapi/perl.alfa"] [unique_id "aQjV_RxuRO3cQ_oBGaFhQAAAAFM"] [Mon Nov 03 08:19:09 2025] [mollywoppersnyb.com] [error] [client 172.207.243.125:17497] [pid 1470817] apache2_util.c(271): [client 172.207.243.125] ModSecurity: Warning. Matched phrase "Mozlila" at REQUEST_HEADERS:User-Agent. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-913-SCANNER-DETECTION.conf"] [line "56"] [id "913100"] [msg "Found User-Agent associated with security scanner"] [data "Matched Data: Mozlila found within REQUEST_HEADERS:User-Agent: Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-reputation-scanner"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/118/224/541/310"] [tag "PCI/6.5.10"] [hostname "mollywoppersnyb.com"] [uri "/"] [unique_id "aQjV_RxuRO3cQ_oBGaFhQQAAABU"] [Mon Nov 03 08:19:09 2025] [mollywoppersnyb.com] [error] [client 172.207.243.125:17494] [pid 1470817] apache2_util.c(271): [client 172.207.243.125] ModSecurity: Warning. Matched phrase "Mozlila" at REQUEST_HEADERS:User-Agent. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-913-SCANNER-DETECTION.conf"] [line "56"] [id "913100"] [msg "Found User-Agent associated with security scanner"] [data "Matched Data: Mozlila found within REQUEST_HEADERS:User-Agent: Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-reputation-scanner"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/118/224/541/310"] [tag "PCI/6.5.10"] [hostname "mollywoppersnyb.com"] [uri "/wp-content/themes/seotheme/db.php"] [unique_id "aQjV_RxuRO3cQ_oBGaFhQwAAAEg"] [Mon Nov 03 08:19:09 2025] [mollywoppersnyb.com] [error] [client 172.207.243.125:12926] [pid 1470817] apache2_util.c(271): [client 172.207.243.125] ModSecurity: Warning. Matched phrase "Mozlila" at REQUEST_HEADERS:User-Agent. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-913-SCANNER-DETECTION.conf"] [line "56"] [id "913100"] [msg "Found User-Agent associated with security scanner"] [data "Matched Data: Mozlila found within REQUEST_HEADERS:User-Agent: Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-reputation-scanner"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/118/224/541/310"] [tag "PCI/6.5.10"] [hostname "mollywoppersnyb.com"] [uri "/alfacgiapi/perl.alfa"] [unique_id "aQjV_RxuRO3cQ_oBGaFhRAAAABs"] [Mon Nov 03 08:31:14 2025] [mollywoppersnyb.com] [error] [client 98.82.63.147:3198] [pid 1470817] apache2_util.c(271): [client 98.82.63.147] ModSecurity: Access denied with code 418 (phase 2). Pattern match "^[\\\\.|/]+(proc/|dev/shm/)" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/99_dreamhost_rules.conf"] [line "53"] [id "1990013"] [msg "Directory traversal"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQjY0hxuRO3cQ_oBGaFp7gAAAHo"] [Mon Nov 03 08:32:16 2025] [mollywoppersnyb.com] [error] [client 54.210.152.179:1465] [pid 1470817] apache2_util.c(271): [client 54.210.152.179] ModSecurity: Warning. Matched phrase "etc/modprobe.d" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: etc/modprobe.d found within ARGS:path: /etc/modprobe.d"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQjZEBxuRO3cQ_oBGaFqZwAAALo"] [Mon Nov 03 08:50:44 2025] [mollywoppersnyb.com] [error] [client 52.6.97.88:5399] [pid 2073210] apache2_util.c(271): [client 52.6.97.88] ModSecurity: Warning. Matched phrase "etc/gss" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: etc/gss found within ARGS:path: /etc/gss"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQjdZBbW_WPi1kDUG8b6AgAAJ3w"] [Mon Nov 03 08:52:12 2025] [mollywoppersnyb.com] [error] [client 44.212.145.46:48283] [pid 2073210] apache2_util.c(271): [client 44.212.145.46] ModSecurity: Access denied with code 418 (phase 2). Pattern match "^[\\\\.|/]+(proc/|dev/shm/)" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/99_dreamhost_rules.conf"] [line "53"] [id "1990013"] [msg "Directory traversal"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQjdvBbW_WPi1kDUG8b7kQAAJ4E"] [Mon Nov 03 08:58:41 2025] [mollywoppersnyb.com] [error] [client 44.205.180.155:58624] [pid 2073210] apache2_util.c(271): [client 44.205.180.155] ModSecurity: Warning. Matched phrase "etc/apparmor" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: etc/apparmor found within ARGS:path: /etc/apparmor"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQjfQRbW_WPi1kDUG8YBIwAAJxY"] [Mon Nov 03 09:20:08 2025] [mollywoppersnyb.com] [error] [client 98.83.94.113:60162] [pid 2073210] apache2_util.c(271): [client 98.83.94.113] ModSecurity: Warning. Matched phrase "etc/dconf" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: etc/dconf found within ARGS:path: /etc/dconf"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQjkSBbW_WPi1kDUG8YMOQAAJz8"] [Mon Nov 03 09:21:15 2025] [mollywoppersnyb.com] [error] [client 54.235.191.179:52671] [pid 2073210] apache2_util.c(271): [client 54.235.191.179] ModSecurity: Warning. Matched phrase "etc/update-notifier" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: etc/update-notifier found within ARGS:path: /etc/update-notifier"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQjkixbW_WPi1kDUG8YM3wAAJ3k"] [Mon Nov 03 09:28:19 2025] [mollywoppersnyb.com] [error] [client 34.231.156.59:58398] [pid 2073210] apache2_util.c(271): [client 34.231.156.59] ModSecurity: Access denied with code 418 (phase 2). Pattern match "^[\\\\.|/]+(proc/|dev/shm/)" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/99_dreamhost_rules.conf"] [line "53"] [id "1990013"] [msg "Directory traversal"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQjmMxbW_WPi1kDUG8YPawAAJ6I"] [Mon Nov 03 09:39:55 2025] [mollywoppersnyb.com] [error] [client 18.213.240.226:5454] [pid 2073210] apache2_util.c(271): [client 18.213.240.226] ModSecurity: Access denied with code 418 (phase 2). Pattern match "^[\\\\.|/]+(proc/|dev/shm/)" at ARGS:fileloc. [file "/etc/modsecurity/mod_sec3_CRS/99_dreamhost_rules.conf"] [line "53"] [id "1990013"] [msg "Directory traversal"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQjo6xbW_WPi1kDUG8YWFgAAJ1Q"] [Mon Nov 03 09:50:01 2025] [mollywoppersnyb.com] [error] [client 3.215.59.93:28765] [pid 2073210] apache2_util.c(271): [client 3.215.59.93] ModSecurity: Warning. Matched phrase "etc/cron.d" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: etc/cron.d found within ARGS:path: /etc/cron.d"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQjrSRbW_WPi1kDUG8YcYgAAJ9M"] [Mon Nov 03 09:56:54 2025] [mollywoppersnyb.com] [error] [client 77.51.198.201:54558] [pid 2073210] mod_access_compat.c(350): AH01797: client denied by server configuration: /home/mollywopper/mollywoppersnyb.com/tiny.php [Mon Nov 03 10:19:54 2025] [mollywoppersnyb.com] [error] [client 23.21.119.232:33216] [pid 2677755] apache2_util.c(271): [client 23.21.119.232] ModSecurity: Warning. Matched phrase "etc/logcheck" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: etc/logcheck found within ARGS:path: /etc/logcheck"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQjySq5yA5yFxHei9zQbYwAAAI0"] [Mon Nov 03 10:21:16 2025] [mollywoppersnyb.com] [error] [client 52.205.113.104:42614] [pid 2677755] apache2_util.c(271): [client 52.205.113.104] ModSecurity: Warning. Matched phrase "etc/postgresql" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: etc/postgresql found within ARGS:path: /etc/postgresql-common"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQjynK5yA5yFxHei9zQcNAAAAHg"] [Mon Nov 03 10:22:20 2025] [mollywoppersnyb.com] [error] [client 54.147.182.90:52044] [pid 2677755] apache2_util.c(271): [client 54.147.182.90] ModSecurity: Warning. Matched phrase "etc/apt" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: etc/apt found within ARGS:path: /etc/apt"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQjy3K5yA5yFxHei9zQcvAAAAL0"] [Mon Nov 03 10:28:21 2025] [mollywoppersnyb.com] [error] [client 52.203.65.83:43846] [pid 2677755] apache2_util.c(271): [client 52.203.65.83] ModSecurity: Warning. Matched phrase "etc/php" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: etc/php found within ARGS:path: /etc/php84"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQj0Ra5yA5yFxHei9zQgEQAAACg"] [Mon Nov 03 10:50:24 2025] [mollywoppersnyb.com] [error] [client 34.206.212.24:56093] [pid 2677755] apache2_util.c(271): [client 34.206.212.24] ModSecurity: Warning. Matched phrase "etc/rc0.d" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: etc/rc0.d found within ARGS:path: /etc/rc0.d"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQj5cK5yA5yFxHei9zQr0AAAAGA"] [Mon Nov 03 10:50:40 2025] [mollywoppersnyb.com] [error] [client 35.169.119.108:13541] [pid 2677755] apache2_util.c(271): [client 35.169.119.108] ModSecurity: Warning. Matched phrase "etc/gtk-3.0" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: etc/gtk-3.0 found within ARGS:path: /etc/gtk-3.0"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQj5gK5yA5yFxHei9zQr6AAAAK4"] [Mon Nov 03 10:53:52 2025] [mollywoppersnyb.com] [error] [client 52.203.68.145:39142] [pid 2677755] apache2_util.c(271): [client 52.203.68.145] ModSecurity: Warning. Matched phrase "etc/rc2.d" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: etc/rc2.d found within ARGS:path: /etc/rc2.d"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQj6QK5yA5yFxHei9zQt8AAAABM"] [Mon Nov 03 10:56:47 2025] [mollywoppersnyb.com] [error] [client 34.236.41.241:7784] [pid 2677755] apache2_util.c(271): [client 34.236.41.241] ModSecurity: Warning. Matched phrase "etc/python" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: etc/python found within ARGS:path: /etc/python3.8"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQj6765yA5yFxHei9zQvhAAAANQ"] [Mon Nov 03 11:25:45 2025] [mollywoppersnyb.com] [error] [client 18.213.240.226:8880] [pid 2677755] apache2_util.c(271): [client 18.213.240.226] ModSecurity: Warning. Matched phrase "etc/logrotate.d" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: etc/logrotate.d found within ARGS:path: /etc/logrotate.d"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQkBua5yA5yFxHei9zQ-AwAAAAs"] [Mon Nov 03 11:43:23 2025] [mollywoppersnyb.com] [error] [client 35.168.238.50:53573] [pid 2677755] apache2_util.c(271): [client 35.168.238.50] ModSecurity: Warning. Matched phrase "etc/sudoers" at ARGS:fileloc. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: etc/sudoers found within ARGS:fileloc: /etc/sudoers.dpkg-dist"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQkF265yA5yFxHei9zRFIQAAAD4"] [Mon Nov 03 12:01:36 2025] [mollywoppersnyb.com] [error] [client 34.233.114.237:21580] [pid 2677755] apache2_util.c(271): [client 34.233.114.237] ModSecurity: Warning. Matched phrase "sys/kernel" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: sys/kernel found within ARGS:path: /sys/kernel"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQkKIK5yA5yFxHei9zRM1QAAACM"] [Mon Nov 03 12:02:47 2025] [mollywoppersnyb.com] [error] [client 44.195.50.71:23224] [pid 247150] apache2_util.c(271): [client 44.195.50.71] ModSecurity: Access denied with code 418 (phase 2). Pattern match "^[\\\\.|/]+(proc/|dev/shm/)" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/99_dreamhost_rules.conf"] [line "53"] [id "1990013"] [msg "Directory traversal"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQkKZ1lzIxk4SZM45Va1OAAAJzk"] [Mon Nov 03 12:03:23 2025] [mollywoppersnyb.com] [error] [client 54.235.172.108:42659] [pid 247150] apache2_util.c(271): [client 54.235.172.108] ModSecurity: Warning. Matched phrase "etc/texmf" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: etc/texmf found within ARGS:path: /etc/texmf"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQkKi1lzIxk4SZM45Va1eAAAJ8M"] [Mon Nov 03 12:03:30 2025] [mollywoppersnyb.com] [error] [client 54.235.158.162:7483] [pid 247150] apache2_util.c(271): [client 54.235.158.162] ModSecurity: Warning. Matched phrase "etc/rc5.d" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: etc/rc5.d found within ARGS:path: /etc/rc5.d"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQkKkllzIxk4SZM45Va1igAAJ-s"] [Mon Nov 03 12:04:08 2025] [mollywoppersnyb.com] [error] [client 98.84.200.43:45858] [pid 247150] apache2_util.c(271): [client 98.84.200.43] ModSecurity: Warning. Matched phrase "etc/rc4.d" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: etc/rc4.d found within ARGS:path: /etc/rc4.d"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQkKuFlzIxk4SZM45Va1ygAAJ58"] [Mon Nov 03 12:04:20 2025] [mollywoppersnyb.com] [error] [client 18.213.70.100:30959] [pid 247150] apache2_util.c(271): [client 18.213.70.100] ModSecurity: Warning. Matched phrase "etc/rcs.d" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: etc/rcs.d found within ARGS:path: /etc/rcS.d"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQkKxFlzIxk4SZM45Va13AAAJ8Y"] [Mon Nov 03 12:14:07 2025] [mollywoppersnyb.com] [error] [client 52.44.174.136:63092] [pid 247150] apache2_util.c(271): [client 52.44.174.136] ModSecurity: Warning. Matched phrase "etc/emacs" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: etc/emacs found within ARGS:path: /etc/emacs"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQkND1lzIxk4SZM45Va7pwAAJ8s"] [Mon Nov 03 12:26:48 2025] [mollywoppersnyb.com] [error] [client 34.194.233.48:17466] [pid 247150] apache2_util.c(271): [client 34.194.233.48] ModSecurity: Warning. Matched phrase "etc/network" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: etc/network found within ARGS:path: /etc/network"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQkQCFlzIxk4SZM45VbCHwAAJ8U"] [Mon Nov 03 12:27:24 2025] [mollywoppersnyb.com] [error] [client 34.227.156.153:11760] [pid 247150] apache2_util.c(271): [client 34.227.156.153] ModSecurity: Warning. Matched phrase "etc/pam.d" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: etc/pam.d found within ARGS:path: /etc/pam.d"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQkQLFlzIxk4SZM45VbCXgAAJ8g"] [Mon Nov 03 12:28:01 2025] [mollywoppersnyb.com] [error] [client 34.195.60.66:41917] [pid 247150] apache2_util.c(271): [client 34.195.60.66] ModSecurity: Warning. Matched phrase "etc/python" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: etc/python found within ARGS:path: /etc/python3.10"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQkQUVlzIxk4SZM45VbClAAAJ0o"] [Mon Nov 03 13:05:52 2025] [mollywoppersnyb.com] [error] [client 35.169.240.53:12017] [pid 247150] apache2_util.c(271): [client 35.169.240.53] ModSecurity: Warning. Matched phrase "etc/selinux" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: etc/selinux found within ARGS:path: /etc/selinux"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQkZMFlzIxk4SZM45VbR8AAAJ8w"] [Mon Nov 03 13:10:32 2025] [mollywoppersnyb.com] [error] [client 44.212.232.231:48193] [pid 247150] apache2_util.c(271): [client 44.212.232.231] ModSecurity: Warning. Matched phrase "etc/php" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: etc/php found within ARGS:path: /etc/php71"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQkaSFlzIxk4SZM45VbT6gAAJ1Y"] [Mon Nov 03 13:19:13 2025] [mollywoppersnyb.com] [error] [client 35.174.141.243:53091] [pid 247150] apache2_util.c(271): [client 35.174.141.243] ModSecurity: Warning. Matched phrase "etc/usb_modeswitch.d" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: etc/usb_modeswitch.d found within ARGS:path: /etc/usb_modeswitch.d"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQkcUVlzIxk4SZM45VbYzQAAJ6U"] [Mon Nov 03 13:44:03 2025] [mollywoppersnyb.com] [error] [client 35.169.119.108:37400] [pid 247150] apache2_util.c(271): [client 35.169.119.108] ModSecurity: Warning. Matched phrase "etc/kernel" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: etc/kernel found within ARGS:path: /etc/kernel"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQkiI1lzIxk4SZM45VbnbQAAJx4"] [Mon Nov 03 13:48:13 2025] [mollywoppersnyb.com] [error] [client 44.212.106.171:53231] [pid 247150] apache2_util.c(271): [client 44.212.106.171] ModSecurity: Warning. Matched phrase "etc/cron.weekly" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: etc/cron.weekly found within ARGS:path: /etc/cron.weekly"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQkjHVlzIxk4SZM45VbpPAAAJ30"] [Mon Nov 03 13:48:20 2025] [mollywoppersnyb.com] [error] [client 52.44.174.136:63268] [pid 247150] apache2_util.c(271): [client 52.44.174.136] ModSecurity: Warning. Matched phrase "etc/network" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: etc/network found within ARGS:path: /etc/NetworkManager"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQkjJFlzIxk4SZM45VbpQQAAJ1o"] [Mon Nov 03 13:49:00 2025] [mollywoppersnyb.com] [error] [client 52.45.92.83:34846] [pid 247150] apache2_util.c(271): [client 52.45.92.83] ModSecurity: Warning. Matched phrase "etc/vim" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: etc/vim found within ARGS:path: /etc/vim"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQkjTFlzIxk4SZM45VbpdgAAJ1U"] [Mon Nov 03 13:51:39 2025] [mollywoppersnyb.com] [error] [client 54.235.158.162:15119] [pid 897500] apache2_util.c(271): [client 54.235.158.162] ModSecurity: Warning. Matched phrase "etc/security" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: etc/security found within ARGS:path: /etc/security"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQkj6_VsIfXU0f4-urHuTwAAAIg"] [Mon Nov 03 13:51:58 2025] [mollywoppersnyb.com] [error] [client 54.90.8.255:50207] [pid 897500] apache2_util.c(271): [client 54.90.8.255] ModSecurity: Warning. Matched phrase "etc/python" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: etc/python found within ARGS:path: /etc/python3"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQkj_vVsIfXU0f4-urHuagAAAMU"] [Mon Nov 03 14:11:45 2025] [mollywoppersnyb.com] [error] [client 184.73.195.18:27524] [pid 897500] apache2_util.c(271): [client 184.73.195.18] ModSecurity: Access denied with code 418 (phase 2). Pattern match "^[\\\\.|/]+(proc/|dev/shm/)" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/99_dreamhost_rules.conf"] [line "53"] [id "1990013"] [msg "Directory traversal"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQkoofVsIfXU0f4-urH4ngAAABM"] [Mon Nov 03 14:14:08 2025] [mollywoppersnyb.com] [error] [client 18.207.89.138:10533] [pid 897500] apache2_util.c(271): [client 18.207.89.138] ModSecurity: Warning. Matched phrase "etc/cron.hourly" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: etc/cron.hourly found within ARGS:path: /etc/cron.hourly"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQkpMPVsIfXU0f4-urH7BAAAALE"] [Mon Nov 03 14:14:20 2025] [mollywoppersnyb.com] [error] [client 23.23.104.107:16387] [pid 897500] apache2_util.c(271): [client 23.23.104.107] ModSecurity: Warning. Matched phrase "etc/resolvconf" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: etc/resolvconf found within ARGS:path: /etc/resolvconf"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQkpPPVsIfXU0f4-urH7SwAAAA8"] [Mon Nov 03 14:19:03 2025] [mollywoppersnyb.com] [error] [client 54.156.124.2:36437] [pid 897500] apache2_util.c(271): [client 54.156.124.2] ModSecurity: Warning. Matched phrase "etc/pulse" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: etc/pulse found within ARGS:path: /etc/pulse"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQkqVvVsIfXU0f4-urEAgAAAAN0"] [Mon Nov 03 14:20:49 2025] [mollywoppersnyb.com] [error] [client 34.206.193.60:37767] [pid 897500] apache2_util.c(271): [client 34.206.193.60] ModSecurity: Warning. Matched phrase "etc/tmpfiles.d" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: etc/tmpfiles.d found within ARGS:path: /etc/tmpfiles.d"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQkqwfVsIfXU0f4-urEBWgAAAMs"] [Mon Nov 03 14:20:59 2025] [mollywoppersnyb.com] [error] [client 52.44.174.136:27734] [pid 897500] apache2_util.c(271): [client 52.44.174.136] ModSecurity: Warning. Matched phrase "etc/default" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: etc/default found within ARGS:path: /etc/default"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQkqy_VsIfXU0f4-urEBfAAAABg"] [Mon Nov 03 14:22:27 2025] [mollywoppersnyb.com] [error] [client 18.204.152.114:13679] [pid 897500] apache2_util.c(271): [client 18.204.152.114] ModSecurity: Warning. Matched phrase "etc/mysql" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: etc/mysql found within ARGS:path: /etc/mysql"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQkrI_VsIfXU0f4-urECGAAAAII"] [Mon Nov 03 14:44:14 2025] [mollywoppersnyb.com] [error] [client 52.21.62.139:17551] [pid 897500] apache2_util.c(271): [client 52.21.62.139] ModSecurity: Warning. Matched phrase "etc/ld.so.conf" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: etc/ld.so.conf found within ARGS:path: /etc/ld.so.conf.d"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQkwPvVsIfXU0f4-urEM_gAAAMY"] [Mon Nov 03 15:02:59 2025] [mollywoppersnyb.com] [error] [client 18.214.124.6:32450] [pid 897500] apache2_util.c(271): [client 18.214.124.6] ModSecurity: Warning. Matched phrase "etc/postfix" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: etc/postfix found within ARGS:path: /etc/postfix"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQk0o_VsIfXU0f4-urEaXAAAAB0"] [Mon Nov 03 15:28:03 2025] [mollywoppersnyb.com] [error] [client 3.94.199.128:52456] [pid 897500] apache2_util.c(271): [client 3.94.199.128] ModSecurity: Warning. Matched phrase "etc/mail" at ARGS:fileloc. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: etc/mail found within ARGS:fileloc: /etc/mailcap.order"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQk6g_VsIfXU0f4-urEnGwAAAKI"] [Mon Nov 03 15:33:19 2025] [mollywoppersnyb.com] [error] [client 44.205.192.249:24432] [pid 897500] apache2_util.c(271): [client 44.205.192.249] ModSecurity: Warning. Matched phrase "etc/glvnd" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: etc/glvnd found within ARGS:path: /etc/glvnd"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQk7v_VsIfXU0f4-urEo-wAAAJw"] [Mon Nov 03 16:06:27 2025] [mollywoppersnyb.com] [error] [client 52.205.222.214:37746] [pid 1572430] apache2_util.c(271): [client 52.205.222.214] ModSecurity: Warning. Matched phrase "etc/sysctl.conf" at ARGS:fileloc. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: etc/sysctl.conf found within ARGS:fileloc: /etc/sysctl.conf"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQlDg1DFUTg4Ya7t2FO_0AAAJ4A"] [Mon Nov 03 16:21:15 2025] [mollywoppersnyb.com] [error] [client 3.220.148.166:40333] [pid 1572430] apache2_util.c(271): [client 3.220.148.166] ModSecurity: Warning. Matched phrase "etc/newt" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: etc/newt found within ARGS:path: /etc/newt"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQlG-1DFUTg4Ya7t2FPEWgAAJ0s"] [Mon Nov 03 16:23:56 2025] [mollywoppersnyb.com] [error] [client 18.233.24.238:12519] [pid 1572430] apache2_util.c(271): [client 18.233.24.238] ModSecurity: Warning. Matched phrase "etc/sysctl.d" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: etc/sysctl.d found within ARGS:path: /etc/sysctl.d"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQlHnFDFUTg4Ya7t2FPFkAAAJ9M"] [Mon Nov 03 16:28:15 2025] [mollywoppersnyb.com] [error] [client 44.214.19.8:43857] [pid 1572430] apache2_util.c(271): [client 44.214.19.8] ModSecurity: Warning. Matched phrase "etc/sudoers" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: etc/sudoers found within ARGS:path: /etc/sudoers.d"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQlIn1DFUTg4Ya7t2FPOYgAAJ7s"] [Mon Nov 03 16:36:03 2025] [mollywoppersnyb.com] [error] [client 54.156.124.2:42892] [pid 1572430] apache2_util.c(271): [client 54.156.124.2] ModSecurity: Warning. Matched phrase "etc/spamassassin" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: etc/spamassassin found within ARGS:path: /etc/spamassassin"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQlKc1DFUTg4Ya7t2FPTEQAAJ0Y"] [Mon Nov 03 16:43:23 2025] [mollywoppersnyb.com] [error] [client 3.230.224.6:47714] [pid 1572430] apache2_util.c(271): [client 3.230.224.6] ModSecurity: Warning. Matched phrase "etc/alternatives" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: etc/alternatives found within ARGS:path: /etc/alternatives"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQlMK1DFUTg4Ya7t2FPXTAAAJ9A"] [Mon Nov 03 17:20:43 2025] [mollywoppersnyb.com] [error] [client 184.72.84.154:26758] [pid 1572430] apache2_util.c(271): [client 184.72.84.154] ModSecurity: Warning. Matched phrase "etc/monit" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: etc/monit found within ARGS:path: /etc/monit/conf-available"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQlU61DFUTg4Ya7t2FPtrAAAJ6c"] [Mon Nov 03 17:26:19 2025] [mollywoppersnyb.com] [error] [client 52.207.47.227:52657] [pid 1572430] apache2_util.c(271): [client 52.207.47.227] ModSecurity: Access denied with code 418 (phase 2). Pattern match "^[\\\\.|/]+(proc/|dev/shm/)" at ARGS:fileloc. [file "/etc/modsecurity/mod_sec3_CRS/99_dreamhost_rules.conf"] [line "53"] [id "1990013"] [msg "Directory traversal"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQlWO1DFUTg4Ya7t2FPvewAAJ78"] [Mon Nov 03 17:33:03 2025] [mollywoppersnyb.com] [error] [client 23.23.213.182:29578] [pid 1572430] apache2_util.c(271): [client 23.23.213.182] ModSecurity: Warning. Matched phrase "sys/class" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: sys/class found within ARGS:path: /sys/class/sas_phy"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQlXz1DFUTg4Ya7t2FPyVQAAJxk"] [Mon Nov 03 17:38:59 2025] [mollywoppersnyb.com] [error] [client 44.195.145.102:51806] [pid 1572430] apache2_util.c(271): [client 44.195.145.102] ModSecurity: Access denied with code 418 (phase 2). Pattern match "^[\\\\.|/]+(proc/|dev/shm/)" at ARGS:fileloc. [file "/etc/modsecurity/mod_sec3_CRS/99_dreamhost_rules.conf"] [line "53"] [id "1990013"] [msg "Directory traversal"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQlZM1DFUTg4Ya7t2FP0sgAAJ1U"] [Mon Nov 03 17:41:43 2025] [mollywoppersnyb.com] [error] [client 52.204.71.8:16448] [pid 1572430] apache2_util.c(271): [client 52.204.71.8] ModSecurity: Warning. Matched phrase "sys/class" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: sys/class found within ARGS:path: /sys/class/scsi_device"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQlZ11DFUTg4Ya7t2FP1yAAAJ84"] [Mon Nov 03 17:53:39 2025] [mollywoppersnyb.com] [error] [client 52.73.6.26:43620] [pid 2219375] apache2_util.c(271): [client 52.73.6.26] ModSecurity: Warning. Matched phrase "etc/crontab" at ARGS:fileloc. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: etc/crontab found within ARGS:fileloc: /etc/crontab"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQlco3bdJ5lqwynFH7Y7IwAAJ9U"] [Mon Nov 03 18:06:23 2025] [mollywoppersnyb.com] [error] [client 23.20.178.124:9298] [pid 2264459] apache2_util.c(271): [client 23.20.178.124] ModSecurity: Warning. Matched phrase "sys/class" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: sys/class found within ARGS:path: /sys/class/mdio_bus"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQlfn352IVtf-LJRNzJnfAAAJ9k"] [Mon Nov 03 18:12:31 2025] [mollywoppersnyb.com] [error] [client 54.157.84.74:60824] [pid 2264459] apache2_util.c(271): [client 54.157.84.74] ModSecurity: Access denied with code 418 (phase 2). Pattern match "^[\\\\.|/]+(proc/|dev/shm/)" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/99_dreamhost_rules.conf"] [line "53"] [id "1990013"] [msg "Directory traversal"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQlhD352IVtf-LJRNzJpuQAAJ5Q"] [Mon Nov 03 18:30:15 2025] [mollywoppersnyb.com] [error] [client 100.28.118.16:40016] [pid 2264459] apache2_util.c(271): [client 100.28.118.16] ModSecurity: Warning. Matched phrase "etc/kernel" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: etc/kernel found within ARGS:path: /etc/kernel/prerm.d"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQllN352IVtf-LJRNzJ7PgAAJ88"] [Mon Nov 03 18:30:56 2025] [mollywoppersnyb.com] [error] [client 3.227.180.70:61544] [pid 2264459] apache2_util.c(271): [client 3.227.180.70] ModSecurity: Warning. Matched phrase "etc/default" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: etc/default found within ARGS:path: /etc/default/grub.d"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQllYH52IVtf-LJRNzJ7fwAAJ0s"] [Mon Nov 03 18:31:11 2025] [mollywoppersnyb.com] [error] [client 44.205.192.249:23565] [pid 2264459] apache2_util.c(271): [client 44.205.192.249] ModSecurity: Warning. Matched phrase "sys/dev" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: sys/dev found within ARGS:path: /sys/devices/ibs_fetch"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQllb352IVtf-LJRNzJ7lAAAJ1k"] [Mon Nov 03 18:32:48 2025] [mollywoppersnyb.com] [error] [client 3.221.244.28:38985] [pid 2264459] apache2_util.c(271): [client 3.221.244.28] ModSecurity: Warning. Matched phrase "sys/class" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: sys/class found within ARGS:path: /sys/class/ppp"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQll0H52IVtf-LJRNzJ8NQAAJ5g"] [Mon Nov 03 18:33:04 2025] [mollywoppersnyb.com] [error] [client 100.29.164.178:61401] [pid 2264459] apache2_util.c(271): [client 100.29.164.178] ModSecurity: Warning. Matched phrase "sys/module" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: sys/module found within ARGS:path: /sys/module/acpi_cpufreq"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQll4H52IVtf-LJRNzJ8WQAAJ7w"] [Mon Nov 03 18:33:07 2025] [mollywoppersnyb.com] [error] [client 23.23.99.55:35097] [pid 2264459] apache2_util.c(271): [client 23.23.99.55] ModSecurity: Warning. Matched phrase "sys/dev" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: sys/dev found within ARGS:path: /sys/devices/pci0000:c0"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQll4352IVtf-LJRNzJ8YQAAJ8k"] [Mon Nov 03 18:37:40 2025] [mollywoppersnyb.com] [error] [client 54.87.62.248:46108] [pid 2264459] apache2_util.c(271): [client 54.87.62.248] ModSecurity: Warning. Matched phrase "sys/bus" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: sys/bus found within ARGS:path: /sys/bus/memory_tiering"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQlm9H52IVtf-LJRNzJ-hAAAJ7I"] [Mon Nov 03 18:38:03 2025] [mollywoppersnyb.com] [error] [client 18.213.102.186:56087] [pid 2264459] apache2_util.c(271): [client 18.213.102.186] ModSecurity: Access denied with code 418 (phase 2). Pattern match "^[\\\\.|/]+(proc/|dev/shm/)" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/99_dreamhost_rules.conf"] [line "53"] [id "1990013"] [msg "Directory traversal"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQlnC352IVtf-LJRNzJ-sAAAJ-4"] [Mon Nov 03 18:40:35 2025] [mollywoppersnyb.com] [error] [client 52.54.249.218:31161] [pid 2264459] apache2_util.c(271): [client 52.54.249.218] ModSecurity: Warning. Matched phrase "sys/kernel" at ARGS:fileloc. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: sys/kernel found within ARGS:fileloc: /sys/kernel/kexec_crash_size"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQlno352IVtf-LJRNzJ_ogAAJ9o"] [Mon Nov 03 18:40:35 2025] [mollywoppersnyb.com] [error] [client 52.54.249.218:31161] [pid 2264459] apache2_util.c(271): [client 52.54.249.218] ModSecurity: Warning. Matched phrase "sys/kernel" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: sys/kernel found within ARGS:path: /sys/kernel"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQlno352IVtf-LJRNzJ_ogAAJ9o"] [Mon Nov 03 18:44:15 2025] [mollywoppersnyb.com] [error] [client 52.0.105.244:9815] [pid 2264459] apache2_util.c(271): [client 52.0.105.244] ModSecurity: Warning. Matched phrase "etc/init" at ARGS:fileloc. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: etc/init found within ARGS:fileloc: /etc/init.d/smartmontools"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQlof352IVtf-LJRNzKHrwAAJxc"] [Mon Nov 03 18:44:15 2025] [mollywoppersnyb.com] [error] [client 52.0.105.244:9815] [pid 2264459] apache2_util.c(271): [client 52.0.105.244] ModSecurity: Warning. Matched phrase "etc/init" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: etc/init found within ARGS:path: /etc/init.d"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQlof352IVtf-LJRNzKHrwAAJxc"] [Mon Nov 03 18:45:35 2025] [mollywoppersnyb.com] [error] [client 44.193.102.198:38864] [pid 2264459] apache2_util.c(271): [client 44.193.102.198] ModSecurity: Warning. Matched phrase "etc/cron.weekly" at ARGS:fileloc. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: etc/cron.weekly found within ARGS:fileloc: /etc/cron.weekly/0_delay"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQloz352IVtf-LJRNzKJtgAAJ6M"] [Mon Nov 03 18:45:35 2025] [mollywoppersnyb.com] [error] [client 44.193.102.198:38864] [pid 2264459] apache2_util.c(271): [client 44.193.102.198] ModSecurity: Warning. Matched phrase "etc/cron.weekly" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: etc/cron.weekly found within ARGS:path: /etc/cron.weekly"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQloz352IVtf-LJRNzKJtgAAJ6M"] [Mon Nov 03 18:54:27 2025] [mollywoppersnyb.com] [error] [client 3.230.69.161:10444] [pid 2264459] apache2_util.c(271): [client 3.230.69.161] ModSecurity: Warning. Matched phrase "etc/kernel" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: etc/kernel found within ARGS:path: /etc/kernel/header_postinst.d"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQlq4352IVtf-LJRNzKQxAAAJ7Q"] [Mon Nov 03 18:58:16 2025] [mollywoppersnyb.com] [error] [client 54.197.178.107:8733] [pid 2264459] apache2_util.c(271): [client 54.197.178.107] ModSecurity: Warning. Matched phrase "sys/kernel" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: sys/kernel found within ARGS:path: /sys/kernel/boot_params"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQlryH52IVtf-LJRNzKUDgAAJxA"] [Mon Nov 03 18:58:24 2025] [mollywoppersnyb.com] [error] [client 44.197.76.210:16405] [pid 2264459] apache2_util.c(271): [client 44.197.76.210] ModSecurity: Warning. Matched phrase "sys/class" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: sys/class found within ARGS:path: /sys/class/powercap"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQlr0H52IVtf-LJRNzKURQAAJ5A"] [Mon Nov 03 19:01:56 2025] [mollywoppersnyb.com] [error] [client 23.23.180.225:59266] [pid 2264459] apache2_util.c(271): [client 23.23.180.225] ModSecurity: Warning. Matched phrase "sys/bus" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: sys/bus found within ARGS:path: /sys/bus/ssb"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQlspH52IVtf-LJRNzKdwAAAJ4M"] [Mon Nov 03 19:03:30 2025] [mollywoppersnyb.com] [error] [client 107.150.56.234:51382] [pid 2264459] mod_access_compat.c(350): AH01797: client denied by server configuration: /home/mollywopper/mollywoppersnyb.com/about.php [Mon Nov 03 19:04:23 2025] [mollywoppersnyb.com] [error] [client 107.150.56.234:51443] [pid 2264459] mod_access_compat.c(350): AH01797: client denied by server configuration: /home/mollywopper/mollywoppersnyb.com/about.php [Mon Nov 03 19:04:37 2025] [mollywoppersnyb.com] [error] [client 107.150.56.234:51444] [pid 2264459] mod_access_compat.c(350): AH01797: client denied by server configuration: /home/mollywopper/mollywoppersnyb.com/about.php [Mon Nov 03 19:04:42 2025] [mollywoppersnyb.com] [error] [client 107.150.56.234:51444] [pid 2264459] mod_access_compat.c(350): AH01797: client denied by server configuration: /home/mollywopper/mollywoppersnyb.com/about.php [Mon Nov 03 19:05:08 2025] [mollywoppersnyb.com] [error] [client 34.206.212.24:21793] [pid 2264459] apache2_util.c(271): [client 34.206.212.24] ModSecurity: Warning. Matched phrase "etc/monit" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: etc/monit found within ARGS:path: /etc/monit/monitrc.d"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQltZH52IVtf-LJRNzKjEAAAJ6A"] [Mon Nov 03 19:05:43 2025] [mollywoppersnyb.com] [error] [client 52.45.77.169:48966] [pid 2264459] apache2_util.c(271): [client 52.45.77.169] ModSecurity: Access denied with code 418 (phase 2). Pattern match "^[\\\\.|/]+(proc/|dev/shm/)" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/99_dreamhost_rules.conf"] [line "53"] [id "1990013"] [msg "Directory traversal"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQlth352IVtf-LJRNzKjfQAAJ40"] [Mon Nov 03 19:06:16 2025] [mollywoppersnyb.com] [error] [client 3.227.180.70:35592] [pid 2264459] apache2_util.c(271): [client 3.227.180.70] ModSecurity: Warning. Matched phrase "etc/modsecurity" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: etc/modsecurity found within ARGS:path: /etc/modsecurity/mod_sec3_CRS"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQltqH52IVtf-LJRNzKjtQAAJ1k"] [Mon Nov 03 19:09:23 2025] [mollywoppersnyb.com] [error] [client 54.157.84.74:9150] [pid 2264459] apache2_util.c(271): [client 54.157.84.74] ModSecurity: Warning. Matched phrase "etc/apt" at ARGS:fileloc. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: etc/apt found within ARGS:fileloc: /etc/apt/sources.list"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQluY352IVtf-LJRNzKksgAAJxo"] [Mon Nov 03 19:09:23 2025] [mollywoppersnyb.com] [error] [client 54.157.84.74:9150] [pid 2264459] apache2_util.c(271): [client 54.157.84.74] ModSecurity: Warning. Matched phrase "etc/apt" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: etc/apt found within ARGS:path: /etc/apt"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQluY352IVtf-LJRNzKksgAAJxo"] [Mon Nov 03 19:10:23 2025] [mollywoppersnyb.com] [error] [client 34.205.170.13:58467] [pid 2264459] apache2_util.c(271): [client 34.205.170.13] ModSecurity: Warning. Matched phrase "sys/module" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: sys/module found within ARGS:path: /sys/module/hid_kye"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQlun352IVtf-LJRNzKlCgAAJ2Y"] [Mon Nov 03 19:19:12 2025] [mollywoppersnyb.com] [error] [client 52.203.68.145:21263] [pid 2264459] apache2_util.c(271): [client 52.203.68.145] ModSecurity: Warning. Matched phrase "sys/module" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: sys/module found within ARGS:path: /sys/module/igb"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQlwsH52IVtf-LJRNzKoXgAAJ4k"] [Mon Nov 03 19:19:15 2025] [mollywoppersnyb.com] [error] [client 34.231.156.59:53191] [pid 2264459] apache2_util.c(271): [client 34.231.156.59] ModSecurity: Warning. Matched phrase "sys/module" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: sys/module found within ARGS:path: /sys/module/ib_mthca"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQlws352IVtf-LJRNzKoYAAAJzo"] [Mon Nov 03 19:19:23 2025] [mollywoppersnyb.com] [error] [client 54.84.169.196:36678] [pid 2264459] apache2_util.c(271): [client 54.84.169.196] ModSecurity: Warning. Matched phrase "sys/module" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: sys/module found within ARGS:path: /sys/module/configfs"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQlwu352IVtf-LJRNzKobAAAJzg"] [Mon Nov 03 19:19:43 2025] [mollywoppersnyb.com] [error] [client 44.207.252.58:64586] [pid 2264459] apache2_util.c(271): [client 44.207.252.58] ModSecurity: Access denied with code 418 (phase 2). Pattern match "^[\\\\.|/]+(proc/|dev/shm/)" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/99_dreamhost_rules.conf"] [line "53"] [id "1990013"] [msg "Directory traversal"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQlwz352IVtf-LJRNzKoiQAAJ10"] [Mon Nov 03 19:19:55 2025] [mollywoppersnyb.com] [error] [client 52.203.237.170:8567] [pid 2264459] apache2_util.c(271): [client 52.203.237.170] ModSecurity: Access denied with code 418 (phase 2). Pattern match "^[\\\\.|/]+(proc/|dev/shm/)" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/99_dreamhost_rules.conf"] [line "53"] [id "1990013"] [msg "Directory traversal"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQlw2352IVtf-LJRNzKoogAAJ7g"] [Mon Nov 03 19:20:25 2025] [mollywoppersnyb.com] [error] [client 52.73.142.41:17878] [pid 2264459] apache2_util.c(271): [client 52.73.142.41] ModSecurity: Warning. Matched phrase "etc/apparmor" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: etc/apparmor found within ARGS:path: /etc/apparmor/init"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQlw-X52IVtf-LJRNzKo3gAAJzc"] [Mon Nov 03 19:30:08 2025] [mollywoppersnyb.com] [error] [client 54.92.171.106:58380] [pid 2264459] apache2_util.c(271): [client 54.92.171.106] ModSecurity: Warning. Matched phrase "sys/module" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: sys/module found within ARGS:path: /sys/module/ssb"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQlzQH52IVtf-LJRNzKsVwAAJ0g"] [Mon Nov 03 19:34:39 2025] [mollywoppersnyb.com] [error] [client 54.235.172.108:45669] [pid 2264459] apache2_util.c(271): [client 54.235.172.108] ModSecurity: Access denied with code 418 (phase 2). Pattern match "^[\\\\.|/]+(proc/|dev/shm/)" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/99_dreamhost_rules.conf"] [line "53"] [id "1990013"] [msg "Directory traversal"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQl0T352IVtf-LJRNzKuOAAAJ3U"] [Mon Nov 03 19:46:48 2025] [mollywoppersnyb.com] [error] [client 52.2.58.41:62775] [pid 2936742] apache2_util.c(271): [client 52.2.58.41] ModSecurity: Warning. Matched phrase "sys/bus" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: sys/bus found within ARGS:path: /sys/bus/i2c"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQl3KNHjrgwIbj4IO8Hi_AAAJ5o"] [Mon Nov 03 19:46:59 2025] [mollywoppersnyb.com] [error] [client 34.235.239.240:2344] [pid 2936742] apache2_util.c(271): [client 34.235.239.240] ModSecurity: Warning. Matched phrase "sys/module" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: sys/module found within ARGS:path: /sys/module/i2c_amd_mp2_pci"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQl3M9HjrgwIbj4IO8HjEwAAJ74"] [Mon Nov 03 19:47:11 2025] [mollywoppersnyb.com] [error] [client 52.6.97.88:52217] [pid 2936742] apache2_util.c(271): [client 52.6.97.88] ModSecurity: Warning. Matched phrase "sys/module" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: sys/module found within ARGS:path: /sys/module/pata_sch"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQl3P9HjrgwIbj4IO8HjIQAAJ94"] [Mon Nov 03 19:47:24 2025] [mollywoppersnyb.com] [error] [client 44.206.65.8:25927] [pid 2936742] apache2_util.c(271): [client 44.206.65.8] ModSecurity: Warning. Matched phrase "etc/logcheck" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: etc/logcheck found within ARGS:path: /etc/logcheck/ignore.d.workstation"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQl3TNHjrgwIbj4IO8HjMgAAJyk"] [Mon Nov 03 19:48:00 2025] [mollywoppersnyb.com] [error] [client 3.209.174.110:37128] [pid 2936742] apache2_util.c(271): [client 3.209.174.110] ModSecurity: Warning. Matched phrase "/tmp/" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: /tmp/ found within ARGS:path: /var/tmp/cloud-init"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQl3cNHjrgwIbj4IO8HjXQAAJ3U"] [Mon Nov 03 19:49:12 2025] [mollywoppersnyb.com] [error] [client 23.23.212.212:9340] [pid 2936742] apache2_util.c(271): [client 23.23.212.212] ModSecurity: Warning. Matched phrase "sys/bus" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: sys/bus found within ARGS:path: /sys/bus/node"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQl3uNHjrgwIbj4IO8Hj0QAAJ3k"] [Mon Nov 03 19:50:48 2025] [mollywoppersnyb.com] [error] [client 44.218.6.93:59072] [pid 2936742] apache2_util.c(271): [client 44.218.6.93] ModSecurity: Warning. Matched phrase "sys/module" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: sys/module found within ARGS:path: /sys/module/mptsas"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQl4GNHjrgwIbj4IO8HkagAAJ7Y"] [Mon Nov 03 19:51:34 2025] [mollywoppersnyb.com] [error] [client 44.196.118.6:33720] [pid 2936742] apache2_util.c(271): [client 44.196.118.6] ModSecurity: Access denied with code 418 (phase 2). Pattern match "^[\\\\.|/]+(proc/|dev/shm/)" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/99_dreamhost_rules.conf"] [line "53"] [id "1990013"] [msg "Directory traversal"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQl4RtHjrgwIbj4IO8HksAAAJ2o"] [Mon Nov 03 19:52:24 2025] [mollywoppersnyb.com] [error] [client 52.5.232.250:40704] [pid 2936742] apache2_util.c(271): [client 52.5.232.250] ModSecurity: Warning. Matched phrase "sys/bus" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: sys/bus found within ARGS:path: /sys/bus/clockevents"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQl4eNHjrgwIbj4IO8Hk8wAAJyg"] [Mon Nov 03 19:53:28 2025] [mollywoppersnyb.com] [error] [client 3.90.73.206:48181] [pid 2936742] apache2_util.c(271): [client 3.90.73.206] ModSecurity: Warning. Matched phrase "sys/module" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: sys/module found within ARGS:path: /sys/module/lockd"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQl4uNHjrgwIbj4IO8HlRAAAJ8A"] [Mon Nov 03 19:57:45 2025] [mollywoppersnyb.com] [error] [client 18.215.49.176:3910] [pid 2936742] apache2_util.c(271): [client 18.215.49.176] ModSecurity: Access denied with code 418 (phase 2). Pattern match "^[\\\\.|/]+(proc/|dev/shm/)" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/99_dreamhost_rules.conf"] [line "53"] [id "1990013"] [msg "Directory traversal"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQl5udHjrgwIbj4IO8HnvQAAJ2E"] [Mon Nov 03 19:58:52 2025] [mollywoppersnyb.com] [error] [client 23.21.179.120:17302] [pid 2936742] apache2_util.c(271): [client 23.21.179.120] ModSecurity: Access denied with code 418 (phase 2). Pattern match "^[\\\\.|/]+(proc/|dev/shm/)" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/99_dreamhost_rules.conf"] [line "53"] [id "1990013"] [msg "Directory traversal"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQl5_NHjrgwIbj4IO8HqgAAAJxI"] [Mon Nov 03 20:00:04 2025] [mollywoppersnyb.com] [error] [client 23.21.179.27:26427] [pid 2936742] apache2_util.c(271): [client 23.21.179.27] ModSecurity: Warning. Matched phrase "etc/init" at ARGS:fileloc. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: etc/init found within ARGS:fileloc: /etc/init.d/apport"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQl6RNHjrgwIbj4IO8HtXwAAJ4M"] [Mon Nov 03 20:00:04 2025] [mollywoppersnyb.com] [error] [client 23.21.179.27:26427] [pid 2936742] apache2_util.c(271): [client 23.21.179.27] ModSecurity: Warning. Matched phrase "etc/init" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: etc/init found within ARGS:path: /etc/init.d"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQl6RNHjrgwIbj4IO8HtXwAAJ4M"] [Mon Nov 03 20:01:12 2025] [mollywoppersnyb.com] [error] [client 98.83.177.42:2446] [pid 2936742] apache2_util.c(271): [client 98.83.177.42] ModSecurity: Access denied with code 418 (phase 2). Pattern match "^[\\\\.|/]+(proc/|dev/shm/)" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/99_dreamhost_rules.conf"] [line "53"] [id "1990013"] [msg "Directory traversal"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQl6iNHjrgwIbj4IO8Ht5QAAJxI"] [Mon Nov 03 20:02:00 2025] [mollywoppersnyb.com] [error] [client 52.73.6.26:7076] [pid 2936742] apache2_util.c(271): [client 52.73.6.26] ModSecurity: Warning. Matched phrase "var/log" at ARGS:fileloc. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: var/log found within ARGS:fileloc: /var/log/sshlimit.log.3.gz"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQl6uNHjrgwIbj4IO8HuKAAAJ2c"] [Mon Nov 03 20:02:00 2025] [mollywoppersnyb.com] [error] [client 52.73.6.26:7076] [pid 2936742] apache2_util.c(271): [client 52.73.6.26] ModSecurity: Warning. Matched phrase "var/log" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: var/log found within ARGS:path: /var/log"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQl6uNHjrgwIbj4IO8HuKAAAJ2c"] [Mon Nov 03 20:04:39 2025] [mollywoppersnyb.com] [error] [client 18.205.91.101:48140] [pid 2936742] apache2_util.c(271): [client 18.205.91.101] ModSecurity: Access denied with code 418 (phase 2). Pattern match "^[\\\\.|/]+(proc/|dev/shm/)" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/99_dreamhost_rules.conf"] [line "53"] [id "1990013"] [msg "Directory traversal"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQl7V9HjrgwIbj4IO8Hu8gAAJ4U"] [Mon Nov 03 20:06:19 2025] [mollywoppersnyb.com] [error] [client 18.208.11.93:58609] [pid 2936742] apache2_util.c(271): [client 18.208.11.93] ModSecurity: Warning. Matched phrase "etc/logrotate.d" at ARGS:fileloc. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: etc/logrotate.d found within ARGS:fileloc: /etc/logrotate.d/cgroups"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQl7u9HjrgwIbj4IO8HvcQAAJ8Y"] [Mon Nov 03 20:06:19 2025] [mollywoppersnyb.com] [error] [client 18.208.11.93:58609] [pid 2936742] apache2_util.c(271): [client 18.208.11.93] ModSecurity: Warning. Matched phrase "etc/logrotate.d" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: etc/logrotate.d found within ARGS:path: /etc/logrotate.d"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQl7u9HjrgwIbj4IO8HvcQAAJ8Y"] [Mon Nov 03 20:16:36 2025] [mollywoppersnyb.com] [error] [client 18.204.152.114:33849] [pid 2936742] apache2_util.c(271): [client 18.204.152.114] ModSecurity: Warning. Matched phrase "etc/systemd" at ARGS:fileloc. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: etc/systemd found within ARGS:fileloc: /etc/systemd/system.conf.dpkg-dist"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQl-JNHjrgwIbj4IO8H3sgAAJ-g"] [Mon Nov 03 20:16:36 2025] [mollywoppersnyb.com] [error] [client 18.204.152.114:33849] [pid 2936742] apache2_util.c(271): [client 18.204.152.114] ModSecurity: Warning. Matched phrase "etc/systemd" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: etc/systemd found within ARGS:path: /etc/systemd"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQl-JNHjrgwIbj4IO8H3sgAAJ-g"] [Mon Nov 03 20:18:39 2025] [mollywoppersnyb.com] [error] [client 52.45.194.165:2371] [pid 2936742] apache2_util.c(271): [client 52.45.194.165] ModSecurity: Warning. Matched phrase "etc/network" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: etc/network found within ARGS:path: /etc/networkd-dispatcher/routable.d"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQl-n9HjrgwIbj4IO8H49gAAJ5c"] [Mon Nov 03 20:18:56 2025] [mollywoppersnyb.com] [error] [client 3.90.73.206:3637] [pid 2936742] apache2_util.c(271): [client 3.90.73.206] ModSecurity: Warning. Matched phrase "sys/module" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: sys/module found within ARGS:path: /sys/module/edac_core"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQl-sNHjrgwIbj4IO8H5EQAAJ78"] [Mon Nov 03 20:19:28 2025] [mollywoppersnyb.com] [error] [client 44.205.74.196:3855] [pid 2936742] apache2_util.c(271): [client 44.205.74.196] ModSecurity: Warning. Matched phrase "sys/module" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: sys/module found within ARGS:path: /sys/module/microcode"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQl-0NHjrgwIbj4IO8H5ZgAAJ2Y"] [Mon Nov 03 20:19:56 2025] [mollywoppersnyb.com] [error] [client 23.21.179.27:47108] [pid 2936742] apache2_util.c(271): [client 23.21.179.27] ModSecurity: Warning. Matched phrase "etc/x11" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: etc/x11 found within ARGS:path: /etc/X11/xorg.conf.d"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQl-7NHjrgwIbj4IO8H5lQAAJ90"] [Mon Nov 03 20:20:35 2025] [mollywoppersnyb.com] [error] [client 44.215.210.112:25074] [pid 2936742] apache2_util.c(271): [client 44.215.210.112] ModSecurity: Warning. Matched phrase "sys/class" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: sys/class found within ARGS:path: /sys/class/devfreq-event"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQl_E9HjrgwIbj4IO8H6PAAAJ4Y"] [Mon Nov 03 20:20:55 2025] [mollywoppersnyb.com] [error] [client 52.4.229.9:10163] [pid 2936742] apache2_util.c(271): [client 52.4.229.9] ModSecurity: Warning. Matched phrase "sys/module" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: sys/module found within ARGS:path: /sys/module/thermal"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQl_J9HjrgwIbj4IO8H7nwAAJ14"] [Mon Nov 03 20:21:08 2025] [mollywoppersnyb.com] [error] [client 35.173.38.202:55469] [pid 2936742] apache2_util.c(271): [client 35.173.38.202] ModSecurity: Warning. Matched phrase "sys/module" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: sys/module found within ARGS:path: /sys/module/iscsi_ibft"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQl_NNHjrgwIbj4IO8H9YgAAJ2w"] [Mon Nov 03 20:23:32 2025] [mollywoppersnyb.com] [error] [client 35.171.117.160:4750] [pid 2936742] apache2_util.c(271): [client 35.171.117.160] ModSecurity: Warning. Matched phrase "etc/mail" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: etc/mail found within ARGS:path: /etc/mail/domains"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQl_xNHjrgwIbj4IO8H_swAAJ0M"] [Mon Nov 03 20:24:50 2025] [mollywoppersnyb.com] [error] [client 18.213.27.222:16080] [pid 2936742] apache2_util.c(271): [client 18.213.27.222] ModSecurity: Warning. Matched phrase "var/log" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: var/log found within ARGS:path: /var/log/sysstat"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQmAEtHjrgwIbj4IO8EAjAAAJ2U"] [Mon Nov 03 20:27:39 2025] [mollywoppersnyb.com] [error] [client 54.84.147.79:5785] [pid 2936742] apache2_util.c(271): [client 54.84.147.79] ModSecurity: Warning. Matched phrase "sys/module" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: sys/module found within ARGS:path: /sys/module/edd"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQmAu9HjrgwIbj4IO8EC6QAAJx8"] [Mon Nov 03 20:27:53 2025] [mollywoppersnyb.com] [error] [client 18.213.70.100:27486] [pid 2936742] apache2_util.c(271): [client 18.213.70.100] ModSecurity: Warning. Matched phrase "sys/module" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: sys/module found within ARGS:path: /sys/module/hid_kensington"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQmAydHjrgwIbj4IO8EDOAAAJ6A"] [Mon Nov 03 20:34:19 2025] [mollywoppersnyb.com] [error] [client 44.212.106.171:59436] [pid 2936742] apache2_util.c(271): [client 44.212.106.171] ModSecurity: Warning. Matched phrase "etc/texmf" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: etc/texmf found within ARGS:path: /etc/texmf/dvipdfmx"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQmCS9HjrgwIbj4IO8EIkAAAJ1g"] [Mon Nov 03 20:45:44 2025] [mollywoppersnyb.com] [error] [client 34.227.234.246:31337] [pid 2936742] apache2_util.c(271): [client 34.227.234.246] ModSecurity: Warning. Matched phrase "sys/kernel" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: sys/kernel found within ARGS:path: /sys/kernel/iommu_groups"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQmE-NHjrgwIbj4IO8ETQQAAJ2g"] [Mon Nov 03 20:45:53 2025] [mollywoppersnyb.com] [error] [client 50.17.193.48:53886] [pid 2936742] apache2_util.c(271): [client 50.17.193.48] ModSecurity: Warning. Matched phrase "etc/texmf" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: etc/texmf found within ARGS:path: /etc/texmf/tex"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQmFAdHjrgwIbj4IO8ETdQAAJ-E"] [Mon Nov 03 20:46:47 2025] [mollywoppersnyb.com] [error] [client 3.222.85.38:40632] [pid 2936742] apache2_util.c(271): [client 3.222.85.38] ModSecurity: Warning. Matched phrase "sys/module" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: sys/module found within ARGS:path: /sys/module/mlx5_ib"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQmFN9HjrgwIbj4IO8EU3wAAJ9c"] [Mon Nov 03 20:47:57 2025] [mollywoppersnyb.com] [error] [client 44.208.193.63:49853] [pid 2936742] apache2_util.c(271): [client 44.208.193.63] ModSecurity: Warning. Matched phrase "sys/module" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: sys/module found within ARGS:path: /sys/module/raid0"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQmFfdHjrgwIbj4IO8EWRgAAJ0w"] [Mon Nov 03 20:50:29 2025] [mollywoppersnyb.com] [error] [client 98.83.226.125:39577] [pid 2936742] apache2_util.c(271): [client 98.83.226.125] ModSecurity: Warning. Matched phrase "sys/bus" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: sys/bus found within ARGS:path: /sys/bus/serio"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQmGFdHjrgwIbj4IO8EXzAAAJ04"] [Mon Nov 03 20:50:42 2025] [mollywoppersnyb.com] [error] [client 54.83.240.58:59912] [pid 2936742] apache2_util.c(271): [client 54.83.240.58] ModSecurity: Warning. Matched phrase "sys/module" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: sys/module found within ARGS:path: /sys/module/secretmem"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQmGItHjrgwIbj4IO8EX7QAAJ5Y"] [Mon Nov 03 20:53:21 2025] [mollywoppersnyb.com] [error] [client 18.214.251.19:65034] [pid 2936742] apache2_util.c(271): [client 18.214.251.19] ModSecurity: Warning. Matched phrase "etc/cron.d" at ARGS:fileloc. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: etc/cron.d found within ARGS:fileloc: /etc/cron.daily/.placeholder"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQmGwdHjrgwIbj4IO8EZ6AAAJ-c"] [Mon Nov 03 20:53:21 2025] [mollywoppersnyb.com] [error] [client 18.214.251.19:65034] [pid 2936742] apache2_util.c(271): [client 18.214.251.19] ModSecurity: Warning. Matched phrase "etc/cron.d" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: etc/cron.d found within ARGS:path: /etc/cron.daily"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQmGwdHjrgwIbj4IO8EZ6AAAJ-c"] [Mon Nov 03 20:54:37 2025] [mollywoppersnyb.com] [error] [client 18.209.201.119:28587] [pid 2936742] apache2_util.c(271): [client 18.209.201.119] ModSecurity: Warning. Matched phrase "sys/bus" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: sys/bus found within ARGS:path: /sys/bus/mdio_bus"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQmHDdHjrgwIbj4IO8EaaQAAJ1E"] [Mon Nov 03 20:55:03 2025] [mollywoppersnyb.com] [error] [client 18.215.24.66:47968] [pid 2936742] apache2_util.c(271): [client 18.215.24.66] ModSecurity: Warning. Matched phrase "etc/ssl" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: etc/ssl found within ARGS:path: /etc/ssl/private"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQmHJ9HjrgwIbj4IO8Ea8wAAJ0I"] [Mon Nov 03 20:55:37 2025] [mollywoppersnyb.com] [error] [client 52.45.77.169:38676] [pid 2936742] apache2_util.c(271): [client 52.45.77.169] ModSecurity: Warning. Matched phrase "sys/module" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: sys/module found within ARGS:path: /sys/module/nvme"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQmHSdHjrgwIbj4IO8EbvAAAJ2g"] [Mon Nov 03 20:56:48 2025] [mollywoppersnyb.com] [error] [client 34.206.249.188:8778] [pid 2936742] apache2_util.c(271): [client 34.206.249.188] ModSecurity: Warning. Matched phrase "sys/module" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: sys/module found within ARGS:path: /sys/module/cryptomgr"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQmHkNHjrgwIbj4IO8Ec7AAAJyw"] [Mon Nov 03 20:57:42 2025] [mollywoppersnyb.com] [error] [client 52.70.209.13:32305] [pid 2936742] apache2_util.c(271): [client 52.70.209.13] ModSecurity: Warning. Matched phrase "sys/module" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: sys/module found within ARGS:path: /sys/module/aic94xx"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQmHxtHjrgwIbj4IO8Ed3QAAJ4k"] [Mon Nov 03 21:03:20 2025] [mollywoppersnyb.com] [error] [client 34.196.237.236:49359] [pid 2936742] apache2_util.c(271): [client 34.196.237.236] ModSecurity: Warning. Matched phrase "etc/cron.d" at ARGS:fileloc. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: etc/cron.d found within ARGS:fileloc: /etc/cron.daily/apport"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQmJGNHjrgwIbj4IO8ElpQAAJ48"] [Mon Nov 03 21:03:20 2025] [mollywoppersnyb.com] [error] [client 34.196.237.236:49359] [pid 2936742] apache2_util.c(271): [client 34.196.237.236] ModSecurity: Warning. Matched phrase "etc/cron.d" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: etc/cron.d found within ARGS:path: /etc/cron.daily"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQmJGNHjrgwIbj4IO8ElpQAAJ48"] [Mon Nov 03 21:14:57 2025] [mollywoppersnyb.com] [error] [client 54.80.185.200:14901] [pid 2936742] apache2_util.c(271): [client 54.80.185.200] ModSecurity: Warning. Matched phrase "etc/ufw" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: etc/ufw found within ARGS:path: /etc/ufw/applications.d"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQmL0dHjrgwIbj4IO8EvEAAAJ6A"] [Mon Nov 03 21:15:47 2025] [mollywoppersnyb.com] [error] [client 43.165.65.180:53874] [pid 2936742] apache2_util.c(271): [client 43.165.65.180] ModSecurity: Warning. Pattern match "\\\\b(?:keep-alive|close),\\\\s?(?:keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "352"] [id "920210"] [msg "Multiple/Conflicting Connection Header Data Found"] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [hostname "www.mollywoppersnyb.com"] [uri "/"] [unique_id "aQmMA9HjrgwIbj4IO8EvPQAAJ-8"] [Mon Nov 03 21:15:48 2025] [mollywoppersnyb.com] [error] [client 43.165.65.180:54144] [pid 2936742] apache2_util.c(271): [client 43.165.65.180] ModSecurity: Warning. Pattern match "\\\\b(?:keep-alive|close),\\\\s?(?:keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "352"] [id "920210"] [msg "Multiple/Conflicting Connection Header Data Found"] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [hostname "mollywoppersnyb.com"] [uri "/"] [unique_id "aQmMBNHjrgwIbj4IO8EvPwAAJ7k"] [Mon Nov 03 21:16:58 2025] [mollywoppersnyb.com] [error] [client 34.155.17.112:52655] [pid 2936742] apache2_util.c(271): [client 34.155.17.112] ModSecurity: Warning. Matched phrase ".env" at REQUEST_FILENAME. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "143"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: .env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/.env"] [unique_id "aQmMStHjrgwIbj4IO8EvhAAAJ5U"] [Mon Nov 03 21:17:05 2025] [mollywoppersnyb.com] [error] [client 52.21.62.139:54688] [pid 2936742] apache2_util.c(271): [client 52.21.62.139] ModSecurity: Warning. Matched phrase "sys/module" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: sys/module found within ARGS:path: /sys/module/intel_pch_thermal"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQmMUdHjrgwIbj4IO8EvkAAAJyM"] [Mon Nov 03 21:18:54 2025] [mollywoppersnyb.com] [error] [client 54.157.99.244:51080] [pid 2936742] apache2_util.c(271): [client 54.157.99.244] ModSecurity: Warning. Matched phrase "sys/module" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: sys/module found within ARGS:path: /sys/module/rng_core"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQmMvtHjrgwIbj4IO8EwDAAAJxw"] [Mon Nov 03 21:19:06 2025] [mollywoppersnyb.com] [error] [client 184.73.195.18:65035] [pid 2936742] apache2_util.c(271): [client 184.73.195.18] ModSecurity: Warning. Matched phrase "sys/module" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: sys/module found within ARGS:path: /sys/module/vsock"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQmMytHjrgwIbj4IO8EwEwAAJzs"] [Mon Nov 03 21:19:44 2025] [mollywoppersnyb.com] [error] [client 100.28.44.58:36740] [pid 2936742] apache2_util.c(271): [client 100.28.44.58] ModSecurity: Warning. Matched phrase "sys/dev" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: sys/dev found within ARGS:path: /sys/dev/char"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQmM8NHjrgwIbj4IO8EwNwAAJ8E"] [Mon Nov 03 21:26:21 2025] [mollywoppersnyb.com] [error] [client 54.166.126.132:59966] [pid 2936742] apache2_util.c(271): [client 54.166.126.132] ModSecurity: Warning. Matched phrase "etc/security" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: etc/security found within ARGS:path: /etc/security/namespace.d"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQmOfdHjrgwIbj4IO8EyAgAAJ88"] [Mon Nov 03 21:26:36 2025] [mollywoppersnyb.com] [error] [client 23.23.214.190:54870] [pid 2936742] apache2_util.c(271): [client 23.23.214.190] ModSecurity: Warning. Matched phrase "sys/module" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: sys/module found within ARGS:path: /sys/module/nfsv4"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQmOjNHjrgwIbj4IO8EycwAAJ1o"] [Mon Nov 03 21:27:03 2025] [mollywoppersnyb.com] [error] [client 52.70.138.176:31044] [pid 2936742] apache2_util.c(271): [client 52.70.138.176] ModSecurity: Warning. Matched phrase "sys/module" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: sys/module found within ARGS:path: /sys/module/tcp_cdg"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQmOp9HjrgwIbj4IO8EylAAAJ7U"] [Mon Nov 03 21:30:51 2025] [mollywoppersnyb.com] [error] [client 34.205.170.13:10548] [pid 2936742] apache2_util.c(271): [client 34.205.170.13] ModSecurity: Warning. Matched phrase "etc/logrotate.d" at ARGS:fileloc. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: etc/logrotate.d found within ARGS:fileloc: /etc/logrotate.d/zabbix-agent"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQmPi9HjrgwIbj4IO8E0ZQAAJ0k"] [Mon Nov 03 21:30:51 2025] [mollywoppersnyb.com] [error] [client 34.205.170.13:10548] [pid 2936742] apache2_util.c(271): [client 34.205.170.13] ModSecurity: Warning. Matched phrase "etc/logrotate.d" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: etc/logrotate.d found within ARGS:path: /etc/logrotate.d"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQmPi9HjrgwIbj4IO8E0ZQAAJ0k"] [Mon Nov 03 21:31:51 2025] [mollywoppersnyb.com] [error] [client 34.203.111.15:15152] [pid 2936742] apache2_util.c(271): [client 34.203.111.15] ModSecurity: Warning. Matched phrase "var/log" at ARGS:fileloc. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: var/log found within ARGS:fileloc: /var/log/auth.log"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQmPx9HjrgwIbj4IO8E17QAAJ2I"] [Mon Nov 03 21:31:51 2025] [mollywoppersnyb.com] [error] [client 34.203.111.15:15152] [pid 2936742] apache2_util.c(271): [client 34.203.111.15] ModSecurity: Warning. Matched phrase "var/log" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: var/log found within ARGS:path: /var/log"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQmPx9HjrgwIbj4IO8E17QAAJ2I"] [Mon Nov 03 21:34:39 2025] [mollywoppersnyb.com] [error] [client 18.232.11.247:17465] [pid 2936742] apache2_util.c(271): [client 18.232.11.247] ModSecurity: Warning. Matched phrase "sys/kernel" at ARGS:fileloc. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: sys/kernel found within ARGS:fileloc: /sys/kernel/rcu_expedited"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQmQb9HjrgwIbj4IO8E5xAAAJzs"] [Mon Nov 03 21:34:39 2025] [mollywoppersnyb.com] [error] [client 18.232.11.247:17465] [pid 2936742] apache2_util.c(271): [client 18.232.11.247] ModSecurity: Warning. Matched phrase "sys/kernel" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: sys/kernel found within ARGS:path: /sys/kernel"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQmQb9HjrgwIbj4IO8E5xAAAJzs"] [Mon Nov 03 21:38:11 2025] [mollywoppersnyb.com] [error] [client 98.82.107.102:58697] [pid 2936742] apache2_util.c(271): [client 98.82.107.102] ModSecurity: Warning. Matched phrase "etc/init" at ARGS:fileloc. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: etc/init found within ARGS:fileloc: /etc/init.d/rsync"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQmRQ9HjrgwIbj4IO8E64QAAJ3c"] [Mon Nov 03 21:38:11 2025] [mollywoppersnyb.com] [error] [client 98.82.107.102:58697] [pid 2936742] apache2_util.c(271): [client 98.82.107.102] ModSecurity: Warning. Matched phrase "etc/init" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: etc/init found within ARGS:path: /etc/init.d"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQmRQ9HjrgwIbj4IO8E64QAAJ3c"] [Mon Nov 03 21:39:15 2025] [mollywoppersnyb.com] [error] [client 54.145.82.217:16644] [pid 2936742] apache2_util.c(271): [client 54.145.82.217] ModSecurity: Warning. Matched phrase "etc/mysql" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: etc/mysql found within ARGS:path: /etc/mysql/conf.d"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQmRg9HjrgwIbj4IO8E7KAAAJ9g"] [Mon Nov 03 21:39:28 2025] [mollywoppersnyb.com] [error] [client 49.51.178.45:34598] [pid 2936742] apache2_util.c(271): [client 49.51.178.45] ModSecurity: Warning. Pattern match "\\\\b(?:keep-alive|close),\\\\s?(?:keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "352"] [id "920210"] [msg "Multiple/Conflicting Connection Header Data Found"] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [hostname "mollywoppersnyb.com"] [uri "/"] [unique_id "aQmRkNHjrgwIbj4IO8E7NgAAJ1k"] [Mon Nov 03 21:44:36 2025] [mollywoppersnyb.com] [error] [client 52.3.102.51:25088] [pid 2936742] apache2_util.c(271): [client 52.3.102.51] ModSecurity: Warning. Matched phrase "sys/module" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: sys/module found within ARGS:path: /sys/module/sg"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQmSxNHjrgwIbj4IO8E-SwAAJxc"] [Mon Nov 03 21:44:43 2025] [mollywoppersnyb.com] [error] [client 18.206.47.187:49779] [pid 2936742] apache2_util.c(271): [client 18.206.47.187] ModSecurity: Warning. Matched phrase "sys/module" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: sys/module found within ARGS:path: /sys/module/aoe"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQmSy9HjrgwIbj4IO8E-rwAAJ3Y"] [Mon Nov 03 21:46:52 2025] [mollywoppersnyb.com] [error] [client 3.229.164.203:45830] [pid 2936742] apache2_util.c(271): [client 3.229.164.203] ModSecurity: Warning. Matched phrase "var/log" at ARGS:fileloc. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: var/log found within ARGS:fileloc: /var/log/ftp.log"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQmTTNHjrgwIbj4IO8FFLAAAJys"] [Mon Nov 03 21:46:52 2025] [mollywoppersnyb.com] [error] [client 3.229.164.203:45830] [pid 2936742] apache2_util.c(271): [client 3.229.164.203] ModSecurity: Warning. Matched phrase "var/log" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: var/log found within ARGS:path: /var/log"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQmTTNHjrgwIbj4IO8FFLAAAJys"] [Mon Nov 03 21:48:08 2025] [mollywoppersnyb.com] [error] [client 100.24.149.244:46078] [pid 2936742] apache2_util.c(271): [client 100.24.149.244] ModSecurity: Warning. Matched phrase "sys/fs" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: sys/fs found within ARGS:path: /sys/fs/resctrl"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQmTmNHjrgwIbj4IO8FGzwAAJ0E"] [Mon Nov 03 21:48:20 2025] [mollywoppersnyb.com] [error] [client 43.155.140.157:55230] [pid 2936742] apache2_util.c(271): [client 43.155.140.157] ModSecurity: Access denied with code 418 (phase 1). Pattern match "wp-config.php" at ARGS_GET:fileloc. [file "/etc/modsecurity/mod_sec3_CRS/99_dreamhost_rules.conf"] [line "93"] [id "1990071"] [msg "wp-config.php Local File Inclusion Attempt"] [hostname "mollywoppersnyb.com"] [uri "/"] [unique_id "aQmTpNHjrgwIbj4IO8FG3gAAJ4k"] [Mon Nov 03 21:52:57 2025] [mollywoppersnyb.com] [error] [client 44.218.170.184:54046] [pid 607305] apache2_util.c(271): [client 44.218.170.184] ModSecurity: Warning. Matched phrase "sys/dev" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: sys/dev found within ARGS:path: /sys/devices/amd_l3"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQmUuZhg3SKmBpbKMjs-xwAAADU"] [Mon Nov 03 21:53:52 2025] [mollywoppersnyb.com] [error] [client 18.205.91.101:4387] [pid 607305] apache2_util.c(271): [client 18.205.91.101] ModSecurity: Warning. Matched phrase "sys/module" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: sys/module found within ARGS:path: /sys/module/mptctl"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQmU8Jhg3SKmBpbKMjs_MAAAAEs"] [Mon Nov 03 21:55:46 2025] [mollywoppersnyb.com] [error] [client 23.21.148.226:30235] [pid 607305] apache2_util.c(271): [client 23.21.148.226] ModSecurity: Warning. Matched phrase "sys/kernel" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: sys/kernel found within ARGS:path: /sys/kernel/pcrypt"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQmVYphg3SKmBpbKMjs_1wAAALY"] [Mon Nov 03 21:55:49 2025] [mollywoppersnyb.com] [error] [client 98.84.60.17:46791] [pid 607305] apache2_util.c(271): [client 98.84.60.17] ModSecurity: Warning. Matched phrase "sys/module" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: sys/module found within ARGS:path: /sys/module/ata_generic"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQmVZZhg3SKmBpbKMjs_3QAAAMQ"] [Mon Nov 03 21:56:57 2025] [mollywoppersnyb.com] [error] [client 54.88.84.219:57208] [pid 607305] apache2_util.c(271): [client 54.88.84.219] ModSecurity: Warning. Matched phrase "sys/module" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: sys/module found within ARGS:path: /sys/module/tcp_illinois"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQmVqZhg3SKmBpbKMjtASwAAAMc"] [Mon Nov 03 21:58:00 2025] [mollywoppersnyb.com] [error] [client 100.28.118.16:21411] [pid 607305] apache2_util.c(271): [client 100.28.118.16] ModSecurity: Warning. Matched phrase "sys/module" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: sys/module found within ARGS:path: /sys/module/mlx4_ib"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQmV6Jhg3SKmBpbKMjtAkgAAAGY"] [Mon Nov 03 21:58:20 2025] [mollywoppersnyb.com] [error] [client 52.45.92.83:5105] [pid 607305] apache2_util.c(271): [client 52.45.92.83] ModSecurity: Warning. Matched phrase "sys/module" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: sys/module found within ARGS:path: /sys/module/hid_ite"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQmV_Jhg3SKmBpbKMjtAnwAAAKU"] [Mon Nov 03 21:58:28 2025] [mollywoppersnyb.com] [error] [client 54.235.191.179:54179] [pid 607305] apache2_util.c(271): [client 54.235.191.179] ModSecurity: Warning. Matched phrase "var/log" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: var/log found within ARGS:path: /var/log/ntpstats"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQmWBJhg3SKmBpbKMjtAqQAAAIE"] [Mon Nov 03 22:01:36 2025] [mollywoppersnyb.com] [error] [client 34.196.6.199:1836] [pid 607305] apache2_util.c(271): [client 34.196.6.199] ModSecurity: Access denied with code 418 (phase 2). Pattern match "^[\\\\.|/]+(proc/|dev/shm/)" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/99_dreamhost_rules.conf"] [line "53"] [id "1990013"] [msg "Directory traversal"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQmWwJhg3SKmBpbKMjtBgwAAAMI"] [Mon Nov 03 22:01:59 2025] [mollywoppersnyb.com] [error] [client 43.130.3.120:54970] [pid 607305] apache2_util.c(271): [client 43.130.3.120] ModSecurity: Warning. Pattern match "\\\\b(?:keep-alive|close),\\\\s?(?:keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "352"] [id "920210"] [msg "Multiple/Conflicting Connection Header Data Found"] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [hostname "mollywoppersnyb.com"] [uri "/"] [unique_id "aQmW15hg3SKmBpbKMjtBowAAAB8"] [Mon Nov 03 22:02:59 2025] [mollywoppersnyb.com] [error] [client 34.225.138.57:17228] [pid 607305] apache2_util.c(271): [client 34.225.138.57] ModSecurity: Warning. Matched phrase "var/log" at ARGS:fileloc. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: var/log found within ARGS:fileloc: /var/log/auth.log.1"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQmXE5hg3SKmBpbKMjtB8AAAALQ"] [Mon Nov 03 22:02:59 2025] [mollywoppersnyb.com] [error] [client 34.225.138.57:17228] [pid 607305] apache2_util.c(271): [client 34.225.138.57] ModSecurity: Warning. Matched phrase "var/log" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: var/log found within ARGS:path: /var/log"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQmXE5hg3SKmBpbKMjtB8AAAALQ"] [Mon Nov 03 22:04:47 2025] [mollywoppersnyb.com] [error] [client 34.234.200.207:16270] [pid 607305] apache2_util.c(271): [client 34.234.200.207] ModSecurity: Warning. Matched phrase "etc/cron.d" at ARGS:fileloc. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: etc/cron.d found within ARGS:fileloc: /etc/cron.daily/logrotate"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQmXf5hg3SKmBpbKMjtCkAAAAC0"] [Mon Nov 03 22:04:47 2025] [mollywoppersnyb.com] [error] [client 34.234.200.207:16270] [pid 607305] apache2_util.c(271): [client 34.234.200.207] ModSecurity: Warning. Matched phrase "etc/cron.d" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: etc/cron.d found within ARGS:path: /etc/cron.daily"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQmXf5hg3SKmBpbKMjtCkAAAAC0"] [Mon Nov 03 22:05:39 2025] [mollywoppersnyb.com] [error] [client 54.225.81.20:57212] [pid 607305] apache2_util.c(271): [client 54.225.81.20] ModSecurity: Warning. Matched phrase "sys/module" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: sys/module found within ARGS:path: /sys/module/dm_mirror"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQmXs5hg3SKmBpbKMjtDJgAAACU"] [Mon Nov 03 22:07:51 2025] [mollywoppersnyb.com] [error] [client 3.211.105.134:37055] [pid 607305] apache2_util.c(271): [client 3.211.105.134] ModSecurity: Warning. Matched phrase "sys/module" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: sys/module found within ARGS:path: /sys/module/i2c_amd756"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQmYN5hg3SKmBpbKMjtG9gAAAFs"] [Mon Nov 03 22:08:20 2025] [mollywoppersnyb.com] [error] [client 54.92.171.106:21944] [pid 607305] apache2_util.c(271): [client 54.92.171.106] ModSecurity: Warning. Matched phrase "sys/dev" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: sys/dev found within ARGS:path: /sys/devices/pci0000:40"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQmYVJhg3SKmBpbKMjtHzQAAAF0"] [Mon Nov 03 22:09:43 2025] [mollywoppersnyb.com] [error] [client 34.236.185.101:23498] [pid 607305] apache2_util.c(271): [client 34.236.185.101] ModSecurity: Warning. Matched phrase "sys/module" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: sys/module found within ARGS:path: /sys/module/hid_cherry"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQmYp5hg3SKmBpbKMjtI3AAAAC8"] [Mon Nov 03 22:10:50 2025] [mollywoppersnyb.com] [error] [client 43.130.78.203:56186] [pid 607305] apache2_util.c(271): [client 43.130.78.203] ModSecurity: Warning. Pattern match "\\\\b(?:keep-alive|close),\\\\s?(?:keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "352"] [id "920210"] [msg "Multiple/Conflicting Connection Header Data Found"] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [hostname "mollywoppersnyb.com"] [uri "/"] [unique_id "aQmY6phg3SKmBpbKMjtJOgAAABc"] [Mon Nov 03 22:16:08 2025] [mollywoppersnyb.com] [error] [client 54.85.109.140:11068] [pid 607305] apache2_util.c(271): [client 54.85.109.140] ModSecurity: Warning. Matched phrase "sys/fs" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: sys/fs found within ARGS:path: /sys/fs/cgroup"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQmaKJhg3SKmBpbKMjtLFgAAAFA"] [Mon Nov 03 22:17:07 2025] [mollywoppersnyb.com] [error] [client 100.29.164.178:6147] [pid 607305] apache2_util.c(271): [client 100.29.164.178] ModSecurity: Warning. Matched phrase "var/log" at ARGS:fileloc. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: var/log found within ARGS:fileloc: /var/log/lastlog"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQmaY5hg3SKmBpbKMjtLeQAAAC4"] [Mon Nov 03 22:17:07 2025] [mollywoppersnyb.com] [error] [client 100.29.164.178:6147] [pid 607305] apache2_util.c(271): [client 100.29.164.178] ModSecurity: Warning. Matched phrase "var/log" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: var/log found within ARGS:path: /var/log"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQmaY5hg3SKmBpbKMjtLeQAAAC4"] [Mon Nov 03 22:17:15 2025] [mollywoppersnyb.com] [error] [client 54.163.169.168:64885] [pid 607305] apache2_util.c(271): [client 54.163.169.168] ModSecurity: Warning. Matched phrase "etc/default" at ARGS:fileloc. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: etc/default found within ARGS:fileloc: /etc/default/apport"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQmaa5hg3SKmBpbKMjtLgAAAACY"] [Mon Nov 03 22:17:15 2025] [mollywoppersnyb.com] [error] [client 54.163.169.168:64885] [pid 607305] apache2_util.c(271): [client 54.163.169.168] ModSecurity: Warning. Matched phrase "etc/default" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: etc/default found within ARGS:path: /etc/default"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQmaa5hg3SKmBpbKMjtLgAAAACY"] [Mon Nov 03 22:18:40 2025] [mollywoppersnyb.com] [error] [client 18.211.148.239:8974] [pid 607305] apache2_util.c(271): [client 18.211.148.239] ModSecurity: Warning. Matched phrase "etc/default" at ARGS:fileloc. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: etc/default found within ARGS:fileloc: /etc/default/mdadm"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQmawJhg3SKmBpbKMjtL6gAAACc"] [Mon Nov 03 22:18:40 2025] [mollywoppersnyb.com] [error] [client 18.211.148.239:8974] [pid 607305] apache2_util.c(271): [client 18.211.148.239] ModSecurity: Warning. Matched phrase "etc/default" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: etc/default found within ARGS:path: /etc/default"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQmawJhg3SKmBpbKMjtL6gAAACc"] [Mon Nov 03 22:20:41 2025] [mollywoppersnyb.com] [error] [client 107.20.181.148:51761] [pid 607305] apache2_util.c(271): [client 107.20.181.148] ModSecurity: Warning. Matched phrase "sys/module" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: sys/module found within ARGS:path: /sys/module/debug_core"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQmbOZhg3SKmBpbKMjtMzwAAAAM"] [Mon Nov 03 22:20:48 2025] [mollywoppersnyb.com] [error] [client 98.84.200.43:21497] [pid 607305] apache2_util.c(271): [client 98.84.200.43] ModSecurity: Warning. Matched phrase "sys/bus" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: sys/bus found within ARGS:path: /sys/bus/nvmem"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQmbQJhg3SKmBpbKMjtM3gAAANs"] [Mon Nov 03 22:22:09 2025] [mollywoppersnyb.com] [error] [client 43.166.134.114:54752] [pid 607305] apache2_util.c(271): [client 43.166.134.114] ModSecurity: Warning. Pattern match "\\\\b(?:keep-alive|close),\\\\s?(?:keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "352"] [id "920210"] [msg "Multiple/Conflicting Connection Header Data Found"] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [hostname "mollywoppersnyb.com"] [uri "/"] [unique_id "aQmbkZhg3SKmBpbKMjtODQAAANc"] [Mon Nov 03 22:22:40 2025] [mollywoppersnyb.com] [error] [client 54.90.8.255:6527] [pid 607305] apache2_util.c(271): [client 54.90.8.255] ModSecurity: Warning. Matched phrase "etc/ppp" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: etc/ppp found within ARGS:path: /etc/ppp/ip-up.d"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQmbsJhg3SKmBpbKMjtOzAAAAC4"] [Mon Nov 03 22:23:08 2025] [mollywoppersnyb.com] [error] [client 52.3.102.51:3196] [pid 607305] apache2_util.c(271): [client 52.3.102.51] ModSecurity: Warning. Matched phrase "sys/dev" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: sys/dev found within ARGS:path: /sys/devices/virtual"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQmbzJhg3SKmBpbKMjtPfwAAABg"] [Mon Nov 03 22:24:18 2025] [mollywoppersnyb.com] [error] [client 34.225.138.57:52979] [pid 607305] apache2_util.c(271): [client 34.225.138.57] ModSecurity: Warning. Matched phrase "sys/class" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: sys/class found within ARGS:path: /sys/class/ata_link"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQmcEphg3SKmBpbKMjtRewAAAN8"] [Mon Nov 03 22:25:57 2025] [mollywoppersnyb.com] [error] [client 107.20.255.194:21204] [pid 607305] apache2_util.c(271): [client 107.20.255.194] ModSecurity: Access denied with code 418 (phase 2). Pattern match "^[\\\\.|/]+(proc/|dev/shm/)" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/99_dreamhost_rules.conf"] [line "53"] [id "1990013"] [msg "Directory traversal"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQmcdZhg3SKmBpbKMjtU1gAAADM"] [Mon Nov 03 22:27:08 2025] [mollywoppersnyb.com] [error] [client 34.196.237.236:20915] [pid 607305] apache2_util.c(271): [client 34.196.237.236] ModSecurity: Warning. Matched phrase "sys/module" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: sys/module found within ARGS:path: /sys/module/bonding"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQmcvJhg3SKmBpbKMjtXHQAAAGk"] [Mon Nov 03 22:27:28 2025] [mollywoppersnyb.com] [error] [client 167.172.85.13:54764] [pid 607305] mod_access_compat.c(350): AH01797: client denied by server configuration: /home/mollywopper/mollywoppersnyb.com/.well-known/index.php [Mon Nov 03 22:28:49 2025] [mollywoppersnyb.com] [error] [client 52.200.93.170:43583] [pid 607305] apache2_util.c(271): [client 52.200.93.170] ModSecurity: Warning. Matched phrase "sys/module" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: sys/module found within ARGS:path: /sys/module/random"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQmdIZhg3SKmBpbKMjtbEAAAALY"] [Mon Nov 03 22:29:00 2025] [mollywoppersnyb.com] [error] [client 44.221.105.234:7628] [pid 607305] apache2_util.c(271): [client 44.221.105.234] ModSecurity: Warning. Matched phrase "sys/module" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: sys/module found within ARGS:path: /sys/module/atkbd"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQmdLJhg3SKmBpbKMjtbcwAAAC8"] [Mon Nov 03 22:30:37 2025] [mollywoppersnyb.com] [error] [client 52.73.6.26:22140] [pid 607305] apache2_util.c(271): [client 52.73.6.26] ModSecurity: Warning. Matched phrase "sys/module" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: sys/module found within ARGS:path: /sys/module/jbd2"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQmdjZhg3SKmBpbKMjtd7gAAAMA"] [Mon Nov 03 22:32:06 2025] [mollywoppersnyb.com] [error] [client 149.154.161.212:36744] [pid 607305] mod_access_compat.c(350): AH01797: client denied by server configuration: /home/mollywopper/mollywoppersnyb.com/.well-known/index.php [Mon Nov 03 22:34:43 2025] [mollywoppersnyb.com] [error] [client 18.211.148.239:41256] [pid 607305] apache2_util.c(271): [client 18.211.148.239] ModSecurity: Warning. Matched phrase "var/log" at ARGS:fileloc. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: var/log found within ARGS:fileloc: /var/log/sshlimit.log.7.gz"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQmeg5hg3SKmBpbKMjtgiwAAAEM"] [Mon Nov 03 22:34:43 2025] [mollywoppersnyb.com] [error] [client 18.211.148.239:41256] [pid 607305] apache2_util.c(271): [client 18.211.148.239] ModSecurity: Warning. Matched phrase "var/log" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: var/log found within ARGS:path: /var/log"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQmeg5hg3SKmBpbKMjtgiwAAAEM"] [Mon Nov 03 22:34:55 2025] [mollywoppersnyb.com] [error] [client 100.28.133.214:50238] [pid 607305] apache2_util.c(271): [client 100.28.133.214] ModSecurity: Warning. Matched phrase "sys/module" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: sys/module found within ARGS:path: /sys/module/hid_belkin"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQmej5hg3SKmBpbKMjtgmQAAAGc"] [Mon Nov 03 22:35:51 2025] [mollywoppersnyb.com] [error] [client 100.28.204.82:41991] [pid 607305] apache2_util.c(271): [client 100.28.204.82] ModSecurity: Warning. Matched phrase "etc/init" at ARGS:fileloc. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: etc/init found within ARGS:fileloc: /etc/init.d/cachefilesd"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQmex5hg3SKmBpbKMjtg9AAAAE0"] [Mon Nov 03 22:35:51 2025] [mollywoppersnyb.com] [error] [client 100.28.204.82:41991] [pid 607305] apache2_util.c(271): [client 100.28.204.82] ModSecurity: Warning. Matched phrase "etc/init" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: etc/init found within ARGS:path: /etc/init.d"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQmex5hg3SKmBpbKMjtg9AAAAE0"] [Mon Nov 03 22:36:11 2025] [mollywoppersnyb.com] [error] [client 18.207.89.138:27562] [pid 607305] apache2_util.c(271): [client 18.207.89.138] ModSecurity: Warning. Matched phrase "sys/kernel" at ARGS:fileloc. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: sys/kernel found within ARGS:fileloc: /sys/kernel/cpu_byteorder"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQme25hg3SKmBpbKMjthJQAAAJI"] [Mon Nov 03 22:36:11 2025] [mollywoppersnyb.com] [error] [client 18.207.89.138:27562] [pid 607305] apache2_util.c(271): [client 18.207.89.138] ModSecurity: Warning. Matched phrase "sys/kernel" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: sys/kernel found within ARGS:path: /sys/kernel"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQme25hg3SKmBpbKMjthJQAAAJI"] [Mon Nov 03 22:37:27 2025] [mollywoppersnyb.com] [error] [client 54.243.63.52:48036] [pid 607305] apache2_util.c(271): [client 54.243.63.52] ModSecurity: Warning. Matched phrase "etc/default" at ARGS:fileloc. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: etc/default found within ARGS:fileloc: /etc/default/cachefilesd"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQmfJ5hg3SKmBpbKMjthlgAAAG4"] [Mon Nov 03 22:37:27 2025] [mollywoppersnyb.com] [error] [client 54.243.63.52:48036] [pid 607305] apache2_util.c(271): [client 54.243.63.52] ModSecurity: Warning. Matched phrase "etc/default" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: etc/default found within ARGS:path: /etc/default"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQmfJ5hg3SKmBpbKMjthlgAAAG4"] [Mon Nov 03 22:38:55 2025] [mollywoppersnyb.com] [error] [client 34.204.150.196:34125] [pid 607305] apache2_util.c(271): [client 34.204.150.196] ModSecurity: Warning. Matched phrase "etc/init" at ARGS:fileloc. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: etc/init found within ARGS:fileloc: /etc/init.d/ntp"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQmff5hg3SKmBpbKMjtiWQAAACs"] [Mon Nov 03 22:38:55 2025] [mollywoppersnyb.com] [error] [client 34.204.150.196:34125] [pid 607305] apache2_util.c(271): [client 34.204.150.196] ModSecurity: Warning. Matched phrase "etc/init" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: etc/init found within ARGS:path: /etc/init.d"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQmff5hg3SKmBpbKMjtiWQAAACs"] [Mon Nov 03 22:39:47 2025] [mollywoppersnyb.com] [error] [client 34.234.206.30:47741] [pid 607305] apache2_util.c(271): [client 34.234.206.30] ModSecurity: Warning. Matched phrase "etc/default" at ARGS:fileloc. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: etc/default found within ARGS:fileloc: /etc/default/runit"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQmfs5hg3SKmBpbKMjtimgAAAAA"] [Mon Nov 03 22:39:47 2025] [mollywoppersnyb.com] [error] [client 34.234.206.30:47741] [pid 607305] apache2_util.c(271): [client 34.234.206.30] ModSecurity: Warning. Matched phrase "etc/default" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: etc/default found within ARGS:path: /etc/default"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQmfs5hg3SKmBpbKMjtimgAAAAA"] [Mon Nov 03 22:39:56 2025] [mollywoppersnyb.com] [error] [client 109.252.179.53:1729] [pid 607305] mod_access_compat.c(350): AH01797: client denied by server configuration: /home/mollywopper/mollywoppersnyb.com/goods.php [Mon Nov 03 22:39:56 2025] [mollywoppersnyb.com] [error] [client 109.252.179.53:1790] [pid 607305] mod_access_compat.c(350): AH01797: client denied by server configuration: /home/mollywopper/mollywoppersnyb.com/mah.php [Mon Nov 03 22:39:56 2025] [mollywoppersnyb.com] [error] [client 109.252.179.53:1791] [pid 607305] mod_access_compat.c(350): AH01797: client denied by server configuration: /home/mollywopper/mollywoppersnyb.com/chosen.php [Mon Nov 03 22:41:08 2025] [mollywoppersnyb.com] [error] [client 44.193.115.232:60503] [pid 607305] apache2_util.c(271): [client 44.193.115.232] ModSecurity: Warning. Matched phrase "sys/kernel" at ARGS:fileloc. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: sys/kernel found within ARGS:fileloc: /sys/kernel/vmcoreinfo"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQmgBJhg3SKmBpbKMjtjAQAAABA"] [Mon Nov 03 22:41:08 2025] [mollywoppersnyb.com] [error] [client 44.193.115.232:60503] [pid 607305] apache2_util.c(271): [client 44.193.115.232] ModSecurity: Warning. Matched phrase "sys/kernel" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: sys/kernel found within ARGS:path: /sys/kernel"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQmgBJhg3SKmBpbKMjtjAQAAABA"] [Mon Nov 03 22:41:39 2025] [mollywoppersnyb.com] [error] [client 44.215.210.112:54423] [pid 607305] apache2_util.c(271): [client 44.215.210.112] ModSecurity: Access denied with code 418 (phase 2). Pattern match "^[\\\\.|/]+(proc/|dev/shm/)" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/99_dreamhost_rules.conf"] [line "53"] [id "1990013"] [msg "Directory traversal"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQmgI5hg3SKmBpbKMjtjIgAAADw"] [Mon Nov 03 22:44:09 2025] [mollywoppersnyb.com] [error] [client 3.212.205.90:4926] [pid 607305] apache2_util.c(271): [client 3.212.205.90] ModSecurity: Warning. Matched phrase "etc/dconf" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: etc/dconf found within ARGS:path: /etc/dconf/db"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQmguZhg3SKmBpbKMjtkOQAAAHc"] [Mon Nov 03 22:45:15 2025] [mollywoppersnyb.com] [error] [client 18.211.148.239:12768] [pid 607305] apache2_util.c(271): [client 18.211.148.239] ModSecurity: Warning. Matched phrase "sys/module" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: sys/module found within ARGS:path: /sys/module/zswap"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQmg-5hg3SKmBpbKMjtktAAAAJ8"] [Mon Nov 03 22:46:00 2025] [mollywoppersnyb.com] [error] [client 100.29.34.97:5967] [pid 607305] apache2_util.c(271): [client 100.29.34.97] ModSecurity: Warning. Matched phrase "sys/class" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: sys/class found within ARGS:path: /sys/class/misc"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQmhKJhg3SKmBpbKMjtpjwAAAHk"] [Mon Nov 03 22:47:04 2025] [mollywoppersnyb.com] [error] [client 34.234.197.175:48223] [pid 607305] apache2_util.c(271): [client 34.234.197.175] ModSecurity: Access denied with code 418 (phase 2). Pattern match "^[\\\\.|/]+(proc/|dev/shm/)" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/99_dreamhost_rules.conf"] [line "53"] [id "1990013"] [msg "Directory traversal"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQmhaJhg3SKmBpbKMjtp8wAAAGM"] [Mon Nov 03 22:47:52 2025] [mollywoppersnyb.com] [error] [client 98.82.107.102:56313] [pid 607305] apache2_util.c(271): [client 98.82.107.102] ModSecurity: Warning. Matched phrase "sys/module" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: sys/module found within ARGS:path: /sys/module/hid_cypress"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQmhmJhg3SKmBpbKMjtqNgAAANk"] [Mon Nov 03 22:48:07 2025] [mollywoppersnyb.com] [error] [client 144.76.32.120:36178] [pid 607305] apache2_util.c(271): [client 144.76.32.120] ModSecurity: Warning. Matched phrase ".htaccess" at ARGS:fileloc. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: .htaccess found within ARGS:fileloc: /home/mollywopper/mollywoppersnyb.com/.htaccess"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/"] [unique_id "aQmhp5hg3SKmBpbKMjtqVQAAAFQ"] [Mon Nov 03 22:49:08 2025] [mollywoppersnyb.com] [error] [client 54.210.155.69:13576] [pid 607305] apache2_util.c(271): [client 54.210.155.69] ModSecurity: Warning. Matched phrase "etc/kernel" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: etc/kernel found within ARGS:path: /etc/kernel/postinst.d"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQmh5Jhg3SKmBpbKMjtq_wAAANQ"] [Mon Nov 03 22:49:25 2025] [mollywoppersnyb.com] [error] [client 3.208.156.9:7974] [pid 607305] apache2_util.c(271): [client 3.208.156.9] ModSecurity: Warning. Matched phrase "sys/class" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: sys/class found within ARGS:path: /sys/class/usbmon"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQmh9Zhg3SKmBpbKMjtrGgAAAIk"] [Mon Nov 03 22:49:49 2025] [mollywoppersnyb.com] [error] [client 54.89.90.224:60985] [pid 607305] apache2_util.c(271): [client 54.89.90.224] ModSecurity: Warning. Matched phrase "sys/fs" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: sys/fs found within ARGS:path: /sys/fs/bpf"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQmiDZhg3SKmBpbKMjtrOgAAANA"] [Mon Nov 03 22:50:40 2025] [mollywoppersnyb.com] [error] [client 54.235.172.108:51428] [pid 607305] apache2_util.c(271): [client 54.235.172.108] ModSecurity: Warning. Matched phrase "var/log" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: var/log found within ARGS:path: /var/log/dist-upgrade"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQmiQJhg3SKmBpbKMjtrjAAAALc"] [Mon Nov 03 22:50:49 2025] [mollywoppersnyb.com] [error] [client 34.199.252.22:34266] [pid 607305] apache2_util.c(271): [client 34.199.252.22] ModSecurity: Warning. Matched phrase "etc/network" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: etc/network found within ARGS:path: /etc/networkd-dispatcher/carrier.d"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQmiSZhg3SKmBpbKMjtrlgAAAMc"] [Mon Nov 03 22:51:45 2025] [mollywoppersnyb.com] [error] [client 144.76.32.120:51516] [pid 607305] apache2_util.c(271): [client 144.76.32.120] ModSecurity: Access denied with code 418 (phase 1). Pattern match "wp-config.php" at ARGS_GET:fileloc. [file "/etc/modsecurity/mod_sec3_CRS/99_dreamhost_rules.conf"] [line "93"] [id "1990071"] [msg "wp-config.php Local File Inclusion Attempt"] [hostname "mollywoppersnyb.com"] [uri "/"] [unique_id "aQmigZhg3SKmBpbKMjtr7AAAAGk"] [Mon Nov 03 22:53:11 2025] [mollywoppersnyb.com] [error] [client 98.83.8.142:50925] [pid 607305] apache2_util.c(271): [client 98.83.8.142] ModSecurity: Warning. Matched phrase "sys/module" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: sys/module found within ARGS:path: /sys/module/button"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQmi15hg3SKmBpbKMjtsbAAAAGY"] [Mon Nov 03 22:54:08 2025] [mollywoppersnyb.com] [error] [client 54.243.63.52:37635] [pid 607305] apache2_util.c(271): [client 54.243.63.52] ModSecurity: Warning. Matched phrase "etc/logrotate.d" at ARGS:fileloc. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: etc/logrotate.d found within ARGS:fileloc: /etc/logrotate.d/apport"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQmjEJhg3SKmBpbKMjts0AAAABs"] [Mon Nov 03 22:54:08 2025] [mollywoppersnyb.com] [error] [client 54.243.63.52:37635] [pid 607305] apache2_util.c(271): [client 54.243.63.52] ModSecurity: Warning. Matched phrase "etc/logrotate.d" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: etc/logrotate.d found within ARGS:path: /etc/logrotate.d"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQmjEJhg3SKmBpbKMjts0AAAABs"] [Mon Nov 03 22:54:57 2025] [mollywoppersnyb.com] [error] [client 98.83.94.113:44518] [pid 607305] apache2_util.c(271): [client 98.83.94.113] ModSecurity: Warning. Matched phrase "sys/kernel" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: sys/kernel found within ARGS:path: /sys/kernel/debug"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQmjQZhg3SKmBpbKMjttMAAAAEc"] [Mon Nov 03 22:55:20 2025] [mollywoppersnyb.com] [error] [client 23.21.228.180:31020] [pid 607305] apache2_util.c(271): [client 23.21.228.180] ModSecurity: Warning. Matched phrase "sys/module" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: sys/module found within ARGS:path: /sys/module/hid_lg_g15"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQmjWJhg3SKmBpbKMjttSgAAALI"] [Mon Nov 03 22:56:12 2025] [mollywoppersnyb.com] [error] [client 100.24.167.60:17700] [pid 607305] apache2_util.c(271): [client 100.24.167.60] ModSecurity: Warning. Matched phrase "sys/module" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: sys/module found within ARGS:path: /sys/module/mlx4_en"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQmjjJhg3SKmBpbKMjttlAAAAHA"] [Mon Nov 03 22:56:44 2025] [mollywoppersnyb.com] [error] [client 44.197.76.210:11210] [pid 607305] apache2_util.c(271): [client 44.197.76.210] ModSecurity: Access denied with code 418 (phase 2). Pattern match "^[\\\\.|/]+(proc/|dev/shm/)" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/99_dreamhost_rules.conf"] [line "53"] [id "1990013"] [msg "Directory traversal"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQmjrJhg3SKmBpbKMjttvQAAAMY"] [Mon Nov 03 23:00:48 2025] [mollywoppersnyb.com] [error] [client 52.202.52.82:30051] [pid 607305] apache2_util.c(271): [client 52.202.52.82] ModSecurity: Access denied with code 418 (phase 2). Pattern match "^[\\\\.|/]+(proc/|dev/shm/)" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/99_dreamhost_rules.conf"] [line "53"] [id "1990013"] [msg "Directory traversal"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQmkoJhg3SKmBpbKMjtvsgAAAIM"] [Mon Nov 03 23:01:57 2025] [mollywoppersnyb.com] [error] [client 54.83.180.239:13707] [pid 607305] apache2_util.c(271): [client 54.83.180.239] ModSecurity: Warning. Matched phrase "sys/module" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: sys/module found within ARGS:path: /sys/module/block"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQmk5Zhg3SKmBpbKMjtwHwAAAHg"] [Mon Nov 03 23:05:07 2025] [mollywoppersnyb.com] [error] [client 23.23.213.182:1194] [pid 607305] apache2_util.c(271): [client 23.23.213.182] ModSecurity: Warning. Matched phrase "sys/module" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: sys/module found within ARGS:path: /sys/module/libnvdimm"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQmlo5hg3SKmBpbKMjtxKgAAAD4"] [Mon Nov 03 23:05:13 2025] [mollywoppersnyb.com] [error] [client 184.73.68.20:34520] [pid 607305] apache2_util.c(271): [client 184.73.68.20] ModSecurity: Warning. Matched phrase "sys/module" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: sys/module found within ARGS:path: /sys/module/megaraid_sas"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQmlqZhg3SKmBpbKMjtxNAAAAMg"] [Mon Nov 03 23:11:23 2025] [mollywoppersnyb.com] [error] [client 107.23.62.75:57724] [pid 607305] apache2_util.c(271): [client 107.23.62.75] ModSecurity: Access denied with code 418 (phase 2). Pattern match "^[\\\\.|/]+(proc/|dev/shm/)" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/99_dreamhost_rules.conf"] [line "53"] [id "1990013"] [msg "Directory traversal"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQmnG5hg3SKmBpbKMjt3yAAAAMc"] [Mon Nov 03 23:14:54 2025] [mollywoppersnyb.com] [error] [client 34.194.165.45:50699] [pid 607305] apache2_util.c(271): [client 34.194.165.45] ModSecurity: Warning. Matched phrase "sys/module" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: sys/module found within ARGS:path: /sys/module/dm_mod"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQmn7phg3SKmBpbKMjt49QAAAB0"] [Mon Nov 03 23:15:03 2025] [mollywoppersnyb.com] [error] [client 184.73.239.35:41990] [pid 607305] apache2_util.c(271): [client 184.73.239.35] ModSecurity: Warning. Matched phrase "sys/module" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: sys/module found within ARGS:path: /sys/module/printk"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQmn95hg3SKmBpbKMjt5AAAAAHA"] [Mon Nov 03 23:16:57 2025] [mollywoppersnyb.com] [error] [client 3.89.176.255:40675] [pid 607305] apache2_util.c(271): [client 3.89.176.255] ModSecurity: Access denied with code 418 (phase 2). Pattern match "^[\\\\.|/]+(proc/|dev/shm/)" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/99_dreamhost_rules.conf"] [line "53"] [id "1990013"] [msg "Directory traversal"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQmoaZhg3SKmBpbKMjt56gAAAM0"] [Mon Nov 03 23:18:12 2025] [mollywoppersnyb.com] [error] [client 18.204.89.56:53615] [pid 607305] apache2_util.c(271): [client 18.204.89.56] ModSecurity: Warning. Matched phrase "sys/module" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: sys/module found within ARGS:path: /sys/module/hid_apple"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQmotJhg3SKmBpbKMjt6QQAAANM"] [Mon Nov 03 23:20:48 2025] [mollywoppersnyb.com] [error] [client 18.213.240.226:9511] [pid 607305] apache2_util.c(271): [client 18.213.240.226] ModSecurity: Warning. Matched phrase "sys/module" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: sys/module found within ARGS:path: /sys/module/ahci"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQmpUJhg3SKmBpbKMjt7IQAAAL8"] [Mon Nov 03 23:25:19 2025] [mollywoppersnyb.com] [error] [client 44.214.19.8:6428] [pid 607305] apache2_util.c(271): [client 44.214.19.8] ModSecurity: Warning. Matched phrase "sys/module" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: sys/module found within ARGS:path: /sys/module/pata_serverworks"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQmqX5hg3SKmBpbKMjt9GQAAAN0"] [Mon Nov 03 23:27:53 2025] [mollywoppersnyb.com] [error] [client 18.208.11.93:23379] [pid 607305] apache2_util.c(271): [client 18.208.11.93] ModSecurity: Warning. Matched phrase "sys/module" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: sys/module found within ARGS:path: /sys/module/3w_9xxx"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQmq-Zhg3SKmBpbKMjt95wAAAKA"] [Mon Nov 03 23:29:00 2025] [mollywoppersnyb.com] [error] [client 34.195.248.30:57860] [pid 607305] apache2_util.c(271): [client 34.195.248.30] ModSecurity: Warning. Matched phrase "etc/postfix" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: etc/postfix found within ARGS:path: /etc/postfix/sasl"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQmrPJhg3SKmBpbKMjt-cAAAANc"] [Mon Nov 03 23:32:15 2025] [mollywoppersnyb.com] [error] [client 44.206.65.8:32060] [pid 607305] apache2_util.c(271): [client 44.206.65.8] ModSecurity: Warning. Matched phrase "etc/x11" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: etc/x11 found within ARGS:path: /etc/X11/Xsession.d"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQmr_5hg3SKmBpbKMjuAWQAAAM0"] [Mon Nov 03 23:32:55 2025] [mollywoppersnyb.com] [error] [client 3.213.213.161:57073] [pid 607305] apache2_util.c(271): [client 3.213.213.161] ModSecurity: Access denied with code 418 (phase 2). Pattern match "^[\\\\.|/]+(proc/|dev/shm/)" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/99_dreamhost_rules.conf"] [line "53"] [id "1990013"] [msg "Directory traversal"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQmsJ5hg3SKmBpbKMjuAvQAAAEI"] [Mon Nov 03 23:33:03 2025] [mollywoppersnyb.com] [error] [client 52.205.141.124:48003] [pid 607305] apache2_util.c(271): [client 52.205.141.124] ModSecurity: Access denied with code 418 (phase 2). Pattern match "^[\\\\.|/]+(proc/|dev/shm/)" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/99_dreamhost_rules.conf"] [line "53"] [id "1990013"] [msg "Directory traversal"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQmsL5hg3SKmBpbKMjuA0AAAAFM"] [Mon Nov 03 23:33:15 2025] [mollywoppersnyb.com] [error] [client 3.221.50.71:40371] [pid 607305] apache2_util.c(271): [client 3.221.50.71] ModSecurity: Warning. Matched phrase "etc/muttrc.d" at ARGS:fileloc. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: etc/muttrc.d found within ARGS:fileloc: /etc/Muttrc.d/colors.rc"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQmsO5hg3SKmBpbKMjuA9QAAAG4"] [Mon Nov 03 23:33:15 2025] [mollywoppersnyb.com] [error] [client 3.221.50.71:40371] [pid 607305] apache2_util.c(271): [client 3.221.50.71] ModSecurity: Warning. Matched phrase "etc/muttrc.d" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: etc/muttrc.d found within ARGS:path: /etc/Muttrc.d"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQmsO5hg3SKmBpbKMjuA9QAAAG4"] [Mon Nov 03 23:35:03 2025] [mollywoppersnyb.com] [error] [client 192.151.144.210:58145] [pid 607305] apache2_util.c(271): [client 192.151.144.210] ModSecurity: Warning. Pattern match ".*\\\\.ph(?:p\\\\d*|tml|ar|ps|t|pt)\\\\.*$" at FILES:berkas. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-933-APPLICATION-ATTACK-PHP.conf"] [line "106"] [id "933110"] [msg "PHP Injection Attack: PHP Script File Upload Found"] [data "Matched Data: radio.php found within FILES:berkas: radio.php"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-php"] [tag "platform-multi"] [tag "attack-injection-php"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/152/242"] [hostname "mollywoppersnyb.com"] [uri "/wp-links-opml.php"] [unique_id "aQmsp5hg3SKmBpbKMjuB7QAAAKE"] [Mon Nov 03 23:35:26 2025] [mollywoppersnyb.com] [error] [client 43.132.150.96:37592] [pid 607305] apache2/mod_qos.c(4637): mod_qos(045): access denied, invalid request line: can't parse uri, c=43.132.150.96, id=aQmsvphg3SKmBpbKMjuCFgAAAFQ [Mon Nov 03 23:35:56 2025] [mollywoppersnyb.com] [error] [client 192.151.144.210:58151] [pid 607305] mod_access_compat.c(350): AH01797: client denied by server configuration: /home/mollywopper/mollywoppersnyb.com/radio.php [Mon Nov 03 23:36:15 2025] [mollywoppersnyb.com] [error] [client 192.151.144.210:58152] [pid 607305] mod_access_compat.c(350): AH01797: client denied by server configuration: /home/mollywopper/mollywoppersnyb.com/radio.php [Mon Nov 03 23:36:21 2025] [mollywoppersnyb.com] [error] [client 192.151.144.210:58153] [pid 607305] mod_access_compat.c(350): AH01797: client denied by server configuration: /home/mollywopper/mollywoppersnyb.com/radio.php [Mon Nov 03 23:36:27 2025] [mollywoppersnyb.com] [error] [client 192.151.144.210:58153] [pid 607305] mod_access_compat.c(350): AH01797: client denied by server configuration: /home/mollywopper/mollywoppersnyb.com/radio.php [Mon Nov 03 23:36:34 2025] [mollywoppersnyb.com] [error] [client 192.151.144.210:58154] [pid 607305] mod_access_compat.c(350): AH01797: client denied by server configuration: /home/mollywopper/mollywoppersnyb.com/radio.php [Mon Nov 03 23:36:44 2025] [mollywoppersnyb.com] [error] [client 192.151.144.210:58155] [pid 607305] mod_access_compat.c(350): AH01797: client denied by server configuration: /home/mollywopper/mollywoppersnyb.com/radio.php [Mon Nov 03 23:36:55 2025] [mollywoppersnyb.com] [error] [client 192.151.144.210:58156] [pid 607305] mod_access_compat.c(350): AH01797: client denied by server configuration: /home/mollywopper/mollywoppersnyb.com/radio.php [Mon Nov 03 23:37:20 2025] [mollywoppersnyb.com] [error] [client 192.151.144.210:58158] [pid 607305] mod_access_compat.c(350): AH01797: client denied by server configuration: /home/mollywopper/mollywoppersnyb.com/radio.php [Mon Nov 03 23:37:34 2025] [mollywoppersnyb.com] [error] [client 192.151.144.210:58159] [pid 607305] mod_access_compat.c(350): AH01797: client denied by server configuration: /home/mollywopper/mollywoppersnyb.com/radio.php [Mon Nov 03 23:37:41 2025] [mollywoppersnyb.com] [error] [client 192.151.144.210:58161] [pid 607305] mod_access_compat.c(350): AH01797: client denied by server configuration: /home/mollywopper/mollywoppersnyb.com/radio.php [Mon Nov 03 23:37:57 2025] [mollywoppersnyb.com] [error] [client 192.151.144.210:58163] [pid 607305] mod_access_compat.c(350): AH01797: client denied by server configuration: /home/mollywopper/mollywoppersnyb.com/radio.php [Mon Nov 03 23:38:03 2025] [mollywoppersnyb.com] [error] [client 23.22.105.143:51671] [pid 607305] apache2_util.c(271): [client 23.22.105.143] ModSecurity: Warning. Matched phrase "sys/module" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: sys/module found within ARGS:path: /sys/module/pcieportdrv"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQmtW5hg3SKmBpbKMjuDWQAAAKs"] [Mon Nov 03 23:38:07 2025] [mollywoppersnyb.com] [error] [client 54.166.126.132:43308] [pid 607305] apache2_util.c(271): [client 54.166.126.132] ModSecurity: Warning. Matched phrase "sys/module" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: sys/module found within ARGS:path: /sys/module/crc64_rocksoft"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQmtX5hg3SKmBpbKMjuDgAAAAFs"] [Mon Nov 03 23:38:40 2025] [mollywoppersnyb.com] [error] [client 192.151.144.210:58166] [pid 607305] mod_access_compat.c(350): AH01797: client denied by server configuration: /home/mollywopper/mollywoppersnyb.com/radio.php [Mon Nov 03 23:38:43 2025] [mollywoppersnyb.com] [error] [client 192.151.144.210:58166] [pid 607305] mod_access_compat.c(350): AH01797: client denied by server configuration: /home/mollywopper/mollywoppersnyb.com/radio.php [Mon Nov 03 23:38:44 2025] [mollywoppersnyb.com] [error] [client 192.151.144.210:58167] [pid 607305] mod_access_compat.c(350): AH01797: client denied by server configuration: /home/mollywopper/mollywoppersnyb.com/radio.php [Mon Nov 03 23:40:29 2025] [mollywoppersnyb.com] [error] [client 192.187.120.74:63096] [pid 607305] apache2_util.c(271): [client 192.187.120.74] ModSecurity: Warning. Pattern match ".*\\\\.ph(?:p\\\\d*|tml|ar|ps|t|pt)\\\\.*$" at FILES:berkas. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-933-APPLICATION-ATTACK-PHP.conf"] [line "106"] [id "933110"] [msg "PHP Injection Attack: PHP Script File Upload Found"] [data "Matched Data: radio.php found within FILES:berkas: radio.php"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-php"] [tag "platform-multi"] [tag "attack-injection-php"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/152/242"] [hostname "mollywoppersnyb.com"] [uri "/wp-links-opml.php"] [unique_id "aQmt7Zhg3SKmBpbKMjuEPAAAAKM"] [Mon Nov 03 23:40:34 2025] [mollywoppersnyb.com] [error] [client 192.187.120.74:63096] [pid 607305] mod_access_compat.c(350): AH01797: client denied by server configuration: /home/mollywopper/mollywoppersnyb.com/radio.php [Mon Nov 03 23:40:37 2025] [mollywoppersnyb.com] [error] [client 192.187.120.74:63096] [pid 607305] mod_access_compat.c(350): AH01797: client denied by server configuration: /home/mollywopper/mollywoppersnyb.com/radio.php [Mon Nov 03 23:40:39 2025] [mollywoppersnyb.com] [error] [client 98.80.130.239:51477] [pid 607305] apache2_util.c(271): [client 98.80.130.239] ModSecurity: Warning. Matched phrase "etc/systemd" at ARGS:fileloc. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: etc/systemd found within ARGS:fileloc: /etc/systemd/journald.conf.dpkg-dist"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQmt95hg3SKmBpbKMjuETQAAAFA"] [Mon Nov 03 23:40:39 2025] [mollywoppersnyb.com] [error] [client 98.80.130.239:51477] [pid 607305] apache2_util.c(271): [client 98.80.130.239] ModSecurity: Warning. Matched phrase "etc/systemd" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: etc/systemd found within ARGS:path: /etc/systemd"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQmt95hg3SKmBpbKMjuETQAAAFA"] [Mon Nov 03 23:40:44 2025] [mollywoppersnyb.com] [error] [client 192.187.120.74:63099] [pid 607305] mod_access_compat.c(350): AH01797: client denied by server configuration: /home/mollywopper/mollywoppersnyb.com/radio.php [Mon Nov 03 23:40:51 2025] [mollywoppersnyb.com] [error] [client 192.187.120.74:63102] [pid 607305] mod_access_compat.c(350): AH01797: client denied by server configuration: /home/mollywopper/mollywoppersnyb.com/radio.php [Mon Nov 03 23:40:56 2025] [mollywoppersnyb.com] [error] [client 192.187.120.74:63102] [pid 607305] mod_access_compat.c(350): AH01797: client denied by server configuration: /home/mollywopper/mollywoppersnyb.com/radio.php [Mon Nov 03 23:41:02 2025] [mollywoppersnyb.com] [error] [client 192.187.120.74:63103] [pid 607305] mod_access_compat.c(350): AH01797: client denied by server configuration: /home/mollywopper/mollywoppersnyb.com/radio.php [Mon Nov 03 23:41:07 2025] [mollywoppersnyb.com] [error] [client 192.187.120.74:63103] [pid 607305] mod_access_compat.c(350): AH01797: client denied by server configuration: /home/mollywopper/mollywoppersnyb.com/radio.php [Mon Nov 03 23:41:09 2025] [mollywoppersnyb.com] [error] [client 192.187.120.74:63103] [pid 607305] mod_access_compat.c(350): AH01797: client denied by server configuration: /home/mollywopper/mollywoppersnyb.com/radio.php [Mon Nov 03 23:41:12 2025] [mollywoppersnyb.com] [error] [client 192.187.120.74:63103] [pid 607305] mod_access_compat.c(350): AH01797: client denied by server configuration: /home/mollywopper/mollywoppersnyb.com/radio.php [Mon Nov 03 23:41:22 2025] [mollywoppersnyb.com] [error] [client 192.187.120.74:63106] [pid 607305] mod_access_compat.c(350): AH01797: client denied by server configuration: /home/mollywopper/mollywoppersnyb.com/radio.php [Mon Nov 03 23:41:24 2025] [mollywoppersnyb.com] [error] [client 192.187.120.74:63106] [pid 607305] mod_access_compat.c(350): AH01797: client denied by server configuration: /home/mollywopper/mollywoppersnyb.com/radio.php [Mon Nov 03 23:41:40 2025] [mollywoppersnyb.com] [error] [client 192.187.120.74:63109] [pid 607305] mod_access_compat.c(350): AH01797: client denied by server configuration: /home/mollywopper/mollywoppersnyb.com/radio.php [Mon Nov 03 23:41:54 2025] [mollywoppersnyb.com] [error] [client 192.187.120.74:63110] [pid 607305] mod_access_compat.c(350): AH01797: client denied by server configuration: /home/mollywopper/mollywoppersnyb.com/radio.php [Mon Nov 03 23:42:02 2025] [mollywoppersnyb.com] [error] [client 192.187.120.74:63113] [pid 607305] mod_access_compat.c(350): AH01797: client denied by server configuration: /home/mollywopper/mollywoppersnyb.com/radio.php [Mon Nov 03 23:42:09 2025] [mollywoppersnyb.com] [error] [client 192.187.120.74:63115] [pid 607305] mod_access_compat.c(350): AH01797: client denied by server configuration: /home/mollywopper/mollywoppersnyb.com/about.php [Mon Nov 03 23:42:11 2025] [mollywoppersnyb.com] [error] [client 192.187.120.74:63115] [pid 607305] mod_access_compat.c(350): AH01797: client denied by server configuration: /home/mollywopper/mollywoppersnyb.com/about.php [Mon Nov 03 23:42:36 2025] [mollywoppersnyb.com] [error] [client 192.187.120.74:63125] [pid 607305] apache2_util.c(271): [client 192.187.120.74] ModSecurity: Warning. Pattern match ".*\\\\.ph(?:p\\\\d*|tml|ar|ps|t|pt)\\\\.*$" at FILES:berkas. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-933-APPLICATION-ATTACK-PHP.conf"] [line "106"] [id "933110"] [msg "PHP Injection Attack: PHP Script File Upload Found"] [data "Matched Data: admin.php found within FILES:berkas: admin.php"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-php"] [tag "platform-multi"] [tag "attack-injection-php"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/152/242"] [hostname "mollywoppersnyb.com"] [uri "/wp-links-opml.php"] [unique_id "aQmubJhg3SKmBpbKMjuE-wAAAHc"] [Mon Nov 03 23:42:44 2025] [mollywoppersnyb.com] [error] [client 192.187.120.74:63127] [pid 607305] mod_access_compat.c(350): AH01797: client denied by server configuration: /home/mollywopper/mollywoppersnyb.com/.well-known/admin.php [Mon Nov 03 23:42:54 2025] [mollywoppersnyb.com] [error] [client 192.187.120.74:63127] [pid 607305] apache2_util.c(271): [client 192.187.120.74] ModSecurity: Warning. Matched phrase ".htaccess" at ARGS:name. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: .htaccess found within ARGS:name: .htaccess"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-links-opml.php"] [unique_id "aQmufphg3SKmBpbKMjuFDgAAAKs"] [Mon Nov 03 23:42:54 2025] [mollywoppersnyb.com] [error] [client 192.187.120.74:63127] [pid 607305] apache2_util.c(271): [client 192.187.120.74] ModSecurity: Warning. Matched phrase ".htaccess" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: .htaccess found within ARGS:path: /home/mollywopper/mollywoppersnyb.com/.well-known/.htaccess"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-links-opml.php"] [unique_id "aQmufphg3SKmBpbKMjuFDgAAAKs"] [Mon Nov 03 23:44:16 2025] [mollywoppersnyb.com] [error] [client 3.213.46.222:44205] [pid 607305] apache2_util.c(271): [client 3.213.46.222] ModSecurity: Warning. Matched phrase "etc/dbus-1" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: etc/dbus-1 found within ARGS:path: /etc/dbus-1/system.d"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQmu0Jhg3SKmBpbKMjuGHgAAALQ"] [Mon Nov 03 23:44:51 2025] [mollywoppersnyb.com] [error] [client 3.221.156.96:20972] [pid 607305] apache2_util.c(271): [client 3.221.156.96] ModSecurity: Warning. Matched phrase "var/log" at ARGS:fileloc. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: var/log found within ARGS:fileloc: /var/log/sshlimit.log.1"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQmu85hg3SKmBpbKMjuHMQAAACU"] [Mon Nov 03 23:44:51 2025] [mollywoppersnyb.com] [error] [client 3.221.156.96:20972] [pid 607305] apache2_util.c(271): [client 3.221.156.96] ModSecurity: Warning. Matched phrase "var/log" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: var/log found within ARGS:path: /var/log"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQmu85hg3SKmBpbKMjuHMQAAACU"] [Mon Nov 03 23:46:00 2025] [mollywoppersnyb.com] [error] [client 3.94.199.128:30811] [pid 607305] apache2_util.c(271): [client 3.94.199.128] ModSecurity: Access denied with code 418 (phase 2). Pattern match "^[\\\\.|/]+(proc/|dev/shm/)" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/99_dreamhost_rules.conf"] [line "53"] [id "1990013"] [msg "Directory traversal"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQmvOJhg3SKmBpbKMjuJUAAAAKk"] [Mon Nov 03 23:47:37 2025] [mollywoppersnyb.com] [error] [client 52.45.194.165:3632] [pid 607305] apache2_util.c(271): [client 52.45.194.165] ModSecurity: Warning. Matched phrase "sys/firmware" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: sys/firmware found within ARGS:path: /sys/firmware/memmap"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQmvmZhg3SKmBpbKMjuLcQAAAJA"] [Mon Nov 03 23:50:17 2025] [mollywoppersnyb.com] [error] [client 98.82.38.120:40054] [pid 607305] apache2_util.c(271): [client 98.82.38.120] ModSecurity: Warning. Matched phrase "sys/dev" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: sys/dev found within ARGS:path: /sys/devices/pnp0"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQmwOZhg3SKmBpbKMjuMlwAAAAM"] [Mon Nov 03 23:51:41 2025] [mollywoppersnyb.com] [error] [client 3.93.253.174:1972] [pid 607305] apache2_util.c(271): [client 3.93.253.174] ModSecurity: Warning. Matched phrase "sys/module" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: sys/module found within ARGS:path: /sys/module/processor"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQmwjZhg3SKmBpbKMjuNCgAAAAY"] [Mon Nov 03 23:53:07 2025] [mollywoppersnyb.com] [error] [client 34.204.150.196:27756] [pid 607305] apache2_util.c(271): [client 34.204.150.196] ModSecurity: Warning. Matched phrase "sys/class" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: sys/class found within ARGS:path: /sys/class/nvme-subsystem"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQmw45hg3SKmBpbKMjuNbQAAAJw"] [Mon Nov 03 23:57:27 2025] [mollywoppersnyb.com] [error] [client 18.209.137.234:26540] [pid 607305] apache2_util.c(271): [client 18.209.137.234] ModSecurity: Warning. Matched phrase "etc/java" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: etc/java found within ARGS:path: /etc/java-8-openjdk/management"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQmx55hg3SKmBpbKMjuTowAAADM"] [Mon Nov 03 23:58:49 2025] [mollywoppersnyb.com] [error] [client 3.227.180.70:22225] [pid 607305] apache2_util.c(271): [client 3.227.180.70] ModSecurity: Warning. Matched phrase "apache2/logs" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: apache2/logs found within ARGS:path: /dh/apache2/logs"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQmyOZhg3SKmBpbKMjuT_wAAANk"] [Mon Nov 03 23:59:44 2025] [mollywoppersnyb.com] [error] [client 184.72.84.154:12167] [pid 1314092] apache2_util.c(271): [client 184.72.84.154] ModSecurity: Warning. Matched phrase "sys/class" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: sys/class found within ARGS:path: /sys/class/block"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQmycNAw1G3Lgj53ejOdoQAAJxk"] [Tue Nov 04 00:02:49 2025] [mollywoppersnyb.com] [error] [client 54.225.181.161:35621] [pid 1336728] apache2_util.c(271): [client 54.225.181.161] ModSecurity: Warning. Matched phrase "etc/default" at ARGS:fileloc. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: etc/default found within ARGS:fileloc: /etc/default/sysstat"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQmzKRTwc7DmJetgZmc6cgAAJ2Q"] [Tue Nov 04 00:02:49 2025] [mollywoppersnyb.com] [error] [client 54.225.181.161:35621] [pid 1336728] apache2_util.c(271): [client 54.225.181.161] ModSecurity: Warning. Matched phrase "etc/default" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: etc/default found within ARGS:path: /etc/default"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQmzKRTwc7DmJetgZmc6cgAAJ2Q"] [Tue Nov 04 00:11:12 2025] [mollywoppersnyb.com] [error] [client 54.157.99.244:9013] [pid 1336728] apache2_util.c(271): [client 54.157.99.244] ModSecurity: Warning. Matched phrase "etc/init" at ARGS:fileloc. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: etc/init found within ARGS:fileloc: /etc/init.d/cron"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQm1IBTwc7DmJetgZmdA_wAAJ1Y"] [Tue Nov 04 00:11:12 2025] [mollywoppersnyb.com] [error] [client 54.157.99.244:9013] [pid 1336728] apache2_util.c(271): [client 54.157.99.244] ModSecurity: Warning. Matched phrase "etc/init" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: etc/init found within ARGS:path: /etc/init.d"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQm1IBTwc7DmJetgZmdA_wAAJ1Y"] [Tue Nov 04 00:16:26 2025] [mollywoppersnyb.com] [error] [client 34.225.138.57:47072] [pid 1336728] apache2_util.c(271): [client 34.225.138.57] ModSecurity: Warning. Matched phrase "etc/cron.weekly" at ARGS:fileloc. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: etc/cron.weekly found within ARGS:fileloc: /etc/cron.weekly/.placeholder"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQm2WhTwc7DmJetgZmdHyQAAJ3E"] [Tue Nov 04 00:16:26 2025] [mollywoppersnyb.com] [error] [client 34.225.138.57:47072] [pid 1336728] apache2_util.c(271): [client 34.225.138.57] ModSecurity: Warning. Matched phrase "etc/cron.weekly" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: etc/cron.weekly found within ARGS:path: /etc/cron.weekly"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQm2WhTwc7DmJetgZmdHyQAAJ3E"] [Tue Nov 04 00:16:46 2025] [mollywoppersnyb.com] [error] [client 44.195.50.71:32290] [pid 1336728] apache2_util.c(271): [client 44.195.50.71] ModSecurity: Warning. Matched phrase "sys/module" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: sys/module found within ARGS:path: /sys/module/usbcore"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQm2bhTwc7DmJetgZmdH8QAAJ6E"] [Tue Nov 04 00:17:04 2025] [mollywoppersnyb.com] [error] [client 52.205.222.214:50448] [pid 1336728] apache2_util.c(271): [client 52.205.222.214] ModSecurity: Warning. Matched phrase "sys/module" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: sys/module found within ARGS:path: /sys/module/tcp_htcp"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQm2gBTwc7DmJetgZmdIEAAAJyg"] [Tue Nov 04 00:17:12 2025] [mollywoppersnyb.com] [error] [client 54.235.172.108:30660] [pid 1336728] apache2_util.c(271): [client 54.235.172.108] ModSecurity: Warning. Matched phrase "etc/fonts" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: etc/fonts found within ARGS:path: /etc/fonts/conf.avail"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQm2iBTwc7DmJetgZmdIHwAAJxQ"] [Tue Nov 04 00:17:24 2025] [mollywoppersnyb.com] [error] [client 35.171.141.42:24545] [pid 1336728] apache2_util.c(271): [client 35.171.141.42] ModSecurity: Warning. Matched phrase "sys/module" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: sys/module found within ARGS:path: /sys/module/pcie_aspm"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQm2lBTwc7DmJetgZmdIOAAAJ2o"] [Tue Nov 04 00:18:36 2025] [mollywoppersnyb.com] [error] [client 52.201.155.215:53537] [pid 1336728] apache2_util.c(271): [client 52.201.155.215] ModSecurity: Warning. Matched phrase "sys/class" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: sys/class found within ARGS:path: /sys/class/spi_host"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQm23BTwc7DmJetgZmdIowAAJ2Y"] [Tue Nov 04 00:20:41 2025] [mollywoppersnyb.com] [error] [client 54.84.93.8:16011] [pid 1336728] apache2_util.c(271): [client 54.84.93.8] ModSecurity: Warning. Matched phrase "etc/apt" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: etc/apt found within ARGS:path: /etc/apt/keyrings"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQm3WRTwc7DmJetgZmdJmwAAJzM"] [Tue Nov 04 00:20:52 2025] [mollywoppersnyb.com] [error] [client 100.28.118.16:40539] [pid 1336728] apache2_util.c(271): [client 100.28.118.16] ModSecurity: Warning. Matched phrase "etc/texmf" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: etc/texmf found within ARGS:path: /etc/texmf/texdoctk"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQm3ZBTwc7DmJetgZmdJqwAAJxI"] [Tue Nov 04 00:21:57 2025] [mollywoppersnyb.com] [error] [client 98.84.184.80:51530] [pid 1336728] apache2_util.c(271): [client 98.84.184.80] ModSecurity: Warning. Matched phrase "etc/php" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: etc/php found within ARGS:path: /etc/php/8.1"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQm3pRTwc7DmJetgZmdKBgAAJ50"] [Tue Nov 04 00:22:03 2025] [mollywoppersnyb.com] [error] [client 50.19.221.48:16241] [pid 1336728] apache2_util.c(271): [client 50.19.221.48] ModSecurity: Warning. Matched phrase "sys/module" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: sys/module found within ARGS:path: /sys/module/tcp_bic"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQm3qxTwc7DmJetgZmdKEQAAJ8U"] [Tue Nov 04 00:24:06 2025] [mollywoppersnyb.com] [error] [client 3.217.82.254:6133] [pid 1336728] apache2_util.c(271): [client 3.217.82.254] ModSecurity: Warning. Matched phrase "sys/module" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: sys/module found within ARGS:path: /sys/module/pcc_cpufreq"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQm4JhTwc7DmJetgZmdNTAAAJyk"] [Tue Nov 04 00:24:57 2025] [mollywoppersnyb.com] [error] [client 3.89.176.255:2780] [pid 1336728] apache2_util.c(271): [client 3.89.176.255] ModSecurity: Warning. Matched phrase "sys/class" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: sys/class found within ARGS:path: /sys/class/i2c-adapter"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQm4WRTwc7DmJetgZmdO5wAAJ3M"] [Tue Nov 04 00:25:09 2025] [mollywoppersnyb.com] [error] [client 18.210.58.238:10712] [pid 1336728] apache2_util.c(271): [client 18.210.58.238] ModSecurity: Warning. Matched phrase "sys/dev" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: sys/dev found within ARGS:path: /sys/devices/amd_iommu_3"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQm4ZRTwc7DmJetgZmdPRgAAJ7s"] [Tue Nov 04 00:31:16 2025] [mollywoppersnyb.com] [error] [client 34.234.206.30:31862] [pid 1504522] apache2_util.c(271): [client 34.234.206.30] ModSecurity: Warning. Matched phrase "sys/block" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: sys/block found within ARGS:path: /sys/block/md0"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQm51B7LcERpQFLqmhCl7wAAJ8U"] [Tue Nov 04 00:31:49 2025] [mollywoppersnyb.com] [error] [client 3.230.224.6:8569] [pid 1504522] apache2_util.c(271): [client 3.230.224.6] ModSecurity: Access denied with code 418 (phase 2). Pattern match "^[\\\\.|/]+(proc/|dev/shm/)" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/99_dreamhost_rules.conf"] [line "53"] [id "1990013"] [msg "Directory traversal"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQm59R7LcERpQFLqmhCmFwAAJzc"] [Tue Nov 04 00:33:49 2025] [mollywoppersnyb.com] [error] [client 80.97.160.166:41340] [pid 1504522] mod_access_compat.c(350): AH01797: client denied by server configuration: /home/mollywopper/mollywoppersnyb.com/.well-known/acme-challenge/index.php [Tue Nov 04 00:39:20 2025] [mollywoppersnyb.com] [error] [client 52.204.71.8:9002] [pid 1504522] apache2_util.c(271): [client 52.204.71.8] ModSecurity: Warning. Matched phrase "etc/resolvconf" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: etc/resolvconf found within ARGS:path: /etc/resolvconf/update-libc.d"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQm7uB7LcERpQFLqmhCtxwAAJ3E"] [Tue Nov 04 00:44:39 2025] [mollywoppersnyb.com] [error] [client 98.82.107.102:13934] [pid 1504522] apache2_util.c(271): [client 98.82.107.102] ModSecurity: Warning. Matched phrase "var/log" at ARGS:fileloc. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: var/log found within ARGS:fileloc: /var/log/daemon.log.5.gz"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQm89x7LcERpQFLqmhC0PgAAJ7Q"] [Tue Nov 04 00:44:39 2025] [mollywoppersnyb.com] [error] [client 98.82.107.102:13934] [pid 1504522] apache2_util.c(271): [client 98.82.107.102] ModSecurity: Warning. Matched phrase "var/log" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: var/log found within ARGS:path: /var/log"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQm89x7LcERpQFLqmhC0PgAAJ7Q"] [Tue Nov 04 00:46:29 2025] [mollywoppersnyb.com] [error] [client 52.45.77.169:49888] [pid 1504522] apache2_util.c(271): [client 52.45.77.169] ModSecurity: Warning. Matched phrase "etc/php" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: etc/php found within ARGS:path: /etc/php83/conf.d"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQm9ZR7LcERpQFLqmhC08gAAJ1I"] [Tue Nov 04 00:49:43 2025] [mollywoppersnyb.com] [error] [client 3.219.81.66:12844] [pid 1504522] apache2_util.c(271): [client 3.219.81.66] ModSecurity: Warning. Matched phrase "sys/bus" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: sys/bus found within ARGS:path: /sys/bus/machinecheck"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQm-Jx7LcERpQFLqmhC3kQAAJz4"] [Tue Nov 04 00:49:58 2025] [mollywoppersnyb.com] [error] [client 44.197.76.210:38530] [pid 1504522] apache2_util.c(271): [client 44.197.76.210] ModSecurity: Warning. Matched phrase "etc/cron.d" at ARGS:fileloc. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: etc/cron.d found within ARGS:fileloc: /etc/cron.d/.placeholder"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQm-Nh7LcERpQFLqmhC3_QAAJ08"] [Tue Nov 04 00:49:58 2025] [mollywoppersnyb.com] [error] [client 44.197.76.210:38530] [pid 1504522] apache2_util.c(271): [client 44.197.76.210] ModSecurity: Warning. Matched phrase "etc/cron.d" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: etc/cron.d found within ARGS:path: /etc/cron.d"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQm-Nh7LcERpQFLqmhC3_QAAJ08"] [Tue Nov 04 00:50:03 2025] [mollywoppersnyb.com] [error] [client 3.217.82.254:61687] [pid 1504522] apache2_util.c(271): [client 3.217.82.254] ModSecurity: Warning. Matched phrase "sys/module" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: sys/module found within ARGS:path: /sys/module/cnic"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQm-Ox7LcERpQFLqmhC4IQAAJ3M"] [Tue Nov 04 00:50:12 2025] [mollywoppersnyb.com] [error] [client 52.204.89.12:3611] [pid 1504522] apache2_util.c(271): [client 52.204.89.12] ModSecurity: Warning. Matched phrase "etc/systemd" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: etc/systemd found within ARGS:path: /etc/systemd/system"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQm-RB7LcERpQFLqmhC4YgAAJ7s"] [Tue Nov 04 00:51:53 2025] [mollywoppersnyb.com] [error] [client 3.94.199.128:9162] [pid 1504522] apache2_util.c(271): [client 3.94.199.128] ModSecurity: Access denied with code 418 (phase 2). Pattern match "^[\\\\.|/]+(proc/|dev/shm/)" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/99_dreamhost_rules.conf"] [line "53"] [id "1990013"] [msg "Directory traversal"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQm-qR7LcERpQFLqmhC7TQAAJ7g"] [Tue Nov 04 00:54:21 2025] [mollywoppersnyb.com] [error] [client 34.239.197.197:51805] [pid 1504522] apache2_util.c(271): [client 34.239.197.197] ModSecurity: Warning. Matched phrase "sys/module" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: sys/module found within ARGS:path: /sys/module/hid_generic"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQm_PR7LcERpQFLqmhC8vQAAJ6g"] [Tue Nov 04 00:54:44 2025] [mollywoppersnyb.com] [error] [client 52.23.112.144:59062] [pid 1504522] apache2_util.c(271): [client 52.23.112.144] ModSecurity: Warning. Matched phrase "sys/module" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: sys/module found within ARGS:path: /sys/module/mrp"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQm_VB7LcERpQFLqmhC84gAAJxE"] [Tue Nov 04 00:55:37 2025] [mollywoppersnyb.com] [error] [client 23.22.59.87:60396] [pid 1504522] apache2_util.c(271): [client 23.22.59.87] ModSecurity: Warning. Matched phrase "etc/pki" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: etc/pki found within ARGS:path: /etc/pki/fwupd"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQm_iR7LcERpQFLqmhC90wAAJ5o"] [Tue Nov 04 00:58:34 2025] [mollywoppersnyb.com] [error] [client 54.210.155.69:61983] [pid 1504522] apache2_util.c(271): [client 54.210.155.69] ModSecurity: Warning. Matched phrase "sys/bus" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: sys/bus found within ARGS:path: /sys/bus/container"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQnAOh7LcERpQFLqmhDAuQAAJ8w"] [Tue Nov 04 00:59:26 2025] [mollywoppersnyb.com] [error] [client 52.44.148.203:58077] [pid 1504522] apache2_util.c(271): [client 52.44.148.203] ModSecurity: Warning. Matched phrase "var/spool" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: var/spool found within ARGS:path: /var/spool/mail"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mollywoppersnyb.com"] [uri "/wp-login.php"] [unique_id "aQnAbh7LcERpQFLqmhDBEAAAJ7M"]