[Thu Oct 23 01:26:17 2025] [elconferencista.com] [error] [client 43.157.50.58:40268] [pid 101773] apache2_util.c(271): [client 43.157.50.58] ModSecurity: Warning. Pattern match "\\\\b(?:keep-alive|close),\\\\s?(?:keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "352"] [id "920210"] [msg "Multiple/Conflicting Connection Header Data Found"] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [hostname "www.elconferencista.com"] [uri "/"] [unique_id "aPnmqdeFhDSmRPIKvC8pUgAA6vM"]
[Thu Oct 23 01:38:02 2025] [elconferencista.com] [error] [client 154.222.132.136:41897] [pid 101773] apache2_util.c(271): [client 154.222.132.136] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "143"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "www.elconferencista.com"] [uri "/.git/config"] [unique_id "aPnpateFhDSmRPIKvC8v7QAA6s4"]
[Thu Oct 23 01:38:57 2025] [elconferencista.com] [warn] [client 209.38.208.202:57564] [pid 101773] fcgid_bridge.c(409): (104)Connection reset by peer: mod_fcgid: ap_pass_brigade failed in handle_request_ipc function
[Thu Oct 23 01:38:57 2025] [elconferencista.com] [error] [client 209.38.248.17:42896] [pid 101773] apache2_util.c(271): [client 209.38.248.17] ModSecurity: Warning. Matched phrase ".vscode" at REQUEST_FILENAME. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "143"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: .vscode found within REQUEST_FILENAME: /.vscode/sftp.json"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "elconferencista.com"] [uri "/.vscode/sftp.json"] [unique_id "aPnpodeFhDSmRPIKvC8wZQAA6uo"]
[Thu Oct 23 01:39:05 2025] [elconferencista.com] [error] [client 209.38.248.17:50876] [pid 101773] apache2_util.c(271): [client 209.38.248.17] ModSecurity: Warning. Matched phrase "/.DS_Store" at REQUEST_FILENAME. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "143"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.DS_Store found within REQUEST_FILENAME: /.DS_Store"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "elconferencista.com"] [uri "/.DS_Store"] [unique_id "aPnpqdeFhDSmRPIKvC8wfgAA6uc"]
[Thu Oct 23 01:39:06 2025] [elconferencista.com] [error] [client 209.38.248.17:50878] [pid 101773] apache2_util.c(271): [client 209.38.248.17] ModSecurity: Warning. Matched phrase ".env" at REQUEST_FILENAME. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "143"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: .env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "elconferencista.com"] [uri "/.env"] [unique_id "aPnpqteFhDSmRPIKvC8wpgAA6z0"]
[Thu Oct 23 01:39:06 2025] [elconferencista.com] [error] [client 209.38.248.17:50884] [pid 101773] apache2_util.c(271): [client 209.38.248.17] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "143"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "elconferencista.com"] [uri "/.git/config"] [unique_id "aPnpqteFhDSmRPIKvC8wzAAA6o4"]
[Thu Oct 23 01:39:07 2025] [elconferencista.com] [warn] [client 209.38.208.202:55600] [pid 101773] fcgid_bridge.c(409): (104)Connection reset by peer: mod_fcgid: ap_pass_brigade failed in handle_request_ipc function
[Thu Oct 23 01:39:14 2025] [elconferencista.com] [error] [client 209.38.208.202:33544] [pid 101773] apache2_util.c(271): [client 209.38.208.202] ModSecurity: Warning. Matched phrase ".vscode" at REQUEST_FILENAME. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "143"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: .vscode found within REQUEST_FILENAME: /.vscode/sftp.json"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "www.elconferencista.com"] [uri "/.vscode/sftp.json"] [unique_id "aPnpsteFhDSmRPIKvC8xTgAA6uo"]
[Thu Oct 23 01:39:54 2025] [elconferencista.com] [error] [client 209.38.208.202:59776] [pid 266597] mod_access_compat.c(350): AH01797: client denied by server configuration: /home/ednermusika/elconferencista.com/info.php
[Thu Oct 23 01:39:55 2025] [elconferencista.com] [warn] [client 209.38.208.202:59762] [pid 266597] fcgid_bridge.c(409): (104)Connection reset by peer: mod_fcgid: ap_pass_brigade failed in handle_request_ipc function
[Thu Oct 23 01:40:07 2025] [elconferencista.com] [error] [client 45.148.10.95:37184] [pid 266597] apache2_util.c(271): [client 45.148.10.95] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "143"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "www.elconferencista.com"] [uri "/.git/config"] [unique_id "aPnp58sQ7h9IiZu9n0hzDQDqslw"]
[Thu Oct 23 01:40:10 2025] [elconferencista.com] [error] [client 45.148.10.95:37184] [pid 266597] apache2_util.c(271): [client 45.148.10.95] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "143"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "www.elconferencista.com"] [uri "/.git/config"] [unique_id "aPnp6ssQ7h9IiZu9n0hzEwDqv14"]
[Thu Oct 23 02:09:07 2025] [elconferencista.com] [error] [client 129.226.174.80:48022] [pid 266597] apache2_util.c(271): [client 129.226.174.80] ModSecurity: Warning. Pattern match "\\\\b(?:keep-alive|close),\\\\s?(?:keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "352"] [id "920210"] [msg "Multiple/Conflicting Connection Header Data Found"] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [hostname "www.elconferencista.com"] [uri "/"] [unique_id "aPnws8sQ7h9IiZu9n0h8oQAA6ws"]
[Thu Oct 23 04:14:16 2025] [elconferencista.com] [error] [client 160.187.211.130:55515] [pid 2032781] apache2_util.c(271): [client 160.187.211.130] ModSecurity: Warning. Matched phrase "Mozlila" at REQUEST_HEADERS:User-Agent. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-913-SCANNER-DETECTION.conf"] [line "56"] [id "913100"] [msg "Found User-Agent associated with security scanner"] [data "Matched Data: Mozlila found within REQUEST_HEADERS:User-Agent: Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-reputation-scanner"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/118/224/541/310"] [tag "PCI/6.5.10"] [hostname "www.elconferencista.com"] [uri "/admin.php"] [unique_id "aPoOCKkW9dg8UF-AkeZ45AABOSc"]
[Thu Oct 23 04:14:34 2025] [elconferencista.com] [error] [client 160.187.211.130:51078] [pid 2032781] apache2_util.c(271): [client 160.187.211.130] ModSecurity: Warning. Matched phrase "Mozlila" at REQUEST_HEADERS:User-Agent. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-913-SCANNER-DETECTION.conf"] [line "56"] [id "913100"] [msg "Found User-Agent associated with security scanner"] [data "Matched Data: Mozlila found within REQUEST_HEADERS:User-Agent: Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-reputation-scanner"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/118/224/541/310"] [tag "PCI/6.5.10"] [hostname "www.elconferencista.com"] [uri "/about.php"] [unique_id "aPoOGqkW9dg8UF-AkeZ48QABOUY"]
[Thu Oct 23 04:19:47 2025] [elconferencista.com] [error] [client 4.43.184.114:46523] [pid 2032781] ssl_engine_kernel.c(325): AH02032: Hostname missing.dreamhost.org (default host as no SNI was provided) and hostname www.elconferencista.com provided via HTTP have no compatible SSL setup
[Thu Oct 23 04:23:14 2025] [elconferencista.com] [error] [client 4.43.184.114:63002] [pid 2032781] ssl_engine_kernel.c(325): AH02032: Hostname missing.dreamhost.org (default host as no SNI was provided) and hostname www.elconferencista.com provided via HTTP have no compatible SSL setup
[Thu Oct 23 05:27:22 2025] [elconferencista.com] [error] [client 106.227.49.113:45195] [pid 2032781] apache2_util.c(271): [client 106.227.49.113] ModSecurity: Warning. Pattern match "\\\\b(?:keep-alive|close),\\\\s?(?:keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "352"] [id "920210"] [msg "Multiple/Conflicting Connection Header Data Found"] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [hostname "www.elconferencista.com"] [uri "/"] [unique_id "aPofKqkW9dg8UF-AkeaXJwABOQg"]
[Thu Oct 23 05:52:35 2025] [elconferencista.com] [error] [client 43.157.22.109:53342] [pid 2032781] apache2_util.c(271): [client 43.157.22.109] ModSecurity: Warning. Pattern match "\\\\b(?:keep-alive|close),\\\\s?(?:keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "352"] [id "920210"] [msg "Multiple/Conflicting Connection Header Data Found"] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [hostname "www.elconferencista.com"] [uri "/"] [unique_id "aPolE6kW9dg8UF-AkeaiBwABOII"]
[Thu Oct 23 06:26:29 2025] [elconferencista.com] [error] [client 43.166.226.57:53560] [pid 2032781] apache2_util.c(271): [client 43.166.226.57] ModSecurity: Warning. Pattern match "\\\\b(?:keep-alive|close),\\\\s?(?:keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "352"] [id "920210"] [msg "Multiple/Conflicting Connection Header Data Found"] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [hostname "www.elconferencista.com"] [uri "/"] [unique_id "aPotBakW9dg8UF-Akea2AgABOKQ"]
[Thu Oct 23 07:12:36 2025] [elconferencista.com] [error] [client 43.130.57.46:53610] [pid 499001] apache2_util.c(271): [client 43.130.57.46] ModSecurity: Warning. Pattern match "\\\\b(?:keep-alive|close),\\\\s?(?:keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "352"] [id "920210"] [msg "Multiple/Conflicting Connection Header Data Found"] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [hostname "www.elconferencista.com"] [uri "/"] [unique_id "aPo31HeOKxXX3Pmq7TBDPAAA6mo"]
[Thu Oct 23 07:14:38 2025] [elconferencista.com] [error] [client 170.106.72.178:57406] [pid 499001] apache2_util.c(271): [client 170.106.72.178] ModSecurity: Warning. Pattern match "\\\\b(?:keep-alive|close),\\\\s?(?:keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "352"] [id "920210"] [msg "Multiple/Conflicting Connection Header Data Found"] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [hostname "www.elconferencista.com"] [uri "/"] [unique_id "aPo4TneOKxXX3Pmq7TBD1wAA6sQ"]
[Thu Oct 23 08:24:23 2025] [elconferencista.com] [warn] [client 185.228.104.64:56716] [pid 499001] fcgid_bridge.c(409): (32)Broken pipe: mod_fcgid: ap_pass_brigade failed in handle_request_ipc function
[Thu Oct 23 08:24:23 2025] [elconferencista.com] [warn] [client 185.59.245.128:3814] [pid 499001] fcgid_bridge.c(409): (32)Broken pipe: mod_fcgid: ap_pass_brigade failed in handle_request_ipc function
[Thu Oct 23 08:29:20 2025] [elconferencista.com] [error] [client 4.43.184.114:34557] [pid 499001] ssl_engine_kernel.c(325): AH02032: Hostname missing.dreamhost.org (default host as no SNI was provided) and hostname www.elconferencista.com provided via HTTP have no compatible SSL setup
[Thu Oct 23 09:13:57 2025] [elconferencista.com] [error] [client 45.130.203.148:28201] [pid 1974035] apache2_util.c(271): [client 45.130.203.148] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "143"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/HEAD"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "www.elconferencista.com"] [uri "/.git/HEAD"] [unique_id "aPpURRVp2ekOE9x9FL6BjQABON0"]
[Thu Oct 23 09:52:01 2025] [elconferencista.com] [error] [client 146.120.78.26:55992] [pid 1974035] mod_access_compat.c(350): AH01797: client denied by server configuration: /home/ednermusika/elconferencista.com/wp-cli.php
[Thu Oct 23 09:52:05 2025] [elconferencista.com] [warn] [client 146.120.78.26:55996] [pid 1974035] fcgid_bridge.c(409): (32)Broken pipe: mod_fcgid: ap_pass_brigade failed in handle_request_ipc function
[Thu Oct 23 09:52:05 2025] [elconferencista.com] [warn] [client 146.120.78.26:55992] [pid 1974035] fcgid_bridge.c(409): (32)Broken pipe: mod_fcgid: ap_pass_brigade failed in handle_request_ipc function
[Thu Oct 23 09:53:57 2025] [elconferencista.com] [error] [client 45.143.236.208:2450] [pid 1974035] mod_access_compat.c(350): AH01797: client denied by server configuration: /home/ednermusika/elconferencista.com/wp-cli.php
[Thu Oct 23 09:54:01 2025] [elconferencista.com] [warn] [client 45.143.236.208:4698] [pid 1974035] fcgid_bridge.c(409): (32)Broken pipe: mod_fcgid: ap_pass_brigade failed in handle_request_ipc function
[Thu Oct 23 09:59:28 2025] [elconferencista.com] [error] [client 195.86.29.123:52827] [pid 1974035] apache2_util.c(271): [client 195.86.29.123] ModSecurity: Access denied with code 418 (phase 1). Pattern match "^Mozilla$" at REQUEST_HEADERS:User-Agent. [file "/etc/modsecurity/mod_sec3_CRS/99_dreamhost_rules.conf"] [line "153"] [id "1990107"] [msg "Bot UA - Mozilla"] [hostname "www.elconferencista.com"] [uri "/wp-login.php"] [unique_id "aPpe8BVp2ekOE9x9FL6WYwABOMw"]
[Thu Oct 23 11:30:14 2025] [elconferencista.com] [error] [client 43.166.240.231:55556] [pid 535888] apache2_util.c(271): [client 43.166.240.231] ModSecurity: Warning. Pattern match "\\\\b(?:keep-alive|close),\\\\s?(?:keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "352"] [id "920210"] [msg "Multiple/Conflicting Connection Header Data Found"] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [hostname "www.elconferencista.com"] [uri "/"] [unique_id "aPp0NueQwxfazTIyLNrLiwAA6yY"]
[Thu Oct 23 11:58:51 2025] [elconferencista.com] [warn] [client 217.107.125.27:10935] [pid 535888] fcgid_bridge.c(409): (32)Broken pipe: mod_fcgid: ap_pass_brigade failed in handle_request_ipc function
[Thu Oct 23 12:01:15 2025] [elconferencista.com] [warn] [client 91.215.90.61:14522] [pid 535888] fcgid_bridge.c(409): (32)Broken pipe: mod_fcgid: ap_pass_brigade failed in handle_request_ipc function
[Thu Oct 23 15:29:59 2025] [elconferencista.com] [error] [client 40.86.42.83:15172] [pid 2088888] mod_access_compat.c(350): AH01797: client denied by server configuration: /home/ednermusika/elconferencista.com/wp-admin/asasx.php
[Thu Oct 23 15:29:59 2025] [elconferencista.com] [error] [client 40.86.42.83:15172] [pid 2088888] mod_access_compat.c(350): AH01797: client denied by server configuration: /home/ednermusika/elconferencista.com/forbidden.html
[Thu Oct 23 15:29:59 2025] [elconferencista.com] [error] [client 40.86.42.83:15172] [pid 2088888] mod_access_compat.c(350): AH01797: client denied by server configuration: /home/ednermusika/elconferencista.com/wp-content/makeasmtp.php
[Thu Oct 23 15:29:59 2025] [elconferencista.com] [error] [client 40.86.42.83:15172] [pid 2088888] mod_access_compat.c(350): AH01797: client denied by server configuration: /home/ednermusika/elconferencista.com/forbidden.html
[Thu Oct 23 15:29:59 2025] [elconferencista.com] [error] [client 40.86.42.83:15172] [pid 2088888] mod_access_compat.c(350): AH01797: client denied by server configuration: /home/ednermusika/elconferencista.com/wp-content/classwithtostring.php
[Thu Oct 23 15:29:59 2025] [elconferencista.com] [error] [client 40.86.42.83:15172] [pid 2088888] mod_access_compat.c(350): AH01797: client denied by server configuration: /home/ednermusika/elconferencista.com/forbidden.html
[Thu Oct 23 15:29:59 2025] [elconferencista.com] [error] [client 40.86.42.83:15172] [pid 2088888] mod_access_compat.c(350): AH01797: client denied by server configuration: /home/ednermusika/elconferencista.com/wp-admin/alfa.php
[Thu Oct 23 15:29:59 2025] [elconferencista.com] [error] [client 40.86.42.83:15172] [pid 2088888] mod_access_compat.c(350): AH01797: client denied by server configuration: /home/ednermusika/elconferencista.com/forbidden.html
[Thu Oct 23 15:29:59 2025] [elconferencista.com] [error] [client 40.86.42.83:15172] [pid 2088888] mod_access_compat.c(350): AH01797: client denied by server configuration: /home/ednermusika/elconferencista.com/wp-content/function.php
[Thu Oct 23 15:29:59 2025] [elconferencista.com] [error] [client 40.86.42.83:15172] [pid 2088888] mod_access_compat.c(350): AH01797: client denied by server configuration: /home/ednermusika/elconferencista.com/forbidden.html
[Thu Oct 23 15:30:00 2025] [elconferencista.com] [error] [client 40.86.42.83:15172] [pid 2088888] mod_access_compat.c(350): AH01797: client denied by server configuration: /home/ednermusika/elconferencista.com/wp-content/bala.php
[Thu Oct 23 15:30:00 2025] [elconferencista.com] [error] [client 40.86.42.83:15172] [pid 2088888] mod_access_compat.c(350): AH01797: client denied by server configuration: /home/ednermusika/elconferencista.com/forbidden.html
[Thu Oct 23 15:30:00 2025] [elconferencista.com] [error] [client 40.86.42.83:15172] [pid 2088888] mod_access_compat.c(350): AH01797: client denied by server configuration: /home/ednermusika/elconferencista.com/wp-admin/atomlib.php
[Thu Oct 23 15:30:00 2025] [elconferencista.com] [error] [client 40.86.42.83:15172] [pid 2088888] mod_access_compat.c(350): AH01797: client denied by server configuration: /home/ednermusika/elconferencista.com/forbidden.html
[Thu Oct 23 15:30:00 2025] [elconferencista.com] [error] [client 40.86.42.83:15172] [pid 2088888] mod_access_compat.c(350): AH01797: client denied by server configuration: /home/ednermusika/elconferencista.com/wp-content/autoload_classmap
[Thu Oct 23 15:30:00 2025] [elconferencista.com] [error] [client 40.86.42.83:15172] [pid 2088888] mod_access_compat.c(350): AH01797: client denied by server configuration: /home/ednermusika/elconferencista.com/forbidden.html
[Thu Oct 23 15:30:00 2025] [elconferencista.com] [error] [client 40.86.42.83:15172] [pid 2088888] mod_access_compat.c(350): AH01797: client denied by server configuration: /home/ednermusika/elconferencista.com/wp-content/flower.php
[Thu Oct 23 15:30:00 2025] [elconferencista.com] [error] [client 40.86.42.83:15172] [pid 2088888] mod_access_compat.c(350): AH01797: client denied by server configuration: /home/ednermusika/elconferencista.com/forbidden.html
[Thu Oct 23 15:30:00 2025] [elconferencista.com] [error] [client 40.86.42.83:15172] [pid 2088888] mod_access_compat.c(350): AH01797: client denied by server configuration: /home/ednermusika/elconferencista.com/wp-content/goat.php
[Thu Oct 23 15:30:00 2025] [elconferencista.com] [error] [client 40.86.42.83:15172] [pid 2088888] mod_access_compat.c(350): AH01797: client denied by server configuration: /home/ednermusika/elconferencista.com/forbidden.html
[Thu Oct 23 15:30:00 2025] [elconferencista.com] [error] [client 40.86.42.83:15172] [pid 2088888] mod_access_compat.c(350): AH01797: client denied by server configuration: /home/ednermusika/elconferencista.com/wp-admin/ab.php
[Thu Oct 23 15:30:00 2025] [elconferencista.com] [error] [client 40.86.42.83:15172] [pid 2088888] mod_access_compat.c(350): AH01797: client denied by server configuration: /home/ednermusika/elconferencista.com/forbidden.html
[Thu Oct 23 15:30:00 2025] [elconferencista.com] [error] [client 40.86.42.83:15172] [pid 2088888] mod_access_compat.c(350): AH01797: client denied by server configuration: /home/ednermusika/elconferencista.com/wp-admin/install.php
[Thu Oct 23 15:30:00 2025] [elconferencista.com] [error] [client 40.86.42.83:15172] [pid 2088888] mod_access_compat.c(350): AH01797: client denied by server configuration: /home/ednermusika/elconferencista.com/forbidden.html
[Thu Oct 23 15:30:00 2025] [elconferencista.com] [error] [client 40.86.42.83:15172] [pid 2088888] mod_access_compat.c(350): AH01797: client denied by server configuration: /home/ednermusika/elconferencista.com/wp-admin/akc.php
[Thu Oct 23 15:30:00 2025] [elconferencista.com] [error] [client 40.86.42.83:15172] [pid 2088888] mod_access_compat.c(350): AH01797: client denied by server configuration: /home/ednermusika/elconferencista.com/forbidden.html
[Thu Oct 23 15:30:00 2025] [elconferencista.com] [error] [client 40.86.42.83:15172] [pid 2088888] mod_access_compat.c(350): AH01797: client denied by server configuration: /home/ednermusika/elconferencista.com/wp-content/aa.php
[Thu Oct 23 15:30:00 2025] [elconferencista.com] [error] [client 40.86.42.83:15172] [pid 2088888] mod_access_compat.c(350): AH01797: client denied by server configuration: /home/ednermusika/elconferencista.com/forbidden.html
[Thu Oct 23 15:30:00 2025] [elconferencista.com] [error] [client 40.86.42.83:15172] [pid 2088888] mod_access_compat.c(350): AH01797: client denied by server configuration: /home/ednermusika/elconferencista.com/wp-content/lock360.php
[Thu Oct 23 15:30:00 2025] [elconferencista.com] [error] [client 40.86.42.83:15172] [pid 2088888] mod_access_compat.c(350): AH01797: client denied by server configuration: /home/ednermusika/elconferencista.com/forbidden.html
[Thu Oct 23 15:30:01 2025] [elconferencista.com] [error] [client 40.86.42.83:15172] [pid 2088888] mod_access_compat.c(350): AH01797: client denied by server configuration: /home/ednermusika/elconferencista.com/wp-admin/file2.php
[Thu Oct 23 15:30:01 2025] [elconferencista.com] [error] [client 40.86.42.83:15172] [pid 2088888] mod_access_compat.c(350): AH01797: client denied by server configuration: /home/ednermusika/elconferencista.com/forbidden.html
[Thu Oct 23 15:30:01 2025] [elconferencista.com] [error] [client 40.86.42.83:15172] [pid 2088888] mod_access_compat.c(350): AH01797: client denied by server configuration: /home/ednermusika/elconferencista.com/wp-admin/wsa.php
[Thu Oct 23 15:30:01 2025] [elconferencista.com] [error] [client 40.86.42.83:15172] [pid 2088888] mod_access_compat.c(350): AH01797: client denied by server configuration: /home/ednermusika/elconferencista.com/forbidden.html
[Thu Oct 23 15:30:01 2025] [elconferencista.com] [error] [client 40.86.42.83:15172] [pid 2088888] mod_access_compat.c(350): AH01797: client denied by server configuration: /home/ednermusika/elconferencista.com/wp-admin/mm.php
[Thu Oct 23 15:30:01 2025] [elconferencista.com] [error] [client 40.86.42.83:15172] [pid 2088888] mod_access_compat.c(350): AH01797: client denied by server configuration: /home/ednermusika/elconferencista.com/forbidden.html
[Thu Oct 23 15:30:01 2025] [elconferencista.com] [error] [client 40.86.42.83:15172] [pid 2088888] mod_access_compat.c(350): AH01797: client denied by server configuration: /home/ednermusika/elconferencista.com/wp-admin/wp.php
[Thu Oct 23 15:30:01 2025] [elconferencista.com] [error] [client 40.86.42.83:15172] [pid 2088888] mod_access_compat.c(350): AH01797: client denied by server configuration: /home/ednermusika/elconferencista.com/forbidden.html
[Thu Oct 23 15:30:01 2025] [elconferencista.com] [error] [client 40.86.42.83:15172] [pid 2088888] mod_access_compat.c(350): AH01797: client denied by server configuration: /home/ednermusika/elconferencista.com/wp-admin/abcd.php
[Thu Oct 23 15:30:01 2025] [elconferencista.com] [error] [client 40.86.42.83:15172] [pid 2088888] mod_access_compat.c(350): AH01797: client denied by server configuration: /home/ednermusika/elconferencista.com/forbidden.html
[Thu Oct 23 15:30:01 2025] [elconferencista.com] [error] [client 40.86.42.83:15172] [pid 2088888] mod_access_compat.c(350): AH01797: client denied by server configuration: /home/ednermusika/elconferencista.com/wp-admin/lock360.php
[Thu Oct 23 15:30:01 2025] [elconferencista.com] [error] [client 40.86.42.83:15172] [pid 2088888] mod_access_compat.c(350): AH01797: client denied by server configuration: /home/ednermusika/elconferencista.com/forbidden.html
[Thu Oct 23 15:30:01 2025] [elconferencista.com] [error] [client 40.86.42.83:15172] [pid 2088888] mod_access_compat.c(350): AH01797: client denied by server configuration: /home/ednermusika/elconferencista.com/wp-content/ioxi-o.php
[Thu Oct 23 15:30:01 2025] [elconferencista.com] [error] [client 40.86.42.83:15172] [pid 2088888] mod_access_compat.c(350): AH01797: client denied by server configuration: /home/ednermusika/elconferencista.com/forbidden.html
[Thu Oct 23 15:30:01 2025] [elconferencista.com] [error] [client 40.86.42.83:15172] [pid 2088888] mod_access_compat.c(350): AH01797: client denied by server configuration: /home/ednermusika/elconferencista.com/wp-content/abcd.php
[Thu Oct 23 15:30:01 2025] [elconferencista.com] [error] [client 40.86.42.83:15172] [pid 2088888] mod_access_compat.c(350): AH01797: client denied by server configuration: /home/ednermusika/elconferencista.com/forbidden.html
[Thu Oct 23 15:30:01 2025] [elconferencista.com] [error] [client 40.86.42.83:15172] [pid 2088888] mod_access_compat.c(350): AH01797: client denied by server configuration: /home/ednermusika/elconferencista.com/wp-content/ova.php
[Thu Oct 23 15:30:01 2025] [elconferencista.com] [error] [client 40.86.42.83:15172] [pid 2088888] mod_access_compat.c(350): AH01797: client denied by server configuration: /home/ednermusika/elconferencista.com/forbidden.html
[Thu Oct 23 15:30:02 2025] [elconferencista.com] [error] [client 40.86.42.83:15172] [pid 2088888] mod_access_compat.c(350): AH01797: client denied by server configuration: /home/ednermusika/elconferencista.com/wp-admin/classwithtostring.php
[Thu Oct 23 15:30:02 2025] [elconferencista.com] [error] [client 40.86.42.83:15172] [pid 2088888] mod_access_compat.c(350): AH01797: client denied by server configuration: /home/ednermusika/elconferencista.com/forbidden.html
[Thu Oct 23 15:30:02 2025] [elconferencista.com] [error] [client 40.86.42.83:15172] [pid 2088888] mod_access_compat.c(350): AH01797: client denied by server configuration: /home/ednermusika/elconferencista.com/wp-admin/function.php
[Thu Oct 23 15:30:02 2025] [elconferencista.com] [error] [client 40.86.42.83:15172] [pid 2088888] mod_access_compat.c(350): AH01797: client denied by server configuration: /home/ednermusika/elconferencista.com/forbidden.html
[Thu Oct 23 15:30:02 2025] [elconferencista.com] [error] [client 40.86.42.83:15172] [pid 2088888] mod_access_compat.c(350): AH01797: client denied by server configuration: /home/ednermusika/elconferencista.com/wp-admin/moon.php
[Thu Oct 23 15:30:02 2025] [elconferencista.com] [error] [client 40.86.42.83:15172] [pid 2088888] mod_access_compat.c(350): AH01797: client denied by server configuration: /home/ednermusika/elconferencista.com/forbidden.html
[Thu Oct 23 15:30:02 2025] [elconferencista.com] [error] [client 40.86.42.83:15172] [pid 2088888] mod_access_compat.c(350): AH01797: client denied by server configuration: /home/ednermusika/elconferencista.com/wp-content/wp.php
[Thu Oct 23 15:30:02 2025] [elconferencista.com] [error] [client 40.86.42.83:15172] [pid 2088888] mod_access_compat.c(350): AH01797: client denied by server configuration: /home/ednermusika/elconferencista.com/forbidden.html
[Thu Oct 23 15:30:02 2025] [elconferencista.com] [error] [client 40.86.42.83:15172] [pid 2088888] mod_access_compat.c(350): AH01797: client denied by server configuration: /home/ednermusika/elconferencista.com/wp-content/w.php
[Thu Oct 23 15:30:02 2025] [elconferencista.com] [error] [client 40.86.42.83:15172] [pid 2088888] mod_access_compat.c(350): AH01797: client denied by server configuration: /home/ednermusika/elconferencista.com/forbidden.html
[Thu Oct 23 15:30:02 2025] [elconferencista.com] [error] [client 40.86.42.83:15172] [pid 2088888] mod_access_compat.c(350): AH01797: client denied by server configuration: /home/ednermusika/elconferencista.com/wp-content/moon.php
[Thu Oct 23 15:30:02 2025] [elconferencista.com] [error] [client 40.86.42.83:15172] [pid 2088888] mod_access_compat.c(350): AH01797: client denied by server configuration: /home/ednermusika/elconferencista.com/forbidden.html
[Thu Oct 23 15:30:02 2025] [elconferencista.com] [error] [client 40.86.42.83:15172] [pid 2088888] mod_access_compat.c(350): AH01797: client denied by server configuration: /home/ednermusika/elconferencista.com/wp-content/gecko.php
[Thu Oct 23 15:30:02 2025] [elconferencista.com] [error] [client 40.86.42.83:15172] [pid 2088888] mod_access_compat.c(350): AH01797: client denied by server configuration: /home/ednermusika/elconferencista.com/forbidden.html
[Thu Oct 23 15:30:02 2025] [elconferencista.com] [error] [client 40.86.42.83:15172] [pid 2088888] mod_access_compat.c(350): AH01797: client denied by server configuration: /home/ednermusika/elconferencista.com/wp-admin/flower.php
[Thu Oct 23 15:30:02 2025] [elconferencista.com] [error] [client 40.86.42.83:15172] [pid 2088888] mod_access_compat.c(350): AH01797: client denied by server configuration: /home/ednermusika/elconferencista.com/forbidden.html
[Thu Oct 23 15:30:02 2025] [elconferencista.com] [error] [client 40.86.42.83:15172] [pid 2088888] mod_access_compat.c(350): AH01797: client denied by server configuration: /home/ednermusika/elconferencista.com/wp-admin/buy.php
[Thu Oct 23 15:30:02 2025] [elconferencista.com] [error] [client 40.86.42.83:15172] [pid 2088888] mod_access_compat.c(350): AH01797: client denied by server configuration: /home/ednermusika/elconferencista.com/forbidden.html
[Thu Oct 23 15:30:03 2025] [elconferencista.com] [error] [client 40.86.42.83:15172] [pid 2088888] mod_access_compat.c(350): AH01797: client denied by server configuration: /home/ednermusika/elconferencista.com/wp-content/ab.php
[Thu Oct 23 15:30:03 2025] [elconferencista.com] [error] [client 40.86.42.83:15172] [pid 2088888] mod_access_compat.c(350): AH01797: client denied by server configuration: /home/ednermusika/elconferencista.com/forbidden.html
[Thu Oct 23 15:30:03 2025] [elconferencista.com] [error] [client 40.86.42.83:15172] [pid 2088888] mod_access_compat.c(350): AH01797: client denied by server configuration: /home/ednermusika/elconferencista.com/wp-content/tinyfilemanager.php
[Thu Oct 23 15:30:03 2025] [elconferencista.com] [error] [client 40.86.42.83:15172] [pid 2088888] mod_access_compat.c(350): AH01797: client denied by server configuration: /home/ednermusika/elconferencista.com/forbidden.html
[Thu Oct 23 15:30:03 2025] [elconferencista.com] [error] [client 40.86.42.83:15172] [pid 2088888] mod_access_compat.c(350): AH01797: client denied by server configuration: /home/ednermusika/elconferencista.com/wp-content/edit.php
[Thu Oct 23 15:30:03 2025] [elconferencista.com] [error] [client 40.86.42.83:15172] [pid 2088888] mod_access_compat.c(350): AH01797: client denied by server configuration: /home/ednermusika/elconferencista.com/forbidden.html
[Thu Oct 23 15:30:03 2025] [elconferencista.com] [error] [client 40.86.42.83:15172] [pid 2088888] mod_access_compat.c(350): AH01797: client denied by server configuration: /home/ednermusika/elconferencista.com/wp-content/admin.php
[Thu Oct 23 15:30:03 2025] [elconferencista.com] [error] [client 40.86.42.83:15172] [pid 2088888] mod_access_compat.c(350): AH01797: client denied by server configuration: /home/ednermusika/elconferencista.com/forbidden.html
[Thu Oct 23 15:30:03 2025] [elconferencista.com] [error] [client 40.86.42.83:15172] [pid 2088888] mod_access_compat.c(350): AH01797: client denied by server configuration: /home/ednermusika/elconferencista.com/wp-admin/cong.php
[Thu Oct 23 15:30:03 2025] [elconferencista.com] [error] [client 40.86.42.83:15172] [pid 2088888] mod_access_compat.c(350): AH01797: client denied by server configuration: /home/ednermusika/elconferencista.com/forbidden.html
[Thu Oct 23 15:30:03 2025] [elconferencista.com] [error] [client 40.86.42.83:15172] [pid 2088888] mod_access_compat.c(350): AH01797: client denied by server configuration: /home/ednermusika/elconferencista.com/wp-admin/autoload_classmap.php
[Thu Oct 23 15:30:03 2025] [elconferencista.com] [error] [client 40.86.42.83:15172] [pid 2088888] mod_access_compat.c(350): AH01797: client denied by server configuration: /home/ednermusika/elconferencista.com/forbidden.html
[Thu Oct 23 15:30:03 2025] [elconferencista.com] [error] [client 40.86.42.83:15172] [pid 2088888] mod_access_compat.c(350): AH01797: client denied by server configuration: /home/ednermusika/elconferencista.com/wp-admin/file.php
[Thu Oct 23 15:30:03 2025] [elconferencista.com] [error] [client 40.86.42.83:15172] [pid 2088888] mod_access_compat.c(350): AH01797: client denied by server configuration: /home/ednermusika/elconferencista.com/forbidden.html
[Thu Oct 23 15:30:03 2025] [elconferencista.com] [error] [client 40.86.42.83:15172] [pid 2088888] mod_access_compat.c(350): AH01797: client denied by server configuration: /home/ednermusika/elconferencista.com/wp-content/cong.php
[Thu Oct 23 15:30:03 2025] [elconferencista.com] [error] [client 40.86.42.83:15172] [pid 2088888] mod_access_compat.c(350): AH01797: client denied by server configuration: /home/ednermusika/elconferencista.com/forbidden.html
[Thu Oct 23 15:30:03 2025] [elconferencista.com] [error] [client 40.86.42.83:15172] [pid 2088888] mod_access_compat.c(350): AH01797: client denied by server configuration: /home/ednermusika/elconferencista.com/wp-admin/edit.php
[Thu Oct 23 15:30:03 2025] [elconferencista.com] [error] [client 40.86.42.83:15172] [pid 2088888] mod_access_compat.c(350): AH01797: client denied by server configuration: /home/ednermusika/elconferencista.com/forbidden.html
[Thu Oct 23 15:30:03 2025] [elconferencista.com] [error] [client 40.86.42.83:15172] [pid 2088888] mod_access_compat.c(350): AH01797: client denied by server configuration: /home/ednermusika/elconferencista.com/wp-content/atomlib.php
[Thu Oct 23 15:30:03 2025] [elconferencista.com] [error] [client 40.86.42.83:15172] [pid 2088888] mod_access_compat.c(350): AH01797: client denied by server configuration: /home/ednermusika/elconferencista.com/forbidden.html
[Thu Oct 23 15:30:04 2025] [elconferencista.com] [error] [client 40.86.42.83:15172] [pid 2088888] mod_access_compat.c(350): AH01797: client denied by server configuration: /home/ednermusika/elconferencista.com/wp-admin/users.php
[Thu Oct 23 15:30:04 2025] [elconferencista.com] [error] [client 40.86.42.83:15172] [pid 2088888] mod_access_compat.c(350): AH01797: client denied by server configuration: /home/ednermusika/elconferencista.com/forbidden.html
[Thu Oct 23 15:30:04 2025] [elconferencista.com] [error] [client 40.86.42.83:15172] [pid 2088888] mod_access_compat.c(350): AH01797: client denied by server configuration: /home/ednermusika/elconferencista.com/wp-content/autoload_classmap.php
[Thu Oct 23 15:30:04 2025] [elconferencista.com] [error] [client 40.86.42.83:15172] [pid 2088888] mod_access_compat.c(350): AH01797: client denied by server configuration: /home/ednermusika/elconferencista.com/forbidden.html
[Thu Oct 23 15:30:04 2025] [elconferencista.com] [error] [client 40.86.42.83:15172] [pid 2088888] mod_access_compat.c(350): AH01797: client denied by server configuration: /home/ednermusika/elconferencista.com/wp-admin/makeasmtp.php
[Thu Oct 23 15:30:04 2025] [elconferencista.com] [error] [client 40.86.42.83:15172] [pid 2088888] mod_access_compat.c(350): AH01797: client denied by server configuration: /home/ednermusika/elconferencista.com/forbidden.html
[Thu Oct 23 15:30:04 2025] [elconferencista.com] [error] [client 40.86.42.83:15172] [pid 2088888] mod_access_compat.c(350): AH01797: client denied by server configuration: /home/ednermusika/elconferencista.com/wp-admin/w.php
[Thu Oct 23 15:30:04 2025] [elconferencista.com] [error] [client 40.86.42.83:15172] [pid 2088888] mod_access_compat.c(350): AH01797: client denied by server configuration: /home/ednermusika/elconferencista.com/forbidden.html
[Thu Oct 23 15:30:04 2025] [elconferencista.com] [error] [client 40.86.42.83:15172] [pid 2088888] mod_access_compat.c(350): AH01797: client denied by server configuration: /home/ednermusika/elconferencista.com/wp-content/goods.php
[Thu Oct 23 15:30:04 2025] [elconferencista.com] [error] [client 40.86.42.83:15172] [pid 2088888] mod_access_compat.c(350): AH01797: client denied by server configuration: /home/ednermusika/elconferencista.com/forbidden.html
[Thu Oct 23 15:30:04 2025] [elconferencista.com] [error] [client 40.86.42.83:15172] [pid 2088888] mod_access_compat.c(350): AH01797: client denied by server configuration: /home/ednermusika/elconferencista.com/wp-content/buy.php
[Thu Oct 23 15:30:04 2025] [elconferencista.com] [error] [client 40.86.42.83:15172] [pid 2088888] mod_access_compat.c(350): AH01797: client denied by server configuration: /home/ednermusika/elconferencista.com/forbidden.html
[Thu Oct 23 15:30:04 2025] [elconferencista.com] [error] [client 40.86.42.83:15172] [pid 2088888] mod_access_compat.c(350): AH01797: client denied by server configuration: /home/ednermusika/elconferencista.com/wp-admin/chosen.php
[Thu Oct 23 15:30:04 2025] [elconferencista.com] [error] [client 40.86.42.83:15172] [pid 2088888] mod_access_compat.c(350): AH01797: client denied by server configuration: /home/ednermusika/elconferencista.com/forbidden.html
[Thu Oct 23 15:30:04 2025] [elconferencista.com] [error] [client 40.86.42.83:15172] [pid 2088888] mod_access_compat.c(350): AH01797: client denied by server configuration: /home/ednermusika/elconferencista.com/wp-admin/goat.php
[Thu Oct 23 15:30:04 2025] [elconferencista.com] [error] [client 40.86.42.83:15172] [pid 2088888] mod_access_compat.c(350): AH01797: client denied by server configuration: /home/ednermusika/elconferencista.com/forbidden.html
[Thu Oct 23 15:30:04 2025] [elconferencista.com] [error] [client 40.86.42.83:15172] [pid 2088888] mod_access_compat.c(350): AH01797: client denied by server configuration: /home/ednermusika/elconferencista.com/wp-content/about.php
[Thu Oct 23 15:30:04 2025] [elconferencista.com] [error] [client 40.86.42.83:15172] [pid 2088888] mod_access_compat.c(350): AH01797: client denied by server configuration: /home/ednermusika/elconferencista.com/forbidden.html
[Thu Oct 23 15:30:04 2025] [elconferencista.com] [error] [client 40.86.42.83:15172] [pid 2088888] mod_access_compat.c(350): AH01797: client denied by server configuration: /home/ednermusika/elconferencista.com/wp-admin/index.php
[Thu Oct 23 15:30:04 2025] [elconferencista.com] [error] [client 40.86.42.83:15172] [pid 2088888] mod_access_compat.c(350): AH01797: client denied by server configuration: /home/ednermusika/elconferencista.com/forbidden.html
[Thu Oct 23 15:30:05 2025] [elconferencista.com] [error] [client 40.86.42.83:15172] [pid 2088888] mod_access_compat.c(350): AH01797: client denied by server configuration: /home/ednermusika/elconferencista.com/wp-content/asasx.php
[Thu Oct 23 15:30:05 2025] [elconferencista.com] [error] [client 40.86.42.83:15172] [pid 2088888] mod_access_compat.c(350): AH01797: client denied by server configuration: /home/ednermusika/elconferencista.com/forbidden.html
[Thu Oct 23 15:30:05 2025] [elconferencista.com] [error] [client 40.86.42.83:15172] [pid 2088888] mod_access_compat.c(350): AH01797: client denied by server configuration: /home/ednermusika/elconferencista.com/wp-admin/gecko.php
[Thu Oct 23 15:30:05 2025] [elconferencista.com] [error] [client 40.86.42.83:15172] [pid 2088888] mod_access_compat.c(350): AH01797: client denied by server configuration: /home/ednermusika/elconferencista.com/forbidden.html
[Thu Oct 23 15:30:05 2025] [elconferencista.com] [error] [client 40.86.42.83:15172] [pid 2088888] mod_access_compat.c(350): AH01797: client denied by server configuration: /home/ednermusika/elconferencista.com/wp-content/install.php
[Thu Oct 23 15:30:05 2025] [elconferencista.com] [error] [client 40.86.42.83:15172] [pid 2088888] mod_access_compat.c(350): AH01797: client denied by server configuration: /home/ednermusika/elconferencista.com/forbidden.html
[Thu Oct 23 15:30:05 2025] [elconferencista.com] [error] [client 40.86.42.83:15172] [pid 2088888] mod_access_compat.c(350): AH01797: client denied by server configuration: /home/ednermusika/elconferencista.com/wp-content/users.php
[Thu Oct 23 15:30:05 2025] [elconferencista.com] [error] [client 40.86.42.83:15172] [pid 2088888] mod_access_compat.c(350): AH01797: client denied by server configuration: /home/ednermusika/elconferencista.com/forbidden.html
[Thu Oct 23 15:30:05 2025] [elconferencista.com] [error] [client 40.86.42.83:15172] [pid 2088888] mod_access_compat.c(350): AH01797: client denied by server configuration: /home/ednermusika/elconferencista.com/wp-content/alfa.php
[Thu Oct 23 15:30:05 2025] [elconferencista.com] [error] [client 40.86.42.83:15172] [pid 2088888] mod_access_compat.c(350): AH01797: client denied by server configuration: /home/ednermusika/elconferencista.com/forbidden.html
[Thu Oct 23 15:30:05 2025] [elconferencista.com] [error] [client 40.86.42.83:15172] [pid 2088888] mod_access_compat.c(350): AH01797: client denied by server configuration: /home/ednermusika/elconferencista.com/wp-content/chosen.php
[Thu Oct 23 15:30:05 2025] [elconferencista.com] [error] [client 40.86.42.83:15172] [pid 2088888] mod_access_compat.c(350): AH01797: client denied by server configuration: /home/ednermusika/elconferencista.com/forbidden.html
[Thu Oct 23 15:30:05 2025] [elconferencista.com] [error] [client 40.86.42.83:15172] [pid 2088888] mod_access_compat.c(350): AH01797: client denied by server configuration: /home/ednermusika/elconferencista.com/wp-content/akc.php
[Thu Oct 23 15:30:05 2025] [elconferencista.com] [error] [client 40.86.42.83:15172] [pid 2088888] mod_access_compat.c(350): AH01797: client denied by server configuration: /home/ednermusika/elconferencista.com/forbidden.html
[Thu Oct 23 15:30:05 2025] [elconferencista.com] [error] [client 40.86.42.83:15172] [pid 2088888] mod_access_compat.c(350): AH01797: client denied by server configuration: /home/ednermusika/elconferencista.com/wp-admin/goods.php
[Thu Oct 23 15:30:05 2025] [elconferencista.com] [error] [client 40.86.42.83:15172] [pid 2088888] mod_access_compat.c(350): AH01797: client denied by server configuration: /home/ednermusika/elconferencista.com/forbidden.html
[Thu Oct 23 15:30:05 2025] [elconferencista.com] [error] [client 40.86.42.83:15172] [pid 2088888] mod_access_compat.c(350): AH01797: client denied by server configuration: /home/ednermusika/elconferencista.com/wp-admin/bala.php
[Thu Oct 23 15:30:05 2025] [elconferencista.com] [error] [client 40.86.42.83:15172] [pid 2088888] mod_access_compat.c(350): AH01797: client denied by server configuration: /home/ednermusika/elconferencista.com/forbidden.html
[Thu Oct 23 15:30:06 2025] [elconferencista.com] [error] [client 40.86.42.83:15172] [pid 2088888] mod_access_compat.c(350): AH01797: client denied by server configuration: /home/ednermusika/elconferencista.com/wp-content/file.php
[Thu Oct 23 15:30:06 2025] [elconferencista.com] [error] [client 40.86.42.83:15172] [pid 2088888] mod_access_compat.c(350): AH01797: client denied by server configuration: /home/ednermusika/elconferencista.com/forbidden.html
[Thu Oct 23 15:30:06 2025] [elconferencista.com] [error] [client 40.86.42.83:15172] [pid 2088888] mod_access_compat.c(350): AH01797: client denied by server configuration: /home/ednermusika/elconferencista.com/wp-admin/aa.php
[Thu Oct 23 15:30:06 2025] [elconferencista.com] [error] [client 40.86.42.83:15172] [pid 2088888] mod_access_compat.c(350): AH01797: client denied by server configuration: /home/ednermusika/elconferencista.com/forbidden.html
[Thu Oct 23 15:30:06 2025] [elconferencista.com] [error] [client 40.86.42.83:15172] [pid 2088888] mod_access_compat.c(350): AH01797: client denied by server configuration: /home/ednermusika/elconferencista.com/wp-admin/autoload_classmap
[Thu Oct 23 15:30:06 2025] [elconferencista.com] [error] [client 40.86.42.83:15172] [pid 2088888] mod_access_compat.c(350): AH01797: client denied by server configuration: /home/ednermusika/elconferencista.com/forbidden.html
[Thu Oct 23 15:30:06 2025] [elconferencista.com] [error] [client 40.86.42.83:15172] [pid 2088888] mod_access_compat.c(350): AH01797: client denied by server configuration: /home/ednermusika/elconferencista.com/wp-admin/about.php
[Thu Oct 23 15:30:06 2025] [elconferencista.com] [error] [client 40.86.42.83:15172] [pid 2088888] mod_access_compat.c(350): AH01797: client denied by server configuration: /home/ednermusika/elconferencista.com/forbidden.html
[Thu Oct 23 15:30:06 2025] [elconferencista.com] [error] [client 40.86.42.83:15172] [pid 2088888] mod_access_compat.c(350): AH01797: client denied by server configuration: /home/ednermusika/elconferencista.com/wp-admin/ioxi-o.php
[Thu Oct 23 15:30:06 2025] [elconferencista.com] [error] [client 40.86.42.83:15172] [pid 2088888] mod_access_compat.c(350): AH01797: client denied by server configuration: /home/ednermusika/elconferencista.com/forbidden.html
[Thu Oct 23 15:30:06 2025] [elconferencista.com] [error] [client 40.86.42.83:15172] [pid 2088888] mod_access_compat.c(350): AH01797: client denied by server configuration: /home/ednermusika/elconferencista.com/wp-admin/ova.php
[Thu Oct 23 15:30:06 2025] [elconferencista.com] [error] [client 40.86.42.83:15172] [pid 2088888] mod_access_compat.c(350): AH01797: client denied by server configuration: /home/ednermusika/elconferencista.com/forbidden.html
[Thu Oct 23 15:30:06 2025] [elconferencista.com] [error] [client 40.86.42.83:15172] [pid 2088888] mod_access_compat.c(350): AH01797: client denied by server configuration: /home/ednermusika/elconferencista.com/wp-content/wsa.php
[Thu Oct 23 15:30:06 2025] [elconferencista.com] [error] [client 40.86.42.83:15172] [pid 2088888] mod_access_compat.c(350): AH01797: client denied by server configuration: /home/ednermusika/elconferencista.com/forbidden.html
[Thu Oct 23 15:30:06 2025] [elconferencista.com] [error] [client 40.86.42.83:15172] [pid 2088888] mod_access_compat.c(350): AH01797: client denied by server configuration: /home/ednermusika/elconferencista.com/wp-content/file2.php
[Thu Oct 23 15:30:06 2025] [elconferencista.com] [error] [client 40.86.42.83:15172] [pid 2088888] mod_access_compat.c(350): AH01797: client denied by server configuration: /home/ednermusika/elconferencista.com/forbidden.html
[Thu Oct 23 15:30:06 2025] [elconferencista.com] [error] [client 40.86.42.83:15172] [pid 2088888] mod_access_compat.c(350): AH01797: client denied by server configuration: /home/ednermusika/elconferencista.com/wp-admin/admin.php
[Thu Oct 23 15:30:06 2025] [elconferencista.com] [error] [client 40.86.42.83:15172] [pid 2088888] mod_access_compat.c(350): AH01797: client denied by server configuration: /home/ednermusika/elconferencista.com/forbidden.html
[Thu Oct 23 15:30:06 2025] [elconferencista.com] [error] [client 40.86.42.83:15172] [pid 2088888] mod_access_compat.c(350): AH01797: client denied by server configuration: /home/ednermusika/elconferencista.com/wp-content/index.php
[Thu Oct 23 15:30:06 2025] [elconferencista.com] [error] [client 40.86.42.83:15172] [pid 2088888] mod_access_compat.c(350): AH01797: client denied by server configuration: /home/ednermusika/elconferencista.com/forbidden.html
[Thu Oct 23 15:30:07 2025] [elconferencista.com] [error] [client 40.86.42.83:15172] [pid 2088888] mod_access_compat.c(350): AH01797: client denied by server configuration: /home/ednermusika/elconferencista.com/wp-content/mm.php
[Thu Oct 23 15:30:07 2025] [elconferencista.com] [error] [client 40.86.42.83:15172] [pid 2088888] mod_access_compat.c(350): AH01797: client denied by server configuration: /home/ednermusika/elconferencista.com/forbidden.html
[Thu Oct 23 15:30:07 2025] [elconferencista.com] [error] [client 40.86.42.83:15172] [pid 2088888] mod_access_compat.c(350): AH01797: client denied by server configuration: /home/ednermusika/elconferencista.com/wp-admin/tinyfilemanager.php
[Thu Oct 23 15:30:07 2025] [elconferencista.com] [error] [client 40.86.42.83:15172] [pid 2088888] mod_access_compat.c(350): AH01797: client denied by server configuration: /home/ednermusika/elconferencista.com/forbidden.html
[Thu Oct 23 15:30:07 2025] [elconferencista.com] [error] [client 40.86.42.83:15172] [pid 2088888] mod_access_compat.c(350): AH01797: client denied by server configuration: /home/ednermusika/elconferencista.com/aa.php
[Thu Oct 23 15:30:07 2025] [elconferencista.com] [error] [client 40.86.42.83:15172] [pid 2088888] mod_access_compat.c(350): AH01797: client denied by server configuration: /home/ednermusika/elconferencista.com/forbidden.html
[Thu Oct 23 15:30:07 2025] [elconferencista.com] [error] [client 40.86.42.83:15172] [pid 2088888] mod_access_compat.c(350): AH01797: client denied by server configuration: /home/ednermusika/elconferencista.com/abcd.php
[Thu Oct 23 15:30:07 2025] [elconferencista.com] [error] [client 40.86.42.83:15172] [pid 2088888] mod_access_compat.c(350): AH01797: client denied by server configuration: /home/ednermusika/elconferencista.com/forbidden.html
[Thu Oct 23 15:30:07 2025] [elconferencista.com] [error] [client 40.86.42.83:15172] [pid 2088888] mod_access_compat.c(350): AH01797: client denied by server configuration: /home/ednermusika/elconferencista.com/about.php
[Thu Oct 23 15:30:07 2025] [elconferencista.com] [error] [client 40.86.42.83:15172] [pid 2088888] mod_access_compat.c(350): AH01797: client denied by server configuration: /home/ednermusika/elconferencista.com/forbidden.html
[Thu Oct 23 15:30:07 2025] [elconferencista.com] [error] [client 40.86.42.83:15172] [pid 2088888] mod_access_compat.c(350): AH01797: client denied by server configuration: /home/ednermusika/elconferencista.com/admin.php
[Thu Oct 23 15:30:07 2025] [elconferencista.com] [error] [client 40.86.42.83:15172] [pid 2088888] mod_access_compat.c(350): AH01797: client denied by server configuration: /home/ednermusika/elconferencista.com/forbidden.html
[Thu Oct 23 15:30:07 2025] [elconferencista.com] [error] [client 40.86.42.83:15172] [pid 2088888] mod_access_compat.c(350): AH01797: client denied by server configuration: /home/ednermusika/elconferencista.com/alfa.php
[Thu Oct 23 15:30:07 2025] [elconferencista.com] [error] [client 40.86.42.83:15172] [pid 2088888] mod_access_compat.c(350): AH01797: client denied by server configuration: /home/ednermusika/elconferencista.com/forbidden.html
[Thu Oct 23 15:30:07 2025] [elconferencista.com] [error] [client 40.86.42.83:15172] [pid 2088888] mod_access_compat.c(350): AH01797: client denied by server configuration: /home/ednermusika/elconferencista.com/chosen.php
[Thu Oct 23 15:30:07 2025] [elconferencista.com] [error] [client 40.86.42.83:15172] [pid 2088888] mod_access_compat.c(350): AH01797: client denied by server configuration: /home/ednermusika/elconferencista.com/forbidden.html
[Thu Oct 23 15:30:07 2025] [elconferencista.com] [error] [client 40.86.42.83:15172] [pid 2088888] mod_access_compat.c(350): AH01797: client denied by server configuration: /home/ednermusika/elconferencista.com/classwithtostring.php
[Thu Oct 23 15:30:07 2025] [elconferencista.com] [error] [client 40.86.42.83:15172] [pid 2088888] mod_access_compat.c(350): AH01797: client denied by server configuration: /home/ednermusika/elconferencista.com/forbidden.html
[Thu Oct 23 15:30:08 2025] [elconferencista.com] [error] [client 40.86.42.83:15172] [pid 2088888] mod_access_compat.c(350): AH01797: client denied by server configuration: /home/ednermusika/elconferencista.com/code.php
[Thu Oct 23 15:30:08 2025] [elconferencista.com] [error] [client 40.86.42.83:15172] [pid 2088888] mod_access_compat.c(350): AH01797: client denied by server configuration: /home/ednermusika/elconferencista.com/forbidden.html
[Thu Oct 23 15:30:08 2025] [elconferencista.com] [error] [client 40.86.42.83:15172] [pid 2088888] mod_access_compat.c(350): AH01797: client denied by server configuration: /home/ednermusika/elconferencista.com/edit.php
[Thu Oct 23 15:30:08 2025] [elconferencista.com] [error] [client 40.86.42.83:15172] [pid 2088888] mod_access_compat.c(350): AH01797: client denied by server configuration: /home/ednermusika/elconferencista.com/forbidden.html
[Thu Oct 23 15:30:08 2025] [elconferencista.com] [error] [client 40.86.42.83:15172] [pid 2088888] mod_access_compat.c(350): AH01797: client denied by server configuration: /home/ednermusika/elconferencista.com/file.php
[Thu Oct 23 15:30:08 2025] [elconferencista.com] [error] [client 40.86.42.83:15172] [pid 2088888] mod_access_compat.c(350): AH01797: client denied by server configuration: /home/ednermusika/elconferencista.com/forbidden.html
[Thu Oct 23 15:30:08 2025] [elconferencista.com] [error] [client 40.86.42.83:15172] [pid 2088888] mod_access_compat.c(350): AH01797: client denied by server configuration: /home/ednermusika/elconferencista.com/flower.php
[Thu Oct 23 15:30:08 2025] [elconferencista.com] [error] [client 40.86.42.83:15172] [pid 2088888] mod_access_compat.c(350): AH01797: client denied by server configuration: /home/ednermusika/elconferencista.com/forbidden.html
[Thu Oct 23 15:30:08 2025] [elconferencista.com] [error] [client 40.86.42.83:15172] [pid 2088888] mod_access_compat.c(350): AH01797: client denied by server configuration: /home/ednermusika/elconferencista.com/goods.php
[Thu Oct 23 15:30:08 2025] [elconferencista.com] [error] [client 40.86.42.83:15172] [pid 2088888] mod_access_compat.c(350): AH01797: client denied by server configuration: /home/ednermusika/elconferencista.com/forbidden.html
[Thu Oct 23 15:30:08 2025] [elconferencista.com] [error] [client 40.86.42.83:15172] [pid 2088888] mod_access_compat.c(350): AH01797: client denied by server configuration: /home/ednermusika/elconferencista.com/ioxi-o.php
[Thu Oct 23 15:30:08 2025] [elconferencista.com] [error] [client 40.86.42.83:15172] [pid 2088888] mod_access_compat.c(350): AH01797: client denied by server configuration: /home/ednermusika/elconferencista.com/forbidden.html
[Thu Oct 23 15:30:08 2025] [elconferencista.com] [error] [client 40.86.42.83:15172] [pid 2088888] mod_access_compat.c(350): AH01797: client denied by server configuration: /home/ednermusika/elconferencista.com/moon.php
[Thu Oct 23 15:30:08 2025] [elconferencista.com] [error] [client 40.86.42.83:15172] [pid 2088888] mod_access_compat.c(350): AH01797: client denied by server configuration: /home/ednermusika/elconferencista.com/forbidden.html
[Thu Oct 23 15:30:08 2025] [elconferencista.com] [error] [client 40.86.42.83:15172] [pid 2088888] mod_access_compat.c(350): AH01797: client denied by server configuration: /home/ednermusika/elconferencista.com/w.php
[Thu Oct 23 15:30:08 2025] [elconferencista.com] [error] [client 40.86.42.83:15172] [pid 2088888] mod_access_compat.c(350): AH01797: client denied by server configuration: /home/ednermusika/elconferencista.com/forbidden.html
[Thu Oct 23 15:30:08 2025] [elconferencista.com] [error] [client 40.86.42.83:15172] [pid 2088888] mod_access_compat.c(350): AH01797: client denied by server configuration: /home/ednermusika/elconferencista.com/wp-admin/css/colors/blue/index.php
[Thu Oct 23 15:30:08 2025] [elconferencista.com] [error] [client 40.86.42.83:15172] [pid 2088888] mod_access_compat.c(350): AH01797: client denied by server configuration: /home/ednermusika/elconferencista.com/forbidden.html
[Thu Oct 23 15:30:08 2025] [elconferencista.com] [error] [client 40.86.42.83:15172] [pid 2088888] mod_access_compat.c(350): AH01797: client denied by server configuration: /home/ednermusika/elconferencista.com/wp-admin/js/widgets/
[Thu Oct 23 15:30:08 2025] [elconferencista.com] [error] [client 40.86.42.83:15172] [pid 2088888] mod_access_compat.c(350): AH01797: client denied by server configuration: /home/ednermusika/elconferencista.com/forbidden.html
[Thu Oct 23 15:30:09 2025] [elconferencista.com] [error] [client 40.86.42.83:15172] [pid 2088888] mod_access_compat.c(350): AH01797: client denied by server configuration: /home/ednermusika/elconferencista.com/wp-admin/network/chosen.php
[Thu Oct 23 15:30:09 2025] [elconferencista.com] [error] [client 40.86.42.83:15172] [pid 2088888] mod_access_compat.c(350): AH01797: client denied by server configuration: /home/ednermusika/elconferencista.com/forbidden.html
[Thu Oct 23 15:30:09 2025] [elconferencista.com] [error] [client 40.86.42.83:15172] [pid 2088888] mod_access_compat.c(350): AH01797: client denied by server configuration: /home/ednermusika/elconferencista.com/wp-content/code.php
[Thu Oct 23 15:30:09 2025] [elconferencista.com] [error] [client 40.86.42.83:15172] [pid 2088888] mod_access_compat.c(350): AH01797: client denied by server configuration: /home/ednermusika/elconferencista.com/forbidden.html
[Thu Oct 23 15:30:09 2025] [elconferencista.com] [error] [client 40.86.42.83:15172] [pid 2088888] mod_access_compat.c(350): AH01797: client denied by server configuration: /home/ednermusika/elconferencista.com/wp-content/themes/about.php
[Thu Oct 23 15:30:09 2025] [elconferencista.com] [error] [client 40.86.42.83:15172] [pid 2088888] mod_access_compat.c(350): AH01797: client denied by server configuration: /home/ednermusika/elconferencista.com/forbidden.html
[Thu Oct 23 15:30:09 2025] [elconferencista.com] [error] [client 40.86.42.83:15172] [pid 2088888] mod_access_compat.c(350): AH01797: client denied by server configuration: /home/ednermusika/elconferencista.com/wp-content/themes/news-portal
[Thu Oct 23 15:30:09 2025] [elconferencista.com] [error] [client 40.86.42.83:15172] [pid 2088888] mod_access_compat.c(350): AH01797: client denied by server configuration: /home/ednermusika/elconferencista.com/forbidden.html
[Thu Oct 23 15:30:09 2025] [elconferencista.com] [error] [client 40.86.42.83:15172] [pid 2088888] mod_access_compat.c(350): AH01797: client denied by server configuration: /home/ednermusika/elconferencista.com/wp-content/wp-conflg.php
[Thu Oct 23 15:30:09 2025] [elconferencista.com] [error] [client 40.86.42.83:15172] [pid 2088888] mod_access_compat.c(350): AH01797: client denied by server configuration: /home/ednermusika/elconferencista.com/forbidden.html
[Thu Oct 23 15:30:09 2025] [elconferencista.com] [error] [client 40.86.42.83:15172] [pid 2088888] mod_access_compat.c(350): AH01797: client denied by server configuration: /home/ednermusika/elconferencista.com/wp-includes/blocks/comments/
[Thu Oct 23 15:30:09 2025] [elconferencista.com] [error] [client 40.86.42.83:15172] [pid 2088888] mod_access_compat.c(350): AH01797: client denied by server configuration: /home/ednermusika/elconferencista.com/forbidden.html
[Thu Oct 23 15:30:09 2025] [elconferencista.com] [error] [client 40.86.42.83:15172] [pid 2088888] mod_access_compat.c(350): AH01797: client denied by server configuration: /home/ednermusika/elconferencista.com/wp-setup.php
[Thu Oct 23 15:30:09 2025] [elconferencista.com] [error] [client 40.86.42.83:15172] [pid 2088888] mod_access_compat.c(350): AH01797: client denied by server configuration: /home/ednermusika/elconferencista.com/forbidden.html
[Thu Oct 23 15:30:09 2025] [elconferencista.com] [error] [client 40.86.42.83:15172] [pid 2088888] mod_access_compat.c(350): AH01797: client denied by server configuration: /home/ednermusika/elconferencista.com/wp.php
[Thu Oct 23 15:30:09 2025] [elconferencista.com] [error] [client 40.86.42.83:15172] [pid 2088888] mod_access_compat.c(350): AH01797: client denied by server configuration: /home/ednermusika/elconferencista.com/forbidden.html
[Thu Oct 23 15:30:09 2025] [elconferencista.com] [error] [client 40.86.42.83:15172] [pid 2088888] mod_access_compat.c(350): AH01797: client denied by server configuration: /home/ednermusika/elconferencista.com/wsa.php
[Thu Oct 23 15:30:09 2025] [elconferencista.com] [error] [client 40.86.42.83:15172] [pid 2088888] mod_access_compat.c(350): AH01797: client denied by server configuration: /home/ednermusika/elconferencista.com/forbidden.html
[Thu Oct 23 16:25:42 2025] [elconferencista.com] [error] [client 89.110.126.203:57355] [pid 508451] mod_access_compat.c(350): AH01797: client denied by server configuration: /home/ednermusika/elconferencista.com/wp-includes/index.php
[Thu Oct 23 16:25:45 2025] [elconferencista.com] [error] [client 89.110.126.203:57355] [pid 508451] mod_access_compat.c(350): AH01797: client denied by server configuration: /home/ednermusika/elconferencista.com/wp-content/uploads/index.php
[Thu Oct 23 16:25:46 2025] [elconferencista.com] [error] [client 89.110.126.203:57355] [pid 508451] mod_access_compat.c(350): AH01797: client denied by server configuration: /home/ednermusika/elconferencista.com/wp-content/uploads/2025/index.php
[Thu Oct 23 16:25:48 2025] [elconferencista.com] [error] [client 89.110.126.203:57355] [pid 508451] mod_access_compat.c(350): AH01797: client denied by server configuration: /home/ednermusika/elconferencista.com/wp-content/uploads/2024/index.php
[Thu Oct 23 16:25:50 2025] [elconferencista.com] [error] [client 89.110.126.203:57355] [pid 508451] mod_access_compat.c(350): AH01797: client denied by server configuration: /home/ednermusika/elconferencista.com/wp-content/uploads/2023/index.php
[Thu Oct 23 16:25:51 2025] [elconferencista.com] [error] [client 89.110.126.203:57355] [pid 508451] mod_access_compat.c(350): AH01797: client denied by server configuration: /home/ednermusika/elconferencista.com/wp-content/uploads/2022/index.php
[Thu Oct 23 16:25:54 2025] [elconferencista.com] [error] [client 89.110.126.203:57355] [pid 508451] mod_access_compat.c(350): AH01797: client denied by server configuration: /home/ednermusika/elconferencista.com/wp-content/themes/index.php
[Thu Oct 23 16:25:59 2025] [elconferencista.com] [error] [client 89.110.126.203:57355] [pid 508451] mod_access_compat.c(350): AH01797: client denied by server configuration: /home/ednermusika/elconferencista.com/wp-content/themes/astra/index.php
[Thu Oct 23 16:26:07 2025] [elconferencista.com] [error] [client 89.110.126.203:57355] [pid 508451] mod_access_compat.c(350): AH01797: client denied by server configuration: /home/ednermusika/elconferencista.com/wp-content/plugins/index.php
[Thu Oct 23 16:26:12 2025] [elconferencista.com] [error] [client 89.110.126.203:57355] [pid 508451] mod_access_compat.c(350): AH01797: client denied by server configuration: /home/ednermusika/elconferencista.com/wp-content/plugins/elementor/index.php
[Thu Oct 23 16:26:18 2025] [elconferencista.com] [error] [client 89.110.126.203:57355] [pid 508451] mod_access_compat.c(350): AH01797: client denied by server configuration: /home/ednermusika/elconferencista.com/.well-known/index.php
[Thu Oct 23 16:53:38 2025] [elconferencista.com] [error] [client 178.130.43.18:62233] [pid 508451] mod_access_compat.c(350): AH01797: client denied by server configuration: /home/ednermusika/elconferencista.com/wp-includes/index.php
[Thu Oct 23 16:53:40 2025] [elconferencista.com] [error] [client 178.130.43.18:62233] [pid 508451] mod_access_compat.c(350): AH01797: client denied by server configuration: /home/ednermusika/elconferencista.com/wp-content/uploads/index.php
[Thu Oct 23 16:53:41 2025] [elconferencista.com] [error] [client 178.130.43.18:62233] [pid 508451] mod_access_compat.c(350): AH01797: client denied by server configuration: /home/ednermusika/elconferencista.com/wp-content/uploads/2025/index.php
[Thu Oct 23 16:53:43 2025] [elconferencista.com] [error] [client 178.130.43.18:62233] [pid 508451] mod_access_compat.c(350): AH01797: client denied by server configuration: /home/ednermusika/elconferencista.com/wp-content/uploads/2024/index.php
[Thu Oct 23 16:53:44 2025] [elconferencista.com] [error] [client 178.130.43.18:62233] [pid 508451] mod_access_compat.c(350): AH01797: client denied by server configuration: /home/ednermusika/elconferencista.com/wp-content/uploads/2023/index.php
[Thu Oct 23 16:53:46 2025] [elconferencista.com] [error] [client 178.130.43.18:62233] [pid 508451] mod_access_compat.c(350): AH01797: client denied by server configuration: /home/ednermusika/elconferencista.com/wp-content/uploads/2022/index.php
[Thu Oct 23 16:53:49 2025] [elconferencista.com] [error] [client 178.130.43.18:62233] [pid 508451] mod_access_compat.c(350): AH01797: client denied by server configuration: /home/ednermusika/elconferencista.com/wp-content/themes/index.php
[Thu Oct 23 16:53:53 2025] [elconferencista.com] [error] [client 178.130.43.18:62233] [pid 508451] mod_access_compat.c(350): AH01797: client denied by server configuration: /home/ednermusika/elconferencista.com/wp-content/themes/astra/index.php
[Thu Oct 23 16:54:00 2025] [elconferencista.com] [error] [client 178.130.43.18:62233] [pid 508451] mod_access_compat.c(350): AH01797: client denied by server configuration: /home/ednermusika/elconferencista.com/wp-content/plugins/index.php
[Thu Oct 23 16:54:06 2025] [elconferencista.com] [error] [client 178.130.43.18:62233] [pid 508451] mod_access_compat.c(350): AH01797: client denied by server configuration: /home/ednermusika/elconferencista.com/wp-content/plugins/elementor/index.php
[Thu Oct 23 16:54:12 2025] [elconferencista.com] [error] [client 178.130.43.18:62233] [pid 508451] mod_access_compat.c(350): AH01797: client denied by server configuration: /home/ednermusika/elconferencista.com/.well-known/index.php
[Thu Oct 23 17:20:23 2025] [elconferencista.com] [error] [client 180.110.203.108:52523] [pid 508451] apache2_util.c(271): [client 180.110.203.108] ModSecurity: Warning. Pattern match "\\\\b(?:keep-alive|close),\\\\s?(?:keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "352"] [id "920210"] [msg "Multiple/Conflicting Connection Header Data Found"] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [hostname "www.elconferencista.com"] [uri "/"] [unique_id "aPrGR0-S8RR3-64XOeJ8NQAA6oY"]
[Thu Oct 23 17:29:35 2025] [elconferencista.com] [error] [client 4.43.184.114:8730] [pid 508451] ssl_engine_kernel.c(325): AH02032: Hostname missing.dreamhost.org (default host as no SNI was provided) and hostname www.elconferencista.com provided via HTTP have no compatible SSL setup
[Thu Oct 23 17:41:14 2025] [elconferencista.com] [error] [client 130.33.52.240:7326] [pid 508451] apache2_util.c(271): [client 130.33.52.240] ModSecurity: Warning. Matched phrase "Mozlila" at REQUEST_HEADERS:User-Agent. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-913-SCANNER-DETECTION.conf"] [line "56"] [id "913100"] [msg "Found User-Agent associated with security scanner"] [data "Matched Data: Mozlila found within REQUEST_HEADERS:User-Agent: Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-reputation-scanner"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/118/224/541/310"] [tag "PCI/6.5.10"] [hostname "www.elconferencista.com"] [uri "/wp-content/themes/seotheme/db.php"] [unique_id "aPrLKk-S8RR3-64XOeKJIQAA6zo"]
[Thu Oct 23 17:41:14 2025] [elconferencista.com] [error] [client 130.33.52.240:7319] [pid 508451] apache2_util.c(271): [client 130.33.52.240] ModSecurity: Warning. Matched phrase "Mozlila" at REQUEST_HEADERS:User-Agent. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-913-SCANNER-DETECTION.conf"] [line "56"] [id "913100"] [msg "Found User-Agent associated with security scanner"] [data "Matched Data: Mozlila found within REQUEST_HEADERS:User-Agent: Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-reputation-scanner"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/118/224/541/310"] [tag "PCI/6.5.10"] [hostname "www.elconferencista.com"] [uri "/"] [unique_id "aPrLKk-S8RR3-64XOeKJIwAA6x0"]
[Thu Oct 23 17:41:14 2025] [elconferencista.com] [error] [client 130.33.52.240:7350] [pid 508451] apache2_util.c(271): [client 130.33.52.240] ModSecurity: Warning. Matched phrase "Mozlila" at REQUEST_HEADERS:User-Agent. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-913-SCANNER-DETECTION.conf"] [line "56"] [id "913100"] [msg "Found User-Agent associated with security scanner"] [data "Matched Data: Mozlila found within REQUEST_HEADERS:User-Agent: Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-reputation-scanner"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/118/224/541/310"] [tag "PCI/6.5.10"] [hostname "www.elconferencista.com"] [uri "/ALFA_DATA/alfacgiapi/perl.alfa"] [unique_id "aPrLKk-S8RR3-64XOeKJIgAA6qc"]
[Thu Oct 23 17:41:15 2025] [elconferencista.com] [error] [client 130.33.52.240:7350] [pid 508451] apache2_util.c(271): [client 130.33.52.240] ModSecurity: Warning. Matched phrase "Mozlila" at REQUEST_HEADERS:User-Agent. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-913-SCANNER-DETECTION.conf"] [line "56"] [id "913100"] [msg "Found User-Agent associated with security scanner"] [data "Matched Data: Mozlila found within REQUEST_HEADERS:User-Agent: Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-reputation-scanner"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/118/224/541/310"] [tag "PCI/6.5.10"] [hostname "www.elconferencista.com"] [uri "/alfacgiapi/perl.alfa"] [unique_id "aPrLK0-S8RR3-64XOeKJJwAA6yM"]
[Thu Oct 23 17:41:17 2025] [elconferencista.com] [error] [client 130.33.52.240:7328] [pid 508451] apache2_util.c(271): [client 130.33.52.240] ModSecurity: Warning. Matched phrase "Mozlila" at REQUEST_HEADERS:User-Agent. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-913-SCANNER-DETECTION.conf"] [line "56"] [id "913100"] [msg "Found User-Agent associated with security scanner"] [data "Matched Data: Mozlila found within REQUEST_HEADERS:User-Agent: Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-reputation-scanner"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/118/224/541/310"] [tag "PCI/6.5.10"] [hostname "elconferencista.com"] [uri "/wp-content/themes/seotheme/db.php"] [unique_id "aPrLLU-S8RR3-64XOeKJKwAA6vQ"]
[Thu Oct 23 17:41:18 2025] [elconferencista.com] [error] [client 130.33.52.240:7326] [pid 508451] apache2_util.c(271): [client 130.33.52.240] ModSecurity: Warning. Matched phrase "Mozlila" at REQUEST_HEADERS:User-Agent. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-913-SCANNER-DETECTION.conf"] [line "56"] [id "913100"] [msg "Found User-Agent associated with security scanner"] [data "Matched Data: Mozlila found within REQUEST_HEADERS:User-Agent: Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-reputation-scanner"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/118/224/541/310"] [tag "PCI/6.5.10"] [hostname "www.elconferencista.com"] [uri "/wp-content/themes/seotheme/db.php"] [unique_id "aPrLLk-S8RR3-64XOeKJLQAA6mQ"]
[Thu Oct 23 18:45:00 2025] [elconferencista.com] [error] [client 194.26.192.110:38914] [pid 2101703] apache2_util.c(271): [client 194.26.192.110] ModSecurity: Warning. Matched phrase ".env" at REQUEST_FILENAME. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "143"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: .env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "www.elconferencista.com"] [uri "/.env"] [unique_id "aPraHCV2a3tuXhw58IUPjgAA6mI"]
[Thu Oct 23 21:20:45 2025] [elconferencista.com] [error] [client 3.127.23.167:46148] [pid 219306] apache2_util.c(271): [client 3.127.23.167] ModSecurity: Warning. Matched phrase ".env" at REQUEST_FILENAME. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "143"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: .env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "www.elconferencista.com"] [uri "/.env"] [unique_id "aPr-nb3stWvRfl_UZN7a1gABOV8"]
[Thu Oct 23 21:20:45 2025] [elconferencista.com] [error] [client 3.127.23.167:46148] [pid 219306] mod_authz_core.c(879): AH01630: client denied by server configuration: /home/ednermusika/elconferencista.com/.env
[Thu Oct 23 21:20:47 2025] [elconferencista.com] [error] [client 3.127.23.167:46148] [pid 219306] apache2_util.c(271): [client 3.127.23.167] ModSecurity: Warning. Matched phrase ".env" at REQUEST_FILENAME. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "143"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: .env found within REQUEST_FILENAME: /.env.local"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "www.elconferencista.com"] [uri "/.env.local"] [unique_id "aPr-n73stWvRfl_UZN7a_wABOVA"]
[Thu Oct 23 21:20:47 2025] [elconferencista.com] [error] [client 3.127.23.167:46148] [pid 219306] mod_authz_core.c(879): AH01630: client denied by server configuration: /home/ednermusika/elconferencista.com/.env.local
[Thu Oct 23 21:20:49 2025] [elconferencista.com] [error] [client 3.127.23.167:46148] [pid 219306] apache2_util.c(271): [client 3.127.23.167] ModSecurity: Warning. Matched phrase ".env" at REQUEST_FILENAME. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "143"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: .env found within REQUEST_FILENAME: /.env.dev"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "www.elconferencista.com"] [uri "/.env.dev"] [unique_id "aPr-ob3stWvRfl_UZN7bBAABOOI"]
[Thu Oct 23 21:20:49 2025] [elconferencista.com] [error] [client 3.127.23.167:46148] [pid 219306] mod_authz_core.c(879): AH01630: client denied by server configuration: /home/ednermusika/elconferencista.com/.env.dev
[Thu Oct 23 21:20:51 2025] [elconferencista.com] [error] [client 3.127.23.167:46148] [pid 219306] apache2_util.c(271): [client 3.127.23.167] ModSecurity: Warning. Matched phrase ".env" at REQUEST_FILENAME. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "143"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: .env found within REQUEST_FILENAME: /.env.prod"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "www.elconferencista.com"] [uri "/.env.prod"] [unique_id "aPr-o73stWvRfl_UZN7bCAABOSQ"]
[Thu Oct 23 21:20:51 2025] [elconferencista.com] [error] [client 3.127.23.167:46148] [pid 219306] mod_authz_core.c(879): AH01630: client denied by server configuration: /home/ednermusika/elconferencista.com/.env.prod
[Thu Oct 23 21:20:52 2025] [elconferencista.com] [error] [client 3.127.23.167:46148] [pid 219306] apache2_util.c(271): [client 3.127.23.167] ModSecurity: Warning. Matched phrase ".env" at REQUEST_FILENAME. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "143"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: .env found within REQUEST_FILENAME: /.env.staging"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "www.elconferencista.com"] [uri "/.env.staging"] [unique_id "aPr-pL3stWvRfl_UZN7bEAABONA"]
[Thu Oct 23 21:20:52 2025] [elconferencista.com] [error] [client 3.127.23.167:46148] [pid 219306] mod_authz_core.c(879): AH01630: client denied by server configuration: /home/ednermusika/elconferencista.com/.env.staging
[Thu Oct 23 21:20:54 2025] [elconferencista.com] [error] [client 3.127.23.167:46148] [pid 219306] apache2_util.c(271): [client 3.127.23.167] ModSecurity: Warning. Matched phrase ".env" at REQUEST_FILENAME. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "143"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: .env found within REQUEST_FILENAME: /.env.development"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "www.elconferencista.com"] [uri "/.env.development"] [unique_id "aPr-pr3stWvRfl_UZN7bFgABORM"]
[Thu Oct 23 21:20:54 2025] [elconferencista.com] [error] [client 3.127.23.167:46148] [pid 219306] mod_authz_core.c(879): AH01630: client denied by server configuration: /home/ednermusika/elconferencista.com/.env.development
[Thu Oct 23 21:20:56 2025] [elconferencista.com] [error] [client 3.127.23.167:46148] [pid 219306] apache2_util.c(271): [client 3.127.23.167] ModSecurity: Warning. Matched phrase ".env" at REQUEST_FILENAME. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "143"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: .env found within REQUEST_FILENAME: /.env.production"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "www.elconferencista.com"] [uri "/.env.production"] [unique_id "aPr-qL3stWvRfl_UZN7bGgABOJs"]
[Thu Oct 23 21:20:56 2025] [elconferencista.com] [error] [client 3.127.23.167:46148] [pid 219306] mod_authz_core.c(879): AH01630: client denied by server configuration: /home/ednermusika/elconferencista.com/.env.production
[Thu Oct 23 21:20:58 2025] [elconferencista.com] [error] [client 3.127.23.167:46148] [pid 219306] apache2_util.c(271): [client 3.127.23.167] ModSecurity: Warning. Matched phrase ".env" at REQUEST_FILENAME. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "143"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: .env found within REQUEST_FILENAME: /.env.test"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "www.elconferencista.com"] [uri "/.env.test"] [unique_id "aPr-qr3stWvRfl_UZN7bIQABOKI"]
[Thu Oct 23 21:20:58 2025] [elconferencista.com] [error] [client 3.127.23.167:46148] [pid 219306] mod_authz_core.c(879): AH01630: client denied by server configuration: /home/ednermusika/elconferencista.com/.env.test
[Thu Oct 23 21:21:01 2025] [elconferencista.com] [error] [client 3.127.23.167:46148] [pid 219306] apache2_util.c(271): [client 3.127.23.167] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pem/ .pol/ .printer/ .pwd/ .rdb/ .resources/ .resx/ .sql/ .swp/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "1112"] [id "920440"] [msg "URL file extension is restricted by policy"] [data ".backup"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [tag "PCI/6.5.10"] [hostname "www.elconferencista.com"] [uri "/.env.backup"] [unique_id "aPr-rb3stWvRfl_UZN7bIwABOQk"]
[Thu Oct 23 21:21:01 2025] [elconferencista.com] [error] [client 3.127.23.167:46148] [pid 219306] apache2_util.c(271): [client 3.127.23.167] ModSecurity: Warning. Matched phrase ".env" at REQUEST_FILENAME. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "143"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: .env found within REQUEST_FILENAME: /.env.backup"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "www.elconferencista.com"] [uri "/.env.backup"] [unique_id "aPr-rb3stWvRfl_UZN7bIwABOQk"]
[Thu Oct 23 21:21:01 2025] [elconferencista.com] [error] [client 3.127.23.167:46148] [pid 219306] mod_authz_core.c(879): AH01630: client denied by server configuration: /home/ednermusika/elconferencista.com/.env.backup
[Thu Oct 23 21:21:03 2025] [elconferencista.com] [error] [client 3.127.23.167:46148] [pid 219306] apache2_util.c(271): [client 3.127.23.167] ModSecurity: Warning. Matched phrase ".env" at REQUEST_FILENAME. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "143"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: .env found within REQUEST_FILENAME: /.env.example"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "www.elconferencista.com"] [uri "/.env.example"] [unique_id "aPr-r73stWvRfl_UZN7bLwABOU0"]
[Thu Oct 23 21:21:03 2025] [elconferencista.com] [error] [client 3.127.23.167:46148] [pid 219306] mod_authz_core.c(879): AH01630: client denied by server configuration: /home/ednermusika/elconferencista.com/.env.example
[Thu Oct 23 21:21:05 2025] [elconferencista.com] [error] [client 3.127.23.167:46148] [pid 219306] apache2_util.c(271): [client 3.127.23.167] ModSecurity: Warning. Matched phrase ".env" at REQUEST_FILENAME. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "143"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: .env found within REQUEST_FILENAME: /.env.sample"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "www.elconferencista.com"] [uri "/.env.sample"] [unique_id "aPr-sb3stWvRfl_UZN7bNgABOMM"]
[Thu Oct 23 21:21:05 2025] [elconferencista.com] [error] [client 3.127.23.167:46148] [pid 219306] mod_authz_core.c(879): AH01630: client denied by server configuration: /home/ednermusika/elconferencista.com/.env.sample
[Thu Oct 23 21:21:08 2025] [elconferencista.com] [error] [client 3.127.23.167:46148] [pid 219306] apache2_util.c(271): [client 3.127.23.167] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pem/ .pol/ .printer/ .pwd/ .rdb/ .resources/ .resx/ .sql/ .swp/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "1112"] [id "920440"] [msg "URL file extension is restricted by policy"] [data ".old"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [tag "PCI/6.5.10"] [hostname "www.elconferencista.com"] [uri "/.env.old"] [unique_id "aPr-tL3stWvRfl_UZN7bPAABOLk"]
[Thu Oct 23 21:21:08 2025] [elconferencista.com] [error] [client 3.127.23.167:46148] [pid 219306] apache2_util.c(271): [client 3.127.23.167] ModSecurity: Warning. Matched phrase ".env" at REQUEST_FILENAME. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "143"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: .env found within REQUEST_FILENAME: /.env.old"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "www.elconferencista.com"] [uri "/.env.old"] [unique_id "aPr-tL3stWvRfl_UZN7bPAABOLk"]
[Thu Oct 23 21:21:08 2025] [elconferencista.com] [error] [client 3.127.23.167:46148] [pid 219306] mod_authz_core.c(879): AH01630: client denied by server configuration: /home/ednermusika/elconferencista.com/.env.old
[Thu Oct 23 21:21:10 2025] [elconferencista.com] [error] [client 3.127.23.167:46148] [pid 219306] apache2_util.c(271): [client 3.127.23.167] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pem/ .pol/ .printer/ .pwd/ .rdb/ .resources/ .resx/ .sql/ .swp/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "1112"] [id "920440"] [msg "URL file extension is restricted by policy"] [data ".bak"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [tag "PCI/6.5.10"] [hostname "www.elconferencista.com"] [uri "/.env.bak"] [unique_id "aPr-tr3stWvRfl_UZN7bPwABOSA"]
[Thu Oct 23 21:21:10 2025] [elconferencista.com] [error] [client 3.127.23.167:46148] [pid 219306] apache2_util.c(271): [client 3.127.23.167] ModSecurity: Warning. Matched phrase ".env" at REQUEST_FILENAME. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "143"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: .env found within REQUEST_FILENAME: /.env.bak"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "www.elconferencista.com"] [uri "/.env.bak"] [unique_id "aPr-tr3stWvRfl_UZN7bPwABOSA"]
[Thu Oct 23 21:21:10 2025] [elconferencista.com] [error] [client 3.127.23.167:46148] [pid 219306] mod_authz_core.c(879): AH01630: client denied by server configuration: /home/ednermusika/elconferencista.com/.env.bak
[Thu Oct 23 21:21:12 2025] [elconferencista.com] [error] [client 3.127.23.167:46148] [pid 219306] apache2_util.c(271): [client 3.127.23.167] ModSecurity: Warning. Matched phrase ".env" at REQUEST_FILENAME. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "143"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: .env found within REQUEST_FILENAME: /.env.save"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "www.elconferencista.com"] [uri "/.env.save"] [unique_id "aPr-uL3stWvRfl_UZN7bQwABONQ"]
[Thu Oct 23 21:21:12 2025] [elconferencista.com] [error] [client 3.127.23.167:46148] [pid 219306] mod_authz_core.c(879): AH01630: client denied by server configuration: /home/ednermusika/elconferencista.com/.env.save
[Thu Oct 23 21:21:14 2025] [elconferencista.com] [error] [client 3.127.23.167:46148] [pid 219306] apache2_util.c(271): [client 3.127.23.167] ModSecurity: Warning. Matched phrase ".env" at REQUEST_FILENAME. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "143"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: .env found within REQUEST_FILENAME: /.env.orig"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "www.elconferencista.com"] [uri "/.env.orig"] [unique_id "aPr-ur3stWvRfl_UZN7bSQABOSI"]
[Thu Oct 23 21:21:14 2025] [elconferencista.com] [error] [client 3.127.23.167:46148] [pid 219306] mod_authz_core.c(879): AH01630: client denied by server configuration: /home/ednermusika/elconferencista.com/.env.orig
[Thu Oct 23 21:21:15 2025] [elconferencista.com] [error] [client 3.127.23.167:46148] [pid 219306] apache2_util.c(271): [client 3.127.23.167] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pem/ .pol/ .printer/ .pwd/ .rdb/ .resources/ .resx/ .sql/ .swp/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "1112"] [id "920440"] [msg "URL file extension is restricted by policy"] [data ".swp"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [tag "PCI/6.5.10"] [hostname "www.elconferencista.com"] [uri "/.env.swp"] [unique_id "aPr-u73stWvRfl_UZN7bUAABOKc"]
[Thu Oct 23 21:21:15 2025] [elconferencista.com] [error] [client 3.127.23.167:46148] [pid 219306] apache2_util.c(271): [client 3.127.23.167] ModSecurity: Warning. Matched phrase ".env" at REQUEST_FILENAME. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "143"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: .env found within REQUEST_FILENAME: /.env.swp"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "www.elconferencista.com"] [uri "/.env.swp"] [unique_id "aPr-u73stWvRfl_UZN7bUAABOKc"]
[Thu Oct 23 21:21:15 2025] [elconferencista.com] [error] [client 3.127.23.167:46148] [pid 219306] mod_authz_core.c(879): AH01630: client denied by server configuration: /home/ednermusika/elconferencista.com/.env.swp
[Thu Oct 23 21:21:17 2025] [elconferencista.com] [error] [client 3.127.23.167:46148] [pid 219306] apache2_util.c(271): [client 3.127.23.167] ModSecurity: Warning. Pattern match "\\\\.[^.~]+~(?:/.*|)$" at REQUEST_FILENAME. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "1138"] [id "920500"] [msg "Attempt to access a backup or working file"] [data ".env~"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [tag "PCI/6.5.10"] [hostname "www.elconferencista.com"] [uri "/.env~"] [unique_id "aPr-vb3stWvRfl_UZN7bVwABOPk"]
[Thu Oct 23 21:21:17 2025] [elconferencista.com] [error] [client 3.127.23.167:46148] [pid 219306] apache2_util.c(271): [client 3.127.23.167] ModSecurity: Warning. Matched phrase ".env" at REQUEST_FILENAME. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "143"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: .env found within REQUEST_FILENAME: /.env~"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "www.elconferencista.com"] [uri "/.env~"] [unique_id "aPr-vb3stWvRfl_UZN7bVwABOPk"]
[Thu Oct 23 21:21:17 2025] [elconferencista.com] [error] [client 3.127.23.167:46148] [pid 219306] mod_authz_core.c(879): AH01630: client denied by server configuration: /home/ednermusika/elconferencista.com/.env~
[Thu Oct 23 21:21:19 2025] [elconferencista.com] [error] [client 3.127.23.167:46148] [pid 219306] apache2_util.c(271): [client 3.127.23.167] ModSecurity: Warning. Matched phrase ".env" at REQUEST_FILENAME. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "143"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: .env found within REQUEST_FILENAME: /.env.tmp"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "www.elconferencista.com"] [uri "/.env.tmp"] [unique_id "aPr-v73stWvRfl_UZN7bWwABOUc"]
[Thu Oct 23 21:21:19 2025] [elconferencista.com] [error] [client 3.127.23.167:46148] [pid 219306] mod_authz_core.c(879): AH01630: client denied by server configuration: /home/ednermusika/elconferencista.com/.env.tmp
[Thu Oct 23 21:21:20 2025] [elconferencista.com] [error] [client 3.127.23.167:46148] [pid 219306] apache2_util.c(271): [client 3.127.23.167] ModSecurity: Warning. Matched phrase ".env" at REQUEST_FILENAME. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "143"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: .env found within REQUEST_FILENAME: /.env.dist"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "www.elconferencista.com"] [uri "/.env.dist"] [unique_id "aPr-wL3stWvRfl_UZN7bXgABOTc"]
[Thu Oct 23 21:21:20 2025] [elconferencista.com] [error] [client 3.127.23.167:46148] [pid 219306] mod_authz_core.c(879): AH01630: client denied by server configuration: /home/ednermusika/elconferencista.com/.env.dist
[Thu Oct 23 21:21:22 2025] [elconferencista.com] [error] [client 3.127.23.167:46148] [pid 219306] apache2_util.c(271): [client 3.127.23.167] ModSecurity: Warning. Matched phrase ".env" at REQUEST_FILENAME. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "143"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: .env found within REQUEST_FILENAME: /admin/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "www.elconferencista.com"] [uri "/admin/.env"] [unique_id "aPr-wr3stWvRfl_UZN7bYgABOO4"]
[Thu Oct 23 21:21:24 2025] [elconferencista.com] [error] [client 3.127.23.167:46148] [pid 219306] apache2_util.c(271): [client 3.127.23.167] ModSecurity: Warning. Matched phrase ".env" at REQUEST_FILENAME. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "143"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: .env found within REQUEST_FILENAME: /admin/.env.save"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "www.elconferencista.com"] [uri "/admin/.env.save"] [unique_id "aPr-xL3stWvRfl_UZN7bcAABOMw"]
[Thu Oct 23 21:21:26 2025] [elconferencista.com] [error] [client 3.127.23.167:46148] [pid 219306] apache2_util.c(271): [client 3.127.23.167] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pem/ .pol/ .printer/ .pwd/ .rdb/ .resources/ .resx/ .sql/ .swp/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "1112"] [id "920440"] [msg "URL file extension is restricted by policy"] [data ".bak"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [tag "PCI/6.5.10"] [hostname "www.elconferencista.com"] [uri "/admin/.env.bak"] [unique_id "aPr-xr3stWvRfl_UZN7bcwABOIU"]
[Thu Oct 23 21:21:26 2025] [elconferencista.com] [error] [client 3.127.23.167:46148] [pid 219306] apache2_util.c(271): [client 3.127.23.167] ModSecurity: Warning. Matched phrase ".env" at REQUEST_FILENAME. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "143"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: .env found within REQUEST_FILENAME: /admin/.env.bak"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "www.elconferencista.com"] [uri "/admin/.env.bak"] [unique_id "aPr-xr3stWvRfl_UZN7bcwABOIU"]
[Thu Oct 23 21:21:27 2025] [elconferencista.com] [error] [client 3.127.23.167:46148] [pid 219306] apache2_util.c(271): [client 3.127.23.167] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pem/ .pol/ .printer/ .pwd/ .rdb/ .resources/ .resx/ .sql/ .swp/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "1112"] [id "920440"] [msg "URL file extension is restricted by policy"] [data ".old"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [tag "PCI/6.5.10"] [hostname "www.elconferencista.com"] [uri "/admin/.env.old"] [unique_id "aPr-x73stWvRfl_UZN7begABOVg"]
[Thu Oct 23 21:21:27 2025] [elconferencista.com] [error] [client 3.127.23.167:46148] [pid 219306] apache2_util.c(271): [client 3.127.23.167] ModSecurity: Warning. Matched phrase ".env" at REQUEST_FILENAME. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "143"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: .env found within REQUEST_FILENAME: /admin/.env.old"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "www.elconferencista.com"] [uri "/admin/.env.old"] [unique_id "aPr-x73stWvRfl_UZN7begABOVg"]
[Thu Oct 23 21:21:29 2025] [elconferencista.com] [error] [client 3.127.23.167:46148] [pid 219306] apache2_util.c(271): [client 3.127.23.167] ModSecurity: Warning. Matched phrase ".env" at REQUEST_FILENAME. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "143"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: .env found within REQUEST_FILENAME: /api/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "www.elconferencista.com"] [uri "/api/.env"] [unique_id "aPr-yb3stWvRfl_UZN7bfwABOK8"]
[Thu Oct 23 21:21:31 2025] [elconferencista.com] [error] [client 3.127.23.167:46148] [pid 219306] apache2_util.c(271): [client 3.127.23.167] ModSecurity: Warning. Matched phrase ".env" at REQUEST_FILENAME. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "143"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: .env found within REQUEST_FILENAME: /api/.env.save"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "www.elconferencista.com"] [uri "/api/.env.save"] [unique_id "aPr-y73stWvRfl_UZN7bkQABOTE"]
[Thu Oct 23 21:21:33 2025] [elconferencista.com] [error] [client 3.127.23.167:46148] [pid 219306] apache2_util.c(271): [client 3.127.23.167] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pem/ .pol/ .printer/ .pwd/ .rdb/ .resources/ .resx/ .sql/ .swp/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "1112"] [id "920440"] [msg "URL file extension is restricted by policy"] [data ".bak"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [tag "PCI/6.5.10"] [hostname "www.elconferencista.com"] [uri "/api/.env.bak"] [unique_id "aPr-zb3stWvRfl_UZN7bnQABOOg"]
[Thu Oct 23 21:21:33 2025] [elconferencista.com] [error] [client 3.127.23.167:46148] [pid 219306] apache2_util.c(271): [client 3.127.23.167] ModSecurity: Warning. Matched phrase ".env" at REQUEST_FILENAME. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "143"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: .env found within REQUEST_FILENAME: /api/.env.bak"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "www.elconferencista.com"] [uri "/api/.env.bak"] [unique_id "aPr-zb3stWvRfl_UZN7bnQABOOg"]
[Thu Oct 23 21:21:35 2025] [elconferencista.com] [error] [client 3.127.23.167:46148] [pid 219306] apache2_util.c(271): [client 3.127.23.167] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pem/ .pol/ .printer/ .pwd/ .rdb/ .resources/ .resx/ .sql/ .swp/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "1112"] [id "920440"] [msg "URL file extension is restricted by policy"] [data ".old"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [tag "PCI/6.5.10"] [hostname "www.elconferencista.com"] [uri "/api/.env.old"] [unique_id "aPr-z73stWvRfl_UZN7brQABOIo"]
[Thu Oct 23 21:21:35 2025] [elconferencista.com] [error] [client 3.127.23.167:46148] [pid 219306] apache2_util.c(271): [client 3.127.23.167] ModSecurity: Warning. Matched phrase ".env" at REQUEST_FILENAME. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "143"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: .env found within REQUEST_FILENAME: /api/.env.old"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "www.elconferencista.com"] [uri "/api/.env.old"] [unique_id "aPr-z73stWvRfl_UZN7brQABOIo"]
[Thu Oct 23 21:21:37 2025] [elconferencista.com] [error] [client 3.127.23.167:46148] [pid 219306] apache2_util.c(271): [client 3.127.23.167] ModSecurity: Warning. Matched phrase ".env" at REQUEST_FILENAME. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "143"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: .env found within REQUEST_FILENAME: /app/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "www.elconferencista.com"] [uri "/app/.env"] [unique_id "aPr-0b3stWvRfl_UZN7btQABONo"]
[Thu Oct 23 21:21:38 2025] [elconferencista.com] [error] [client 3.127.23.167:46148] [pid 219306] apache2_util.c(271): [client 3.127.23.167] ModSecurity: Warning. Matched phrase ".env" at REQUEST_FILENAME. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "143"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: .env found within REQUEST_FILENAME: /app/.env.save"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "www.elconferencista.com"] [uri "/app/.env.save"] [unique_id "aPr-0r3stWvRfl_UZN7btwABONc"]
[Thu Oct 23 21:21:40 2025] [elconferencista.com] [error] [client 3.127.23.167:46148] [pid 219306] apache2_util.c(271): [client 3.127.23.167] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pem/ .pol/ .printer/ .pwd/ .rdb/ .resources/ .resx/ .sql/ .swp/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "1112"] [id "920440"] [msg "URL file extension is restricted by policy"] [data ".bak"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [tag "PCI/6.5.10"] [hostname "www.elconferencista.com"] [uri "/app/.env.bak"] [unique_id "aPr-1L3stWvRfl_UZN7buwABOU0"]
[Thu Oct 23 21:21:40 2025] [elconferencista.com] [error] [client 3.127.23.167:46148] [pid 219306] apache2_util.c(271): [client 3.127.23.167] ModSecurity: Warning. Matched phrase ".env" at REQUEST_FILENAME. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "143"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: .env found within REQUEST_FILENAME: /app/.env.bak"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "www.elconferencista.com"] [uri "/app/.env.bak"] [unique_id "aPr-1L3stWvRfl_UZN7buwABOU0"]
[Thu Oct 23 21:21:42 2025] [elconferencista.com] [error] [client 3.127.23.167:46148] [pid 219306] apache2_util.c(271): [client 3.127.23.167] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pem/ .pol/ .printer/ .pwd/ .rdb/ .resources/ .resx/ .sql/ .swp/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "1112"] [id "920440"] [msg "URL file extension is restricted by policy"] [data ".old"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [tag "PCI/6.5.10"] [hostname "www.elconferencista.com"] [uri "/app/.env.old"] [unique_id "aPr-1r3stWvRfl_UZN7bvwABOMA"]
[Thu Oct 23 21:21:42 2025] [elconferencista.com] [error] [client 3.127.23.167:46148] [pid 219306] apache2_util.c(271): [client 3.127.23.167] ModSecurity: Warning. Matched phrase ".env" at REQUEST_FILENAME. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "143"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: .env found within REQUEST_FILENAME: /app/.env.old"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "www.elconferencista.com"] [uri "/app/.env.old"] [unique_id "aPr-1r3stWvRfl_UZN7bvwABOMA"]
[Thu Oct 23 21:21:44 2025] [elconferencista.com] [error] [client 3.127.23.167:46148] [pid 219306] apache2_util.c(271): [client 3.127.23.167] ModSecurity: Warning. Matched phrase ".env" at REQUEST_FILENAME. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "143"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: .env found within REQUEST_FILENAME: /config/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "www.elconferencista.com"] [uri "/config/.env"] [unique_id "aPr-2L3stWvRfl_UZN7bxgABOSo"]
[Thu Oct 23 21:21:46 2025] [elconferencista.com] [error] [client 3.127.23.167:46148] [pid 219306] apache2_util.c(271): [client 3.127.23.167] ModSecurity: Warning. Matched phrase ".env" at REQUEST_FILENAME. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "143"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: .env found within REQUEST_FILENAME: /config/.env.save"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "www.elconferencista.com"] [uri "/config/.env.save"] [unique_id "aPr-2r3stWvRfl_UZN7bygABOTw"]
[Thu Oct 23 21:21:48 2025] [elconferencista.com] [error] [client 3.127.23.167:46148] [pid 219306] apache2_util.c(271): [client 3.127.23.167] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pem/ .pol/ .printer/ .pwd/ .rdb/ .resources/ .resx/ .sql/ .swp/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "1112"] [id "920440"] [msg "URL file extension is restricted by policy"] [data ".bak"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [tag "PCI/6.5.10"] [hostname "www.elconferencista.com"] [uri "/config/.env.bak"] [unique_id "aPr-3L3stWvRfl_UZN7bzwABOOA"]
[Thu Oct 23 21:21:48 2025] [elconferencista.com] [error] [client 3.127.23.167:46148] [pid 219306] apache2_util.c(271): [client 3.127.23.167] ModSecurity: Warning. Matched phrase ".env" at REQUEST_FILENAME. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "143"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: .env found within REQUEST_FILENAME: /config/.env.bak"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "www.elconferencista.com"] [uri "/config/.env.bak"] [unique_id "aPr-3L3stWvRfl_UZN7bzwABOOA"]
[Thu Oct 23 21:21:49 2025] [elconferencista.com] [error] [client 3.127.23.167:46148] [pid 219306] apache2_util.c(271): [client 3.127.23.167] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pem/ .pol/ .printer/ .pwd/ .rdb/ .resources/ .resx/ .sql/ .swp/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "1112"] [id "920440"] [msg "URL file extension is restricted by policy"] [data ".old"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [tag "PCI/6.5.10"] [hostname "www.elconferencista.com"] [uri "/config/.env.old"] [unique_id "aPr-3b3stWvRfl_UZN7b0gABONw"]
[Thu Oct 23 21:21:49 2025] [elconferencista.com] [error] [client 3.127.23.167:46148] [pid 219306] apache2_util.c(271): [client 3.127.23.167] ModSecurity: Warning. Matched phrase ".env" at REQUEST_FILENAME. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "143"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: .env found within REQUEST_FILENAME: /config/.env.old"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "www.elconferencista.com"] [uri "/config/.env.old"] [unique_id "aPr-3b3stWvRfl_UZN7b0gABONw"]
[Thu Oct 23 21:21:52 2025] [elconferencista.com] [error] [client 3.127.23.167:46148] [pid 219306] apache2_util.c(271): [client 3.127.23.167] ModSecurity: Warning. Matched phrase ".env" at REQUEST_FILENAME. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "143"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: .env found within REQUEST_FILENAME: /src/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "www.elconferencista.com"] [uri "/src/.env"] [unique_id "aPr-4L3stWvRfl_UZN7b2QABOME"]
[Thu Oct 23 21:21:53 2025] [elconferencista.com] [error] [client 3.127.23.167:46148] [pid 219306] apache2_util.c(271): [client 3.127.23.167] ModSecurity: Warning. Matched phrase ".env" at REQUEST_FILENAME. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "143"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: .env found within REQUEST_FILENAME: /src/.env.save"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "www.elconferencista.com"] [uri "/src/.env.save"] [unique_id "aPr-4b3stWvRfl_UZN7b2wABONM"]
[Thu Oct 23 21:21:55 2025] [elconferencista.com] [error] [client 3.127.23.167:46148] [pid 219306] apache2_util.c(271): [client 3.127.23.167] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pem/ .pol/ .printer/ .pwd/ .rdb/ .resources/ .resx/ .sql/ .swp/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "1112"] [id "920440"] [msg "URL file extension is restricted by policy"] [data ".bak"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [tag "PCI/6.5.10"] [hostname "www.elconferencista.com"] [uri "/src/.env.bak"] [unique_id "aPr-473stWvRfl_UZN7b3QABOKc"]
[Thu Oct 23 21:21:55 2025] [elconferencista.com] [error] [client 3.127.23.167:46148] [pid 219306] apache2_util.c(271): [client 3.127.23.167] ModSecurity: Warning. Matched phrase ".env" at REQUEST_FILENAME. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "143"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: .env found within REQUEST_FILENAME: /src/.env.bak"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "www.elconferencista.com"] [uri "/src/.env.bak"] [unique_id "aPr-473stWvRfl_UZN7b3QABOKc"]
[Thu Oct 23 21:21:57 2025] [elconferencista.com] [error] [client 3.127.23.167:46148] [pid 219306] apache2_util.c(271): [client 3.127.23.167] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pem/ .pol/ .printer/ .pwd/ .rdb/ .resources/ .resx/ .sql/ .swp/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "1112"] [id "920440"] [msg "URL file extension is restricted by policy"] [data ".old"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [tag "PCI/6.5.10"] [hostname "www.elconferencista.com"] [uri "/src/.env.old"] [unique_id "aPr-5b3stWvRfl_UZN7b4AABOKw"]
[Thu Oct 23 21:21:57 2025] [elconferencista.com] [error] [client 3.127.23.167:46148] [pid 219306] apache2_util.c(271): [client 3.127.23.167] ModSecurity: Warning. Matched phrase ".env" at REQUEST_FILENAME. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "143"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: .env found within REQUEST_FILENAME: /src/.env.old"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "www.elconferencista.com"] [uri "/src/.env.old"] [unique_id "aPr-5b3stWvRfl_UZN7b4AABOKw"]
[Thu Oct 23 21:21:57 2025] [elconferencista.com] [error] [client 4.43.184.114:4349] [pid 219306] ssl_engine_kernel.c(325): AH02032: Hostname missing.dreamhost.org (default host as no SNI was provided) and hostname www.elconferencista.com provided via HTTP have no compatible SSL setup
[Thu Oct 23 21:21:59 2025] [elconferencista.com] [error] [client 3.127.23.167:46148] [pid 219306] apache2_util.c(271): [client 3.127.23.167] ModSecurity: Warning. Matched phrase ".env" at REQUEST_FILENAME. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "143"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: .env found within REQUEST_FILENAME: /public/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "www.elconferencista.com"] [uri "/public/.env"] [unique_id "aPr-573stWvRfl_UZN7b4wABOLw"]
[Thu Oct 23 21:22:01 2025] [elconferencista.com] [error] [client 3.127.23.167:46148] [pid 219306] apache2_util.c(271): [client 3.127.23.167] ModSecurity: Warning. Matched phrase ".env" at REQUEST_FILENAME. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "143"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: .env found within REQUEST_FILENAME: /public/.env.save"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "www.elconferencista.com"] [uri "/public/.env.save"] [unique_id "aPr-6b3stWvRfl_UZN7b5QABOPk"]
[Thu Oct 23 21:22:02 2025] [elconferencista.com] [error] [client 3.127.23.167:46148] [pid 219306] apache2_util.c(271): [client 3.127.23.167] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pem/ .pol/ .printer/ .pwd/ .rdb/ .resources/ .resx/ .sql/ .swp/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "1112"] [id "920440"] [msg "URL file extension is restricted by policy"] [data ".bak"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [tag "PCI/6.5.10"] [hostname "www.elconferencista.com"] [uri "/public/.env.bak"] [unique_id "aPr-6r3stWvRfl_UZN7b7gABORY"]
[Thu Oct 23 21:22:02 2025] [elconferencista.com] [error] [client 3.127.23.167:46148] [pid 219306] apache2_util.c(271): [client 3.127.23.167] ModSecurity: Warning. Matched phrase ".env" at REQUEST_FILENAME. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "143"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: .env found within REQUEST_FILENAME: /public/.env.bak"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "www.elconferencista.com"] [uri "/public/.env.bak"] [unique_id "aPr-6r3stWvRfl_UZN7b7gABORY"]
[Thu Oct 23 21:22:05 2025] [elconferencista.com] [error] [client 3.127.23.167:46148] [pid 219306] apache2_util.c(271): [client 3.127.23.167] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pem/ .pol/ .printer/ .pwd/ .rdb/ .resources/ .resx/ .sql/ .swp/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "1112"] [id "920440"] [msg "URL file extension is restricted by policy"] [data ".old"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [tag "PCI/6.5.10"] [hostname "www.elconferencista.com"] [uri "/public/.env.old"] [unique_id "aPr-7b3stWvRfl_UZN7b8wABOOs"]
[Thu Oct 23 21:22:05 2025] [elconferencista.com] [error] [client 3.127.23.167:46148] [pid 219306] apache2_util.c(271): [client 3.127.23.167] ModSecurity: Warning. Matched phrase ".env" at REQUEST_FILENAME. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "143"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: .env found within REQUEST_FILENAME: /public/.env.old"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "www.elconferencista.com"] [uri "/public/.env.old"] [unique_id "aPr-7b3stWvRfl_UZN7b8wABOOs"]
[Thu Oct 23 21:22:08 2025] [elconferencista.com] [error] [client 3.127.23.167:46148] [pid 219306] apache2_util.c(271): [client 3.127.23.167] ModSecurity: Warning. Matched phrase ".env" at REQUEST_FILENAME. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "143"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: .env found within REQUEST_FILENAME: /assets/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "www.elconferencista.com"] [uri "/assets/.env"] [unique_id "aPr-8L3stWvRfl_UZN7b9gABOVI"]
[Thu Oct 23 21:22:10 2025] [elconferencista.com] [error] [client 3.127.23.167:46148] [pid 219306] apache2_util.c(271): [client 3.127.23.167] ModSecurity: Warning. Matched phrase ".env" at REQUEST_FILENAME. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "143"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: .env found within REQUEST_FILENAME: /assets/.env.save"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "www.elconferencista.com"] [uri "/assets/.env.save"] [unique_id "aPr-8r3stWvRfl_UZN7b-QABOO0"]
[Thu Oct 23 21:22:12 2025] [elconferencista.com] [error] [client 3.127.23.167:46148] [pid 219306] apache2_util.c(271): [client 3.127.23.167] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pem/ .pol/ .printer/ .pwd/ .rdb/ .resources/ .resx/ .sql/ .swp/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "1112"] [id "920440"] [msg "URL file extension is restricted by policy"] [data ".bak"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [tag "PCI/6.5.10"] [hostname "www.elconferencista.com"] [uri "/assets/.env.bak"] [unique_id "aPr-9L3stWvRfl_UZN7b_gABOSU"]
[Thu Oct 23 21:22:12 2025] [elconferencista.com] [error] [client 3.127.23.167:46148] [pid 219306] apache2_util.c(271): [client 3.127.23.167] ModSecurity: Warning. Matched phrase ".env" at REQUEST_FILENAME. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "143"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: .env found within REQUEST_FILENAME: /assets/.env.bak"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "www.elconferencista.com"] [uri "/assets/.env.bak"] [unique_id "aPr-9L3stWvRfl_UZN7b_gABOSU"]
[Thu Oct 23 21:22:14 2025] [elconferencista.com] [error] [client 3.127.23.167:46148] [pid 219306] apache2_util.c(271): [client 3.127.23.167] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pem/ .pol/ .printer/ .pwd/ .rdb/ .resources/ .resx/ .sql/ .swp/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "1112"] [id "920440"] [msg "URL file extension is restricted by policy"] [data ".old"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [tag "PCI/6.5.10"] [hostname "www.elconferencista.com"] [uri "/assets/.env.old"] [unique_id "aPr-9r3stWvRfl_UZN7cAgABOOQ"]
[Thu Oct 23 21:22:14 2025] [elconferencista.com] [error] [client 3.127.23.167:46148] [pid 219306] apache2_util.c(271): [client 3.127.23.167] ModSecurity: Warning. Matched phrase ".env" at REQUEST_FILENAME. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "143"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: .env found within REQUEST_FILENAME: /assets/.env.old"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "www.elconferencista.com"] [uri "/assets/.env.old"] [unique_id "aPr-9r3stWvRfl_UZN7cAgABOOQ"]
[Thu Oct 23 21:22:16 2025] [elconferencista.com] [error] [client 3.127.23.167:46148] [pid 219306] apache2_util.c(271): [client 3.127.23.167] ModSecurity: Warning. Matched phrase ".env" at REQUEST_FILENAME. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "143"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: .env found within REQUEST_FILENAME: /includes/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "www.elconferencista.com"] [uri "/includes/.env"] [unique_id "aPr--L3stWvRfl_UZN7cCgABOMU"]
[Thu Oct 23 21:22:18 2025] [elconferencista.com] [error] [client 3.127.23.167:46148] [pid 219306] apache2_util.c(271): [client 3.127.23.167] ModSecurity: Warning. Matched phrase ".env" at REQUEST_FILENAME. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "143"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: .env found within REQUEST_FILENAME: /includes/.env.save"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "www.elconferencista.com"] [uri "/includes/.env.save"] [unique_id "aPr--r3stWvRfl_UZN7cEgABOQo"]
[Thu Oct 23 21:22:21 2025] [elconferencista.com] [error] [client 3.127.23.167:46148] [pid 219306] apache2_util.c(271): [client 3.127.23.167] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pem/ .pol/ .printer/ .pwd/ .rdb/ .resources/ .resx/ .sql/ .swp/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "1112"] [id "920440"] [msg "URL file extension is restricted by policy"] [data ".bak"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [tag "PCI/6.5.10"] [hostname "www.elconferencista.com"] [uri "/includes/.env.bak"] [unique_id "aPr-_b3stWvRfl_UZN7cGQABOVw"]
[Thu Oct 23 21:22:21 2025] [elconferencista.com] [error] [client 3.127.23.167:46148] [pid 219306] apache2_util.c(271): [client 3.127.23.167] ModSecurity: Warning. Matched phrase ".env" at REQUEST_FILENAME. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "143"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: .env found within REQUEST_FILENAME: /includes/.env.bak"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "www.elconferencista.com"] [uri "/includes/.env.bak"] [unique_id "aPr-_b3stWvRfl_UZN7cGQABOVw"]
[Thu Oct 23 21:22:23 2025] [elconferencista.com] [error] [client 3.127.23.167:46148] [pid 219306] apache2_util.c(271): [client 3.127.23.167] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pem/ .pol/ .printer/ .pwd/ .rdb/ .resources/ .resx/ .sql/ .swp/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "1112"] [id "920440"] [msg "URL file extension is restricted by policy"] [data ".old"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [tag "PCI/6.5.10"] [hostname "www.elconferencista.com"] [uri "/includes/.env.old"] [unique_id "aPr-_73stWvRfl_UZN7cIAABOJ4"]
[Thu Oct 23 21:22:23 2025] [elconferencista.com] [error] [client 3.127.23.167:46148] [pid 219306] apache2_util.c(271): [client 3.127.23.167] ModSecurity: Warning. Matched phrase ".env" at REQUEST_FILENAME. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "143"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: .env found within REQUEST_FILENAME: /includes/.env.old"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "www.elconferencista.com"] [uri "/includes/.env.old"] [unique_id "aPr-_73stWvRfl_UZN7cIAABOJ4"]
[Thu Oct 23 21:22:25 2025] [elconferencista.com] [error] [client 3.127.23.167:46148] [pid 219306] apache2_util.c(271): [client 3.127.23.167] ModSecurity: Warning. Matched phrase ".env" at REQUEST_FILENAME. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "143"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: .env found within REQUEST_FILENAME: /lib/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "www.elconferencista.com"] [uri "/lib/.env"] [unique_id "aPr_Ab3stWvRfl_UZN7cJAABOL4"]
[Thu Oct 23 21:22:27 2025] [elconferencista.com] [error] [client 3.127.23.167:46148] [pid 219306] apache2_util.c(271): [client 3.127.23.167] ModSecurity: Warning. Matched phrase ".env" at REQUEST_FILENAME. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "143"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: .env found within REQUEST_FILENAME: /lib/.env.save"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "www.elconferencista.com"] [uri "/lib/.env.save"] [unique_id "aPr_A73stWvRfl_UZN7cKwABOOY"]
[Thu Oct 23 21:22:30 2025] [elconferencista.com] [error] [client 3.127.23.167:46148] [pid 219306] apache2_util.c(271): [client 3.127.23.167] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pem/ .pol/ .printer/ .pwd/ .rdb/ .resources/ .resx/ .sql/ .swp/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "1112"] [id "920440"] [msg "URL file extension is restricted by policy"] [data ".bak"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [tag "PCI/6.5.10"] [hostname "www.elconferencista.com"] [uri "/lib/.env.bak"] [unique_id "aPr_Br3stWvRfl_UZN7cNQABOPg"]
[Thu Oct 23 21:22:30 2025] [elconferencista.com] [error] [client 3.127.23.167:46148] [pid 219306] apache2_util.c(271): [client 3.127.23.167] ModSecurity: Warning. Matched phrase ".env" at REQUEST_FILENAME. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "143"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: .env found within REQUEST_FILENAME: /lib/.env.bak"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "www.elconferencista.com"] [uri "/lib/.env.bak"] [unique_id "aPr_Br3stWvRfl_UZN7cNQABOPg"]
[Thu Oct 23 21:22:32 2025] [elconferencista.com] [error] [client 3.127.23.167:46148] [pid 219306] apache2_util.c(271): [client 3.127.23.167] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pem/ .pol/ .printer/ .pwd/ .rdb/ .resources/ .resx/ .sql/ .swp/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "1112"] [id "920440"] [msg "URL file extension is restricted by policy"] [data ".old"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [tag "PCI/6.5.10"] [hostname "www.elconferencista.com"] [uri "/lib/.env.old"] [unique_id "aPr_CL3stWvRfl_UZN7cOAABOLg"]
[Thu Oct 23 21:22:32 2025] [elconferencista.com] [error] [client 3.127.23.167:46148] [pid 219306] apache2_util.c(271): [client 3.127.23.167] ModSecurity: Warning. Matched phrase ".env" at REQUEST_FILENAME. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "143"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: .env found within REQUEST_FILENAME: /lib/.env.old"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "www.elconferencista.com"] [uri "/lib/.env.old"] [unique_id "aPr_CL3stWvRfl_UZN7cOAABOLg"]
[Thu Oct 23 21:22:34 2025] [elconferencista.com] [error] [client 3.127.23.167:46148] [pid 219306] apache2_util.c(271): [client 3.127.23.167] ModSecurity: Warning. Matched phrase ".env" at REQUEST_FILENAME. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "143"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: .env found within REQUEST_FILENAME: /application/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "www.elconferencista.com"] [uri "/application/.env"] [unique_id "aPr_Cr3stWvRfl_UZN7cPQABOMo"]
[Thu Oct 23 21:22:36 2025] [elconferencista.com] [error] [client 3.127.23.167:46148] [pid 219306] apache2_util.c(271): [client 3.127.23.167] ModSecurity: Warning. Matched phrase ".env" at REQUEST_FILENAME. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "143"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: .env found within REQUEST_FILENAME: /application/.env.save"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "www.elconferencista.com"] [uri "/application/.env.save"] [unique_id "aPr_DL3stWvRfl_UZN7cQwABOM0"]
[Thu Oct 23 21:22:38 2025] [elconferencista.com] [error] [client 3.127.23.167:46148] [pid 219306] apache2_util.c(271): [client 3.127.23.167] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pem/ .pol/ .printer/ .pwd/ .rdb/ .resources/ .resx/ .sql/ .swp/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "1112"] [id "920440"] [msg "URL file extension is restricted by policy"] [data ".bak"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [tag "PCI/6.5.10"] [hostname "www.elconferencista.com"] [uri "/application/.env.bak"] [unique_id "aPr_Dr3stWvRfl_UZN7cSQABOQM"]
[Thu Oct 23 21:22:38 2025] [elconferencista.com] [error] [client 3.127.23.167:46148] [pid 219306] apache2_util.c(271): [client 3.127.23.167] ModSecurity: Warning. Matched phrase ".env" at REQUEST_FILENAME. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "143"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: .env found within REQUEST_FILENAME: /application/.env.bak"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "www.elconferencista.com"] [uri "/application/.env.bak"] [unique_id "aPr_Dr3stWvRfl_UZN7cSQABOQM"]
[Thu Oct 23 21:22:40 2025] [elconferencista.com] [error] [client 3.127.23.167:46148] [pid 219306] apache2_util.c(271): [client 3.127.23.167] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pem/ .pol/ .printer/ .pwd/ .rdb/ .resources/ .resx/ .sql/ .swp/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "1112"] [id "920440"] [msg "URL file extension is restricted by policy"] [data ".old"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [tag "PCI/6.5.10"] [hostname "www.elconferencista.com"] [uri "/application/.env.old"] [unique_id "aPr_EL3stWvRfl_UZN7cTAABOPQ"]
[Thu Oct 23 21:22:40 2025] [elconferencista.com] [error] [client 3.127.23.167:46148] [pid 219306] apache2_util.c(271): [client 3.127.23.167] ModSecurity: Warning. Matched phrase ".env" at REQUEST_FILENAME. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "143"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: .env found within REQUEST_FILENAME: /application/.env.old"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "www.elconferencista.com"] [uri "/application/.env.old"] [unique_id "aPr_EL3stWvRfl_UZN7cTAABOPQ"]
[Thu Oct 23 21:22:41 2025] [elconferencista.com] [error] [client 3.127.23.167:46148] [pid 219306] apache2_util.c(271): [client 3.127.23.167] ModSecurity: Warning. Matched phrase ".env" at REQUEST_FILENAME. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "143"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: .env found within REQUEST_FILENAME: /system/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "www.elconferencista.com"] [uri "/system/.env"] [unique_id "aPr_Eb3stWvRfl_UZN7cUAABONQ"]
[Thu Oct 23 21:22:43 2025] [elconferencista.com] [error] [client 3.127.23.167:46148] [pid 219306] apache2_util.c(271): [client 3.127.23.167] ModSecurity: Warning. Matched phrase ".env" at REQUEST_FILENAME. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "143"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: .env found within REQUEST_FILENAME: /system/.env.save"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "www.elconferencista.com"] [uri "/system/.env.save"] [unique_id "aPr_E73stWvRfl_UZN7cUgABOSI"]
[Thu Oct 23 21:22:46 2025] [elconferencista.com] [error] [client 3.127.23.167:46148] [pid 219306] apache2_util.c(271): [client 3.127.23.167] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pem/ .pol/ .printer/ .pwd/ .rdb/ .resources/ .resx/ .sql/ .swp/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "1112"] [id "920440"] [msg "URL file extension is restricted by policy"] [data ".bak"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [tag "PCI/6.5.10"] [hostname "www.elconferencista.com"] [uri "/system/.env.bak"] [unique_id "aPr_Fr3stWvRfl_UZN7cVgABOQI"]
[Thu Oct 23 21:22:46 2025] [elconferencista.com] [error] [client 3.127.23.167:46148] [pid 219306] apache2_util.c(271): [client 3.127.23.167] ModSecurity: Warning. Matched phrase ".env" at REQUEST_FILENAME. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "143"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: .env found within REQUEST_FILENAME: /system/.env.bak"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "www.elconferencista.com"] [uri "/system/.env.bak"] [unique_id "aPr_Fr3stWvRfl_UZN7cVgABOQI"]
[Thu Oct 23 21:22:48 2025] [elconferencista.com] [error] [client 3.127.23.167:46148] [pid 219306] apache2_util.c(271): [client 3.127.23.167] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pem/ .pol/ .printer/ .pwd/ .rdb/ .resources/ .resx/ .sql/ .swp/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "1112"] [id "920440"] [msg "URL file extension is restricted by policy"] [data ".old"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [tag "PCI/6.5.10"] [hostname "www.elconferencista.com"] [uri "/system/.env.old"] [unique_id "aPr_GL3stWvRfl_UZN7cWgABOPo"]
[Thu Oct 23 21:22:48 2025] [elconferencista.com] [error] [client 3.127.23.167:46148] [pid 219306] apache2_util.c(271): [client 3.127.23.167] ModSecurity: Warning. Matched phrase ".env" at REQUEST_FILENAME. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "143"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: .env found within REQUEST_FILENAME: /system/.env.old"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "www.elconferencista.com"] [uri "/system/.env.old"] [unique_id "aPr_GL3stWvRfl_UZN7cWgABOPo"]
[Thu Oct 23 21:22:50 2025] [elconferencista.com] [error] [client 3.127.23.167:46148] [pid 219306] apache2_util.c(271): [client 3.127.23.167] ModSecurity: Warning. Matched phrase ".env" at REQUEST_FILENAME. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "143"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: .env found within REQUEST_FILENAME: /core/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "www.elconferencista.com"] [uri "/core/.env"] [unique_id "aPr_Gr3stWvRfl_UZN7cXAABOQA"]
[Thu Oct 23 21:22:52 2025] [elconferencista.com] [error] [client 3.127.23.167:46148] [pid 219306] apache2_util.c(271): [client 3.127.23.167] ModSecurity: Warning. Matched phrase ".env" at REQUEST_FILENAME. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "143"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: .env found within REQUEST_FILENAME: /core/.env.save"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "www.elconferencista.com"] [uri "/core/.env.save"] [unique_id "aPr_HL3stWvRfl_UZN7cXwABOKw"]
[Thu Oct 23 21:22:54 2025] [elconferencista.com] [error] [client 3.127.23.167:46148] [pid 219306] apache2_util.c(271): [client 3.127.23.167] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pem/ .pol/ .printer/ .pwd/ .rdb/ .resources/ .resx/ .sql/ .swp/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "1112"] [id "920440"] [msg "URL file extension is restricted by policy"] [data ".bak"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [tag "PCI/6.5.10"] [hostname "www.elconferencista.com"] [uri "/core/.env.bak"] [unique_id "aPr_Hr3stWvRfl_UZN7cYQABOLw"]
[Thu Oct 23 21:22:54 2025] [elconferencista.com] [error] [client 3.127.23.167:46148] [pid 219306] apache2_util.c(271): [client 3.127.23.167] ModSecurity: Warning. Matched phrase ".env" at REQUEST_FILENAME. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "143"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: .env found within REQUEST_FILENAME: /core/.env.bak"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "www.elconferencista.com"] [uri "/core/.env.bak"] [unique_id "aPr_Hr3stWvRfl_UZN7cYQABOLw"]
[Thu Oct 23 21:22:57 2025] [elconferencista.com] [error] [client 3.127.23.167:46148] [pid 219306] apache2_util.c(271): [client 3.127.23.167] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pem/ .pol/ .printer/ .pwd/ .rdb/ .resources/ .resx/ .sql/ .swp/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "1112"] [id "920440"] [msg "URL file extension is restricted by policy"] [data ".old"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [tag "PCI/6.5.10"] [hostname "www.elconferencista.com"] [uri "/core/.env.old"] [unique_id "aPr_Ib3stWvRfl_UZN7cZQABOI8"]
[Thu Oct 23 21:22:57 2025] [elconferencista.com] [error] [client 3.127.23.167:46148] [pid 219306] apache2_util.c(271): [client 3.127.23.167] ModSecurity: Warning. Matched phrase ".env" at REQUEST_FILENAME. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "143"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: .env found within REQUEST_FILENAME: /core/.env.old"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "www.elconferencista.com"] [uri "/core/.env.old"] [unique_id "aPr_Ib3stWvRfl_UZN7cZQABOI8"]
[Thu Oct 23 21:22:59 2025] [elconferencista.com] [error] [client 3.127.23.167:46148] [pid 219306] apache2_util.c(271): [client 3.127.23.167] ModSecurity: Warning. Matched phrase ".env" at REQUEST_FILENAME. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "143"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: .env found within REQUEST_FILENAME: /modules/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "www.elconferencista.com"] [uri "/modules/.env"] [unique_id "aPr_I73stWvRfl_UZN7cawABOQs"]
[Thu Oct 23 21:23:01 2025] [elconferencista.com] [error] [client 3.127.23.167:46148] [pid 219306] apache2_util.c(271): [client 3.127.23.167] ModSecurity: Warning. Matched phrase ".env" at REQUEST_FILENAME. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "143"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: .env found within REQUEST_FILENAME: /modules/.env.save"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "www.elconferencista.com"] [uri "/modules/.env.save"] [unique_id "aPr_Jb3stWvRfl_UZN7cdAABOO4"]
[Thu Oct 23 21:23:04 2025] [elconferencista.com] [error] [client 3.127.23.167:46148] [pid 219306] apache2_util.c(271): [client 3.127.23.167] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pem/ .pol/ .printer/ .pwd/ .rdb/ .resources/ .resx/ .sql/ .swp/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "1112"] [id "920440"] [msg "URL file extension is restricted by policy"] [data ".bak"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [tag "PCI/6.5.10"] [hostname "www.elconferencista.com"] [uri "/modules/.env.bak"] [unique_id "aPr_KL3stWvRfl_UZN7cfAABOOQ"]
[Thu Oct 23 21:23:04 2025] [elconferencista.com] [error] [client 3.127.23.167:46148] [pid 219306] apache2_util.c(271): [client 3.127.23.167] ModSecurity: Warning. Matched phrase ".env" at REQUEST_FILENAME. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "143"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: .env found within REQUEST_FILENAME: /modules/.env.bak"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "www.elconferencista.com"] [uri "/modules/.env.bak"] [unique_id "aPr_KL3stWvRfl_UZN7cfAABOOQ"]
[Thu Oct 23 21:23:07 2025] [elconferencista.com] [error] [client 3.127.23.167:46148] [pid 219306] apache2_util.c(271): [client 3.127.23.167] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pem/ .pol/ .printer/ .pwd/ .rdb/ .resources/ .resx/ .sql/ .swp/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "1112"] [id "920440"] [msg "URL file extension is restricted by policy"] [data ".old"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [tag "PCI/6.5.10"] [hostname "www.elconferencista.com"] [uri "/modules/.env.old"] [unique_id "aPr_K73stWvRfl_UZN7cjQABOJU"]
[Thu Oct 23 21:23:07 2025] [elconferencista.com] [error] [client 3.127.23.167:46148] [pid 219306] apache2_util.c(271): [client 3.127.23.167] ModSecurity: Warning. Matched phrase ".env" at REQUEST_FILENAME. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "143"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: .env found within REQUEST_FILENAME: /modules/.env.old"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "www.elconferencista.com"] [uri "/modules/.env.old"] [unique_id "aPr_K73stWvRfl_UZN7cjQABOJU"]
[Thu Oct 23 21:23:09 2025] [elconferencista.com] [error] [client 3.127.23.167:46148] [pid 219306] apache2_util.c(271): [client 3.127.23.167] ModSecurity: Warning. Matched phrase ".env" at REQUEST_FILENAME. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "143"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: .env found within REQUEST_FILENAME: /plugins/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "www.elconferencista.com"] [uri "/plugins/.env"] [unique_id "aPr_Lb3stWvRfl_UZN7cnwABOJY"]
[Thu Oct 23 21:23:11 2025] [elconferencista.com] [error] [client 3.127.23.167:46148] [pid 219306] apache2_util.c(271): [client 3.127.23.167] ModSecurity: Warning. Matched phrase ".env" at REQUEST_FILENAME. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "143"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: .env found within REQUEST_FILENAME: /plugins/.env.save"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "www.elconferencista.com"] [uri "/plugins/.env.save"] [unique_id "aPr_L73stWvRfl_UZN7cuQABOK4"]
[Thu Oct 23 21:23:13 2025] [elconferencista.com] [error] [client 3.127.23.167:46148] [pid 219306] apache2_util.c(271): [client 3.127.23.167] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pem/ .pol/ .printer/ .pwd/ .rdb/ .resources/ .resx/ .sql/ .swp/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "1112"] [id "920440"] [msg "URL file extension is restricted by policy"] [data ".bak"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [tag "PCI/6.5.10"] [hostname "www.elconferencista.com"] [uri "/plugins/.env.bak"] [unique_id "aPr_Mb3stWvRfl_UZN7c0QABOSk"]
[Thu Oct 23 21:23:13 2025] [elconferencista.com] [error] [client 3.127.23.167:46148] [pid 219306] apache2_util.c(271): [client 3.127.23.167] ModSecurity: Warning. Matched phrase ".env" at REQUEST_FILENAME. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "143"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: .env found within REQUEST_FILENAME: /plugins/.env.bak"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "www.elconferencista.com"] [uri "/plugins/.env.bak"] [unique_id "aPr_Mb3stWvRfl_UZN7c0QABOSk"]
[Thu Oct 23 21:23:16 2025] [elconferencista.com] [error] [client 3.127.23.167:46148] [pid 219306] apache2_util.c(271): [client 3.127.23.167] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pem/ .pol/ .printer/ .pwd/ .rdb/ .resources/ .resx/ .sql/ .swp/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "1112"] [id "920440"] [msg "URL file extension is restricted by policy"] [data ".old"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [tag "PCI/6.5.10"] [hostname "www.elconferencista.com"] [uri "/plugins/.env.old"] [unique_id "aPr_NL3stWvRfl_UZN7c7QABON4"]
[Thu Oct 23 21:23:16 2025] [elconferencista.com] [error] [client 3.127.23.167:46148] [pid 219306] apache2_util.c(271): [client 3.127.23.167] ModSecurity: Warning. Matched phrase ".env" at REQUEST_FILENAME. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "143"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: .env found within REQUEST_FILENAME: /plugins/.env.old"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "www.elconferencista.com"] [uri "/plugins/.env.old"] [unique_id "aPr_NL3stWvRfl_UZN7c7QABON4"]
[Thu Oct 23 21:23:19 2025] [elconferencista.com] [error] [client 3.127.23.167:46148] [pid 219306] apache2_util.c(271): [client 3.127.23.167] ModSecurity: Warning. Matched phrase ".env" at REQUEST_FILENAME. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "143"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: .env found within REQUEST_FILENAME: /themes/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "www.elconferencista.com"] [uri "/themes/.env"] [unique_id "aPr_N73stWvRfl_UZN7dBwABOSI"]
[Thu Oct 23 21:23:21 2025] [elconferencista.com] [error] [client 3.127.23.167:46148] [pid 219306] apache2_util.c(271): [client 3.127.23.167] ModSecurity: Warning. Matched phrase ".env" at REQUEST_FILENAME. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "143"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: .env found within REQUEST_FILENAME: /themes/.env.save"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "www.elconferencista.com"] [uri "/themes/.env.save"] [unique_id "aPr_Ob3stWvRfl_UZN7dGgABOP0"]
[Thu Oct 23 21:23:22 2025] [elconferencista.com] [error] [client 3.127.23.167:46148] [pid 219306] apache2_util.c(271): [client 3.127.23.167] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pem/ .pol/ .printer/ .pwd/ .rdb/ .resources/ .resx/ .sql/ .swp/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "1112"] [id "920440"] [msg "URL file extension is restricted by policy"] [data ".bak"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [tag "PCI/6.5.10"] [hostname "www.elconferencista.com"] [uri "/themes/.env.bak"] [unique_id "aPr_Or3stWvRfl_UZN7dLQABOM4"]
[Thu Oct 23 21:23:22 2025] [elconferencista.com] [error] [client 3.127.23.167:46148] [pid 219306] apache2_util.c(271): [client 3.127.23.167] ModSecurity: Warning. Matched phrase ".env" at REQUEST_FILENAME. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "143"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: .env found within REQUEST_FILENAME: /themes/.env.bak"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "www.elconferencista.com"] [uri "/themes/.env.bak"] [unique_id "aPr_Or3stWvRfl_UZN7dLQABOM4"]
[Thu Oct 23 21:23:25 2025] [elconferencista.com] [error] [client 3.127.23.167:46148] [pid 219306] apache2_util.c(271): [client 3.127.23.167] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pem/ .pol/ .printer/ .pwd/ .rdb/ .resources/ .resx/ .sql/ .swp/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "1112"] [id "920440"] [msg "URL file extension is restricted by policy"] [data ".old"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [tag "PCI/6.5.10"] [hostname "www.elconferencista.com"] [uri "/themes/.env.old"] [unique_id "aPr_Pb3stWvRfl_UZN7dRAABOOQ"]
[Thu Oct 23 21:23:25 2025] [elconferencista.com] [error] [client 3.127.23.167:46148] [pid 219306] apache2_util.c(271): [client 3.127.23.167] ModSecurity: Warning. Matched phrase ".env" at REQUEST_FILENAME. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "143"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: .env found within REQUEST_FILENAME: /themes/.env.old"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "www.elconferencista.com"] [uri "/themes/.env.old"] [unique_id "aPr_Pb3stWvRfl_UZN7dRAABOOQ"]
[Thu Oct 23 21:23:25 2025] [elconferencista.com] [error] [client 170.106.197.109:46988] [pid 219306] apache2_util.c(271): [client 170.106.197.109] ModSecurity: Warning. Pattern match "\\\\b(?:keep-alive|close),\\\\s?(?:keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "352"] [id "920210"] [msg "Multiple/Conflicting Connection Header Data Found"] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [hostname "www.elconferencista.com"] [uri "/"] [unique_id "aPr_Pb3stWvRfl_UZN7dRQABOMU"]
[Thu Oct 23 21:23:27 2025] [elconferencista.com] [error] [client 3.127.23.167:46148] [pid 219306] apache2_util.c(271): [client 3.127.23.167] ModSecurity: Warning. Matched phrase ".env" at REQUEST_FILENAME. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "143"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: .env found within REQUEST_FILENAME: /vendor/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "www.elconferencista.com"] [uri "/vendor/.env"] [unique_id "aPr_P73stWvRfl_UZN7dSwABOQo"]
[Thu Oct 23 21:23:29 2025] [elconferencista.com] [error] [client 3.127.23.167:46148] [pid 219306] apache2_util.c(271): [client 3.127.23.167] ModSecurity: Warning. Matched phrase ".env" at REQUEST_FILENAME. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "143"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: .env found within REQUEST_FILENAME: /vendor/.env.save"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "www.elconferencista.com"] [uri "/vendor/.env.save"] [unique_id "aPr_Qb3stWvRfl_UZN7dTQABOP4"]
[Thu Oct 23 21:23:32 2025] [elconferencista.com] [error] [client 3.127.23.167:46148] [pid 219306] apache2_util.c(271): [client 3.127.23.167] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pem/ .pol/ .printer/ .pwd/ .rdb/ .resources/ .resx/ .sql/ .swp/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "1112"] [id "920440"] [msg "URL file extension is restricted by policy"] [data ".bak"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [tag "PCI/6.5.10"] [hostname "www.elconferencista.com"] [uri "/vendor/.env.bak"] [unique_id "aPr_RL3stWvRfl_UZN7dUQABOKo"]
[Thu Oct 23 21:23:32 2025] [elconferencista.com] [error] [client 3.127.23.167:46148] [pid 219306] apache2_util.c(271): [client 3.127.23.167] ModSecurity: Warning. Matched phrase ".env" at REQUEST_FILENAME. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "143"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: .env found within REQUEST_FILENAME: /vendor/.env.bak"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "www.elconferencista.com"] [uri "/vendor/.env.bak"] [unique_id "aPr_RL3stWvRfl_UZN7dUQABOKo"]
[Thu Oct 23 21:23:35 2025] [elconferencista.com] [error] [client 3.127.23.167:46148] [pid 219306] apache2_util.c(271): [client 3.127.23.167] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pem/ .pol/ .printer/ .pwd/ .rdb/ .resources/ .resx/ .sql/ .swp/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "1112"] [id "920440"] [msg "URL file extension is restricted by policy"] [data ".old"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [tag "PCI/6.5.10"] [hostname "www.elconferencista.com"] [uri "/vendor/.env.old"] [unique_id "aPr_R73stWvRfl_UZN7dVQABOTE"]
[Thu Oct 23 21:23:35 2025] [elconferencista.com] [error] [client 3.127.23.167:46148] [pid 219306] apache2_util.c(271): [client 3.127.23.167] ModSecurity: Warning. Matched phrase ".env" at REQUEST_FILENAME. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "143"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: .env found within REQUEST_FILENAME: /vendor/.env.old"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "www.elconferencista.com"] [uri "/vendor/.env.old"] [unique_id "aPr_R73stWvRfl_UZN7dVQABOTE"]
[Thu Oct 23 21:23:37 2025] [elconferencista.com] [error] [client 3.127.23.167:46148] [pid 219306] apache2_util.c(271): [client 3.127.23.167] ModSecurity: Warning. Matched phrase ".env" at REQUEST_FILENAME. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "143"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: .env found within REQUEST_FILENAME: /storage/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "www.elconferencista.com"] [uri "/storage/.env"] [unique_id "aPr_Sb3stWvRfl_UZN7dWwABOUA"]
[Thu Oct 23 21:23:39 2025] [elconferencista.com] [error] [client 3.127.23.167:46148] [pid 219306] apache2_util.c(271): [client 3.127.23.167] ModSecurity: Warning. Matched phrase ".env" at REQUEST_FILENAME. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "143"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: .env found within REQUEST_FILENAME: /storage/.env.save"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "www.elconferencista.com"] [uri "/storage/.env.save"] [unique_id "aPr_S73stWvRfl_UZN7dXgABOVU"]
[Thu Oct 23 21:23:41 2025] [elconferencista.com] [error] [client 3.127.23.167:46148] [pid 219306] apache2_util.c(271): [client 3.127.23.167] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pem/ .pol/ .printer/ .pwd/ .rdb/ .resources/ .resx/ .sql/ .swp/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "1112"] [id "920440"] [msg "URL file extension is restricted by policy"] [data ".bak"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [tag "PCI/6.5.10"] [hostname "www.elconferencista.com"] [uri "/storage/.env.bak"] [unique_id "aPr_Tb3stWvRfl_UZN7dZQABOJQ"]
[Thu Oct 23 21:23:41 2025] [elconferencista.com] [error] [client 3.127.23.167:46148] [pid 219306] apache2_util.c(271): [client 3.127.23.167] ModSecurity: Warning. Matched phrase ".env" at REQUEST_FILENAME. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "143"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: .env found within REQUEST_FILENAME: /storage/.env.bak"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "www.elconferencista.com"] [uri "/storage/.env.bak"] [unique_id "aPr_Tb3stWvRfl_UZN7dZQABOJQ"]
[Thu Oct 23 21:23:43 2025] [elconferencista.com] [error] [client 3.127.23.167:46148] [pid 219306] apache2_util.c(271): [client 3.127.23.167] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pem/ .pol/ .printer/ .pwd/ .rdb/ .resources/ .resx/ .sql/ .swp/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "1112"] [id "920440"] [msg "URL file extension is restricted by policy"] [data ".old"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [tag "PCI/6.5.10"] [hostname "www.elconferencista.com"] [uri "/storage/.env.old"] [unique_id "aPr_T73stWvRfl_UZN7dawABOK8"]
[Thu Oct 23 21:23:43 2025] [elconferencista.com] [error] [client 3.127.23.167:46148] [pid 219306] apache2_util.c(271): [client 3.127.23.167] ModSecurity: Warning. Matched phrase ".env" at REQUEST_FILENAME. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "143"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: .env found within REQUEST_FILENAME: /storage/.env.old"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "www.elconferencista.com"] [uri "/storage/.env.old"] [unique_id "aPr_T73stWvRfl_UZN7dawABOK8"]
[Thu Oct 23 21:23:47 2025] [elconferencista.com] [error] [client 3.127.23.167:37792] [pid 219306] apache2_util.c(271): [client 3.127.23.167] ModSecurity: Warning. Matched phrase ".env" at REQUEST_FILENAME. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "143"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: .env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "www.elconferencista.com"] [uri "/.env"] [unique_id "aPr_U73stWvRfl_UZN7dmAABOOM"]
[Thu Oct 23 21:23:47 2025] [elconferencista.com] [error] [client 3.127.23.167:37792] [pid 219306] mod_authz_core.c(879): AH01630: client denied by server configuration: /home/ednermusika/elconferencista.com/.env
[Thu Oct 23 21:23:50 2025] [elconferencista.com] [error] [client 3.127.23.167:37792] [pid 219306] apache2_util.c(271): [client 3.127.23.167] ModSecurity: Warning. Matched phrase ".env" at REQUEST_FILENAME. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "143"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: .env found within REQUEST_FILENAME: /.env.local"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "www.elconferencista.com"] [uri "/.env.local"] [unique_id "aPr_Vr3stWvRfl_UZN7doQABON4"]
[Thu Oct 23 21:23:50 2025] [elconferencista.com] [error] [client 3.127.23.167:37792] [pid 219306] mod_authz_core.c(879): AH01630: client denied by server configuration: /home/ednermusika/elconferencista.com/.env.local
[Thu Oct 23 21:23:52 2025] [elconferencista.com] [error] [client 3.127.23.167:37792] [pid 219306] apache2_util.c(271): [client 3.127.23.167] ModSecurity: Warning. Matched phrase ".env" at REQUEST_FILENAME. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "143"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: .env found within REQUEST_FILENAME: /.env.dev"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "www.elconferencista.com"] [uri "/.env.dev"] [unique_id "aPr_WL3stWvRfl_UZN7dpAABOQM"]
[Thu Oct 23 21:23:52 2025] [elconferencista.com] [error] [client 3.127.23.167:37792] [pid 219306] mod_authz_core.c(879): AH01630: client denied by server configuration: /home/ednermusika/elconferencista.com/.env.dev
[Thu Oct 23 21:23:54 2025] [elconferencista.com] [error] [client 3.127.23.167:37792] [pid 219306] apache2_util.c(271): [client 3.127.23.167] ModSecurity: Warning. Matched phrase ".env" at REQUEST_FILENAME. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "143"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: .env found within REQUEST_FILENAME: /.env.prod"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "www.elconferencista.com"] [uri "/.env.prod"] [unique_id "aPr_Wr3stWvRfl_UZN7dpwABOPQ"]
[Thu Oct 23 21:23:54 2025] [elconferencista.com] [error] [client 3.127.23.167:37792] [pid 219306] mod_authz_core.c(879): AH01630: client denied by server configuration: /home/ednermusika/elconferencista.com/.env.prod
[Thu Oct 23 21:23:55 2025] [elconferencista.com] [error] [client 3.127.23.167:37792] [pid 219306] apache2_util.c(271): [client 3.127.23.167] ModSecurity: Warning. Matched phrase ".env" at REQUEST_FILENAME. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "143"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: .env found within REQUEST_FILENAME: /.env.staging"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "www.elconferencista.com"] [uri "/.env.staging"] [unique_id "aPr_W73stWvRfl_UZN7dqQABORQ"]
[Thu Oct 23 21:23:55 2025] [elconferencista.com] [error] [client 3.127.23.167:37792] [pid 219306] mod_authz_core.c(879): AH01630: client denied by server configuration: /home/ednermusika/elconferencista.com/.env.staging
[Thu Oct 23 21:23:57 2025] [elconferencista.com] [error] [client 3.127.23.167:37792] [pid 219306] apache2_util.c(271): [client 3.127.23.167] ModSecurity: Warning. Matched phrase ".env" at REQUEST_FILENAME. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "143"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: .env found within REQUEST_FILENAME: /.env.development"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "www.elconferencista.com"] [uri "/.env.development"] [unique_id "aPr_Xb3stWvRfl_UZN7drwABOLc"]
[Thu Oct 23 21:23:57 2025] [elconferencista.com] [error] [client 3.127.23.167:37792] [pid 219306] mod_authz_core.c(879): AH01630: client denied by server configuration: /home/ednermusika/elconferencista.com/.env.development
[Thu Oct 23 21:24:00 2025] [elconferencista.com] [error] [client 3.127.23.167:37792] [pid 219306] apache2_util.c(271): [client 3.127.23.167] ModSecurity: Warning. Matched phrase ".env" at REQUEST_FILENAME. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "143"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: .env found within REQUEST_FILENAME: /.env.production"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "www.elconferencista.com"] [uri "/.env.production"] [unique_id "aPr_YL3stWvRfl_UZN7dtAABOQI"]
[Thu Oct 23 21:24:00 2025] [elconferencista.com] [error] [client 3.127.23.167:37792] [pid 219306] mod_authz_core.c(879): AH01630: client denied by server configuration: /home/ednermusika/elconferencista.com/.env.production
[Thu Oct 23 21:24:02 2025] [elconferencista.com] [error] [client 3.127.23.167:37792] [pid 219306] apache2_util.c(271): [client 3.127.23.167] ModSecurity: Warning. Matched phrase ".env" at REQUEST_FILENAME. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "143"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: .env found within REQUEST_FILENAME: /.env.test"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "www.elconferencista.com"] [uri "/.env.test"] [unique_id "aPr_Yr3stWvRfl_UZN7dugABOKc"]
[Thu Oct 23 21:24:02 2025] [elconferencista.com] [error] [client 3.127.23.167:37792] [pid 219306] mod_authz_core.c(879): AH01630: client denied by server configuration: /home/ednermusika/elconferencista.com/.env.test
[Thu Oct 23 21:24:05 2025] [elconferencista.com] [error] [client 3.127.23.167:37792] [pid 219306] apache2_util.c(271): [client 3.127.23.167] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pem/ .pol/ .printer/ .pwd/ .rdb/ .resources/ .resx/ .sql/ .swp/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "1112"] [id "920440"] [msg "URL file extension is restricted by policy"] [data ".backup"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [tag "PCI/6.5.10"] [hostname "www.elconferencista.com"] [uri "/.env.backup"] [unique_id "aPr_Zb3stWvRfl_UZN7dvwABOLw"]
[Thu Oct 23 21:24:05 2025] [elconferencista.com] [error] [client 3.127.23.167:37792] [pid 219306] apache2_util.c(271): [client 3.127.23.167] ModSecurity: Warning. Matched phrase ".env" at REQUEST_FILENAME. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "143"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: .env found within REQUEST_FILENAME: /.env.backup"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "www.elconferencista.com"] [uri "/.env.backup"] [unique_id "aPr_Zb3stWvRfl_UZN7dvwABOLw"]
[Thu Oct 23 21:24:05 2025] [elconferencista.com] [error] [client 3.127.23.167:37792] [pid 219306] mod_authz_core.c(879): AH01630: client denied by server configuration: /home/ednermusika/elconferencista.com/.env.backup
[Thu Oct 23 21:24:07 2025] [elconferencista.com] [error] [client 3.127.23.167:37792] [pid 219306] apache2_util.c(271): [client 3.127.23.167] ModSecurity: Warning. Matched phrase ".env" at REQUEST_FILENAME. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "143"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: .env found within REQUEST_FILENAME: /.env.example"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "www.elconferencista.com"] [uri "/.env.example"] [unique_id "aPr_Z73stWvRfl_UZN7dxQABOO8"]
[Thu Oct 23 21:24:07 2025] [elconferencista.com] [error] [client 3.127.23.167:37792] [pid 219306] mod_authz_core.c(879): AH01630: client denied by server configuration: /home/ednermusika/elconferencista.com/.env.example
[Thu Oct 23 21:24:09 2025] [elconferencista.com] [error] [client 3.127.23.167:37792] [pid 219306] apache2_util.c(271): [client 3.127.23.167] ModSecurity: Warning. Matched phrase ".env" at REQUEST_FILENAME. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "143"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: .env found within REQUEST_FILENAME: /.env.sample"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "www.elconferencista.com"] [uri "/.env.sample"] [unique_id "aPr_ab3stWvRfl_UZN7dzQABOPI"]
[Thu Oct 23 21:24:09 2025] [elconferencista.com] [error] [client 3.127.23.167:37792] [pid 219306] mod_authz_core.c(879): AH01630: client denied by server configuration: /home/ednermusika/elconferencista.com/.env.sample
[Thu Oct 23 21:24:11 2025] [elconferencista.com] [error] [client 3.127.23.167:37792] [pid 219306] apache2_util.c(271): [client 3.127.23.167] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pem/ .pol/ .printer/ .pwd/ .rdb/ .resources/ .resx/ .sql/ .swp/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "1112"] [id "920440"] [msg "URL file extension is restricted by policy"] [data ".old"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [tag "PCI/6.5.10"] [hostname "www.elconferencista.com"] [uri "/.env.old"] [unique_id "aPr_a73stWvRfl_UZN7d0AABOM4"]
[Thu Oct 23 21:24:11 2025] [elconferencista.com] [error] [client 3.127.23.167:37792] [pid 219306] apache2_util.c(271): [client 3.127.23.167] ModSecurity: Warning. Matched phrase ".env" at REQUEST_FILENAME. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "143"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: .env found within REQUEST_FILENAME: /.env.old"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "www.elconferencista.com"] [uri "/.env.old"] [unique_id "aPr_a73stWvRfl_UZN7d0AABOM4"]
[Thu Oct 23 21:24:11 2025] [elconferencista.com] [error] [client 3.127.23.167:37792] [pid 219306] mod_authz_core.c(879): AH01630: client denied by server configuration: /home/ednermusika/elconferencista.com/.env.old
[Thu Oct 23 21:24:13 2025] [elconferencista.com] [error] [client 3.127.23.167:37792] [pid 219306] apache2_util.c(271): [client 3.127.23.167] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pem/ .pol/ .printer/ .pwd/ .rdb/ .resources/ .resx/ .sql/ .swp/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "1112"] [id "920440"] [msg "URL file extension is restricted by policy"] [data ".bak"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [tag "PCI/6.5.10"] [hostname "www.elconferencista.com"] [uri "/.env.bak"] [unique_id "aPr_bb3stWvRfl_UZN7d0wABOMI"]
[Thu Oct 23 21:24:13 2025] [elconferencista.com] [error] [client 3.127.23.167:37792] [pid 219306] apache2_util.c(271): [client 3.127.23.167] ModSecurity: Warning. Matched phrase ".env" at REQUEST_FILENAME. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "143"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: .env found within REQUEST_FILENAME: /.env.bak"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "www.elconferencista.com"] [uri "/.env.bak"] [unique_id "aPr_bb3stWvRfl_UZN7d0wABOMI"]
[Thu Oct 23 21:24:13 2025] [elconferencista.com] [error] [client 3.127.23.167:37792] [pid 219306] mod_authz_core.c(879): AH01630: client denied by server configuration: /home/ednermusika/elconferencista.com/.env.bak
[Thu Oct 23 21:24:16 2025] [elconferencista.com] [error] [client 3.127.23.167:37792] [pid 219306] apache2_util.c(271): [client 3.127.23.167] ModSecurity: Warning. Matched phrase ".env" at REQUEST_FILENAME. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "143"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: .env found within REQUEST_FILENAME: /.env.save"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "www.elconferencista.com"] [uri "/.env.save"] [unique_id "aPr_cL3stWvRfl_UZN7d9QABOV0"]
[Thu Oct 23 21:24:16 2025] [elconferencista.com] [error] [client 3.127.23.167:37792] [pid 219306] mod_authz_core.c(879): AH01630: client denied by server configuration: /home/ednermusika/elconferencista.com/.env.save
[Thu Oct 23 21:24:18 2025] [elconferencista.com] [error] [client 3.127.23.167:37792] [pid 219306] apache2_util.c(271): [client 3.127.23.167] ModSecurity: Warning. Matched phrase ".env" at REQUEST_FILENAME. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "143"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: .env found within REQUEST_FILENAME: /.env.orig"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "www.elconferencista.com"] [uri "/.env.orig"] [unique_id "aPr_cr3stWvRfl_UZN7d-gABOIg"]
[Thu Oct 23 21:24:18 2025] [elconferencista.com] [error] [client 3.127.23.167:37792] [pid 219306] mod_authz_core.c(879): AH01630: client denied by server configuration: /home/ednermusika/elconferencista.com/.env.orig
[Thu Oct 23 21:24:20 2025] [elconferencista.com] [error] [client 3.127.23.167:37792] [pid 219306] apache2_util.c(271): [client 3.127.23.167] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pem/ .pol/ .printer/ .pwd/ .rdb/ .resources/ .resx/ .sql/ .swp/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "1112"] [id "920440"] [msg "URL file extension is restricted by policy"] [data ".swp"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [tag "PCI/6.5.10"] [hostname "www.elconferencista.com"] [uri "/.env.swp"] [unique_id "aPr_dL3stWvRfl_UZN7d_wABOVs"]
[Thu Oct 23 21:24:20 2025] [elconferencista.com] [error] [client 3.127.23.167:37792] [pid 219306] apache2_util.c(271): [client 3.127.23.167] ModSecurity: Warning. Matched phrase ".env" at REQUEST_FILENAME. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "143"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: .env found within REQUEST_FILENAME: /.env.swp"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "www.elconferencista.com"] [uri "/.env.swp"] [unique_id "aPr_dL3stWvRfl_UZN7d_wABOVs"]
[Thu Oct 23 21:24:20 2025] [elconferencista.com] [error] [client 3.127.23.167:37792] [pid 219306] mod_authz_core.c(879): AH01630: client denied by server configuration: /home/ednermusika/elconferencista.com/.env.swp
[Thu Oct 23 21:24:22 2025] [elconferencista.com] [error] [client 3.127.23.167:37792] [pid 219306] apache2_util.c(271): [client 3.127.23.167] ModSecurity: Warning. Pattern match "\\\\.[^.~]+~(?:/.*|)$" at REQUEST_FILENAME. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "1138"] [id "920500"] [msg "Attempt to access a backup or working file"] [data ".env~"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [tag "PCI/6.5.10"] [hostname "www.elconferencista.com"] [uri "/.env~"] [unique_id "aPr_dr3stWvRfl_UZN7eCAABOV8"]
[Thu Oct 23 21:24:22 2025] [elconferencista.com] [error] [client 3.127.23.167:37792] [pid 219306] apache2_util.c(271): [client 3.127.23.167] ModSecurity: Warning. Matched phrase ".env" at REQUEST_FILENAME. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "143"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: .env found within REQUEST_FILENAME: /.env~"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "www.elconferencista.com"] [uri "/.env~"] [unique_id "aPr_dr3stWvRfl_UZN7eCAABOV8"]
[Thu Oct 23 21:24:22 2025] [elconferencista.com] [error] [client 3.127.23.167:37792] [pid 219306] mod_authz_core.c(879): AH01630: client denied by server configuration: /home/ednermusika/elconferencista.com/.env~
[Thu Oct 23 21:24:24 2025] [elconferencista.com] [error] [client 3.127.23.167:37792] [pid 219306] apache2_util.c(271): [client 3.127.23.167] ModSecurity: Warning. Matched phrase ".env" at REQUEST_FILENAME. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "143"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: .env found within REQUEST_FILENAME: /.env.tmp"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "www.elconferencista.com"] [uri "/.env.tmp"] [unique_id "aPr_eL3stWvRfl_UZN7eCwABOOI"]
[Thu Oct 23 21:24:24 2025] [elconferencista.com] [error] [client 3.127.23.167:37792] [pid 219306] mod_authz_core.c(879): AH01630: client denied by server configuration: /home/ednermusika/elconferencista.com/.env.tmp
[Thu Oct 23 21:24:26 2025] [elconferencista.com] [error] [client 3.127.23.167:37792] [pid 219306] apache2_util.c(271): [client 3.127.23.167] ModSecurity: Warning. Matched phrase ".env" at REQUEST_FILENAME. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "143"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: .env found within REQUEST_FILENAME: /.env.dist"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "www.elconferencista.com"] [uri "/.env.dist"] [unique_id "aPr_er3stWvRfl_UZN7eEAABOUA"]
[Thu Oct 23 21:24:26 2025] [elconferencista.com] [error] [client 3.127.23.167:37792] [pid 219306] mod_authz_core.c(879): AH01630: client denied by server configuration: /home/ednermusika/elconferencista.com/.env.dist
[Thu Oct 23 21:24:28 2025] [elconferencista.com] [error] [client 3.127.23.167:37792] [pid 219306] apache2_util.c(271): [client 3.127.23.167] ModSecurity: Warning. Matched phrase ".env" at REQUEST_FILENAME. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "143"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: .env found within REQUEST_FILENAME: /admin/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "www.elconferencista.com"] [uri "/admin/.env"] [unique_id "aPr_fL3stWvRfl_UZN7eEwABOJ4"]
[Thu Oct 23 21:24:30 2025] [elconferencista.com] [error] [client 3.127.23.167:37792] [pid 219306] apache2_util.c(271): [client 3.127.23.167] ModSecurity: Warning. Matched phrase ".env" at REQUEST_FILENAME. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "143"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: .env found within REQUEST_FILENAME: /admin/.env.save"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "www.elconferencista.com"] [uri "/admin/.env.save"] [unique_id "aPr_fr3stWvRfl_UZN7eGgABOTA"]
[Thu Oct 23 21:24:32 2025] [elconferencista.com] [error] [client 3.127.23.167:37792] [pid 219306] apache2_util.c(271): [client 3.127.23.167] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pem/ .pol/ .printer/ .pwd/ .rdb/ .resources/ .resx/ .sql/ .swp/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "1112"] [id "920440"] [msg "URL file extension is restricted by policy"] [data ".bak"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [tag "PCI/6.5.10"] [hostname "www.elconferencista.com"] [uri "/admin/.env.bak"] [unique_id "aPr_gL3stWvRfl_UZN7eIQABOPw"]
[Thu Oct 23 21:24:32 2025] [elconferencista.com] [error] [client 3.127.23.167:37792] [pid 219306] apache2_util.c(271): [client 3.127.23.167] ModSecurity: Warning. Matched phrase ".env" at REQUEST_FILENAME. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "143"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: .env found within REQUEST_FILENAME: /admin/.env.bak"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "www.elconferencista.com"] [uri "/admin/.env.bak"] [unique_id "aPr_gL3stWvRfl_UZN7eIQABOPw"]
[Thu Oct 23 21:24:34 2025] [elconferencista.com] [error] [client 3.127.23.167:37792] [pid 219306] apache2_util.c(271): [client 3.127.23.167] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pem/ .pol/ .printer/ .pwd/ .rdb/ .resources/ .resx/ .sql/ .swp/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "1112"] [id "920440"] [msg "URL file extension is restricted by policy"] [data ".old"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [tag "PCI/6.5.10"] [hostname "www.elconferencista.com"] [uri "/admin/.env.old"] [unique_id "aPr_gr3stWvRfl_UZN7eKAABOPM"]
[Thu Oct 23 21:24:34 2025] [elconferencista.com] [error] [client 3.127.23.167:37792] [pid 219306] apache2_util.c(271): [client 3.127.23.167] ModSecurity: Warning. Matched phrase ".env" at REQUEST_FILENAME. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "143"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: .env found within REQUEST_FILENAME: /admin/.env.old"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "www.elconferencista.com"] [uri "/admin/.env.old"] [unique_id "aPr_gr3stWvRfl_UZN7eKAABOPM"]
[Thu Oct 23 21:24:37 2025] [elconferencista.com] [error] [client 3.127.23.167:37792] [pid 219306] apache2_util.c(271): [client 3.127.23.167] ModSecurity: Warning. Matched phrase ".env" at REQUEST_FILENAME. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "143"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: .env found within REQUEST_FILENAME: /api/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "www.elconferencista.com"] [uri "/api/.env"] [unique_id "aPr_hb3stWvRfl_UZN7eLAABOOU"]
[Thu Oct 23 21:24:39 2025] [elconferencista.com] [error] [client 3.127.23.167:37792] [pid 219306] apache2_util.c(271): [client 3.127.23.167] ModSecurity: Warning. Matched phrase ".env" at REQUEST_FILENAME. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "143"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: .env found within REQUEST_FILENAME: /api/.env.save"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "www.elconferencista.com"] [uri "/api/.env.save"] [unique_id "aPr_h73stWvRfl_UZN7eMAABOLg"]
[Thu Oct 23 21:24:42 2025] [elconferencista.com] [error] [client 3.127.23.167:37792] [pid 219306] apache2_util.c(271): [client 3.127.23.167] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pem/ .pol/ .printer/ .pwd/ .rdb/ .resources/ .resx/ .sql/ .swp/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "1112"] [id "920440"] [msg "URL file extension is restricted by policy"] [data ".bak"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [tag "PCI/6.5.10"] [hostname "www.elconferencista.com"] [uri "/api/.env.bak"] [unique_id "aPr_ir3stWvRfl_UZN7eNgABOU0"]
[Thu Oct 23 21:24:42 2025] [elconferencista.com] [error] [client 3.127.23.167:37792] [pid 219306] apache2_util.c(271): [client 3.127.23.167] ModSecurity: Warning. Matched phrase ".env" at REQUEST_FILENAME. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "143"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: .env found within REQUEST_FILENAME: /api/.env.bak"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "www.elconferencista.com"] [uri "/api/.env.bak"] [unique_id "aPr_ir3stWvRfl_UZN7eNgABOU0"]
[Thu Oct 23 21:24:44 2025] [elconferencista.com] [error] [client 3.127.23.167:37792] [pid 219306] apache2_util.c(271): [client 3.127.23.167] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pem/ .pol/ .printer/ .pwd/ .rdb/ .resources/ .resx/ .sql/ .swp/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "1112"] [id "920440"] [msg "URL file extension is restricted by policy"] [data ".old"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [tag "PCI/6.5.10"] [hostname "www.elconferencista.com"] [uri "/api/.env.old"] [unique_id "aPr_jL3stWvRfl_UZN7ePAABORs"]
[Thu Oct 23 21:24:44 2025] [elconferencista.com] [error] [client 3.127.23.167:37792] [pid 219306] apache2_util.c(271): [client 3.127.23.167] ModSecurity: Warning. Matched phrase ".env" at REQUEST_FILENAME. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "143"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: .env found within REQUEST_FILENAME: /api/.env.old"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "www.elconferencista.com"] [uri "/api/.env.old"] [unique_id "aPr_jL3stWvRfl_UZN7ePAABORs"]
[Thu Oct 23 21:24:47 2025] [elconferencista.com] [error] [client 3.127.23.167:37792] [pid 219306] apache2_util.c(271): [client 3.127.23.167] ModSecurity: Warning. Matched phrase ".env" at REQUEST_FILENAME. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "143"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: .env found within REQUEST_FILENAME: /app/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "www.elconferencista.com"] [uri "/app/.env"] [unique_id "aPr_j73stWvRfl_UZN7eQgABOP8"]
[Thu Oct 23 21:24:49 2025] [elconferencista.com] [error] [client 3.127.23.167:37792] [pid 219306] apache2_util.c(271): [client 3.127.23.167] ModSecurity: Warning. Matched phrase ".env" at REQUEST_FILENAME. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "143"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: .env found within REQUEST_FILENAME: /app/.env.save"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "www.elconferencista.com"] [uri "/app/.env.save"] [unique_id "aPr_kb3stWvRfl_UZN7eRgABOOM"]
[Thu Oct 23 21:24:51 2025] [elconferencista.com] [error] [client 3.127.23.167:37792] [pid 219306] apache2_util.c(271): [client 3.127.23.167] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pem/ .pol/ .printer/ .pwd/ .rdb/ .resources/ .resx/ .sql/ .swp/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "1112"] [id "920440"] [msg "URL file extension is restricted by policy"] [data ".bak"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [tag "PCI/6.5.10"] [hostname "www.elconferencista.com"] [uri "/app/.env.bak"] [unique_id "aPr_k73stWvRfl_UZN7eUgABOM8"]
[Thu Oct 23 21:24:51 2025] [elconferencista.com] [error] [client 3.127.23.167:37792] [pid 219306] apache2_util.c(271): [client 3.127.23.167] ModSecurity: Warning. Matched phrase ".env" at REQUEST_FILENAME. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "143"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: .env found within REQUEST_FILENAME: /app/.env.bak"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "www.elconferencista.com"] [uri "/app/.env.bak"] [unique_id "aPr_k73stWvRfl_UZN7eUgABOM8"]
[Thu Oct 23 21:24:53 2025] [elconferencista.com] [error] [client 3.127.23.167:37792] [pid 219306] apache2_util.c(271): [client 3.127.23.167] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pem/ .pol/ .printer/ .pwd/ .rdb/ .resources/ .resx/ .sql/ .swp/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "1112"] [id "920440"] [msg "URL file extension is restricted by policy"] [data ".old"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [tag "PCI/6.5.10"] [hostname "www.elconferencista.com"] [uri "/app/.env.old"] [unique_id "aPr_lb3stWvRfl_UZN7eXAABOR4"]
[Thu Oct 23 21:24:53 2025] [elconferencista.com] [error] [client 3.127.23.167:37792] [pid 219306] apache2_util.c(271): [client 3.127.23.167] ModSecurity: Warning. Matched phrase ".env" at REQUEST_FILENAME. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "143"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: .env found within REQUEST_FILENAME: /app/.env.old"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "www.elconferencista.com"] [uri "/app/.env.old"] [unique_id "aPr_lb3stWvRfl_UZN7eXAABOR4"]
[Thu Oct 23 21:24:55 2025] [elconferencista.com] [error] [client 3.127.23.167:37792] [pid 219306] apache2_util.c(271): [client 3.127.23.167] ModSecurity: Warning. Matched phrase ".env" at REQUEST_FILENAME. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "143"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: .env found within REQUEST_FILENAME: /config/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "www.elconferencista.com"] [uri "/config/.env"] [unique_id "aPr_l73stWvRfl_UZN7eZAABOKw"]
[Thu Oct 23 21:24:57 2025] [elconferencista.com] [error] [client 3.127.23.167:37792] [pid 219306] apache2_util.c(271): [client 3.127.23.167] ModSecurity: Warning. Matched phrase ".env" at REQUEST_FILENAME. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "143"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: .env found within REQUEST_FILENAME: /config/.env.save"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "www.elconferencista.com"] [uri "/config/.env.save"] [unique_id "aPr_mb3stWvRfl_UZN7eaQABOQs"]
[Thu Oct 23 21:25:00 2025] [elconferencista.com] [error] [client 3.127.23.167:37792] [pid 219306] apache2_util.c(271): [client 3.127.23.167] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pem/ .pol/ .printer/ .pwd/ .rdb/ .resources/ .resx/ .sql/ .swp/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "1112"] [id "920440"] [msg "URL file extension is restricted by policy"] [data ".bak"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [tag "PCI/6.5.10"] [hostname "www.elconferencista.com"] [uri "/config/.env.bak"] [unique_id "aPr_nL3stWvRfl_UZN7ebQABORo"]
[Thu Oct 23 21:25:00 2025] [elconferencista.com] [error] [client 3.127.23.167:37792] [pid 219306] apache2_util.c(271): [client 3.127.23.167] ModSecurity: Warning. Matched phrase ".env" at REQUEST_FILENAME. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "143"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: .env found within REQUEST_FILENAME: /config/.env.bak"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "www.elconferencista.com"] [uri "/config/.env.bak"] [unique_id "aPr_nL3stWvRfl_UZN7ebQABORo"]
[Thu Oct 23 21:25:03 2025] [elconferencista.com] [error] [client 3.127.23.167:37792] [pid 219306] apache2_util.c(271): [client 3.127.23.167] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pem/ .pol/ .printer/ .pwd/ .rdb/ .resources/ .resx/ .sql/ .swp/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "1112"] [id "920440"] [msg "URL file extension is restricted by policy"] [data ".old"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [tag "PCI/6.5.10"] [hostname "www.elconferencista.com"] [uri "/config/.env.old"] [unique_id "aPr_n73stWvRfl_UZN7edQABORU"]
[Thu Oct 23 21:25:03 2025] [elconferencista.com] [error] [client 3.127.23.167:37792] [pid 219306] apache2_util.c(271): [client 3.127.23.167] ModSecurity: Warning. Matched phrase ".env" at REQUEST_FILENAME. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "143"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: .env found within REQUEST_FILENAME: /config/.env.old"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "www.elconferencista.com"] [uri "/config/.env.old"] [unique_id "aPr_n73stWvRfl_UZN7edQABORU"]
[Thu Oct 23 21:25:06 2025] [elconferencista.com] [error] [client 3.127.23.167:37792] [pid 219306] apache2_util.c(271): [client 3.127.23.167] ModSecurity: Warning. Matched phrase ".env" at REQUEST_FILENAME. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "143"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: .env found within REQUEST_FILENAME: /src/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "www.elconferencista.com"] [uri "/src/.env"] [unique_id "aPr_or3stWvRfl_UZN7eggABOPU"]
[Thu Oct 23 21:25:09 2025] [elconferencista.com] [error] [client 3.127.23.167:37792] [pid 219306] apache2_util.c(271): [client 3.127.23.167] ModSecurity: Warning. Matched phrase ".env" at REQUEST_FILENAME. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "143"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: .env found within REQUEST_FILENAME: /src/.env.save"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "www.elconferencista.com"] [uri "/src/.env.save"] [unique_id "aPr_pb3stWvRfl_UZN7eiAABOVA"]
[Thu Oct 23 21:25:11 2025] [elconferencista.com] [error] [client 3.127.23.167:37792] [pid 219306] apache2_util.c(271): [client 3.127.23.167] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pem/ .pol/ .printer/ .pwd/ .rdb/ .resources/ .resx/ .sql/ .swp/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "1112"] [id "920440"] [msg "URL file extension is restricted by policy"] [data ".bak"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [tag "PCI/6.5.10"] [hostname "www.elconferencista.com"] [uri "/src/.env.bak"] [unique_id "aPr_p73stWvRfl_UZN7ejwABOJY"]
[Thu Oct 23 21:25:11 2025] [elconferencista.com] [error] [client 3.127.23.167:37792] [pid 219306] apache2_util.c(271): [client 3.127.23.167] ModSecurity: Warning. Matched phrase ".env" at REQUEST_FILENAME. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "143"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: .env found within REQUEST_FILENAME: /src/.env.bak"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "www.elconferencista.com"] [uri "/src/.env.bak"] [unique_id "aPr_p73stWvRfl_UZN7ejwABOJY"]
[Thu Oct 23 21:25:14 2025] [elconferencista.com] [error] [client 3.127.23.167:37792] [pid 219306] apache2_util.c(271): [client 3.127.23.167] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pem/ .pol/ .printer/ .pwd/ .rdb/ .resources/ .resx/ .sql/ .swp/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "1112"] [id "920440"] [msg "URL file extension is restricted by policy"] [data ".old"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [tag "PCI/6.5.10"] [hostname "www.elconferencista.com"] [uri "/src/.env.old"] [unique_id "aPr_qr3stWvRfl_UZN7elgABOIw"]
[Thu Oct 23 21:25:14 2025] [elconferencista.com] [error] [client 3.127.23.167:37792] [pid 219306] apache2_util.c(271): [client 3.127.23.167] ModSecurity: Warning. Matched phrase ".env" at REQUEST_FILENAME. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "143"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: .env found within REQUEST_FILENAME: /src/.env.old"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "www.elconferencista.com"] [uri "/src/.env.old"] [unique_id "aPr_qr3stWvRfl_UZN7elgABOIw"]
[Thu Oct 23 21:25:16 2025] [elconferencista.com] [error] [client 3.127.23.167:37792] [pid 219306] apache2_util.c(271): [client 3.127.23.167] ModSecurity: Warning. Matched phrase ".env" at REQUEST_FILENAME. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "143"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: .env found within REQUEST_FILENAME: /public/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "www.elconferencista.com"] [uri "/public/.env"] [unique_id "aPr_rL3stWvRfl_UZN7enwABOVQ"]
[Thu Oct 23 21:25:17 2025] [elconferencista.com] [error] [client 3.127.23.167:37792] [pid 219306] apache2_util.c(271): [client 3.127.23.167] ModSecurity: Warning. Matched phrase ".env" at REQUEST_FILENAME. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "143"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: .env found within REQUEST_FILENAME: /public/.env.save"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "www.elconferencista.com"] [uri "/public/.env.save"] [unique_id "aPr_rb3stWvRfl_UZN7epgABOJk"]
[Thu Oct 23 21:25:19 2025] [elconferencista.com] [error] [client 3.127.23.167:37792] [pid 219306] apache2_util.c(271): [client 3.127.23.167] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pem/ .pol/ .printer/ .pwd/ .rdb/ .resources/ .resx/ .sql/ .swp/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "1112"] [id "920440"] [msg "URL file extension is restricted by policy"] [data ".bak"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [tag "PCI/6.5.10"] [hostname "www.elconferencista.com"] [uri "/public/.env.bak"] [unique_id "aPr_r73stWvRfl_UZN7eqQABOKI"]
[Thu Oct 23 21:25:19 2025] [elconferencista.com] [error] [client 3.127.23.167:37792] [pid 219306] apache2_util.c(271): [client 3.127.23.167] ModSecurity: Warning. Matched phrase ".env" at REQUEST_FILENAME. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "143"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: .env found within REQUEST_FILENAME: /public/.env.bak"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "www.elconferencista.com"] [uri "/public/.env.bak"] [unique_id "aPr_r73stWvRfl_UZN7eqQABOKI"]
[Thu Oct 23 21:25:22 2025] [elconferencista.com] [error] [client 3.127.23.167:37792] [pid 219306] apache2_util.c(271): [client 3.127.23.167] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pem/ .pol/ .printer/ .pwd/ .rdb/ .resources/ .resx/ .sql/ .swp/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "1112"] [id "920440"] [msg "URL file extension is restricted by policy"] [data ".old"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [tag "PCI/6.5.10"] [hostname "www.elconferencista.com"] [uri "/public/.env.old"] [unique_id "aPr_sr3stWvRfl_UZN7erAABOLg"]
[Thu Oct 23 21:25:22 2025] [elconferencista.com] [error] [client 3.127.23.167:37792] [pid 219306] apache2_util.c(271): [client 3.127.23.167] ModSecurity: Warning. Matched phrase ".env" at REQUEST_FILENAME. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "143"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: .env found within REQUEST_FILENAME: /public/.env.old"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "www.elconferencista.com"] [uri "/public/.env.old"] [unique_id "aPr_sr3stWvRfl_UZN7erAABOLg"]
[Thu Oct 23 21:25:24 2025] [elconferencista.com] [error] [client 3.127.23.167:37792] [pid 219306] apache2_util.c(271): [client 3.127.23.167] ModSecurity: Warning. Matched phrase ".env" at REQUEST_FILENAME. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "143"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: .env found within REQUEST_FILENAME: /assets/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "www.elconferencista.com"] [uri "/assets/.env"] [unique_id "aPr_tL3stWvRfl_UZN7esgABOMY"]
[Thu Oct 23 21:25:26 2025] [elconferencista.com] [error] [client 3.127.23.167:37792] [pid 219306] apache2_util.c(271): [client 3.127.23.167] ModSecurity: Warning. Matched phrase ".env" at REQUEST_FILENAME. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "143"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: .env found within REQUEST_FILENAME: /assets/.env.save"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "www.elconferencista.com"] [uri "/assets/.env.save"] [unique_id "aPr_tr3stWvRfl_UZN7etQABOQE"]
[Thu Oct 23 21:25:29 2025] [elconferencista.com] [error] [client 3.127.23.167:37792] [pid 219306] apache2_util.c(271): [client 3.127.23.167] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pem/ .pol/ .printer/ .pwd/ .rdb/ .resources/ .resx/ .sql/ .swp/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "1112"] [id "920440"] [msg "URL file extension is restricted by policy"] [data ".bak"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [tag "PCI/6.5.10"] [hostname "www.elconferencista.com"] [uri "/assets/.env.bak"] [unique_id "aPr_ub3stWvRfl_UZN7euwABORs"]
[Thu Oct 23 21:25:29 2025] [elconferencista.com] [error] [client 3.127.23.167:37792] [pid 219306] apache2_util.c(271): [client 3.127.23.167] ModSecurity: Warning. Matched phrase ".env" at REQUEST_FILENAME. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "143"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: .env found within REQUEST_FILENAME: /assets/.env.bak"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "www.elconferencista.com"] [uri "/assets/.env.bak"] [unique_id "aPr_ub3stWvRfl_UZN7euwABORs"]
[Thu Oct 23 21:25:31 2025] [elconferencista.com] [error] [client 3.127.23.167:37792] [pid 219306] apache2_util.c(271): [client 3.127.23.167] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pem/ .pol/ .printer/ .pwd/ .rdb/ .resources/ .resx/ .sql/ .swp/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "1112"] [id "920440"] [msg "URL file extension is restricted by policy"] [data ".old"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [tag "PCI/6.5.10"] [hostname "www.elconferencista.com"] [uri "/assets/.env.old"] [unique_id "aPr_u73stWvRfl_UZN7evgABOMA"]
[Thu Oct 23 21:25:31 2025] [elconferencista.com] [error] [client 3.127.23.167:37792] [pid 219306] apache2_util.c(271): [client 3.127.23.167] ModSecurity: Warning. Matched phrase ".env" at REQUEST_FILENAME. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "143"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: .env found within REQUEST_FILENAME: /assets/.env.old"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "www.elconferencista.com"] [uri "/assets/.env.old"] [unique_id "aPr_u73stWvRfl_UZN7evgABOMA"]
[Thu Oct 23 21:25:33 2025] [elconferencista.com] [error] [client 3.127.23.167:37792] [pid 219306] apache2_util.c(271): [client 3.127.23.167] ModSecurity: Warning. Matched phrase ".env" at REQUEST_FILENAME. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "143"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: .env found within REQUEST_FILENAME: /includes/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "www.elconferencista.com"] [uri "/includes/.env"] [unique_id "aPr_vb3stWvRfl_UZN7eygABONg"]
[Thu Oct 23 21:25:35 2025] [elconferencista.com] [error] [client 3.127.23.167:37792] [pid 219306] apache2_util.c(271): [client 3.127.23.167] ModSecurity: Warning. Matched phrase ".env" at REQUEST_FILENAME. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "143"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: .env found within REQUEST_FILENAME: /includes/.env.save"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "www.elconferencista.com"] [uri "/includes/.env.save"] [unique_id "aPr_v73stWvRfl_UZN7ezwABOKQ"]
[Thu Oct 23 21:25:44 2025] [elconferencista.com] [error] [client 3.127.23.167:48072] [pid 219306] apache2_util.c(271): [client 3.127.23.167] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pem/ .pol/ .printer/ .pwd/ .rdb/ .resources/ .resx/ .sql/ .swp/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "1112"] [id "920440"] [msg "URL file extension is restricted by policy"] [data ".bak"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [tag "PCI/6.5.10"] [hostname "www.elconferencista.com"] [uri "/includes/.env.bak"] [unique_id "aPr_yL3stWvRfl_UZN7e2QABOLw"]
[Thu Oct 23 21:25:44 2025] [elconferencista.com] [error] [client 3.127.23.167:48072] [pid 219306] apache2_util.c(271): [client 3.127.23.167] ModSecurity: Warning. Matched phrase ".env" at REQUEST_FILENAME. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "143"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: .env found within REQUEST_FILENAME: /includes/.env.bak"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "www.elconferencista.com"] [uri "/includes/.env.bak"] [unique_id "aPr_yL3stWvRfl_UZN7e2QABOLw"]
[Thu Oct 23 21:25:53 2025] [elconferencista.com] [error] [client 3.127.23.167:50384] [pid 219306] apache2_util.c(271): [client 3.127.23.167] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pem/ .pol/ .printer/ .pwd/ .rdb/ .resources/ .resx/ .sql/ .swp/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "1112"] [id "920440"] [msg "URL file extension is restricted by policy"] [data ".old"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [tag "PCI/6.5.10"] [hostname "www.elconferencista.com"] [uri "/includes/.env.old"] [unique_id "aPr_0b3stWvRfl_UZN7e7QABOIU"]
[Thu Oct 23 21:25:53 2025] [elconferencista.com] [error] [client 3.127.23.167:50384] [pid 219306] apache2_util.c(271): [client 3.127.23.167] ModSecurity: Warning. Matched phrase ".env" at REQUEST_FILENAME. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "143"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: .env found within REQUEST_FILENAME: /includes/.env.old"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "www.elconferencista.com"] [uri "/includes/.env.old"] [unique_id "aPr_0b3stWvRfl_UZN7e7QABOIU"]
[Thu Oct 23 21:25:57 2025] [elconferencista.com] [error] [client 3.127.23.167:50384] [pid 219306] apache2_util.c(271): [client 3.127.23.167] ModSecurity: Warning. Matched phrase ".env" at REQUEST_FILENAME. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "143"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: .env found within REQUEST_FILENAME: /lib/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "www.elconferencista.com"] [uri "/lib/.env"] [unique_id "aPr_1b3stWvRfl_UZN7e9gABOJo"]
[Thu Oct 23 21:26:01 2025] [elconferencista.com] [error] [client 3.127.23.167:50384] [pid 219306] apache2_util.c(271): [client 3.127.23.167] ModSecurity: Warning. Matched phrase ".env" at REQUEST_FILENAME. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "143"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: .env found within REQUEST_FILENAME: /lib/.env.save"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "www.elconferencista.com"] [uri "/lib/.env.save"] [unique_id "aPr_2b3stWvRfl_UZN7fBQABOSE"]
[Thu Oct 23 21:26:13 2025] [elconferencista.com] [error] [client 3.127.23.167:54550] [pid 219306] apache2_util.c(271): [client 3.127.23.167] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pem/ .pol/ .printer/ .pwd/ .rdb/ .resources/ .resx/ .sql/ .swp/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "1112"] [id "920440"] [msg "URL file extension is restricted by policy"] [data ".bak"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [tag "PCI/6.5.10"] [hostname "www.elconferencista.com"] [uri "/lib/.env.bak"] [unique_id "aPr_5b3stWvRfl_UZN7fLwABORI"]
[Thu Oct 23 21:26:13 2025] [elconferencista.com] [error] [client 3.127.23.167:54550] [pid 219306] apache2_util.c(271): [client 3.127.23.167] ModSecurity: Warning. Matched phrase ".env" at REQUEST_FILENAME. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "143"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: .env found within REQUEST_FILENAME: /lib/.env.bak"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "www.elconferencista.com"] [uri "/lib/.env.bak"] [unique_id "aPr_5b3stWvRfl_UZN7fLwABORI"]
[Thu Oct 23 21:26:22 2025] [elconferencista.com] [error] [client 3.127.23.167:43078] [pid 219306] apache2_util.c(271): [client 3.127.23.167] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pem/ .pol/ .printer/ .pwd/ .rdb/ .resources/ .resx/ .sql/ .swp/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "1112"] [id "920440"] [msg "URL file extension is restricted by policy"] [data ".old"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [tag "PCI/6.5.10"] [hostname "www.elconferencista.com"] [uri "/lib/.env.old"] [unique_id "aPr_7r3stWvRfl_UZN7fSwABOMc"]
[Thu Oct 23 21:26:22 2025] [elconferencista.com] [error] [client 3.127.23.167:43078] [pid 219306] apache2_util.c(271): [client 3.127.23.167] ModSecurity: Warning. Matched phrase ".env" at REQUEST_FILENAME. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "143"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: .env found within REQUEST_FILENAME: /lib/.env.old"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "www.elconferencista.com"] [uri "/lib/.env.old"] [unique_id "aPr_7r3stWvRfl_UZN7fSwABOMc"]
[Thu Oct 23 21:26:24 2025] [elconferencista.com] [error] [client 3.127.23.167:43078] [pid 219306] apache2_util.c(271): [client 3.127.23.167] ModSecurity: Warning. Matched phrase ".env" at REQUEST_FILENAME. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "143"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: .env found within REQUEST_FILENAME: /application/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "www.elconferencista.com"] [uri "/application/.env"] [unique_id "aPr_8L3stWvRfl_UZN7fUwABOUw"]
[Thu Oct 23 21:26:26 2025] [elconferencista.com] [error] [client 3.127.23.167:43078] [pid 219306] apache2_util.c(271): [client 3.127.23.167] ModSecurity: Warning. Matched phrase ".env" at REQUEST_FILENAME. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "143"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: .env found within REQUEST_FILENAME: /application/.env.save"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "www.elconferencista.com"] [uri "/application/.env.save"] [unique_id "aPr_8r3stWvRfl_UZN7fWwABOIY"]
[Thu Oct 23 21:26:28 2025] [elconferencista.com] [error] [client 3.127.23.167:43078] [pid 219306] apache2_util.c(271): [client 3.127.23.167] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pem/ .pol/ .printer/ .pwd/ .rdb/ .resources/ .resx/ .sql/ .swp/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "1112"] [id "920440"] [msg "URL file extension is restricted by policy"] [data ".bak"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [tag "PCI/6.5.10"] [hostname "www.elconferencista.com"] [uri "/application/.env.bak"] [unique_id "aPr_9L3stWvRfl_UZN7fYgABOLs"]
[Thu Oct 23 21:26:28 2025] [elconferencista.com] [error] [client 3.127.23.167:43078] [pid 219306] apache2_util.c(271): [client 3.127.23.167] ModSecurity: Warning. Matched phrase ".env" at REQUEST_FILENAME. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "143"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: .env found within REQUEST_FILENAME: /application/.env.bak"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "www.elconferencista.com"] [uri "/application/.env.bak"] [unique_id "aPr_9L3stWvRfl_UZN7fYgABOLs"]
[Thu Oct 23 21:26:31 2025] [elconferencista.com] [error] [client 3.127.23.167:43078] [pid 219306] apache2_util.c(271): [client 3.127.23.167] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pem/ .pol/ .printer/ .pwd/ .rdb/ .resources/ .resx/ .sql/ .swp/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "1112"] [id "920440"] [msg "URL file extension is restricted by policy"] [data ".old"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [tag "PCI/6.5.10"] [hostname "www.elconferencista.com"] [uri "/application/.env.old"] [unique_id "aPr_973stWvRfl_UZN7faAABOJg"]
[Thu Oct 23 21:26:31 2025] [elconferencista.com] [error] [client 3.127.23.167:43078] [pid 219306] apache2_util.c(271): [client 3.127.23.167] ModSecurity: Warning. Matched phrase ".env" at REQUEST_FILENAME. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "143"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: .env found within REQUEST_FILENAME: /application/.env.old"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "www.elconferencista.com"] [uri "/application/.env.old"] [unique_id "aPr_973stWvRfl_UZN7faAABOJg"]
[Thu Oct 23 21:26:33 2025] [elconferencista.com] [error] [client 3.127.23.167:43078] [pid 219306] apache2_util.c(271): [client 3.127.23.167] ModSecurity: Warning. Matched phrase ".env" at REQUEST_FILENAME. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "143"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: .env found within REQUEST_FILENAME: /system/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "www.elconferencista.com"] [uri "/system/.env"] [unique_id "aPr_-b3stWvRfl_UZN7fbQABOIw"]
[Thu Oct 23 21:26:35 2025] [elconferencista.com] [error] [client 3.127.23.167:43078] [pid 219306] apache2_util.c(271): [client 3.127.23.167] ModSecurity: Warning. Matched phrase ".env" at REQUEST_FILENAME. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "143"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: .env found within REQUEST_FILENAME: /system/.env.save"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "www.elconferencista.com"] [uri "/system/.env.save"] [unique_id "aPr_-73stWvRfl_UZN7fcwABOVQ"]
[Thu Oct 23 21:26:37 2025] [elconferencista.com] [error] [client 3.127.23.167:43078] [pid 219306] apache2_util.c(271): [client 3.127.23.167] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pem/ .pol/ .printer/ .pwd/ .rdb/ .resources/ .resx/ .sql/ .swp/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "1112"] [id "920440"] [msg "URL file extension is restricted by policy"] [data ".bak"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [tag "PCI/6.5.10"] [hostname "www.elconferencista.com"] [uri "/system/.env.bak"] [unique_id "aPr__b3stWvRfl_UZN7fewABONk"]
[Thu Oct 23 21:26:37 2025] [elconferencista.com] [error] [client 3.127.23.167:43078] [pid 219306] apache2_util.c(271): [client 3.127.23.167] ModSecurity: Warning. Matched phrase ".env" at REQUEST_FILENAME. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "143"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: .env found within REQUEST_FILENAME: /system/.env.bak"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "www.elconferencista.com"] [uri "/system/.env.bak"] [unique_id "aPr__b3stWvRfl_UZN7fewABONk"]
[Thu Oct 23 21:26:39 2025] [elconferencista.com] [error] [client 3.127.23.167:43078] [pid 219306] apache2_util.c(271): [client 3.127.23.167] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pem/ .pol/ .printer/ .pwd/ .rdb/ .resources/ .resx/ .sql/ .swp/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "1112"] [id "920440"] [msg "URL file extension is restricted by policy"] [data ".old"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [tag "PCI/6.5.10"] [hostname "www.elconferencista.com"] [uri "/system/.env.old"] [unique_id "aPr__73stWvRfl_UZN7fgQABOLg"]
[Thu Oct 23 21:26:39 2025] [elconferencista.com] [error] [client 3.127.23.167:43078] [pid 219306] apache2_util.c(271): [client 3.127.23.167] ModSecurity: Warning. Matched phrase ".env" at REQUEST_FILENAME. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "143"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: .env found within REQUEST_FILENAME: /system/.env.old"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "www.elconferencista.com"] [uri "/system/.env.old"] [unique_id "aPr__73stWvRfl_UZN7fgQABOLg"]
[Thu Oct 23 21:26:42 2025] [elconferencista.com] [error] [client 3.127.23.167:43078] [pid 219306] apache2_util.c(271): [client 3.127.23.167] ModSecurity: Warning. Matched phrase ".env" at REQUEST_FILENAME. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "143"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: .env found within REQUEST_FILENAME: /core/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "www.elconferencista.com"] [uri "/core/.env"] [unique_id "aPsAAr3stWvRfl_UZN7fjAABOS8"]
[Thu Oct 23 21:26:45 2025] [elconferencista.com] [error] [client 3.127.23.167:43078] [pid 219306] apache2_util.c(271): [client 3.127.23.167] ModSecurity: Warning. Matched phrase ".env" at REQUEST_FILENAME. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "143"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: .env found within REQUEST_FILENAME: /core/.env.save"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "www.elconferencista.com"] [uri "/core/.env.save"] [unique_id "aPsABb3stWvRfl_UZN7flgABOJw"]
[Thu Oct 23 21:26:48 2025] [elconferencista.com] [error] [client 3.127.23.167:43078] [pid 219306] apache2_util.c(271): [client 3.127.23.167] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pem/ .pol/ .printer/ .pwd/ .rdb/ .resources/ .resx/ .sql/ .swp/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "1112"] [id "920440"] [msg "URL file extension is restricted by policy"] [data ".bak"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [tag "PCI/6.5.10"] [hostname "www.elconferencista.com"] [uri "/core/.env.bak"] [unique_id "aPsACL3stWvRfl_UZN7fngABONQ"]
[Thu Oct 23 21:26:48 2025] [elconferencista.com] [error] [client 3.127.23.167:43078] [pid 219306] apache2_util.c(271): [client 3.127.23.167] ModSecurity: Warning. Matched phrase ".env" at REQUEST_FILENAME. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "143"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: .env found within REQUEST_FILENAME: /core/.env.bak"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "www.elconferencista.com"] [uri "/core/.env.bak"] [unique_id "aPsACL3stWvRfl_UZN7fngABONQ"]
[Thu Oct 23 21:26:50 2025] [elconferencista.com] [error] [client 3.127.23.167:43078] [pid 219306] apache2_util.c(271): [client 3.127.23.167] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pem/ .pol/ .printer/ .pwd/ .rdb/ .resources/ .resx/ .sql/ .swp/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "1112"] [id "920440"] [msg "URL file extension is restricted by policy"] [data ".old"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [tag "PCI/6.5.10"] [hostname "www.elconferencista.com"] [uri "/core/.env.old"] [unique_id "aPsACr3stWvRfl_UZN7fowABOTM"]
[Thu Oct 23 21:26:50 2025] [elconferencista.com] [error] [client 3.127.23.167:43078] [pid 219306] apache2_util.c(271): [client 3.127.23.167] ModSecurity: Warning. Matched phrase ".env" at REQUEST_FILENAME. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "143"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: .env found within REQUEST_FILENAME: /core/.env.old"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "www.elconferencista.com"] [uri "/core/.env.old"] [unique_id "aPsACr3stWvRfl_UZN7fowABOTM"]
[Thu Oct 23 21:26:53 2025] [elconferencista.com] [error] [client 3.127.23.167:43078] [pid 219306] apache2_util.c(271): [client 3.127.23.167] ModSecurity: Warning. Matched phrase ".env" at REQUEST_FILENAME. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "143"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: .env found within REQUEST_FILENAME: /modules/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "www.elconferencista.com"] [uri "/modules/.env"] [unique_id "aPsADb3stWvRfl_UZN7fqAABOLU"]
[Thu Oct 23 21:26:56 2025] [elconferencista.com] [error] [client 3.127.23.167:43078] [pid 219306] apache2_util.c(271): [client 3.127.23.167] ModSecurity: Warning. Matched phrase ".env" at REQUEST_FILENAME. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "143"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: .env found within REQUEST_FILENAME: /modules/.env.save"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "www.elconferencista.com"] [uri "/modules/.env.save"] [unique_id "aPsAEL3stWvRfl_UZN7frQABOP0"]
[Thu Oct 23 21:26:58 2025] [elconferencista.com] [error] [client 3.127.23.167:43078] [pid 219306] apache2_util.c(271): [client 3.127.23.167] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pem/ .pol/ .printer/ .pwd/ .rdb/ .resources/ .resx/ .sql/ .swp/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "1112"] [id "920440"] [msg "URL file extension is restricted by policy"] [data ".bak"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [tag "PCI/6.5.10"] [hostname "www.elconferencista.com"] [uri "/modules/.env.bak"] [unique_id "aPsAEr3stWvRfl_UZN7fsgABOV8"]
[Thu Oct 23 21:26:58 2025] [elconferencista.com] [error] [client 3.127.23.167:43078] [pid 219306] apache2_util.c(271): [client 3.127.23.167] ModSecurity: Warning. Matched phrase ".env" at REQUEST_FILENAME. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "143"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: .env found within REQUEST_FILENAME: /modules/.env.bak"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "www.elconferencista.com"] [uri "/modules/.env.bak"] [unique_id "aPsAEr3stWvRfl_UZN7fsgABOV8"]
[Thu Oct 23 21:27:00 2025] [elconferencista.com] [error] [client 3.127.23.167:43078] [pid 219306] apache2_util.c(271): [client 3.127.23.167] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pem/ .pol/ .printer/ .pwd/ .rdb/ .resources/ .resx/ .sql/ .swp/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "1112"] [id "920440"] [msg "URL file extension is restricted by policy"] [data ".old"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [tag "PCI/6.5.10"] [hostname "www.elconferencista.com"] [uri "/modules/.env.old"] [unique_id "aPsAFL3stWvRfl_UZN7fugABOKA"]
[Thu Oct 23 21:27:00 2025] [elconferencista.com] [error] [client 3.127.23.167:43078] [pid 219306] apache2_util.c(271): [client 3.127.23.167] ModSecurity: Warning. Matched phrase ".env" at REQUEST_FILENAME. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "143"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: .env found within REQUEST_FILENAME: /modules/.env.old"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "www.elconferencista.com"] [uri "/modules/.env.old"] [unique_id "aPsAFL3stWvRfl_UZN7fugABOKA"]
[Thu Oct 23 21:27:02 2025] [elconferencista.com] [error] [client 3.127.23.167:43078] [pid 219306] apache2_util.c(271): [client 3.127.23.167] ModSecurity: Warning. Matched phrase ".env" at REQUEST_FILENAME. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "143"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: .env found within REQUEST_FILENAME: /plugins/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "www.elconferencista.com"] [uri "/plugins/.env"] [unique_id "aPsAFr3stWvRfl_UZN7fwAABOO4"]
[Thu Oct 23 21:27:13 2025] [elconferencista.com] [error] [client 3.127.23.167:60952] [pid 219306] apache2_util.c(271): [client 3.127.23.167] ModSecurity: Warning. Matched phrase ".env" at REQUEST_FILENAME. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "143"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: .env found within REQUEST_FILENAME: /plugins/.env.save"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "www.elconferencista.com"] [uri "/plugins/.env.save"] [unique_id "aPsAIb3stWvRfl_UZN7f0gABOTY"]
[Thu Oct 23 21:27:16 2025] [elconferencista.com] [error] [client 3.127.23.167:60952] [pid 219306] apache2_util.c(271): [client 3.127.23.167] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pem/ .pol/ .printer/ .pwd/ .rdb/ .resources/ .resx/ .sql/ .swp/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "1112"] [id "920440"] [msg "URL file extension is restricted by policy"] [data ".bak"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [tag "PCI/6.5.10"] [hostname "www.elconferencista.com"] [uri "/plugins/.env.bak"] [unique_id "aPsAJL3stWvRfl_UZN7f1gABOP4"]
[Thu Oct 23 21:27:16 2025] [elconferencista.com] [error] [client 3.127.23.167:60952] [pid 219306] apache2_util.c(271): [client 3.127.23.167] ModSecurity: Warning. Matched phrase ".env" at REQUEST_FILENAME. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "143"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: .env found within REQUEST_FILENAME: /plugins/.env.bak"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "www.elconferencista.com"] [uri "/plugins/.env.bak"] [unique_id "aPsAJL3stWvRfl_UZN7f1gABOP4"]
[Thu Oct 23 21:27:19 2025] [elconferencista.com] [error] [client 3.127.23.167:60952] [pid 219306] apache2_util.c(271): [client 3.127.23.167] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pem/ .pol/ .printer/ .pwd/ .rdb/ .resources/ .resx/ .sql/ .swp/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "1112"] [id "920440"] [msg "URL file extension is restricted by policy"] [data ".old"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [tag "PCI/6.5.10"] [hostname "www.elconferencista.com"] [uri "/plugins/.env.old"] [unique_id "aPsAJ73stWvRfl_UZN7f4AABOJU"]
[Thu Oct 23 21:27:19 2025] [elconferencista.com] [error] [client 3.127.23.167:60952] [pid 219306] apache2_util.c(271): [client 3.127.23.167] ModSecurity: Warning. Matched phrase ".env" at REQUEST_FILENAME. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "143"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: .env found within REQUEST_FILENAME: /plugins/.env.old"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "www.elconferencista.com"] [uri "/plugins/.env.old"] [unique_id "aPsAJ73stWvRfl_UZN7f4AABOJU"]
[Thu Oct 23 21:27:21 2025] [elconferencista.com] [error] [client 3.127.23.167:60952] [pid 219306] apache2_util.c(271): [client 3.127.23.167] ModSecurity: Warning. Matched phrase ".env" at REQUEST_FILENAME. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "143"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: .env found within REQUEST_FILENAME: /themes/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "www.elconferencista.com"] [uri "/themes/.env"] [unique_id "aPsAKb3stWvRfl_UZN7f5gABOUs"]
[Thu Oct 23 21:27:24 2025] [elconferencista.com] [error] [client 3.127.23.167:60952] [pid 219306] apache2_util.c(271): [client 3.127.23.167] ModSecurity: Warning. Matched phrase ".env" at REQUEST_FILENAME. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "143"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: .env found within REQUEST_FILENAME: /themes/.env.save"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "www.elconferencista.com"] [uri "/themes/.env.save"] [unique_id "aPsALL3stWvRfl_UZN7f6QABOUA"]
[Thu Oct 23 21:27:27 2025] [elconferencista.com] [error] [client 3.127.23.167:60952] [pid 219306] apache2_util.c(271): [client 3.127.23.167] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pem/ .pol/ .printer/ .pwd/ .rdb/ .resources/ .resx/ .sql/ .swp/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "1112"] [id "920440"] [msg "URL file extension is restricted by policy"] [data ".bak"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [tag "PCI/6.5.10"] [hostname "www.elconferencista.com"] [uri "/themes/.env.bak"] [unique_id "aPsAL73stWvRfl_UZN7gBAABOVQ"]
[Thu Oct 23 21:27:27 2025] [elconferencista.com] [error] [client 3.127.23.167:60952] [pid 219306] apache2_util.c(271): [client 3.127.23.167] ModSecurity: Warning. Matched phrase ".env" at REQUEST_FILENAME. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "143"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: .env found within REQUEST_FILENAME: /themes/.env.bak"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "www.elconferencista.com"] [uri "/themes/.env.bak"] [unique_id "aPsAL73stWvRfl_UZN7gBAABOVQ"]
[Thu Oct 23 21:27:30 2025] [elconferencista.com] [error] [client 3.127.23.167:60952] [pid 219306] apache2_util.c(271): [client 3.127.23.167] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pem/ .pol/ .printer/ .pwd/ .rdb/ .resources/ .resx/ .sql/ .swp/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "1112"] [id "920440"] [msg "URL file extension is restricted by policy"] [data ".old"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [tag "PCI/6.5.10"] [hostname "www.elconferencista.com"] [uri "/themes/.env.old"] [unique_id "aPsAMr3stWvRfl_UZN7gDQABOPQ"]
[Thu Oct 23 21:27:30 2025] [elconferencista.com] [error] [client 3.127.23.167:60952] [pid 219306] apache2_util.c(271): [client 3.127.23.167] ModSecurity: Warning. Matched phrase ".env" at REQUEST_FILENAME. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "143"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: .env found within REQUEST_FILENAME: /themes/.env.old"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "www.elconferencista.com"] [uri "/themes/.env.old"] [unique_id "aPsAMr3stWvRfl_UZN7gDQABOPQ"]
[Thu Oct 23 21:27:33 2025] [elconferencista.com] [error] [client 3.127.23.167:60952] [pid 219306] apache2_util.c(271): [client 3.127.23.167] ModSecurity: Warning. Matched phrase ".env" at REQUEST_FILENAME. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "143"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: .env found within REQUEST_FILENAME: /vendor/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "www.elconferencista.com"] [uri "/vendor/.env"] [unique_id "aPsANb3stWvRfl_UZN7gDwABONs"]
[Thu Oct 23 21:27:35 2025] [elconferencista.com] [error] [client 3.127.23.167:60952] [pid 219306] apache2_util.c(271): [client 3.127.23.167] ModSecurity: Warning. Matched phrase ".env" at REQUEST_FILENAME. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "143"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: .env found within REQUEST_FILENAME: /vendor/.env.save"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "www.elconferencista.com"] [uri "/vendor/.env.save"] [unique_id "aPsAN73stWvRfl_UZN7gFgABOOc"]
[Thu Oct 23 21:27:37 2025] [elconferencista.com] [error] [client 3.127.23.167:60952] [pid 219306] apache2_util.c(271): [client 3.127.23.167] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pem/ .pol/ .printer/ .pwd/ .rdb/ .resources/ .resx/ .sql/ .swp/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "1112"] [id "920440"] [msg "URL file extension is restricted by policy"] [data ".bak"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [tag "PCI/6.5.10"] [hostname "www.elconferencista.com"] [uri "/vendor/.env.bak"] [unique_id "aPsAOb3stWvRfl_UZN7gHgABONg"]
[Thu Oct 23 21:27:37 2025] [elconferencista.com] [error] [client 3.127.23.167:60952] [pid 219306] apache2_util.c(271): [client 3.127.23.167] ModSecurity: Warning. Matched phrase ".env" at REQUEST_FILENAME. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "143"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: .env found within REQUEST_FILENAME: /vendor/.env.bak"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "www.elconferencista.com"] [uri "/vendor/.env.bak"] [unique_id "aPsAOb3stWvRfl_UZN7gHgABONg"]
[Thu Oct 23 21:27:39 2025] [elconferencista.com] [error] [client 3.127.23.167:60952] [pid 219306] apache2_util.c(271): [client 3.127.23.167] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pem/ .pol/ .printer/ .pwd/ .rdb/ .resources/ .resx/ .sql/ .swp/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "1112"] [id "920440"] [msg "URL file extension is restricted by policy"] [data ".old"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [tag "PCI/6.5.10"] [hostname "www.elconferencista.com"] [uri "/vendor/.env.old"] [unique_id "aPsAO73stWvRfl_UZN7gIQABOU0"]
[Thu Oct 23 21:27:39 2025] [elconferencista.com] [error] [client 3.127.23.167:60952] [pid 219306] apache2_util.c(271): [client 3.127.23.167] ModSecurity: Warning. Matched phrase ".env" at REQUEST_FILENAME. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "143"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: .env found within REQUEST_FILENAME: /vendor/.env.old"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "www.elconferencista.com"] [uri "/vendor/.env.old"] [unique_id "aPsAO73stWvRfl_UZN7gIQABOU0"]
[Thu Oct 23 21:27:42 2025] [elconferencista.com] [error] [client 3.127.23.167:60952] [pid 219306] apache2_util.c(271): [client 3.127.23.167] ModSecurity: Warning. Matched phrase ".env" at REQUEST_FILENAME. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "143"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: .env found within REQUEST_FILENAME: /storage/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "www.elconferencista.com"] [uri "/storage/.env"] [unique_id "aPsAPr3stWvRfl_UZN7gKAABOI0"]
[Thu Oct 23 21:27:44 2025] [elconferencista.com] [error] [client 3.127.23.167:60952] [pid 219306] apache2_util.c(271): [client 3.127.23.167] ModSecurity: Warning. Matched phrase ".env" at REQUEST_FILENAME. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "143"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: .env found within REQUEST_FILENAME: /storage/.env.save"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "www.elconferencista.com"] [uri "/storage/.env.save"] [unique_id "aPsAQL3stWvRfl_UZN7gMAABOTM"]
[Thu Oct 23 21:27:46 2025] [elconferencista.com] [error] [client 3.127.23.167:60952] [pid 219306] apache2_util.c(271): [client 3.127.23.167] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pem/ .pol/ .printer/ .pwd/ .rdb/ .resources/ .resx/ .sql/ .swp/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "1112"] [id "920440"] [msg "URL file extension is restricted by policy"] [data ".bak"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [tag "PCI/6.5.10"] [hostname "www.elconferencista.com"] [uri "/storage/.env.bak"] [unique_id "aPsAQr3stWvRfl_UZN7gNwABOUY"]
[Thu Oct 23 21:27:46 2025] [elconferencista.com] [error] [client 3.127.23.167:60952] [pid 219306] apache2_util.c(271): [client 3.127.23.167] ModSecurity: Warning. Matched phrase ".env" at REQUEST_FILENAME. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "143"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: .env found within REQUEST_FILENAME: /storage/.env.bak"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "www.elconferencista.com"] [uri "/storage/.env.bak"] [unique_id "aPsAQr3stWvRfl_UZN7gNwABOUY"]
[Thu Oct 23 21:27:48 2025] [elconferencista.com] [error] [client 3.127.23.167:60952] [pid 219306] apache2_util.c(271): [client 3.127.23.167] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pem/ .pol/ .printer/ .pwd/ .rdb/ .resources/ .resx/ .sql/ .swp/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "1112"] [id "920440"] [msg "URL file extension is restricted by policy"] [data ".old"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [tag "PCI/6.5.10"] [hostname "www.elconferencista.com"] [uri "/storage/.env.old"] [unique_id "aPsARL3stWvRfl_UZN7gPQABOPM"]
[Thu Oct 23 21:27:48 2025] [elconferencista.com] [error] [client 3.127.23.167:60952] [pid 219306] apache2_util.c(271): [client 3.127.23.167] ModSecurity: Warning. Matched phrase ".env" at REQUEST_FILENAME. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "143"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: .env found within REQUEST_FILENAME: /storage/.env.old"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "www.elconferencista.com"] [uri "/storage/.env.old"] [unique_id "aPsARL3stWvRfl_UZN7gPQABOPM"]
[Thu Oct 23 21:27:50 2025] [elconferencista.com] [error] [client 3.127.23.167:60952] [pid 219306] mod_access_compat.c(350): AH01797: client denied by server configuration: /home/ednermusika/elconferencista.com/phpinfo.php
[Thu Oct 23 21:27:52 2025] [elconferencista.com] [error] [client 3.127.23.167:60952] [pid 219306] mod_access_compat.c(350): AH01797: client denied by server configuration: /home/ednermusika/elconferencista.com/info.php
[Thu Oct 23 21:27:54 2025] [elconferencista.com] [error] [client 3.127.23.167:60952] [pid 219306] mod_access_compat.c(350): AH01797: client denied by server configuration: /home/ednermusika/elconferencista.com/php_info.php
[Thu Oct 23 21:27:58 2025] [elconferencista.com] [error] [client 3.127.23.167:60952] [pid 219306] mod_access_compat.c(350): AH01797: client denied by server configuration: /home/ednermusika/elconferencista.com/test.php
[Thu Oct 23 21:28:00 2025] [elconferencista.com] [error] [client 3.127.23.167:60952] [pid 219306] mod_access_compat.c(350): AH01797: client denied by server configuration: /home/ednermusika/elconferencista.com/info1.php
[Thu Oct 23 21:28:02 2025] [elconferencista.com] [error] [client 3.127.23.167:60952] [pid 219306] mod_access_compat.c(350): AH01797: client denied by server configuration: /home/ednermusika/elconferencista.com/info2.php
[Thu Oct 23 21:28:05 2025] [elconferencista.com] [error] [client 3.127.23.167:60952] [pid 219306] mod_access_compat.c(350): AH01797: client denied by server configuration: /home/ednermusika/elconferencista.com/php.php
[Thu Oct 23 21:28:07 2025] [elconferencista.com] [error] [client 3.127.23.167:60952] [pid 219306] mod_access_compat.c(350): AH01797: client denied by server configuration: /home/ednermusika/elconferencista.com/pi.php
[Thu Oct 23 21:28:10 2025] [elconferencista.com] [error] [client 3.127.23.167:60952] [pid 219306] mod_access_compat.c(350): AH01797: client denied by server configuration: /home/ednermusika/elconferencista.com/i.php
[Thu Oct 23 21:28:12 2025] [elconferencista.com] [error] [client 3.127.23.167:60952] [pid 219306] mod_access_compat.c(350): AH01797: client denied by server configuration: /home/ednermusika/elconferencista.com/phpversion.php
[Thu Oct 23 21:28:14 2025] [elconferencista.com] [error] [client 3.127.23.167:60952] [pid 219306] mod_access_compat.c(350): AH01797: client denied by server configuration: /home/ednermusika/elconferencista.com/php_version.php
[Thu Oct 23 21:28:16 2025] [elconferencista.com] [error] [client 3.127.23.167:60952] [pid 219306] mod_access_compat.c(350): AH01797: client denied by server configuration: /home/ednermusika/elconferencista.com/serverinfo.php
[Thu Oct 23 21:28:18 2025] [elconferencista.com] [error] [client 3.127.23.167:60952] [pid 219306] mod_access_compat.c(350): AH01797: client denied by server configuration: /home/ednermusika/elconferencista.com/server.php
[Thu Oct 23 21:28:20 2025] [elconferencista.com] [error] [client 3.127.23.167:60952] [pid 219306] mod_access_compat.c(350): AH01797: client denied by server configuration: /home/ednermusika/elconferencista.com/debug.php
[Thu Oct 23 21:28:22 2025] [elconferencista.com] [error] [client 3.127.23.167:60952] [pid 219306] mod_access_compat.c(350): AH01797: client denied by server configuration: /home/ednermusika/elconferencista.com/diagnostic.php
[Thu Oct 23 21:28:24 2025] [elconferencista.com] [error] [client 3.127.23.167:60952] [pid 219306] mod_access_compat.c(350): AH01797: client denied by server configuration: /home/ednermusika/elconferencista.com/phptest.php
[Thu Oct 23 21:28:26 2025] [elconferencista.com] [error] [client 3.127.23.167:60952] [pid 219306] mod_access_compat.c(350): AH01797: client denied by server configuration: /home/ednermusika/elconferencista.com/check.php
[Thu Oct 23 21:28:37 2025] [elconferencista.com] [error] [client 3.127.23.167:60952] [pid 219306] apache2_util.c(271): [client 3.127.23.167] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pem/ .pol/ .printer/ .pwd/ .rdb/ .resources/ .resx/ .sql/ .swp/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "1112"] [id "920440"] [msg "URL file extension is restricted by policy"] [data ".bak"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [tag "PCI/6.5.10"] [hostname "www.elconferencista.com"] [uri "/phpinfo.php.bak"] [unique_id "aPsAdb3stWvRfl_UZN7hgAABORM"]
[Thu Oct 23 21:28:39 2025] [elconferencista.com] [error] [client 3.127.23.167:60952] [pid 219306] apache2_util.c(271): [client 3.127.23.167] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pem/ .pol/ .printer/ .pwd/ .rdb/ .resources/ .resx/ .sql/ .swp/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "1112"] [id "920440"] [msg "URL file extension is restricted by policy"] [data ".bak"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [tag "PCI/6.5.10"] [hostname "www.elconferencista.com"] [uri "/info.php.bak"] [unique_id "aPsAd73stWvRfl_UZN7hkAABOPM"]
[Thu Oct 23 21:28:41 2025] [elconferencista.com] [error] [client 3.127.23.167:60952] [pid 219306] apache2_util.c(271): [client 3.127.23.167] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pem/ .pol/ .printer/ .pwd/ .rdb/ .resources/ .resx/ .sql/ .swp/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "1112"] [id "920440"] [msg "URL file extension is restricted by policy"] [data ".bak"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [tag "PCI/6.5.10"] [hostname "www.elconferencista.com"] [uri "/php_info.php.bak"] [unique_id "aPsAeb3stWvRfl_UZN7hmgABOLk"]
[Thu Oct 23 21:28:44 2025] [elconferencista.com] [error] [client 3.127.23.167:60952] [pid 219306] apache2_util.c(271): [client 3.127.23.167] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pem/ .pol/ .printer/ .pwd/ .rdb/ .resources/ .resx/ .sql/ .swp/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "1112"] [id "920440"] [msg "URL file extension is restricted by policy"] [data ".bak"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [tag "PCI/6.5.10"] [hostname "www.elconferencista.com"] [uri "/test.php.bak"] [unique_id "aPsAfL3stWvRfl_UZN7hqAABORs"]
[Thu Oct 23 21:28:47 2025] [elconferencista.com] [error] [client 3.127.23.167:60952] [pid 219306] apache2_util.c(271): [client 3.127.23.167] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pem/ .pol/ .printer/ .pwd/ .rdb/ .resources/ .resx/ .sql/ .swp/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "1112"] [id "920440"] [msg "URL file extension is restricted by policy"] [data ".old"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [tag "PCI/6.5.10"] [hostname "www.elconferencista.com"] [uri "/phpinfo.php.old"] [unique_id "aPsAf73stWvRfl_UZN7hxAABOS4"]
[Thu Oct 23 21:28:50 2025] [elconferencista.com] [error] [client 3.127.23.167:60952] [pid 219306] apache2_util.c(271): [client 3.127.23.167] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pem/ .pol/ .printer/ .pwd/ .rdb/ .resources/ .resx/ .sql/ .swp/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "1112"] [id "920440"] [msg "URL file extension is restricted by policy"] [data ".old"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [tag "PCI/6.5.10"] [hostname "www.elconferencista.com"] [uri "/info.php.old"] [unique_id "aPsAgr3stWvRfl_UZN7hyAABOKw"]
[Thu Oct 23 21:28:51 2025] [elconferencista.com] [error] [client 3.127.23.167:60952] [pid 219306] apache2_util.c(271): [client 3.127.23.167] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pem/ .pol/ .printer/ .pwd/ .rdb/ .resources/ .resx/ .sql/ .swp/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "1112"] [id "920440"] [msg "URL file extension is restricted by policy"] [data ".old"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [tag "PCI/6.5.10"] [hostname "www.elconferencista.com"] [uri "/php_info.php.old"] [unique_id "aPsAg73stWvRfl_UZN7h1wABOIE"]
[Thu Oct 23 21:28:54 2025] [elconferencista.com] [error] [client 3.127.23.167:60952] [pid 219306] apache2_util.c(271): [client 3.127.23.167] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pem/ .pol/ .printer/ .pwd/ .rdb/ .resources/ .resx/ .sql/ .swp/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "1112"] [id "920440"] [msg "URL file extension is restricted by policy"] [data ".old"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [tag "PCI/6.5.10"] [hostname "www.elconferencista.com"] [uri "/test.php.old"] [unique_id "aPsAhr3stWvRfl_UZN7h4gABOLo"]
[Thu Oct 23 21:29:07 2025] [elconferencista.com] [error] [client 3.127.23.167:60952] [pid 219306] apache2_util.c(271): [client 3.127.23.167] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pem/ .pol/ .printer/ .pwd/ .rdb/ .resources/ .resx/ .sql/ .swp/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "1112"] [id "920440"] [msg "URL file extension is restricted by policy"] [data ".backup"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [tag "PCI/6.5.10"] [hostname "www.elconferencista.com"] [uri "/phpinfo.php.backup"] [unique_id "aPsAk73stWvRfl_UZN7iIAABONg"]
[Thu Oct 23 21:29:09 2025] [elconferencista.com] [error] [client 3.127.23.167:60952] [pid 219306] apache2_util.c(271): [client 3.127.23.167] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pem/ .pol/ .printer/ .pwd/ .rdb/ .resources/ .resx/ .sql/ .swp/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "1112"] [id "920440"] [msg "URL file extension is restricted by policy"] [data ".backup"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [tag "PCI/6.5.10"] [hostname "www.elconferencista.com"] [uri "/info.php.backup"] [unique_id "aPsAlb3stWvRfl_UZN7iKAABOOk"]
[Thu Oct 23 21:29:11 2025] [elconferencista.com] [error] [client 3.127.23.167:60952] [pid 219306] apache2_util.c(271): [client 3.127.23.167] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pem/ .pol/ .printer/ .pwd/ .rdb/ .resources/ .resx/ .sql/ .swp/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "1112"] [id "920440"] [msg "URL file extension is restricted by policy"] [data ".backup"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [tag "PCI/6.5.10"] [hostname "www.elconferencista.com"] [uri "/php_info.php.backup"] [unique_id "aPsAl73stWvRfl_UZN7iQQABOI8"]
[Thu Oct 23 21:29:13 2025] [elconferencista.com] [error] [client 3.127.23.167:60952] [pid 219306] apache2_util.c(271): [client 3.127.23.167] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pem/ .pol/ .printer/ .pwd/ .rdb/ .resources/ .resx/ .sql/ .swp/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "1112"] [id "920440"] [msg "URL file extension is restricted by policy"] [data ".backup"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [tag "PCI/6.5.10"] [hostname "www.elconferencista.com"] [uri "/test.php.backup"] [unique_id "aPsAmb3stWvRfl_UZN7iVAABOMU"]
[Thu Oct 23 21:29:16 2025] [elconferencista.com] [error] [client 3.127.23.167:60952] [pid 219306] apache2_util.c(271): [client 3.127.23.167] ModSecurity: Warning. Pattern match "\\\\.[^.~]+~(?:/.*|)$" at REQUEST_FILENAME. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "1138"] [id "920500"] [msg "Attempt to access a backup or working file"] [data ".php~"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [tag "PCI/6.5.10"] [hostname "www.elconferencista.com"] [uri "/phpinfo.php~"] [unique_id "aPsAnL3stWvRfl_UZN7icgABOUs"]
[Thu Oct 23 21:29:18 2025] [elconferencista.com] [error] [client 3.127.23.167:60952] [pid 219306] apache2_util.c(271): [client 3.127.23.167] ModSecurity: Warning. Pattern match "\\\\.[^.~]+~(?:/.*|)$" at REQUEST_FILENAME. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "1138"] [id "920500"] [msg "Attempt to access a backup or working file"] [data ".php~"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [tag "PCI/6.5.10"] [hostname "www.elconferencista.com"] [uri "/info.php~"] [unique_id "aPsAnr3stWvRfl_UZN7ihgABOJs"]
[Thu Oct 23 21:29:21 2025] [elconferencista.com] [error] [client 3.127.23.167:60952] [pid 219306] apache2_util.c(271): [client 3.127.23.167] ModSecurity: Warning. Pattern match "\\\\.[^.~]+~(?:/.*|)$" at REQUEST_FILENAME. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "1138"] [id "920500"] [msg "Attempt to access a backup or working file"] [data ".php~"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [tag "PCI/6.5.10"] [hostname "www.elconferencista.com"] [uri "/php_info.php~"] [unique_id "aPsAob3stWvRfl_UZN7inQABOKI"]
[Thu Oct 23 21:29:23 2025] [elconferencista.com] [error] [client 3.127.23.167:60952] [pid 219306] apache2_util.c(271): [client 3.127.23.167] ModSecurity: Warning. Pattern match "\\\\.[^.~]+~(?:/.*|)$" at REQUEST_FILENAME. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "1138"] [id "920500"] [msg "Attempt to access a backup or working file"] [data ".php~"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [tag "PCI/6.5.10"] [hostname "www.elconferencista.com"] [uri "/test.php~"] [unique_id "aPsAo73stWvRfl_UZN7irAABOMk"]
[Thu Oct 23 21:29:24 2025] [elconferencista.com] [error] [client 3.127.23.167:60952] [pid 219306] apache2_util.c(271): [client 3.127.23.167] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pem/ .pol/ .printer/ .pwd/ .rdb/ .resources/ .resx/ .sql/ .swp/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "1112"] [id "920440"] [msg "URL file extension is restricted by policy"] [data ".swp"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [tag "PCI/6.5.10"] [hostname "www.elconferencista.com"] [uri "/phpinfo.php.swp"] [unique_id "aPsApL3stWvRfl_UZN7ivQABOMQ"]
[Thu Oct 23 21:29:26 2025] [elconferencista.com] [error] [client 3.127.23.167:60952] [pid 219306] apache2_util.c(271): [client 3.127.23.167] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pem/ .pol/ .printer/ .pwd/ .rdb/ .resources/ .resx/ .sql/ .swp/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "1112"] [id "920440"] [msg "URL file extension is restricted by policy"] [data ".swp"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [tag "PCI/6.5.10"] [hostname "www.elconferencista.com"] [uri "/info.php.swp"] [unique_id "aPsApr3stWvRfl_UZN7izgABONg"]
[Thu Oct 23 21:29:29 2025] [elconferencista.com] [error] [client 3.127.23.167:60952] [pid 219306] apache2_util.c(271): [client 3.127.23.167] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pem/ .pol/ .printer/ .pwd/ .rdb/ .resources/ .resx/ .sql/ .swp/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "1112"] [id "920440"] [msg "URL file extension is restricted by policy"] [data ".swp"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [tag "PCI/6.5.10"] [hostname "www.elconferencista.com"] [uri "/php_info.php.swp"] [unique_id "aPsAqb3stWvRfl_UZN7i3gABOOk"]
[Thu Oct 23 21:29:30 2025] [elconferencista.com] [error] [client 3.127.23.167:60952] [pid 219306] apache2_util.c(271): [client 3.127.23.167] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pem/ .pol/ .printer/ .pwd/ .rdb/ .resources/ .resx/ .sql/ .swp/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "1112"] [id "920440"] [msg "URL file extension is restricted by policy"] [data ".swp"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [tag "PCI/6.5.10"] [hostname "www.elconferencista.com"] [uri "/test.php.swp"] [unique_id "aPsAqr3stWvRfl_UZN7i7wABOI4"]
[Thu Oct 23 21:31:19 2025] [elconferencista.com] [error] [client 3.127.23.167:50700] [pid 219306] apache2_util.c(271): [client 3.127.23.167] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "143"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "www.elconferencista.com"] [uri "/.git/config"] [unique_id "aPsBF73stWvRfl_UZN7kQQABOS4"]
[Thu Oct 23 21:37:45 2025] [elconferencista.com] [error] [client 170.106.35.153:56058] [pid 219306] apache2_util.c(271): [client 170.106.35.153] ModSecurity: Warning. Pattern match "\\\\b(?:keep-alive|close),\\\\s?(?:keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "352"] [id "920210"] [msg "Multiple/Conflicting Connection Header Data Found"] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [hostname "www.elconferencista.com"] [uri "/"] [unique_id "aPsCmb3stWvRfl_UZN7nDwABOQs"]
[Thu Oct 23 21:50:41 2025] [elconferencista.com] [error] [client 185.177.72.8:36446] [pid 219306] apache2_util.c(271): [client 185.177.72.8] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "143"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "elconferencista.com"] [uri "/.git/config"] [unique_id "aPsFob3stWvRfl_UZN73JQABONU"]
[Thu Oct 23 22:08:02 2025] [elconferencista.com] [error] [client 130.33.52.240:9235] [pid 1446400] apache2_util.c(271): [client 130.33.52.240] ModSecurity: Warning. Matched phrase "Mozlila" at REQUEST_HEADERS:User-Agent. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-913-SCANNER-DETECTION.conf"] [line "56"] [id "913100"] [msg "Found User-Agent associated with security scanner"] [data "Matched Data: Mozlila found within REQUEST_HEADERS:User-Agent: Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-reputation-scanner"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/118/224/541/310"] [tag "PCI/6.5.10"] [hostname "www.elconferencista.com"] [uri "/"] [unique_id "aPsJshEUmNVKI73RPORRmgABYDE"]
[Thu Oct 23 22:08:02 2025] [elconferencista.com] [error] [client 130.33.52.240:9668] [pid 1446400] apache2_util.c(271): [client 130.33.52.240] ModSecurity: Warning. Matched phrase "Mozlila" at REQUEST_HEADERS:User-Agent. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-913-SCANNER-DETECTION.conf"] [line "56"] [id "913100"] [msg "Found User-Agent associated with security scanner"] [data "Matched Data: Mozlila found within REQUEST_HEADERS:User-Agent: Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-reputation-scanner"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/118/224/541/310"] [tag "PCI/6.5.10"] [hostname "www.elconferencista.com"] [uri "/wp-content/themes/seotheme/db.php"] [unique_id "aPsJshEUmNVKI73RPORRmwABYE0"]
[Thu Oct 23 22:08:08 2025] [elconferencista.com] [error] [client 130.33.52.240:9258] [pid 1446400] apache2_util.c(271): [client 130.33.52.240] ModSecurity: Warning. Matched phrase "Mozlila" at REQUEST_HEADERS:User-Agent. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-913-SCANNER-DETECTION.conf"] [line "56"] [id "913100"] [msg "Found User-Agent associated with security scanner"] [data "Matched Data: Mozlila found within REQUEST_HEADERS:User-Agent: Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-reputation-scanner"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/118/224/541/310"] [tag "PCI/6.5.10"] [hostname "elconferencista.com"] [uri "/wp-content/themes/seotheme/db.php"] [unique_id "aPsJuBEUmNVKI73RPORRoAABYE8"]
[Thu Oct 23 22:08:11 2025] [elconferencista.com] [error] [client 130.33.52.240:9676] [pid 1446400] apache2_util.c(271): [client 130.33.52.240] ModSecurity: Warning. Matched phrase "Mozlila" at REQUEST_HEADERS:User-Agent. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-913-SCANNER-DETECTION.conf"] [line "56"] [id "913100"] [msg "Found User-Agent associated with security scanner"] [data "Matched Data: Mozlila found within REQUEST_HEADERS:User-Agent: Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-reputation-scanner"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/118/224/541/310"] [tag "PCI/6.5.10"] [hostname "www.elconferencista.com"] [uri "/wp-content/themes/seotheme/db.php"] [unique_id "aPsJuxEUmNVKI73RPORRqQABYGw"]
[Thu Oct 23 22:19:53 2025] [elconferencista.com] [error] [client 43.153.35.128:56678] [pid 1446400] apache2_util.c(271): [client 43.153.35.128] ModSecurity: Warning. Pattern match "\\\\b(?:keep-alive|close),\\\\s?(?:keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "352"] [id "920210"] [msg "Multiple/Conflicting Connection Header Data Found"] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [hostname "www.elconferencista.com"] [uri "/"] [unique_id "aPsMeREUmNVKI73RPORYmAABYEw"]
[Thu Oct 23 22:33:39 2025] [elconferencista.com] [error] [client 194.26.192.110:34236] [pid 1446400] apache2_util.c(271): [client 194.26.192.110] ModSecurity: Warning. Matched phrase ".env" at REQUEST_FILENAME. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "143"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: .env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "elconferencista.com"] [uri "/.env"] [unique_id "aPsPsxEUmNVKI73RPORs1AABYCE"]
[Thu Oct 23 22:41:14 2025] [elconferencista.com] [error] [client 54.225.26.119:34604] [pid 1446400] apache2_util.c(271): [client 54.225.26.119] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "143"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "www.elconferencista.com"] [uri "/.git/config"] [unique_id "aPsRehEUmNVKI73RPORxrQABYD8"]
[Thu Oct 23 22:45:15 2025] [elconferencista.com] [warn] [client 188.226.53.40:55628] [pid 1446400] fcgid_bridge.c(409): (32)Broken pipe: mod_fcgid: ap_pass_brigade failed in handle_request_ipc function
[Thu Oct 23 23:08:51 2025] [elconferencista.com] [error] [client 106.227.49.113:59729] [pid 1446400] apache2_util.c(271): [client 106.227.49.113] ModSecurity: Warning. Pattern match "\\\\b(?:keep-alive|close),\\\\s?(?:keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "352"] [id "920210"] [msg "Multiple/Conflicting Connection Header Data Found"] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [hostname "www.elconferencista.com"] [uri "/"] [unique_id "aPsX8xEUmNVKI73RPOR-8gABYBc"]
[Fri Oct 24 00:40:12 2025] [elconferencista.com] [error] [client 52.165.22.152:14773] [pid 2844940] mod_access_compat.c(350): AH01797: client denied by server configuration: /home/ednermusika/elconferencista.com/.well-known/acme-challenge/
[Fri Oct 24 00:40:12 2025] [elconferencista.com] [error] [client 52.165.22.152:14773] [pid 2844940] mod_access_compat.c(350): AH01797: client denied by server configuration: /home/ednermusika/elconferencista.com/forbidden.html
[Fri Oct 24 00:40:12 2025] [elconferencista.com] [error] [client 52.165.22.152:14773] [pid 2844940] mod_access_compat.c(350): AH01797: client denied by server configuration: /home/ednermusika/elconferencista.com/abcd.php
[Fri Oct 24 00:40:12 2025] [elconferencista.com] [error] [client 52.165.22.152:14773] [pid 2844940] mod_access_compat.c(350): AH01797: client denied by server configuration: /home/ednermusika/elconferencista.com/forbidden.html
[Fri Oct 24 00:40:12 2025] [elconferencista.com] [error] [client 52.165.22.152:14773] [pid 2844940] mod_access_compat.c(350): AH01797: client denied by server configuration: /home/ednermusika/elconferencista.com/about.php
[Fri Oct 24 00:40:12 2025] [elconferencista.com] [error] [client 52.165.22.152:14773] [pid 2844940] mod_access_compat.c(350): AH01797: client denied by server configuration: /home/ednermusika/elconferencista.com/forbidden.html
[Fri Oct 24 00:40:12 2025] [elconferencista.com] [error] [client 52.165.22.152:14773] [pid 2844940] mod_access_compat.c(350): AH01797: client denied by server configuration: /home/ednermusika/elconferencista.com/chosen.php
[Fri Oct 24 00:40:12 2025] [elconferencista.com] [error] [client 52.165.22.152:14773] [pid 2844940] mod_access_compat.c(350): AH01797: client denied by server configuration: /home/ednermusika/elconferencista.com/forbidden.html
[Fri Oct 24 00:40:12 2025] [elconferencista.com] [error] [client 52.165.22.152:14773] [pid 2844940] mod_access_compat.c(350): AH01797: client denied by server configuration: /home/ednermusika/elconferencista.com/default.php
[Fri Oct 24 00:40:12 2025] [elconferencista.com] [error] [client 52.165.22.152:14773] [pid 2844940] mod_access_compat.c(350): AH01797: client denied by server configuration: /home/ednermusika/elconferencista.com/forbidden.html
[Fri Oct 24 00:40:12 2025] [elconferencista.com] [error] [client 52.165.22.152:14773] [pid 2844940] mod_access_compat.c(350): AH01797: client denied by server configuration: /home/ednermusika/elconferencista.com/ds.php
[Fri Oct 24 00:40:12 2025] [elconferencista.com] [error] [client 52.165.22.152:14773] [pid 2844940] mod_access_compat.c(350): AH01797: client denied by server configuration: /home/ednermusika/elconferencista.com/forbidden.html
[Fri Oct 24 00:40:12 2025] [elconferencista.com] [error] [client 52.165.22.152:14773] [pid 2844940] mod_access_compat.c(350): AH01797: client denied by server configuration: /home/ednermusika/elconferencista.com/f5.php
[Fri Oct 24 00:40:12 2025] [elconferencista.com] [error] [client 52.165.22.152:14773] [pid 2844940] mod_access_compat.c(350): AH01797: client denied by server configuration: /home/ednermusika/elconferencista.com/forbidden.html
[Fri Oct 24 00:40:13 2025] [elconferencista.com] [error] [client 52.165.22.152:14773] [pid 2844940] mod_access_compat.c(350): AH01797: client denied by server configuration: /home/ednermusika/elconferencista.com/file.php
[Fri Oct 24 00:40:13 2025] [elconferencista.com] [error] [client 52.165.22.152:14773] [pid 2844940] mod_access_compat.c(350): AH01797: client denied by server configuration: /home/ednermusika/elconferencista.com/forbidden.html
[Fri Oct 24 00:40:13 2025] [elconferencista.com] [error] [client 52.165.22.152:14773] [pid 2844940] mod_access_compat.c(350): AH01797: client denied by server configuration: /home/ednermusika/elconferencista.com/god4m.php
[Fri Oct 24 00:40:13 2025] [elconferencista.com] [error] [client 52.165.22.152:14773] [pid 2844940] mod_access_compat.c(350): AH01797: client denied by server configuration: /home/ednermusika/elconferencista.com/forbidden.html
[Fri Oct 24 00:40:13 2025] [elconferencista.com] [error] [client 52.165.22.152:14773] [pid 2844940] mod_access_compat.c(350): AH01797: client denied by server configuration: /home/ednermusika/elconferencista.com/info.php
[Fri Oct 24 00:40:13 2025] [elconferencista.com] [error] [client 52.165.22.152:14773] [pid 2844940] mod_access_compat.c(350): AH01797: client denied by server configuration: /home/ednermusika/elconferencista.com/forbidden.html
[Fri Oct 24 00:40:13 2025] [elconferencista.com] [error] [client 52.165.22.152:14773] [pid 2844940] mod_access_compat.c(350): AH01797: client denied by server configuration: /home/ednermusika/elconferencista.com/modules
[Fri Oct 24 00:40:13 2025] [elconferencista.com] [error] [client 52.165.22.152:14773] [pid 2844940] mod_access_compat.c(350): AH01797: client denied by server configuration: /home/ednermusika/elconferencista.com/forbidden.html
[Fri Oct 24 00:40:13 2025] [elconferencista.com] [error] [client 52.165.22.152:14773] [pid 2844940] mod_access_compat.c(350): AH01797: client denied by server configuration: /home/ednermusika/elconferencista.com/test1.php
[Fri Oct 24 00:40:13 2025] [elconferencista.com] [error] [client 52.165.22.152:14773] [pid 2844940] mod_access_compat.c(350): AH01797: client denied by server configuration: /home/ednermusika/elconferencista.com/forbidden.html
[Fri Oct 24 00:40:13 2025] [elconferencista.com] [error] [client 52.165.22.152:14773] [pid 2844940] mod_access_compat.c(350): AH01797: client denied by server configuration: /home/ednermusika/elconferencista.com/uploads
[Fri Oct 24 00:40:13 2025] [elconferencista.com] [error] [client 52.165.22.152:14773] [pid 2844940] mod_access_compat.c(350): AH01797: client denied by server configuration: /home/ednermusika/elconferencista.com/forbidden.html
[Fri Oct 24 00:40:13 2025] [elconferencista.com] [error] [client 52.165.22.152:14773] [pid 2844940] mod_access_compat.c(350): AH01797: client denied by server configuration: /home/ednermusika/elconferencista.com/wp-admin/images/
[Fri Oct 24 00:40:13 2025] [elconferencista.com] [error] [client 52.165.22.152:14773] [pid 2844940] mod_access_compat.c(350): AH01797: client denied by server configuration: /home/ednermusika/elconferencista.com/forbidden.html
[Fri Oct 24 00:40:13 2025] [elconferencista.com] [error] [client 52.165.22.152:14773] [pid 2844940] mod_access_compat.c(350): AH01797: client denied by server configuration: /home/ednermusika/elconferencista.com/wp-content/uploads/
[Fri Oct 24 00:40:13 2025] [elconferencista.com] [error] [client 52.165.22.152:14773] [pid 2844940] mod_access_compat.c(350): AH01797: client denied by server configuration: /home/ednermusika/elconferencista.com/forbidden.html
[Fri Oct 24 00:40:14 2025] [elconferencista.com] [error] [client 52.165.22.152:14773] [pid 2844940] mod_access_compat.c(350): AH01797: client denied by server configuration: /home/ednermusika/elconferencista.com/wp-good.php
[Fri Oct 24 00:40:14 2025] [elconferencista.com] [error] [client 52.165.22.152:14773] [pid 2844940] mod_access_compat.c(350): AH01797: client denied by server configuration: /home/ednermusika/elconferencista.com/forbidden.html
[Fri Oct 24 00:40:14 2025] [elconferencista.com] [error] [client 52.165.22.152:14773] [pid 2844940] mod_access_compat.c(350): AH01797: client denied by server configuration: /home/ednermusika/elconferencista.com/wp-includes/ID3/
[Fri Oct 24 00:40:14 2025] [elconferencista.com] [error] [client 52.165.22.152:14773] [pid 2844940] mod_access_compat.c(350): AH01797: client denied by server configuration: /home/ednermusika/elconferencista.com/forbidden.html
[Fri Oct 24 00:40:14 2025] [elconferencista.com] [error] [client 52.165.22.152:14773] [pid 2844940] mod_access_compat.c(350): AH01797: client denied by server configuration: /home/ednermusika/elconferencista.com/wp-includes/Text/
[Fri Oct 24 00:40:14 2025] [elconferencista.com] [error] [client 52.165.22.152:14773] [pid 2844940] mod_access_compat.c(350): AH01797: client denied by server configuration: /home/ednermusika/elconferencista.com/forbidden.html
[Fri Oct 24 00:40:14 2025] [elconferencista.com] [error] [client 52.165.22.152:14773] [pid 2844940] mod_access_compat.c(350): AH01797: client denied by server configuration: /home/ednermusika/elconferencista.com/wp-includes/assets/
[Fri Oct 24 00:40:14 2025] [elconferencista.com] [error] [client 52.165.22.152:14773] [pid 2844940] mod_access_compat.c(350): AH01797: client denied by server configuration: /home/ednermusika/elconferencista.com/forbidden.html
[Fri Oct 24 00:40:14 2025] [elconferencista.com] [error] [client 52.165.22.152:14773] [pid 2844940] mod_access_compat.c(350): AH01797: client denied by server configuration: /home/ednermusika/elconferencista.com/wp-includes/js/codemirror/
[Fri Oct 24 00:40:14 2025] [elconferencista.com] [error] [client 52.165.22.152:14773] [pid 2844940] mod_access_compat.c(350): AH01797: client denied by server configuration: /home/ednermusika/elconferencista.com/forbidden.html
[Fri Oct 24 00:40:14 2025] [elconferencista.com] [error] [client 52.165.22.152:14773] [pid 2844940] mod_access_compat.c(350): AH01797: client denied by server configuration: /home/ednermusika/elconferencista.com/wp-includes/js/crop/
[Fri Oct 24 00:40:14 2025] [elconferencista.com] [error] [client 52.165.22.152:14773] [pid 2844940] mod_access_compat.c(350): AH01797: client denied by server configuration: /home/ednermusika/elconferencista.com/forbidden.html
[Fri Oct 24 00:40:14 2025] [elconferencista.com] [error] [client 52.165.22.152:14773] [pid 2844940] mod_access_compat.c(350): AH01797: client denied by server configuration: /home/ednermusika/elconferencista.com/wp-includes/pomo/
[Fri Oct 24 00:40:14 2025] [elconferencista.com] [error] [client 52.165.22.152:14773] [pid 2844940] mod_access_compat.c(350): AH01797: client denied by server configuration: /home/ednermusika/elconferencista.com/forbidden.html
[Fri Oct 24 00:40:14 2025] [elconferencista.com] [error] [client 52.165.22.152:14773] [pid 2844940] mod_access_compat.c(350): AH01797: client denied by server configuration: /home/ednermusika/elconferencista.com/wp-includes/rest-api/fields/
[Fri Oct 24 00:40:14 2025] [elconferencista.com] [error] [client 52.165.22.152:14773] [pid 2844940] mod_access_compat.c(350): AH01797: client denied by server configuration: /home/ednermusika/elconferencista.com/forbidden.html
[Fri Oct 24 00:40:15 2025] [elconferencista.com] [error] [client 52.165.22.152:14773] [pid 2844940] mod_access_compat.c(350): AH01797: client denied by server configuration: /home/ednermusika/elconferencista.com/.__info.php
[Fri Oct 24 00:40:15 2025] [elconferencista.com] [error] [client 52.165.22.152:14773] [pid 2844940] mod_access_compat.c(350): AH01797: client denied by server configuration: /home/ednermusika/elconferencista.com/forbidden.html
[Fri Oct 24 00:40:15 2025] [elconferencista.com] [error] [client 52.165.22.152:14773] [pid 2844940] mod_access_compat.c(350): AH01797: client denied by server configuration: /home/ednermusika/elconferencista.com/0.php
[Fri Oct 24 00:40:15 2025] [elconferencista.com] [error] [client 52.165.22.152:14773] [pid 2844940] mod_access_compat.c(350): AH01797: client denied by server configuration: /home/ednermusika/elconferencista.com/forbidden.html
[Fri Oct 24 00:40:15 2025] [elconferencista.com] [error] [client 52.165.22.152:14773] [pid 2844940] mod_access_compat.c(350): AH01797: client denied by server configuration: /home/ednermusika/elconferencista.com/07.php
[Fri Oct 24 00:40:15 2025] [elconferencista.com] [error] [client 52.165.22.152:14773] [pid 2844940] mod_access_compat.c(350): AH01797: client denied by server configuration: /home/ednermusika/elconferencista.com/forbidden.html
[Fri Oct 24 00:40:15 2025] [elconferencista.com] [error] [client 52.165.22.152:14773] [pid 2844940] mod_access_compat.c(350): AH01797: client denied by server configuration: /home/ednermusika/elconferencista.com/1.php
[Fri Oct 24 00:40:15 2025] [elconferencista.com] [error] [client 52.165.22.152:14773] [pid 2844940] mod_access_compat.c(350): AH01797: client denied by server configuration: /home/ednermusika/elconferencista.com/forbidden.html
[Fri Oct 24 00:40:15 2025] [elconferencista.com] [error] [client 52.165.22.152:14773] [pid 2844940] mod_access_compat.c(350): AH01797: client denied by server configuration: /home/ednermusika/elconferencista.com/123.php
[Fri Oct 24 00:40:15 2025] [elconferencista.com] [error] [client 52.165.22.152:14773] [pid 2844940] mod_access_compat.c(350): AH01797: client denied by server configuration: /home/ednermusika/elconferencista.com/forbidden.html
[Fri Oct 24 00:40:15 2025] [elconferencista.com] [error] [client 52.165.22.152:14773] [pid 2844940] mod_access_compat.c(350): AH01797: client denied by server configuration: /home/ednermusika/elconferencista.com/aa.php
[Fri Oct 24 00:40:15 2025] [elconferencista.com] [error] [client 52.165.22.152:14773] [pid 2844940] mod_access_compat.c(350): AH01797: client denied by server configuration: /home/ednermusika/elconferencista.com/forbidden.html
[Fri Oct 24 00:40:15 2025] [elconferencista.com] [error] [client 52.165.22.152:14773] [pid 2844940] mod_access_compat.c(350): AH01797: client denied by server configuration: /home/ednermusika/elconferencista.com/about.php
[Fri Oct 24 00:40:15 2025] [elconferencista.com] [error] [client 52.165.22.152:14773] [pid 2844940] mod_access_compat.c(350): AH01797: client denied by server configuration: /home/ednermusika/elconferencista.com/forbidden.html
[Fri Oct 24 00:40:15 2025] [elconferencista.com] [error] [client 52.165.22.152:14773] [pid 2844940] mod_access_compat.c(350): AH01797: client denied by server configuration: /home/ednermusika/elconferencista.com/admin.php
[Fri Oct 24 00:40:15 2025] [elconferencista.com] [error] [client 52.165.22.152:14773] [pid 2844940] mod_access_compat.c(350): AH01797: client denied by server configuration: /home/ednermusika/elconferencista.com/forbidden.html
[Fri Oct 24 00:40:15 2025] [elconferencista.com] [error] [client 52.165.22.152:14773] [pid 2844940] mod_access_compat.c(350): AH01797: client denied by server configuration: /home/ednermusika/elconferencista.com/adminfuns.php
[Fri Oct 24 00:40:15 2025] [elconferencista.com] [error] [client 52.165.22.152:14773] [pid 2844940] mod_access_compat.c(350): AH01797: client denied by server configuration: /home/ednermusika/elconferencista.com/forbidden.html
[Fri Oct 24 00:40:16 2025] [elconferencista.com] [error] [client 52.165.22.152:14773] [pid 2844940] mod_access_compat.c(350): AH01797: client denied by server configuration: /home/ednermusika/elconferencista.com/akc.php
[Fri Oct 24 00:40:16 2025] [elconferencista.com] [error] [client 52.165.22.152:14773] [pid 2844940] mod_access_compat.c(350): AH01797: client denied by server configuration: /home/ednermusika/elconferencista.com/forbidden.html
[Fri Oct 24 00:40:16 2025] [elconferencista.com] [error] [client 52.165.22.152:14773] [pid 2844940] mod_access_compat.c(350): AH01797: client denied by server configuration: /home/ednermusika/elconferencista.com/akcc.php
[Fri Oct 24 00:40:16 2025] [elconferencista.com] [error] [client 52.165.22.152:14773] [pid 2844940] mod_access_compat.c(350): AH01797: client denied by server configuration: /home/ednermusika/elconferencista.com/forbidden.html
[Fri Oct 24 00:40:16 2025] [elconferencista.com] [error] [client 52.165.22.152:14773] [pid 2844940] mod_access_compat.c(350): AH01797: client denied by server configuration: /home/ednermusika/elconferencista.com/asasx.php
[Fri Oct 24 00:40:16 2025] [elconferencista.com] [error] [client 52.165.22.152:14773] [pid 2844940] mod_access_compat.c(350): AH01797: client denied by server configuration: /home/ednermusika/elconferencista.com/forbidden.html
[Fri Oct 24 00:40:16 2025] [elconferencista.com] [error] [client 52.165.22.152:14773] [pid 2844940] mod_access_compat.c(350): AH01797: client denied by server configuration: /home/ednermusika/elconferencista.com/asd.php
[Fri Oct 24 00:40:16 2025] [elconferencista.com] [error] [client 52.165.22.152:14773] [pid 2844940] mod_access_compat.c(350): AH01797: client denied by server configuration: /home/ednermusika/elconferencista.com/forbidden.html
[Fri Oct 24 00:40:16 2025] [elconferencista.com] [error] [client 52.165.22.152:14773] [pid 2844940] mod_access_compat.c(350): AH01797: client denied by server configuration: /home/ednermusika/elconferencista.com/atomlib.php
[Fri Oct 24 00:40:16 2025] [elconferencista.com] [error] [client 52.165.22.152:14773] [pid 2844940] mod_access_compat.c(350): AH01797: client denied by server configuration: /home/ednermusika/elconferencista.com/forbidden.html
[Fri Oct 24 00:40:16 2025] [elconferencista.com] [error] [client 52.165.22.152:14773] [pid 2844940] mod_access_compat.c(350): AH01797: client denied by server configuration: /home/ednermusika/elconferencista.com/autoload_classmap.php
[Fri Oct 24 00:40:16 2025] [elconferencista.com] [error] [client 52.165.22.152:14773] [pid 2844940] mod_access_compat.c(350): AH01797: client denied by server configuration: /home/ednermusika/elconferencista.com/forbidden.html
[Fri Oct 24 00:40:16 2025] [elconferencista.com] [error] [client 52.165.22.152:14773] [pid 2844940] mod_access_compat.c(350): AH01797: client denied by server configuration: /home/ednermusika/elconferencista.com/axx.php
[Fri Oct 24 00:40:16 2025] [elconferencista.com] [error] [client 52.165.22.152:14773] [pid 2844940] mod_access_compat.c(350): AH01797: client denied by server configuration: /home/ednermusika/elconferencista.com/forbidden.html
[Fri Oct 24 00:40:16 2025] [elconferencista.com] [error] [client 52.165.22.152:14773] [pid 2844940] mod_access_compat.c(350): AH01797: client denied by server configuration: /home/ednermusika/elconferencista.com/berax.php
[Fri Oct 24 00:40:16 2025] [elconferencista.com] [error] [client 52.165.22.152:14773] [pid 2844940] mod_access_compat.c(350): AH01797: client denied by server configuration: /home/ednermusika/elconferencista.com/forbidden.html
[Fri Oct 24 00:40:17 2025] [elconferencista.com] [error] [client 52.165.22.152:14773] [pid 2844940] mod_access_compat.c(350): AH01797: client denied by server configuration: /home/ednermusika/elconferencista.com/build.php
[Fri Oct 24 00:40:17 2025] [elconferencista.com] [error] [client 52.165.22.152:14773] [pid 2844940] mod_access_compat.c(350): AH01797: client denied by server configuration: /home/ednermusika/elconferencista.com/forbidden.html
[Fri Oct 24 00:40:17 2025] [elconferencista.com] [error] [client 52.165.22.152:14773] [pid 2844940] mod_access_compat.c(350): AH01797: client denied by server configuration: /home/ednermusika/elconferencista.com/buy.php
[Fri Oct 24 00:40:17 2025] [elconferencista.com] [error] [client 52.165.22.152:14773] [pid 2844940] mod_access_compat.c(350): AH01797: client denied by server configuration: /home/ednermusika/elconferencista.com/forbidden.html
[Fri Oct 24 00:40:17 2025] [elconferencista.com] [error] [client 52.165.22.152:14773] [pid 2844940] mod_access_compat.c(350): AH01797: client denied by server configuration: /home/ednermusika/elconferencista.com/checkbox.php
[Fri Oct 24 00:40:17 2025] [elconferencista.com] [error] [client 52.165.22.152:14773] [pid 2844940] mod_access_compat.c(350): AH01797: client denied by server configuration: /home/ednermusika/elconferencista.com/forbidden.html
[Fri Oct 24 00:40:17 2025] [elconferencista.com] [error] [client 52.165.22.152:14773] [pid 2844940] mod_access_compat.c(350): AH01797: client denied by server configuration: /home/ednermusika/elconferencista.com/chosen.php
[Fri Oct 24 00:40:17 2025] [elconferencista.com] [error] [client 52.165.22.152:14773] [pid 2844940] mod_access_compat.c(350): AH01797: client denied by server configuration: /home/ednermusika/elconferencista.com/forbidden.html
[Fri Oct 24 00:40:17 2025] [elconferencista.com] [error] [client 52.165.22.152:14773] [pid 2844940] mod_access_compat.c(350): AH01797: client denied by server configuration: /home/ednermusika/elconferencista.com/classwithtostring.php
[Fri Oct 24 00:40:17 2025] [elconferencista.com] [error] [client 52.165.22.152:14773] [pid 2844940] mod_access_compat.c(350): AH01797: client denied by server configuration: /home/ednermusika/elconferencista.com/forbidden.html
[Fri Oct 24 00:40:17 2025] [elconferencista.com] [error] [client 52.165.22.152:14773] [pid 2844940] mod_access_compat.c(350): AH01797: client denied by server configuration: /home/ednermusika/elconferencista.com/cong.php
[Fri Oct 24 00:40:17 2025] [elconferencista.com] [error] [client 52.165.22.152:14773] [pid 2844940] mod_access_compat.c(350): AH01797: client denied by server configuration: /home/ednermusika/elconferencista.com/forbidden.html
[Fri Oct 24 00:40:17 2025] [elconferencista.com] [error] [client 52.165.22.152:14773] [pid 2844940] mod_access_compat.c(350): AH01797: client denied by server configuration: /home/ednermusika/elconferencista.com/css.php
[Fri Oct 24 00:40:17 2025] [elconferencista.com] [error] [client 52.165.22.152:14773] [pid 2844940] mod_access_compat.c(350): AH01797: client denied by server configuration: /home/ednermusika/elconferencista.com/forbidden.html
[Fri Oct 24 00:40:17 2025] [elconferencista.com] [error] [client 52.165.22.152:14773] [pid 2844940] mod_access_compat.c(350): AH01797: client denied by server configuration: /home/ednermusika/elconferencista.com/dropdown.php
[Fri Oct 24 00:40:17 2025] [elconferencista.com] [error] [client 52.165.22.152:14773] [pid 2844940] mod_access_compat.c(350): AH01797: client denied by server configuration: /home/ednermusika/elconferencista.com/forbidden.html
[Fri Oct 24 00:40:18 2025] [elconferencista.com] [error] [client 52.165.22.152:14773] [pid 2844940] mod_access_compat.c(350): AH01797: client denied by server configuration: /home/ednermusika/elconferencista.com/edit.php
[Fri Oct 24 00:40:18 2025] [elconferencista.com] [error] [client 52.165.22.152:14773] [pid 2844940] mod_access_compat.c(350): AH01797: client denied by server configuration: /home/ednermusika/elconferencista.com/forbidden.html
[Fri Oct 24 00:40:18 2025] [elconferencista.com] [error] [client 52.165.22.152:14773] [pid 2844940] mod_access_compat.c(350): AH01797: client denied by server configuration: /home/ednermusika/elconferencista.com/file2.php
[Fri Oct 24 00:40:18 2025] [elconferencista.com] [error] [client 52.165.22.152:14773] [pid 2844940] mod_access_compat.c(350): AH01797: client denied by server configuration: /home/ednermusika/elconferencista.com/forbidden.html
[Fri Oct 24 00:40:18 2025] [elconferencista.com] [error] [client 52.165.22.152:14773] [pid 2844940] mod_access_compat.c(350): AH01797: client denied by server configuration: /home/ednermusika/elconferencista.com/file4.php
[Fri Oct 24 00:40:18 2025] [elconferencista.com] [error] [client 52.165.22.152:14773] [pid 2844940] mod_access_compat.c(350): AH01797: client denied by server configuration: /home/ednermusika/elconferencista.com/forbidden.html
[Fri Oct 24 00:40:18 2025] [elconferencista.com] [error] [client 52.165.22.152:14773] [pid 2844940] mod_access_compat.c(350): AH01797: client denied by server configuration: /home/ednermusika/elconferencista.com/filemanager.php
[Fri Oct 24 00:40:18 2025] [elconferencista.com] [error] [client 52.165.22.152:14773] [pid 2844940] mod_access_compat.c(350): AH01797: client denied by server configuration: /home/ednermusika/elconferencista.com/forbidden.html
[Fri Oct 24 00:40:18 2025] [elconferencista.com] [error] [client 52.165.22.152:14773] [pid 2844940] mod_access_compat.c(350): AH01797: client denied by server configuration: /home/ednermusika/elconferencista.com/flower.php
[Fri Oct 24 00:40:18 2025] [elconferencista.com] [error] [client 52.165.22.152:14773] [pid 2844940] mod_access_compat.c(350): AH01797: client denied by server configuration: /home/ednermusika/elconferencista.com/forbidden.html
[Fri Oct 24 00:40:18 2025] [elconferencista.com] [error] [client 52.165.22.152:14773] [pid 2844940] mod_access_compat.c(350): AH01797: client denied by server configuration: /home/ednermusika/elconferencista.com/form.php
[Fri Oct 24 00:40:18 2025] [elconferencista.com] [error] [client 52.165.22.152:14773] [pid 2844940] mod_access_compat.c(350): AH01797: client denied by server configuration: /home/ednermusika/elconferencista.com/forbidden.html
[Fri Oct 24 00:40:18 2025] [elconferencista.com] [error] [client 52.165.22.152:14773] [pid 2844940] mod_access_compat.c(350): AH01797: client denied by server configuration: /home/ednermusika/elconferencista.com/gecko.php
[Fri Oct 24 00:40:18 2025] [elconferencista.com] [error] [client 52.165.22.152:14773] [pid 2844940] mod_access_compat.c(350): AH01797: client denied by server configuration: /home/ednermusika/elconferencista.com/forbidden.html
[Fri Oct 24 00:40:18 2025] [elconferencista.com] [error] [client 52.165.22.152:14773] [pid 2844940] mod_access_compat.c(350): AH01797: client denied by server configuration: /home/ednermusika/elconferencista.com/kyami.php
[Fri Oct 24 00:40:18 2025] [elconferencista.com] [error] [client 52.165.22.152:14773] [pid 2844940] mod_access_compat.c(350): AH01797: client denied by server configuration: /home/ednermusika/elconferencista.com/forbidden.html
[Fri Oct 24 00:40:19 2025] [elconferencista.com] [error] [client 52.165.22.152:14773] [pid 2844940] mod_access_compat.c(350): AH01797: client denied by server configuration: /home/ednermusika/elconferencista.com/makeasmtp.php
[Fri Oct 24 00:40:19 2025] [elconferencista.com] [error] [client 52.165.22.152:14773] [pid 2844940] mod_access_compat.c(350): AH01797: client denied by server configuration: /home/ednermusika/elconferencista.com/forbidden.html
[Fri Oct 24 00:40:19 2025] [elconferencista.com] [error] [client 52.165.22.152:14773] [pid 2844940] mod_access_compat.c(350): AH01797: client denied by server configuration: /home/ednermusika/elconferencista.com/manager.php
[Fri Oct 24 00:40:19 2025] [elconferencista.com] [error] [client 52.165.22.152:14773] [pid 2844940] mod_access_compat.c(350): AH01797: client denied by server configuration: /home/ednermusika/elconferencista.com/forbidden.html
[Fri Oct 24 00:40:19 2025] [elconferencista.com] [error] [client 52.165.22.152:14773] [pid 2844940] mod_access_compat.c(350): AH01797: client denied by server configuration: /home/ednermusika/elconferencista.com/mari.php
[Fri Oct 24 00:40:19 2025] [elconferencista.com] [error] [client 52.165.22.152:14773] [pid 2844940] mod_access_compat.c(350): AH01797: client denied by server configuration: /home/ednermusika/elconferencista.com/forbidden.html
[Fri Oct 24 00:40:19 2025] [elconferencista.com] [error] [client 52.165.22.152:14773] [pid 2844940] mod_access_compat.c(350): AH01797: client denied by server configuration: /home/ednermusika/elconferencista.com/moon.php
[Fri Oct 24 00:40:19 2025] [elconferencista.com] [error] [client 52.165.22.152:14773] [pid 2844940] mod_access_compat.c(350): AH01797: client denied by server configuration: /home/ednermusika/elconferencista.com/forbidden.html
[Fri Oct 24 00:40:19 2025] [elconferencista.com] [error] [client 52.165.22.152:14773] [pid 2844940] mod_access_compat.c(350): AH01797: client denied by server configuration: /home/ednermusika/elconferencista.com/nc4.php
[Fri Oct 24 00:40:19 2025] [elconferencista.com] [error] [client 52.165.22.152:14773] [pid 2844940] mod_access_compat.c(350): AH01797: client denied by server configuration: /home/ednermusika/elconferencista.com/forbidden.html
[Fri Oct 24 00:40:19 2025] [elconferencista.com] [error] [client 52.165.22.152:14773] [pid 2844940] mod_access_compat.c(350): AH01797: client denied by server configuration: /home/ednermusika/elconferencista.com/new.php
[Fri Oct 24 00:40:19 2025] [elconferencista.com] [error] [client 52.165.22.152:14773] [pid 2844940] mod_access_compat.c(350): AH01797: client denied by server configuration: /home/ednermusika/elconferencista.com/forbidden.html
[Fri Oct 24 00:40:19 2025] [elconferencista.com] [error] [client 52.165.22.152:14773] [pid 2844940] mod_access_compat.c(350): AH01797: client denied by server configuration: /home/ednermusika/elconferencista.com/wp-activate.php
[Fri Oct 24 00:40:19 2025] [elconferencista.com] [error] [client 52.165.22.152:14773] [pid 2844940] mod_access_compat.c(350): AH01797: client denied by server configuration: /home/ednermusika/elconferencista.com/forbidden.html
[Fri Oct 24 00:40:20 2025] [elconferencista.com] [error] [client 52.165.22.152:14773] [pid 2844940] mod_access_compat.c(350): AH01797: client denied by server configuration: /home/ednermusika/elconferencista.com/wp-admin.php
[Fri Oct 24 00:40:20 2025] [elconferencista.com] [error] [client 52.165.22.152:14773] [pid 2844940] mod_access_compat.c(350): AH01797: client denied by server configuration: /home/ednermusika/elconferencista.com/forbidden.html
[Fri Oct 24 00:40:20 2025] [elconferencista.com] [error] [client 52.165.22.152:14773] [pid 2844940] mod_access_compat.c(350): AH01797: client denied by server configuration: /home/ednermusika/elconferencista.com/wp-trackback.php
[Fri Oct 24 00:40:20 2025] [elconferencista.com] [error] [client 52.165.22.152:14773] [pid 2844940] mod_access_compat.c(350): AH01797: client denied by server configuration: /home/ednermusika/elconferencista.com/forbidden.html
[Fri Oct 24 00:40:20 2025] [elconferencista.com] [error] [client 52.165.22.152:14773] [pid 2844940] mod_access_compat.c(350): AH01797: client denied by server configuration: /home/ednermusika/elconferencista.com/xmlrpc.php
[Fri Oct 24 00:40:20 2025] [elconferencista.com] [error] [client 52.165.22.152:14773] [pid 2844940] mod_access_compat.c(350): AH01797: client denied by server configuration: /home/ednermusika/elconferencista.com/forbidden.html
[Fri Oct 24 00:40:20 2025] [elconferencista.com] [error] [client 52.165.22.152:14773] [pid 2844940] mod_access_compat.c(350): AH01797: client denied by server configuration: /home/ednermusika/elconferencista.com/xmrlpc.php
[Fri Oct 24 00:40:20 2025] [elconferencista.com] [error] [client 52.165.22.152:14773] [pid 2844940] mod_access_compat.c(350): AH01797: client denied by server configuration: /home/ednermusika/elconferencista.com/forbidden.html
[Fri Oct 24 00:45:02 2025] [elconferencista.com] [error] [client 130.33.52.240:11877] [pid 2844940] apache2_util.c(271): [client 130.33.52.240] ModSecurity: Warning. Matched phrase "Mozlila" at REQUEST_HEADERS:User-Agent. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-913-SCANNER-DETECTION.conf"] [line "56"] [id "913100"] [msg "Found User-Agent associated with security scanner"] [data "Matched Data: Mozlila found within REQUEST_HEADERS:User-Agent: Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-reputation-scanner"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/118/224/541/310"] [tag "PCI/6.5.10"] [hostname "www.elconferencista.com"] [uri "/"] [unique_id "aPsufg_S0xMJo0kWJcNR6AABOOg"]
[Fri Oct 24 00:45:02 2025] [elconferencista.com] [error] [client 130.33.52.240:8715] [pid 2844940] apache2_util.c(271): [client 130.33.52.240] ModSecurity: Warning. Matched phrase "Mozlila" at REQUEST_HEADERS:User-Agent. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-913-SCANNER-DETECTION.conf"] [line "56"] [id "913100"] [msg "Found User-Agent associated with security scanner"] [data "Matched Data: Mozlila found within REQUEST_HEADERS:User-Agent: Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-reputation-scanner"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/118/224/541/310"] [tag "PCI/6.5.10"] [hostname "www.elconferencista.com"] [uri "/wp-content/themes/seotheme/db.php"] [unique_id "aPsufg_S0xMJo0kWJcNR5wABOQ4"]
[Fri Oct 24 00:45:02 2025] [elconferencista.com] [error] [client 130.33.52.240:11867] [pid 2844940] apache2_util.c(271): [client 130.33.52.240] ModSecurity: Warning. Matched phrase "Mozlila" at REQUEST_HEADERS:User-Agent. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-913-SCANNER-DETECTION.conf"] [line "56"] [id "913100"] [msg "Found User-Agent associated with security scanner"] [data "Matched Data: Mozlila found within REQUEST_HEADERS:User-Agent: Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-reputation-scanner"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/118/224/541/310"] [tag "PCI/6.5.10"] [hostname "www.elconferencista.com"] [uri "/ALFA_DATA/alfacgiapi/perl.alfa"] [unique_id "aPsufg_S0xMJo0kWJcNR5gABOQQ"]
[Fri Oct 24 00:45:02 2025] [elconferencista.com] [error] [client 130.33.52.240:11867] [pid 2844940] apache2_util.c(271): [client 130.33.52.240] ModSecurity: Warning. Matched phrase "Mozlila" at REQUEST_HEADERS:User-Agent. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-913-SCANNER-DETECTION.conf"] [line "56"] [id "913100"] [msg "Found User-Agent associated with security scanner"] [data "Matched Data: Mozlila found within REQUEST_HEADERS:User-Agent: Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-reputation-scanner"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/118/224/541/310"] [tag "PCI/6.5.10"] [hostname "www.elconferencista.com"] [uri "/alfacgiapi/perl.alfa"] [unique_id "aPsufg_S0xMJo0kWJcNR_gABOQg"]
[Fri Oct 24 00:45:02 2025] [elconferencista.com] [error] [client 130.33.52.240:8745] [pid 2844940] apache2_util.c(271): [client 130.33.52.240] ModSecurity: Warning. Matched phrase "Mozlila" at REQUEST_HEADERS:User-Agent. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-913-SCANNER-DETECTION.conf"] [line "56"] [id "913100"] [msg "Found User-Agent associated with security scanner"] [data "Matched Data: Mozlila found within REQUEST_HEADERS:User-Agent: Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-reputation-scanner"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/118/224/541/310"] [tag "PCI/6.5.10"] [hostname "elconferencista.com"] [uri "/wp-content/themes/seotheme/db.php"] [unique_id "aPsufg_S0xMJo0kWJcNSAgABOQs"]
[Fri Oct 24 00:45:03 2025] [elconferencista.com] [error] [client 130.33.52.240:11877] [pid 2844940] apache2_util.c(271): [client 130.33.52.240] ModSecurity: Warning. Matched phrase "Mozlila" at REQUEST_HEADERS:User-Agent. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-913-SCANNER-DETECTION.conf"] [line "56"] [id "913100"] [msg "Found User-Agent associated with security scanner"] [data "Matched Data: Mozlila found within REQUEST_HEADERS:User-Agent: Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-reputation-scanner"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/118/224/541/310"] [tag "PCI/6.5.10"] [hostname "www.elconferencista.com"] [uri "/wp-content/themes/seotheme/db.php"] [unique_id "aPsufw_S0xMJo0kWJcNSBAABOOk"]