HEX
Server: Apache
System: Linux pdx1-shared-a1-06 6.6.104-grsec-jammy+ #3 SMP Tue Sep 16 00:28:11 UTC 2025 x86_64
User: ednermusika (2886498)
PHP: 8.4.2
Disabled: NONE
$ pwd: /home/ednermusika/logs/elconferencista.com/https/
Upload Files
File: /home/ednermusika/logs/elconferencista.com/https/error.log.2025-10-24
[Fri Oct 24 01:27:43 2025] [elconferencista.com] [error] [client 130.33.52.240:4616] [pid 491404] apache2_util.c(271): [client 130.33.52.240] ModSecurity: Warning. Matched phrase "Mozlila" at REQUEST_HEADERS:User-Agent. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-913-SCANNER-DETECTION.conf"] [line "56"] [id "913100"] [msg "Found User-Agent associated with security scanner"] [data "Matched Data: Mozlila found within REQUEST_HEADERS:User-Agent: Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-reputation-scanner"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/118/224/541/310"] [tag "PCI/6.5.10"] [hostname "elconferencista.com"] [uri "/ALFA_DATA/alfacgiapi/perl.alfa"] [unique_id "aPs4f2HrV2nR7_l3Uq5rngABOTc"]
[Fri Oct 24 01:27:43 2025] [elconferencista.com] [error] [client 130.33.52.240:4192] [pid 491404] apache2_util.c(271): [client 130.33.52.240] ModSecurity: Warning. Matched phrase "Mozlila" at REQUEST_HEADERS:User-Agent. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-913-SCANNER-DETECTION.conf"] [line "56"] [id "913100"] [msg "Found User-Agent associated with security scanner"] [data "Matched Data: Mozlila found within REQUEST_HEADERS:User-Agent: Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-reputation-scanner"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/118/224/541/310"] [tag "PCI/6.5.10"] [hostname "www.elconferencista.com"] [uri "/"] [unique_id "aPs4f2HrV2nR7_l3Uq5rnwABOKQ"]
[Fri Oct 24 01:27:44 2025] [elconferencista.com] [error] [client 130.33.52.240:4171] [pid 491404] apache2_util.c(271): [client 130.33.52.240] ModSecurity: Warning. Matched phrase "Mozlila" at REQUEST_HEADERS:User-Agent. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-913-SCANNER-DETECTION.conf"] [line "56"] [id "913100"] [msg "Found User-Agent associated with security scanner"] [data "Matched Data: Mozlila found within REQUEST_HEADERS:User-Agent: Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-reputation-scanner"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/118/224/541/310"] [tag "PCI/6.5.10"] [hostname "www.elconferencista.com"] [uri "/wp-content/themes/seotheme/db.php"] [unique_id "aPs4gGHrV2nR7_l3Uq5roQABOJs"]
[Fri Oct 24 01:27:45 2025] [elconferencista.com] [error] [client 130.33.52.240:4201] [pid 491404] apache2_util.c(271): [client 130.33.52.240] ModSecurity: Warning. Matched phrase "Mozlila" at REQUEST_HEADERS:User-Agent. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-913-SCANNER-DETECTION.conf"] [line "56"] [id "913100"] [msg "Found User-Agent associated with security scanner"] [data "Matched Data: Mozlila found within REQUEST_HEADERS:User-Agent: Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-reputation-scanner"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/118/224/541/310"] [tag "PCI/6.5.10"] [hostname "www.elconferencista.com"] [uri "/ALFA_DATA/alfacgiapi/perl.alfa"] [unique_id "aPs4gWHrV2nR7_l3Uq5rpQABOKo"]
[Fri Oct 24 01:27:45 2025] [elconferencista.com] [error] [client 130.33.52.240:4616] [pid 491404] apache2_util.c(271): [client 130.33.52.240] ModSecurity: Warning. Matched phrase "Mozlila" at REQUEST_HEADERS:User-Agent. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-913-SCANNER-DETECTION.conf"] [line "56"] [id "913100"] [msg "Found User-Agent associated with security scanner"] [data "Matched Data: Mozlila found within REQUEST_HEADERS:User-Agent: Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-reputation-scanner"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/118/224/541/310"] [tag "PCI/6.5.10"] [hostname "elconferencista.com"] [uri "/alfacgiapi/perl.alfa"] [unique_id "aPs4gWHrV2nR7_l3Uq5rpgABOJ8"]
[Fri Oct 24 01:27:45 2025] [elconferencista.com] [error] [client 130.33.52.240:4201] [pid 491404] apache2_util.c(271): [client 130.33.52.240] ModSecurity: Warning. Matched phrase "Mozlila" at REQUEST_HEADERS:User-Agent. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-913-SCANNER-DETECTION.conf"] [line "56"] [id "913100"] [msg "Found User-Agent associated with security scanner"] [data "Matched Data: Mozlila found within REQUEST_HEADERS:User-Agent: Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-reputation-scanner"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/118/224/541/310"] [tag "PCI/6.5.10"] [hostname "www.elconferencista.com"] [uri "/alfacgiapi/perl.alfa"] [unique_id "aPs4gWHrV2nR7_l3Uq5rqgABOIM"]
[Fri Oct 24 01:27:45 2025] [elconferencista.com] [error] [client 130.33.52.240:4200] [pid 491404] apache2_util.c(271): [client 130.33.52.240] ModSecurity: Warning. Matched phrase "Mozlila" at REQUEST_HEADERS:User-Agent. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-913-SCANNER-DETECTION.conf"] [line "56"] [id "913100"] [msg "Found User-Agent associated with security scanner"] [data "Matched Data: Mozlila found within REQUEST_HEADERS:User-Agent: Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-reputation-scanner"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/118/224/541/310"] [tag "PCI/6.5.10"] [hostname "elconferencista.com"] [uri "/wp-content/themes/seotheme/db.php"] [unique_id "aPs4gWHrV2nR7_l3Uq5rrAABOV0"]
[Fri Oct 24 01:27:46 2025] [elconferencista.com] [error] [client 130.33.52.240:4176] [pid 491404] apache2_util.c(271): [client 130.33.52.240] ModSecurity: Warning. Matched phrase "Mozlila" at REQUEST_HEADERS:User-Agent. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-913-SCANNER-DETECTION.conf"] [line "56"] [id "913100"] [msg "Found User-Agent associated with security scanner"] [data "Matched Data: Mozlila found within REQUEST_HEADERS:User-Agent: Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-reputation-scanner"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/118/224/541/310"] [tag "PCI/6.5.10"] [hostname "www.elconferencista.com"] [uri "/wp-content/themes/seotheme/db.php"] [unique_id "aPs4gmHrV2nR7_l3Uq5rrwABOLM"]
[Fri Oct 24 02:03:16 2025] [elconferencista.com] [error] [client 43.155.27.244:54350] [pid 491404] apache2_util.c(271): [client 43.155.27.244] ModSecurity: Warning. Pattern match "\\\\b(?:keep-alive|close),\\\\s?(?:keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "352"] [id "920210"] [msg "Multiple/Conflicting Connection Header Data Found"] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [hostname "www.elconferencista.com"] [uri "/"] [unique_id "aPtA1GHrV2nR7_l3Uq6A_wABOKU"]
[Fri Oct 24 03:24:42 2025] [elconferencista.com] [error] [client 176.106.157.73:59722] [pid 1692508] mod_access_compat.c(350): AH01797: client denied by server configuration: /home/ednermusika/elconferencista.com/wp-cli.php
[Fri Oct 24 03:24:45 2025] [elconferencista.com] [warn] [client 176.106.157.73:59722] [pid 1692508] fcgid_bridge.c(409): (32)Broken pipe: mod_fcgid: ap_pass_brigade failed in handle_request_ipc function
[Fri Oct 24 03:24:47 2025] [elconferencista.com] [warn] [client 176.106.157.73:59706] [pid 1692508] fcgid_bridge.c(409): (32)Broken pipe: mod_fcgid: ap_pass_brigade failed in handle_request_ipc function
[Fri Oct 24 03:27:01 2025] [elconferencista.com] [error] [client 43.130.110.130:55674] [pid 1692508] apache2_util.c(271): [client 43.130.110.130] ModSecurity: Warning. Pattern match "\\\\b(?:keep-alive|close),\\\\s?(?:keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "352"] [id "920210"] [msg "Multiple/Conflicting Connection Header Data Found"] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [hostname "www.elconferencista.com"] [uri "/"] [unique_id "aPtUdSd17IvyzWkS5qi7HgABX8w"]
[Fri Oct 24 03:31:09 2025] [elconferencista.com] [error] [client 176.193.24.122:49286] [pid 1692508] mod_access_compat.c(350): AH01797: client denied by server configuration: /home/ednermusika/elconferencista.com/wp-cli.php
[Fri Oct 24 04:04:24 2025] [elconferencista.com] [error] [client 193.32.249.135:55866] [pid 1692508] apache2_util.c(271): [client 193.32.249.135] ModSecurity: Access denied with code 418 (phase 1). Pattern match "wp-config.php" at ARGS_GET:file. [file "/etc/modsecurity/mod_sec3_CRS/99_dreamhost_rules.conf"] [line "93"] [id "1990071"] [msg "wp-config.php Local File Inclusion Attempt"] [hostname "www.elconferencista.com"] [uri "/wp-content/themes/churchope/lib/downloadlink.php"] [unique_id "aPtdOCd17IvyzWkS5qjU6gABX84"]
[Fri Oct 24 04:04:24 2025] [elconferencista.com] [error] [client 193.32.249.135:55874] [pid 1692508] apache2_util.c(271): [client 193.32.249.135] ModSecurity: Access denied with code 418 (phase 1). Pattern match "wp-config.php" at ARGS_GET:file_path. [file "/etc/modsecurity/mod_sec3_CRS/99_dreamhost_rules.conf"] [line "93"] [id "1990071"] [msg "wp-config.php Local File Inclusion Attempt"] [hostname "www.elconferencista.com"] [uri "/wp-content/plugins/hb-audio-gallery-lite/gallery/audio-download.php"] [unique_id "aPtdOCd17IvyzWkS5qjU6wABX9o"]
[Fri Oct 24 04:04:24 2025] [elconferencista.com] [error] [client 193.32.249.135:55862] [pid 1692508] apache2_util.c(271): [client 193.32.249.135] ModSecurity: Access denied with code 418 (phase 1). Pattern match "wp-config.php" at ARGS_GET:file. [file "/etc/modsecurity/mod_sec3_CRS/99_dreamhost_rules.conf"] [line "93"] [id "1990071"] [msg "wp-config.php Local File Inclusion Attempt"] [hostname "www.elconferencista.com"] [uri "/wp-content/themes/oxygen-theme/download.php"] [unique_id "aPtdOCd17IvyzWkS5qjU7AABX-Y"]
[Fri Oct 24 04:04:24 2025] [elconferencista.com] [error] [client 193.32.249.135:55872] [pid 1692508] apache2_util.c(271): [client 193.32.249.135] ModSecurity: Access denied with code 418 (phase 1). Pattern match "wp-config.php" at ARGS_GET:alg_wc_pif_download_file. [file "/etc/modsecurity/mod_sec3_CRS/99_dreamhost_rules.conf"] [line "93"] [id "1990071"] [msg "wp-config.php Local File Inclusion Attempt"] [hostname "www.elconferencista.com"] [uri "/wp-admin/admin-post.php"] [unique_id "aPtdOCd17IvyzWkS5qjU7QABYBM"]
[Fri Oct 24 04:04:24 2025] [elconferencista.com] [error] [client 193.32.249.135:55886] [pid 1692508] apache2_util.c(271): [client 193.32.249.135] ModSecurity: Access denied with code 418 (phase 1). Pattern match "wp-config.php" at ARGS_GET:href. [file "/etc/modsecurity/mod_sec3_CRS/99_dreamhost_rules.conf"] [line "93"] [id "1990071"] [msg "wp-config.php Local File Inclusion Attempt"] [hostname "www.elconferencista.com"] [uri "/wp-content/plugins/tinymce-thumbnail-gallery/php/download-image.php"] [unique_id "aPtdOCd17IvyzWkS5qjU7gABX9w"]
[Fri Oct 24 04:04:24 2025] [elconferencista.com] [error] [client 193.32.249.135:55894] [pid 1692508] apache2_util.c(271): [client 193.32.249.135] ModSecurity: Access denied with code 418 (phase 1). Pattern match "wp-config.php" at ARGS_GET:eeFile. [file "/etc/modsecurity/mod_sec3_CRS/99_dreamhost_rules.conf"] [line "93"] [id "1990071"] [msg "wp-config.php Local File Inclusion Attempt"] [hostname "www.elconferencista.com"] [uri "/wp-content/plugins/simple-file-list/includes/ee-downloader.php"] [unique_id "aPtdOCd17IvyzWkS5qjU7wABX7E"]
[Fri Oct 24 04:04:24 2025] [elconferencista.com] [error] [client 193.32.249.135:55888] [pid 1692508] apache2_util.c(271): [client 193.32.249.135] ModSecurity: Access denied with code 418 (phase 1). Pattern match "%00+$" at REQUEST_URI. [file "/etc/modsecurity/mod_sec3_CRS/99_dreamhost_rules.conf"] [line "56"] [id "1990014"] [msg "NULL byte at end of URI"] [hostname "www.elconferencista.com"] [uri "/wp-content/plugins/brandfolder/callback.php"] [unique_id "aPtdOCd17IvyzWkS5qjU8AABX6k"]
[Fri Oct 24 04:04:24 2025] [elconferencista.com] [error] [client 193.32.249.135:55906] [pid 1692508] apache2_util.c(271): [client 193.32.249.135] ModSecurity: Access denied with code 418 (phase 1). Pattern match "wp-config.php" at ARGS_GET:path. [file "/etc/modsecurity/mod_sec3_CRS/99_dreamhost_rules.conf"] [line "93"] [id "1990071"] [msg "wp-config.php Local File Inclusion Attempt"] [hostname "www.elconferencista.com"] [uri "/wp-content/plugins/wp-source-control/downloadfiles/download.php"] [unique_id "aPtdOCd17IvyzWkS5qjU8QABX88"]
[Fri Oct 24 04:04:27 2025] [elconferencista.com] [error] [client 193.32.249.135:55912] [pid 1692508] apache2_util.c(271): [client 193.32.249.135] ModSecurity: Access denied with code 418 (phase 1). Pattern match "wp-config.php" at ARGS_GET:file_path. [file "/etc/modsecurity/mod_sec3_CRS/99_dreamhost_rules.conf"] [line "93"] [id "1990071"] [msg "wp-config.php Local File Inclusion Attempt"] [hostname "www.elconferencista.com"] [uri "/wp-content/plugins/wp-hide-security-enhancer/router/file-process.php"] [unique_id "aPtdOyd17IvyzWkS5qjU9QABX6o"]
[Fri Oct 24 04:04:40 2025] [elconferencista.com] [error] [client 193.32.249.135:40428] [pid 1692508] apache2_util.c(271): [client 193.32.249.135] ModSecurity: Access denied with code 418 (phase 1). Pattern match "\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./\\\\.\\\\./\\\\.\\\\." at REQUEST_URI. [file "/etc/modsecurity/mod_sec3_CRS/99_dreamhost_rules.conf"] [line "11"] [id "1980000"] [msg "Deep directory recursion"] [data "../../../../../.."] [severity "CRITICAL"] [tag "WEB_ATTACK/COMMAND_INJECTION"] [hostname "www.elconferencista.com"] [uri "/"] [unique_id "aPtdSCd17IvyzWkS5qjVAQABYAI"]
[Fri Oct 24 04:39:16 2025] [elconferencista.com] [error] [client 170.106.113.235:45274] [pid 1692508] apache2_util.c(271): [client 170.106.113.235] ModSecurity: Warning. Pattern match "\\\\b(?:keep-alive|close),\\\\s?(?:keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "352"] [id "920210"] [msg "Multiple/Conflicting Connection Header Data Found"] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [hostname "www.elconferencista.com"] [uri "/"] [unique_id "aPtlZCd17IvyzWkS5qjnCgABX-0"]
[Fri Oct 24 04:58:59 2025] [elconferencista.com] [error] [client 4.43.184.114:39933] [pid 1692508] ssl_engine_kernel.c(325): AH02032: Hostname missing.dreamhost.org (default host as no SNI was provided) and hostname www.elconferencista.com provided via HTTP have no compatible SSL setup
[Fri Oct 24 05:34:44 2025] [elconferencista.com] [error] [client 213.209.157.232:47814] [pid 137723] apache2_util.c(271): [client 213.209.157.232] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "143"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "elconferencista.com"] [uri "/.git/config"] [unique_id "aPtyZHBkScM4wpfEM5Xg1gABON0"]
[Fri Oct 24 05:59:47 2025] [elconferencista.com] [error] [client 213.209.157.232:47964] [pid 137723] apache2_util.c(271): [client 213.209.157.232] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "143"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "www.elconferencista.com"] [uri "/.git/config"] [unique_id "aPt4Q3BkScM4wpfEM5XwoQABOJQ"]
[Fri Oct 24 06:24:59 2025] [elconferencista.com] [error] [client 74.235.234.40:59754] [pid 137723] apache2_util.c(271): [client 74.235.234.40] ModSecurity: Access denied with code 418 (phase 1). Pattern match "^/(?:wp-)?config(?:uration)?\\\\.(?:php|bac?k|off|ori?g)" at REQUEST_URI. [file "/etc/modsecurity/mod_sec3_CRS/99_dreamhost_rules.conf"] [line "105"] [id "1990079"] [msg "Bot searching for config file"] [hostname "www.elconferencista.com"] [uri "/config.php"] [unique_id "aPt-K3BkScM4wpfEM5UAmQABOUs"]
[Fri Oct 24 06:44:21 2025] [elconferencista.com] [error] [client 84.247.129.156:64831] [pid 137723] mod_access_compat.c(350): AH01797: client denied by server configuration: /home/ednermusika/elconferencista.com/wp-admin/css/index.php
[Fri Oct 24 06:44:42 2025] [elconferencista.com] [error] [client 84.247.129.156:58846] [pid 137723] mod_access_compat.c(350): AH01797: client denied by server configuration: /home/ednermusika/elconferencista.com/.well-known/index.php
[Fri Oct 24 06:45:45 2025] [elconferencista.com] [error] [client 84.247.129.156:49530] [pid 137723] mod_access_compat.c(350): AH01797: client denied by server configuration: /home/ednermusika/elconferencista.com/images/index.php
[Fri Oct 24 07:02:36 2025] [elconferencista.com] [error] [client 43.135.211.148:39174] [pid 137723] apache2_util.c(271): [client 43.135.211.148] ModSecurity: Warning. Pattern match "\\\\b(?:keep-alive|close),\\\\s?(?:keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "352"] [id "920210"] [msg "Multiple/Conflicting Connection Header Data Found"] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [hostname "www.elconferencista.com"] [uri "/"] [unique_id "aPuG_HBkScM4wpfEM5UZqgABOMc"]
[Fri Oct 24 08:29:50 2025] [elconferencista.com] [error] [client 43.135.138.128:49120] [pid 1468282] apache2_util.c(271): [client 43.135.138.128] ModSecurity: Warning. Pattern match "\\\\b(?:keep-alive|close),\\\\s?(?:keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "352"] [id "920210"] [msg "Multiple/Conflicting Connection Header Data Found"] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [hostname "www.elconferencista.com"] [uri "/"] [unique_id "aPubbuGVuro9iddaoBadlQABYG4"]
[Fri Oct 24 08:43:59 2025] [elconferencista.com] [warn] [client 46.150.165.255:57780] [pid 1468282] fcgid_bridge.c(409): (32)Broken pipe: mod_fcgid: ap_pass_brigade failed in handle_request_ipc function
[Fri Oct 24 09:22:34 2025] [elconferencista.com] [error] [client 43.166.247.82:51000] [pid 13384] apache2_util.c(271): [client 43.166.247.82] ModSecurity: Warning. Pattern match "\\\\b(?:keep-alive|close),\\\\s?(?:keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "352"] [id "920210"] [msg "Multiple/Conflicting Connection Header Data Found"] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [hostname "www.elconferencista.com"] [uri "/"] [unique_id "aPunyqRNuF2HNj4WnCQzJwABOUg"]
[Fri Oct 24 09:37:41 2025] [elconferencista.com] [error] [client 43.153.12.58:42744] [pid 13384] apache2_util.c(271): [client 43.153.12.58] ModSecurity: Warning. Pattern match "\\\\b(?:keep-alive|close),\\\\s?(?:keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "352"] [id "920210"] [msg "Multiple/Conflicting Connection Header Data Found"] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [hostname "www.elconferencista.com"] [uri "/conferencias/"] [unique_id "aPurVaRNuF2HNj4WnCQ4vQABONQ"]
[Fri Oct 24 09:50:29 2025] [elconferencista.com] [error] [client 43.130.116.87:35678] [pid 13384] apache2_util.c(271): [client 43.130.116.87] ModSecurity: Warning. Pattern match "\\\\b(?:keep-alive|close),\\\\s?(?:keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "352"] [id "920210"] [msg "Multiple/Conflicting Connection Header Data Found"] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [hostname "www.elconferencista.com"] [uri "/feed/"] [unique_id "aPuuVaRNuF2HNj4WnCQ9QwABOVg"]
[Fri Oct 24 09:53:59 2025] [elconferencista.com] [error] [client 195.178.110.201:40250] [pid 13384] apache2_util.c(271): [client 195.178.110.201] ModSecurity: Warning. Matched phrase ".env" at REQUEST_FILENAME. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "143"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: .env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "elconferencista.com"] [uri "/.env"] [unique_id "aPuvJ6RNuF2HNj4WnCQ-kQABORA"]
[Fri Oct 24 09:54:00 2025] [elconferencista.com] [error] [client 195.178.110.201:40252] [pid 13384] apache2_util.c(271): [client 195.178.110.201] ModSecurity: Warning. Matched phrase ".env" at REQUEST_FILENAME. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "143"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: .env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "www.elconferencista.com"] [uri "/.env"] [unique_id "aPuvKKRNuF2HNj4WnCQ-nQABOVg"]
[Fri Oct 24 09:54:00 2025] [elconferencista.com] [error] [client 195.178.110.201:40252] [pid 13384] mod_authz_core.c(879): AH01630: client denied by server configuration: /home/ednermusika/elconferencista.com/.env
[Fri Oct 24 09:54:02 2025] [elconferencista.com] [error] [client 195.178.110.201:40250] [pid 13384] apache2_util.c(271): [client 195.178.110.201] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "143"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "elconferencista.com"] [uri "/.git/config"] [unique_id "aPuvKqRNuF2HNj4WnCQ-owABOL8"]
[Fri Oct 24 09:54:03 2025] [elconferencista.com] [error] [client 195.178.110.201:40254] [pid 13384] apache2_util.c(271): [client 195.178.110.201] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "143"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "www.elconferencista.com"] [uri "/.git/config"] [unique_id "aPuvK6RNuF2HNj4WnCQ-qAABOII"]
[Fri Oct 24 09:54:05 2025] [elconferencista.com] [error] [client 195.178.110.201:40250] [pid 13384] apache2_util.c(271): [client 195.178.110.201] ModSecurity: Warning. Matched phrase ".env" at REQUEST_FILENAME. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "143"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: .env found within REQUEST_FILENAME: /backend/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "elconferencista.com"] [uri "/backend/.env"] [unique_id "aPuvLaRNuF2HNj4WnCQ-rwABOKM"]
[Fri Oct 24 09:54:07 2025] [elconferencista.com] [error] [client 195.178.110.201:40262] [pid 13384] apache2_util.c(271): [client 195.178.110.201] ModSecurity: Warning. Matched phrase ".env" at REQUEST_FILENAME. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "143"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: .env found within REQUEST_FILENAME: /backend/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "www.elconferencista.com"] [uri "/backend/.env"] [unique_id "aPuvL6RNuF2HNj4WnCQ-sQABOKs"]
[Fri Oct 24 09:54:08 2025] [elconferencista.com] [error] [client 195.178.110.201:40250] [pid 13384] apache2_util.c(271): [client 195.178.110.201] ModSecurity: Warning. Matched phrase ".env" at REQUEST_FILENAME. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "143"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: .env found within REQUEST_FILENAME: /admin/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "elconferencista.com"] [uri "/admin/.env"] [unique_id "aPuvMKRNuF2HNj4WnCQ-tAABOS0"]
[Fri Oct 24 09:54:10 2025] [elconferencista.com] [error] [client 195.178.110.201:33976] [pid 13384] apache2_util.c(271): [client 195.178.110.201] ModSecurity: Warning. Matched phrase ".env" at REQUEST_FILENAME. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "143"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: .env found within REQUEST_FILENAME: /admin/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "www.elconferencista.com"] [uri "/admin/.env"] [unique_id "aPuvMqRNuF2HNj4WnCQ-twABOI0"]
[Fri Oct 24 09:54:11 2025] [elconferencista.com] [error] [client 195.178.110.201:40250] [pid 13384] apache2_util.c(271): [client 195.178.110.201] ModSecurity: Warning. Matched phrase ".env" at REQUEST_FILENAME. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "143"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: .env found within REQUEST_FILENAME: /core/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "elconferencista.com"] [uri "/core/.env"] [unique_id "aPuvM6RNuF2HNj4WnCQ-vQABOR8"]
[Fri Oct 24 09:54:13 2025] [elconferencista.com] [error] [client 195.178.110.201:33982] [pid 13384] apache2_util.c(271): [client 195.178.110.201] ModSecurity: Warning. Matched phrase ".env" at REQUEST_FILENAME. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "143"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: .env found within REQUEST_FILENAME: /core/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "www.elconferencista.com"] [uri "/core/.env"] [unique_id "aPuvNaRNuF2HNj4WnCQ-vwABOV4"]
[Fri Oct 24 09:54:15 2025] [elconferencista.com] [error] [client 195.178.110.201:40250] [pid 13384] apache2_util.c(271): [client 195.178.110.201] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pem/ .pol/ .printer/ .pwd/ .rdb/ .resources/ .resx/ .sql/ .swp/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "1112"] [id "920440"] [msg "URL file extension is restricted by policy"] [data ".bak"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [tag "PCI/6.5.10"] [hostname "elconferencista.com"] [uri "/.env.bak"] [unique_id "aPuvN6RNuF2HNj4WnCQ-wgABOOc"]
[Fri Oct 24 09:54:15 2025] [elconferencista.com] [error] [client 195.178.110.201:40250] [pid 13384] apache2_util.c(271): [client 195.178.110.201] ModSecurity: Warning. Matched phrase ".env" at REQUEST_FILENAME. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "143"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: .env found within REQUEST_FILENAME: /.env.bak"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "elconferencista.com"] [uri "/.env.bak"] [unique_id "aPuvN6RNuF2HNj4WnCQ-wgABOOc"]
[Fri Oct 24 09:54:20 2025] [elconferencista.com] [error] [client 195.178.110.201:57602] [pid 13384] apache2_util.c(271): [client 195.178.110.201] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pem/ .pol/ .printer/ .pwd/ .rdb/ .resources/ .resx/ .sql/ .swp/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "1112"] [id "920440"] [msg "URL file extension is restricted by policy"] [data ".bak"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [tag "PCI/6.5.10"] [hostname "www.elconferencista.com"] [uri "/.env.bak"] [unique_id "aPuvPKRNuF2HNj4WnCQ-0gABOKk"]
[Fri Oct 24 09:54:20 2025] [elconferencista.com] [error] [client 195.178.110.201:57602] [pid 13384] apache2_util.c(271): [client 195.178.110.201] ModSecurity: Warning. Matched phrase ".env" at REQUEST_FILENAME. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "143"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: .env found within REQUEST_FILENAME: /.env.bak"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "www.elconferencista.com"] [uri "/.env.bak"] [unique_id "aPuvPKRNuF2HNj4WnCQ-0gABOKk"]
[Fri Oct 24 09:54:20 2025] [elconferencista.com] [error] [client 195.178.110.201:57602] [pid 13384] mod_authz_core.c(879): AH01630: client denied by server configuration: /home/ednermusika/elconferencista.com/.env.bak
[Fri Oct 24 09:54:22 2025] [elconferencista.com] [error] [client 195.178.110.201:40250] [pid 13384] apache2_util.c(271): [client 195.178.110.201] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "143"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/logs/HEAD"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "elconferencista.com"] [uri "/.git/logs/HEAD"] [unique_id "aPuvPqRNuF2HNj4WnCQ-4gABOJQ"]
[Fri Oct 24 09:54:22 2025] [elconferencista.com] [error] [client 195.178.110.201:57624] [pid 13384] apache2_util.c(271): [client 195.178.110.201] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "143"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/logs/HEAD"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "www.elconferencista.com"] [uri "/.git/logs/HEAD"] [unique_id "aPuvPqRNuF2HNj4WnCQ-5QABORE"]
[Fri Oct 24 09:54:24 2025] [elconferencista.com] [error] [client 195.178.110.201:57610] [pid 13384] apache2_util.c(271): [client 195.178.110.201] ModSecurity: Access denied with code 418 (phase 1). Pattern match "^/(?:wp-)?config(?:uration)?\\\\.(?:php|bac?k|off|ori?g)" at REQUEST_URI. [file "/etc/modsecurity/mod_sec3_CRS/99_dreamhost_rules.conf"] [line "105"] [id "1990079"] [msg "Bot searching for config file"] [hostname "elconferencista.com"] [uri "/wp-config.php"] [unique_id "aPuvQKRNuF2HNj4WnCQ-7AABONM"]
[Fri Oct 24 09:54:25 2025] [elconferencista.com] [error] [client 195.178.110.201:57658] [pid 13384] apache2_util.c(271): [client 195.178.110.201] ModSecurity: Warning. Matched phrase ".gitlab-ci.yml" at REQUEST_FILENAME. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "143"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: .gitlab-ci.yml found within REQUEST_FILENAME: /.gitlab-ci.yml"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "elconferencista.com"] [uri "/.gitlab-ci.yml"] [unique_id "aPuvQaRNuF2HNj4WnCQ-7QABOQw"]
[Fri Oct 24 09:54:27 2025] [elconferencista.com] [error] [client 195.178.110.201:57736] [pid 13384] apache2_util.c(271): [client 195.178.110.201] ModSecurity: Warning. Matched phrase ".gitlab-ci.yml" at REQUEST_FILENAME. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "143"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: .gitlab-ci.yml found within REQUEST_FILENAME: /.gitlab-ci.yml"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "www.elconferencista.com"] [uri "/.gitlab-ci.yml"] [unique_id "aPuvQ6RNuF2HNj4WnCQ--gABOTo"]
[Fri Oct 24 10:09:40 2025] [elconferencista.com] [error] [client 43.166.134.114:52450] [pid 13384] apache2_util.c(271): [client 43.166.134.114] ModSecurity: Warning. Pattern match "\\\\b(?:keep-alive|close),\\\\s?(?:keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "352"] [id "920210"] [msg "Multiple/Conflicting Connection Header Data Found"] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [hostname "www.elconferencista.com"] [uri "/xmlrpc.php"] [unique_id "aPuy1KRNuF2HNj4WnCRGugABOPM"]
[Fri Oct 24 10:18:52 2025] [elconferencista.com] [error] [client 43.166.251.233:51878] [pid 13384] apache2_util.c(271): [client 43.166.251.233] ModSecurity: Warning. Pattern match "\\\\b(?:keep-alive|close),\\\\s?(?:keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "352"] [id "920210"] [msg "Multiple/Conflicting Connection Header Data Found"] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [hostname "www.elconferencista.com"] [uri "/"] [unique_id "aPu0_KRNuF2HNj4WnCRLoQABOOw"]
[Fri Oct 24 10:27:05 2025] [elconferencista.com] [error] [client 43.153.7.191:42054] [pid 13384] apache2_util.c(271): [client 43.153.7.191] ModSecurity: Warning. Pattern match "\\\\b(?:keep-alive|close),\\\\s?(?:keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "352"] [id "920210"] [msg "Multiple/Conflicting Connection Header Data Found"] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [hostname "www.elconferencista.com"] [uri "/"] [unique_id "aPu26aRNuF2HNj4WnCRPYwABOUQ"]
[Fri Oct 24 10:32:47 2025] [elconferencista.com] [warn] [client 194.233.93.51:52321] [pid 13384] fcgid_bucket.c(153): mod_fcgid: stderr: PHP Fatal error:  Uncaught Error: [] operator not supported for strings in /home/ednermusika/elconferencista.com/wp-content/plugins/security-core/security-core.php:110
[Fri Oct 24 10:32:47 2025] [elconferencista.com] [warn] [client 194.233.93.51:52321] [pid 13384] fcgid_bucket.c(153): mod_fcgid: stderr: Stack trace:
[Fri Oct 24 10:32:47 2025] [elconferencista.com] [warn] [client 194.233.93.51:52321] [pid 13384] fcgid_bucket.c(153): mod_fcgid: stderr: #0 /home/ednermusika/elconferencista.com/wp-includes/class-wp-hook.php(326): exclude_from_authors(Array)
[Fri Oct 24 10:32:47 2025] [elconferencista.com] [warn] [client 194.233.93.51:52321] [pid 13384] fcgid_bucket.c(153): mod_fcgid: stderr: #1 /home/ednermusika/elconferencista.com/wp-includes/plugin.php(205): WP_Hook->apply_filters(Array, Array)
[Fri Oct 24 10:32:47 2025] [elconferencista.com] [warn] [client 194.233.93.51:52321] [pid 13384] fcgid_bucket.c(153): mod_fcgid: stderr: #2 /home/ednermusika/elconferencista.com/wp-includes/user.php(1779): apply_filters('wp_dropdown_use...', Array, Array)
[Fri Oct 24 10:32:47 2025] [elconferencista.com] [warn] [client 194.233.93.51:52321] [pid 13384] fcgid_bucket.c(153): mod_fcgid: stderr: #3 /home/ednermusika/elconferencista.com/wp-admin/includes/meta-boxes.php(970): wp_dropdown_users(Array)
[Fri Oct 24 10:32:47 2025] [elconferencista.com] [warn] [client 194.233.93.51:52321] [pid 13384] fcgid_bucket.c(153): mod_fcgid: stderr: #4 /home/ednermusika/elconferencista.com/wp-admin/includes/template.php(1456): post_author_meta_box(Object(WP_Post), Array)
[Fri Oct 24 10:32:47 2025] [elconferencista.com] [warn] [client 194.233.93.51:52321] [pid 13384] fcgid_bucket.c(153): mod_fcgid: stderr: #5 /home/ednermusika/elconferencista.com/wp-admin/edit-form-advanced.php(721): do_meta_boxes(Object(WP_Screen), 'normal', Object(WP_Post))
[Fri Oct 24 10:32:47 2025] [elconferencista.com] [warn] [client 194.233.93.51:52321] [pid 13384] fcgid_bucket.c(153): mod_fcgid: stderr: #6 /home/ednermusika/elconferencista.com/wp-admin/post-new.php(75): require('/home/ednermusi...')
[Fri Oct 24 10:32:47 2025] [elconferencista.com] [warn] [client 194.233.93.51:52321] [pid 13384] fcgid_bucket.c(153): mod_fcgid: stderr: #7 {main}
[Fri Oct 24 10:32:47 2025] [elconferencista.com] [warn] [client 194.233.93.51:52321] [pid 13384] fcgid_bucket.c(153): mod_fcgid: stderr:   thrown in /home/ednermusika/elconferencista.com/wp-content/plugins/security-core/security-core.php on line 110
[Fri Oct 24 10:46:05 2025] [elconferencista.com] [error] [client 43.157.142.101:51736] [pid 13384] apache2_util.c(271): [client 43.157.142.101] ModSecurity: Warning. Pattern match "\\\\b(?:keep-alive|close),\\\\s?(?:keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "352"] [id "920210"] [msg "Multiple/Conflicting Connection Header Data Found"] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [hostname "www.elconferencista.com"] [uri "/articulo-3/"] [unique_id "aPu7XaRNuF2HNj4WnCRZgQABOT0"]
[Fri Oct 24 10:49:10 2025] [elconferencista.com] [error] [client 43.166.247.155:48428] [pid 13384] apache2_util.c(271): [client 43.166.247.155] ModSecurity: Warning. Pattern match "\\\\b(?:keep-alive|close),\\\\s?(?:keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "352"] [id "920210"] [msg "Multiple/Conflicting Connection Header Data Found"] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [hostname "www.elconferencista.com"] [uri "/"] [unique_id "aPu8FqRNuF2HNj4WnCRcAwABOPg"]
[Fri Oct 24 11:10:38 2025] [elconferencista.com] [error] [client 43.157.175.122:36320] [pid 13384] apache2_util.c(271): [client 43.157.175.122] ModSecurity: Warning. Pattern match "\\\\b(?:keep-alive|close),\\\\s?(?:keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "352"] [id "920210"] [msg "Multiple/Conflicting Connection Header Data Found"] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [hostname "www.elconferencista.com"] [uri "/xmlrpc.php"] [unique_id "aPvBHqRNuF2HNj4WnCRlRwABOQo"]
[Fri Oct 24 11:27:26 2025] [elconferencista.com] [error] [client 43.130.174.37:55078] [pid 1564168] apache2_util.c(271): [client 43.130.174.37] ModSecurity: Warning. Pattern match "\\\\b(?:keep-alive|close),\\\\s?(?:keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "352"] [id "920210"] [msg "Multiple/Conflicting Connection Header Data Found"] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [hostname "www.elconferencista.com"] [uri "/"] [unique_id "aPvFDrpjZJ35bA8q6oPEMQABX9s"]
[Fri Oct 24 11:29:35 2025] [elconferencista.com] [error] [client 43.166.226.186:41410] [pid 1564168] apache2_util.c(271): [client 43.166.226.186] ModSecurity: Warning. Pattern match "\\\\b(?:keep-alive|close),\\\\s?(?:keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "352"] [id "920210"] [msg "Multiple/Conflicting Connection Header Data Found"] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [hostname "www.elconferencista.com"] [uri "/comments/feed/"] [unique_id "aPvFj7pjZJ35bA8q6oPFPgABYGI"]
[Fri Oct 24 12:12:08 2025] [elconferencista.com] [error] [client 77.91.171.211:44236] [pid 1564168] mod_access_compat.c(350): AH01797: client denied by server configuration: /home/ednermusika/elconferencista.com/wp-admin/theme-install.php
[Fri Oct 24 12:12:11 2025] [elconferencista.com] [error] [client 77.91.171.211:44244] [pid 1564168] mod_access_compat.c(350): AH01797: client denied by server configuration: /home/ednermusika/elconferencista.com/wp-admin/plugin-install.php
[Fri Oct 24 12:12:24 2025] [elconferencista.com] [error] [client 77.91.171.211:51014] [pid 1564168] mod_access_compat.c(350): AH01797: client denied by server configuration: /home/ednermusika/elconferencista.com/wp-admin/plugin-install.php
[Fri Oct 24 12:20:03 2025] [elconferencista.com] [warn] [client 85.198.105.114:37439] [pid 1564168] fcgid_bridge.c(409): (32)Broken pipe: mod_fcgid: ap_pass_brigade failed in handle_request_ipc function
[Fri Oct 24 13:53:49 2025] [elconferencista.com] [error] [client 4.43.184.114:56858] [pid 2847280] ssl_engine_kernel.c(325): AH02032: Hostname missing.dreamhost.org (default host as no SNI was provided) and hostname www.elconferencista.com provided via HTTP have no compatible SSL setup
[Fri Oct 24 16:33:16 2025] [elconferencista.com] [error] [client 185.117.225.31:60110] [pid 1233358] mod_access_compat.c(350): AH01797: client denied by server configuration: /home/ednermusika/elconferencista.com/wp-admin.php
[Fri Oct 24 16:57:43 2025] [elconferencista.com] [error] [client 212.124.5.95:21741] [pid 1233358] mod_access_compat.c(350): AH01797: client denied by server configuration: /home/ednermusika/elconferencista.com/wp-cli.php
[Fri Oct 24 16:57:46 2025] [elconferencista.com] [warn] [client 212.124.5.95:21743] [pid 1233358] fcgid_bridge.c(409): (32)Broken pipe: mod_fcgid: ap_pass_brigade failed in handle_request_ipc function
[Fri Oct 24 16:57:46 2025] [elconferencista.com] [warn] [client 212.124.5.95:21741] [pid 1233358] fcgid_bridge.c(409): (32)Broken pipe: mod_fcgid: ap_pass_brigade failed in handle_request_ipc function
[Fri Oct 24 16:59:24 2025] [elconferencista.com] [error] [client 194.163.168.130:53213] [pid 1233358] mod_access_compat.c(350): AH01797: client denied by server configuration: /home/ednermusika/elconferencista.com/wp-admin/plugin-install.php
[Fri Oct 24 16:59:26 2025] [elconferencista.com] [error] [client 194.163.168.130:53213] [pid 1233358] mod_access_compat.c(350): AH01797: client denied by server configuration: /home/ednermusika/elconferencista.com/wp-admin/plugin-install.php
[Fri Oct 24 16:59:27 2025] [elconferencista.com] [error] [client 194.163.168.130:53213] [pid 1233358] mod_access_compat.c(350): AH01797: client denied by server configuration: /home/ednermusika/elconferencista.com/wp-admin/theme-install.php
[Fri Oct 24 17:02:38 2025] [elconferencista.com] [error] [client 5.44.168.22:57680] [pid 1233358] mod_access_compat.c(350): AH01797: client denied by server configuration: /home/ednermusika/elconferencista.com/wp-cli.php
[Fri Oct 24 17:02:42 2025] [elconferencista.com] [warn] [client 5.44.168.22:57678] [pid 1233358] fcgid_bridge.c(409): (32)Broken pipe: mod_fcgid: ap_pass_brigade failed in handle_request_ipc function
[Fri Oct 24 17:55:09 2025] [elconferencista.com] [warn] [client 77.75.76.172:25501] [pid 1233358] fcgid_bridge.c(409): (104)Connection reset by peer: mod_fcgid: ap_pass_brigade failed in handle_request_ipc function
[Fri Oct 24 18:36:12 2025] [elconferencista.com] [error] [client 4.43.184.114:43546] [pid 112624] ssl_engine_kernel.c(325): AH02032: Hostname missing.dreamhost.org (default host as no SNI was provided) and hostname www.elconferencista.com provided via HTTP have no compatible SSL setup
[Fri Oct 24 19:00:11 2025] [elconferencista.com] [warn] [client 90.188.246.183:9779] [pid 112624] fcgid_bridge.c(409): (32)Broken pipe: mod_fcgid: ap_pass_brigade failed in handle_request_ipc function
[Fri Oct 24 21:04:27 2025] [elconferencista.com] [error] [client 157.254.95.122:39028] [pid 1385317] apache2_util.c(271): [client 157.254.95.122] ModSecurity: Warning. Pattern match "[\\\\n\\\\r]" at ARGS_NAMES:*</string></value></data></array></value></data></array></value></member></struct></value>\\r\\n</data></array></value></param></params></methodCall>\\r\\n. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-921-PROTOCOL-ATTACK.conf"] [line "167"] [id "921150"] [msg "HTTP Header Injection Attack via payload (CR/LF detected)"] [data "Matched Data: \\x0d found within ARGS_NAMES:*</string></value></data></array></value></data></array></value></member></struct></value>\\x5cr\\x5cn</data></array></value></param></params></methodCall>\\x5cr\\x5cn: *</string></value></data></array></value></data></array></value></member></struct></value>\\x0d\\x0a</data></array></value></param></params></methodCall>\\x0d\\x0a"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272/220/33"] [hostname "www.elconferencista.com"] [uri "/xmlrpc.php"] [unique_id "aPxMS1VONCtgdmH6ZKLqIgABOQA"]
[Fri Oct 24 22:32:02 2025] [elconferencista.com] [error] [client 196.251.114.44:40316] [pid 1385317] mod_access_compat.c(350): AH01797: client denied by server configuration: /home/ednermusika/elconferencista.com/wp-confiq.php
[Fri Oct 24 22:42:48 2025] [elconferencista.com] [error] [client 15.207.106.132:61882] [pid 161733] mod_access_compat.c(350): AH01797: client denied by server configuration: /home/ednermusika/elconferencista.com/wp-admin/css/index.php
[Fri Oct 24 22:43:07 2025] [elconferencista.com] [error] [client 15.207.106.132:55898] [pid 161733] mod_access_compat.c(350): AH01797: client denied by server configuration: /home/ednermusika/elconferencista.com/.well-known/index.php
[Fri Oct 24 22:44:46 2025] [elconferencista.com] [error] [client 15.207.106.132:49718] [pid 161733] mod_access_compat.c(350): AH01797: client denied by server configuration: /home/ednermusika/elconferencista.com/images/index.php
[Fri Oct 24 22:51:47 2025] [elconferencista.com] [error] [client 43.130.91.95:59022] [pid 161733] apache2_util.c(271): [client 43.130.91.95] ModSecurity: Warning. Pattern match "\\\\b(?:keep-alive|close),\\\\s?(?:keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "352"] [id "920210"] [msg "Multiple/Conflicting Connection Header Data Found"] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [hostname "www.elconferencista.com"] [uri "/"] [unique_id "aPxlcxEiZzhRvnI6j8gA8wABYGo"]
[Fri Oct 24 23:08:22 2025] [elconferencista.com] [warn] [client 194.233.93.51:63262] [pid 161733] fcgid_bucket.c(153): mod_fcgid: stderr: PHP Fatal error:  Uncaught Error: [] operator not supported for strings in /home/ednermusika/elconferencista.com/wp-content/plugins/security-core/security-core.php:110
[Fri Oct 24 23:08:22 2025] [elconferencista.com] [warn] [client 194.233.93.51:63262] [pid 161733] fcgid_bucket.c(153): mod_fcgid: stderr: Stack trace:
[Fri Oct 24 23:08:22 2025] [elconferencista.com] [warn] [client 194.233.93.51:63262] [pid 161733] fcgid_bucket.c(153): mod_fcgid: stderr: #0 /home/ednermusika/elconferencista.com/wp-includes/class-wp-hook.php(326): exclude_from_authors(Array)
[Fri Oct 24 23:08:22 2025] [elconferencista.com] [warn] [client 194.233.93.51:63262] [pid 161733] fcgid_bucket.c(153): mod_fcgid: stderr: #1 /home/ednermusika/elconferencista.com/wp-includes/plugin.php(205): WP_Hook->apply_filters(Array, Array)
[Fri Oct 24 23:08:22 2025] [elconferencista.com] [warn] [client 194.233.93.51:63262] [pid 161733] fcgid_bucket.c(153): mod_fcgid: stderr: #2 /home/ednermusika/elconferencista.com/wp-includes/user.php(1779): apply_filters('wp_dropdown_use...', Array, Array)
[Fri Oct 24 23:08:22 2025] [elconferencista.com] [warn] [client 194.233.93.51:63262] [pid 161733] fcgid_bucket.c(153): mod_fcgid: stderr: #3 /home/ednermusika/elconferencista.com/wp-admin/includes/meta-boxes.php(970): wp_dropdown_users(Array)
[Fri Oct 24 23:08:22 2025] [elconferencista.com] [warn] [client 194.233.93.51:63262] [pid 161733] fcgid_bucket.c(153): mod_fcgid: stderr: #4 /home/ednermusika/elconferencista.com/wp-admin/includes/template.php(1456): post_author_meta_box(Object(WP_Post), Array)
[Fri Oct 24 23:08:22 2025] [elconferencista.com] [warn] [client 194.233.93.51:63262] [pid 161733] fcgid_bucket.c(153): mod_fcgid: stderr: #5 /home/ednermusika/elconferencista.com/wp-admin/edit-form-advanced.php(721): do_meta_boxes(Object(WP_Screen), 'normal', Object(WP_Post))
[Fri Oct 24 23:08:22 2025] [elconferencista.com] [warn] [client 194.233.93.51:63262] [pid 161733] fcgid_bucket.c(153): mod_fcgid: stderr: #6 /home/ednermusika/elconferencista.com/wp-admin/post-new.php(75): require('/home/ednermusi...')
[Fri Oct 24 23:08:22 2025] [elconferencista.com] [warn] [client 194.233.93.51:63262] [pid 161733] fcgid_bucket.c(153): mod_fcgid: stderr: #7 {main}
[Fri Oct 24 23:08:22 2025] [elconferencista.com] [warn] [client 194.233.93.51:63262] [pid 161733] fcgid_bucket.c(153): mod_fcgid: stderr:   thrown in /home/ednermusika/elconferencista.com/wp-content/plugins/security-core/security-core.php on line 110
[Fri Oct 24 23:21:30 2025] [elconferencista.com] [error] [client 42.83.147.54:4105] [pid 161733] apache2_util.c(271): [client 42.83.147.54] ModSecurity: Warning. Match of "within %{tx.allowed_request_content_type}" against "TX:content_type" required. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "1012"] [id "920420"] [msg "Request content type is not allowed by policy"] [data "|text/html|"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153"] [tag "PCI/12.1"] [hostname "www.elconferencista.com"] [uri "/"] [unique_id "aPxsahEiZzhRvnI6j8gRcwABYFg"]
[Fri Oct 24 23:21:46 2025] [elconferencista.com] [error] [client 42.83.147.54:52696] [pid 161733] apache2_util.c(271): [client 42.83.147.54] ModSecurity: Warning. Match of "within %{tx.allowed_request_content_type}" against "TX:content_type" required. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "1012"] [id "920420"] [msg "Request content type is not allowed by policy"] [data "|text/html|"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153"] [tag "PCI/12.1"] [hostname "www.elconferencista.com"] [uri "/"] [unique_id "aPxsehEiZzhRvnI6j8gRtQABYBk"]
[Fri Oct 24 23:59:38 2025] [elconferencista.com] [error] [client 154.205.8.214:60795] [pid 875629] mod_access_compat.c(350): AH01797: client denied by server configuration: /home/ednermusika/elconferencista.com/wp-content/plugins/qrawbsa/postnews.php
[Fri Oct 24 23:59:48 2025] [elconferencista.com] [warn] [client 154.205.8.214:60795] [pid 875629] fcgid_proc_unix.c(627): (104)Connection reset by peer: mod_fcgid: error reading data from FastCGI server
[Fri Oct 24 23:59:48 2025] [elconferencista.com] [error] [client 154.205.8.214:60795] [pid 875629] util_script.c(497): End of script output before headers: index.php
[Fri Oct 24 23:59:53 2025] [elconferencista.com] [warn] [client 154.205.8.214:60795] [pid 875629] fcgid_proc_unix.c(627): (104)Connection reset by peer: mod_fcgid: error reading data from FastCGI server
[Fri Oct 24 23:59:53 2025] [elconferencista.com] [error] [client 154.205.8.214:60795] [pid 875629] util_script.c(497): End of script output before headers: index.php
@ Telegram