[Sat Oct 25 00:57:25 2025] [elconferencista.com] [error] [client 157.66.56.12:51971] [pid 1635031] apache2_util.c(271): [client 157.66.56.12] ModSecurity: Warning. Matched phrase "/sftp-config.json" at REQUEST_FILENAME. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "143"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /sftp-config.json found within REQUEST_FILENAME: /sftp-config.json"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "www.elconferencista.com"] [uri "/sftp-config.json"] [unique_id "aPyC5WEMSSoxBuuBVhDeAwABYE8"]
[Sat Oct 25 00:57:26 2025] [elconferencista.com] [error] [client 157.66.56.12:52430] [pid 1635031] apache2_util.c(271): [client 157.66.56.12] ModSecurity: Warning. Matched phrase ".vscode" at REQUEST_FILENAME. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "143"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: .vscode found within REQUEST_FILENAME: /.vscode/sftp.json"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "www.elconferencista.com"] [uri "/.vscode/sftp.json"] [unique_id "aPyC5mEMSSoxBuuBVhDeBgABYEQ"]
[Sat Oct 25 00:58:55 2025] [elconferencista.com] [error] [client 43.159.135.203:58360] [pid 1635031] apache2_util.c(271): [client 43.159.135.203] ModSecurity: Warning. Pattern match "\\\\b(?:keep-alive|close),\\\\s?(?:keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "352"] [id "920210"] [msg "Multiple/Conflicting Connection Header Data Found"] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [hostname "www.elconferencista.com"] [uri "/"] [unique_id "aPyDP2EMSSoxBuuBVhDfMgABX9U"]
[Sat Oct 25 02:02:49 2025] [elconferencista.com] [error] [client 40.86.42.83:10883] [pid 1635031] mod_access_compat.c(350): AH01797: client denied by server configuration: /home/ednermusika/elconferencista.com/wp-content/file.php
[Sat Oct 25 02:02:49 2025] [elconferencista.com] [error] [client 40.86.42.83:10883] [pid 1635031] mod_access_compat.c(350): AH01797: client denied by server configuration: /home/ednermusika/elconferencista.com/forbidden.html
[Sat Oct 25 02:02:50 2025] [elconferencista.com] [error] [client 40.86.42.83:10883] [pid 1635031] mod_access_compat.c(350): AH01797: client denied by server configuration: /home/ednermusika/elconferencista.com/wp-content/function.php
[Sat Oct 25 02:02:50 2025] [elconferencista.com] [error] [client 40.86.42.83:10883] [pid 1635031] mod_access_compat.c(350): AH01797: client denied by server configuration: /home/ednermusika/elconferencista.com/forbidden.html
[Sat Oct 25 02:02:50 2025] [elconferencista.com] [error] [client 40.86.42.83:10883] [pid 1635031] mod_access_compat.c(350): AH01797: client denied by server configuration: /home/ednermusika/elconferencista.com/wp-content/lock360.php
[Sat Oct 25 02:02:50 2025] [elconferencista.com] [error] [client 40.86.42.83:10883] [pid 1635031] mod_access_compat.c(350): AH01797: client denied by server configuration: /home/ednermusika/elconferencista.com/forbidden.html
[Sat Oct 25 02:02:50 2025] [elconferencista.com] [error] [client 40.86.42.83:10883] [pid 1635031] mod_access_compat.c(350): AH01797: client denied by server configuration: /home/ednermusika/elconferencista.com/wp-content/moon.php
[Sat Oct 25 02:02:50 2025] [elconferencista.com] [error] [client 40.86.42.83:10883] [pid 1635031] mod_access_compat.c(350): AH01797: client denied by server configuration: /home/ednermusika/elconferencista.com/forbidden.html
[Sat Oct 25 02:02:50 2025] [elconferencista.com] [error] [client 40.86.42.83:10883] [pid 1635031] mod_access_compat.c(350): AH01797: client denied by server configuration: /home/ednermusika/elconferencista.com/wp-content/wp.php
[Sat Oct 25 02:02:50 2025] [elconferencista.com] [error] [client 40.86.42.83:10883] [pid 1635031] mod_access_compat.c(350): AH01797: client denied by server configuration: /home/ednermusika/elconferencista.com/forbidden.html
[Sat Oct 25 02:02:50 2025] [elconferencista.com] [error] [client 40.86.42.83:10883] [pid 1635031] mod_access_compat.c(350): AH01797: client denied by server configuration: /home/ednermusika/elconferencista.com/wp-content/aa.php
[Sat Oct 25 02:02:50 2025] [elconferencista.com] [error] [client 40.86.42.83:10883] [pid 1635031] mod_access_compat.c(350): AH01797: client denied by server configuration: /home/ednermusika/elconferencista.com/forbidden.html
[Sat Oct 25 02:02:50 2025] [elconferencista.com] [error] [client 40.86.42.83:10883] [pid 1635031] mod_access_compat.c(350): AH01797: client denied by server configuration: /home/ednermusika/elconferencista.com/wp-content/index.php
[Sat Oct 25 02:02:50 2025] [elconferencista.com] [error] [client 40.86.42.83:10883] [pid 1635031] mod_access_compat.c(350): AH01797: client denied by server configuration: /home/ednermusika/elconferencista.com/forbidden.html
[Sat Oct 25 02:02:50 2025] [elconferencista.com] [error] [client 40.86.42.83:10883] [pid 1635031] mod_access_compat.c(350): AH01797: client denied by server configuration: /home/ednermusika/elconferencista.com/wp-content/ioxi-o.php
[Sat Oct 25 02:02:50 2025] [elconferencista.com] [error] [client 40.86.42.83:10883] [pid 1635031] mod_access_compat.c(350): AH01797: client denied by server configuration: /home/ednermusika/elconferencista.com/forbidden.html
[Sat Oct 25 02:02:50 2025] [elconferencista.com] [error] [client 40.86.42.83:10883] [pid 1635031] mod_access_compat.c(350): AH01797: client denied by server configuration: /home/ednermusika/elconferencista.com/wp-content/autoload_classmap.php
[Sat Oct 25 02:02:50 2025] [elconferencista.com] [error] [client 40.86.42.83:10883] [pid 1635031] mod_access_compat.c(350): AH01797: client denied by server configuration: /home/ednermusika/elconferencista.com/forbidden.html
[Sat Oct 25 02:02:50 2025] [elconferencista.com] [error] [client 40.86.42.83:10883] [pid 1635031] mod_access_compat.c(350): AH01797: client denied by server configuration: /home/ednermusika/elconferencista.com/wp-content/alfa.php
[Sat Oct 25 02:02:50 2025] [elconferencista.com] [error] [client 40.86.42.83:10883] [pid 1635031] mod_access_compat.c(350): AH01797: client denied by server configuration: /home/ednermusika/elconferencista.com/forbidden.html
[Sat Oct 25 02:02:50 2025] [elconferencista.com] [error] [client 40.86.42.83:10883] [pid 1635031] mod_access_compat.c(350): AH01797: client denied by server configuration: /home/ednermusika/elconferencista.com/wp-content/bala.php
[Sat Oct 25 02:02:50 2025] [elconferencista.com] [error] [client 40.86.42.83:10883] [pid 1635031] mod_access_compat.c(350): AH01797: client denied by server configuration: /home/ednermusika/elconferencista.com/forbidden.html
[Sat Oct 25 02:02:50 2025] [elconferencista.com] [error] [client 40.86.42.83:10883] [pid 1635031] mod_access_compat.c(350): AH01797: client denied by server configuration: /home/ednermusika/elconferencista.com/wp-content/about.php
[Sat Oct 25 02:02:50 2025] [elconferencista.com] [error] [client 40.86.42.83:10883] [pid 1635031] mod_access_compat.c(350): AH01797: client denied by server configuration: /home/ednermusika/elconferencista.com/forbidden.html
[Sat Oct 25 02:02:51 2025] [elconferencista.com] [error] [client 40.86.42.83:10883] [pid 1635031] mod_access_compat.c(350): AH01797: client denied by server configuration: /home/ednermusika/elconferencista.com/wp-content/abcd.php
[Sat Oct 25 02:02:51 2025] [elconferencista.com] [error] [client 40.86.42.83:10883] [pid 1635031] mod_access_compat.c(350): AH01797: client denied by server configuration: /home/ednermusika/elconferencista.com/forbidden.html
[Sat Oct 25 02:02:51 2025] [elconferencista.com] [error] [client 40.86.42.83:10883] [pid 1635031] mod_access_compat.c(350): AH01797: client denied by server configuration: /home/ednermusika/elconferencista.com/wp-content/ab.php
[Sat Oct 25 02:02:51 2025] [elconferencista.com] [error] [client 40.86.42.83:10883] [pid 1635031] mod_access_compat.c(350): AH01797: client denied by server configuration: /home/ednermusika/elconferencista.com/forbidden.html
[Sat Oct 25 02:02:51 2025] [elconferencista.com] [error] [client 40.86.42.83:10883] [pid 1635031] mod_access_compat.c(350): AH01797: client denied by server configuration: /home/ednermusika/elconferencista.com/wp-content/classwithtostring.php
[Sat Oct 25 02:02:51 2025] [elconferencista.com] [error] [client 40.86.42.83:10883] [pid 1635031] mod_access_compat.c(350): AH01797: client denied by server configuration: /home/ednermusika/elconferencista.com/forbidden.html
[Sat Oct 25 02:02:51 2025] [elconferencista.com] [error] [client 40.86.42.83:10883] [pid 1635031] mod_access_compat.c(350): AH01797: client denied by server configuration: /home/ednermusika/elconferencista.com/wp-content/install.php
[Sat Oct 25 02:02:51 2025] [elconferencista.com] [error] [client 40.86.42.83:10883] [pid 1635031] mod_access_compat.c(350): AH01797: client denied by server configuration: /home/ednermusika/elconferencista.com/forbidden.html
[Sat Oct 25 02:02:51 2025] [elconferencista.com] [error] [client 40.86.42.83:10883] [pid 1635031] mod_access_compat.c(350): AH01797: client denied by server configuration: /home/ednermusika/elconferencista.com/wp-content/ova.php
[Sat Oct 25 02:02:51 2025] [elconferencista.com] [error] [client 40.86.42.83:10883] [pid 1635031] mod_access_compat.c(350): AH01797: client denied by server configuration: /home/ednermusika/elconferencista.com/forbidden.html
[Sat Oct 25 02:02:51 2025] [elconferencista.com] [error] [client 40.86.42.83:10883] [pid 1635031] mod_access_compat.c(350): AH01797: client denied by server configuration: /home/ednermusika/elconferencista.com/wp-content/wsa.php
[Sat Oct 25 02:02:51 2025] [elconferencista.com] [error] [client 40.86.42.83:10883] [pid 1635031] mod_access_compat.c(350): AH01797: client denied by server configuration: /home/ednermusika/elconferencista.com/forbidden.html
[Sat Oct 25 02:02:51 2025] [elconferencista.com] [error] [client 40.86.42.83:10883] [pid 1635031] mod_access_compat.c(350): AH01797: client denied by server configuration: /home/ednermusika/elconferencista.com/wp-content/admin.php
[Sat Oct 25 02:02:51 2025] [elconferencista.com] [error] [client 40.86.42.83:10883] [pid 1635031] mod_access_compat.c(350): AH01797: client denied by server configuration: /home/ednermusika/elconferencista.com/forbidden.html
[Sat Oct 25 02:02:51 2025] [elconferencista.com] [error] [client 40.86.42.83:10883] [pid 1635031] mod_access_compat.c(350): AH01797: client denied by server configuration: /home/ednermusika/elconferencista.com/abcd.php
[Sat Oct 25 02:02:51 2025] [elconferencista.com] [error] [client 40.86.42.83:10883] [pid 1635031] mod_access_compat.c(350): AH01797: client denied by server configuration: /home/ednermusika/elconferencista.com/forbidden.html
[Sat Oct 25 02:02:51 2025] [elconferencista.com] [error] [client 40.86.42.83:10883] [pid 1635031] mod_access_compat.c(350): AH01797: client denied by server configuration: /home/ednermusika/elconferencista.com/aa.php
[Sat Oct 25 02:02:51 2025] [elconferencista.com] [error] [client 40.86.42.83:10883] [pid 1635031] mod_access_compat.c(350): AH01797: client denied by server configuration: /home/ednermusika/elconferencista.com/forbidden.html
[Sat Oct 25 02:02:51 2025] [elconferencista.com] [error] [client 40.86.42.83:10883] [pid 1635031] mod_access_compat.c(350): AH01797: client denied by server configuration: /home/ednermusika/elconferencista.com/about.php
[Sat Oct 25 02:02:51 2025] [elconferencista.com] [error] [client 40.86.42.83:10883] [pid 1635031] mod_access_compat.c(350): AH01797: client denied by server configuration: /home/ednermusika/elconferencista.com/forbidden.html
[Sat Oct 25 02:02:52 2025] [elconferencista.com] [error] [client 40.86.42.83:10883] [pid 1635031] mod_access_compat.c(350): AH01797: client denied by server configuration: /home/ednermusika/elconferencista.com/admin.php
[Sat Oct 25 02:02:52 2025] [elconferencista.com] [error] [client 40.86.42.83:10883] [pid 1635031] mod_access_compat.c(350): AH01797: client denied by server configuration: /home/ednermusika/elconferencista.com/forbidden.html
[Sat Oct 25 02:02:52 2025] [elconferencista.com] [error] [client 40.86.42.83:10883] [pid 1635031] mod_access_compat.c(350): AH01797: client denied by server configuration: /home/ednermusika/elconferencista.com/akc.php
[Sat Oct 25 02:02:52 2025] [elconferencista.com] [error] [client 40.86.42.83:10883] [pid 1635031] mod_access_compat.c(350): AH01797: client denied by server configuration: /home/ednermusika/elconferencista.com/forbidden.html
[Sat Oct 25 02:02:52 2025] [elconferencista.com] [error] [client 40.86.42.83:10883] [pid 1635031] mod_access_compat.c(350): AH01797: client denied by server configuration: /home/ednermusika/elconferencista.com/alfa.php
[Sat Oct 25 02:02:52 2025] [elconferencista.com] [error] [client 40.86.42.83:10883] [pid 1635031] mod_access_compat.c(350): AH01797: client denied by server configuration: /home/ednermusika/elconferencista.com/forbidden.html
[Sat Oct 25 02:02:52 2025] [elconferencista.com] [error] [client 40.86.42.83:10883] [pid 1635031] mod_access_compat.c(350): AH01797: client denied by server configuration: /home/ednermusika/elconferencista.com/asasx.php
[Sat Oct 25 02:02:52 2025] [elconferencista.com] [error] [client 40.86.42.83:10883] [pid 1635031] mod_access_compat.c(350): AH01797: client denied by server configuration: /home/ednermusika/elconferencista.com/forbidden.html
[Sat Oct 25 02:02:52 2025] [elconferencista.com] [error] [client 40.86.42.83:10883] [pid 1635031] mod_access_compat.c(350): AH01797: client denied by server configuration: /home/ednermusika/elconferencista.com/atomlib.php
[Sat Oct 25 02:02:52 2025] [elconferencista.com] [error] [client 40.86.42.83:10883] [pid 1635031] mod_access_compat.c(350): AH01797: client denied by server configuration: /home/ednermusika/elconferencista.com/forbidden.html
[Sat Oct 25 02:02:52 2025] [elconferencista.com] [error] [client 40.86.42.83:10883] [pid 1635031] mod_access_compat.c(350): AH01797: client denied by server configuration: /home/ednermusika/elconferencista.com/autoload_classmap.php
[Sat Oct 25 02:02:52 2025] [elconferencista.com] [error] [client 40.86.42.83:10883] [pid 1635031] mod_access_compat.c(350): AH01797: client denied by server configuration: /home/ednermusika/elconferencista.com/forbidden.html
[Sat Oct 25 02:02:52 2025] [elconferencista.com] [error] [client 40.86.42.83:10883] [pid 1635031] mod_access_compat.c(350): AH01797: client denied by server configuration: /home/ednermusika/elconferencista.com/autoload_classmap
[Sat Oct 25 02:02:52 2025] [elconferencista.com] [error] [client 40.86.42.83:10883] [pid 1635031] mod_access_compat.c(350): AH01797: client denied by server configuration: /home/ednermusika/elconferencista.com/forbidden.html
[Sat Oct 25 02:02:52 2025] [elconferencista.com] [error] [client 40.86.42.83:10883] [pid 1635031] mod_access_compat.c(350): AH01797: client denied by server configuration: /home/ednermusika/elconferencista.com/buy.php
[Sat Oct 25 02:02:52 2025] [elconferencista.com] [error] [client 40.86.42.83:10883] [pid 1635031] mod_access_compat.c(350): AH01797: client denied by server configuration: /home/ednermusika/elconferencista.com/forbidden.html
[Sat Oct 25 02:02:52 2025] [elconferencista.com] [error] [client 40.86.42.83:10883] [pid 1635031] mod_access_compat.c(350): AH01797: client denied by server configuration: /home/ednermusika/elconferencista.com/chosen.php
[Sat Oct 25 02:02:52 2025] [elconferencista.com] [error] [client 40.86.42.83:10883] [pid 1635031] mod_access_compat.c(350): AH01797: client denied by server configuration: /home/ednermusika/elconferencista.com/forbidden.html
[Sat Oct 25 02:02:52 2025] [elconferencista.com] [error] [client 40.86.42.83:10883] [pid 1635031] mod_access_compat.c(350): AH01797: client denied by server configuration: /home/ednermusika/elconferencista.com/classwithtostring.php
[Sat Oct 25 02:02:52 2025] [elconferencista.com] [error] [client 40.86.42.83:10883] [pid 1635031] mod_access_compat.c(350): AH01797: client denied by server configuration: /home/ednermusika/elconferencista.com/forbidden.html
[Sat Oct 25 02:02:52 2025] [elconferencista.com] [error] [client 40.86.42.83:10883] [pid 1635031] mod_access_compat.c(350): AH01797: client denied by server configuration: /home/ednermusika/elconferencista.com/cong.php
[Sat Oct 25 02:02:52 2025] [elconferencista.com] [error] [client 40.86.42.83:10883] [pid 1635031] mod_access_compat.c(350): AH01797: client denied by server configuration: /home/ednermusika/elconferencista.com/forbidden.html
[Sat Oct 25 02:02:53 2025] [elconferencista.com] [error] [client 40.86.42.83:10883] [pid 1635031] mod_access_compat.c(350): AH01797: client denied by server configuration: /home/ednermusika/elconferencista.com/edit.php
[Sat Oct 25 02:02:53 2025] [elconferencista.com] [error] [client 40.86.42.83:10883] [pid 1635031] mod_access_compat.c(350): AH01797: client denied by server configuration: /home/ednermusika/elconferencista.com/forbidden.html
[Sat Oct 25 02:02:53 2025] [elconferencista.com] [error] [client 40.86.42.83:10883] [pid 1635031] mod_access_compat.c(350): AH01797: client denied by server configuration: /home/ednermusika/elconferencista.com/file.php
[Sat Oct 25 02:02:53 2025] [elconferencista.com] [error] [client 40.86.42.83:10883] [pid 1635031] mod_access_compat.c(350): AH01797: client denied by server configuration: /home/ednermusika/elconferencista.com/forbidden.html
[Sat Oct 25 02:02:53 2025] [elconferencista.com] [error] [client 40.86.42.83:10883] [pid 1635031] mod_access_compat.c(350): AH01797: client denied by server configuration: /home/ednermusika/elconferencista.com/file2.php
[Sat Oct 25 02:02:53 2025] [elconferencista.com] [error] [client 40.86.42.83:10883] [pid 1635031] mod_access_compat.c(350): AH01797: client denied by server configuration: /home/ednermusika/elconferencista.com/forbidden.html
[Sat Oct 25 02:02:53 2025] [elconferencista.com] [error] [client 40.86.42.83:10883] [pid 1635031] mod_access_compat.c(350): AH01797: client denied by server configuration: /home/ednermusika/elconferencista.com/flower.php
[Sat Oct 25 02:02:53 2025] [elconferencista.com] [error] [client 40.86.42.83:10883] [pid 1635031] mod_access_compat.c(350): AH01797: client denied by server configuration: /home/ednermusika/elconferencista.com/forbidden.html
[Sat Oct 25 02:02:53 2025] [elconferencista.com] [error] [client 40.86.42.83:10883] [pid 1635031] mod_access_compat.c(350): AH01797: client denied by server configuration: /home/ednermusika/elconferencista.com/gecko.php
[Sat Oct 25 02:02:53 2025] [elconferencista.com] [error] [client 40.86.42.83:10883] [pid 1635031] mod_access_compat.c(350): AH01797: client denied by server configuration: /home/ednermusika/elconferencista.com/forbidden.html
[Sat Oct 25 02:02:53 2025] [elconferencista.com] [error] [client 40.86.42.83:10883] [pid 1635031] mod_access_compat.c(350): AH01797: client denied by server configuration: /home/ednermusika/elconferencista.com/goat.php
[Sat Oct 25 02:02:53 2025] [elconferencista.com] [error] [client 40.86.42.83:10883] [pid 1635031] mod_access_compat.c(350): AH01797: client denied by server configuration: /home/ednermusika/elconferencista.com/forbidden.html
[Sat Oct 25 02:02:53 2025] [elconferencista.com] [error] [client 40.86.42.83:10883] [pid 1635031] mod_access_compat.c(350): AH01797: client denied by server configuration: /home/ednermusika/elconferencista.com/goods.php
[Sat Oct 25 02:02:53 2025] [elconferencista.com] [error] [client 40.86.42.83:10883] [pid 1635031] mod_access_compat.c(350): AH01797: client denied by server configuration: /home/ednermusika/elconferencista.com/forbidden.html
[Sat Oct 25 02:02:53 2025] [elconferencista.com] [error] [client 40.86.42.83:10883] [pid 1635031] mod_access_compat.c(350): AH01797: client denied by server configuration: /home/ednermusika/elconferencista.com/ioxi-o.php
[Sat Oct 25 02:02:53 2025] [elconferencista.com] [error] [client 40.86.42.83:10883] [pid 1635031] mod_access_compat.c(350): AH01797: client denied by server configuration: /home/ednermusika/elconferencista.com/forbidden.html
[Sat Oct 25 02:02:53 2025] [elconferencista.com] [error] [client 40.86.42.83:10883] [pid 1635031] mod_access_compat.c(350): AH01797: client denied by server configuration: /home/ednermusika/elconferencista.com/lock360.php
[Sat Oct 25 02:02:53 2025] [elconferencista.com] [error] [client 40.86.42.83:10883] [pid 1635031] mod_access_compat.c(350): AH01797: client denied by server configuration: /home/ednermusika/elconferencista.com/forbidden.html
[Sat Oct 25 02:02:53 2025] [elconferencista.com] [error] [client 40.86.42.83:10883] [pid 1635031] mod_access_compat.c(350): AH01797: client denied by server configuration: /home/ednermusika/elconferencista.com/makeasmtp.php
[Sat Oct 25 02:02:53 2025] [elconferencista.com] [error] [client 40.86.42.83:10883] [pid 1635031] mod_access_compat.c(350): AH01797: client denied by server configuration: /home/ednermusika/elconferencista.com/forbidden.html
[Sat Oct 25 02:02:54 2025] [elconferencista.com] [error] [client 40.86.42.83:10883] [pid 1635031] mod_access_compat.c(350): AH01797: client denied by server configuration: /home/ednermusika/elconferencista.com/mm.php
[Sat Oct 25 02:02:54 2025] [elconferencista.com] [error] [client 40.86.42.83:10883] [pid 1635031] mod_access_compat.c(350): AH01797: client denied by server configuration: /home/ednermusika/elconferencista.com/forbidden.html
[Sat Oct 25 02:02:54 2025] [elconferencista.com] [error] [client 40.86.42.83:10883] [pid 1635031] mod_access_compat.c(350): AH01797: client denied by server configuration: /home/ednermusika/elconferencista.com/nc4.php
[Sat Oct 25 02:02:54 2025] [elconferencista.com] [error] [client 40.86.42.83:10883] [pid 1635031] mod_access_compat.c(350): AH01797: client denied by server configuration: /home/ednermusika/elconferencista.com/forbidden.html
[Sat Oct 25 02:02:54 2025] [elconferencista.com] [error] [client 40.86.42.83:10883] [pid 1635031] mod_access_compat.c(350): AH01797: client denied by server configuration: /home/ednermusika/elconferencista.com/tinyfilemanager.php
[Sat Oct 25 02:02:54 2025] [elconferencista.com] [error] [client 40.86.42.83:10883] [pid 1635031] mod_access_compat.c(350): AH01797: client denied by server configuration: /home/ednermusika/elconferencista.com/forbidden.html
[Sat Oct 25 02:02:54 2025] [elconferencista.com] [error] [client 40.86.42.83:10883] [pid 1635031] mod_access_compat.c(350): AH01797: client denied by server configuration: /home/ednermusika/elconferencista.com/users.php
[Sat Oct 25 02:02:54 2025] [elconferencista.com] [error] [client 40.86.42.83:10883] [pid 1635031] mod_access_compat.c(350): AH01797: client denied by server configuration: /home/ednermusika/elconferencista.com/forbidden.html
[Sat Oct 25 02:02:54 2025] [elconferencista.com] [error] [client 40.86.42.83:10883] [pid 1635031] mod_access_compat.c(350): AH01797: client denied by server configuration: /home/ednermusika/elconferencista.com/w.php
[Sat Oct 25 02:02:54 2025] [elconferencista.com] [error] [client 40.86.42.83:10883] [pid 1635031] mod_access_compat.c(350): AH01797: client denied by server configuration: /home/ednermusika/elconferencista.com/forbidden.html
[Sat Oct 25 02:02:54 2025] [elconferencista.com] [error] [client 40.86.42.83:10883] [pid 1635031] mod_access_compat.c(350): AH01797: client denied by server configuration: /home/ednermusika/elconferencista.com/wp-admin/
[Sat Oct 25 02:02:54 2025] [elconferencista.com] [error] [client 40.86.42.83:10883] [pid 1635031] mod_access_compat.c(350): AH01797: client denied by server configuration: /home/ednermusika/elconferencista.com/forbidden.html
[Sat Oct 25 02:02:54 2025] [elconferencista.com] [error] [client 40.86.42.83:10883] [pid 1635031] mod_access_compat.c(350): AH01797: client denied by server configuration: /home/ednermusika/elconferencista.com/wp-admin/css/colors/blue/index.php
[Sat Oct 25 02:02:54 2025] [elconferencista.com] [error] [client 40.86.42.83:10883] [pid 1635031] mod_access_compat.c(350): AH01797: client denied by server configuration: /home/ednermusika/elconferencista.com/forbidden.html
[Sat Oct 25 02:02:54 2025] [elconferencista.com] [error] [client 40.86.42.83:10883] [pid 1635031] mod_access_compat.c(350): AH01797: client denied by server configuration: /home/ednermusika/elconferencista.com/wp-admin/images/moon.php
[Sat Oct 25 02:02:54 2025] [elconferencista.com] [error] [client 40.86.42.83:10883] [pid 1635031] mod_access_compat.c(350): AH01797: client denied by server configuration: /home/ednermusika/elconferencista.com/forbidden.html
[Sat Oct 25 02:02:54 2025] [elconferencista.com] [error] [client 40.86.42.83:10883] [pid 1635031] mod_access_compat.c(350): AH01797: client denied by server configuration: /home/ednermusika/elconferencista.com/wp-admin/js/index.php
[Sat Oct 25 02:02:54 2025] [elconferencista.com] [error] [client 40.86.42.83:10883] [pid 1635031] mod_access_compat.c(350): AH01797: client denied by server configuration: /home/ednermusika/elconferencista.com/forbidden.html
[Sat Oct 25 02:02:54 2025] [elconferencista.com] [error] [client 40.86.42.83:10883] [pid 1635031] mod_access_compat.c(350): AH01797: client denied by server configuration: /home/ednermusika/elconferencista.com/wp-admin/setup-config.php
[Sat Oct 25 02:02:54 2025] [elconferencista.com] [error] [client 40.86.42.83:10883] [pid 1635031] mod_access_compat.c(350): AH01797: client denied by server configuration: /home/ednermusika/elconferencista.com/forbidden.html
[Sat Oct 25 02:02:54 2025] [elconferencista.com] [error] [client 40.86.42.83:10883] [pid 1635031] mod_access_compat.c(350): AH01797: client denied by server configuration: /home/ednermusika/elconferencista.com/wp-api.php
[Sat Oct 25 02:02:54 2025] [elconferencista.com] [error] [client 40.86.42.83:10883] [pid 1635031] mod_access_compat.c(350): AH01797: client denied by server configuration: /home/ednermusika/elconferencista.com/forbidden.html
[Sat Oct 25 02:02:55 2025] [elconferencista.com] [error] [client 40.86.42.83:10883] [pid 1635031] mod_access_compat.c(350): AH01797: client denied by server configuration: /home/ednermusika/elconferencista.com/wp-content/wp-conflg.php
[Sat Oct 25 02:02:55 2025] [elconferencista.com] [error] [client 40.86.42.83:10883] [pid 1635031] mod_access_compat.c(350): AH01797: client denied by server configuration: /home/ednermusika/elconferencista.com/forbidden.html
[Sat Oct 25 02:02:55 2025] [elconferencista.com] [error] [client 40.86.42.83:10883] [pid 1635031] mod_access_compat.c(350): AH01797: client denied by server configuration: /home/ednermusika/elconferencista.com/wp-includes/IXR/autoload_classmap.php
[Sat Oct 25 02:02:55 2025] [elconferencista.com] [error] [client 40.86.42.83:10883] [pid 1635031] mod_access_compat.c(350): AH01797: client denied by server configuration: /home/ednermusika/elconferencista.com/forbidden.html
[Sat Oct 25 02:02:55 2025] [elconferencista.com] [error] [client 40.86.42.83:10883] [pid 1635031] mod_access_compat.c(350): AH01797: client denied by server configuration: /home/ednermusika/elconferencista.com/wp-includes/fonts/admin.php
[Sat Oct 25 02:02:55 2025] [elconferencista.com] [error] [client 40.86.42.83:10883] [pid 1635031] mod_access_compat.c(350): AH01797: client denied by server configuration: /home/ednermusika/elconferencista.com/forbidden.html
[Sat Oct 25 02:02:55 2025] [elconferencista.com] [error] [client 40.86.42.83:10883] [pid 1635031] mod_access_compat.c(350): AH01797: client denied by server configuration: /home/ednermusika/elconferencista.com/wp-includes/fonts/index.php
[Sat Oct 25 02:02:55 2025] [elconferencista.com] [error] [client 40.86.42.83:10883] [pid 1635031] mod_access_compat.c(350): AH01797: client denied by server configuration: /home/ednermusika/elconferencista.com/forbidden.html
[Sat Oct 25 02:02:55 2025] [elconferencista.com] [error] [client 40.86.42.83:10883] [pid 1635031] mod_access_compat.c(350): AH01797: client denied by server configuration: /home/ednermusika/elconferencista.com/wp-setup.php
[Sat Oct 25 02:02:55 2025] [elconferencista.com] [error] [client 40.86.42.83:10883] [pid 1635031] mod_access_compat.c(350): AH01797: client denied by server configuration: /home/ednermusika/elconferencista.com/forbidden.html
[Sat Oct 25 02:02:55 2025] [elconferencista.com] [error] [client 40.86.42.83:10883] [pid 1635031] mod_access_compat.c(350): AH01797: client denied by server configuration: /home/ednermusika/elconferencista.com/wp.php
[Sat Oct 25 02:02:55 2025] [elconferencista.com] [error] [client 40.86.42.83:10883] [pid 1635031] mod_access_compat.c(350): AH01797: client denied by server configuration: /home/ednermusika/elconferencista.com/forbidden.html
[Sat Oct 25 02:02:55 2025] [elconferencista.com] [error] [client 40.86.42.83:10883] [pid 1635031] mod_access_compat.c(350): AH01797: client denied by server configuration: /home/ednermusika/elconferencista.com/wsa.php
[Sat Oct 25 02:02:55 2025] [elconferencista.com] [error] [client 40.86.42.83:10883] [pid 1635031] mod_access_compat.c(350): AH01797: client denied by server configuration: /home/ednermusika/elconferencista.com/forbidden.html
[Sat Oct 25 02:23:46 2025] [elconferencista.com] [error] [client 42.83.147.56:57770] [pid 1635031] apache2_util.c(271): [client 42.83.147.56] ModSecurity: Warning. Match of "within %{tx.allowed_request_content_type}" against "TX:content_type" required. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "1012"] [id "920420"] [msg "Request content type is not allowed by policy"] [data "|text/html|"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153"] [tag "PCI/12.1"] [hostname "www.elconferencista.com"] [uri "/"] [unique_id "aPyXImEMSSoxBuuBVhABzQABYCg"]
[Sat Oct 25 02:23:52 2025] [elconferencista.com] [error] [client 42.83.147.56:62405] [pid 1635031] apache2_util.c(271): [client 42.83.147.56] ModSecurity: Warning. Match of "within %{tx.allowed_request_content_type}" against "TX:content_type" required. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "1012"] [id "920420"] [msg "Request content type is not allowed by policy"] [data "|text/html|"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153"] [tag "PCI/12.1"] [hostname "elconferencista.com"] [uri "/"] [unique_id "aPyXKGEMSSoxBuuBVhAB2AABYBo"]
[Sat Oct 25 02:23:52 2025] [elconferencista.com] [error] [client 42.83.147.56:57770] [pid 1635031] apache2_util.c(271): [client 42.83.147.56] ModSecurity: Warning. Match of "within %{tx.allowed_request_content_type}" against "TX:content_type" required. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "1012"] [id "920420"] [msg "Request content type is not allowed by policy"] [data "|text/html|"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153"] [tag "PCI/12.1"] [hostname "www.elconferencista.com"] [uri "/"] [unique_id "aPyXKGEMSSoxBuuBVhAB2QABX-E"]
[Sat Oct 25 02:26:25 2025] [elconferencista.com] [error] [client 45.80.158.88:55753] [pid 1635031] apache2_util.c(271): [client 45.80.158.88] ModSecurity: Warning. Matched phrase "Mozlila" at REQUEST_HEADERS:User-Agent. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-913-SCANNER-DETECTION.conf"] [line "56"] [id "913100"] [msg "Found User-Agent associated with security scanner"] [data "Matched Data: Mozlila found within REQUEST_HEADERS:User-Agent: Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-reputation-scanner"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/118/224/541/310"] [tag "PCI/6.5.10"] [hostname "www.elconferencista.com"] [uri "/"] [unique_id "aPyXwWEMSSoxBuuBVhADJwABX6g"]
[Sat Oct 25 02:26:25 2025] [elconferencista.com] [error] [client 45.80.158.88:55748] [pid 1635031] apache2_util.c(271): [client 45.80.158.88] ModSecurity: Warning. Matched phrase "Mozlila" at REQUEST_HEADERS:User-Agent. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-913-SCANNER-DETECTION.conf"] [line "56"] [id "913100"] [msg "Found User-Agent associated with security scanner"] [data "Matched Data: Mozlila found within REQUEST_HEADERS:User-Agent: Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-reputation-scanner"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/118/224/541/310"] [tag "PCI/6.5.10"] [hostname "www.elconferencista.com"] [uri "/wp-content/themes/seotheme/db.php"] [unique_id "aPyXwWEMSSoxBuuBVhADKgABX8g"]
[Sat Oct 25 02:26:25 2025] [elconferencista.com] [error] [client 45.80.158.88:55741] [pid 1635031] apache2_util.c(271): [client 45.80.158.88] ModSecurity: Warning. Matched phrase "Mozlila" at REQUEST_HEADERS:User-Agent. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-913-SCANNER-DETECTION.conf"] [line "56"] [id "913100"] [msg "Found User-Agent associated with security scanner"] [data "Matched Data: Mozlila found within REQUEST_HEADERS:User-Agent: Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-reputation-scanner"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/118/224/541/310"] [tag "PCI/6.5.10"] [hostname "www.elconferencista.com"] [uri "/ALFA_DATA/alfacgiapi/perl.alfa"] [unique_id "aPyXwWEMSSoxBuuBVhADKQABX64"]
[Sat Oct 25 02:26:25 2025] [elconferencista.com] [error] [client 45.80.158.88:55757] [pid 1635031] mod_access_compat.c(350): AH01797: client denied by server configuration: /home/ednermusika/elconferencista.com/wp-plain.php
[Sat Oct 25 02:26:31 2025] [elconferencista.com] [error] [client 45.80.158.88:50657] [pid 1635031] apache2_util.c(271): [client 45.80.158.88] ModSecurity: Warning. Matched phrase "Mozlila" at REQUEST_HEADERS:User-Agent. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-913-SCANNER-DETECTION.conf"] [line "56"] [id "913100"] [msg "Found User-Agent associated with security scanner"] [data "Matched Data: Mozlila found within REQUEST_HEADERS:User-Agent: Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-reputation-scanner"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/118/224/541/310"] [tag "PCI/6.5.10"] [hostname "elconferencista.com"] [uri "/wp-content/themes/seotheme/db.php"] [unique_id "aPyXx2EMSSoxBuuBVhADPgABX7I"]
[Sat Oct 25 02:26:31 2025] [elconferencista.com] [error] [client 45.80.158.88:55748] [pid 1635031] apache2_util.c(271): [client 45.80.158.88] ModSecurity: Warning. Matched phrase "Mozlila" at REQUEST_HEADERS:User-Agent. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-913-SCANNER-DETECTION.conf"] [line "56"] [id "913100"] [msg "Found User-Agent associated with security scanner"] [data "Matched Data: Mozlila found within REQUEST_HEADERS:User-Agent: Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-reputation-scanner"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/118/224/541/310"] [tag "PCI/6.5.10"] [hostname "www.elconferencista.com"] [uri "/wp-content/themes/seotheme/db.php"] [unique_id "aPyXx2EMSSoxBuuBVhADQAABX68"]
[Sat Oct 25 02:26:31 2025] [elconferencista.com] [error] [client 45.80.158.88:55741] [pid 1635031] apache2_util.c(271): [client 45.80.158.88] ModSecurity: Warning. Matched phrase "Mozlila" at REQUEST_HEADERS:User-Agent. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-913-SCANNER-DETECTION.conf"] [line "56"] [id "913100"] [msg "Found User-Agent associated with security scanner"] [data "Matched Data: Mozlila found within REQUEST_HEADERS:User-Agent: Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-reputation-scanner"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/118/224/541/310"] [tag "PCI/6.5.10"] [hostname "www.elconferencista.com"] [uri "/alfacgiapi/perl.alfa"] [unique_id "aPyXx2EMSSoxBuuBVhADQQABX-c"]
[Sat Oct 25 02:26:33 2025] [elconferencista.com] [error] [client 45.80.158.88:55756] [pid 1635031] mod_access_compat.c(350): AH01797: client denied by server configuration: /home/ednermusika/elconferencista.com/kcpshyyl.php
[Sat Oct 25 02:26:33 2025] [elconferencista.com] [error] [client 45.80.158.88:55757] [pid 1635031] apache2_util.c(271): [client 45.80.158.88] ModSecurity: Warning. Matched phrase "Mozlila" at REQUEST_HEADERS:User-Agent. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-913-SCANNER-DETECTION.conf"] [line "56"] [id "913100"] [msg "Found User-Agent associated with security scanner"] [data "Matched Data: Mozlila found within REQUEST_HEADERS:User-Agent: Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-reputation-scanner"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/118/224/541/310"] [tag "PCI/6.5.10"] [hostname "www.elconferencista.com"] [uri "/"] [unique_id "aPyXyWEMSSoxBuuBVhADRgABYFA"]
[Sat Oct 25 02:26:37 2025] [elconferencista.com] [error] [client 45.80.158.88:55748] [pid 1635031] apache2_util.c(271): [client 45.80.158.88] ModSecurity: Warning. Matched phrase "Mozlila" at REQUEST_HEADERS:User-Agent. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-913-SCANNER-DETECTION.conf"] [line "56"] [id "913100"] [msg "Found User-Agent associated with security scanner"] [data "Matched Data: Mozlila found within REQUEST_HEADERS:User-Agent: Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-reputation-scanner"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/118/224/541/310"] [tag "PCI/6.5.10"] [hostname "www.elconferencista.com"] [uri "/wp-content/plugins/apikey/apikey.php"] [unique_id "aPyXzWEMSSoxBuuBVhADSQABX7Y"]
[Sat Oct 25 02:26:37 2025] [elconferencista.com] [error] [client 45.80.158.88:55748] [pid 1635031] apache2_util.c(271): [client 45.80.158.88] ModSecurity: Warning. Pattern match "\\\\b(?:keep-alive|close),\\\\s?(?:keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "352"] [id "920210"] [msg "Multiple/Conflicting Connection Header Data Found"] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [hostname "www.elconferencista.com"] [uri "/wp-content/plugins/apikey/apikey.php"] [unique_id "aPyXzWEMSSoxBuuBVhADSQABX7Y"]
[Sat Oct 25 02:26:38 2025] [elconferencista.com] [error] [client 45.80.158.88:55756] [pid 1635031] apache2_util.c(271): [client 45.80.158.88] ModSecurity: Warning. Matched phrase "Mozlila" at REQUEST_HEADERS:User-Agent. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-913-SCANNER-DETECTION.conf"] [line "56"] [id "913100"] [msg "Found User-Agent associated with security scanner"] [data "Matched Data: Mozlila found within REQUEST_HEADERS:User-Agent: Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-reputation-scanner"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/118/224/541/310"] [tag "PCI/6.5.10"] [hostname "www.elconferencista.com"] [uri "/plugins/content/apismtp/apismtp.php"] [unique_id "aPyXzmEMSSoxBuuBVhADSgABX9Y"]
[Sat Oct 25 02:26:38 2025] [elconferencista.com] [error] [client 45.80.158.88:55756] [pid 1635031] apache2_util.c(271): [client 45.80.158.88] ModSecurity: Warning. Pattern match "\\\\b(?:keep-alive|close),\\\\s?(?:keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "352"] [id "920210"] [msg "Multiple/Conflicting Connection Header Data Found"] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [hostname "www.elconferencista.com"] [uri "/plugins/content/apismtp/apismtp.php"] [unique_id "aPyXzmEMSSoxBuuBVhADSgABX9Y"]
[Sat Oct 25 02:26:39 2025] [elconferencista.com] [error] [client 45.80.158.88:55757] [pid 1635031] apache2_util.c(271): [client 45.80.158.88] ModSecurity: Warning. Matched phrase "Mozlila" at REQUEST_HEADERS:User-Agent. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-913-SCANNER-DETECTION.conf"] [line "56"] [id "913100"] [msg "Found User-Agent associated with security scanner"] [data "Matched Data: Mozlila found within REQUEST_HEADERS:User-Agent: Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-reputation-scanner"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/118/224/541/310"] [tag "PCI/6.5.10"] [hostname "www.elconferencista.com"] [uri "/wp-content/plugins/apikey/apikey.php.suspected"] [unique_id "aPyXz2EMSSoxBuuBVhADTAABX9o"]
[Sat Oct 25 02:26:39 2025] [elconferencista.com] [error] [client 45.80.158.88:55757] [pid 1635031] apache2_util.c(271): [client 45.80.158.88] ModSecurity: Warning. Pattern match "\\\\b(?:keep-alive|close),\\\\s?(?:keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "352"] [id "920210"] [msg "Multiple/Conflicting Connection Header Data Found"] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [hostname "www.elconferencista.com"] [uri "/wp-content/plugins/apikey/apikey.php.suspected"] [unique_id "aPyXz2EMSSoxBuuBVhADTAABX9o"]
[Sat Oct 25 02:26:45 2025] [elconferencista.com] [error] [client 45.80.158.88:58623] [pid 1635031] apache2_util.c(271): [client 45.80.158.88] ModSecurity: Warning. Matched phrase "Mozlila" at REQUEST_HEADERS:User-Agent. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-913-SCANNER-DETECTION.conf"] [line "56"] [id "913100"] [msg "Found User-Agent associated with security scanner"] [data "Matched Data: Mozlila found within REQUEST_HEADERS:User-Agent: Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-reputation-scanner"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/118/224/541/310"] [tag "PCI/6.5.10"] [hostname "www.elconferencista.com"] [uri "/plugins/content/apismtp/apismtp.php.suspected"] [unique_id "aPyX1WEMSSoxBuuBVhADUgABX9U"]
[Sat Oct 25 02:51:26 2025] [elconferencista.com] [error] [client 4.43.184.114:18970] [pid 1635031] ssl_engine_kernel.c(325): AH02032: Hostname missing.dreamhost.org (default host as no SNI was provided) and hostname www.elconferencista.com provided via HTTP have no compatible SSL setup
[Sat Oct 25 03:21:21 2025] [elconferencista.com] [error] [client 170.106.163.48:45962] [pid 3057095] apache2_util.c(271): [client 170.106.163.48] ModSecurity: Warning. Pattern match "\\\\b(?:keep-alive|close),\\\\s?(?:keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "352"] [id "920210"] [msg "Multiple/Conflicting Connection Header Data Found"] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [hostname "www.elconferencista.com"] [uri "/"] [unique_id "aPykoX5tHGPkYeJgiQ5dCwABOLE"]
[Sat Oct 25 03:47:28 2025] [elconferencista.com] [error] [client 196.251.114.44:49822] [pid 3057095] mod_access_compat.c(350): AH01797: client denied by server configuration: /home/ednermusika/elconferencista.com/wp-confiq.php
[Sat Oct 25 04:11:02 2025] [elconferencista.com] [error] [client 185.247.137.246:40745] [pid 3057095] ssl_engine_kernel.c(325): AH02032: Hostname www.ednergranados.com provided via SNI and hostname www.elconferencista.com provided via HTTP have no compatible SSL setup
[Sat Oct 25 04:34:27 2025] [elconferencista.com] [error] [client 4.43.184.114:20733] [pid 3057095] ssl_engine_kernel.c(325): AH02032: Hostname missing.dreamhost.org (default host as no SNI was provided) and hostname www.elconferencista.com provided via HTTP have no compatible SSL setup
[Sat Oct 25 05:06:07 2025] [elconferencista.com] [error] [client 45.131.195.62:48787] [pid 3057095] apache2_util.c(271): [client 45.131.195.62] ModSecurity: Warning. Matched phrase ".env" at REQUEST_FILENAME. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "143"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: .env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "www.elconferencista.com"] [uri "/.env"] [unique_id "aPy9L35tHGPkYeJgiQ6FVQABONQ"]
[Sat Oct 25 05:06:07 2025] [elconferencista.com] [error] [client 45.131.195.62:48787] [pid 3057095] mod_authz_core.c(879): AH01630: client denied by server configuration: /home/ednermusika/elconferencista.com/.env
[Sat Oct 25 05:15:39 2025] [elconferencista.com] [error] [client 15.207.106.132:58402] [pid 3057095] mod_access_compat.c(350): AH01797: client denied by server configuration: /home/ednermusika/elconferencista.com/wp-admin/css/index.php
[Sat Oct 25 05:16:02 2025] [elconferencista.com] [error] [client 15.207.106.132:64525] [pid 3057095] mod_access_compat.c(350): AH01797: client denied by server configuration: /home/ednermusika/elconferencista.com/.well-known/index.php
[Sat Oct 25 05:19:41 2025] [elconferencista.com] [error] [client 15.207.106.132:58805] [pid 3057095] mod_access_compat.c(350): AH01797: client denied by server configuration: /home/ednermusika/elconferencista.com/images/index.php
[Sat Oct 25 05:38:46 2025] [elconferencista.com] [error] [client 43.157.147.3:35954] [pid 1735158] apache2_util.c(271): [client 43.157.147.3] ModSecurity: Warning. Pattern match "\\\\b(?:keep-alive|close),\\\\s?(?:keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "352"] [id "920210"] [msg "Multiple/Conflicting Connection Header Data Found"] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [hostname "www.elconferencista.com"] [uri "/"] [unique_id "aPzE1pHo6iZEaSyRuqsZUwABYB8"]
[Sat Oct 25 05:55:37 2025] [elconferencista.com] [error] [client 209.87.169.30:25249] [pid 1735158] apache2_util.c(271): [client 209.87.169.30] ModSecurity: Warning. Matched phrase ".env" at REQUEST_FILENAME. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "143"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: .env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "www.elconferencista.com"] [uri "/.env"] [unique_id "aPzIyZHo6iZEaSyRuqsg4gABX_M"]
[Sat Oct 25 05:55:37 2025] [elconferencista.com] [error] [client 209.87.169.30:25249] [pid 1735158] mod_authz_core.c(879): AH01630: client denied by server configuration: /home/ednermusika/elconferencista.com/.env
[Sat Oct 25 06:04:18 2025] [elconferencista.com] [warn] [client 46.235.71.59:54582] [pid 1735158] fcgid_bridge.c(409): (104)Connection reset by peer: mod_fcgid: ap_pass_brigade failed in handle_request_ipc function
[Sat Oct 25 06:04:23 2025] [elconferencista.com] [warn] [client 37.215.38.106:2270] [pid 1735158] fcgid_bridge.c(409): (32)Broken pipe: mod_fcgid: ap_pass_brigade failed in handle_request_ipc function
[Sat Oct 25 07:04:25 2025] [elconferencista.com] [error] [client 43.157.52.37:40244] [pid 2402830] apache2_util.c(271): [client 43.157.52.37] ModSecurity: Warning. Pattern match "\\\\b(?:keep-alive|close),\\\\s?(?:keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "352"] [id "920210"] [msg "Multiple/Conflicting Connection Header Data Found"] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [hostname "www.elconferencista.com"] [uri "/"] [unique_id "aPzY6dKyuTJ7xCGY7FiIdwABOJA"]
[Sat Oct 25 07:07:22 2025] [elconferencista.com] [error] [client 20.81.191.13:38840] [pid 2402830] apache2_util.c(271): [client 20.81.191.13] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "143"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "www.elconferencista.com"] [uri "/.git/config"] [unique_id "aPzZmtKyuTJ7xCGY7FiJfAABOUs"]
[Sat Oct 25 07:07:22 2025] [elconferencista.com] [error] [client 20.81.191.13:38816] [pid 2402830] apache2_util.c(271): [client 20.81.191.13] ModSecurity: Access denied with code 418 (phase 1). Pattern match "^/(?:wp-)?config(?:uration)?\\\\.(?:php|bac?k|off|ori?g)" at REQUEST_URI. [file "/etc/modsecurity/mod_sec3_CRS/99_dreamhost_rules.conf"] [line "105"] [id "1990079"] [msg "Bot searching for config file"] [hostname "www.elconferencista.com"] [uri "/config.php"] [unique_id "aPzZmtKyuTJ7xCGY7FiJgAABOUg"]
[Sat Oct 25 07:07:22 2025] [elconferencista.com] [error] [client 20.81.191.13:38828] [pid 2402830] apache2_util.c(271): [client 20.81.191.13] ModSecurity: Access denied with code 418 (phase 1). Pattern match "^/(?:wp-)?config(?:uration)?\\\\.(?:php|bac?k|off|ori?g)" at REQUEST_URI. [file "/etc/modsecurity/mod_sec3_CRS/99_dreamhost_rules.conf"] [line "105"] [id "1990079"] [msg "Bot searching for config file"] [hostname "www.elconferencista.com"] [uri "/wp-config.php"] [unique_id "aPzZmtKyuTJ7xCGY7FiJgwABOMQ"]
[Sat Oct 25 07:07:22 2025] [elconferencista.com] [error] [client 20.81.191.13:38784] [pid 2402830] apache2_util.c(271): [client 20.81.191.13] ModSecurity: Warning. Matched phrase ".env" at REQUEST_FILENAME. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "143"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: .env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "www.elconferencista.com"] [uri "/.env"] [unique_id "aPzZmtKyuTJ7xCGY7FiJgQABOIM"]
[Sat Oct 25 07:07:22 2025] [elconferencista.com] [error] [client 20.81.191.13:38802] [pid 2402830] mod_access_compat.c(350): AH01797: client denied by server configuration: /home/ednermusika/elconferencista.com/phpinfo.php
[Sat Oct 25 07:07:22 2025] [elconferencista.com] [error] [client 20.81.191.13:38784] [pid 2402830] mod_authz_core.c(879): AH01630: client denied by server configuration: /home/ednermusika/elconferencista.com/.env
[Sat Oct 25 07:07:22 2025] [elconferencista.com] [error] [client 20.81.191.13:38796] [pid 2402830] mod_access_compat.c(350): AH01797: client denied by server configuration: /home/ednermusika/elconferencista.com/info.php
[Sat Oct 25 07:07:22 2025] [elconferencista.com] [error] [client 20.81.191.13:38858] [pid 2402830] apache2_util.c(271): [client 20.81.191.13] ModSecurity: Access denied with code 418 (phase 1). Pattern match "^/(?:wp-)?config(?:uration)?\\\\.(?:php|bac?k|off|ori?g)" at REQUEST_URI. [file "/etc/modsecurity/mod_sec3_CRS/99_dreamhost_rules.conf"] [line "105"] [id "1990079"] [msg "Bot searching for config file"] [hostname "www.elconferencista.com"] [uri "/config.php"] [unique_id "aPzZmtKyuTJ7xCGY7FiJiAABOVs"]
[Sat Oct 25 07:07:22 2025] [elconferencista.com] [error] [client 20.81.191.13:38864] [pid 2402830] apache2_util.c(271): [client 20.81.191.13] ModSecurity: Access denied with code 418 (phase 1). Pattern match "^/(?:wp-)?config(?:uration)?\\\\.(?:php|bac?k|off|ori?g)" at REQUEST_URI. [file "/etc/modsecurity/mod_sec3_CRS/99_dreamhost_rules.conf"] [line "105"] [id "1990079"] [msg "Bot searching for config file"] [hostname "www.elconferencista.com"] [uri "/wp-config.php"] [unique_id "aPzZmtKyuTJ7xCGY7FiJiQABOM0"]
[Sat Oct 25 07:27:40 2025] [elconferencista.com] [error] [client 77.79.144.175:63004] [pid 2402830] mod_access_compat.c(350): AH01797: client denied by server configuration: /home/ednermusika/elconferencista.com/wp-cli.php
[Sat Oct 25 07:27:44 2025] [elconferencista.com] [warn] [client 77.79.144.175:15041] [pid 2402830] fcgid_bridge.c(409): (32)Broken pipe: mod_fcgid: ap_pass_brigade failed in handle_request_ipc function
[Sat Oct 25 07:27:44 2025] [elconferencista.com] [warn] [client 77.79.144.175:63004] [pid 2402830] fcgid_bridge.c(409): (32)Broken pipe: mod_fcgid: ap_pass_brigade failed in handle_request_ipc function
[Sat Oct 25 07:53:10 2025] [elconferencista.com] [error] [client 206.189.88.0:61523] [pid 2402830] mod_access_compat.c(350): AH01797: client denied by server configuration: /home/ednermusika/elconferencista.com/|superadmin|wpadmin142314231423wp-login.php
[Sat Oct 25 07:56:01 2025] [elconferencista.com] [error] [client 206.189.88.0:64009] [pid 2402830] mod_access_compat.c(350): AH01797: client denied by server configuration: /home/ednermusika/elconferencista.com/|superadmin|wpadmin142314231423wp-login.php
[Sat Oct 25 08:52:52 2025] [elconferencista.com] [error] [client 209.145.53.199:55574] [pid 586479] apache2_util.c(271): [client 209.145.53.199] ModSecurity: Warning. Matched phrase ".env" at REQUEST_FILENAME. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "143"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: .env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "elconferencista.com"] [uri "/.env"] [unique_id "aPzyVCz1CzIXWn_3Cqp6YAABhr0"]
[Sat Oct 25 09:29:20 2025] [elconferencista.com] [error] [client 34.82.246.175:40262] [pid 586479] mod_access_compat.c(350): AH01797: client denied by server configuration: /home/ednermusika/elconferencista.com/
[Sat Oct 25 09:29:20 2025] [elconferencista.com] [error] [client 34.82.246.175:40262] [pid 586479] mod_access_compat.c(350): AH01797: client denied by server configuration: /home/ednermusika/elconferencista.com/forbidden.html
[Sat Oct 25 09:30:07 2025] [elconferencista.com] [error] [client 43.153.54.14:57018] [pid 586479] apache2_util.c(271): [client 43.153.54.14] ModSecurity: Warning. Pattern match "\\\\b(?:keep-alive|close),\\\\s?(?:keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "352"] [id "920210"] [msg "Multiple/Conflicting Connection Header Data Found"] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [hostname "www.elconferencista.com"] [uri "/"] [unique_id "aPz7Dyz1CzIXWn_3CqqQmQABhy8"]
[Sat Oct 25 09:36:06 2025] [elconferencista.com] [error] [client 34.169.74.140:60564] [pid 586479] mod_access_compat.c(350): AH01797: client denied by server configuration: /home/ednermusika/elconferencista.com/
[Sat Oct 25 09:36:06 2025] [elconferencista.com] [error] [client 34.169.74.140:60564] [pid 586479] mod_access_compat.c(350): AH01797: client denied by server configuration: /home/ednermusika/elconferencista.com/forbidden.html
[Sat Oct 25 10:37:11 2025] [elconferencista.com] [warn] [client 178.120.55.85:2034] [pid 1684680] fcgid_bridge.c(409): (32)Broken pipe: mod_fcgid: ap_pass_brigade failed in handle_request_ipc function
[Sat Oct 25 11:07:01 2025] [elconferencista.com] [error] [client 106.227.49.113:48367] [pid 1684680] apache2_util.c(271): [client 106.227.49.113] ModSecurity: Warning. Pattern match "\\\\b(?:keep-alive|close),\\\\s?(?:keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "352"] [id "920210"] [msg "Multiple/Conflicting Connection Header Data Found"] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [hostname "www.elconferencista.com"] [uri "/"] [unique_id "aP0RxQFhYqWXaIs_ETpwEgABOTQ"]
[Sat Oct 25 11:23:50 2025] [elconferencista.com] [error] [client 4.43.184.114:23483] [pid 1684680] ssl_engine_kernel.c(325): AH02032: Hostname missing.dreamhost.org (default host as no SNI was provided) and hostname www.elconferencista.com provided via HTTP have no compatible SSL setup
[Sat Oct 25 11:27:18 2025] [elconferencista.com] [error] [client 43.166.130.123:50450] [pid 1684680] apache2_util.c(271): [client 43.166.130.123] ModSecurity: Warning. Pattern match "\\\\b(?:keep-alive|close),\\\\s?(?:keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "352"] [id "920210"] [msg "Multiple/Conflicting Connection Header Data Found"] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [hostname "www.elconferencista.com"] [uri "/"] [unique_id "aP0WhgFhYqWXaIs_ETp6vwABOO4"]
[Sat Oct 25 12:16:45 2025] [elconferencista.com] [error] [client 18.216.26.252:57360] [pid 365261] apache2_util.c(271): [client 18.216.26.252] ModSecurity: Warning. Matched phrase ".env" at REQUEST_FILENAME. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "143"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: .env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "www.elconferencista.com"] [uri "/.env"] [unique_id "aP0iHcTwcQWml7-Cxwst8QABh14"]
[Sat Oct 25 12:16:45 2025] [elconferencista.com] [error] [client 18.216.26.252:57360] [pid 365261] mod_authz_core.c(879): AH01630: client denied by server configuration: /home/ednermusika/elconferencista.com/.env
[Sat Oct 25 12:16:47 2025] [elconferencista.com] [error] [client 18.216.26.252:57360] [pid 365261] apache2_util.c(271): [client 18.216.26.252] ModSecurity: Warning. Matched phrase ".env" at REQUEST_FILENAME. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "143"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: .env found within REQUEST_FILENAME: /.env.local"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "www.elconferencista.com"] [uri "/.env.local"] [unique_id "aP0iH8TwcQWml7-Cxwst8wABh1E"]
[Sat Oct 25 12:16:47 2025] [elconferencista.com] [error] [client 18.216.26.252:57360] [pid 365261] mod_authz_core.c(879): AH01630: client denied by server configuration: /home/ednermusika/elconferencista.com/.env.local
[Sat Oct 25 12:16:49 2025] [elconferencista.com] [error] [client 18.216.26.252:57360] [pid 365261] apache2_util.c(271): [client 18.216.26.252] ModSecurity: Warning. Matched phrase ".env" at REQUEST_FILENAME. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "143"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: .env found within REQUEST_FILENAME: /.env.dev"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "www.elconferencista.com"] [uri "/.env.dev"] [unique_id "aP0iIcTwcQWml7-Cxwst9wABhqM"]
[Sat Oct 25 12:16:49 2025] [elconferencista.com] [error] [client 18.216.26.252:57360] [pid 365261] mod_authz_core.c(879): AH01630: client denied by server configuration: /home/ednermusika/elconferencista.com/.env.dev
[Sat Oct 25 12:16:50 2025] [elconferencista.com] [error] [client 18.216.26.252:57360] [pid 365261] apache2_util.c(271): [client 18.216.26.252] ModSecurity: Warning. Matched phrase ".env" at REQUEST_FILENAME. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "143"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: .env found within REQUEST_FILENAME: /.env.prod"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "www.elconferencista.com"] [uri "/.env.prod"] [unique_id "aP0iIsTwcQWml7-Cxwst_QABhqo"]
[Sat Oct 25 12:16:50 2025] [elconferencista.com] [error] [client 18.216.26.252:57360] [pid 365261] mod_authz_core.c(879): AH01630: client denied by server configuration: /home/ednermusika/elconferencista.com/.env.prod
[Sat Oct 25 12:16:52 2025] [elconferencista.com] [error] [client 18.216.26.252:57360] [pid 365261] apache2_util.c(271): [client 18.216.26.252] ModSecurity: Warning. Matched phrase ".env" at REQUEST_FILENAME. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "143"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: .env found within REQUEST_FILENAME: /.env.staging"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "www.elconferencista.com"] [uri "/.env.staging"] [unique_id "aP0iJMTwcQWml7-CxwsuAgABh34"]
[Sat Oct 25 12:16:52 2025] [elconferencista.com] [error] [client 18.216.26.252:57360] [pid 365261] mod_authz_core.c(879): AH01630: client denied by server configuration: /home/ednermusika/elconferencista.com/.env.staging
[Sat Oct 25 12:16:55 2025] [elconferencista.com] [error] [client 18.216.26.252:57360] [pid 365261] apache2_util.c(271): [client 18.216.26.252] ModSecurity: Warning. Matched phrase ".env" at REQUEST_FILENAME. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "143"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: .env found within REQUEST_FILENAME: /.env.development"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "www.elconferencista.com"] [uri "/.env.development"] [unique_id "aP0iJ8TwcQWml7-CxwsuBgABhqg"]
[Sat Oct 25 12:16:55 2025] [elconferencista.com] [error] [client 18.216.26.252:57360] [pid 365261] mod_authz_core.c(879): AH01630: client denied by server configuration: /home/ednermusika/elconferencista.com/.env.development
[Sat Oct 25 12:16:57 2025] [elconferencista.com] [error] [client 18.216.26.252:57360] [pid 365261] apache2_util.c(271): [client 18.216.26.252] ModSecurity: Warning. Matched phrase ".env" at REQUEST_FILENAME. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "143"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: .env found within REQUEST_FILENAME: /.env.production"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "www.elconferencista.com"] [uri "/.env.production"] [unique_id "aP0iKcTwcQWml7-CxwsuCAABh3E"]
[Sat Oct 25 12:16:57 2025] [elconferencista.com] [error] [client 18.216.26.252:57360] [pid 365261] mod_authz_core.c(879): AH01630: client denied by server configuration: /home/ednermusika/elconferencista.com/.env.production
[Sat Oct 25 12:16:59 2025] [elconferencista.com] [error] [client 18.216.26.252:57360] [pid 365261] apache2_util.c(271): [client 18.216.26.252] ModSecurity: Warning. Matched phrase ".env" at REQUEST_FILENAME. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "143"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: .env found within REQUEST_FILENAME: /.env.test"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "www.elconferencista.com"] [uri "/.env.test"] [unique_id "aP0iK8TwcQWml7-CxwsuCgABhrc"]
[Sat Oct 25 12:16:59 2025] [elconferencista.com] [error] [client 18.216.26.252:57360] [pid 365261] mod_authz_core.c(879): AH01630: client denied by server configuration: /home/ednermusika/elconferencista.com/.env.test
[Sat Oct 25 12:17:01 2025] [elconferencista.com] [error] [client 18.216.26.252:57360] [pid 365261] apache2_util.c(271): [client 18.216.26.252] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pem/ .pol/ .printer/ .pwd/ .rdb/ .resources/ .resx/ .sql/ .swp/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "1112"] [id "920440"] [msg "URL file extension is restricted by policy"] [data ".backup"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [tag "PCI/6.5.10"] [hostname "www.elconferencista.com"] [uri "/.env.backup"] [unique_id "aP0iLcTwcQWml7-CxwsuDgABhrA"]
[Sat Oct 25 12:17:01 2025] [elconferencista.com] [error] [client 18.216.26.252:57360] [pid 365261] apache2_util.c(271): [client 18.216.26.252] ModSecurity: Warning. Matched phrase ".env" at REQUEST_FILENAME. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "143"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: .env found within REQUEST_FILENAME: /.env.backup"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "www.elconferencista.com"] [uri "/.env.backup"] [unique_id "aP0iLcTwcQWml7-CxwsuDgABhrA"]
[Sat Oct 25 12:17:01 2025] [elconferencista.com] [error] [client 18.216.26.252:57360] [pid 365261] mod_authz_core.c(879): AH01630: client denied by server configuration: /home/ednermusika/elconferencista.com/.env.backup
[Sat Oct 25 12:17:05 2025] [elconferencista.com] [error] [client 18.216.26.252:57360] [pid 365261] apache2_util.c(271): [client 18.216.26.252] ModSecurity: Warning. Matched phrase ".env" at REQUEST_FILENAME. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "143"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: .env found within REQUEST_FILENAME: /.env.example"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "www.elconferencista.com"] [uri "/.env.example"] [unique_id "aP0iMcTwcQWml7-CxwsuEwABhr8"]
[Sat Oct 25 12:17:05 2025] [elconferencista.com] [error] [client 18.216.26.252:57360] [pid 365261] mod_authz_core.c(879): AH01630: client denied by server configuration: /home/ednermusika/elconferencista.com/.env.example
[Sat Oct 25 12:17:08 2025] [elconferencista.com] [error] [client 18.216.26.252:57360] [pid 365261] apache2_util.c(271): [client 18.216.26.252] ModSecurity: Warning. Matched phrase ".env" at REQUEST_FILENAME. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "143"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: .env found within REQUEST_FILENAME: /.env.sample"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "www.elconferencista.com"] [uri "/.env.sample"] [unique_id "aP0iNMTwcQWml7-CxwsuFwABhsM"]
[Sat Oct 25 12:17:08 2025] [elconferencista.com] [error] [client 18.216.26.252:57360] [pid 365261] mod_authz_core.c(879): AH01630: client denied by server configuration: /home/ednermusika/elconferencista.com/.env.sample
[Sat Oct 25 12:17:10 2025] [elconferencista.com] [error] [client 18.216.26.252:57360] [pid 365261] apache2_util.c(271): [client 18.216.26.252] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pem/ .pol/ .printer/ .pwd/ .rdb/ .resources/ .resx/ .sql/ .swp/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "1112"] [id "920440"] [msg "URL file extension is restricted by policy"] [data ".old"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [tag "PCI/6.5.10"] [hostname "www.elconferencista.com"] [uri "/.env.old"] [unique_id "aP0iNsTwcQWml7-CxwsuGwABhtA"]
[Sat Oct 25 12:17:10 2025] [elconferencista.com] [error] [client 18.216.26.252:57360] [pid 365261] apache2_util.c(271): [client 18.216.26.252] ModSecurity: Warning. Matched phrase ".env" at REQUEST_FILENAME. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "143"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: .env found within REQUEST_FILENAME: /.env.old"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "www.elconferencista.com"] [uri "/.env.old"] [unique_id "aP0iNsTwcQWml7-CxwsuGwABhtA"]
[Sat Oct 25 12:17:10 2025] [elconferencista.com] [error] [client 18.216.26.252:57360] [pid 365261] mod_authz_core.c(879): AH01630: client denied by server configuration: /home/ednermusika/elconferencista.com/.env.old
[Sat Oct 25 12:17:12 2025] [elconferencista.com] [error] [client 18.216.26.252:57360] [pid 365261] apache2_util.c(271): [client 18.216.26.252] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pem/ .pol/ .printer/ .pwd/ .rdb/ .resources/ .resx/ .sql/ .swp/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "1112"] [id "920440"] [msg "URL file extension is restricted by policy"] [data ".bak"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [tag "PCI/6.5.10"] [hostname "www.elconferencista.com"] [uri "/.env.bak"] [unique_id "aP0iOMTwcQWml7-CxwsuIAABhuA"]
[Sat Oct 25 12:17:12 2025] [elconferencista.com] [error] [client 18.216.26.252:57360] [pid 365261] apache2_util.c(271): [client 18.216.26.252] ModSecurity: Warning. Matched phrase ".env" at REQUEST_FILENAME. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "143"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: .env found within REQUEST_FILENAME: /.env.bak"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "www.elconferencista.com"] [uri "/.env.bak"] [unique_id "aP0iOMTwcQWml7-CxwsuIAABhuA"]
[Sat Oct 25 12:17:12 2025] [elconferencista.com] [error] [client 18.216.26.252:57360] [pid 365261] mod_authz_core.c(879): AH01630: client denied by server configuration: /home/ednermusika/elconferencista.com/.env.bak
[Sat Oct 25 12:17:13 2025] [elconferencista.com] [error] [client 18.216.26.252:57360] [pid 365261] apache2_util.c(271): [client 18.216.26.252] ModSecurity: Warning. Matched phrase ".env" at REQUEST_FILENAME. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "143"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: .env found within REQUEST_FILENAME: /.env.save"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "www.elconferencista.com"] [uri "/.env.save"] [unique_id "aP0iOcTwcQWml7-CxwsuIgABhuM"]
[Sat Oct 25 12:17:13 2025] [elconferencista.com] [error] [client 18.216.26.252:57360] [pid 365261] mod_authz_core.c(879): AH01630: client denied by server configuration: /home/ednermusika/elconferencista.com/.env.save
[Sat Oct 25 12:17:15 2025] [elconferencista.com] [error] [client 18.216.26.252:57360] [pid 365261] apache2_util.c(271): [client 18.216.26.252] ModSecurity: Warning. Matched phrase ".env" at REQUEST_FILENAME. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "143"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: .env found within REQUEST_FILENAME: /.env.orig"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "www.elconferencista.com"] [uri "/.env.orig"] [unique_id "aP0iO8TwcQWml7-CxwsuJwABhtQ"]
[Sat Oct 25 12:17:15 2025] [elconferencista.com] [error] [client 18.216.26.252:57360] [pid 365261] mod_authz_core.c(879): AH01630: client denied by server configuration: /home/ednermusika/elconferencista.com/.env.orig
[Sat Oct 25 12:17:16 2025] [elconferencista.com] [error] [client 18.216.26.252:57360] [pid 365261] apache2_util.c(271): [client 18.216.26.252] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pem/ .pol/ .printer/ .pwd/ .rdb/ .resources/ .resx/ .sql/ .swp/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "1112"] [id "920440"] [msg "URL file extension is restricted by policy"] [data ".swp"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [tag "PCI/6.5.10"] [hostname "www.elconferencista.com"] [uri "/.env.swp"] [unique_id "aP0iPMTwcQWml7-CxwsuLQABhvU"]
[Sat Oct 25 12:17:16 2025] [elconferencista.com] [error] [client 18.216.26.252:57360] [pid 365261] apache2_util.c(271): [client 18.216.26.252] ModSecurity: Warning. Matched phrase ".env" at REQUEST_FILENAME. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "143"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: .env found within REQUEST_FILENAME: /.env.swp"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "www.elconferencista.com"] [uri "/.env.swp"] [unique_id "aP0iPMTwcQWml7-CxwsuLQABhvU"]
[Sat Oct 25 12:17:16 2025] [elconferencista.com] [error] [client 18.216.26.252:57360] [pid 365261] mod_authz_core.c(879): AH01630: client denied by server configuration: /home/ednermusika/elconferencista.com/.env.swp
[Sat Oct 25 12:17:18 2025] [elconferencista.com] [error] [client 18.216.26.252:57360] [pid 365261] apache2_util.c(271): [client 18.216.26.252] ModSecurity: Warning. Pattern match "\\\\.[^.~]+~(?:/.*|)$" at REQUEST_FILENAME. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "1138"] [id "920500"] [msg "Attempt to access a backup or working file"] [data ".env~"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [tag "PCI/6.5.10"] [hostname "www.elconferencista.com"] [uri "/.env~"] [unique_id "aP0iPsTwcQWml7-CxwsuMAABht4"]
[Sat Oct 25 12:17:18 2025] [elconferencista.com] [error] [client 18.216.26.252:57360] [pid 365261] apache2_util.c(271): [client 18.216.26.252] ModSecurity: Warning. Matched phrase ".env" at REQUEST_FILENAME. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "143"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: .env found within REQUEST_FILENAME: /.env~"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "www.elconferencista.com"] [uri "/.env~"] [unique_id "aP0iPsTwcQWml7-CxwsuMAABht4"]
[Sat Oct 25 12:17:18 2025] [elconferencista.com] [error] [client 18.216.26.252:57360] [pid 365261] mod_authz_core.c(879): AH01630: client denied by server configuration: /home/ednermusika/elconferencista.com/.env~
[Sat Oct 25 12:17:20 2025] [elconferencista.com] [error] [client 18.216.26.252:57360] [pid 365261] apache2_util.c(271): [client 18.216.26.252] ModSecurity: Warning. Matched phrase ".env" at REQUEST_FILENAME. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "143"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: .env found within REQUEST_FILENAME: /.env.tmp"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "www.elconferencista.com"] [uri "/.env.tmp"] [unique_id "aP0iQMTwcQWml7-CxwsuMgABhv0"]
[Sat Oct 25 12:17:20 2025] [elconferencista.com] [error] [client 18.216.26.252:57360] [pid 365261] mod_authz_core.c(879): AH01630: client denied by server configuration: /home/ednermusika/elconferencista.com/.env.tmp
[Sat Oct 25 12:17:21 2025] [elconferencista.com] [error] [client 18.216.26.252:57360] [pid 365261] apache2_util.c(271): [client 18.216.26.252] ModSecurity: Warning. Matched phrase ".env" at REQUEST_FILENAME. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "143"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: .env found within REQUEST_FILENAME: /.env.dist"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "www.elconferencista.com"] [uri "/.env.dist"] [unique_id "aP0iQcTwcQWml7-CxwsuNQABhvc"]
[Sat Oct 25 12:17:21 2025] [elconferencista.com] [error] [client 18.216.26.252:57360] [pid 365261] mod_authz_core.c(879): AH01630: client denied by server configuration: /home/ednermusika/elconferencista.com/.env.dist
[Sat Oct 25 12:17:23 2025] [elconferencista.com] [error] [client 18.216.26.252:57360] [pid 365261] apache2_util.c(271): [client 18.216.26.252] ModSecurity: Warning. Matched phrase ".env" at REQUEST_FILENAME. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "143"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: .env found within REQUEST_FILENAME: /admin/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "www.elconferencista.com"] [uri "/admin/.env"] [unique_id "aP0iQ8TwcQWml7-CxwsuOAABhuk"]
[Sat Oct 25 12:17:24 2025] [elconferencista.com] [error] [client 18.216.26.252:57360] [pid 365261] apache2_util.c(271): [client 18.216.26.252] ModSecurity: Warning. Matched phrase ".env" at REQUEST_FILENAME. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "143"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: .env found within REQUEST_FILENAME: /admin/.env.save"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "www.elconferencista.com"] [uri "/admin/.env.save"] [unique_id "aP0iRMTwcQWml7-CxwsuPAABhvA"]
[Sat Oct 25 12:17:26 2025] [elconferencista.com] [error] [client 18.216.26.252:57360] [pid 365261] apache2_util.c(271): [client 18.216.26.252] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pem/ .pol/ .printer/ .pwd/ .rdb/ .resources/ .resx/ .sql/ .swp/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "1112"] [id "920440"] [msg "URL file extension is restricted by policy"] [data ".bak"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [tag "PCI/6.5.10"] [hostname "www.elconferencista.com"] [uri "/admin/.env.bak"] [unique_id "aP0iRsTwcQWml7-CxwsuPgABhuQ"]
[Sat Oct 25 12:17:26 2025] [elconferencista.com] [error] [client 18.216.26.252:57360] [pid 365261] apache2_util.c(271): [client 18.216.26.252] ModSecurity: Warning. Matched phrase ".env" at REQUEST_FILENAME. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "143"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: .env found within REQUEST_FILENAME: /admin/.env.bak"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "www.elconferencista.com"] [uri "/admin/.env.bak"] [unique_id "aP0iRsTwcQWml7-CxwsuPgABhuQ"]
[Sat Oct 25 12:17:27 2025] [elconferencista.com] [error] [client 18.216.26.252:57360] [pid 365261] apache2_util.c(271): [client 18.216.26.252] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pem/ .pol/ .printer/ .pwd/ .rdb/ .resources/ .resx/ .sql/ .swp/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "1112"] [id "920440"] [msg "URL file extension is restricted by policy"] [data ".old"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [tag "PCI/6.5.10"] [hostname "www.elconferencista.com"] [uri "/admin/.env.old"] [unique_id "aP0iR8TwcQWml7-CxwsuQQABhwg"]
[Sat Oct 25 12:17:27 2025] [elconferencista.com] [error] [client 18.216.26.252:57360] [pid 365261] apache2_util.c(271): [client 18.216.26.252] ModSecurity: Warning. Matched phrase ".env" at REQUEST_FILENAME. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "143"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: .env found within REQUEST_FILENAME: /admin/.env.old"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "www.elconferencista.com"] [uri "/admin/.env.old"] [unique_id "aP0iR8TwcQWml7-CxwsuQQABhwg"]
[Sat Oct 25 12:17:29 2025] [elconferencista.com] [error] [client 18.216.26.252:57360] [pid 365261] apache2_util.c(271): [client 18.216.26.252] ModSecurity: Warning. Matched phrase ".env" at REQUEST_FILENAME. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "143"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: .env found within REQUEST_FILENAME: /api/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "www.elconferencista.com"] [uri "/api/.env"] [unique_id "aP0iScTwcQWml7-CxwsuRgABhus"]
[Sat Oct 25 12:17:30 2025] [elconferencista.com] [error] [client 18.216.26.252:57360] [pid 365261] apache2_util.c(271): [client 18.216.26.252] ModSecurity: Warning. Matched phrase ".env" at REQUEST_FILENAME. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "143"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: .env found within REQUEST_FILENAME: /api/.env.save"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "www.elconferencista.com"] [uri "/api/.env.save"] [unique_id "aP0iSsTwcQWml7-CxwsuSgABhxY"]
[Sat Oct 25 12:17:32 2025] [elconferencista.com] [error] [client 18.216.26.252:57360] [pid 365261] apache2_util.c(271): [client 18.216.26.252] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pem/ .pol/ .printer/ .pwd/ .rdb/ .resources/ .resx/ .sql/ .swp/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "1112"] [id "920440"] [msg "URL file extension is restricted by policy"] [data ".bak"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [tag "PCI/6.5.10"] [hostname "www.elconferencista.com"] [uri "/api/.env.bak"] [unique_id "aP0iTMTwcQWml7-CxwsuTAABhxU"]
[Sat Oct 25 12:17:32 2025] [elconferencista.com] [error] [client 18.216.26.252:57360] [pid 365261] apache2_util.c(271): [client 18.216.26.252] ModSecurity: Warning. Matched phrase ".env" at REQUEST_FILENAME. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "143"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: .env found within REQUEST_FILENAME: /api/.env.bak"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "www.elconferencista.com"] [uri "/api/.env.bak"] [unique_id "aP0iTMTwcQWml7-CxwsuTAABhxU"]
[Sat Oct 25 12:17:33 2025] [elconferencista.com] [error] [client 18.216.26.252:57360] [pid 365261] apache2_util.c(271): [client 18.216.26.252] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pem/ .pol/ .printer/ .pwd/ .rdb/ .resources/ .resx/ .sql/ .swp/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "1112"] [id "920440"] [msg "URL file extension is restricted by policy"] [data ".old"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [tag "PCI/6.5.10"] [hostname "www.elconferencista.com"] [uri "/api/.env.old"] [unique_id "aP0iTcTwcQWml7-CxwsuUAABhyA"]
[Sat Oct 25 12:17:33 2025] [elconferencista.com] [error] [client 18.216.26.252:57360] [pid 365261] apache2_util.c(271): [client 18.216.26.252] ModSecurity: Warning. Matched phrase ".env" at REQUEST_FILENAME. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "143"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: .env found within REQUEST_FILENAME: /api/.env.old"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "www.elconferencista.com"] [uri "/api/.env.old"] [unique_id "aP0iTcTwcQWml7-CxwsuUAABhyA"]
[Sat Oct 25 12:17:34 2025] [elconferencista.com] [error] [client 18.216.26.252:57360] [pid 365261] apache2_util.c(271): [client 18.216.26.252] ModSecurity: Warning. Matched phrase ".env" at REQUEST_FILENAME. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "143"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: .env found within REQUEST_FILENAME: /app/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "www.elconferencista.com"] [uri "/app/.env"] [unique_id "aP0iTsTwcQWml7-CxwsuUwABhys"]
[Sat Oct 25 12:17:36 2025] [elconferencista.com] [error] [client 18.216.26.252:57360] [pid 365261] apache2_util.c(271): [client 18.216.26.252] ModSecurity: Warning. Matched phrase ".env" at REQUEST_FILENAME. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "143"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: .env found within REQUEST_FILENAME: /app/.env.save"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "www.elconferencista.com"] [uri "/app/.env.save"] [unique_id "aP0iUMTwcQWml7-CxwsuVQABhw0"]
[Sat Oct 25 12:17:37 2025] [elconferencista.com] [error] [client 18.216.26.252:57360] [pid 365261] apache2_util.c(271): [client 18.216.26.252] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pem/ .pol/ .printer/ .pwd/ .rdb/ .resources/ .resx/ .sql/ .swp/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "1112"] [id "920440"] [msg "URL file extension is restricted by policy"] [data ".bak"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [tag "PCI/6.5.10"] [hostname "www.elconferencista.com"] [uri "/app/.env.bak"] [unique_id "aP0iUcTwcQWml7-CxwsuWgABhyE"]
[Sat Oct 25 12:17:37 2025] [elconferencista.com] [error] [client 18.216.26.252:57360] [pid 365261] apache2_util.c(271): [client 18.216.26.252] ModSecurity: Warning. Matched phrase ".env" at REQUEST_FILENAME. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "143"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: .env found within REQUEST_FILENAME: /app/.env.bak"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "www.elconferencista.com"] [uri "/app/.env.bak"] [unique_id "aP0iUcTwcQWml7-CxwsuWgABhyE"]
[Sat Oct 25 12:17:38 2025] [elconferencista.com] [error] [client 18.216.26.252:57360] [pid 365261] apache2_util.c(271): [client 18.216.26.252] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pem/ .pol/ .printer/ .pwd/ .rdb/ .resources/ .resx/ .sql/ .swp/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "1112"] [id "920440"] [msg "URL file extension is restricted by policy"] [data ".old"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [tag "PCI/6.5.10"] [hostname "www.elconferencista.com"] [uri "/app/.env.old"] [unique_id "aP0iUsTwcQWml7-CxwsuXwABh0g"]
[Sat Oct 25 12:17:38 2025] [elconferencista.com] [error] [client 18.216.26.252:57360] [pid 365261] apache2_util.c(271): [client 18.216.26.252] ModSecurity: Warning. Matched phrase ".env" at REQUEST_FILENAME. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "143"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: .env found within REQUEST_FILENAME: /app/.env.old"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "www.elconferencista.com"] [uri "/app/.env.old"] [unique_id "aP0iUsTwcQWml7-CxwsuXwABh0g"]
[Sat Oct 25 12:17:40 2025] [elconferencista.com] [error] [client 18.216.26.252:57360] [pid 365261] apache2_util.c(271): [client 18.216.26.252] ModSecurity: Warning. Matched phrase ".env" at REQUEST_FILENAME. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "143"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: .env found within REQUEST_FILENAME: /config/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "www.elconferencista.com"] [uri "/config/.env"] [unique_id "aP0iVMTwcQWml7-CxwsuZAABh0k"]
[Sat Oct 25 12:17:41 2025] [elconferencista.com] [error] [client 18.216.26.252:57360] [pid 365261] apache2_util.c(271): [client 18.216.26.252] ModSecurity: Warning. Matched phrase ".env" at REQUEST_FILENAME. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "143"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: .env found within REQUEST_FILENAME: /config/.env.save"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "www.elconferencista.com"] [uri "/config/.env.save"] [unique_id "aP0iVcTwcQWml7-CxwsubQABh2A"]
[Sat Oct 25 12:17:43 2025] [elconferencista.com] [error] [client 18.216.26.252:57360] [pid 365261] apache2_util.c(271): [client 18.216.26.252] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pem/ .pol/ .printer/ .pwd/ .rdb/ .resources/ .resx/ .sql/ .swp/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "1112"] [id "920440"] [msg "URL file extension is restricted by policy"] [data ".bak"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [tag "PCI/6.5.10"] [hostname "www.elconferencista.com"] [uri "/config/.env.bak"] [unique_id "aP0iV8TwcQWml7-CxwsudwABh2Q"]
[Sat Oct 25 12:17:43 2025] [elconferencista.com] [error] [client 18.216.26.252:57360] [pid 365261] apache2_util.c(271): [client 18.216.26.252] ModSecurity: Warning. Matched phrase ".env" at REQUEST_FILENAME. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "143"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: .env found within REQUEST_FILENAME: /config/.env.bak"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "www.elconferencista.com"] [uri "/config/.env.bak"] [unique_id "aP0iV8TwcQWml7-CxwsudwABh2Q"]
[Sat Oct 25 12:17:44 2025] [elconferencista.com] [error] [client 18.216.26.252:57360] [pid 365261] apache2_util.c(271): [client 18.216.26.252] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pem/ .pol/ .printer/ .pwd/ .rdb/ .resources/ .resx/ .sql/ .swp/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "1112"] [id "920440"] [msg "URL file extension is restricted by policy"] [data ".old"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [tag "PCI/6.5.10"] [hostname "www.elconferencista.com"] [uri "/config/.env.old"] [unique_id "aP0iWMTwcQWml7-CxwsueQABh1U"]
[Sat Oct 25 12:17:44 2025] [elconferencista.com] [error] [client 18.216.26.252:57360] [pid 365261] apache2_util.c(271): [client 18.216.26.252] ModSecurity: Warning. Matched phrase ".env" at REQUEST_FILENAME. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "143"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: .env found within REQUEST_FILENAME: /config/.env.old"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "www.elconferencista.com"] [uri "/config/.env.old"] [unique_id "aP0iWMTwcQWml7-CxwsueQABh1U"]
[Sat Oct 25 12:17:46 2025] [elconferencista.com] [error] [client 18.216.26.252:57360] [pid 365261] apache2_util.c(271): [client 18.216.26.252] ModSecurity: Warning. Matched phrase ".env" at REQUEST_FILENAME. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "143"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: .env found within REQUEST_FILENAME: /src/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "www.elconferencista.com"] [uri "/src/.env"] [unique_id "aP0iWsTwcQWml7-CxwsujQABh30"]
[Sat Oct 25 12:17:47 2025] [elconferencista.com] [error] [client 18.216.26.252:57360] [pid 365261] apache2_util.c(271): [client 18.216.26.252] ModSecurity: Warning. Matched phrase ".env" at REQUEST_FILENAME. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "143"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: .env found within REQUEST_FILENAME: /src/.env.save"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "www.elconferencista.com"] [uri "/src/.env.save"] [unique_id "aP0iW8TwcQWml7-CxwsulwABhqs"]
[Sat Oct 25 12:17:49 2025] [elconferencista.com] [error] [client 18.216.26.252:57360] [pid 365261] apache2_util.c(271): [client 18.216.26.252] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pem/ .pol/ .printer/ .pwd/ .rdb/ .resources/ .resx/ .sql/ .swp/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "1112"] [id "920440"] [msg "URL file extension is restricted by policy"] [data ".bak"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [tag "PCI/6.5.10"] [hostname "www.elconferencista.com"] [uri "/src/.env.bak"] [unique_id "aP0iXcTwcQWml7-CxwsumgABh34"]
[Sat Oct 25 12:17:49 2025] [elconferencista.com] [error] [client 18.216.26.252:57360] [pid 365261] apache2_util.c(271): [client 18.216.26.252] ModSecurity: Warning. Matched phrase ".env" at REQUEST_FILENAME. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "143"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: .env found within REQUEST_FILENAME: /src/.env.bak"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "www.elconferencista.com"] [uri "/src/.env.bak"] [unique_id "aP0iXcTwcQWml7-CxwsumgABh34"]
[Sat Oct 25 12:17:50 2025] [elconferencista.com] [error] [client 18.216.26.252:57360] [pid 365261] apache2_util.c(271): [client 18.216.26.252] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pem/ .pol/ .printer/ .pwd/ .rdb/ .resources/ .resx/ .sql/ .swp/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "1112"] [id "920440"] [msg "URL file extension is restricted by policy"] [data ".old"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [tag "PCI/6.5.10"] [hostname "www.elconferencista.com"] [uri "/src/.env.old"] [unique_id "aP0iXsTwcQWml7-CxwsunQABh3I"]
[Sat Oct 25 12:17:50 2025] [elconferencista.com] [error] [client 18.216.26.252:57360] [pid 365261] apache2_util.c(271): [client 18.216.26.252] ModSecurity: Warning. Matched phrase ".env" at REQUEST_FILENAME. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "143"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: .env found within REQUEST_FILENAME: /src/.env.old"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "www.elconferencista.com"] [uri "/src/.env.old"] [unique_id "aP0iXsTwcQWml7-CxwsunQABh3I"]
[Sat Oct 25 12:17:51 2025] [elconferencista.com] [error] [client 18.216.26.252:57360] [pid 365261] apache2_util.c(271): [client 18.216.26.252] ModSecurity: Warning. Matched phrase ".env" at REQUEST_FILENAME. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "143"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: .env found within REQUEST_FILENAME: /public/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "www.elconferencista.com"] [uri "/public/.env"] [unique_id "aP0iX8TwcQWml7-CxwsuoAABhq8"]
[Sat Oct 25 12:17:52 2025] [elconferencista.com] [error] [client 18.216.26.252:57360] [pid 365261] apache2_util.c(271): [client 18.216.26.252] ModSecurity: Warning. Matched phrase ".env" at REQUEST_FILENAME. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "143"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: .env found within REQUEST_FILENAME: /public/.env.save"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "www.elconferencista.com"] [uri "/public/.env.save"] [unique_id "aP0iYMTwcQWml7-CxwsupQABh2c"]
[Sat Oct 25 12:17:54 2025] [elconferencista.com] [error] [client 18.216.26.252:57360] [pid 365261] apache2_util.c(271): [client 18.216.26.252] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pem/ .pol/ .printer/ .pwd/ .rdb/ .resources/ .resx/ .sql/ .swp/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "1112"] [id "920440"] [msg "URL file extension is restricted by policy"] [data ".bak"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [tag "PCI/6.5.10"] [hostname "www.elconferencista.com"] [uri "/public/.env.bak"] [unique_id "aP0iYsTwcQWml7-CxwsuqgABhsU"]
[Sat Oct 25 12:17:54 2025] [elconferencista.com] [error] [client 18.216.26.252:57360] [pid 365261] apache2_util.c(271): [client 18.216.26.252] ModSecurity: Warning. Matched phrase ".env" at REQUEST_FILENAME. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "143"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: .env found within REQUEST_FILENAME: /public/.env.bak"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "www.elconferencista.com"] [uri "/public/.env.bak"] [unique_id "aP0iYsTwcQWml7-CxwsuqgABhsU"]
[Sat Oct 25 12:17:56 2025] [elconferencista.com] [error] [client 18.216.26.252:57360] [pid 365261] apache2_util.c(271): [client 18.216.26.252] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pem/ .pol/ .printer/ .pwd/ .rdb/ .resources/ .resx/ .sql/ .swp/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "1112"] [id "920440"] [msg "URL file extension is restricted by policy"] [data ".old"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [tag "PCI/6.5.10"] [hostname "www.elconferencista.com"] [uri "/public/.env.old"] [unique_id "aP0iZMTwcQWml7-CxwsurQABhso"]
[Sat Oct 25 12:17:56 2025] [elconferencista.com] [error] [client 18.216.26.252:57360] [pid 365261] apache2_util.c(271): [client 18.216.26.252] ModSecurity: Warning. Matched phrase ".env" at REQUEST_FILENAME. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "143"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: .env found within REQUEST_FILENAME: /public/.env.old"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "www.elconferencista.com"] [uri "/public/.env.old"] [unique_id "aP0iZMTwcQWml7-CxwsurQABhso"]
[Sat Oct 25 12:17:57 2025] [elconferencista.com] [error] [client 18.216.26.252:57360] [pid 365261] apache2_util.c(271): [client 18.216.26.252] ModSecurity: Warning. Matched phrase ".env" at REQUEST_FILENAME. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "143"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: .env found within REQUEST_FILENAME: /assets/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "www.elconferencista.com"] [uri "/assets/.env"] [unique_id "aP0iZcTwcQWml7-CxwsusQABhqA"]
[Sat Oct 25 12:17:58 2025] [elconferencista.com] [error] [client 18.216.26.252:57360] [pid 365261] apache2_util.c(271): [client 18.216.26.252] ModSecurity: Warning. Matched phrase ".env" at REQUEST_FILENAME. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "143"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: .env found within REQUEST_FILENAME: /assets/.env.save"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "www.elconferencista.com"] [uri "/assets/.env.save"] [unique_id "aP0iZsTwcQWml7-CxwsutAABhtY"]
[Sat Oct 25 12:18:00 2025] [elconferencista.com] [error] [client 18.216.26.252:57360] [pid 365261] apache2_util.c(271): [client 18.216.26.252] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pem/ .pol/ .printer/ .pwd/ .rdb/ .resources/ .resx/ .sql/ .swp/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "1112"] [id "920440"] [msg "URL file extension is restricted by policy"] [data ".bak"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [tag "PCI/6.5.10"] [hostname "www.elconferencista.com"] [uri "/assets/.env.bak"] [unique_id "aP0iaMTwcQWml7-CxwsutgABhro"]
[Sat Oct 25 12:18:00 2025] [elconferencista.com] [error] [client 18.216.26.252:57360] [pid 365261] apache2_util.c(271): [client 18.216.26.252] ModSecurity: Warning. Matched phrase ".env" at REQUEST_FILENAME. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "143"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: .env found within REQUEST_FILENAME: /assets/.env.bak"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "www.elconferencista.com"] [uri "/assets/.env.bak"] [unique_id "aP0iaMTwcQWml7-CxwsutgABhro"]
[Sat Oct 25 12:18:01 2025] [elconferencista.com] [error] [client 18.216.26.252:57360] [pid 365261] apache2_util.c(271): [client 18.216.26.252] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pem/ .pol/ .printer/ .pwd/ .rdb/ .resources/ .resx/ .sql/ .swp/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "1112"] [id "920440"] [msg "URL file extension is restricted by policy"] [data ".old"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [tag "PCI/6.5.10"] [hostname "www.elconferencista.com"] [uri "/assets/.env.old"] [unique_id "aP0iacTwcQWml7-CxwsuuQABht8"]
[Sat Oct 25 12:18:01 2025] [elconferencista.com] [error] [client 18.216.26.252:57360] [pid 365261] apache2_util.c(271): [client 18.216.26.252] ModSecurity: Warning. Matched phrase ".env" at REQUEST_FILENAME. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "143"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: .env found within REQUEST_FILENAME: /assets/.env.old"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "www.elconferencista.com"] [uri "/assets/.env.old"] [unique_id "aP0iacTwcQWml7-CxwsuuQABht8"]
[Sat Oct 25 12:18:02 2025] [elconferencista.com] [error] [client 18.216.26.252:57360] [pid 365261] apache2_util.c(271): [client 18.216.26.252] ModSecurity: Warning. Matched phrase ".env" at REQUEST_FILENAME. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "143"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: .env found within REQUEST_FILENAME: /includes/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "www.elconferencista.com"] [uri "/includes/.env"] [unique_id "aP0iasTwcQWml7-CxwsuuwABhts"]
[Sat Oct 25 12:18:04 2025] [elconferencista.com] [error] [client 18.216.26.252:57360] [pid 365261] apache2_util.c(271): [client 18.216.26.252] ModSecurity: Warning. Matched phrase ".env" at REQUEST_FILENAME. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "143"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: .env found within REQUEST_FILENAME: /includes/.env.save"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "www.elconferencista.com"] [uri "/includes/.env.save"] [unique_id "aP0ibMTwcQWml7-CxwsuwQABhvs"]
[Sat Oct 25 12:18:05 2025] [elconferencista.com] [error] [client 18.216.26.252:57360] [pid 365261] apache2_util.c(271): [client 18.216.26.252] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pem/ .pol/ .printer/ .pwd/ .rdb/ .resources/ .resx/ .sql/ .swp/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "1112"] [id "920440"] [msg "URL file extension is restricted by policy"] [data ".bak"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [tag "PCI/6.5.10"] [hostname "www.elconferencista.com"] [uri "/includes/.env.bak"] [unique_id "aP0ibcTwcQWml7-CxwsuxAABht4"]
[Sat Oct 25 12:18:05 2025] [elconferencista.com] [error] [client 18.216.26.252:57360] [pid 365261] apache2_util.c(271): [client 18.216.26.252] ModSecurity: Warning. Matched phrase ".env" at REQUEST_FILENAME. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "143"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: .env found within REQUEST_FILENAME: /includes/.env.bak"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "www.elconferencista.com"] [uri "/includes/.env.bak"] [unique_id "aP0ibcTwcQWml7-CxwsuxAABht4"]
[Sat Oct 25 12:18:07 2025] [elconferencista.com] [error] [client 18.216.26.252:57360] [pid 365261] apache2_util.c(271): [client 18.216.26.252] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pem/ .pol/ .printer/ .pwd/ .rdb/ .resources/ .resx/ .sql/ .swp/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "1112"] [id "920440"] [msg "URL file extension is restricted by policy"] [data ".old"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [tag "PCI/6.5.10"] [hostname "www.elconferencista.com"] [uri "/includes/.env.old"] [unique_id "aP0ib8TwcQWml7-CxwsuyAABhvc"]
[Sat Oct 25 12:18:07 2025] [elconferencista.com] [error] [client 18.216.26.252:57360] [pid 365261] apache2_util.c(271): [client 18.216.26.252] ModSecurity: Warning. Matched phrase ".env" at REQUEST_FILENAME. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "143"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: .env found within REQUEST_FILENAME: /includes/.env.old"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "www.elconferencista.com"] [uri "/includes/.env.old"] [unique_id "aP0ib8TwcQWml7-CxwsuyAABhvc"]
[Sat Oct 25 12:18:08 2025] [elconferencista.com] [error] [client 18.216.26.252:57360] [pid 365261] apache2_util.c(271): [client 18.216.26.252] ModSecurity: Warning. Matched phrase ".env" at REQUEST_FILENAME. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "143"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: .env found within REQUEST_FILENAME: /lib/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "www.elconferencista.com"] [uri "/lib/.env"] [unique_id "aP0icMTwcQWml7-CxwsuywABhvw"]
[Sat Oct 25 12:18:09 2025] [elconferencista.com] [error] [client 18.216.26.252:57360] [pid 365261] apache2_util.c(271): [client 18.216.26.252] ModSecurity: Warning. Matched phrase ".env" at REQUEST_FILENAME. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "143"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: .env found within REQUEST_FILENAME: /lib/.env.save"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "www.elconferencista.com"] [uri "/lib/.env.save"] [unique_id "aP0iccTwcQWml7-CxwsuzgABhv8"]
[Sat Oct 25 12:18:10 2025] [elconferencista.com] [error] [client 18.216.26.252:57360] [pid 365261] apache2_util.c(271): [client 18.216.26.252] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pem/ .pol/ .printer/ .pwd/ .rdb/ .resources/ .resx/ .sql/ .swp/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "1112"] [id "920440"] [msg "URL file extension is restricted by policy"] [data ".bak"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [tag "PCI/6.5.10"] [hostname "www.elconferencista.com"] [uri "/lib/.env.bak"] [unique_id "aP0icsTwcQWml7-Cxwsu0AABhuQ"]
[Sat Oct 25 12:18:10 2025] [elconferencista.com] [error] [client 18.216.26.252:57360] [pid 365261] apache2_util.c(271): [client 18.216.26.252] ModSecurity: Warning. Matched phrase ".env" at REQUEST_FILENAME. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "143"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: .env found within REQUEST_FILENAME: /lib/.env.bak"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "www.elconferencista.com"] [uri "/lib/.env.bak"] [unique_id "aP0icsTwcQWml7-Cxwsu0AABhuQ"]
[Sat Oct 25 12:18:12 2025] [elconferencista.com] [error] [client 18.216.26.252:57360] [pid 365261] apache2_util.c(271): [client 18.216.26.252] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pem/ .pol/ .printer/ .pwd/ .rdb/ .resources/ .resx/ .sql/ .swp/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "1112"] [id "920440"] [msg "URL file extension is restricted by policy"] [data ".old"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [tag "PCI/6.5.10"] [hostname "www.elconferencista.com"] [uri "/lib/.env.old"] [unique_id "aP0idMTwcQWml7-Cxwsu0gABhwo"]
[Sat Oct 25 12:18:12 2025] [elconferencista.com] [error] [client 18.216.26.252:57360] [pid 365261] apache2_util.c(271): [client 18.216.26.252] ModSecurity: Warning. Matched phrase ".env" at REQUEST_FILENAME. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "143"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: .env found within REQUEST_FILENAME: /lib/.env.old"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "www.elconferencista.com"] [uri "/lib/.env.old"] [unique_id "aP0idMTwcQWml7-Cxwsu0gABhwo"]
[Sat Oct 25 12:18:13 2025] [elconferencista.com] [error] [client 18.216.26.252:57360] [pid 365261] apache2_util.c(271): [client 18.216.26.252] ModSecurity: Warning. Matched phrase ".env" at REQUEST_FILENAME. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "143"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: .env found within REQUEST_FILENAME: /application/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "www.elconferencista.com"] [uri "/application/.env"] [unique_id "aP0idcTwcQWml7-Cxwsu1AABhwg"]
[Sat Oct 25 12:18:14 2025] [elconferencista.com] [error] [client 18.216.26.252:57360] [pid 365261] apache2_util.c(271): [client 18.216.26.252] ModSecurity: Warning. Matched phrase ".env" at REQUEST_FILENAME. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "143"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: .env found within REQUEST_FILENAME: /application/.env.save"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "www.elconferencista.com"] [uri "/application/.env.save"] [unique_id "aP0idsTwcQWml7-Cxwsu2QABhu0"]
[Sat Oct 25 12:18:16 2025] [elconferencista.com] [error] [client 18.216.26.252:57360] [pid 365261] apache2_util.c(271): [client 18.216.26.252] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pem/ .pol/ .printer/ .pwd/ .rdb/ .resources/ .resx/ .sql/ .swp/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "1112"] [id "920440"] [msg "URL file extension is restricted by policy"] [data ".bak"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [tag "PCI/6.5.10"] [hostname "www.elconferencista.com"] [uri "/application/.env.bak"] [unique_id "aP0ieMTwcQWml7-Cxwsu3QABhxM"]
[Sat Oct 25 12:18:16 2025] [elconferencista.com] [error] [client 18.216.26.252:57360] [pid 365261] apache2_util.c(271): [client 18.216.26.252] ModSecurity: Warning. Matched phrase ".env" at REQUEST_FILENAME. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "143"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: .env found within REQUEST_FILENAME: /application/.env.bak"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "www.elconferencista.com"] [uri "/application/.env.bak"] [unique_id "aP0ieMTwcQWml7-Cxwsu3QABhxM"]
[Sat Oct 25 12:18:17 2025] [elconferencista.com] [error] [client 18.216.26.252:57360] [pid 365261] apache2_util.c(271): [client 18.216.26.252] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pem/ .pol/ .printer/ .pwd/ .rdb/ .resources/ .resx/ .sql/ .swp/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "1112"] [id "920440"] [msg "URL file extension is restricted by policy"] [data ".old"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [tag "PCI/6.5.10"] [hostname "www.elconferencista.com"] [uri "/application/.env.old"] [unique_id "aP0iecTwcQWml7-Cxwsu4AABhxg"]
[Sat Oct 25 12:18:17 2025] [elconferencista.com] [error] [client 18.216.26.252:57360] [pid 365261] apache2_util.c(271): [client 18.216.26.252] ModSecurity: Warning. Matched phrase ".env" at REQUEST_FILENAME. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "143"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: .env found within REQUEST_FILENAME: /application/.env.old"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "www.elconferencista.com"] [uri "/application/.env.old"] [unique_id "aP0iecTwcQWml7-Cxwsu4AABhxg"]
[Sat Oct 25 12:18:19 2025] [elconferencista.com] [error] [client 18.216.26.252:57360] [pid 365261] apache2_util.c(271): [client 18.216.26.252] ModSecurity: Warning. Matched phrase ".env" at REQUEST_FILENAME. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "143"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: .env found within REQUEST_FILENAME: /system/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "www.elconferencista.com"] [uri "/system/.env"] [unique_id "aP0ie8TwcQWml7-Cxwsu4wABhxo"]
[Sat Oct 25 12:18:20 2025] [elconferencista.com] [error] [client 18.216.26.252:57360] [pid 365261] apache2_util.c(271): [client 18.216.26.252] ModSecurity: Warning. Matched phrase ".env" at REQUEST_FILENAME. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "143"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: .env found within REQUEST_FILENAME: /system/.env.save"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "www.elconferencista.com"] [uri "/system/.env.save"] [unique_id "aP0ifMTwcQWml7-Cxwsu5gABhyU"]
[Sat Oct 25 12:18:22 2025] [elconferencista.com] [error] [client 18.216.26.252:57360] [pid 365261] apache2_util.c(271): [client 18.216.26.252] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pem/ .pol/ .printer/ .pwd/ .rdb/ .resources/ .resx/ .sql/ .swp/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "1112"] [id "920440"] [msg "URL file extension is restricted by policy"] [data ".bak"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [tag "PCI/6.5.10"] [hostname "www.elconferencista.com"] [uri "/system/.env.bak"] [unique_id "aP0ifsTwcQWml7-Cxwsu6gABhzE"]
[Sat Oct 25 12:18:22 2025] [elconferencista.com] [error] [client 18.216.26.252:57360] [pid 365261] apache2_util.c(271): [client 18.216.26.252] ModSecurity: Warning. Matched phrase ".env" at REQUEST_FILENAME. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "143"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: .env found within REQUEST_FILENAME: /system/.env.bak"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "www.elconferencista.com"] [uri "/system/.env.bak"] [unique_id "aP0ifsTwcQWml7-Cxwsu6gABhzE"]
[Sat Oct 25 12:18:24 2025] [elconferencista.com] [error] [client 18.216.26.252:57360] [pid 365261] apache2_util.c(271): [client 18.216.26.252] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pem/ .pol/ .printer/ .pwd/ .rdb/ .resources/ .resx/ .sql/ .swp/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "1112"] [id "920440"] [msg "URL file extension is restricted by policy"] [data ".old"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [tag "PCI/6.5.10"] [hostname "www.elconferencista.com"] [uri "/system/.env.old"] [unique_id "aP0igMTwcQWml7-Cxwsu7QABhw0"]
[Sat Oct 25 12:18:24 2025] [elconferencista.com] [error] [client 18.216.26.252:57360] [pid 365261] apache2_util.c(271): [client 18.216.26.252] ModSecurity: Warning. Matched phrase ".env" at REQUEST_FILENAME. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "143"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: .env found within REQUEST_FILENAME: /system/.env.old"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "www.elconferencista.com"] [uri "/system/.env.old"] [unique_id "aP0igMTwcQWml7-Cxwsu7QABhw0"]
[Sat Oct 25 12:18:25 2025] [elconferencista.com] [error] [client 18.216.26.252:57360] [pid 365261] apache2_util.c(271): [client 18.216.26.252] ModSecurity: Warning. Matched phrase ".env" at REQUEST_FILENAME. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "143"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: .env found within REQUEST_FILENAME: /core/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "www.elconferencista.com"] [uri "/core/.env"] [unique_id "aP0igcTwcQWml7-Cxwsu7wABhx0"]
[Sat Oct 25 12:18:26 2025] [elconferencista.com] [error] [client 18.216.26.252:57360] [pid 365261] apache2_util.c(271): [client 18.216.26.252] ModSecurity: Warning. Matched phrase ".env" at REQUEST_FILENAME. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "143"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: .env found within REQUEST_FILENAME: /core/.env.save"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "www.elconferencista.com"] [uri "/core/.env.save"] [unique_id "aP0igsTwcQWml7-Cxwsu8QABhzw"]
[Sat Oct 25 12:18:28 2025] [elconferencista.com] [error] [client 18.216.26.252:57360] [pid 365261] apache2_util.c(271): [client 18.216.26.252] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pem/ .pol/ .printer/ .pwd/ .rdb/ .resources/ .resx/ .sql/ .swp/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "1112"] [id "920440"] [msg "URL file extension is restricted by policy"] [data ".bak"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [tag "PCI/6.5.10"] [hostname "www.elconferencista.com"] [uri "/core/.env.bak"] [unique_id "aP0ihMTwcQWml7-Cxwsu9QABhxE"]
[Sat Oct 25 12:18:28 2025] [elconferencista.com] [error] [client 18.216.26.252:57360] [pid 365261] apache2_util.c(271): [client 18.216.26.252] ModSecurity: Warning. Matched phrase ".env" at REQUEST_FILENAME. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "143"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: .env found within REQUEST_FILENAME: /core/.env.bak"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "www.elconferencista.com"] [uri "/core/.env.bak"] [unique_id "aP0ihMTwcQWml7-Cxwsu9QABhxE"]
[Sat Oct 25 12:18:29 2025] [elconferencista.com] [error] [client 18.216.26.252:57360] [pid 365261] apache2_util.c(271): [client 18.216.26.252] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pem/ .pol/ .printer/ .pwd/ .rdb/ .resources/ .resx/ .sql/ .swp/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "1112"] [id "920440"] [msg "URL file extension is restricted by policy"] [data ".old"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [tag "PCI/6.5.10"] [hostname "www.elconferencista.com"] [uri "/core/.env.old"] [unique_id "aP0ihcTwcQWml7-Cxwsu9wABh0g"]
[Sat Oct 25 12:18:29 2025] [elconferencista.com] [error] [client 18.216.26.252:57360] [pid 365261] apache2_util.c(271): [client 18.216.26.252] ModSecurity: Warning. Matched phrase ".env" at REQUEST_FILENAME. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "143"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: .env found within REQUEST_FILENAME: /core/.env.old"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "www.elconferencista.com"] [uri "/core/.env.old"] [unique_id "aP0ihcTwcQWml7-Cxwsu9wABh0g"]
[Sat Oct 25 12:18:30 2025] [elconferencista.com] [error] [client 18.216.26.252:57360] [pid 365261] apache2_util.c(271): [client 18.216.26.252] ModSecurity: Warning. Matched phrase ".env" at REQUEST_FILENAME. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "143"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: .env found within REQUEST_FILENAME: /modules/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "www.elconferencista.com"] [uri "/modules/.env"] [unique_id "aP0ihsTwcQWml7-Cxwsu_gABh0o"]
[Sat Oct 25 12:18:32 2025] [elconferencista.com] [error] [client 18.216.26.252:57360] [pid 365261] apache2_util.c(271): [client 18.216.26.252] ModSecurity: Warning. Matched phrase ".env" at REQUEST_FILENAME. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "143"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: .env found within REQUEST_FILENAME: /modules/.env.save"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "www.elconferencista.com"] [uri "/modules/.env.save"] [unique_id "aP0iiMTwcQWml7-CxwsvAwABh0M"]
[Sat Oct 25 12:18:33 2025] [elconferencista.com] [error] [client 18.216.26.252:57360] [pid 365261] apache2_util.c(271): [client 18.216.26.252] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pem/ .pol/ .printer/ .pwd/ .rdb/ .resources/ .resx/ .sql/ .swp/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "1112"] [id "920440"] [msg "URL file extension is restricted by policy"] [data ".bak"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [tag "PCI/6.5.10"] [hostname "www.elconferencista.com"] [uri "/modules/.env.bak"] [unique_id "aP0iicTwcQWml7-CxwsvCAABh1g"]
[Sat Oct 25 12:18:33 2025] [elconferencista.com] [error] [client 18.216.26.252:57360] [pid 365261] apache2_util.c(271): [client 18.216.26.252] ModSecurity: Warning. Matched phrase ".env" at REQUEST_FILENAME. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "143"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: .env found within REQUEST_FILENAME: /modules/.env.bak"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "www.elconferencista.com"] [uri "/modules/.env.bak"] [unique_id "aP0iicTwcQWml7-CxwsvCAABh1g"]
[Sat Oct 25 12:18:35 2025] [elconferencista.com] [error] [client 18.216.26.252:57360] [pid 365261] apache2_util.c(271): [client 18.216.26.252] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pem/ .pol/ .printer/ .pwd/ .rdb/ .resources/ .resx/ .sql/ .swp/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "1112"] [id "920440"] [msg "URL file extension is restricted by policy"] [data ".old"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [tag "PCI/6.5.10"] [hostname "www.elconferencista.com"] [uri "/modules/.env.old"] [unique_id "aP0ii8TwcQWml7-CxwsvCwABhz0"]
[Sat Oct 25 12:18:35 2025] [elconferencista.com] [error] [client 18.216.26.252:57360] [pid 365261] apache2_util.c(271): [client 18.216.26.252] ModSecurity: Warning. Matched phrase ".env" at REQUEST_FILENAME. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "143"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: .env found within REQUEST_FILENAME: /modules/.env.old"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "www.elconferencista.com"] [uri "/modules/.env.old"] [unique_id "aP0ii8TwcQWml7-CxwsvCwABhz0"]
[Sat Oct 25 12:18:36 2025] [elconferencista.com] [error] [client 18.216.26.252:57360] [pid 365261] apache2_util.c(271): [client 18.216.26.252] ModSecurity: Warning. Matched phrase ".env" at REQUEST_FILENAME. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "143"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: .env found within REQUEST_FILENAME: /plugins/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "www.elconferencista.com"] [uri "/plugins/.env"] [unique_id "aP0ijMTwcQWml7-CxwsvDwABh2g"]
[Sat Oct 25 12:18:38 2025] [elconferencista.com] [error] [client 18.216.26.252:57360] [pid 365261] apache2_util.c(271): [client 18.216.26.252] ModSecurity: Warning. Matched phrase ".env" at REQUEST_FILENAME. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "143"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: .env found within REQUEST_FILENAME: /plugins/.env.save"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "www.elconferencista.com"] [uri "/plugins/.env.save"] [unique_id "aP0ijsTwcQWml7-CxwsvFwABh3A"]
[Sat Oct 25 12:18:39 2025] [elconferencista.com] [error] [client 18.216.26.252:57360] [pid 365261] apache2_util.c(271): [client 18.216.26.252] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pem/ .pol/ .printer/ .pwd/ .rdb/ .resources/ .resx/ .sql/ .swp/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "1112"] [id "920440"] [msg "URL file extension is restricted by policy"] [data ".bak"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [tag "PCI/6.5.10"] [hostname "www.elconferencista.com"] [uri "/plugins/.env.bak"] [unique_id "aP0ij8TwcQWml7-CxwsvGgABh3o"]
[Sat Oct 25 12:18:39 2025] [elconferencista.com] [error] [client 18.216.26.252:57360] [pid 365261] apache2_util.c(271): [client 18.216.26.252] ModSecurity: Warning. Matched phrase ".env" at REQUEST_FILENAME. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "143"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: .env found within REQUEST_FILENAME: /plugins/.env.bak"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "www.elconferencista.com"] [uri "/plugins/.env.bak"] [unique_id "aP0ij8TwcQWml7-CxwsvGgABh3o"]
[Sat Oct 25 12:18:40 2025] [elconferencista.com] [error] [client 18.216.26.252:57360] [pid 365261] apache2_util.c(271): [client 18.216.26.252] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pem/ .pol/ .printer/ .pwd/ .rdb/ .resources/ .resx/ .sql/ .swp/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "1112"] [id "920440"] [msg "URL file extension is restricted by policy"] [data ".old"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [tag "PCI/6.5.10"] [hostname "www.elconferencista.com"] [uri "/plugins/.env.old"] [unique_id "aP0ikMTwcQWml7-CxwsvHAABh3s"]
[Sat Oct 25 12:18:40 2025] [elconferencista.com] [error] [client 18.216.26.252:57360] [pid 365261] apache2_util.c(271): [client 18.216.26.252] ModSecurity: Warning. Matched phrase ".env" at REQUEST_FILENAME. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "143"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: .env found within REQUEST_FILENAME: /plugins/.env.old"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "www.elconferencista.com"] [uri "/plugins/.env.old"] [unique_id "aP0ikMTwcQWml7-CxwsvHAABh3s"]
[Sat Oct 25 12:18:42 2025] [elconferencista.com] [error] [client 18.216.26.252:57360] [pid 365261] apache2_util.c(271): [client 18.216.26.252] ModSecurity: Warning. Matched phrase ".env" at REQUEST_FILENAME. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "143"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: .env found within REQUEST_FILENAME: /themes/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "www.elconferencista.com"] [uri "/themes/.env"] [unique_id "aP0iksTwcQWml7-CxwsvIAABhqY"]
[Sat Oct 25 12:18:43 2025] [elconferencista.com] [error] [client 18.216.26.252:57360] [pid 365261] apache2_util.c(271): [client 18.216.26.252] ModSecurity: Warning. Matched phrase ".env" at REQUEST_FILENAME. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "143"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: .env found within REQUEST_FILENAME: /themes/.env.save"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "www.elconferencista.com"] [uri "/themes/.env.save"] [unique_id "aP0ik8TwcQWml7-CxwsvJgABhqg"]
[Sat Oct 25 12:18:45 2025] [elconferencista.com] [error] [client 18.216.26.252:57360] [pid 365261] apache2_util.c(271): [client 18.216.26.252] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pem/ .pol/ .printer/ .pwd/ .rdb/ .resources/ .resx/ .sql/ .swp/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "1112"] [id "920440"] [msg "URL file extension is restricted by policy"] [data ".bak"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [tag "PCI/6.5.10"] [hostname "www.elconferencista.com"] [uri "/themes/.env.bak"] [unique_id "aP0ilcTwcQWml7-CxwsvKwABhrU"]
[Sat Oct 25 12:18:45 2025] [elconferencista.com] [error] [client 18.216.26.252:57360] [pid 365261] apache2_util.c(271): [client 18.216.26.252] ModSecurity: Warning. Matched phrase ".env" at REQUEST_FILENAME. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "143"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: .env found within REQUEST_FILENAME: /themes/.env.bak"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "www.elconferencista.com"] [uri "/themes/.env.bak"] [unique_id "aP0ilcTwcQWml7-CxwsvKwABhrU"]
[Sat Oct 25 12:18:47 2025] [elconferencista.com] [error] [client 18.216.26.252:57360] [pid 365261] apache2_util.c(271): [client 18.216.26.252] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pem/ .pol/ .printer/ .pwd/ .rdb/ .resources/ .resx/ .sql/ .swp/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "1112"] [id "920440"] [msg "URL file extension is restricted by policy"] [data ".old"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [tag "PCI/6.5.10"] [hostname "www.elconferencista.com"] [uri "/themes/.env.old"] [unique_id "aP0il8TwcQWml7-CxwsvLgABh2c"]
[Sat Oct 25 12:18:47 2025] [elconferencista.com] [error] [client 18.216.26.252:57360] [pid 365261] apache2_util.c(271): [client 18.216.26.252] ModSecurity: Warning. Matched phrase ".env" at REQUEST_FILENAME. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "143"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: .env found within REQUEST_FILENAME: /themes/.env.old"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "www.elconferencista.com"] [uri "/themes/.env.old"] [unique_id "aP0il8TwcQWml7-CxwsvLgABh2c"]
[Sat Oct 25 12:18:48 2025] [elconferencista.com] [error] [client 18.216.26.252:57360] [pid 365261] apache2_util.c(271): [client 18.216.26.252] ModSecurity: Warning. Matched phrase ".env" at REQUEST_FILENAME. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "143"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: .env found within REQUEST_FILENAME: /vendor/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "www.elconferencista.com"] [uri "/vendor/.env"] [unique_id "aP0imMTwcQWml7-CxwsvMwABhrs"]
[Sat Oct 25 12:18:49 2025] [elconferencista.com] [error] [client 18.216.26.252:57360] [pid 365261] apache2_util.c(271): [client 18.216.26.252] ModSecurity: Warning. Matched phrase ".env" at REQUEST_FILENAME. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "143"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: .env found within REQUEST_FILENAME: /vendor/.env.save"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "www.elconferencista.com"] [uri "/vendor/.env.save"] [unique_id "aP0imcTwcQWml7-CxwsvOQABhsM"]
[Sat Oct 25 12:18:51 2025] [elconferencista.com] [error] [client 18.216.26.252:57360] [pid 365261] apache2_util.c(271): [client 18.216.26.252] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pem/ .pol/ .printer/ .pwd/ .rdb/ .resources/ .resx/ .sql/ .swp/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "1112"] [id "920440"] [msg "URL file extension is restricted by policy"] [data ".bak"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [tag "PCI/6.5.10"] [hostname "www.elconferencista.com"] [uri "/vendor/.env.bak"] [unique_id "aP0im8TwcQWml7-CxwsvPAABhtk"]
[Sat Oct 25 12:18:51 2025] [elconferencista.com] [error] [client 18.216.26.252:57360] [pid 365261] apache2_util.c(271): [client 18.216.26.252] ModSecurity: Warning. Matched phrase ".env" at REQUEST_FILENAME. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "143"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: .env found within REQUEST_FILENAME: /vendor/.env.bak"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "www.elconferencista.com"] [uri "/vendor/.env.bak"] [unique_id "aP0im8TwcQWml7-CxwsvPAABhtk"]
[Sat Oct 25 12:18:52 2025] [elconferencista.com] [error] [client 18.216.26.252:57360] [pid 365261] apache2_util.c(271): [client 18.216.26.252] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pem/ .pol/ .printer/ .pwd/ .rdb/ .resources/ .resx/ .sql/ .swp/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "1112"] [id "920440"] [msg "URL file extension is restricted by policy"] [data ".old"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [tag "PCI/6.5.10"] [hostname "www.elconferencista.com"] [uri "/vendor/.env.old"] [unique_id "aP0inMTwcQWml7-CxwsvQgABhro"]
[Sat Oct 25 12:18:52 2025] [elconferencista.com] [error] [client 18.216.26.252:57360] [pid 365261] apache2_util.c(271): [client 18.216.26.252] ModSecurity: Warning. Matched phrase ".env" at REQUEST_FILENAME. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "143"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: .env found within REQUEST_FILENAME: /vendor/.env.old"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "www.elconferencista.com"] [uri "/vendor/.env.old"] [unique_id "aP0inMTwcQWml7-CxwsvQgABhro"]
[Sat Oct 25 12:18:53 2025] [elconferencista.com] [error] [client 18.216.26.252:57360] [pid 365261] apache2_util.c(271): [client 18.216.26.252] ModSecurity: Warning. Matched phrase ".env" at REQUEST_FILENAME. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "143"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: .env found within REQUEST_FILENAME: /storage/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "www.elconferencista.com"] [uri "/storage/.env"] [unique_id "aP0incTwcQWml7-CxwsvSQABhu8"]
[Sat Oct 25 12:18:55 2025] [elconferencista.com] [error] [client 18.216.26.252:57360] [pid 365261] apache2_util.c(271): [client 18.216.26.252] ModSecurity: Warning. Matched phrase ".env" at REQUEST_FILENAME. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "143"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: .env found within REQUEST_FILENAME: /storage/.env.save"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "www.elconferencista.com"] [uri "/storage/.env.save"] [unique_id "aP0in8TwcQWml7-CxwsvTQABhug"]
[Sat Oct 25 12:18:56 2025] [elconferencista.com] [error] [client 18.216.26.252:57360] [pid 365261] apache2_util.c(271): [client 18.216.26.252] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pem/ .pol/ .printer/ .pwd/ .rdb/ .resources/ .resx/ .sql/ .swp/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "1112"] [id "920440"] [msg "URL file extension is restricted by policy"] [data ".bak"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [tag "PCI/6.5.10"] [hostname "www.elconferencista.com"] [uri "/storage/.env.bak"] [unique_id "aP0ioMTwcQWml7-CxwsvTwABhtU"]
[Sat Oct 25 12:18:56 2025] [elconferencista.com] [error] [client 18.216.26.252:57360] [pid 365261] apache2_util.c(271): [client 18.216.26.252] ModSecurity: Warning. Matched phrase ".env" at REQUEST_FILENAME. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "143"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: .env found within REQUEST_FILENAME: /storage/.env.bak"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "www.elconferencista.com"] [uri "/storage/.env.bak"] [unique_id "aP0ioMTwcQWml7-CxwsvTwABhtU"]
[Sat Oct 25 12:18:58 2025] [elconferencista.com] [error] [client 18.216.26.252:57360] [pid 365261] apache2_util.c(271): [client 18.216.26.252] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pem/ .pol/ .printer/ .pwd/ .rdb/ .resources/ .resx/ .sql/ .swp/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "1112"] [id "920440"] [msg "URL file extension is restricted by policy"] [data ".old"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [tag "PCI/6.5.10"] [hostname "www.elconferencista.com"] [uri "/storage/.env.old"] [unique_id "aP0iosTwcQWml7-CxwsvUwABhuk"]
[Sat Oct 25 12:18:58 2025] [elconferencista.com] [error] [client 18.216.26.252:57360] [pid 365261] apache2_util.c(271): [client 18.216.26.252] ModSecurity: Warning. Matched phrase ".env" at REQUEST_FILENAME. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "143"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: .env found within REQUEST_FILENAME: /storage/.env.old"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "www.elconferencista.com"] [uri "/storage/.env.old"] [unique_id "aP0iosTwcQWml7-CxwsvUwABhuk"]
[Sat Oct 25 12:19:00 2025] [elconferencista.com] [error] [client 18.216.26.252:50020] [pid 365261] apache2_util.c(271): [client 18.216.26.252] ModSecurity: Warning. Matched phrase ".env" at REQUEST_FILENAME. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "143"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: .env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "www.elconferencista.com"] [uri "/.env"] [unique_id "aP0ipMTwcQWml7-CxwsvWQABhwM"]
[Sat Oct 25 12:19:00 2025] [elconferencista.com] [error] [client 18.216.26.252:50020] [pid 365261] mod_authz_core.c(879): AH01630: client denied by server configuration: /home/ednermusika/elconferencista.com/.env
[Sat Oct 25 12:19:02 2025] [elconferencista.com] [error] [client 18.216.26.252:50020] [pid 365261] apache2_util.c(271): [client 18.216.26.252] ModSecurity: Warning. Matched phrase ".env" at REQUEST_FILENAME. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "143"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: .env found within REQUEST_FILENAME: /.env.local"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "www.elconferencista.com"] [uri "/.env.local"] [unique_id "aP0ipsTwcQWml7-CxwsvWwABhwg"]
[Sat Oct 25 12:19:02 2025] [elconferencista.com] [error] [client 18.216.26.252:50020] [pid 365261] mod_authz_core.c(879): AH01630: client denied by server configuration: /home/ednermusika/elconferencista.com/.env.local
[Sat Oct 25 12:19:04 2025] [elconferencista.com] [error] [client 18.216.26.252:50020] [pid 365261] apache2_util.c(271): [client 18.216.26.252] ModSecurity: Warning. Matched phrase ".env" at REQUEST_FILENAME. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "143"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: .env found within REQUEST_FILENAME: /.env.dev"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "www.elconferencista.com"] [uri "/.env.dev"] [unique_id "aP0iqMTwcQWml7-CxwsvXwABhw8"]
[Sat Oct 25 12:19:04 2025] [elconferencista.com] [error] [client 18.216.26.252:50020] [pid 365261] mod_authz_core.c(879): AH01630: client denied by server configuration: /home/ednermusika/elconferencista.com/.env.dev
[Sat Oct 25 12:19:05 2025] [elconferencista.com] [error] [client 18.216.26.252:50020] [pid 365261] apache2_util.c(271): [client 18.216.26.252] ModSecurity: Warning. Matched phrase ".env" at REQUEST_FILENAME. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "143"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: .env found within REQUEST_FILENAME: /.env.prod"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "www.elconferencista.com"] [uri "/.env.prod"] [unique_id "aP0iqcTwcQWml7-CxwsvYQABhxQ"]
[Sat Oct 25 12:19:05 2025] [elconferencista.com] [error] [client 18.216.26.252:50020] [pid 365261] mod_authz_core.c(879): AH01630: client denied by server configuration: /home/ednermusika/elconferencista.com/.env.prod
[Sat Oct 25 12:19:07 2025] [elconferencista.com] [error] [client 18.216.26.252:50020] [pid 365261] apache2_util.c(271): [client 18.216.26.252] ModSecurity: Warning. Matched phrase ".env" at REQUEST_FILENAME. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "143"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: .env found within REQUEST_FILENAME: /.env.staging"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "www.elconferencista.com"] [uri "/.env.staging"] [unique_id "aP0iq8TwcQWml7-CxwsvZAABhxc"]
[Sat Oct 25 12:19:07 2025] [elconferencista.com] [error] [client 18.216.26.252:50020] [pid 365261] mod_authz_core.c(879): AH01630: client denied by server configuration: /home/ednermusika/elconferencista.com/.env.staging
[Sat Oct 25 12:19:08 2025] [elconferencista.com] [error] [client 18.216.26.252:50020] [pid 365261] apache2_util.c(271): [client 18.216.26.252] ModSecurity: Warning. Matched phrase ".env" at REQUEST_FILENAME. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "143"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: .env found within REQUEST_FILENAME: /.env.development"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "www.elconferencista.com"] [uri "/.env.development"] [unique_id "aP0irMTwcQWml7-CxwsvZgABhv4"]
[Sat Oct 25 12:19:08 2025] [elconferencista.com] [error] [client 18.216.26.252:50020] [pid 365261] mod_authz_core.c(879): AH01630: client denied by server configuration: /home/ednermusika/elconferencista.com/.env.development
[Sat Oct 25 12:19:10 2025] [elconferencista.com] [error] [client 18.216.26.252:50020] [pid 365261] apache2_util.c(271): [client 18.216.26.252] ModSecurity: Warning. Matched phrase ".env" at REQUEST_FILENAME. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "143"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: .env found within REQUEST_FILENAME: /.env.production"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "www.elconferencista.com"] [uri "/.env.production"] [unique_id "aP0irsTwcQWml7-CxwsvawABhwQ"]
[Sat Oct 25 12:19:10 2025] [elconferencista.com] [error] [client 18.216.26.252:50020] [pid 365261] mod_authz_core.c(879): AH01630: client denied by server configuration: /home/ednermusika/elconferencista.com/.env.production
[Sat Oct 25 12:19:12 2025] [elconferencista.com] [error] [client 18.216.26.252:50020] [pid 365261] apache2_util.c(271): [client 18.216.26.252] ModSecurity: Warning. Matched phrase ".env" at REQUEST_FILENAME. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "143"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: .env found within REQUEST_FILENAME: /.env.test"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "www.elconferencista.com"] [uri "/.env.test"] [unique_id "aP0isMTwcQWml7-CxwsvdAABhyE"]
[Sat Oct 25 12:19:12 2025] [elconferencista.com] [error] [client 18.216.26.252:50020] [pid 365261] mod_authz_core.c(879): AH01630: client denied by server configuration: /home/ednermusika/elconferencista.com/.env.test
[Sat Oct 25 12:19:14 2025] [elconferencista.com] [error] [client 18.216.26.252:50020] [pid 365261] apache2_util.c(271): [client 18.216.26.252] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pem/ .pol/ .printer/ .pwd/ .rdb/ .resources/ .resx/ .sql/ .swp/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "1112"] [id "920440"] [msg "URL file extension is restricted by policy"] [data ".backup"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [tag "PCI/6.5.10"] [hostname "www.elconferencista.com"] [uri "/.env.backup"] [unique_id "aP0issTwcQWml7-CxwsveQABh0w"]
[Sat Oct 25 12:19:14 2025] [elconferencista.com] [error] [client 18.216.26.252:50020] [pid 365261] apache2_util.c(271): [client 18.216.26.252] ModSecurity: Warning. Matched phrase ".env" at REQUEST_FILENAME. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "143"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: .env found within REQUEST_FILENAME: /.env.backup"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "www.elconferencista.com"] [uri "/.env.backup"] [unique_id "aP0issTwcQWml7-CxwsveQABh0w"]
[Sat Oct 25 12:19:14 2025] [elconferencista.com] [error] [client 18.216.26.252:50020] [pid 365261] mod_authz_core.c(879): AH01630: client denied by server configuration: /home/ednermusika/elconferencista.com/.env.backup
[Sat Oct 25 12:19:16 2025] [elconferencista.com] [error] [client 18.216.26.252:50020] [pid 365261] apache2_util.c(271): [client 18.216.26.252] ModSecurity: Warning. Matched phrase ".env" at REQUEST_FILENAME. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "143"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: .env found within REQUEST_FILENAME: /.env.example"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "www.elconferencista.com"] [uri "/.env.example"] [unique_id "aP0itMTwcQWml7-CxwsvfAABh1Q"]
[Sat Oct 25 12:19:16 2025] [elconferencista.com] [error] [client 18.216.26.252:50020] [pid 365261] mod_authz_core.c(879): AH01630: client denied by server configuration: /home/ednermusika/elconferencista.com/.env.example
[Sat Oct 25 12:19:18 2025] [elconferencista.com] [error] [client 18.216.26.252:50020] [pid 365261] apache2_util.c(271): [client 18.216.26.252] ModSecurity: Warning. Matched phrase ".env" at REQUEST_FILENAME. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "143"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: .env found within REQUEST_FILENAME: /.env.sample"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "www.elconferencista.com"] [uri "/.env.sample"] [unique_id "aP0itsTwcQWml7-CxwsvfwABhzs"]
[Sat Oct 25 12:19:18 2025] [elconferencista.com] [error] [client 18.216.26.252:50020] [pid 365261] mod_authz_core.c(879): AH01630: client denied by server configuration: /home/ednermusika/elconferencista.com/.env.sample
[Sat Oct 25 12:19:20 2025] [elconferencista.com] [error] [client 18.216.26.252:50020] [pid 365261] apache2_util.c(271): [client 18.216.26.252] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pem/ .pol/ .printer/ .pwd/ .rdb/ .resources/ .resx/ .sql/ .swp/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "1112"] [id "920440"] [msg "URL file extension is restricted by policy"] [data ".old"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [tag "PCI/6.5.10"] [hostname "www.elconferencista.com"] [uri "/.env.old"] [unique_id "aP0iuMTwcQWml7-CxwsvgwABh1c"]
[Sat Oct 25 12:19:20 2025] [elconferencista.com] [error] [client 18.216.26.252:50020] [pid 365261] apache2_util.c(271): [client 18.216.26.252] ModSecurity: Warning. Matched phrase ".env" at REQUEST_FILENAME. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "143"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: .env found within REQUEST_FILENAME: /.env.old"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "www.elconferencista.com"] [uri "/.env.old"] [unique_id "aP0iuMTwcQWml7-CxwsvgwABh1c"]
[Sat Oct 25 12:19:20 2025] [elconferencista.com] [error] [client 18.216.26.252:50020] [pid 365261] mod_authz_core.c(879): AH01630: client denied by server configuration: /home/ednermusika/elconferencista.com/.env.old
[Sat Oct 25 12:19:21 2025] [elconferencista.com] [error] [client 18.216.26.252:50020] [pid 365261] apache2_util.c(271): [client 18.216.26.252] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pem/ .pol/ .printer/ .pwd/ .rdb/ .resources/ .resx/ .sql/ .swp/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "1112"] [id "920440"] [msg "URL file extension is restricted by policy"] [data ".bak"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [tag "PCI/6.5.10"] [hostname "www.elconferencista.com"] [uri "/.env.bak"] [unique_id "aP0iucTwcQWml7-CxwsvhwABh08"]
[Sat Oct 25 12:19:21 2025] [elconferencista.com] [error] [client 18.216.26.252:50020] [pid 365261] apache2_util.c(271): [client 18.216.26.252] ModSecurity: Warning. Matched phrase ".env" at REQUEST_FILENAME. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "143"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: .env found within REQUEST_FILENAME: /.env.bak"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "www.elconferencista.com"] [uri "/.env.bak"] [unique_id "aP0iucTwcQWml7-CxwsvhwABh08"]
[Sat Oct 25 12:19:21 2025] [elconferencista.com] [error] [client 18.216.26.252:50020] [pid 365261] mod_authz_core.c(879): AH01630: client denied by server configuration: /home/ednermusika/elconferencista.com/.env.bak
[Sat Oct 25 12:19:23 2025] [elconferencista.com] [error] [client 18.216.26.252:50020] [pid 365261] apache2_util.c(271): [client 18.216.26.252] ModSecurity: Warning. Matched phrase ".env" at REQUEST_FILENAME. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "143"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: .env found within REQUEST_FILENAME: /.env.save"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "www.elconferencista.com"] [uri "/.env.save"] [unique_id "aP0iu8TwcQWml7-CxwsviwABh18"]
[Sat Oct 25 12:19:23 2025] [elconferencista.com] [error] [client 18.216.26.252:50020] [pid 365261] mod_authz_core.c(879): AH01630: client denied by server configuration: /home/ednermusika/elconferencista.com/.env.save
[Sat Oct 25 12:19:24 2025] [elconferencista.com] [error] [client 18.216.26.252:50020] [pid 365261] apache2_util.c(271): [client 18.216.26.252] ModSecurity: Warning. Matched phrase ".env" at REQUEST_FILENAME. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "143"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: .env found within REQUEST_FILENAME: /.env.orig"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "www.elconferencista.com"] [uri "/.env.orig"] [unique_id "aP0ivMTwcQWml7-CxwsvjQABh0A"]
[Sat Oct 25 12:19:24 2025] [elconferencista.com] [error] [client 18.216.26.252:50020] [pid 365261] mod_authz_core.c(879): AH01630: client denied by server configuration: /home/ednermusika/elconferencista.com/.env.orig
[Sat Oct 25 12:19:26 2025] [elconferencista.com] [error] [client 18.216.26.252:50020] [pid 365261] apache2_util.c(271): [client 18.216.26.252] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pem/ .pol/ .printer/ .pwd/ .rdb/ .resources/ .resx/ .sql/ .swp/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "1112"] [id "920440"] [msg "URL file extension is restricted by policy"] [data ".swp"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [tag "PCI/6.5.10"] [hostname "www.elconferencista.com"] [uri "/.env.swp"] [unique_id "aP0ivsTwcQWml7-CxwsvkAABh2w"]
[Sat Oct 25 12:19:26 2025] [elconferencista.com] [error] [client 18.216.26.252:50020] [pid 365261] apache2_util.c(271): [client 18.216.26.252] ModSecurity: Warning. Matched phrase ".env" at REQUEST_FILENAME. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "143"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: .env found within REQUEST_FILENAME: /.env.swp"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "www.elconferencista.com"] [uri "/.env.swp"] [unique_id "aP0ivsTwcQWml7-CxwsvkAABh2w"]
[Sat Oct 25 12:19:26 2025] [elconferencista.com] [error] [client 18.216.26.252:50020] [pid 365261] mod_authz_core.c(879): AH01630: client denied by server configuration: /home/ednermusika/elconferencista.com/.env.swp
[Sat Oct 25 12:19:27 2025] [elconferencista.com] [error] [client 18.216.26.252:50020] [pid 365261] apache2_util.c(271): [client 18.216.26.252] ModSecurity: Warning. Pattern match "\\\\.[^.~]+~(?:/.*|)$" at REQUEST_FILENAME. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "1138"] [id "920500"] [msg "Attempt to access a backup or working file"] [data ".env~"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [tag "PCI/6.5.10"] [hostname "www.elconferencista.com"] [uri "/.env~"] [unique_id "aP0iv8TwcQWml7-CxwsvkgABh28"]
[Sat Oct 25 12:19:27 2025] [elconferencista.com] [error] [client 18.216.26.252:50020] [pid 365261] apache2_util.c(271): [client 18.216.26.252] ModSecurity: Warning. Matched phrase ".env" at REQUEST_FILENAME. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "143"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: .env found within REQUEST_FILENAME: /.env~"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "www.elconferencista.com"] [uri "/.env~"] [unique_id "aP0iv8TwcQWml7-CxwsvkgABh28"]
[Sat Oct 25 12:19:27 2025] [elconferencista.com] [error] [client 18.216.26.252:50020] [pid 365261] mod_authz_core.c(879): AH01630: client denied by server configuration: /home/ednermusika/elconferencista.com/.env~
[Sat Oct 25 12:19:28 2025] [elconferencista.com] [error] [client 18.216.26.252:50020] [pid 365261] apache2_util.c(271): [client 18.216.26.252] ModSecurity: Warning. Matched phrase ".env" at REQUEST_FILENAME. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "143"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: .env found within REQUEST_FILENAME: /.env.tmp"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "www.elconferencista.com"] [uri "/.env.tmp"] [unique_id "aP0iwMTwcQWml7-CxwsvlAABh2s"]
[Sat Oct 25 12:19:28 2025] [elconferencista.com] [error] [client 18.216.26.252:50020] [pid 365261] mod_authz_core.c(879): AH01630: client denied by server configuration: /home/ednermusika/elconferencista.com/.env.tmp
[Sat Oct 25 12:19:30 2025] [elconferencista.com] [error] [client 18.216.26.252:50020] [pid 365261] apache2_util.c(271): [client 18.216.26.252] ModSecurity: Warning. Matched phrase ".env" at REQUEST_FILENAME. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "143"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: .env found within REQUEST_FILENAME: /.env.dist"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "www.elconferencista.com"] [uri "/.env.dist"] [unique_id "aP0iwsTwcQWml7-CxwsvmQABh1E"]
[Sat Oct 25 12:19:30 2025] [elconferencista.com] [error] [client 18.216.26.252:50020] [pid 365261] mod_authz_core.c(879): AH01630: client denied by server configuration: /home/ednermusika/elconferencista.com/.env.dist
[Sat Oct 25 12:19:31 2025] [elconferencista.com] [error] [client 18.216.26.252:50020] [pid 365261] apache2_util.c(271): [client 18.216.26.252] ModSecurity: Warning. Matched phrase ".env" at REQUEST_FILENAME. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "143"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: .env found within REQUEST_FILENAME: /admin/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "www.elconferencista.com"] [uri "/admin/.env"] [unique_id "aP0iw8TwcQWml7-CxwsvnAABhqM"]
[Sat Oct 25 12:19:32 2025] [elconferencista.com] [error] [client 18.216.26.252:50020] [pid 365261] apache2_util.c(271): [client 18.216.26.252] ModSecurity: Warning. Matched phrase ".env" at REQUEST_FILENAME. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "143"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: .env found within REQUEST_FILENAME: /admin/.env.save"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "www.elconferencista.com"] [uri "/admin/.env.save"] [unique_id "aP0ixMTwcQWml7-CxwsvnwABh3k"]
[Sat Oct 25 12:19:33 2025] [elconferencista.com] [error] [client 18.216.26.252:50020] [pid 365261] apache2_util.c(271): [client 18.216.26.252] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pem/ .pol/ .printer/ .pwd/ .rdb/ .resources/ .resx/ .sql/ .swp/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "1112"] [id "920440"] [msg "URL file extension is restricted by policy"] [data ".bak"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [tag "PCI/6.5.10"] [hostname "www.elconferencista.com"] [uri "/admin/.env.bak"] [unique_id "aP0ixcTwcQWml7-CxwsvoQABh30"]
[Sat Oct 25 12:19:33 2025] [elconferencista.com] [error] [client 18.216.26.252:50020] [pid 365261] apache2_util.c(271): [client 18.216.26.252] ModSecurity: Warning. Matched phrase ".env" at REQUEST_FILENAME. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "143"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: .env found within REQUEST_FILENAME: /admin/.env.bak"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "www.elconferencista.com"] [uri "/admin/.env.bak"] [unique_id "aP0ixcTwcQWml7-CxwsvoQABh30"]
[Sat Oct 25 12:19:35 2025] [elconferencista.com] [error] [client 18.216.26.252:50020] [pid 365261] apache2_util.c(271): [client 18.216.26.252] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pem/ .pol/ .printer/ .pwd/ .rdb/ .resources/ .resx/ .sql/ .swp/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "1112"] [id "920440"] [msg "URL file extension is restricted by policy"] [data ".old"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [tag "PCI/6.5.10"] [hostname "www.elconferencista.com"] [uri "/admin/.env.old"] [unique_id "aP0ix8TwcQWml7-CxwsvpQABh3Y"]
[Sat Oct 25 12:19:35 2025] [elconferencista.com] [error] [client 18.216.26.252:50020] [pid 365261] apache2_util.c(271): [client 18.216.26.252] ModSecurity: Warning. Matched phrase ".env" at REQUEST_FILENAME. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "143"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: .env found within REQUEST_FILENAME: /admin/.env.old"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "www.elconferencista.com"] [uri "/admin/.env.old"] [unique_id "aP0ix8TwcQWml7-CxwsvpQABh3Y"]
[Sat Oct 25 12:19:36 2025] [elconferencista.com] [error] [client 18.216.26.252:50020] [pid 365261] apache2_util.c(271): [client 18.216.26.252] ModSecurity: Warning. Matched phrase ".env" at REQUEST_FILENAME. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "143"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: .env found within REQUEST_FILENAME: /api/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "www.elconferencista.com"] [uri "/api/.env"] [unique_id "aP0iyMTwcQWml7-CxwsvpwABhqY"]
[Sat Oct 25 12:19:37 2025] [elconferencista.com] [error] [client 18.216.26.252:50020] [pid 365261] apache2_util.c(271): [client 18.216.26.252] ModSecurity: Warning. Matched phrase ".env" at REQUEST_FILENAME. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "143"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: .env found within REQUEST_FILENAME: /api/.env.save"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "www.elconferencista.com"] [uri "/api/.env.save"] [unique_id "aP0iycTwcQWml7-CxwsvqwABh3w"]
[Sat Oct 25 12:19:39 2025] [elconferencista.com] [error] [client 18.216.26.252:50020] [pid 365261] apache2_util.c(271): [client 18.216.26.252] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pem/ .pol/ .printer/ .pwd/ .rdb/ .resources/ .resx/ .sql/ .swp/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "1112"] [id "920440"] [msg "URL file extension is restricted by policy"] [data ".bak"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [tag "PCI/6.5.10"] [hostname "www.elconferencista.com"] [uri "/api/.env.bak"] [unique_id "aP0iy8TwcQWml7-CxwsvrwABh3E"]
[Sat Oct 25 12:19:39 2025] [elconferencista.com] [error] [client 18.216.26.252:50020] [pid 365261] apache2_util.c(271): [client 18.216.26.252] ModSecurity: Warning. Matched phrase ".env" at REQUEST_FILENAME. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "143"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: .env found within REQUEST_FILENAME: /api/.env.bak"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "www.elconferencista.com"] [uri "/api/.env.bak"] [unique_id "aP0iy8TwcQWml7-CxwsvrwABh3E"]
[Sat Oct 25 12:19:41 2025] [elconferencista.com] [error] [client 18.216.26.252:50020] [pid 365261] apache2_util.c(271): [client 18.216.26.252] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pem/ .pol/ .printer/ .pwd/ .rdb/ .resources/ .resx/ .sql/ .swp/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "1112"] [id "920440"] [msg "URL file extension is restricted by policy"] [data ".old"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [tag "PCI/6.5.10"] [hostname "www.elconferencista.com"] [uri "/api/.env.old"] [unique_id "aP0izcTwcQWml7-CxwsvtAABhrc"]
[Sat Oct 25 12:19:41 2025] [elconferencista.com] [error] [client 18.216.26.252:50020] [pid 365261] apache2_util.c(271): [client 18.216.26.252] ModSecurity: Warning. Matched phrase ".env" at REQUEST_FILENAME. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "143"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: .env found within REQUEST_FILENAME: /api/.env.old"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "www.elconferencista.com"] [uri "/api/.env.old"] [unique_id "aP0izcTwcQWml7-CxwsvtAABhrc"]
[Sat Oct 25 12:19:43 2025] [elconferencista.com] [error] [client 18.216.26.252:50020] [pid 365261] apache2_util.c(271): [client 18.216.26.252] ModSecurity: Warning. Matched phrase ".env" at REQUEST_FILENAME. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "143"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: .env found within REQUEST_FILENAME: /app/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "www.elconferencista.com"] [uri "/app/.env"] [unique_id "aP0iz8TwcQWml7-CxwsvuAABhr0"]
[Sat Oct 25 12:19:44 2025] [elconferencista.com] [error] [client 18.216.26.252:50020] [pid 365261] apache2_util.c(271): [client 18.216.26.252] ModSecurity: Warning. Matched phrase ".env" at REQUEST_FILENAME. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "143"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: .env found within REQUEST_FILENAME: /app/.env.save"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "www.elconferencista.com"] [uri "/app/.env.save"] [unique_id "aP0i0MTwcQWml7-CxwsvuwABhsE"]
[Sat Oct 25 12:19:45 2025] [elconferencista.com] [error] [client 18.216.26.252:50020] [pid 365261] apache2_util.c(271): [client 18.216.26.252] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pem/ .pol/ .printer/ .pwd/ .rdb/ .resources/ .resx/ .sql/ .swp/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "1112"] [id "920440"] [msg "URL file extension is restricted by policy"] [data ".bak"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [tag "PCI/6.5.10"] [hostname "www.elconferencista.com"] [uri "/app/.env.bak"] [unique_id "aP0i0cTwcQWml7-CxwsvwAABhrs"]
[Sat Oct 25 12:19:45 2025] [elconferencista.com] [error] [client 18.216.26.252:50020] [pid 365261] apache2_util.c(271): [client 18.216.26.252] ModSecurity: Warning. Matched phrase ".env" at REQUEST_FILENAME. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "143"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: .env found within REQUEST_FILENAME: /app/.env.bak"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "www.elconferencista.com"] [uri "/app/.env.bak"] [unique_id "aP0i0cTwcQWml7-CxwsvwAABhrs"]
[Sat Oct 25 12:19:47 2025] [elconferencista.com] [error] [client 18.216.26.252:50020] [pid 365261] apache2_util.c(271): [client 18.216.26.252] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pem/ .pol/ .printer/ .pwd/ .rdb/ .resources/ .resx/ .sql/ .swp/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "1112"] [id "920440"] [msg "URL file extension is restricted by policy"] [data ".old"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [tag "PCI/6.5.10"] [hostname "www.elconferencista.com"] [uri "/app/.env.old"] [unique_id "aP0i08TwcQWml7-CxwsvwwABhsk"]
[Sat Oct 25 12:19:47 2025] [elconferencista.com] [error] [client 18.216.26.252:50020] [pid 365261] apache2_util.c(271): [client 18.216.26.252] ModSecurity: Warning. Matched phrase ".env" at REQUEST_FILENAME. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "143"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: .env found within REQUEST_FILENAME: /app/.env.old"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "www.elconferencista.com"] [uri "/app/.env.old"] [unique_id "aP0i08TwcQWml7-CxwsvwwABhsk"]
[Sat Oct 25 12:19:48 2025] [elconferencista.com] [error] [client 18.216.26.252:50020] [pid 365261] apache2_util.c(271): [client 18.216.26.252] ModSecurity: Warning. Matched phrase ".env" at REQUEST_FILENAME. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "143"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: .env found within REQUEST_FILENAME: /config/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "www.elconferencista.com"] [uri "/config/.env"] [unique_id "aP0i1MTwcQWml7-CxwsvxgABhso"]
[Sat Oct 25 12:19:50 2025] [elconferencista.com] [error] [client 18.216.26.252:50020] [pid 365261] apache2_util.c(271): [client 18.216.26.252] ModSecurity: Warning. Matched phrase ".env" at REQUEST_FILENAME. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "143"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: .env found within REQUEST_FILENAME: /config/.env.save"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "www.elconferencista.com"] [uri "/config/.env.save"] [unique_id "aP0i1sTwcQWml7-CxwsvygABhqA"]
[Sat Oct 25 12:19:51 2025] [elconferencista.com] [error] [client 18.216.26.252:50020] [pid 365261] apache2_util.c(271): [client 18.216.26.252] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pem/ .pol/ .printer/ .pwd/ .rdb/ .resources/ .resx/ .sql/ .swp/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "1112"] [id "920440"] [msg "URL file extension is restricted by policy"] [data ".bak"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [tag "PCI/6.5.10"] [hostname "www.elconferencista.com"] [uri "/config/.env.bak"] [unique_id "aP0i18TwcQWml7-CxwsvzQABhtk"]
[Sat Oct 25 12:19:51 2025] [elconferencista.com] [error] [client 18.216.26.252:50020] [pid 365261] apache2_util.c(271): [client 18.216.26.252] ModSecurity: Warning. Matched phrase ".env" at REQUEST_FILENAME. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "143"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: .env found within REQUEST_FILENAME: /config/.env.bak"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "www.elconferencista.com"] [uri "/config/.env.bak"] [unique_id "aP0i18TwcQWml7-CxwsvzQABhtk"]
[Sat Oct 25 12:19:53 2025] [elconferencista.com] [error] [client 18.216.26.252:50020] [pid 365261] apache2_util.c(271): [client 18.216.26.252] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pem/ .pol/ .printer/ .pwd/ .rdb/ .resources/ .resx/ .sql/ .swp/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "1112"] [id "920440"] [msg "URL file extension is restricted by policy"] [data ".old"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [tag "PCI/6.5.10"] [hostname "www.elconferencista.com"] [uri "/config/.env.old"] [unique_id "aP0i2cTwcQWml7-Cxwsv0gABhro"]
[Sat Oct 25 12:19:53 2025] [elconferencista.com] [error] [client 18.216.26.252:50020] [pid 365261] apache2_util.c(271): [client 18.216.26.252] ModSecurity: Warning. Matched phrase ".env" at REQUEST_FILENAME. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "143"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: .env found within REQUEST_FILENAME: /config/.env.old"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "www.elconferencista.com"] [uri "/config/.env.old"] [unique_id "aP0i2cTwcQWml7-Cxwsv0gABhro"]
[Sat Oct 25 12:19:54 2025] [elconferencista.com] [error] [client 18.216.26.252:50020] [pid 365261] apache2_util.c(271): [client 18.216.26.252] ModSecurity: Warning. Matched phrase ".env" at REQUEST_FILENAME. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "143"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: .env found within REQUEST_FILENAME: /src/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "www.elconferencista.com"] [uri "/src/.env"] [unique_id "aP0i2sTwcQWml7-Cxwsv1AABhrw"]
[Sat Oct 25 12:19:55 2025] [elconferencista.com] [error] [client 18.216.26.252:50020] [pid 365261] apache2_util.c(271): [client 18.216.26.252] ModSecurity: Warning. Matched phrase ".env" at REQUEST_FILENAME. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "143"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: .env found within REQUEST_FILENAME: /src/.env.save"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "www.elconferencista.com"] [uri "/src/.env.save"] [unique_id "aP0i28TwcQWml7-Cxwsv1gABhvI"]
[Sat Oct 25 12:19:57 2025] [elconferencista.com] [error] [client 18.216.26.252:50020] [pid 365261] apache2_util.c(271): [client 18.216.26.252] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pem/ .pol/ .printer/ .pwd/ .rdb/ .resources/ .resx/ .sql/ .swp/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "1112"] [id "920440"] [msg "URL file extension is restricted by policy"] [data ".bak"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [tag "PCI/6.5.10"] [hostname "www.elconferencista.com"] [uri "/src/.env.bak"] [unique_id "aP0i3cTwcQWml7-Cxwsv2wABhuw"]
[Sat Oct 25 12:19:57 2025] [elconferencista.com] [error] [client 18.216.26.252:50020] [pid 365261] apache2_util.c(271): [client 18.216.26.252] ModSecurity: Warning. Matched phrase ".env" at REQUEST_FILENAME. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "143"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: .env found within REQUEST_FILENAME: /src/.env.bak"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "www.elconferencista.com"] [uri "/src/.env.bak"] [unique_id "aP0i3cTwcQWml7-Cxwsv2wABhuw"]
[Sat Oct 25 12:19:58 2025] [elconferencista.com] [error] [client 18.216.26.252:50020] [pid 365261] apache2_util.c(271): [client 18.216.26.252] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pem/ .pol/ .printer/ .pwd/ .rdb/ .resources/ .resx/ .sql/ .swp/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "1112"] [id "920440"] [msg "URL file extension is restricted by policy"] [data ".old"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [tag "PCI/6.5.10"] [hostname "www.elconferencista.com"] [uri "/src/.env.old"] [unique_id "aP0i3sTwcQWml7-Cxwsv3gABhss"]
[Sat Oct 25 12:19:58 2025] [elconferencista.com] [error] [client 18.216.26.252:50020] [pid 365261] apache2_util.c(271): [client 18.216.26.252] ModSecurity: Warning. Matched phrase ".env" at REQUEST_FILENAME. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "143"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: .env found within REQUEST_FILENAME: /src/.env.old"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "www.elconferencista.com"] [uri "/src/.env.old"] [unique_id "aP0i3sTwcQWml7-Cxwsv3gABhss"]
[Sat Oct 25 12:20:00 2025] [elconferencista.com] [error] [client 18.216.26.252:50020] [pid 365261] apache2_util.c(271): [client 18.216.26.252] ModSecurity: Warning. Matched phrase ".env" at REQUEST_FILENAME. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "143"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: .env found within REQUEST_FILENAME: /public/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "www.elconferencista.com"] [uri "/public/.env"] [unique_id "aP0i4MTwcQWml7-Cxwsv4QABhvs"]
[Sat Oct 25 12:20:01 2025] [elconferencista.com] [error] [client 18.216.26.252:50020] [pid 365261] apache2_util.c(271): [client 18.216.26.252] ModSecurity: Warning. Matched phrase ".env" at REQUEST_FILENAME. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "143"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: .env found within REQUEST_FILENAME: /public/.env.save"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "www.elconferencista.com"] [uri "/public/.env.save"] [unique_id "aP0i4cTwcQWml7-Cxwsv5gABhvc"]
[Sat Oct 25 12:20:04 2025] [elconferencista.com] [error] [client 18.216.26.252:50020] [pid 365261] apache2_util.c(271): [client 18.216.26.252] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pem/ .pol/ .printer/ .pwd/ .rdb/ .resources/ .resx/ .sql/ .swp/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "1112"] [id "920440"] [msg "URL file extension is restricted by policy"] [data ".bak"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [tag "PCI/6.5.10"] [hostname "www.elconferencista.com"] [uri "/public/.env.bak"] [unique_id "aP0i5MTwcQWml7-Cxwsv6wABhwE"]
[Sat Oct 25 12:20:04 2025] [elconferencista.com] [error] [client 18.216.26.252:50020] [pid 365261] apache2_util.c(271): [client 18.216.26.252] ModSecurity: Warning. Matched phrase ".env" at REQUEST_FILENAME. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "143"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: .env found within REQUEST_FILENAME: /public/.env.bak"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "www.elconferencista.com"] [uri "/public/.env.bak"] [unique_id "aP0i5MTwcQWml7-Cxwsv6wABhwE"]
[Sat Oct 25 12:20:05 2025] [elconferencista.com] [error] [client 18.216.26.252:50020] [pid 365261] apache2_util.c(271): [client 18.216.26.252] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pem/ .pol/ .printer/ .pwd/ .rdb/ .resources/ .resx/ .sql/ .swp/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "1112"] [id "920440"] [msg "URL file extension is restricted by policy"] [data ".old"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [tag "PCI/6.5.10"] [hostname "www.elconferencista.com"] [uri "/public/.env.old"] [unique_id "aP0i5cTwcQWml7-Cxwsv7gABhvo"]
[Sat Oct 25 12:20:05 2025] [elconferencista.com] [error] [client 18.216.26.252:50020] [pid 365261] apache2_util.c(271): [client 18.216.26.252] ModSecurity: Warning. Matched phrase ".env" at REQUEST_FILENAME. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "143"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: .env found within REQUEST_FILENAME: /public/.env.old"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "www.elconferencista.com"] [uri "/public/.env.old"] [unique_id "aP0i5cTwcQWml7-Cxwsv7gABhvo"]
[Sat Oct 25 12:20:07 2025] [elconferencista.com] [error] [client 18.216.26.252:50020] [pid 365261] apache2_util.c(271): [client 18.216.26.252] ModSecurity: Warning. Matched phrase ".env" at REQUEST_FILENAME. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "143"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: .env found within REQUEST_FILENAME: /assets/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "www.elconferencista.com"] [uri "/assets/.env"] [unique_id "aP0i58TwcQWml7-Cxwsv8gABhww"]
[Sat Oct 25 12:20:08 2025] [elconferencista.com] [error] [client 18.216.26.252:50020] [pid 365261] apache2_util.c(271): [client 18.216.26.252] ModSecurity: Warning. Matched phrase ".env" at REQUEST_FILENAME. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "143"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: .env found within REQUEST_FILENAME: /assets/.env.save"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "www.elconferencista.com"] [uri "/assets/.env.save"] [unique_id "aP0i6MTwcQWml7-Cxwsv-wABhxc"]
[Sat Oct 25 12:20:10 2025] [elconferencista.com] [error] [client 18.216.26.252:50020] [pid 365261] apache2_util.c(271): [client 18.216.26.252] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pem/ .pol/ .printer/ .pwd/ .rdb/ .resources/ .resx/ .sql/ .swp/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "1112"] [id "920440"] [msg "URL file extension is restricted by policy"] [data ".bak"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [tag "PCI/6.5.10"] [hostname "www.elconferencista.com"] [uri "/assets/.env.bak"] [unique_id "aP0i6sTwcQWml7-CxwswAAABhxs"]
[Sat Oct 25 12:20:10 2025] [elconferencista.com] [error] [client 18.216.26.252:50020] [pid 365261] apache2_util.c(271): [client 18.216.26.252] ModSecurity: Warning. Matched phrase ".env" at REQUEST_FILENAME. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "143"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: .env found within REQUEST_FILENAME: /assets/.env.bak"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "www.elconferencista.com"] [uri "/assets/.env.bak"] [unique_id "aP0i6sTwcQWml7-CxwswAAABhxs"]
[Sat Oct 25 12:20:11 2025] [elconferencista.com] [error] [client 18.216.26.252:50020] [pid 365261] apache2_util.c(271): [client 18.216.26.252] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pem/ .pol/ .printer/ .pwd/ .rdb/ .resources/ .resx/ .sql/ .swp/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "1112"] [id "920440"] [msg "URL file extension is restricted by policy"] [data ".old"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [tag "PCI/6.5.10"] [hostname "www.elconferencista.com"] [uri "/assets/.env.old"] [unique_id "aP0i68TwcQWml7-CxwswBAABhyw"]
[Sat Oct 25 12:20:11 2025] [elconferencista.com] [error] [client 18.216.26.252:50020] [pid 365261] apache2_util.c(271): [client 18.216.26.252] ModSecurity: Warning. Matched phrase ".env" at REQUEST_FILENAME. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "143"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: .env found within REQUEST_FILENAME: /assets/.env.old"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "www.elconferencista.com"] [uri "/assets/.env.old"] [unique_id "aP0i68TwcQWml7-CxwswBAABhyw"]
[Sat Oct 25 12:20:13 2025] [elconferencista.com] [error] [client 18.216.26.252:50020] [pid 365261] apache2_util.c(271): [client 18.216.26.252] ModSecurity: Warning. Matched phrase ".env" at REQUEST_FILENAME. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "143"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: .env found within REQUEST_FILENAME: /includes/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "www.elconferencista.com"] [uri "/includes/.env"] [unique_id "aP0i7cTwcQWml7-CxwswBwABhzI"]
[Sat Oct 25 12:20:14 2025] [elconferencista.com] [error] [client 18.216.26.252:50020] [pid 365261] apache2_util.c(271): [client 18.216.26.252] ModSecurity: Warning. Matched phrase ".env" at REQUEST_FILENAME. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "143"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: .env found within REQUEST_FILENAME: /includes/.env.save"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "www.elconferencista.com"] [uri "/includes/.env.save"] [unique_id "aP0i7sTwcQWml7-CxwswCgABhzA"]
[Sat Oct 25 12:20:16 2025] [elconferencista.com] [error] [client 18.216.26.252:50020] [pid 365261] apache2_util.c(271): [client 18.216.26.252] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pem/ .pol/ .printer/ .pwd/ .rdb/ .resources/ .resx/ .sql/ .swp/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "1112"] [id "920440"] [msg "URL file extension is restricted by policy"] [data ".bak"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [tag "PCI/6.5.10"] [hostname "www.elconferencista.com"] [uri "/includes/.env.bak"] [unique_id "aP0i8MTwcQWml7-CxwswDwABhzE"]
[Sat Oct 25 12:20:16 2025] [elconferencista.com] [error] [client 18.216.26.252:50020] [pid 365261] apache2_util.c(271): [client 18.216.26.252] ModSecurity: Warning. Matched phrase ".env" at REQUEST_FILENAME. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "143"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: .env found within REQUEST_FILENAME: /includes/.env.bak"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "www.elconferencista.com"] [uri "/includes/.env.bak"] [unique_id "aP0i8MTwcQWml7-CxwswDwABhzE"]
[Sat Oct 25 12:20:18 2025] [elconferencista.com] [error] [client 18.216.26.252:50020] [pid 365261] apache2_util.c(271): [client 18.216.26.252] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pem/ .pol/ .printer/ .pwd/ .rdb/ .resources/ .resx/ .sql/ .swp/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "1112"] [id "920440"] [msg "URL file extension is restricted by policy"] [data ".old"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [tag "PCI/6.5.10"] [hostname "www.elconferencista.com"] [uri "/includes/.env.old"] [unique_id "aP0i8sTwcQWml7-CxwswEgABh00"]
[Sat Oct 25 12:20:18 2025] [elconferencista.com] [error] [client 18.216.26.252:50020] [pid 365261] apache2_util.c(271): [client 18.216.26.252] ModSecurity: Warning. Matched phrase ".env" at REQUEST_FILENAME. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "143"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: .env found within REQUEST_FILENAME: /includes/.env.old"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "www.elconferencista.com"] [uri "/includes/.env.old"] [unique_id "aP0i8sTwcQWml7-CxwswEgABh00"]
[Sat Oct 25 12:20:19 2025] [elconferencista.com] [error] [client 18.216.26.252:50020] [pid 365261] apache2_util.c(271): [client 18.216.26.252] ModSecurity: Warning. Matched phrase ".env" at REQUEST_FILENAME. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "143"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: .env found within REQUEST_FILENAME: /lib/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "www.elconferencista.com"] [uri "/lib/.env"] [unique_id "aP0i88TwcQWml7-CxwswFQABh0U"]
[Sat Oct 25 12:20:20 2025] [elconferencista.com] [error] [client 18.216.26.252:50020] [pid 365261] apache2_util.c(271): [client 18.216.26.252] ModSecurity: Warning. Matched phrase ".env" at REQUEST_FILENAME. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "143"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: .env found within REQUEST_FILENAME: /lib/.env.save"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "www.elconferencista.com"] [uri "/lib/.env.save"] [unique_id "aP0i9MTwcQWml7-CxwswHAABh1k"]
[Sat Oct 25 12:20:21 2025] [elconferencista.com] [error] [client 18.216.26.252:50020] [pid 365261] apache2_util.c(271): [client 18.216.26.252] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pem/ .pol/ .printer/ .pwd/ .rdb/ .resources/ .resx/ .sql/ .swp/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "1112"] [id "920440"] [msg "URL file extension is restricted by policy"] [data ".bak"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [tag "PCI/6.5.10"] [hostname "www.elconferencista.com"] [uri "/lib/.env.bak"] [unique_id "aP0i9cTwcQWml7-CxwswIQABh0s"]
[Sat Oct 25 12:20:21 2025] [elconferencista.com] [error] [client 18.216.26.252:50020] [pid 365261] apache2_util.c(271): [client 18.216.26.252] ModSecurity: Warning. Matched phrase ".env" at REQUEST_FILENAME. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "143"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: .env found within REQUEST_FILENAME: /lib/.env.bak"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "www.elconferencista.com"] [uri "/lib/.env.bak"] [unique_id "aP0i9cTwcQWml7-CxwswIQABh0s"]
[Sat Oct 25 12:20:23 2025] [elconferencista.com] [error] [client 18.216.26.252:50020] [pid 365261] apache2_util.c(271): [client 18.216.26.252] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pem/ .pol/ .printer/ .pwd/ .rdb/ .resources/ .resx/ .sql/ .swp/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "1112"] [id "920440"] [msg "URL file extension is restricted by policy"] [data ".old"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [tag "PCI/6.5.10"] [hostname "www.elconferencista.com"] [uri "/lib/.env.old"] [unique_id "aP0i98TwcQWml7-CxwswJgABh18"]
[Sat Oct 25 12:20:23 2025] [elconferencista.com] [error] [client 18.216.26.252:50020] [pid 365261] apache2_util.c(271): [client 18.216.26.252] ModSecurity: Warning. Matched phrase ".env" at REQUEST_FILENAME. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "143"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: .env found within REQUEST_FILENAME: /lib/.env.old"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "www.elconferencista.com"] [uri "/lib/.env.old"] [unique_id "aP0i98TwcQWml7-CxwswJgABh18"]
[Sat Oct 25 12:20:24 2025] [elconferencista.com] [error] [client 18.216.26.252:50020] [pid 365261] apache2_util.c(271): [client 18.216.26.252] ModSecurity: Warning. Matched phrase ".env" at REQUEST_FILENAME. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "143"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: .env found within REQUEST_FILENAME: /application/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "www.elconferencista.com"] [uri "/application/.env"] [unique_id "aP0i-MTwcQWml7-CxwswKwABh1w"]
[Sat Oct 25 12:20:26 2025] [elconferencista.com] [error] [client 18.216.26.252:50020] [pid 365261] apache2_util.c(271): [client 18.216.26.252] ModSecurity: Warning. Matched phrase ".env" at REQUEST_FILENAME. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "143"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: .env found within REQUEST_FILENAME: /application/.env.save"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "www.elconferencista.com"] [uri "/application/.env.save"] [unique_id "aP0i-sTwcQWml7-CxwswMAABh2s"]
[Sat Oct 25 12:20:27 2025] [elconferencista.com] [error] [client 18.216.26.252:50020] [pid 365261] apache2_util.c(271): [client 18.216.26.252] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pem/ .pol/ .printer/ .pwd/ .rdb/ .resources/ .resx/ .sql/ .swp/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "1112"] [id "920440"] [msg "URL file extension is restricted by policy"] [data ".bak"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [tag "PCI/6.5.10"] [hostname "www.elconferencista.com"] [uri "/application/.env.bak"] [unique_id "aP0i-8TwcQWml7-CxwswMwABh2I"]
[Sat Oct 25 12:20:27 2025] [elconferencista.com] [error] [client 18.216.26.252:50020] [pid 365261] apache2_util.c(271): [client 18.216.26.252] ModSecurity: Warning. Matched phrase ".env" at REQUEST_FILENAME. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "143"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: .env found within REQUEST_FILENAME: /application/.env.bak"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "www.elconferencista.com"] [uri "/application/.env.bak"] [unique_id "aP0i-8TwcQWml7-CxwswMwABh2I"]
[Sat Oct 25 12:20:28 2025] [elconferencista.com] [error] [client 18.216.26.252:50020] [pid 365261] apache2_util.c(271): [client 18.216.26.252] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pem/ .pol/ .printer/ .pwd/ .rdb/ .resources/ .resx/ .sql/ .swp/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "1112"] [id "920440"] [msg "URL file extension is restricted by policy"] [data ".old"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [tag "PCI/6.5.10"] [hostname "www.elconferencista.com"] [uri "/application/.env.old"] [unique_id "aP0i_MTwcQWml7-CxwswOQABh3Y"]
[Sat Oct 25 12:20:28 2025] [elconferencista.com] [error] [client 18.216.26.252:50020] [pid 365261] apache2_util.c(271): [client 18.216.26.252] ModSecurity: Warning. Matched phrase ".env" at REQUEST_FILENAME. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "143"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: .env found within REQUEST_FILENAME: /application/.env.old"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "www.elconferencista.com"] [uri "/application/.env.old"] [unique_id "aP0i_MTwcQWml7-CxwswOQABh3Y"]
[Sat Oct 25 12:20:30 2025] [elconferencista.com] [error] [client 18.216.26.252:50020] [pid 365261] apache2_util.c(271): [client 18.216.26.252] ModSecurity: Warning. Matched phrase ".env" at REQUEST_FILENAME. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "143"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: .env found within REQUEST_FILENAME: /system/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "www.elconferencista.com"] [uri "/system/.env"] [unique_id "aP0i_sTwcQWml7-CxwswPwABh3E"]
[Sat Oct 25 12:20:31 2025] [elconferencista.com] [error] [client 18.216.26.252:50020] [pid 365261] apache2_util.c(271): [client 18.216.26.252] ModSecurity: Warning. Matched phrase ".env" at REQUEST_FILENAME. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "143"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: .env found within REQUEST_FILENAME: /system/.env.save"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "www.elconferencista.com"] [uri "/system/.env.save"] [unique_id "aP0i_8TwcQWml7-CxwswRAABhrQ"]
[Sat Oct 25 12:20:33 2025] [elconferencista.com] [error] [client 18.216.26.252:50020] [pid 365261] apache2_util.c(271): [client 18.216.26.252] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pem/ .pol/ .printer/ .pwd/ .rdb/ .resources/ .resx/ .sql/ .swp/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "1112"] [id "920440"] [msg "URL file extension is restricted by policy"] [data ".bak"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [tag "PCI/6.5.10"] [hostname "www.elconferencista.com"] [uri "/system/.env.bak"] [unique_id "aP0jAcTwcQWml7-CxwswRwABhrA"]
[Sat Oct 25 12:20:33 2025] [elconferencista.com] [error] [client 18.216.26.252:50020] [pid 365261] apache2_util.c(271): [client 18.216.26.252] ModSecurity: Warning. Matched phrase ".env" at REQUEST_FILENAME. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "143"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: .env found within REQUEST_FILENAME: /system/.env.bak"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "www.elconferencista.com"] [uri "/system/.env.bak"] [unique_id "aP0jAcTwcQWml7-CxwswRwABhrA"]
[Sat Oct 25 12:20:34 2025] [elconferencista.com] [error] [client 18.216.26.252:50020] [pid 365261] apache2_util.c(271): [client 18.216.26.252] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pem/ .pol/ .printer/ .pwd/ .rdb/ .resources/ .resx/ .sql/ .swp/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "1112"] [id "920440"] [msg "URL file extension is restricted by policy"] [data ".old"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [tag "PCI/6.5.10"] [hostname "www.elconferencista.com"] [uri "/system/.env.old"] [unique_id "aP0jAsTwcQWml7-CxwswSgABhrk"]
[Sat Oct 25 12:20:34 2025] [elconferencista.com] [error] [client 18.216.26.252:50020] [pid 365261] apache2_util.c(271): [client 18.216.26.252] ModSecurity: Warning. Matched phrase ".env" at REQUEST_FILENAME. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "143"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: .env found within REQUEST_FILENAME: /system/.env.old"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "www.elconferencista.com"] [uri "/system/.env.old"] [unique_id "aP0jAsTwcQWml7-CxwswSgABhrk"]
[Sat Oct 25 12:20:35 2025] [elconferencista.com] [error] [client 18.216.26.252:50020] [pid 365261] apache2_util.c(271): [client 18.216.26.252] ModSecurity: Warning. Matched phrase ".env" at REQUEST_FILENAME. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "143"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: .env found within REQUEST_FILENAME: /core/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "www.elconferencista.com"] [uri "/core/.env"] [unique_id "aP0jA8TwcQWml7-CxwswTAABhr8"]
[Sat Oct 25 12:20:36 2025] [elconferencista.com] [error] [client 18.216.26.252:50020] [pid 365261] apache2_util.c(271): [client 18.216.26.252] ModSecurity: Warning. Matched phrase ".env" at REQUEST_FILENAME. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "143"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: .env found within REQUEST_FILENAME: /core/.env.save"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "www.elconferencista.com"] [uri "/core/.env.save"] [unique_id "aP0jBMTwcQWml7-CxwswTgABhsg"]
[Sat Oct 25 12:20:38 2025] [elconferencista.com] [error] [client 18.216.26.252:50020] [pid 365261] apache2_util.c(271): [client 18.216.26.252] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pem/ .pol/ .printer/ .pwd/ .rdb/ .resources/ .resx/ .sql/ .swp/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "1112"] [id "920440"] [msg "URL file extension is restricted by policy"] [data ".bak"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [tag "PCI/6.5.10"] [hostname "www.elconferencista.com"] [uri "/core/.env.bak"] [unique_id "aP0jBsTwcQWml7-CxwswUQABhrs"]
[Sat Oct 25 12:20:38 2025] [elconferencista.com] [error] [client 18.216.26.252:50020] [pid 365261] apache2_util.c(271): [client 18.216.26.252] ModSecurity: Warning. Matched phrase ".env" at REQUEST_FILENAME. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "143"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: .env found within REQUEST_FILENAME: /core/.env.bak"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "www.elconferencista.com"] [uri "/core/.env.bak"] [unique_id "aP0jBsTwcQWml7-CxwswUQABhrs"]
[Sat Oct 25 12:20:39 2025] [elconferencista.com] [error] [client 18.216.26.252:50020] [pid 365261] apache2_util.c(271): [client 18.216.26.252] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pem/ .pol/ .printer/ .pwd/ .rdb/ .resources/ .resx/ .sql/ .swp/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "1112"] [id "920440"] [msg "URL file extension is restricted by policy"] [data ".old"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [tag "PCI/6.5.10"] [hostname "www.elconferencista.com"] [uri "/core/.env.old"] [unique_id "aP0jB8TwcQWml7-CxwswUwABhsk"]
[Sat Oct 25 12:20:39 2025] [elconferencista.com] [error] [client 18.216.26.252:50020] [pid 365261] apache2_util.c(271): [client 18.216.26.252] ModSecurity: Warning. Matched phrase ".env" at REQUEST_FILENAME. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "143"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: .env found within REQUEST_FILENAME: /core/.env.old"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "www.elconferencista.com"] [uri "/core/.env.old"] [unique_id "aP0jB8TwcQWml7-CxwswUwABhsk"]
[Sat Oct 25 12:20:40 2025] [elconferencista.com] [error] [client 18.216.26.252:50020] [pid 365261] apache2_util.c(271): [client 18.216.26.252] ModSecurity: Warning. Matched phrase ".env" at REQUEST_FILENAME. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "143"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: .env found within REQUEST_FILENAME: /modules/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "www.elconferencista.com"] [uri "/modules/.env"] [unique_id "aP0jCMTwcQWml7-CxwswVQABhtM"]
[Sat Oct 25 12:20:41 2025] [elconferencista.com] [error] [client 18.216.26.252:50020] [pid 365261] apache2_util.c(271): [client 18.216.26.252] ModSecurity: Warning. Matched phrase ".env" at REQUEST_FILENAME. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "143"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: .env found within REQUEST_FILENAME: /modules/.env.save"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "www.elconferencista.com"] [uri "/modules/.env.save"] [unique_id "aP0jCcTwcQWml7-CxwswVwABhqQ"]
[Sat Oct 25 12:20:42 2025] [elconferencista.com] [error] [client 18.216.26.252:50020] [pid 365261] apache2_util.c(271): [client 18.216.26.252] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pem/ .pol/ .printer/ .pwd/ .rdb/ .resources/ .resx/ .sql/ .swp/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "1112"] [id "920440"] [msg "URL file extension is restricted by policy"] [data ".bak"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [tag "PCI/6.5.10"] [hostname "www.elconferencista.com"] [uri "/modules/.env.bak"] [unique_id "aP0jCsTwcQWml7-CxwswXAABhs0"]
[Sat Oct 25 12:20:42 2025] [elconferencista.com] [error] [client 18.216.26.252:50020] [pid 365261] apache2_util.c(271): [client 18.216.26.252] ModSecurity: Warning. Matched phrase ".env" at REQUEST_FILENAME. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "143"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: .env found within REQUEST_FILENAME: /modules/.env.bak"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "www.elconferencista.com"] [uri "/modules/.env.bak"] [unique_id "aP0jCsTwcQWml7-CxwswXAABhs0"]
[Sat Oct 25 12:20:44 2025] [elconferencista.com] [error] [client 18.216.26.252:50020] [pid 365261] apache2_util.c(271): [client 18.216.26.252] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pem/ .pol/ .printer/ .pwd/ .rdb/ .resources/ .resx/ .sql/ .swp/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "1112"] [id "920440"] [msg "URL file extension is restricted by policy"] [data ".old"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [tag "PCI/6.5.10"] [hostname "www.elconferencista.com"] [uri "/modules/.env.old"] [unique_id "aP0jDMTwcQWml7-CxwswXgABhr4"]
[Sat Oct 25 12:20:44 2025] [elconferencista.com] [error] [client 18.216.26.252:50020] [pid 365261] apache2_util.c(271): [client 18.216.26.252] ModSecurity: Warning. Matched phrase ".env" at REQUEST_FILENAME. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "143"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: .env found within REQUEST_FILENAME: /modules/.env.old"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "www.elconferencista.com"] [uri "/modules/.env.old"] [unique_id "aP0jDMTwcQWml7-CxwswXgABhr4"]
[Sat Oct 25 12:20:45 2025] [elconferencista.com] [error] [client 18.216.26.252:50020] [pid 365261] apache2_util.c(271): [client 18.216.26.252] ModSecurity: Warning. Matched phrase ".env" at REQUEST_FILENAME. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "143"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: .env found within REQUEST_FILENAME: /plugins/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "www.elconferencista.com"] [uri "/plugins/.env"] [unique_id "aP0jDcTwcQWml7-CxwswYAABhsQ"]
[Sat Oct 25 12:20:46 2025] [elconferencista.com] [error] [client 18.216.26.252:50020] [pid 365261] apache2_util.c(271): [client 18.216.26.252] ModSecurity: Warning. Matched phrase ".env" at REQUEST_FILENAME. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "143"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: .env found within REQUEST_FILENAME: /plugins/.env.save"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "www.elconferencista.com"] [uri "/plugins/.env.save"] [unique_id "aP0jDsTwcQWml7-CxwswYgABhro"]
[Sat Oct 25 12:20:47 2025] [elconferencista.com] [error] [client 18.216.26.252:50020] [pid 365261] apache2_util.c(271): [client 18.216.26.252] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pem/ .pol/ .printer/ .pwd/ .rdb/ .resources/ .resx/ .sql/ .swp/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "1112"] [id "920440"] [msg "URL file extension is restricted by policy"] [data ".bak"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [tag "PCI/6.5.10"] [hostname "www.elconferencista.com"] [uri "/plugins/.env.bak"] [unique_id "aP0jD8TwcQWml7-CxwswZAABhuo"]
[Sat Oct 25 12:20:47 2025] [elconferencista.com] [error] [client 18.216.26.252:50020] [pid 365261] apache2_util.c(271): [client 18.216.26.252] ModSecurity: Warning. Matched phrase ".env" at REQUEST_FILENAME. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "143"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: .env found within REQUEST_FILENAME: /plugins/.env.bak"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "www.elconferencista.com"] [uri "/plugins/.env.bak"] [unique_id "aP0jD8TwcQWml7-CxwswZAABhuo"]
[Sat Oct 25 12:20:49 2025] [elconferencista.com] [error] [client 18.216.26.252:50020] [pid 365261] apache2_util.c(271): [client 18.216.26.252] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pem/ .pol/ .printer/ .pwd/ .rdb/ .resources/ .resx/ .sql/ .swp/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "1112"] [id "920440"] [msg "URL file extension is restricted by policy"] [data ".old"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [tag "PCI/6.5.10"] [hostname "www.elconferencista.com"] [uri "/plugins/.env.old"] [unique_id "aP0jEcTwcQWml7-CxwswZwABhuU"]
[Sat Oct 25 12:20:49 2025] [elconferencista.com] [error] [client 18.216.26.252:50020] [pid 365261] apache2_util.c(271): [client 18.216.26.252] ModSecurity: Warning. Matched phrase ".env" at REQUEST_FILENAME. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "143"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: .env found within REQUEST_FILENAME: /plugins/.env.old"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "www.elconferencista.com"] [uri "/plugins/.env.old"] [unique_id "aP0jEcTwcQWml7-CxwswZwABhuU"]
[Sat Oct 25 12:20:50 2025] [elconferencista.com] [error] [client 18.216.26.252:50020] [pid 365261] apache2_util.c(271): [client 18.216.26.252] ModSecurity: Warning. Matched phrase ".env" at REQUEST_FILENAME. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "143"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: .env found within REQUEST_FILENAME: /themes/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "www.elconferencista.com"] [uri "/themes/.env"] [unique_id "aP0jEsTwcQWml7-CxwswaQABhtE"]
[Sat Oct 25 12:20:52 2025] [elconferencista.com] [error] [client 18.216.26.252:50020] [pid 365261] apache2_util.c(271): [client 18.216.26.252] ModSecurity: Warning. Matched phrase ".env" at REQUEST_FILENAME. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "143"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: .env found within REQUEST_FILENAME: /themes/.env.save"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "www.elconferencista.com"] [uri "/themes/.env.save"] [unique_id "aP0jFMTwcQWml7-CxwswawABhts"]
[Sat Oct 25 12:20:53 2025] [elconferencista.com] [error] [client 18.216.26.252:50020] [pid 365261] apache2_util.c(271): [client 18.216.26.252] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pem/ .pol/ .printer/ .pwd/ .rdb/ .resources/ .resx/ .sql/ .swp/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "1112"] [id "920440"] [msg "URL file extension is restricted by policy"] [data ".bak"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [tag "PCI/6.5.10"] [hostname "www.elconferencista.com"] [uri "/themes/.env.bak"] [unique_id "aP0jFcTwcQWml7-CxwswbwABhuw"]
[Sat Oct 25 12:20:53 2025] [elconferencista.com] [error] [client 18.216.26.252:50020] [pid 365261] apache2_util.c(271): [client 18.216.26.252] ModSecurity: Warning. Matched phrase ".env" at REQUEST_FILENAME. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "143"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: .env found within REQUEST_FILENAME: /themes/.env.bak"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "www.elconferencista.com"] [uri "/themes/.env.bak"] [unique_id "aP0jFcTwcQWml7-CxwswbwABhuw"]
[Sat Oct 25 12:20:54 2025] [elconferencista.com] [error] [client 18.216.26.252:50020] [pid 365261] apache2_util.c(271): [client 18.216.26.252] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pem/ .pol/ .printer/ .pwd/ .rdb/ .resources/ .resx/ .sql/ .swp/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "1112"] [id "920440"] [msg "URL file extension is restricted by policy"] [data ".old"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [tag "PCI/6.5.10"] [hostname "www.elconferencista.com"] [uri "/themes/.env.old"] [unique_id "aP0jFsTwcQWml7-CxwswcQABhvQ"]
[Sat Oct 25 12:20:54 2025] [elconferencista.com] [error] [client 18.216.26.252:50020] [pid 365261] apache2_util.c(271): [client 18.216.26.252] ModSecurity: Warning. Matched phrase ".env" at REQUEST_FILENAME. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "143"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: .env found within REQUEST_FILENAME: /themes/.env.old"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "www.elconferencista.com"] [uri "/themes/.env.old"] [unique_id "aP0jFsTwcQWml7-CxwswcQABhvQ"]
[Sat Oct 25 12:20:56 2025] [elconferencista.com] [error] [client 18.216.26.252:50020] [pid 365261] apache2_util.c(271): [client 18.216.26.252] ModSecurity: Warning. Matched phrase ".env" at REQUEST_FILENAME. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "143"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: .env found within REQUEST_FILENAME: /vendor/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "www.elconferencista.com"] [uri "/vendor/.env"] [unique_id "aP0jGMTwcQWml7-CxwswdQABhug"]
[Sat Oct 25 12:20:57 2025] [elconferencista.com] [error] [client 18.216.26.252:50020] [pid 365261] apache2_util.c(271): [client 18.216.26.252] ModSecurity: Warning. Matched phrase ".env" at REQUEST_FILENAME. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "143"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: .env found within REQUEST_FILENAME: /vendor/.env.save"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "www.elconferencista.com"] [uri "/vendor/.env.save"] [unique_id "aP0jGcTwcQWml7-CxwsweAABhvw"]
[Sat Oct 25 12:20:58 2025] [elconferencista.com] [error] [client 18.216.26.252:50020] [pid 365261] apache2_util.c(271): [client 18.216.26.252] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pem/ .pol/ .printer/ .pwd/ .rdb/ .resources/ .resx/ .sql/ .swp/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "1112"] [id "920440"] [msg "URL file extension is restricted by policy"] [data ".bak"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [tag "PCI/6.5.10"] [hostname "www.elconferencista.com"] [uri "/vendor/.env.bak"] [unique_id "aP0jGsTwcQWml7-CxwswewABhv0"]
[Sat Oct 25 12:20:58 2025] [elconferencista.com] [error] [client 18.216.26.252:50020] [pid 365261] apache2_util.c(271): [client 18.216.26.252] ModSecurity: Warning. Matched phrase ".env" at REQUEST_FILENAME. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "143"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: .env found within REQUEST_FILENAME: /vendor/.env.bak"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "www.elconferencista.com"] [uri "/vendor/.env.bak"] [unique_id "aP0jGsTwcQWml7-CxwswewABhv0"]
[Sat Oct 25 12:21:00 2025] [elconferencista.com] [error] [client 18.216.26.252:50020] [pid 365261] apache2_util.c(271): [client 18.216.26.252] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pem/ .pol/ .printer/ .pwd/ .rdb/ .resources/ .resx/ .sql/ .swp/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "1112"] [id "920440"] [msg "URL file extension is restricted by policy"] [data ".old"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [tag "PCI/6.5.10"] [hostname "www.elconferencista.com"] [uri "/vendor/.env.old"] [unique_id "aP0jHMTwcQWml7-CxwswfgABhv8"]
[Sat Oct 25 12:21:00 2025] [elconferencista.com] [error] [client 18.216.26.252:50020] [pid 365261] apache2_util.c(271): [client 18.216.26.252] ModSecurity: Warning. Matched phrase ".env" at REQUEST_FILENAME. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "143"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: .env found within REQUEST_FILENAME: /vendor/.env.old"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "www.elconferencista.com"] [uri "/vendor/.env.old"] [unique_id "aP0jHMTwcQWml7-CxwswfgABhv8"]
[Sat Oct 25 12:21:01 2025] [elconferencista.com] [error] [client 18.216.26.252:50020] [pid 365261] apache2_util.c(271): [client 18.216.26.252] ModSecurity: Warning. Matched phrase ".env" at REQUEST_FILENAME. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "143"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: .env found within REQUEST_FILENAME: /storage/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "www.elconferencista.com"] [uri "/storage/.env"] [unique_id "aP0jHcTwcQWml7-CxwswgQABhs4"]
[Sat Oct 25 12:21:02 2025] [elconferencista.com] [error] [client 18.216.26.252:50020] [pid 365261] apache2_util.c(271): [client 18.216.26.252] ModSecurity: Warning. Matched phrase ".env" at REQUEST_FILENAME. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "143"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: .env found within REQUEST_FILENAME: /storage/.env.save"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "www.elconferencista.com"] [uri "/storage/.env.save"] [unique_id "aP0jHsTwcQWml7-CxwswhQABhxA"]
[Sat Oct 25 12:21:04 2025] [elconferencista.com] [error] [client 18.216.26.252:50020] [pid 365261] apache2_util.c(271): [client 18.216.26.252] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pem/ .pol/ .printer/ .pwd/ .rdb/ .resources/ .resx/ .sql/ .swp/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "1112"] [id "920440"] [msg "URL file extension is restricted by policy"] [data ".bak"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [tag "PCI/6.5.10"] [hostname "www.elconferencista.com"] [uri "/storage/.env.bak"] [unique_id "aP0jIMTwcQWml7-CxwswjwABhxI"]
[Sat Oct 25 12:21:04 2025] [elconferencista.com] [error] [client 18.216.26.252:50020] [pid 365261] apache2_util.c(271): [client 18.216.26.252] ModSecurity: Warning. Matched phrase ".env" at REQUEST_FILENAME. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "143"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: .env found within REQUEST_FILENAME: /storage/.env.bak"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "www.elconferencista.com"] [uri "/storage/.env.bak"] [unique_id "aP0jIMTwcQWml7-CxwswjwABhxI"]
[Sat Oct 25 12:21:05 2025] [elconferencista.com] [error] [client 18.216.26.252:50020] [pid 365261] apache2_util.c(271): [client 18.216.26.252] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pem/ .pol/ .printer/ .pwd/ .rdb/ .resources/ .resx/ .sql/ .swp/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "1112"] [id "920440"] [msg "URL file extension is restricted by policy"] [data ".old"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [tag "PCI/6.5.10"] [hostname "www.elconferencista.com"] [uri "/storage/.env.old"] [unique_id "aP0jIcTwcQWml7-CxwswkwABhyk"]
[Sat Oct 25 12:21:05 2025] [elconferencista.com] [error] [client 18.216.26.252:50020] [pid 365261] apache2_util.c(271): [client 18.216.26.252] ModSecurity: Warning. Matched phrase ".env" at REQUEST_FILENAME. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "143"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: .env found within REQUEST_FILENAME: /storage/.env.old"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "www.elconferencista.com"] [uri "/storage/.env.old"] [unique_id "aP0jIcTwcQWml7-CxwswkwABhyk"]
[Sat Oct 25 12:21:07 2025] [elconferencista.com] [error] [client 18.216.26.252:50020] [pid 365261] mod_access_compat.c(350): AH01797: client denied by server configuration: /home/ednermusika/elconferencista.com/phpinfo.php
[Sat Oct 25 12:21:08 2025] [elconferencista.com] [error] [client 18.216.26.252:50020] [pid 365261] mod_access_compat.c(350): AH01797: client denied by server configuration: /home/ednermusika/elconferencista.com/info.php
[Sat Oct 25 12:21:09 2025] [elconferencista.com] [error] [client 18.216.26.252:50020] [pid 365261] mod_access_compat.c(350): AH01797: client denied by server configuration: /home/ednermusika/elconferencista.com/php_info.php
[Sat Oct 25 12:21:12 2025] [elconferencista.com] [error] [client 18.216.26.252:50020] [pid 365261] mod_access_compat.c(350): AH01797: client denied by server configuration: /home/ednermusika/elconferencista.com/test.php
[Sat Oct 25 12:21:13 2025] [elconferencista.com] [error] [client 18.216.26.252:50020] [pid 365261] mod_access_compat.c(350): AH01797: client denied by server configuration: /home/ednermusika/elconferencista.com/info1.php
[Sat Oct 25 12:21:15 2025] [elconferencista.com] [error] [client 18.216.26.252:50020] [pid 365261] mod_access_compat.c(350): AH01797: client denied by server configuration: /home/ednermusika/elconferencista.com/info2.php
[Sat Oct 25 12:21:19 2025] [elconferencista.com] [error] [client 18.216.26.252:50020] [pid 365261] mod_access_compat.c(350): AH01797: client denied by server configuration: /home/ednermusika/elconferencista.com/php.php
[Sat Oct 25 12:21:34 2025] [elconferencista.com] [error] [client 18.216.26.252:41884] [pid 365261] mod_access_compat.c(350): AH01797: client denied by server configuration: /home/ednermusika/elconferencista.com/pi.php
[Sat Oct 25 12:21:35 2025] [elconferencista.com] [error] [client 18.216.26.252:41884] [pid 365261] mod_access_compat.c(350): AH01797: client denied by server configuration: /home/ednermusika/elconferencista.com/i.php
[Sat Oct 25 12:21:40 2025] [elconferencista.com] [error] [client 18.216.26.252:41884] [pid 365261] mod_access_compat.c(350): AH01797: client denied by server configuration: /home/ednermusika/elconferencista.com/phpversion.php
[Sat Oct 25 12:21:42 2025] [elconferencista.com] [error] [client 18.216.26.252:41884] [pid 365261] mod_access_compat.c(350): AH01797: client denied by server configuration: /home/ednermusika/elconferencista.com/php_version.php
[Sat Oct 25 12:21:43 2025] [elconferencista.com] [error] [client 18.216.26.252:41884] [pid 365261] mod_access_compat.c(350): AH01797: client denied by server configuration: /home/ednermusika/elconferencista.com/serverinfo.php
[Sat Oct 25 12:21:44 2025] [elconferencista.com] [error] [client 18.216.26.252:41884] [pid 365261] mod_access_compat.c(350): AH01797: client denied by server configuration: /home/ednermusika/elconferencista.com/server.php
[Sat Oct 25 12:21:45 2025] [elconferencista.com] [error] [client 18.216.26.252:41884] [pid 365261] mod_access_compat.c(350): AH01797: client denied by server configuration: /home/ednermusika/elconferencista.com/debug.php
[Sat Oct 25 12:21:47 2025] [elconferencista.com] [error] [client 18.216.26.252:41884] [pid 365261] mod_access_compat.c(350): AH01797: client denied by server configuration: /home/ednermusika/elconferencista.com/diagnostic.php
[Sat Oct 25 12:21:48 2025] [elconferencista.com] [error] [client 18.216.26.252:41884] [pid 365261] mod_access_compat.c(350): AH01797: client denied by server configuration: /home/ednermusika/elconferencista.com/phptest.php
[Sat Oct 25 12:21:49 2025] [elconferencista.com] [error] [client 18.216.26.252:41884] [pid 365261] mod_access_compat.c(350): AH01797: client denied by server configuration: /home/ednermusika/elconferencista.com/check.php
[Sat Oct 25 12:21:54 2025] [elconferencista.com] [error] [client 18.216.26.252:41884] [pid 365261] apache2_util.c(271): [client 18.216.26.252] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pem/ .pol/ .printer/ .pwd/ .rdb/ .resources/ .resx/ .sql/ .swp/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "1112"] [id "920440"] [msg "URL file extension is restricted by policy"] [data ".bak"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [tag "PCI/6.5.10"] [hostname "www.elconferencista.com"] [uri "/phpinfo.php.bak"] [unique_id "aP0jUsTwcQWml7-Cxwsw_gABhss"]
[Sat Oct 25 12:21:56 2025] [elconferencista.com] [error] [client 18.216.26.252:41884] [pid 365261] apache2_util.c(271): [client 18.216.26.252] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pem/ .pol/ .printer/ .pwd/ .rdb/ .resources/ .resx/ .sql/ .swp/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "1112"] [id "920440"] [msg "URL file extension is restricted by policy"] [data ".bak"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [tag "PCI/6.5.10"] [hostname "www.elconferencista.com"] [uri "/info.php.bak"] [unique_id "aP0jVMTwcQWml7-CxwsxAgABht4"]
[Sat Oct 25 12:21:57 2025] [elconferencista.com] [error] [client 18.216.26.252:41884] [pid 365261] apache2_util.c(271): [client 18.216.26.252] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pem/ .pol/ .printer/ .pwd/ .rdb/ .resources/ .resx/ .sql/ .swp/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "1112"] [id "920440"] [msg "URL file extension is restricted by policy"] [data ".bak"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [tag "PCI/6.5.10"] [hostname "www.elconferencista.com"] [uri "/php_info.php.bak"] [unique_id "aP0jVcTwcQWml7-CxwsxBQABhvg"]
[Sat Oct 25 12:21:58 2025] [elconferencista.com] [error] [client 18.216.26.252:41884] [pid 365261] apache2_util.c(271): [client 18.216.26.252] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pem/ .pol/ .printer/ .pwd/ .rdb/ .resources/ .resx/ .sql/ .swp/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "1112"] [id "920440"] [msg "URL file extension is restricted by policy"] [data ".bak"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [tag "PCI/6.5.10"] [hostname "www.elconferencista.com"] [uri "/test.php.bak"] [unique_id "aP0jVsTwcQWml7-CxwsxBwABhuk"]
[Sat Oct 25 12:21:59 2025] [elconferencista.com] [error] [client 18.216.26.252:41884] [pid 365261] apache2_util.c(271): [client 18.216.26.252] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pem/ .pol/ .printer/ .pwd/ .rdb/ .resources/ .resx/ .sql/ .swp/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "1112"] [id "920440"] [msg "URL file extension is restricted by policy"] [data ".old"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [tag "PCI/6.5.10"] [hostname "www.elconferencista.com"] [uri "/phpinfo.php.old"] [unique_id "aP0jV8TwcQWml7-CxwsxCgABhwE"]
[Sat Oct 25 12:22:00 2025] [elconferencista.com] [error] [client 18.216.26.252:41884] [pid 365261] apache2_util.c(271): [client 18.216.26.252] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pem/ .pol/ .printer/ .pwd/ .rdb/ .resources/ .resx/ .sql/ .swp/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "1112"] [id "920440"] [msg "URL file extension is restricted by policy"] [data ".old"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [tag "PCI/6.5.10"] [hostname "www.elconferencista.com"] [uri "/info.php.old"] [unique_id "aP0jWMTwcQWml7-CxwsxFAABhuY"]
[Sat Oct 25 12:22:01 2025] [elconferencista.com] [error] [client 18.216.26.252:41884] [pid 365261] apache2_util.c(271): [client 18.216.26.252] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pem/ .pol/ .printer/ .pwd/ .rdb/ .resources/ .resx/ .sql/ .swp/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "1112"] [id "920440"] [msg "URL file extension is restricted by policy"] [data ".old"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [tag "PCI/6.5.10"] [hostname "www.elconferencista.com"] [uri "/php_info.php.old"] [unique_id "aP0jWcTwcQWml7-CxwsxGQABhwk"]
[Sat Oct 25 12:22:03 2025] [elconferencista.com] [error] [client 18.216.26.252:41884] [pid 365261] apache2_util.c(271): [client 18.216.26.252] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pem/ .pol/ .printer/ .pwd/ .rdb/ .resources/ .resx/ .sql/ .swp/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "1112"] [id "920440"] [msg "URL file extension is restricted by policy"] [data ".old"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [tag "PCI/6.5.10"] [hostname "www.elconferencista.com"] [uri "/test.php.old"] [unique_id "aP0jW8TwcQWml7-CxwsxIwABhy0"]
[Sat Oct 25 12:22:09 2025] [elconferencista.com] [error] [client 18.216.26.252:41884] [pid 365261] apache2_util.c(271): [client 18.216.26.252] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pem/ .pol/ .printer/ .pwd/ .rdb/ .resources/ .resx/ .sql/ .swp/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "1112"] [id "920440"] [msg "URL file extension is restricted by policy"] [data ".backup"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [tag "PCI/6.5.10"] [hostname "www.elconferencista.com"] [uri "/phpinfo.php.backup"] [unique_id "aP0jYcTwcQWml7-CxwsxLwABh1A"]
[Sat Oct 25 12:22:10 2025] [elconferencista.com] [error] [client 18.216.26.252:41884] [pid 365261] apache2_util.c(271): [client 18.216.26.252] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pem/ .pol/ .printer/ .pwd/ .rdb/ .resources/ .resx/ .sql/ .swp/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "1112"] [id "920440"] [msg "URL file extension is restricted by policy"] [data ".backup"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [tag "PCI/6.5.10"] [hostname "www.elconferencista.com"] [uri "/info.php.backup"] [unique_id "aP0jYsTwcQWml7-CxwsxMQABh1Y"]
[Sat Oct 25 12:22:11 2025] [elconferencista.com] [error] [client 18.216.26.252:41884] [pid 365261] apache2_util.c(271): [client 18.216.26.252] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pem/ .pol/ .printer/ .pwd/ .rdb/ .resources/ .resx/ .sql/ .swp/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "1112"] [id "920440"] [msg "URL file extension is restricted by policy"] [data ".backup"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [tag "PCI/6.5.10"] [hostname "www.elconferencista.com"] [uri "/php_info.php.backup"] [unique_id "aP0jY8TwcQWml7-CxwsxMwABh1I"]
[Sat Oct 25 12:22:12 2025] [elconferencista.com] [error] [client 18.216.26.252:41884] [pid 365261] apache2_util.c(271): [client 18.216.26.252] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pem/ .pol/ .printer/ .pwd/ .rdb/ .resources/ .resx/ .sql/ .swp/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "1112"] [id "920440"] [msg "URL file extension is restricted by policy"] [data ".backup"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [tag "PCI/6.5.10"] [hostname "www.elconferencista.com"] [uri "/test.php.backup"] [unique_id "aP0jZMTwcQWml7-CxwsxNwABh0Q"]
[Sat Oct 25 12:22:14 2025] [elconferencista.com] [error] [client 18.216.26.252:41884] [pid 365261] apache2_util.c(271): [client 18.216.26.252] ModSecurity: Warning. Pattern match "\\\\.[^.~]+~(?:/.*|)$" at REQUEST_FILENAME. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "1138"] [id "920500"] [msg "Attempt to access a backup or working file"] [data ".php~"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [tag "PCI/6.5.10"] [hostname "www.elconferencista.com"] [uri "/phpinfo.php~"] [unique_id "aP0jZsTwcQWml7-CxwsxOgABhzw"]
[Sat Oct 25 12:22:15 2025] [elconferencista.com] [error] [client 18.216.26.252:41884] [pid 365261] apache2_util.c(271): [client 18.216.26.252] ModSecurity: Warning. Pattern match "\\\\.[^.~]+~(?:/.*|)$" at REQUEST_FILENAME. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "1138"] [id "920500"] [msg "Attempt to access a backup or working file"] [data ".php~"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [tag "PCI/6.5.10"] [hostname "www.elconferencista.com"] [uri "/info.php~"] [unique_id "aP0jZ8TwcQWml7-CxwsxPQABh0M"]
[Sat Oct 25 12:22:16 2025] [elconferencista.com] [error] [client 18.216.26.252:41884] [pid 365261] apache2_util.c(271): [client 18.216.26.252] ModSecurity: Warning. Pattern match "\\\\.[^.~]+~(?:/.*|)$" at REQUEST_FILENAME. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "1138"] [id "920500"] [msg "Attempt to access a backup or working file"] [data ".php~"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [tag "PCI/6.5.10"] [hostname "www.elconferencista.com"] [uri "/php_info.php~"] [unique_id "aP0jaMTwcQWml7-CxwsxPwABh0s"]
[Sat Oct 25 12:22:17 2025] [elconferencista.com] [error] [client 18.216.26.252:41884] [pid 365261] apache2_util.c(271): [client 18.216.26.252] ModSecurity: Warning. Pattern match "\\\\.[^.~]+~(?:/.*|)$" at REQUEST_FILENAME. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "1138"] [id "920500"] [msg "Attempt to access a backup or working file"] [data ".php~"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [tag "PCI/6.5.10"] [hostname "www.elconferencista.com"] [uri "/test.php~"] [unique_id "aP0jacTwcQWml7-CxwsxQQABh1s"]
[Sat Oct 25 12:22:18 2025] [elconferencista.com] [error] [client 18.216.26.252:41884] [pid 365261] apache2_util.c(271): [client 18.216.26.252] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pem/ .pol/ .printer/ .pwd/ .rdb/ .resources/ .resx/ .sql/ .swp/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "1112"] [id "920440"] [msg "URL file extension is restricted by policy"] [data ".swp"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [tag "PCI/6.5.10"] [hostname "www.elconferencista.com"] [uri "/phpinfo.php.swp"] [unique_id "aP0jasTwcQWml7-CxwsxRQABh2A"]
[Sat Oct 25 12:22:19 2025] [elconferencista.com] [error] [client 18.216.26.252:41884] [pid 365261] apache2_util.c(271): [client 18.216.26.252] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pem/ .pol/ .printer/ .pwd/ .rdb/ .resources/ .resx/ .sql/ .swp/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "1112"] [id "920440"] [msg "URL file extension is restricted by policy"] [data ".swp"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [tag "PCI/6.5.10"] [hostname "www.elconferencista.com"] [uri "/info.php.swp"] [unique_id "aP0ja8TwcQWml7-CxwsxSAABh04"]
[Sat Oct 25 12:22:21 2025] [elconferencista.com] [error] [client 18.216.26.252:41884] [pid 365261] apache2_util.c(271): [client 18.216.26.252] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pem/ .pol/ .printer/ .pwd/ .rdb/ .resources/ .resx/ .sql/ .swp/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "1112"] [id "920440"] [msg "URL file extension is restricted by policy"] [data ".swp"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [tag "PCI/6.5.10"] [hostname "www.elconferencista.com"] [uri "/php_info.php.swp"] [unique_id "aP0jbcTwcQWml7-CxwsxSgABh1E"]
[Sat Oct 25 12:22:22 2025] [elconferencista.com] [error] [client 18.216.26.252:41884] [pid 365261] apache2_util.c(271): [client 18.216.26.252] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pem/ .pol/ .printer/ .pwd/ .rdb/ .resources/ .resx/ .sql/ .swp/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "1112"] [id "920440"] [msg "URL file extension is restricted by policy"] [data ".swp"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [tag "PCI/6.5.10"] [hostname "www.elconferencista.com"] [uri "/test.php.swp"] [unique_id "aP0jbsTwcQWml7-CxwsxTQABh2w"]
[Sat Oct 25 12:23:48 2025] [elconferencista.com] [error] [client 18.216.26.252:41884] [pid 365261] apache2_util.c(271): [client 18.216.26.252] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "143"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "www.elconferencista.com"] [uri "/.git/config"] [unique_id "aP0jxMTwcQWml7-CxwsyBAABhrM"]
[Sat Oct 25 12:36:33 2025] [elconferencista.com] [error] [client 45.94.31.238:55566] [pid 365261] mod_access_compat.c(350): AH01797: client denied by server configuration: /home/ednermusika/elconferencista.com/style.php
[Sat Oct 25 12:36:39 2025] [elconferencista.com] [error] [client 45.94.31.238:55566] [pid 365261] mod_access_compat.c(350): AH01797: client denied by server configuration: /home/ednermusika/elconferencista.com/wp-content/style.php
[Sat Oct 25 12:36:41 2025] [elconferencista.com] [error] [client 45.94.31.238:55566] [pid 365261] mod_access_compat.c(350): AH01797: client denied by server configuration: /home/ednermusika/elconferencista.com/wp-content/themes/style.php
[Sat Oct 25 12:36:43 2025] [elconferencista.com] [error] [client 45.94.31.238:55566] [pid 365261] mod_access_compat.c(350): AH01797: client denied by server configuration: /home/ednermusika/elconferencista.com/wp-admin/style.php
[Sat Oct 25 12:36:45 2025] [elconferencista.com] [error] [client 45.94.31.238:55566] [pid 365261] mod_access_compat.c(350): AH01797: client denied by server configuration: /home/ednermusika/elconferencista.com/wp-includes/style.php
[Sat Oct 25 12:36:47 2025] [elconferencista.com] [error] [client 45.94.31.238:55566] [pid 365261] mod_access_compat.c(350): AH01797: client denied by server configuration: /home/ednermusika/elconferencista.com/chosen.php
[Sat Oct 25 12:36:48 2025] [elconferencista.com] [error] [client 45.94.31.238:55566] [pid 365261] mod_access_compat.c(350): AH01797: client denied by server configuration: /home/ednermusika/elconferencista.com/chosen.php
[Sat Oct 25 12:36:50 2025] [elconferencista.com] [error] [client 45.94.31.238:55566] [pid 365261] mod_access_compat.c(350): AH01797: client denied by server configuration: /home/ednermusika/elconferencista.com/file.php
[Sat Oct 25 12:36:52 2025] [elconferencista.com] [error] [client 45.94.31.238:55566] [pid 365261] mod_access_compat.c(350): AH01797: client denied by server configuration: /home/ednermusika/elconferencista.com/flower.php
[Sat Oct 25 12:36:54 2025] [elconferencista.com] [error] [client 45.94.31.238:55566] [pid 365261] mod_access_compat.c(350): AH01797: client denied by server configuration: /home/ednermusika/elconferencista.com/gifclass.php
[Sat Oct 25 12:36:56 2025] [elconferencista.com] [error] [client 45.94.31.238:55566] [pid 365261] mod_access_compat.c(350): AH01797: client denied by server configuration: /home/ednermusika/elconferencista.com/bless.php
[Sat Oct 25 12:36:58 2025] [elconferencista.com] [error] [client 45.94.31.238:55566] [pid 365261] mod_access_compat.c(350): AH01797: client denied by server configuration: /home/ednermusika/elconferencista.com/class-t.api.php
[Sat Oct 25 12:36:59 2025] [elconferencista.com] [error] [client 45.94.31.238:55566] [pid 365261] mod_access_compat.c(350): AH01797: client denied by server configuration: /home/ednermusika/elconferencista.com/blurbs.php
[Sat Oct 25 12:37:02 2025] [elconferencista.com] [error] [client 45.94.31.238:55566] [pid 365261] mod_access_compat.c(350): AH01797: client denied by server configuration: /home/ednermusika/elconferencista.com/akcc.php
[Sat Oct 25 12:37:04 2025] [elconferencista.com] [error] [client 45.94.31.238:55566] [pid 365261] mod_access_compat.c(350): AH01797: client denied by server configuration: /home/ednermusika/elconferencista.com/abcd.php
[Sat Oct 25 12:37:06 2025] [elconferencista.com] [error] [client 45.94.31.238:55566] [pid 365261] mod_access_compat.c(350): AH01797: client denied by server configuration: /home/ednermusika/elconferencista.com/aku.php
[Sat Oct 25 12:37:09 2025] [elconferencista.com] [error] [client 45.94.31.238:55566] [pid 365261] mod_access_compat.c(350): AH01797: client denied by server configuration: /home/ednermusika/elconferencista.com/cord.php
[Sat Oct 25 12:37:11 2025] [elconferencista.com] [error] [client 45.94.31.238:55566] [pid 365261] mod_access_compat.c(350): AH01797: client denied by server configuration: /home/ednermusika/elconferencista.com/dex.php
[Sat Oct 25 12:39:20 2025] [elconferencista.com] [error] [client 45.94.31.238:64637] [pid 365261] mod_access_compat.c(350): AH01797: client denied by server configuration: /home/ednermusika/elconferencista.com/style.php
[Sat Oct 25 12:39:25 2025] [elconferencista.com] [error] [client 45.94.31.238:64637] [pid 365261] mod_access_compat.c(350): AH01797: client denied by server configuration: /home/ednermusika/elconferencista.com/wp-content/style.php
[Sat Oct 25 12:39:28 2025] [elconferencista.com] [error] [client 45.94.31.238:64637] [pid 365261] mod_access_compat.c(350): AH01797: client denied by server configuration: /home/ednermusika/elconferencista.com/wp-content/themes/style.php
[Sat Oct 25 12:39:31 2025] [elconferencista.com] [error] [client 45.94.31.238:64637] [pid 365261] mod_access_compat.c(350): AH01797: client denied by server configuration: /home/ednermusika/elconferencista.com/wp-admin/style.php
[Sat Oct 25 12:39:34 2025] [elconferencista.com] [error] [client 45.94.31.238:64637] [pid 365261] mod_access_compat.c(350): AH01797: client denied by server configuration: /home/ednermusika/elconferencista.com/wp-includes/style.php
[Sat Oct 25 12:39:36 2025] [elconferencista.com] [error] [client 45.94.31.238:64637] [pid 365261] mod_access_compat.c(350): AH01797: client denied by server configuration: /home/ednermusika/elconferencista.com/chosen.php
[Sat Oct 25 12:39:37 2025] [elconferencista.com] [error] [client 45.94.31.238:64637] [pid 365261] mod_access_compat.c(350): AH01797: client denied by server configuration: /home/ednermusika/elconferencista.com/chosen.php
[Sat Oct 25 12:39:40 2025] [elconferencista.com] [error] [client 45.94.31.238:64637] [pid 365261] mod_access_compat.c(350): AH01797: client denied by server configuration: /home/ednermusika/elconferencista.com/file.php
[Sat Oct 25 12:39:42 2025] [elconferencista.com] [error] [client 45.94.31.238:64637] [pid 365261] mod_access_compat.c(350): AH01797: client denied by server configuration: /home/ednermusika/elconferencista.com/flower.php
[Sat Oct 25 12:39:45 2025] [elconferencista.com] [error] [client 45.94.31.238:64637] [pid 365261] mod_access_compat.c(350): AH01797: client denied by server configuration: /home/ednermusika/elconferencista.com/gifclass.php
[Sat Oct 25 12:39:47 2025] [elconferencista.com] [error] [client 45.94.31.238:64637] [pid 365261] mod_access_compat.c(350): AH01797: client denied by server configuration: /home/ednermusika/elconferencista.com/bless.php
[Sat Oct 25 12:39:50 2025] [elconferencista.com] [error] [client 45.94.31.238:64637] [pid 365261] mod_access_compat.c(350): AH01797: client denied by server configuration: /home/ednermusika/elconferencista.com/class-t.api.php
[Sat Oct 25 12:39:53 2025] [elconferencista.com] [error] [client 45.94.31.238:64637] [pid 365261] mod_access_compat.c(350): AH01797: client denied by server configuration: /home/ednermusika/elconferencista.com/blurbs.php
[Sat Oct 25 12:39:55 2025] [elconferencista.com] [error] [client 45.94.31.238:64637] [pid 365261] mod_access_compat.c(350): AH01797: client denied by server configuration: /home/ednermusika/elconferencista.com/akcc.php
[Sat Oct 25 12:39:58 2025] [elconferencista.com] [error] [client 45.94.31.238:64637] [pid 365261] mod_access_compat.c(350): AH01797: client denied by server configuration: /home/ednermusika/elconferencista.com/abcd.php
[Sat Oct 25 12:40:00 2025] [elconferencista.com] [error] [client 45.94.31.238:64637] [pid 365261] mod_access_compat.c(350): AH01797: client denied by server configuration: /home/ednermusika/elconferencista.com/aku.php
[Sat Oct 25 12:40:03 2025] [elconferencista.com] [error] [client 45.94.31.238:64637] [pid 365261] mod_access_compat.c(350): AH01797: client denied by server configuration: /home/ednermusika/elconferencista.com/cord.php
[Sat Oct 25 16:42:36 2025] [elconferencista.com] [error] [client 182.44.9.147:41241] [pid 2972485] apache2_util.c(271): [client 182.44.9.147] ModSecurity: Warning. Pattern match "\\\\b(?:keep-alive|close),\\\\s?(?:keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "352"] [id "920210"] [msg "Multiple/Conflicting Connection Header Data Found"] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [hostname "www.elconferencista.com"] [uri "/"] [unique_id "aP1gbJw13H3PkwJMc05tRQABOQA"]
[Sat Oct 25 20:03:43 2025] [elconferencista.com] [error] [client 4.43.184.114:38170] [pid 1015490] ssl_engine_kernel.c(325): AH02032: Hostname missing.dreamhost.org (default host as no SNI was provided) and hostname www.elconferencista.com provided via HTTP have no compatible SSL setup
[Sat Oct 25 21:20:18 2025] [elconferencista.com] [warn] [client 91.220.87.247:22123] [pid 1015490] fcgid_bridge.c(409): (32)Broken pipe: mod_fcgid: ap_pass_brigade failed in handle_request_ipc function
[Sat Oct 25 21:29:03 2025] [elconferencista.com] [error] [client 45.61.141.237:65301] [pid 1015490] mod_access_compat.c(350): AH01797: client denied by server configuration: /home/ednermusika/elconferencista.com/wp-admin/network/index.php
[Sat Oct 25 21:29:05 2025] [elconferencista.com] [error] [client 45.61.141.237:65301] [pid 1015490] mod_access_compat.c(350): AH01797: client denied by server configuration: /home/ednermusika/elconferencista.com/wp-admin/network/index.php
[Sat Oct 25 21:29:32 2025] [elconferencista.com] [error] [client 45.61.141.237:53869] [pid 1015490] mod_access_compat.c(350): AH01797: client denied by server configuration: /home/ednermusika/elconferencista.com/wp-admin/js/index.php
[Sat Oct 25 21:29:32 2025] [elconferencista.com] [error] [client 45.61.141.237:53869] [pid 1015490] mod_access_compat.c(350): AH01797: client denied by server configuration: /home/ednermusika/elconferencista.com/wp-admin/js/index.php
[Sat Oct 25 21:29:53 2025] [elconferencista.com] [error] [client 45.61.141.237:57889] [pid 1015490] mod_access_compat.c(350): AH01797: client denied by server configuration: /home/ednermusika/elconferencista.com/wp-admin/images/index.php
[Sat Oct 25 21:29:54 2025] [elconferencista.com] [error] [client 45.61.141.237:57889] [pid 1015490] mod_access_compat.c(350): AH01797: client denied by server configuration: /home/ednermusika/elconferencista.com/wp-admin/images/index.php
[Sat Oct 25 21:30:10 2025] [elconferencista.com] [error] [client 45.61.141.237:60893] [pid 1015490] mod_access_compat.c(350): AH01797: client denied by server configuration: /home/ednermusika/elconferencista.com/wp-admin/css/index.php
[Sat Oct 25 21:30:12 2025] [elconferencista.com] [error] [client 45.61.141.237:60893] [pid 1015490] mod_access_compat.c(350): AH01797: client denied by server configuration: /home/ednermusika/elconferencista.com/wp-admin/css/index.php
[Sat Oct 25 21:30:38 2025] [elconferencista.com] [error] [client 45.61.141.237:49754] [pid 1015490] apache2_util.c(271): [client 45.61.141.237] ModSecurity: Warning. Matched phrase "Mozlila" at REQUEST_HEADERS:User-Agent. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-913-SCANNER-DETECTION.conf"] [line "56"] [id "913100"] [msg "Found User-Agent associated with security scanner"] [data "Matched Data: Mozlila found within REQUEST_HEADERS:User-Agent: Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-reputation-scanner"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/118/224/541/310"] [tag "PCI/6.5.10"] [hostname "www.elconferencista.com"] [uri "/wp-includes/SimplePie/Content/Type/index.php"] [unique_id "aP2j7jHWCWsCOKqCC1fRDwABhvg"]
[Sat Oct 25 21:31:02 2025] [elconferencista.com] [error] [client 45.61.141.237:52200] [pid 1015490] apache2_util.c(271): [client 45.61.141.237] ModSecurity: Warning. Matched phrase "Mozlila" at REQUEST_HEADERS:User-Agent. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-913-SCANNER-DETECTION.conf"] [line "56"] [id "913100"] [msg "Found User-Agent associated with security scanner"] [data "Matched Data: Mozlila found within REQUEST_HEADERS:User-Agent: Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-reputation-scanner"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/118/224/541/310"] [tag "PCI/6.5.10"] [hostname "www.elconferencista.com"] [uri "/wp-includes/SimplePie/Content/Type/"] [unique_id "aP2kBjHWCWsCOKqCC1fRMAABhx4"]
[Sat Oct 25 21:31:17 2025] [elconferencista.com] [error] [client 45.61.141.237:53980] [pid 1015490] apache2_util.c(271): [client 45.61.141.237] ModSecurity: Warning. Matched phrase "Mozlila" at REQUEST_HEADERS:User-Agent. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-913-SCANNER-DETECTION.conf"] [line "56"] [id "913100"] [msg "Found User-Agent associated with security scanner"] [data "Matched Data: Mozlila found within REQUEST_HEADERS:User-Agent: Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-reputation-scanner"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/118/224/541/310"] [tag "PCI/6.5.10"] [hostname "www.elconferencista.com"] [uri "/wp-includes/Requests/Auth/index.php"] [unique_id "aP2kFTHWCWsCOKqCC1fRRgABh3I"]
[Sat Oct 25 21:31:18 2025] [elconferencista.com] [error] [client 45.61.141.237:53980] [pid 1015490] apache2_util.c(271): [client 45.61.141.237] ModSecurity: Warning. Matched phrase "Mozlila" at REQUEST_HEADERS:User-Agent. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-913-SCANNER-DETECTION.conf"] [line "56"] [id "913100"] [msg "Found User-Agent associated with security scanner"] [data "Matched Data: Mozlila found within REQUEST_HEADERS:User-Agent: Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-reputation-scanner"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/118/224/541/310"] [tag "PCI/6.5.10"] [hostname "www.elconferencista.com"] [uri "/wp-includes/Requests/Auth/"] [unique_id "aP2kFjHWCWsCOKqCC1fRRwABh2o"]
[Sat Oct 25 21:31:38 2025] [elconferencista.com] [error] [client 45.61.141.237:57539] [pid 1015490] mod_access_compat.c(350): AH01797: client denied by server configuration: /home/ednermusika/elconferencista.com/wp-admin/css/colors/index.php
[Sat Oct 25 21:31:38 2025] [elconferencista.com] [error] [client 45.61.141.237:57539] [pid 1015490] mod_access_compat.c(350): AH01797: client denied by server configuration: /home/ednermusika/elconferencista.com/wp-admin/css/colors/index.php
[Sat Oct 25 21:32:20 2025] [elconferencista.com] [error] [client 45.61.141.237:64117] [pid 1015490] apache2_util.c(271): [client 45.61.141.237] ModSecurity: Warning. Matched phrase "Mozlila" at REQUEST_HEADERS:User-Agent. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-913-SCANNER-DETECTION.conf"] [line "56"] [id "913100"] [msg "Found User-Agent associated with security scanner"] [data "Matched Data: Mozlila found within REQUEST_HEADERS:User-Agent: Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-reputation-scanner"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/118/224/541/310"] [tag "PCI/6.5.10"] [hostname "www.elconferencista.com"] [uri "/wp-content/languages/index.php"] [unique_id "aP2kVDHWCWsCOKqCC1fRogABh2w"]
[Sat Oct 25 21:32:20 2025] [elconferencista.com] [error] [client 45.61.141.237:64117] [pid 1015490] mod_access_compat.c(350): AH01797: client denied by server configuration: /home/ednermusika/elconferencista.com/wp-content/languages/index.php
[Sat Oct 25 21:32:21 2025] [elconferencista.com] [error] [client 45.61.141.237:64117] [pid 1015490] apache2_util.c(271): [client 45.61.141.237] ModSecurity: Warning. Matched phrase "Mozlila" at REQUEST_HEADERS:User-Agent. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-913-SCANNER-DETECTION.conf"] [line "56"] [id "913100"] [msg "Found User-Agent associated with security scanner"] [data "Matched Data: Mozlila found within REQUEST_HEADERS:User-Agent: Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-reputation-scanner"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/118/224/541/310"] [tag "PCI/6.5.10"] [hostname "www.elconferencista.com"] [uri "/wp-content/languages/"] [unique_id "aP2kVTHWCWsCOKqCC1fRqQABh1Q"]
[Sat Oct 25 21:32:21 2025] [elconferencista.com] [error] [client 45.61.141.237:64117] [pid 1015490] mod_access_compat.c(350): AH01797: client denied by server configuration: /home/ednermusika/elconferencista.com/wp-content/languages/index.php
[Sat Oct 25 21:32:43 2025] [elconferencista.com] [error] [client 45.61.141.237:51532] [pid 1015490] apache2_util.c(271): [client 45.61.141.237] ModSecurity: Warning. Matched phrase "Mozlila" at REQUEST_HEADERS:User-Agent. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-913-SCANNER-DETECTION.conf"] [line "56"] [id "913100"] [msg "Found User-Agent associated with security scanner"] [data "Matched Data: Mozlila found within REQUEST_HEADERS:User-Agent: Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-reputation-scanner"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/118/224/541/310"] [tag "PCI/6.5.10"] [hostname "www.elconferencista.com"] [uri "/wp-content/upgrade/index.php"] [unique_id "aP2kazHWCWsCOKqCC1fR2AABhs4"]
[Sat Oct 25 21:32:43 2025] [elconferencista.com] [error] [client 45.61.141.237:51532] [pid 1015490] mod_access_compat.c(350): AH01797: client denied by server configuration: /home/ednermusika/elconferencista.com/wp-content/upgrade/index.php
[Sat Oct 25 21:32:44 2025] [elconferencista.com] [error] [client 45.61.141.237:51532] [pid 1015490] apache2_util.c(271): [client 45.61.141.237] ModSecurity: Warning. Matched phrase "Mozlila" at REQUEST_HEADERS:User-Agent. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-913-SCANNER-DETECTION.conf"] [line "56"] [id "913100"] [msg "Found User-Agent associated with security scanner"] [data "Matched Data: Mozlila found within REQUEST_HEADERS:User-Agent: Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-reputation-scanner"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/118/224/541/310"] [tag "PCI/6.5.10"] [hostname "www.elconferencista.com"] [uri "/wp-content/upgrade/"] [unique_id "aP2kbDHWCWsCOKqCC1fR2QABhwI"]
[Sat Oct 25 21:32:44 2025] [elconferencista.com] [error] [client 45.61.141.237:51532] [pid 1015490] mod_access_compat.c(350): AH01797: client denied by server configuration: /home/ednermusika/elconferencista.com/wp-content/upgrade/index.php
[Sat Oct 25 21:32:55 2025] [elconferencista.com] [error] [client 45.61.141.237:53474] [pid 1015490] apache2_util.c(271): [client 45.61.141.237] ModSecurity: Warning. Matched phrase "Mozlila" at REQUEST_HEADERS:User-Agent. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-913-SCANNER-DETECTION.conf"] [line "56"] [id "913100"] [msg "Found User-Agent associated with security scanner"] [data "Matched Data: Mozlila found within REQUEST_HEADERS:User-Agent: Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-reputation-scanner"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/118/224/541/310"] [tag "PCI/6.5.10"] [hostname "www.elconferencista.com"] [uri "/wp-content/IXR/index.php"] [unique_id "aP2kdzHWCWsCOKqCC1fR5AABh0U"]
[Sat Oct 25 21:32:55 2025] [elconferencista.com] [error] [client 45.61.141.237:53474] [pid 1015490] apache2_util.c(271): [client 45.61.141.237] ModSecurity: Warning. Matched phrase "Mozlila" at REQUEST_HEADERS:User-Agent. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-913-SCANNER-DETECTION.conf"] [line "56"] [id "913100"] [msg "Found User-Agent associated with security scanner"] [data "Matched Data: Mozlila found within REQUEST_HEADERS:User-Agent: Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-reputation-scanner"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/118/224/541/310"] [tag "PCI/6.5.10"] [hostname "www.elconferencista.com"] [uri "/wp-content/IXR/"] [unique_id "aP2kdzHWCWsCOKqCC1fR5gABh1M"]
[Sat Oct 25 21:33:15 2025] [elconferencista.com] [error] [client 45.61.141.237:56860] [pid 1015490] apache2_util.c(271): [client 45.61.141.237] ModSecurity: Warning. Matched phrase "Mozlila" at REQUEST_HEADERS:User-Agent. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-913-SCANNER-DETECTION.conf"] [line "56"] [id "913100"] [msg "Found User-Agent associated with security scanner"] [data "Matched Data: Mozlila found within REQUEST_HEADERS:User-Agent: Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-reputation-scanner"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/118/224/541/310"] [tag "PCI/6.5.10"] [hostname "www.elconferencista.com"] [uri "/wp-content/plugins/about.php"] [unique_id "aP2kizHWCWsCOKqCC1fR_wABhts"]
[Sat Oct 25 21:33:15 2025] [elconferencista.com] [error] [client 45.61.141.237:56860] [pid 1015490] mod_access_compat.c(350): AH01797: client denied by server configuration: /home/ednermusika/elconferencista.com/wp-content/plugins/about.php
[Sat Oct 25 21:33:23 2025] [elconferencista.com] [error] [client 45.61.141.237:58283] [pid 1015490] apache2_util.c(271): [client 45.61.141.237] ModSecurity: Warning. Matched phrase "Mozlila" at REQUEST_HEADERS:User-Agent. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-913-SCANNER-DETECTION.conf"] [line "56"] [id "913100"] [msg "Found User-Agent associated with security scanner"] [data "Matched Data: Mozlila found within REQUEST_HEADERS:User-Agent: Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-reputation-scanner"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/118/224/541/310"] [tag "PCI/6.5.10"] [hostname "elconferencista.com"] [uri "/wp-content/plugins/about.php"] [unique_id "aP2kkzHWCWsCOKqCC1fSBQABhsU"]
[Sat Oct 25 21:33:25 2025] [elconferencista.com] [error] [client 45.61.141.237:58643] [pid 1015490] apache2_util.c(271): [client 45.61.141.237] ModSecurity: Warning. Matched phrase "Mozlila" at REQUEST_HEADERS:User-Agent. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-913-SCANNER-DETECTION.conf"] [line "56"] [id "913100"] [msg "Found User-Agent associated with security scanner"] [data "Matched Data: Mozlila found within REQUEST_HEADERS:User-Agent: Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-reputation-scanner"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/118/224/541/310"] [tag "PCI/6.5.10"] [hostname "www.elconferencista.com"] [uri "/wp-content/plugins/about.php"] [unique_id "aP2klTHWCWsCOKqCC1fSDAABhy4"]
[Sat Oct 25 21:33:25 2025] [elconferencista.com] [error] [client 45.61.141.237:58643] [pid 1015490] mod_access_compat.c(350): AH01797: client denied by server configuration: /home/ednermusika/elconferencista.com/wp-content/plugins/about.php
[Sat Oct 25 21:33:28 2025] [elconferencista.com] [error] [client 45.61.141.237:59022] [pid 1015490] apache2_util.c(271): [client 45.61.141.237] ModSecurity: Warning. Matched phrase "Mozlila" at REQUEST_HEADERS:User-Agent. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-913-SCANNER-DETECTION.conf"] [line "56"] [id "913100"] [msg "Found User-Agent associated with security scanner"] [data "Matched Data: Mozlila found within REQUEST_HEADERS:User-Agent: Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-reputation-scanner"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/118/224/541/310"] [tag "PCI/6.5.10"] [hostname "www.elconferencista.com"] [uri "/geju.php"] [unique_id "aP2kmDHWCWsCOKqCC1fSEQABhzo"]
[Sat Oct 25 21:33:28 2025] [elconferencista.com] [error] [client 45.61.141.237:59022] [pid 1015490] mod_access_compat.c(350): AH01797: client denied by server configuration: /home/ednermusika/elconferencista.com/geju.php
[Sat Oct 25 21:33:29 2025] [elconferencista.com] [error] [client 45.61.141.237:59239] [pid 1015490] apache2_util.c(271): [client 45.61.141.237] ModSecurity: Warning. Matched phrase "Mozlila" at REQUEST_HEADERS:User-Agent. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-913-SCANNER-DETECTION.conf"] [line "56"] [id "913100"] [msg "Found User-Agent associated with security scanner"] [data "Matched Data: Mozlila found within REQUEST_HEADERS:User-Agent: Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-reputation-scanner"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/118/224/541/310"] [tag "PCI/6.5.10"] [hostname "elconferencista.com"] [uri "/geju.php"] [unique_id "aP2kmTHWCWsCOKqCC1fSEgABhzc"]
[Sat Oct 25 21:33:29 2025] [elconferencista.com] [error] [client 45.61.141.237:59346] [pid 1015490] apache2_util.c(271): [client 45.61.141.237] ModSecurity: Warning. Matched phrase "Mozlila" at REQUEST_HEADERS:User-Agent. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-913-SCANNER-DETECTION.conf"] [line "56"] [id "913100"] [msg "Found User-Agent associated with security scanner"] [data "Matched Data: Mozlila found within REQUEST_HEADERS:User-Agent: Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-reputation-scanner"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/118/224/541/310"] [tag "PCI/6.5.10"] [hostname "www.elconferencista.com"] [uri "/geju.php"] [unique_id "aP2kmTHWCWsCOKqCC1fSEwABhtQ"]
[Sat Oct 25 21:33:29 2025] [elconferencista.com] [error] [client 45.61.141.237:59346] [pid 1015490] mod_access_compat.c(350): AH01797: client denied by server configuration: /home/ednermusika/elconferencista.com/geju.php
[Sat Oct 25 21:33:31 2025] [elconferencista.com] [error] [client 45.61.141.237:59692] [pid 1015490] apache2_util.c(271): [client 45.61.141.237] ModSecurity: Warning. Matched phrase "Mozlila" at REQUEST_HEADERS:User-Agent. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-913-SCANNER-DETECTION.conf"] [line "56"] [id "913100"] [msg "Found User-Agent associated with security scanner"] [data "Matched Data: Mozlila found within REQUEST_HEADERS:User-Agent: Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-reputation-scanner"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/118/224/541/310"] [tag "PCI/6.5.10"] [hostname "www.elconferencista.com"] [uri "/wp.php"] [unique_id "aP2kmzHWCWsCOKqCC1fSFgABhtA"]
[Sat Oct 25 21:33:31 2025] [elconferencista.com] [error] [client 45.61.141.237:59692] [pid 1015490] mod_access_compat.c(350): AH01797: client denied by server configuration: /home/ednermusika/elconferencista.com/wp.php
[Sat Oct 25 21:33:32 2025] [elconferencista.com] [error] [client 45.61.141.237:59891] [pid 1015490] apache2_util.c(271): [client 45.61.141.237] ModSecurity: Warning. Matched phrase "Mozlila" at REQUEST_HEADERS:User-Agent. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-913-SCANNER-DETECTION.conf"] [line "56"] [id "913100"] [msg "Found User-Agent associated with security scanner"] [data "Matched Data: Mozlila found within REQUEST_HEADERS:User-Agent: Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-reputation-scanner"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/118/224/541/310"] [tag "PCI/6.5.10"] [hostname "elconferencista.com"] [uri "/wp.php"] [unique_id "aP2knDHWCWsCOKqCC1fSGAABhqI"]
[Sat Oct 25 21:33:33 2025] [elconferencista.com] [error] [client 45.61.141.237:59946] [pid 1015490] apache2_util.c(271): [client 45.61.141.237] ModSecurity: Warning. Matched phrase "Mozlila" at REQUEST_HEADERS:User-Agent. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-913-SCANNER-DETECTION.conf"] [line "56"] [id "913100"] [msg "Found User-Agent associated with security scanner"] [data "Matched Data: Mozlila found within REQUEST_HEADERS:User-Agent: Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-reputation-scanner"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/118/224/541/310"] [tag "PCI/6.5.10"] [hostname "www.elconferencista.com"] [uri "/wp.php"] [unique_id "aP2knTHWCWsCOKqCC1fSGQABhq8"]
[Sat Oct 25 21:33:33 2025] [elconferencista.com] [error] [client 45.61.141.237:59946] [pid 1015490] mod_access_compat.c(350): AH01797: client denied by server configuration: /home/ednermusika/elconferencista.com/wp.php
[Sat Oct 25 21:38:33 2025] [elconferencista.com] [error] [client 43.156.156.96:33520] [pid 1015490] apache2_util.c(271): [client 43.156.156.96] ModSecurity: Warning. Pattern match "\\\\b(?:keep-alive|close),\\\\s?(?:keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "352"] [id "920210"] [msg "Multiple/Conflicting Connection Header Data Found"] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [hostname "www.elconferencista.com"] [uri "/"] [unique_id "aP2lyTHWCWsCOKqCC1fUGwABhyg"]
[Sat Oct 25 23:49:27 2025] [elconferencista.com] [error] [client 4.43.184.114:37819] [pid 329926] ssl_engine_kernel.c(325): AH02032: Hostname missing.dreamhost.org (default host as no SNI was provided) and hostname www.elconferencista.com provided via HTTP have no compatible SSL setup