[Wed Oct 29 00:59:00 2025] [elconferencista.com] [error] [client 150.109.119.38:35240] [pid 2470611] apache2_util.c(271): [client 150.109.119.38] ModSecurity: Warning. Pattern match "\\\\b(?:keep-alive|close),\\\\s?(?:keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "352"] [id "920210"] [msg "Multiple/Conflicting Connection Header Data Found"] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [hostname "www.elconferencista.com"] [uri "/"] [unique_id "aQHJRMEQeWPshC5RdfZjYwABhtI"]
[Wed Oct 29 01:09:45 2025] [elconferencista.com] [error] [client 45.61.161.80:57235] [pid 2470611] mod_access_compat.c(350): AH01797: client denied by server configuration: /home/ednermusika/elconferencista.com/wp-admin/plugin-install.php
[Wed Oct 29 01:10:00 2025] [elconferencista.com] [error] [client 45.61.161.80:58135] [pid 2470611] mod_access_compat.c(350): AH01797: client denied by server configuration: /home/ednermusika/elconferencista.com/uxiuy.php
[Wed Oct 29 01:10:01 2025] [elconferencista.com] [error] [client 45.61.161.80:57235] [pid 2470611] mod_access_compat.c(350): AH01797: client denied by server configuration: /home/ednermusika/elconferencista.com/wp-admin/theme-install.php
[Wed Oct 29 01:10:07 2025] [elconferencista.com] [error] [client 45.61.161.80:58634] [pid 2470611] mod_access_compat.c(350): AH01797: client denied by server configuration: /home/ednermusika/elconferencista.com/wp-content/plugins/wp-file-manager/file_folder_manager.php
[Wed Oct 29 02:35:14 2025] [elconferencista.com] [error] [client 43.154.140.188:59106] [pid 2470611] apache2_util.c(271): [client 43.154.140.188] ModSecurity: Warning. Pattern match "\\\\b(?:keep-alive|close),\\\\s?(?:keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "352"] [id "920210"] [msg "Multiple/Conflicting Connection Header Data Found"] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [hostname "www.elconferencista.com"] [uri "/"] [unique_id "aQHf0sEQeWPshC5RdfaHYAABhus"]
[Wed Oct 29 02:50:48 2025] [elconferencista.com] [error] [client 170.106.11.6:57964] [pid 2470611] apache2_util.c(271): [client 170.106.11.6] ModSecurity: Warning. Pattern match "\\\\b(?:keep-alive|close),\\\\s?(?:keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "352"] [id "920210"] [msg "Multiple/Conflicting Connection Header Data Found"] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [hostname "www.elconferencista.com"] [uri "/"] [unique_id "aQHjeMEQeWPshC5RdfaK9AABhqE"]
[Wed Oct 29 03:01:55 2025] [elconferencista.com] [error] [client 49.51.72.76:40428] [pid 2470611] apache2_util.c(271): [client 49.51.72.76] ModSecurity: Warning. Pattern match "\\\\b(?:keep-alive|close),\\\\s?(?:keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "352"] [id "920210"] [msg "Multiple/Conflicting Connection Header Data Found"] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [hostname "www.elconferencista.com"] [uri "/"] [unique_id "aQHmE8EQeWPshC5RdfaOjAABh24"]
[Wed Oct 29 03:11:25 2025] [elconferencista.com] [error] [client 43.130.100.35:36226] [pid 2470611] apache2_util.c(271): [client 43.130.100.35] ModSecurity: Warning. Pattern match "\\\\b(?:keep-alive|close),\\\\s?(?:keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "352"] [id "920210"] [msg "Multiple/Conflicting Connection Header Data Found"] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [hostname "www.elconferencista.com"] [uri "/"] [unique_id "aQHoTcEQeWPshC5RdfaRowABhqI"]
[Wed Oct 29 03:21:32 2025] [elconferencista.com] [error] [client 43.166.136.24:44188] [pid 559065] apache2_util.c(271): [client 43.166.136.24] ModSecurity: Warning. Pattern match "\\\\b(?:keep-alive|close),\\\\s?(?:keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "352"] [id "920210"] [msg "Multiple/Conflicting Connection Header Data Found"] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [hostname "www.elconferencista.com"] [uri "/"] [unique_id "aQHqrGhm1Xyqk_bDo6yxwQABOJM"]
[Wed Oct 29 03:29:48 2025] [elconferencista.com] [error] [client 43.159.135.203:34816] [pid 559065] apache2_util.c(271): [client 43.159.135.203] ModSecurity: Warning. Pattern match "\\\\b(?:keep-alive|close),\\\\s?(?:keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "352"] [id "920210"] [msg "Multiple/Conflicting Connection Header Data Found"] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [hostname "www.elconferencista.com"] [uri "/"] [unique_id "aQHsnGhm1Xyqk_bDo6y1DgABOJo"]
[Wed Oct 29 03:35:01 2025] [elconferencista.com] [error] [client 159.223.226.118:43060] [pid 559065] apache2_util.c(271): [client 159.223.226.118] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "744"] [id "920340"] [msg "Request Containing Content, but Missing Content-Type header"] [severity "NOTICE"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [hostname "www.elconferencista.com"] [uri "/xmlrpc.php"] [unique_id "aQHt1Whm1Xyqk_bDo6y3mwABOMo"]
[Wed Oct 29 03:40:32 2025] [elconferencista.com] [error] [client 43.159.139.164:58922] [pid 559065] apache2_util.c(271): [client 43.159.139.164] ModSecurity: Warning. Pattern match "\\\\b(?:keep-alive|close),\\\\s?(?:keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "352"] [id "920210"] [msg "Multiple/Conflicting Connection Header Data Found"] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [hostname "www.elconferencista.com"] [uri "/"] [unique_id "aQHvIGhm1Xyqk_bDo6y6UwABOIc"]
[Wed Oct 29 03:40:32 2025] [elconferencista.com] [error] [client 43.159.139.164:58922] [pid 559065] apache2_util.c(271): [client 43.159.139.164] ModSecurity: Warning. Matched phrase ".htaccess" at ARGS:fileloc. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: .htaccess found within ARGS:fileloc: /home/ednermusika/elconferencista.com/.htaccess"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "www.elconferencista.com"] [uri "/"] [unique_id "aQHvIGhm1Xyqk_bDo6y6UwABOIc"]
[Wed Oct 29 03:51:30 2025] [elconferencista.com] [error] [client 49.51.39.209:48358] [pid 559065] apache2_util.c(271): [client 49.51.39.209] ModSecurity: Warning. Pattern match "\\\\b(?:keep-alive|close),\\\\s?(?:keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "352"] [id "920210"] [msg "Multiple/Conflicting Connection Header Data Found"] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [hostname "www.elconferencista.com"] [uri "/"] [unique_id "aQHxsmhm1Xyqk_bDo6y-LQABONk"]
[Wed Oct 29 04:12:09 2025] [elconferencista.com] [error] [client 43.130.26.3:38822] [pid 559065] apache2_util.c(271): [client 43.130.26.3] ModSecurity: Warning. Pattern match "\\\\b(?:keep-alive|close),\\\\s?(?:keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "352"] [id "920210"] [msg "Multiple/Conflicting Connection Header Data Found"] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [hostname "www.elconferencista.com"] [uri "/"] [unique_id "aQH2iWhm1Xyqk_bDo6zDqQABOOQ"]
[Wed Oct 29 04:14:44 2025] [elconferencista.com] [error] [client 217.154.189.35:56710] [pid 559065] mod_access_compat.c(350): AH01797: client denied by server configuration: /home/ednermusika/elconferencista.com/wp-admin/plugin-install.php
[Wed Oct 29 04:14:44 2025] [elconferencista.com] [error] [client 217.154.189.35:56710] [pid 559065] mod_access_compat.c(350): AH01797: client denied by server configuration: /home/ednermusika/elconferencista.com/wp-admin/plugin-install.php
[Wed Oct 29 04:14:45 2025] [elconferencista.com] [error] [client 217.154.189.35:56710] [pid 559065] mod_access_compat.c(350): AH01797: client denied by server configuration: /home/ednermusika/elconferencista.com/wp-admin/theme-install.php
[Wed Oct 29 04:14:45 2025] [elconferencista.com] [error] [client 217.154.189.35:56710] [pid 559065] mod_access_compat.c(350): AH01797: client denied by server configuration: /home/ednermusika/elconferencista.com/wp-admin/plugin-install.php
[Wed Oct 29 04:17:30 2025] [elconferencista.com] [error] [client 5.253.0.94:57280] [pid 559065] apache2_util.c(271): [client 5.253.0.94] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "744"] [id "920340"] [msg "Request Containing Content, but Missing Content-Type header"] [severity "NOTICE"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [hostname "www.elconferencista.com"] [uri "/xmlrpc.php"] [unique_id "aQH3ymhm1Xyqk_bDo6zFcAABOSY"]
[Wed Oct 29 04:17:33 2025] [elconferencista.com] [error] [client 4.43.184.114:5658] [pid 559065] ssl_engine_kernel.c(325): AH02032: Hostname missing.dreamhost.org (default host as no SNI was provided) and hostname www.elconferencista.com provided via HTTP have no compatible SSL setup
[Wed Oct 29 04:19:15 2025] [elconferencista.com] [error] [client 54.39.136.176:37676] [pid 559065] apache2_util.c(271): [client 54.39.136.176] ModSecurity: Access denied with code 418 (phase 1). Pattern match "wp-config.php" at ARGS_GET:fileloc. [file "/etc/modsecurity/mod_sec3_CRS/99_dreamhost_rules.conf"] [line "93"] [id "1990071"] [msg "wp-config.php Local File Inclusion Attempt"] [hostname "www.elconferencista.com"] [uri "/"] [unique_id "aQH4M2hm1Xyqk_bDo6zGDQE4qkU"]
[Wed Oct 29 04:31:52 2025] [elconferencista.com] [error] [client 62.4.42.236:8601] [pid 559065] mod_access_compat.c(350): AH01797: client denied by server configuration: /home/ednermusika/elconferencista.com/wp-content/plugins/wp-file-manager/file_folder_manager.php
[Wed Oct 29 04:31:53 2025] [elconferencista.com] [error] [client 62.4.42.236:8601] [pid 559065] mod_access_compat.c(350): AH01797: client denied by server configuration: /home/ednermusika/elconferencista.com/wp-content/plugins/wp-file-manager/file_folder_manager.php
[Wed Oct 29 04:32:18 2025] [elconferencista.com] [error] [client 49.51.33.159:33292] [pid 559065] apache2_util.c(271): [client 49.51.33.159] ModSecurity: Warning. Pattern match "\\\\b(?:keep-alive|close),\\\\s?(?:keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "352"] [id "920210"] [msg "Multiple/Conflicting Connection Header Data Found"] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [hostname "www.elconferencista.com"] [uri "/"] [unique_id "aQH7Qmhm1Xyqk_bDo6zJjgABOPA"]
[Wed Oct 29 04:34:51 2025] [elconferencista.com] [error] [client 15.235.98.216:61908] [pid 559065] apache2_util.c(271): [client 15.235.98.216] ModSecurity: Warning. Matched phrase ".htaccess" at ARGS:fileloc. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: .htaccess found within ARGS:fileloc: /home/ednermusika/elconferencista.com/.htaccess"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "www.elconferencista.com"] [uri "/"] [unique_id "aQH722hm1Xyqk_bDo6zKOgE5U8g"]
[Wed Oct 29 04:37:35 2025] [elconferencista.com] [error] [client 185.203.216.90:38910] [pid 559065] apache2_util.c(271): [client 185.203.216.90] ModSecurity: Warning. Matched phrase ".htaccess" at ARGS:fileloc. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: .htaccess found within ARGS:fileloc: /home/ednermusika/elconferencista.com/.htaccess"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "www.elconferencista.com"] [uri "/conferencistas-famosos-y-el-coaching-motivacional/"] [unique_id "aQH8f2hm1Xyqk_bDo6zLDQABOSc"]
[Wed Oct 29 04:38:17 2025] [elconferencista.com] [error] [client 185.203.216.90:38910] [pid 559065] apache2_util.c(271): [client 185.203.216.90] ModSecurity: Access denied with code 418 (phase 1). Pattern match "wp-config.php" at ARGS_GET:fileloc. [file "/etc/modsecurity/mod_sec3_CRS/99_dreamhost_rules.conf"] [line "93"] [id "1990071"] [msg "wp-config.php Local File Inclusion Attempt"] [hostname "www.elconferencista.com"] [uri "/conferencistas-famosos-y-el-coaching-motivacional/"] [unique_id "aQH8qWhm1Xyqk_bDo6zLRQABOI0"]
[Wed Oct 29 04:40:24 2025] [elconferencista.com] [error] [client 43.130.139.136:53684] [pid 559065] apache2_util.c(271): [client 43.130.139.136] ModSecurity: Warning. Pattern match "\\\\b(?:keep-alive|close),\\\\s?(?:keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "352"] [id "920210"] [msg "Multiple/Conflicting Connection Header Data Found"] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [hostname "www.elconferencista.com"] [uri "/"] [unique_id "aQH9KGhm1Xyqk_bDo6zL5gABOMQ"]
[Wed Oct 29 04:40:24 2025] [elconferencista.com] [error] [client 43.130.139.136:53684] [pid 559065] apache2_util.c(271): [client 43.130.139.136] ModSecurity: Warning. Matched phrase ".htaccess" at ARGS:fileloc. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: .htaccess found within ARGS:fileloc: /home/ednermusika/musikaproducciones.com/.htaccess"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "www.elconferencista.com"] [uri "/"] [unique_id "aQH9KGhm1Xyqk_bDo6zL5gABOMQ"]
[Wed Oct 29 04:49:46 2025] [elconferencista.com] [error] [client 162.62.213.165:46640] [pid 559065] apache2_util.c(271): [client 162.62.213.165] ModSecurity: Warning. Pattern match "\\\\b(?:keep-alive|close),\\\\s?(?:keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "352"] [id "920210"] [msg "Multiple/Conflicting Connection Header Data Found"] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [hostname "www.elconferencista.com"] [uri "/"] [unique_id "aQH_Wmhm1Xyqk_bDo6zOhgABOOA"]
[Wed Oct 29 05:00:11 2025] [elconferencista.com] [error] [client 43.153.58.28:48798] [pid 559065] apache2_util.c(271): [client 43.153.58.28] ModSecurity: Warning. Pattern match "\\\\b(?:keep-alive|close),\\\\s?(?:keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "352"] [id "920210"] [msg "Multiple/Conflicting Connection Header Data Found"] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [hostname "www.elconferencista.com"] [uri "/"] [unique_id "aQIBy2hm1Xyqk_bDo6zThgABOMc"]
[Wed Oct 29 05:05:26 2025] [elconferencista.com] [error] [client 62.4.42.236:8606] [pid 559065] mod_access_compat.c(350): AH01797: client denied by server configuration: /home/ednermusika/elconferencista.com/wp-content/plugins/wp-file-manager/file_folder_manager.php
[Wed Oct 29 05:11:21 2025] [elconferencista.com] [error] [client 43.152.72.247:40688] [pid 559065] apache2_util.c(271): [client 43.152.72.247] ModSecurity: Warning. Pattern match "\\\\b(?:keep-alive|close),\\\\s?(?:keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "352"] [id "920210"] [msg "Multiple/Conflicting Connection Header Data Found"] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [hostname "www.elconferencista.com"] [uri "/"] [unique_id "aQIEaWhm1Xyqk_bDo6zV7QABOK4"]
[Wed Oct 29 05:20:37 2025] [elconferencista.com] [error] [client 43.159.138.217:47996] [pid 559065] apache2_util.c(271): [client 43.159.138.217] ModSecurity: Warning. Pattern match "\\\\b(?:keep-alive|close),\\\\s?(?:keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "352"] [id "920210"] [msg "Multiple/Conflicting Connection Header Data Found"] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [hostname "www.elconferencista.com"] [uri "/"] [unique_id "aQIGlWhm1Xyqk_bDo6zYjQABOII"]
[Wed Oct 29 05:29:26 2025] [elconferencista.com] [error] [client 62.4.42.236:9069] [pid 559065] mod_access_compat.c(350): AH01797: client denied by server configuration: /home/ednermusika/elconferencista.com/wp-content/plugins/wp-file-manager/file_folder_manager.php
[Wed Oct 29 05:31:40 2025] [elconferencista.com] [error] [client 43.173.1.69:44480] [pid 559065] apache2_util.c(271): [client 43.173.1.69] ModSecurity: Warning. Pattern match "\\\\b(?:keep-alive|close),\\\\s?(?:keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "352"] [id "920210"] [msg "Multiple/Conflicting Connection Header Data Found"] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [hostname "www.elconferencista.com"] [uri "/"] [unique_id "aQIJLGhm1Xyqk_bDo6zcHwABOUU"]
[Wed Oct 29 05:45:51 2025] [elconferencista.com] [error] [client 43.130.40.120:52570] [pid 559065] apache2_util.c(271): [client 43.130.40.120] ModSecurity: Warning. Pattern match "\\\\b(?:keep-alive|close),\\\\s?(?:keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "352"] [id "920210"] [msg "Multiple/Conflicting Connection Header Data Found"] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [hostname "www.elconferencista.com"] [uri "/"] [unique_id "aQIMf2hm1Xyqk_bDo6zhmwABOVg"]
[Wed Oct 29 05:51:56 2025] [elconferencista.com] [error] [client 217.154.5.38:42104] [pid 559065] apache2_util.c(271): [client 217.154.5.38] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "744"] [id "920340"] [msg "Request Containing Content, but Missing Content-Type header"] [severity "NOTICE"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [hostname "www.elconferencista.com"] [uri "/xmlrpc.php"] [unique_id "aQIN7Ghm1Xyqk_bDo6zkLwABOQ0"]
[Wed Oct 29 05:56:26 2025] [elconferencista.com] [error] [client 43.164.196.57:57682] [pid 1716501] apache2_util.c(271): [client 43.164.196.57] ModSecurity: Warning. Pattern match "\\\\b(?:keep-alive|close),\\\\s?(?:keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "352"] [id "920210"] [msg "Multiple/Conflicting Connection Header Data Found"] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [hostname "www.elconferencista.com"] [uri "/"] [unique_id "aQIO-ok8mFoFdWjy90PhIgABh0U"]
[Wed Oct 29 05:56:32 2025] [elconferencista.com] [error] [client 2.57.122.48:38300] [pid 1716501] apache2_util.c(271): [client 2.57.122.48] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "143"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "www.elconferencista.com"] [uri "/.git/config"] [unique_id "aQIPAIk8mFoFdWjy90PhMAABh1o"]
[Wed Oct 29 05:59:14 2025] [elconferencista.com] [error] [client 51.222.168.90:29242] [pid 1716501] apache2_util.c(271): [client 51.222.168.90] ModSecurity: Warning. Matched phrase ".htaccess" at ARGS:fileloc. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: .htaccess found within ARGS:fileloc: /home/ednermusika/elconferencista.com/wp-includes/customize/.htaccess"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "www.elconferencista.com"] [uri "/"] [unique_id "aQIPook8mFoFdWjy90PipQGHK5E"]
[Wed Oct 29 06:04:34 2025] [elconferencista.com] [error] [client 43.153.58.28:47236] [pid 1716501] apache2_util.c(271): [client 43.153.58.28] ModSecurity: Warning. Pattern match "\\\\b(?:keep-alive|close),\\\\s?(?:keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "352"] [id "920210"] [msg "Multiple/Conflicting Connection Header Data Found"] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [hostname "www.elconferencista.com"] [uri "/"] [unique_id "aQIQ4ok8mFoFdWjy90PkjgABhsc"]
[Wed Oct 29 06:15:21 2025] [elconferencista.com] [error] [client 170.106.192.3:46168] [pid 1716501] apache2_util.c(271): [client 170.106.192.3] ModSecurity: Warning. Pattern match "\\\\b(?:keep-alive|close),\\\\s?(?:keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "352"] [id "920210"] [msg "Multiple/Conflicting Connection Header Data Found"] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [hostname "www.elconferencista.com"] [uri "/"] [unique_id "aQITaYk8mFoFdWjy90PoVQABhuw"]
[Wed Oct 29 06:18:08 2025] [elconferencista.com] [error] [client 49.51.47.100:47536] [pid 1716501] apache2_util.c(271): [client 49.51.47.100] ModSecurity: Warning. Pattern match "\\\\b(?:keep-alive|close),\\\\s?(?:keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "352"] [id "920210"] [msg "Multiple/Conflicting Connection Header Data Found"] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [hostname "www.elconferencista.com"] [uri "/"] [unique_id "aQIUEIk8mFoFdWjy90PpPgABhwU"]
[Wed Oct 29 06:25:44 2025] [elconferencista.com] [error] [client 43.130.174.37:42104] [pid 1716501] apache2_util.c(271): [client 43.130.174.37] ModSecurity: Warning. Pattern match "\\\\b(?:keep-alive|close),\\\\s?(?:keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "352"] [id "920210"] [msg "Multiple/Conflicting Connection Header Data Found"] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [hostname "www.elconferencista.com"] [uri "/"] [unique_id "aQIV2Ik8mFoFdWjy90PrPAABhvk"]
[Wed Oct 29 06:36:51 2025] [elconferencista.com] [error] [client 43.153.54.14:37640] [pid 1716501] apache2_util.c(271): [client 43.153.54.14] ModSecurity: Warning. Pattern match "\\\\b(?:keep-alive|close),\\\\s?(?:keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "352"] [id "920210"] [msg "Multiple/Conflicting Connection Header Data Found"] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [hostname "www.elconferencista.com"] [uri "/"] [unique_id "aQIYc4k8mFoFdWjy90Px3AABhuk"]
[Wed Oct 29 06:50:46 2025] [elconferencista.com] [error] [client 43.153.26.165:50360] [pid 1716501] apache2_util.c(271): [client 43.153.26.165] ModSecurity: Warning. Pattern match "\\\\b(?:keep-alive|close),\\\\s?(?:keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "352"] [id "920210"] [msg "Multiple/Conflicting Connection Header Data Found"] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [hostname "www.elconferencista.com"] [uri "/"] [unique_id "aQIbtok8mFoFdWjy90P28AABh3M"]
[Wed Oct 29 06:51:27 2025] [elconferencista.com] [error] [client 2.57.122.48:57990] [pid 1716501] apache2_util.c(271): [client 2.57.122.48] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "143"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "www.elconferencista.com"] [uri "/.git/config"] [unique_id "aQIb34k8mFoFdWjy90P3TwABh2U"]
[Wed Oct 29 06:55:21 2025] [elconferencista.com] [error] [client 54.39.136.210:35520] [pid 1716501] apache2_util.c(271): [client 54.39.136.210] ModSecurity: Warning. Matched phrase ".htaccess" at ARGS:fileloc. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: .htaccess found within ARGS:fileloc: /home/ednermusika/elconferencista.com/wp-content/litespeed/.htaccess"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "www.elconferencista.com"] [uri "/"] [unique_id "aQIcyYk8mFoFdWjy90P4gQGHdI8"]
[Wed Oct 29 06:56:11 2025] [elconferencista.com] [error] [client 170.106.35.153:34212] [pid 1716501] mod_access_compat.c(350): AH01797: client denied by server configuration: /home/ednermusika/elconferencista.com/wp-admin/upgrade.php
[Wed Oct 29 07:06:24 2025] [elconferencista.com] [error] [client 43.135.142.37:41908] [pid 1716501] mod_access_compat.c(350): AH01797: client denied by server configuration: /home/ednermusika/elconferencista.com/wp-admin/install.php
[Wed Oct 29 07:13:52 2025] [elconferencista.com] [error] [client 43.166.129.247:50466] [pid 1716501] apache2_util.c(271): [client 43.166.129.247] ModSecurity: Warning. Pattern match "\\\\b(?:keep-alive|close),\\\\s?(?:keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "352"] [id "920210"] [msg "Multiple/Conflicting Connection Header Data Found"] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [hostname "www.elconferencista.com"] [uri "/"] [unique_id "aQIhIIk8mFoFdWjy90P-qAABhq0"]
[Wed Oct 29 07:35:44 2025] [elconferencista.com] [error] [client 43.130.74.193:39234] [pid 2309628] apache2_util.c(271): [client 43.130.74.193] ModSecurity: Warning. Pattern match "\\\\b(?:keep-alive|close),\\\\s?(?:keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "352"] [id "920210"] [msg "Multiple/Conflicting Connection Header Data Found"] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [hostname "www.elconferencista.com"] [uri "/"] [unique_id "aQImQFg7dgb7JPlU8ikuzAABORs"]
[Wed Oct 29 07:46:52 2025] [elconferencista.com] [error] [client 43.153.49.151:48704] [pid 2309628] apache2_util.c(271): [client 43.153.49.151] ModSecurity: Warning. Pattern match "\\\\b(?:keep-alive|close),\\\\s?(?:keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "352"] [id "920210"] [msg "Multiple/Conflicting Connection Header Data Found"] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [hostname "www.elconferencista.com"] [uri "/"] [unique_id "aQIo3Fg7dgb7JPlU8ikzDgABOV0"]
[Wed Oct 29 07:56:30 2025] [elconferencista.com] [error] [client 43.135.133.241:35328] [pid 2309628] mod_access_compat.c(350): AH01797: client denied by server configuration: /home/ednermusika/elconferencista.com/wp-admin/upgrade.php
[Wed Oct 29 08:17:24 2025] [elconferencista.com] [error] [client 43.159.152.4:40464] [pid 2309628] apache2_util.c(271): [client 43.159.152.4] ModSecurity: Warning. Pattern match "\\\\b(?:keep-alive|close),\\\\s?(?:keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "352"] [id "920210"] [msg "Multiple/Conflicting Connection Header Data Found"] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [hostname "www.elconferencista.com"] [uri "/"] [unique_id "aQIwBFg7dgb7JPlU8ilAmAABOU8"]
[Wed Oct 29 08:24:02 2025] [elconferencista.com] [error] [client 43.157.148.38:55946] [pid 2309628] apache2_util.c(271): [client 43.157.148.38] ModSecurity: Warning. Pattern match "\\\\b(?:keep-alive|close),\\\\s?(?:keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "352"] [id "920210"] [msg "Multiple/Conflicting Connection Header Data Found"] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [hostname "www.elconferencista.com"] [uri "/"] [unique_id "aQIxklg7dgb7JPlU8ilCcQABOVA"]
[Wed Oct 29 08:35:42 2025] [elconferencista.com] [error] [client 43.153.119.119:60462] [pid 2309628] apache2_util.c(271): [client 43.153.119.119] ModSecurity: Warning. Pattern match "\\\\b(?:keep-alive|close),\\\\s?(?:keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "352"] [id "920210"] [msg "Multiple/Conflicting Connection Header Data Found"] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [hostname "www.elconferencista.com"] [uri "/"] [unique_id "aQI0Tlg7dgb7JPlU8ilE9gABOVs"]
[Wed Oct 29 09:49:26 2025] [elconferencista.com] [error] [client 4.43.184.114:57626] [pid 2309628] ssl_engine_kernel.c(325): AH02032: Hostname missing.dreamhost.org (default host as no SNI was provided) and hostname www.elconferencista.com provided via HTTP have no compatible SSL setup
[Wed Oct 29 10:33:18 2025] [elconferencista.com] [error] [client 157.66.56.152:55775] [pid 370562] apache2_util.c(271): [client 157.66.56.152] ModSecurity: Warning. Matched phrase "/sftp-config.json" at REQUEST_FILENAME. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "143"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /sftp-config.json found within REQUEST_FILENAME: /sftp-config.json"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "www.elconferencista.com"] [uri "/sftp-config.json"] [unique_id "aQJP3hKu2ArKfKrgVYGQeQABhwU"]
[Wed Oct 29 10:33:19 2025] [elconferencista.com] [error] [client 157.66.56.152:62692] [pid 370562] apache2_util.c(271): [client 157.66.56.152] ModSecurity: Warning. Matched phrase ".vscode" at REQUEST_FILENAME. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "143"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: .vscode found within REQUEST_FILENAME: /.vscode/sftp.json"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "www.elconferencista.com"] [uri "/.vscode/sftp.json"] [unique_id "aQJP3xKu2ArKfKrgVYGQewABhxM"]
[Wed Oct 29 11:51:03 2025] [elconferencista.com] [error] [client 45.61.161.80:54095] [pid 370562] mod_access_compat.c(350): AH01797: client denied by server configuration: /home/ednermusika/elconferencista.com/wp-admin/plugin-install.php
[Wed Oct 29 11:51:03 2025] [elconferencista.com] [error] [client 45.61.161.80:54095] [pid 370562] mod_access_compat.c(350): AH01797: client denied by server configuration: /home/ednermusika/elconferencista.com/wp-admin/plugin-install.php
[Wed Oct 29 11:51:04 2025] [elconferencista.com] [error] [client 45.61.161.80:54095] [pid 370562] mod_access_compat.c(350): AH01797: client denied by server configuration: /home/ednermusika/elconferencista.com/wp-admin/theme-install.php
[Wed Oct 29 11:51:04 2025] [elconferencista.com] [error] [client 45.61.161.80:54095] [pid 370562] mod_access_compat.c(350): AH01797: client denied by server configuration: /home/ednermusika/elconferencista.com/wp-admin/plugin-install.php
[Wed Oct 29 12:03:52 2025] [elconferencista.com] [error] [client 207.180.251.11:38692] [pid 370562] apache2_util.c(271): [client 207.180.251.11] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "744"] [id "920340"] [msg "Request Containing Content, but Missing Content-Type header"] [severity "NOTICE"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [hostname "www.elconferencista.com"] [uri "/xmlrpc.php"] [unique_id "aQJlGBKu2ArKfKrgVYG4_wABhwc"]
[Wed Oct 29 12:19:08 2025] [elconferencista.com] [error] [client 15.181.1.78:62545] [pid 1330895] apache2_util.c(271): [client 15.181.1.78] ModSecurity: Access denied with code 418 (phase 1). Pattern match "wp-config.php" at ARGS_GET:fileloc. [file "/etc/modsecurity/mod_sec3_CRS/99_dreamhost_rules.conf"] [line "93"] [id "1990071"] [msg "wp-config.php Local File Inclusion Attempt"] [hostname "www.elconferencista.com"] [uri "/"] [unique_id "aQJorJ-Q1vxnGne_9gMdNAABOSU"]
[Wed Oct 29 12:19:10 2025] [elconferencista.com] [error] [client 15.181.1.78:62566] [pid 1330895] apache2_util.c(271): [client 15.181.1.78] ModSecurity: Warning. Matched phrase ".htaccess" at ARGS:fileloc. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: .htaccess found within ARGS:fileloc: /home/ednermusika/elconferencista.com/.htaccess"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "www.elconferencista.com"] [uri "/"] [unique_id "aQJorp-Q1vxnGne_9gMdOwABOU0"]
[Wed Oct 29 12:29:13 2025] [elconferencista.com] [error] [client 51.91.24.65:52856] [pid 1330895] apache2_util.c(271): [client 51.91.24.65] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "744"] [id "920340"] [msg "Request Containing Content, but Missing Content-Type header"] [severity "NOTICE"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [hostname "www.elconferencista.com"] [uri "/xmlrpc.php"] [unique_id "aQJrCZ-Q1vxnGne_9gMgNgABOR4"]
[Wed Oct 29 13:11:24 2025] [elconferencista.com] [error] [client 54.39.0.11:50876] [pid 1330895] apache2_util.c(271): [client 54.39.0.11] ModSecurity: Warning. Matched phrase ".htaccess" at ARGS:fileloc. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: .htaccess found within ARGS:fileloc: /home/ednermusika/elconferencista.com/wp-includes/js/swfupload/.htaccess"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "www.elconferencista.com"] [uri "/"] [unique_id "aQJ07J-Q1vxnGne_9gMzXwE5K8g"]
[Wed Oct 29 13:15:22 2025] [elconferencista.com] [error] [client 107.180.242.112:48898] [pid 1330895] apache2_util.c(271): [client 107.180.242.112] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "744"] [id "920340"] [msg "Request Containing Content, but Missing Content-Type header"] [severity "NOTICE"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [hostname "www.elconferencista.com"] [uri "/xmlrpc.php"] [unique_id "aQJ12p-Q1vxnGne_9gM1wgABOLA"]
[Wed Oct 29 13:55:35 2025] [elconferencista.com] [error] [client 139.59.156.192:62270] [pid 1330895] mod_access_compat.c(350): AH01797: client denied by server configuration: /home/ednermusika/elconferencista.com/wp-admin/plugin-install.php
[Wed Oct 29 14:12:28 2025] [elconferencista.com] [error] [client 62.4.42.236:12587] [pid 1330895] mod_access_compat.c(350): AH01797: client denied by server configuration: /home/ednermusika/elconferencista.com/wp-content/plugins/wp-file-manager/file_folder_manager.php
[Wed Oct 29 14:42:43 2025] [elconferencista.com] [error] [client 35.226.125.165:46642] [pid 2234217] apache2_util.c(271): [client 35.226.125.165] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "744"] [id "920340"] [msg "Request Containing Content, but Missing Content-Type header"] [severity "NOTICE"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [hostname "www.elconferencista.com"] [uri "/xmlrpc.php"] [unique_id "aQKKU9SIr0NhDQ_Okp04sAABhwI"]
[Wed Oct 29 15:42:51 2025] [elconferencista.com] [error] [client 15.235.98.230:16992] [pid 2234217] apache2_util.c(271): [client 15.235.98.230] ModSecurity: Warning. Matched phrase "var/spool" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: var/spool found within ARGS:path: /var/spool"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "www.elconferencista.com"] [uri "/"] [unique_id "aQKYa9SIr0NhDQ_Okp1PFwGHfLE"]
[Wed Oct 29 16:10:01 2025] [elconferencista.com] [error] [client 157.230.98.69:36244] [pid 2234217] apache2_util.c(271): [client 157.230.98.69] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "744"] [id "920340"] [msg "Request Containing Content, but Missing Content-Type header"] [severity "NOTICE"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [hostname "www.elconferencista.com"] [uri "/xmlrpc.php"] [unique_id "aQKeydSIr0NhDQ_Okp1XpAABhyY"]
[Wed Oct 29 17:06:20 2025] [elconferencista.com] [error] [client 54.39.203.44:23404] [pid 218014] apache2_util.c(271): [client 54.39.203.44] ModSecurity: Warning. Matched phrase ".bash_" at ARGS:fileloc. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: .bash_ found within ARGS:fileloc: /home/ednermusika/.bash_profile"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "www.elconferencista.com"] [uri "/"] [unique_id "aQKr_FvA8_oinNKpYsgAyAE4px8"]
[Wed Oct 29 17:30:11 2025] [elconferencista.com] [error] [client 167.114.139.185:55668] [pid 218014] apache2_util.c(271): [client 167.114.139.185] ModSecurity: Warning. Matched phrase "var/spool" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: var/spool found within ARGS:path: /var/spool/mail"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "www.elconferencista.com"] [uri "/"] [unique_id "aQKxk1vA8_oinNKpYsgLBAE4g9s"]
[Wed Oct 29 17:35:54 2025] [elconferencista.com] [error] [client 2.57.122.48:46876] [pid 218014] apache2_util.c(271): [client 2.57.122.48] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "143"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "elconferencista.com"] [uri "/.git/config"] [unique_id "aQKy6lvA8_oinNKpYsgMjwABOI8"]
[Wed Oct 29 18:25:10 2025] [elconferencista.com] [error] [client 35.154.199.86:53546] [pid 218014] apache2_util.c(271): [client 35.154.199.86] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "744"] [id "920340"] [msg "Request Containing Content, but Missing Content-Type header"] [severity "NOTICE"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [hostname "www.elconferencista.com"] [uri "/xmlrpc.php"] [unique_id "aQK-dlvA8_oinNKpYsgczwABOVE"]
[Wed Oct 29 18:30:05 2025] [elconferencista.com] [error] [client 144.76.68.76:46098] [pid 218014] apache2_util.c(271): [client 144.76.68.76] ModSecurity: Access denied with code 418 (phase 1). Pattern match "wp-config.php" at ARGS_GET:fileloc. [file "/etc/modsecurity/mod_sec3_CRS/99_dreamhost_rules.conf"] [line "93"] [id "1990071"] [msg "wp-config.php Local File Inclusion Attempt"] [hostname "www.elconferencista.com"] [uri "/conferencias/"] [unique_id "aQK_nVvA8_oinNKpYsgePAABONc"]
[Wed Oct 29 18:31:16 2025] [elconferencista.com] [error] [client 144.76.68.76:42526] [pid 218014] apache2_util.c(271): [client 144.76.68.76] ModSecurity: Warning. Matched phrase ".htaccess" at ARGS:fileloc. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: .htaccess found within ARGS:fileloc: /home/ednermusika/elconferencista.com/.htaccess"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "www.elconferencista.com"] [uri "/conferencias/"] [unique_id "aQK_5FvA8_oinNKpYsgepAABOPM"]
[Wed Oct 29 18:34:07 2025] [elconferencista.com] [error] [client 144.76.68.76:59856] [pid 218014] apache2_util.c(271): [client 144.76.68.76] ModSecurity: Access denied with code 418 (phase 1). Pattern match "wp-config.php" at ARGS_GET:fileloc. [file "/etc/modsecurity/mod_sec3_CRS/99_dreamhost_rules.conf"] [line "93"] [id "1990071"] [msg "wp-config.php Local File Inclusion Attempt"] [hostname "www.elconferencista.com"] [uri "/conferencias-edner/9-conferencias-motivacion-y-crecimiento-personal-tu-vida-de-subida/"] [unique_id "aQLAj1vA8_oinNKpYsgf3wABOJ8"]
[Wed Oct 29 18:34:50 2025] [elconferencista.com] [error] [client 144.76.68.76:48720] [pid 218014] apache2_util.c(271): [client 144.76.68.76] ModSecurity: Warning. Matched phrase ".htaccess" at ARGS:fileloc. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: .htaccess found within ARGS:fileloc: /home/ednermusika/elconferencista.com/.htaccess"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "www.elconferencista.com"] [uri "/conferencias-edner/9-conferencias-motivacion-y-crecimiento-personal-tu-vida-de-subida/"] [unique_id "aQLAulvA8_oinNKpYsggKwABOTk"]
[Wed Oct 29 18:38:11 2025] [elconferencista.com] [error] [client 144.76.68.76:35984] [pid 218014] apache2_util.c(271): [client 144.76.68.76] ModSecurity: Access denied with code 418 (phase 1). Pattern match "wp-config.php" at ARGS_GET:fileloc. [file "/etc/modsecurity/mod_sec3_CRS/99_dreamhost_rules.conf"] [line "93"] [id "1990071"] [msg "wp-config.php Local File Inclusion Attempt"] [hostname "www.elconferencista.com"] [uri "/conferencias-edner/8-conferencia-de-la-vision-a-la-accion/"] [unique_id "aQLBg1vA8_oinNKpYsghXgABOP4"]
[Wed Oct 29 18:39:09 2025] [elconferencista.com] [error] [client 144.76.68.76:51404] [pid 218014] apache2_util.c(271): [client 144.76.68.76] ModSecurity: Warning. Matched phrase ".htaccess" at ARGS:fileloc. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: .htaccess found within ARGS:fileloc: /home/ednermusika/elconferencista.com/.htaccess"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "www.elconferencista.com"] [uri "/conferencias-edner/8-conferencia-de-la-vision-a-la-accion/"] [unique_id "aQLBvVvA8_oinNKpYsghlgABOV4"]
[Wed Oct 29 18:41:31 2025] [elconferencista.com] [error] [client 144.76.68.76:53078] [pid 218014] apache2_util.c(271): [client 144.76.68.76] ModSecurity: Access denied with code 418 (phase 1). Pattern match "wp-config.php" at ARGS_GET:fileloc. [file "/etc/modsecurity/mod_sec3_CRS/99_dreamhost_rules.conf"] [line "93"] [id "1990071"] [msg "wp-config.php Local File Inclusion Attempt"] [hostname "www.elconferencista.com"] [uri "/conferencias-edner/7-conferencias-manejo-de-estres-estres-o-es-cuatro/"] [unique_id "aQLCS1vA8_oinNKpYsgiTQABOJ4"]
[Wed Oct 29 18:43:02 2025] [elconferencista.com] [error] [client 144.76.68.76:41964] [pid 218014] apache2_util.c(271): [client 144.76.68.76] ModSecurity: Warning. Matched phrase ".htaccess" at ARGS:fileloc. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: .htaccess found within ARGS:fileloc: /home/ednermusika/elconferencista.com/.htaccess"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "www.elconferencista.com"] [uri "/conferencias-edner/7-conferencias-manejo-de-estres-estres-o-es-cuatro/"] [unique_id "aQLCplvA8_oinNKpYsgjEwABOJ0"]
[Wed Oct 29 18:45:15 2025] [elconferencista.com] [error] [client 144.76.68.76:49888] [pid 218014] apache2_util.c(271): [client 144.76.68.76] ModSecurity: Access denied with code 418 (phase 1). Pattern match "wp-config.php" at ARGS_GET:fileloc. [file "/etc/modsecurity/mod_sec3_CRS/99_dreamhost_rules.conf"] [line "93"] [id "1990071"] [msg "wp-config.php Local File Inclusion Attempt"] [hostname "www.elconferencista.com"] [uri "/conferencias-edner/6-conferencia-marca-personal-yo-branding-personal-en-tiempos-de-torbellino/"] [unique_id "aQLDK1vA8_oinNKpYsgjqwABOSY"]
[Wed Oct 29 18:46:50 2025] [elconferencista.com] [error] [client 144.76.68.76:41574] [pid 218014] apache2_util.c(271): [client 144.76.68.76] ModSecurity: Warning. Matched phrase ".htaccess" at ARGS:fileloc. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: .htaccess found within ARGS:fileloc: /home/ednermusika/elconferencista.com/.htaccess"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "www.elconferencista.com"] [uri "/conferencias-edner/6-conferencia-marca-personal-yo-branding-personal-en-tiempos-de-torbellino/"] [unique_id "aQLDilvA8_oinNKpYsgkUQABOL4"]
[Wed Oct 29 18:49:45 2025] [elconferencista.com] [error] [client 144.76.68.76:40584] [pid 218014] apache2_util.c(271): [client 144.76.68.76] ModSecurity: Access denied with code 418 (phase 1). Pattern match "wp-config.php" at ARGS_GET:fileloc. [file "/etc/modsecurity/mod_sec3_CRS/99_dreamhost_rules.conf"] [line "93"] [id "1990071"] [msg "wp-config.php Local File Inclusion Attempt"] [hostname "www.elconferencista.com"] [uri "/conferencias-edner/5-conferencia-innovas-y-si-vas/"] [unique_id "aQLEOVvA8_oinNKpYsglEQABONY"]
[Wed Oct 29 18:51:07 2025] [elconferencista.com] [error] [client 144.76.68.76:36540] [pid 218014] apache2_util.c(271): [client 144.76.68.76] ModSecurity: Warning. Matched phrase ".htaccess" at ARGS:fileloc. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: .htaccess found within ARGS:fileloc: /home/ednermusika/elconferencista.com/.htaccess"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "www.elconferencista.com"] [uri "/conferencias-edner/5-conferencia-innovas-y-si-vas/"] [unique_id "aQLEi1vA8_oinNKpYsgljAABOV8"]
[Wed Oct 29 18:53:42 2025] [elconferencista.com] [error] [client 37.19.221.51:57574] [pid 218014] apache2_util.c(271): [client 37.19.221.51] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "744"] [id "920340"] [msg "Request Containing Content, but Missing Content-Type header"] [severity "NOTICE"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [hostname "elconferencista.com"] [uri "/xmlrpc.php"] [unique_id "aQLFJlvA8_oinNKpYsgoSAABOQo"]
[Wed Oct 29 18:54:33 2025] [elconferencista.com] [error] [client 144.76.68.76:38034] [pid 218014] apache2_util.c(271): [client 144.76.68.76] ModSecurity: Access denied with code 418 (phase 1). Pattern match "wp-config.php" at ARGS_GET:fileloc. [file "/etc/modsecurity/mod_sec3_CRS/99_dreamhost_rules.conf"] [line "93"] [id "1990071"] [msg "wp-config.php Local File Inclusion Attempt"] [hostname "www.elconferencista.com"] [uri "/conferencias-edner/4-conferencia-vendiendo-a-1000/"] [unique_id "aQLFWVvA8_oinNKpYsgo2wABOJk"]
[Wed Oct 29 18:55:42 2025] [elconferencista.com] [error] [client 144.76.68.76:33812] [pid 218014] apache2_util.c(271): [client 144.76.68.76] ModSecurity: Warning. Matched phrase ".htaccess" at ARGS:fileloc. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: .htaccess found within ARGS:fileloc: /home/ednermusika/elconferencista.com/.htaccess"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "www.elconferencista.com"] [uri "/conferencias-edner/4-conferencia-vendiendo-a-1000/"] [unique_id "aQLFnlvA8_oinNKpYsgpLAABOP0"]
[Wed Oct 29 18:59:16 2025] [elconferencista.com] [error] [client 144.76.68.76:35148] [pid 218014] apache2_util.c(271): [client 144.76.68.76] ModSecurity: Warning. Matched phrase ".htaccess" at ARGS:fileloc. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: .htaccess found within ARGS:fileloc: /home/ednermusika/elconferencista.com/.htaccess"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "www.elconferencista.com"] [uri "/conferencias-edner/12-conferencias-comunicacion-comunicacion-de-alto-impacto-para-lideres-de-alto-impacto/"] [unique_id "aQLGdFvA8_oinNKpYsgrQgABOQQ"]
[Wed Oct 29 19:02:50 2025] [elconferencista.com] [error] [client 144.76.68.76:39156] [pid 218014] apache2_util.c(271): [client 144.76.68.76] ModSecurity: Access denied with code 418 (phase 1). Pattern match "wp-config.php" at ARGS_GET:fileloc. [file "/etc/modsecurity/mod_sec3_CRS/99_dreamhost_rules.conf"] [line "93"] [id "1990071"] [msg "wp-config.php Local File Inclusion Attempt"] [hostname "www.elconferencista.com"] [uri "/conferencias-edner/11-conferencias-motivacion-y-crecimiento-personal-si-ves-para-arriba-se-ve-diferente/"] [unique_id "aQLHSlvA8_oinNKpYsgshAABONs"]
[Wed Oct 29 19:04:11 2025] [elconferencista.com] [error] [client 144.76.68.76:37914] [pid 218014] apache2_util.c(271): [client 144.76.68.76] ModSecurity: Warning. Matched phrase ".htaccess" at ARGS:fileloc. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: .htaccess found within ARGS:fileloc: /home/ednermusika/elconferencista.com/.htaccess"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "www.elconferencista.com"] [uri "/conferencias-edner/11-conferencias-motivacion-y-crecimiento-personal-si-ves-para-arriba-se-ve-diferente/"] [unique_id "aQLHm1vA8_oinNKpYsgtHQABORM"]
[Wed Oct 29 19:08:51 2025] [elconferencista.com] [error] [client 144.76.68.76:60998] [pid 218014] apache2_util.c(271): [client 144.76.68.76] ModSecurity: Access denied with code 418 (phase 1). Pattern match "wp-config.php" at ARGS_GET:fileloc. [file "/etc/modsecurity/mod_sec3_CRS/99_dreamhost_rules.conf"] [line "93"] [id "1990071"] [msg "wp-config.php Local File Inclusion Attempt"] [hostname "www.elconferencista.com"] [uri "/conferencias-edner/10-conferencias-emociones-flojito-y-cooperando/"] [unique_id "aQLIs1vA8_oinNKpYsgu8AABOVI"]
[Wed Oct 29 19:09:04 2025] [elconferencista.com] [error] [client 144.76.68.76:38240] [pid 218014] apache2_util.c(271): [client 144.76.68.76] ModSecurity: Access denied with code 418 (phase 1). Pattern match "wp-config.php" at ARGS_GET:fileloc. [file "/etc/modsecurity/mod_sec3_CRS/99_dreamhost_rules.conf"] [line "93"] [id "1990071"] [msg "wp-config.php Local File Inclusion Attempt"] [hostname "www.elconferencista.com"] [uri "/conferencias-edner/3-conferencia-las-4-as-del-lider-del-futuro-presente/"] [unique_id "aQLIwFvA8_oinNKpYsgu_QABOJs"]
[Wed Oct 29 19:10:35 2025] [elconferencista.com] [error] [client 144.76.68.76:35460] [pid 218014] apache2_util.c(271): [client 144.76.68.76] ModSecurity: Warning. Matched phrase ".htaccess" at ARGS:fileloc. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: .htaccess found within ARGS:fileloc: /home/ednermusika/elconferencista.com/.htaccess"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "www.elconferencista.com"] [uri "/conferencias-edner/10-conferencias-emociones-flojito-y-cooperando/"] [unique_id "aQLJG1vA8_oinNKpYsgv9wABOPA"]
[Wed Oct 29 19:11:03 2025] [elconferencista.com] [error] [client 144.76.68.76:40904] [pid 218014] apache2_util.c(271): [client 144.76.68.76] ModSecurity: Warning. Matched phrase ".htaccess" at ARGS:fileloc. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: .htaccess found within ARGS:fileloc: /home/ednermusika/elconferencista.com/.htaccess"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "www.elconferencista.com"] [uri "/conferencias-edner/3-conferencia-las-4-as-del-lider-del-futuro-presente/"] [unique_id "aQLJN1vA8_oinNKpYsgwGQABOQM"]
[Wed Oct 29 19:16:36 2025] [elconferencista.com] [error] [client 144.76.68.76:60378] [pid 218014] apache2_util.c(271): [client 144.76.68.76] ModSecurity: Access denied with code 418 (phase 1). Pattern match "wp-config.php" at ARGS_GET:fileloc. [file "/etc/modsecurity/mod_sec3_CRS/99_dreamhost_rules.conf"] [line "93"] [id "1990071"] [msg "wp-config.php Local File Inclusion Attempt"] [hostname "www.elconferencista.com"] [uri "/conferencias-edner/1-conferencia-ir-mas-alla-nuestra-conferencia-estrella-ideal-para-juntas-de-planeacion-y-reuniones-de-fijacion-de-objetivos/"] [unique_id "aQLKhFvA8_oinNKpYsgyDwABOVA"]
[Wed Oct 29 19:17:43 2025] [elconferencista.com] [error] [client 144.76.68.76:44456] [pid 218014] apache2_util.c(271): [client 144.76.68.76] ModSecurity: Access denied with code 418 (phase 1). Pattern match "wp-config.php" at ARGS_GET:fileloc. [file "/etc/modsecurity/mod_sec3_CRS/99_dreamhost_rules.conf"] [line "93"] [id "1990071"] [msg "wp-config.php Local File Inclusion Attempt"] [hostname "www.elconferencista.com"] [uri "/conferencias-edner/2-conferencia-reinventandonos-en-tiempos-criticos/"] [unique_id "aQLKx1vA8_oinNKpYsgyVgABOQQ"]
[Wed Oct 29 19:19:38 2025] [elconferencista.com] [error] [client 144.76.68.76:50946] [pid 218014] apache2_util.c(271): [client 144.76.68.76] ModSecurity: Warning. Matched phrase ".htaccess" at ARGS:fileloc. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: .htaccess found within ARGS:fileloc: /home/ednermusika/elconferencista.com/.htaccess"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "www.elconferencista.com"] [uri "/conferencias-edner/1-conferencia-ir-mas-alla-nuestra-conferencia-estrella-ideal-para-juntas-de-planeacion-y-reuniones-de-fijacion-de-objetivos/"] [unique_id "aQLLOlvA8_oinNKpYsgyygABOVo"]
[Wed Oct 29 19:19:48 2025] [elconferencista.com] [error] [client 144.76.68.76:54216] [pid 218014] apache2_util.c(271): [client 144.76.68.76] ModSecurity: Warning. Matched phrase ".htaccess" at ARGS:fileloc. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: .htaccess found within ARGS:fileloc: /home/ednermusika/elconferencista.com/.htaccess"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "www.elconferencista.com"] [uri "/conferencias-edner/2-conferencia-reinventandonos-en-tiempos-criticos/"] [unique_id "aQLLRFvA8_oinNKpYsgy0gABOKE"]
[Wed Oct 29 19:25:50 2025] [elconferencista.com] [error] [client 144.76.68.76:49240] [pid 1197135] apache2_util.c(271): [client 144.76.68.76] ModSecurity: Access denied with code 418 (phase 1). Pattern match "wp-config.php" at ARGS_GET:fileloc. [file "/etc/modsecurity/mod_sec3_CRS/99_dreamhost_rules.conf"] [line "93"] [id "1990071"] [msg "wp-config.php Local File Inclusion Attempt"] [hostname "www.elconferencista.com"] [uri "/"] [unique_id "aQLMrvPAp1Qcj3AGlRwOGgABhz8"]
[Wed Oct 29 19:26:37 2025] [elconferencista.com] [error] [client 144.76.68.76:60892] [pid 1197135] apache2_util.c(271): [client 144.76.68.76] ModSecurity: Access denied with code 418 (phase 1). Pattern match "wp-config.php" at ARGS_GET:fileloc. [file "/etc/modsecurity/mod_sec3_CRS/99_dreamhost_rules.conf"] [line "93"] [id "1990071"] [msg "wp-config.php Local File Inclusion Attempt"] [hostname "www.elconferencista.com"] [uri "/conferencias-edner/14-conferencias-motivacion-y-crecimiento-personal-ser-quien-suenas-ser/"] [unique_id "aQLM3fPAp1Qcj3AGlRwOQgABhr4"]
[Wed Oct 29 19:28:57 2025] [elconferencista.com] [error] [client 144.76.68.76:42558] [pid 1197135] apache2_util.c(271): [client 144.76.68.76] ModSecurity: Warning. Matched phrase ".htaccess" at ARGS:fileloc. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: .htaccess found within ARGS:fileloc: /home/ednermusika/elconferencista.com/.htaccess"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "www.elconferencista.com"] [uri "/"] [unique_id "aQLNafPAp1Qcj3AGlRwPGQABhqI"]
[Wed Oct 29 19:29:05 2025] [elconferencista.com] [error] [client 144.76.68.76:45872] [pid 1197135] apache2_util.c(271): [client 144.76.68.76] ModSecurity: Warning. Matched phrase ".htaccess" at ARGS:fileloc. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: .htaccess found within ARGS:fileloc: /home/ednermusika/elconferencista.com/.htaccess"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "www.elconferencista.com"] [uri "/conferencias-edner/14-conferencias-motivacion-y-crecimiento-personal-ser-quien-suenas-ser/"] [unique_id "aQLNcfPAp1Qcj3AGlRwPMgABhsE"]
[Wed Oct 29 19:30:54 2025] [elconferencista.com] [error] [client 144.76.68.76:53950] [pid 1197135] apache2_util.c(271): [client 144.76.68.76] ModSecurity: Access denied with code 418 (phase 1). Pattern match "wp-config.php" at ARGS_GET:fileloc. [file "/etc/modsecurity/mod_sec3_CRS/99_dreamhost_rules.conf"] [line "93"] [id "1990071"] [msg "wp-config.php Local File Inclusion Attempt"] [hostname "www.elconferencista.com"] [uri "/conferencias-edner/13-conferencias-para-mujeres-de-mi-para-mi/"] [unique_id "aQLN3vPAp1Qcj3AGlRwP9QABhy4"]
[Wed Oct 29 19:33:26 2025] [elconferencista.com] [error] [client 54.39.136.52:39890] [pid 1197135] apache2_util.c(271): [client 54.39.136.52] ModSecurity: Warning. Matched phrase "var/spool" at ARGS:fileloc. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: var/spool found within ARGS:fileloc: /var/spool/mail/pistole"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "www.elconferencista.com"] [uri "/"] [unique_id "aQLOdvPAp1Qcj3AGlRwR0AGHaTU"]
[Wed Oct 29 19:33:26 2025] [elconferencista.com] [error] [client 54.39.136.52:39890] [pid 1197135] apache2_util.c(271): [client 54.39.136.52] ModSecurity: Warning. Matched phrase "var/spool" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: var/spool found within ARGS:path: /var/spool/mail"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "www.elconferencista.com"] [uri "/"] [unique_id "aQLOdvPAp1Qcj3AGlRwR0AGHaTU"]
[Wed Oct 29 19:33:53 2025] [elconferencista.com] [error] [client 144.76.68.76:60910] [pid 1197135] apache2_util.c(271): [client 144.76.68.76] ModSecurity: Access denied with code 418 (phase 1). Pattern match "wp-config.php" at ARGS_GET:fileloc. [file "/etc/modsecurity/mod_sec3_CRS/99_dreamhost_rules.conf"] [line "93"] [id "1990071"] [msg "wp-config.php Local File Inclusion Attempt"] [hostname "www.elconferencista.com"] [uri "/conferencias-edner/12-conferencias-comunicacion-comunicacion-de-alto-impacto-para-lideres-de-alto-impacto/"] [unique_id "aQLOkfPAp1Qcj3AGlRwSQwABhyA"]
[Wed Oct 29 19:36:01 2025] [elconferencista.com] [error] [client 142.44.228.110:41182] [pid 1197135] apache2_util.c(271): [client 142.44.228.110] ModSecurity: Warning. Matched phrase "var/spool" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: var/spool found within ARGS:path: /var/spool/postfix"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "www.elconferencista.com"] [uri "/"] [unique_id "aQLPEfPAp1Qcj3AGlRwS3AGGsnY"]
[Wed Oct 29 19:36:02 2025] [elconferencista.com] [error] [client 144.76.68.76:48810] [pid 1197135] apache2_util.c(271): [client 144.76.68.76] ModSecurity: Warning. Matched phrase ".htaccess" at ARGS:fileloc. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: .htaccess found within ARGS:fileloc: /home/ednermusika/elconferencista.com/.htaccess"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "www.elconferencista.com"] [uri "/conferencias-edner/13-conferencias-para-mujeres-de-mi-para-mi/"] [unique_id "aQLPEvPAp1Qcj3AGlRwS3QABh3M"]
[Wed Oct 29 19:37:26 2025] [elconferencista.com] [error] [client 15.235.27.37:54116] [pid 1197135] apache2_util.c(271): [client 15.235.27.37] ModSecurity: Warning. Matched phrase "/tmp/" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: /tmp/ found within ARGS:path: /var/tmp/systemd-private-1034c21b7758477d99d3c0345fd2a498-ntp.service-rq86uP"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "www.elconferencista.com"] [uri "/"] [unique_id "aQLPZvPAp1Qcj3AGlRwTLgGHZKQ"]
[Wed Oct 29 19:38:41 2025] [elconferencista.com] [error] [client 51.161.65.204:48812] [pid 1197135] apache2_util.c(271): [client 51.161.65.204] ModSecurity: Warning. Matched phrase "/tmp/" at ARGS:fileloc. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: /tmp/ found within ARGS:fileloc: /var/tmp/migration-217"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "www.elconferencista.com"] [uri "/"] [unique_id "aQLPsfPAp1Qcj3AGlRwTgwGHRN8"]
[Wed Oct 29 19:39:50 2025] [elconferencista.com] [error] [client 142.44.225.82:52888] [pid 1197135] apache2_util.c(271): [client 142.44.225.82] ModSecurity: Warning. Matched phrase "/tmp/" at ARGS:fileloc. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: /tmp/ found within ARGS:fileloc: /var/tmp/NetworkManager-941"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "www.elconferencista.com"] [uri "/"] [unique_id "aQLP9vPAp1Qcj3AGlRwT1wGHRh0"]
[Wed Oct 29 19:40:51 2025] [elconferencista.com] [error] [client 15.235.27.107:53300] [pid 1197135] apache2_util.c(271): [client 15.235.27.107] ModSecurity: Warning. Matched phrase "/tmp/" at ARGS:fileloc. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: /tmp/ found within ARGS:fileloc: /var/tmp/.reset"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "www.elconferencista.com"] [uri "/"] [unique_id "aQLQM_PAp1Qcj3AGlRwUUQGHDa0"]
[Wed Oct 29 19:42:08 2025] [elconferencista.com] [error] [client 15.235.96.63:53966] [pid 1197135] apache2_util.c(271): [client 15.235.96.63] ModSecurity: Warning. Matched phrase "/tmp/" at ARGS:fileloc. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: /tmp/ found within ARGS:fileloc: /var/tmp/.dba_insertion"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "www.elconferencista.com"] [uri "/"] [unique_id "aQLQgPPAp1Qcj3AGlRwUpAGG7N4"]
[Wed Oct 29 20:02:50 2025] [elconferencista.com] [error] [client 216.73.216.32:7065] [pid 1525040] apache2_util.c(271): [client 216.73.216.32] ModSecurity: Access denied with code 418 (phase 1). Pattern match "wp-config.php" at ARGS_GET:fileloc. [file "/etc/modsecurity/mod_sec3_CRS/99_dreamhost_rules.conf"] [line "93"] [id "1990071"] [msg "wp-config.php Local File Inclusion Attempt"] [hostname "www.elconferencista.com"] [uri "/conferencias-edner"] [unique_id "aQLVWsF1ZYOv5z6GLJ0AEgGHGUk"]
[Wed Oct 29 20:03:20 2025] [elconferencista.com] [warn] [client 144.76.68.76:47662] [pid 1525040] fcgid_bridge.c(409): (104)Connection reset by peer: mod_fcgid: ap_pass_brigade failed in handle_request_ipc function
[Wed Oct 29 20:05:45 2025] [elconferencista.com] [error] [client 144.76.68.76:36854] [pid 1525040] apache2_util.c(271): [client 144.76.68.76] ModSecurity: Warning. Invalid URL Encoding: Non-hexadecimal digits used at TX:2. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "393"] [id "920220"] [msg "URL Encoding Abuse Attack Attempt"] [data "/conferencias/?fileloc=%2F%2F.critical_anomaly_score%7D%2Csetvar%3Atx.sql_injection_score%3D+%25%7Btx.critical_anomaly_score%7D&path=%2F"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/267/72"] [hostname "www.elconferencista.com"] [uri "/conferencias/"] [unique_id "aQLWCcF1ZYOv5z6GLJ0BAQABhxc"]
[Wed Oct 29 20:05:45 2025] [elconferencista.com] [error] [client 144.76.68.76:36854] [pid 1525040] apache2_util.c(271): [client 144.76.68.76] ModSecurity: Warning. Invalid URL Encoding: Non-hexadecimal digits used at TX:0. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "427"] [id "920221"] [msg "URL Encoding Abuse Attack Attempt"] [data ""] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/267/72"] [hostname "www.elconferencista.com"] [uri "/conferencias/"] [unique_id "aQLWCcF1ZYOv5z6GLJ0BAQABhxc"]
[Wed Oct 29 20:06:18 2025] [elconferencista.com] [error] [client 5.56.58.148:53470] [pid 1525040] apache2_util.c(271): [client 5.56.58.148] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "744"] [id "920340"] [msg "Request Containing Content, but Missing Content-Type header"] [severity "NOTICE"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [hostname "www.elconferencista.com"] [uri "/xmlrpc.php"] [unique_id "aQLWKsF1ZYOv5z6GLJ0BHwABh1I"]
[Wed Oct 29 20:15:29 2025] [elconferencista.com] [error] [client 216.73.216.32:5578] [pid 1525040] apache2_util.c(271): [client 216.73.216.32] ModSecurity: Warning. Matched phrase ".htaccess" at ARGS:fileloc. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: .htaccess found within ARGS:fileloc: /home/ednermusika/elconferencista.com/.htaccess"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "www.elconferencista.com"] [uri "/conferencias-edner"] [unique_id "aQLYUcF1ZYOv5z6GLJ0EcgGGxJE"]
[Wed Oct 29 20:29:23 2025] [elconferencista.com] [warn] [client 144.76.68.76:56664] [pid 1525040] fcgid_bridge.c(409): (104)Connection reset by peer: mod_fcgid: ap_pass_brigade failed in handle_request_ipc function
[Wed Oct 29 20:37:02 2025] [elconferencista.com] [error] [client 62.4.42.236:14031] [pid 1525040] mod_access_compat.c(350): AH01797: client denied by server configuration: /home/ednermusika/elconferencista.com/wp-content/plugins/wp-file-manager/file_folder_manager.php
[Wed Oct 29 20:37:36 2025] [elconferencista.com] [error] [client 144.76.68.76:44996] [pid 1525040] apache2_util.c(271): [client 144.76.68.76] ModSecurity: Access denied with code 418 (phase 1). Pattern match "wp-config.php" at ARGS_GET:fileloc. [file "/etc/modsecurity/mod_sec3_CRS/99_dreamhost_rules.conf"] [line "93"] [id "1990071"] [msg "wp-config.php Local File Inclusion Attempt"] [hostname "www.elconferencista.com"] [uri "/conferencias-edner/11-conferencias-motivacion-y-crecimiento-personal-si-ves-para-arriba-se-ve-diferente/"] [unique_id "aQLdgMF1ZYOv5z6GLJ0MjQABhws"]
[Wed Oct 29 20:38:52 2025] [elconferencista.com] [error] [client 144.76.68.76:33838] [pid 1525040] apache2_util.c(271): [client 144.76.68.76] ModSecurity: Access denied with code 418 (phase 1). Pattern match "wp-config.php" at ARGS_GET:fileloc. [file "/etc/modsecurity/mod_sec3_CRS/99_dreamhost_rules.conf"] [line "93"] [id "1990071"] [msg "wp-config.php Local File Inclusion Attempt"] [hostname "www.elconferencista.com"] [uri "/conferencias-edner/4-conferencia-vendiendo-a-1000/"] [unique_id "aQLdzMF1ZYOv5z6GLJ0NawABhu4"]
[Wed Oct 29 20:38:57 2025] [elconferencista.com] [error] [client 144.76.68.76:37220] [pid 1525040] apache2_util.c(271): [client 144.76.68.76] ModSecurity: Access denied with code 418 (phase 1). Pattern match "wp-config.php" at ARGS_GET:fileloc. [file "/etc/modsecurity/mod_sec3_CRS/99_dreamhost_rules.conf"] [line "93"] [id "1990071"] [msg "wp-config.php Local File Inclusion Attempt"] [hostname "www.elconferencista.com"] [uri "/conferencias-edner/6-conferencia-marca-personal-yo-branding-personal-en-tiempos-de-torbellino/"] [unique_id "aQLd0cF1ZYOv5z6GLJ0NlgABhzI"]
[Wed Oct 29 20:39:03 2025] [elconferencista.com] [error] [client 144.76.68.76:40464] [pid 1525040] apache2_util.c(271): [client 144.76.68.76] ModSecurity: Access denied with code 418 (phase 1). Pattern match "wp-config.php" at ARGS_GET:fileloc. [file "/etc/modsecurity/mod_sec3_CRS/99_dreamhost_rules.conf"] [line "93"] [id "1990071"] [msg "wp-config.php Local File Inclusion Attempt"] [hostname "www.elconferencista.com"] [uri "/conferencias-edner/5-conferencia-innovas-y-si-vas/"] [unique_id "aQLd18F1ZYOv5z6GLJ0NxQABh24"]
[Wed Oct 29 20:39:09 2025] [elconferencista.com] [error] [client 144.76.68.76:43216] [pid 1525040] apache2_util.c(271): [client 144.76.68.76] ModSecurity: Access denied with code 418 (phase 1). Pattern match "wp-config.php" at ARGS_GET:fileloc. [file "/etc/modsecurity/mod_sec3_CRS/99_dreamhost_rules.conf"] [line "93"] [id "1990071"] [msg "wp-config.php Local File Inclusion Attempt"] [hostname "www.elconferencista.com"] [uri "/conferencias-edner/7-conferencias-manejo-de-estres-estres-o-es-cuatro/"] [unique_id "aQLd3cF1ZYOv5z6GLJ0N6QABhtA"]
[Wed Oct 29 20:39:14 2025] [elconferencista.com] [error] [client 144.76.68.76:45670] [pid 1525040] apache2_util.c(271): [client 144.76.68.76] ModSecurity: Access denied with code 418 (phase 1). Pattern match "wp-config.php" at ARGS_GET:fileloc. [file "/etc/modsecurity/mod_sec3_CRS/99_dreamhost_rules.conf"] [line "93"] [id "1990071"] [msg "wp-config.php Local File Inclusion Attempt"] [hostname "www.elconferencista.com"] [uri "/conferencias-edner/8-conferencia-de-la-vision-a-la-accion/"] [unique_id "aQLd4sF1ZYOv5z6GLJ0OEgABhxk"]
[Wed Oct 29 20:39:18 2025] [elconferencista.com] [error] [client 144.76.68.76:47582] [pid 1525040] apache2_util.c(271): [client 144.76.68.76] ModSecurity: Access denied with code 418 (phase 1). Pattern match "wp-config.php" at ARGS_GET:fileloc. [file "/etc/modsecurity/mod_sec3_CRS/99_dreamhost_rules.conf"] [line "93"] [id "1990071"] [msg "wp-config.php Local File Inclusion Attempt"] [hostname "www.elconferencista.com"] [uri "/conferencias/"] [unique_id "aQLd5sF1ZYOv5z6GLJ0OJQABhxY"]
[Wed Oct 29 20:39:23 2025] [elconferencista.com] [error] [client 144.76.68.76:49812] [pid 1525040] apache2_util.c(271): [client 144.76.68.76] ModSecurity: Access denied with code 418 (phase 1). Pattern match "wp-config.php" at ARGS_GET:fileloc. [file "/etc/modsecurity/mod_sec3_CRS/99_dreamhost_rules.conf"] [line "93"] [id "1990071"] [msg "wp-config.php Local File Inclusion Attempt"] [hostname "www.elconferencista.com"] [uri "/conferencias-edner/9-conferencias-motivacion-y-crecimiento-personal-tu-vida-de-subida/"] [unique_id "aQLd68F1ZYOv5z6GLJ0OLQABhxA"]
[Wed Oct 29 20:39:46 2025] [elconferencista.com] [warn] [client 144.76.68.76:57648] [pid 1525040] fcgid_bridge.c(409): (104)Connection reset by peer: mod_fcgid: ap_pass_brigade failed in handle_request_ipc function
[Wed Oct 29 20:43:39 2025] [elconferencista.com] [error] [client 144.76.68.76:35718] [pid 1525040] apache2_util.c(271): [client 144.76.68.76] ModSecurity: Warning. Invalid URL Encoding: Non-hexadecimal digits used at TX:2. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "393"] [id "920220"] [msg "URL Encoding Abuse Attack Attempt"] [data "/conferencias-edner/3-conferencia-las-4-as-del-lider-del-futuro-presente/?fileloc=%2F%2F.critical_anomaly_score%7D%2Csetvar%3Atx.sql_injection_score%3D+%25%7Btx.critical_anomaly_score%7D&path=%2F"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/267/72"] [hostname "www.elconferencista.com"] [uri "/conferencias-edner/3-conferencia-las-4-as-del-lider-del-futuro-presente/"] [unique_id "aQLe68F1ZYOv5z6GLJ0QkwABhtw"]
[Wed Oct 29 20:43:39 2025] [elconferencista.com] [error] [client 144.76.68.76:35718] [pid 1525040] apache2_util.c(271): [client 144.76.68.76] ModSecurity: Warning. Invalid URL Encoding: Non-hexadecimal digits used at TX:0. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "427"] [id "920221"] [msg "URL Encoding Abuse Attack Attempt"] [data ""] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/267/72"] [hostname "www.elconferencista.com"] [uri "/conferencias-edner/3-conferencia-las-4-as-del-lider-del-futuro-presente/"] [unique_id "aQLe68F1ZYOv5z6GLJ0QkwABhtw"]
[Wed Oct 29 20:52:25 2025] [elconferencista.com] [warn] [client 144.76.68.76:53320] [pid 1525040] fcgid_bridge.c(409): (104)Connection reset by peer: mod_fcgid: ap_pass_brigade failed in handle_request_ipc function
[Wed Oct 29 20:53:09 2025] [elconferencista.com] [error] [client 43.130.31.17:56758] [pid 1525040] apache2_util.c(271): [client 43.130.31.17] ModSecurity: Warning. Pattern match "\\\\b(?:keep-alive|close),\\\\s?(?:keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "352"] [id "920210"] [msg "Multiple/Conflicting Connection Header Data Found"] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [hostname "www.elconferencista.com"] [uri "/"] [unique_id "aQLhJcF1ZYOv5z6GLJ0TUAABhyo"]
[Wed Oct 29 21:03:54 2025] [elconferencista.com] [error] [client 43.128.156.124:34956] [pid 1525040] apache2_util.c(271): [client 43.128.156.124] ModSecurity: Warning. Pattern match "\\\\b(?:keep-alive|close),\\\\s?(?:keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "352"] [id "920210"] [msg "Multiple/Conflicting Connection Header Data Found"] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [hostname "www.elconferencista.com"] [uri "/"] [unique_id "aQLjqsF1ZYOv5z6GLJ0W7gABhrQ"]
[Wed Oct 29 21:05:42 2025] [elconferencista.com] [error] [client 43.157.148.38:49292] [pid 1525040] apache2_util.c(271): [client 43.157.148.38] ModSecurity: Warning. Pattern match "\\\\b(?:keep-alive|close),\\\\s?(?:keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "352"] [id "920210"] [msg "Multiple/Conflicting Connection Header Data Found"] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [hostname "www.elconferencista.com"] [uri "/"] [unique_id "aQLkFsF1ZYOv5z6GLJ0XpgABhxQ"]
[Wed Oct 29 21:09:52 2025] [elconferencista.com] [error] [client 144.76.68.76:60892] [pid 1525040] apache2_util.c(271): [client 144.76.68.76] ModSecurity: Warning. Matched phrase ".htaccess" at ARGS:fileloc. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: .htaccess found within ARGS:fileloc: /home/ednermusika/elconferencista.com/.well-known/.htaccess"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "www.elconferencista.com"] [uri "/conferencias-edner/2-conferencia-reinventandonos-en-tiempos-criticos/"] [unique_id "aQLlEMF1ZYOv5z6GLJ0YmQABhyI"]
[Wed Oct 29 21:10:11 2025] [elconferencista.com] [error] [client 144.76.68.76:39650] [pid 1525040] apache2_util.c(271): [client 144.76.68.76] ModSecurity: Warning. Matched phrase ".cshrc" at ARGS:fileloc. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: .cshrc found within ARGS:fileloc: /home/ednermusika/.cshrc"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "www.elconferencista.com"] [uri "/conferencias-edner/2-conferencia-reinventandonos-en-tiempos-criticos/"] [unique_id "aQLlI8F1ZYOv5z6GLJ0YsgABh0k"]
[Wed Oct 29 21:10:24 2025] [elconferencista.com] [error] [client 144.76.68.76:43418] [pid 1525040] apache2_util.c(271): [client 144.76.68.76] ModSecurity: Warning. Matched phrase ".bashrc" at ARGS:fileloc. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: .bashrc found within ARGS:fileloc: /home/ednermusika/.bashrc"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "www.elconferencista.com"] [uri "/conferencias-edner/2-conferencia-reinventandonos-en-tiempos-criticos/"] [unique_id "aQLlMMF1ZYOv5z6GLJ0YugABhwQ"]
[Wed Oct 29 21:10:33 2025] [elconferencista.com] [error] [client 144.76.68.76:45254] [pid 1525040] apache2_util.c(271): [client 144.76.68.76] ModSecurity: Warning. Matched phrase ".bash_" at ARGS:fileloc. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: .bash_ found within ARGS:fileloc: /home/ednermusika/.bash_profile"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "www.elconferencista.com"] [uri "/conferencias-edner/2-conferencia-reinventandonos-en-tiempos-criticos/"] [unique_id "aQLlOcF1ZYOv5z6GLJ0YwAABh20"]
[Wed Oct 29 21:11:04 2025] [elconferencista.com] [error] [client 144.76.68.76:51098] [pid 1525040] apache2_util.c(271): [client 144.76.68.76] ModSecurity: Warning. Matched phrase ".bash_" at ARGS:fileloc. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: .bash_ found within ARGS:fileloc: /home/ednermusika/.bash_history"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "www.elconferencista.com"] [uri "/conferencias-edner/2-conferencia-reinventandonos-en-tiempos-criticos/"] [unique_id "aQLlWMF1ZYOv5z6GLJ0Y2AABhqE"]
[Wed Oct 29 21:14:20 2025] [elconferencista.com] [error] [client 144.76.68.76:41400] [pid 1525040] apache2_util.c(271): [client 144.76.68.76] ModSecurity: Warning. Invalid URL Encoding: Non-hexadecimal digits used at TX:2. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "393"] [id "920220"] [msg "URL Encoding Abuse Attack Attempt"] [data "/conferencias-edner/2-conferencia-reinventandonos-en-tiempos-criticos/?fileloc=%2F%2F.critical_anomaly_score%7D%2Csetvar%3Atx.sql_injection_score%3D+%25%7Btx.critical_anomaly_score%7D&path=%2F"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/267/72"] [hostname "www.elconferencista.com"] [uri "/conferencias-edner/2-conferencia-reinventandonos-en-tiempos-criticos/"] [unique_id "aQLmHMF1ZYOv5z6GLJ0ZzgABh2I"]
[Wed Oct 29 21:14:20 2025] [elconferencista.com] [error] [client 144.76.68.76:41400] [pid 1525040] apache2_util.c(271): [client 144.76.68.76] ModSecurity: Warning. Invalid URL Encoding: Non-hexadecimal digits used at TX:0. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "427"] [id "920221"] [msg "URL Encoding Abuse Attack Attempt"] [data ""] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/267/72"] [hostname "www.elconferencista.com"] [uri "/conferencias-edner/2-conferencia-reinventandonos-en-tiempos-criticos/"] [unique_id "aQLmHMF1ZYOv5z6GLJ0ZzgABh2I"]
[Wed Oct 29 21:16:15 2025] [elconferencista.com] [error] [client 101.33.66.34:58824] [pid 1525040] apache2_util.c(271): [client 101.33.66.34] ModSecurity: Warning. Pattern match "\\\\b(?:keep-alive|close),\\\\s?(?:keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "352"] [id "920210"] [msg "Multiple/Conflicting Connection Header Data Found"] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [hostname "www.elconferencista.com"] [uri "/"] [unique_id "aQLmj8F1ZYOv5z6GLJ0afQABhvU"]
[Wed Oct 29 21:27:16 2025] [elconferencista.com] [error] [client 43.130.32.245:52664] [pid 1525040] apache2_util.c(271): [client 43.130.32.245] ModSecurity: Warning. Pattern match "\\\\b(?:keep-alive|close),\\\\s?(?:keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "352"] [id "920210"] [msg "Multiple/Conflicting Connection Header Data Found"] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [hostname "www.elconferencista.com"] [uri "/"] [unique_id "aQLpJMF1ZYOv5z6GLJ0ebAABh18"]
[Wed Oct 29 21:31:53 2025] [elconferencista.com] [error] [client 15.235.27.9:34788] [pid 1525040] apache2_util.c(271): [client 15.235.27.9] ModSecurity: Warning. Matched phrase ".htaccess" at ARGS:fileloc. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: .htaccess found within ARGS:fileloc: /home/ednermusika/elconferencista.com/wp-includes/.htaccess"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "www.elconferencista.com"] [uri "/"] [unique_id "aQLqOcF1ZYOv5z6GLJ0f-wGHbXc"]
[Wed Oct 29 21:35:38 2025] [elconferencista.com] [warn] [client 144.76.68.76:34486] [pid 1525040] fcgid_bridge.c(409): (104)Connection reset by peer: mod_fcgid: ap_pass_brigade failed in handle_request_ipc function
[Wed Oct 29 21:36:48 2025] [elconferencista.com] [error] [client 170.106.143.6:51956] [pid 1525040] apache2_util.c(271): [client 170.106.143.6] ModSecurity: Warning. Pattern match "\\\\b(?:keep-alive|close),\\\\s?(?:keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "352"] [id "920210"] [msg "Multiple/Conflicting Connection Header Data Found"] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [hostname "www.elconferencista.com"] [uri "/"] [unique_id "aQLrYMF1ZYOv5z6GLJ0htAABh2I"]
[Wed Oct 29 21:38:53 2025] [elconferencista.com] [error] [client 148.113.128.163:31698] [pid 1525040] apache2_util.c(271): [client 148.113.128.163] ModSecurity: Warning. Matched phrase "var/spool" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: var/spool found within ARGS:path: /var/spool/postfix"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "www.elconferencista.com"] [uri "/"] [unique_id "aQLr3cF1ZYOv5z6GLJ0jkQGHYp4"]
[Wed Oct 29 21:40:21 2025] [elconferencista.com] [error] [client 54.39.136.114:53018] [pid 1525040] apache2_util.c(271): [client 54.39.136.114] ModSecurity: Warning. Matched phrase "/tmp/" at ARGS:path. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: /tmp/ found within ARGS:path: /var/tmp/cvs-serv2568781"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "www.elconferencista.com"] [uri "/"] [unique_id "aQLsNcF1ZYOv5z6GLJ0lawGHNW4"]
[Wed Oct 29 21:42:23 2025] [elconferencista.com] [warn] [client 144.76.68.76:55324] [pid 1525040] fcgid_bridge.c(409): (104)Connection reset by peer: mod_fcgid: ap_pass_brigade failed in handle_request_ipc function
[Wed Oct 29 21:42:55 2025] [elconferencista.com] [error] [client 54.39.210.66:45956] [pid 1525040] apache2_util.c(271): [client 54.39.210.66] ModSecurity: Warning. Matched phrase "/tmp/" at ARGS:fileloc. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: /tmp/ found within ARGS:fileloc: /var/tmp/watchdog-627"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "www.elconferencista.com"] [uri "/"] [unique_id "aQLsz8F1ZYOv5z6GLJ0mNAGG1ZU"]
[Wed Oct 29 21:43:50 2025] [elconferencista.com] [error] [client 144.76.68.76:42586] [pid 1525040] apache2_util.c(271): [client 144.76.68.76] ModSecurity: Access denied with code 418 (phase 1). Pattern match "wp-config.php" at ARGS_GET:fileloc. [file "/etc/modsecurity/mod_sec3_CRS/99_dreamhost_rules.conf"] [line "93"] [id "1990071"] [msg "wp-config.php Local File Inclusion Attempt"] [hostname "www.elconferencista.com"] [uri "/"] [unique_id "aQLtBsF1ZYOv5z6GLJ0maQABh1Q"]
[Wed Oct 29 21:43:53 2025] [elconferencista.com] [error] [client 144.76.68.76:45262] [pid 1525040] apache2_util.c(271): [client 144.76.68.76] ModSecurity: Access denied with code 418 (phase 1). Pattern match "wp-config.php" at ARGS_GET:fileloc. [file "/etc/modsecurity/mod_sec3_CRS/99_dreamhost_rules.conf"] [line "93"] [id "1990071"] [msg "wp-config.php Local File Inclusion Attempt"] [hostname "www.elconferencista.com"] [uri "/conferencias-edner/10-conferencias-emociones-flojito-y-cooperando/"] [unique_id "aQLtCcF1ZYOv5z6GLJ0mbwABhrY"]
[Wed Oct 29 21:43:58 2025] [elconferencista.com] [error] [client 144.76.68.76:47264] [pid 1525040] apache2_util.c(271): [client 144.76.68.76] ModSecurity: Access denied with code 418 (phase 1). Pattern match "wp-config.php" at ARGS_GET:fileloc. [file "/etc/modsecurity/mod_sec3_CRS/99_dreamhost_rules.conf"] [line "93"] [id "1990071"] [msg "wp-config.php Local File Inclusion Attempt"] [hostname "www.elconferencista.com"] [uri "/conferencias-edner/13-conferencias-para-mujeres-de-mi-para-mi/"] [unique_id "aQLtDsF1ZYOv5z6GLJ0mdAABhrw"]
[Wed Oct 29 21:44:02 2025] [elconferencista.com] [error] [client 144.76.68.76:48952] [pid 1525040] apache2_util.c(271): [client 144.76.68.76] ModSecurity: Access denied with code 418 (phase 1). Pattern match "wp-config.php" at ARGS_GET:fileloc. [file "/etc/modsecurity/mod_sec3_CRS/99_dreamhost_rules.conf"] [line "93"] [id "1990071"] [msg "wp-config.php Local File Inclusion Attempt"] [hostname "www.elconferencista.com"] [uri "/conferencias-edner/1-conferencia-ir-mas-alla-nuestra-conferencia-estrella-ideal-para-juntas-de-planeacion-y-reuniones-de-fijacion-de-objetivos/"] [unique_id "aQLtEsF1ZYOv5z6GLJ0miwABh1M"]
[Wed Oct 29 21:44:07 2025] [elconferencista.com] [error] [client 144.76.68.76:50628] [pid 1525040] apache2_util.c(271): [client 144.76.68.76] ModSecurity: Access denied with code 418 (phase 1). Pattern match "wp-config.php" at ARGS_GET:fileloc. [file "/etc/modsecurity/mod_sec3_CRS/99_dreamhost_rules.conf"] [line "93"] [id "1990071"] [msg "wp-config.php Local File Inclusion Attempt"] [hostname "www.elconferencista.com"] [uri "/conferencias-edner/12-conferencias-comunicacion-comunicacion-de-alto-impacto-para-lideres-de-alto-impacto/"] [unique_id "aQLtF8F1ZYOv5z6GLJ0mowABhtM"]
[Wed Oct 29 21:44:11 2025] [elconferencista.com] [error] [client 144.76.68.76:52256] [pid 1525040] apache2_util.c(271): [client 144.76.68.76] ModSecurity: Access denied with code 418 (phase 1). Pattern match "wp-config.php" at ARGS_GET:fileloc. [file "/etc/modsecurity/mod_sec3_CRS/99_dreamhost_rules.conf"] [line "93"] [id "1990071"] [msg "wp-config.php Local File Inclusion Attempt"] [hostname "www.elconferencista.com"] [uri "/conferencias-edner/2-conferencia-reinventandonos-en-tiempos-criticos/"] [unique_id "aQLtG8F1ZYOv5z6GLJ0mpgABhyY"]
[Wed Oct 29 21:44:14 2025] [elconferencista.com] [error] [client 144.76.68.76:53674] [pid 1525040] apache2_util.c(271): [client 144.76.68.76] ModSecurity: Access denied with code 418 (phase 1). Pattern match "wp-config.php" at ARGS_GET:fileloc. [file "/etc/modsecurity/mod_sec3_CRS/99_dreamhost_rules.conf"] [line "93"] [id "1990071"] [msg "wp-config.php Local File Inclusion Attempt"] [hostname "www.elconferencista.com"] [uri "/conferencias-edner/3-conferencia-las-4-as-del-lider-del-futuro-presente/"] [unique_id "aQLtHsF1ZYOv5z6GLJ0mqgABhwQ"]
[Wed Oct 29 21:44:18 2025] [elconferencista.com] [error] [client 144.76.68.76:54948] [pid 1525040] apache2_util.c(271): [client 144.76.68.76] ModSecurity: Access denied with code 418 (phase 1). Pattern match "wp-config.php" at ARGS_GET:fileloc. [file "/etc/modsecurity/mod_sec3_CRS/99_dreamhost_rules.conf"] [line "93"] [id "1990071"] [msg "wp-config.php Local File Inclusion Attempt"] [hostname "www.elconferencista.com"] [uri "/conferencias-edner/14-conferencias-motivacion-y-crecimiento-personal-ser-quien-suenas-ser/"] [unique_id "aQLtIsF1ZYOv5z6GLJ0mrwABhw8"]
[Wed Oct 29 21:45:12 2025] [elconferencista.com] [error] [client 15.235.98.27:18660] [pid 1525040] apache2_util.c(271): [client 15.235.98.27] ModSecurity: Warning. Matched phrase "/tmp/" at ARGS:fileloc. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: /tmp/ found within ARGS:fileloc: /var/tmp/chronyd-655"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "www.elconferencista.com"] [uri "/"] [unique_id "aQLtWMF1ZYOv5z6GLJ0nDgGGyNE"]
[Wed Oct 29 21:46:17 2025] [elconferencista.com] [error] [client 170.106.161.78:53308] [pid 1525040] apache2_util.c(271): [client 170.106.161.78] ModSecurity: Warning. Pattern match "\\\\b(?:keep-alive|close),\\\\s?(?:keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "352"] [id "920210"] [msg "Multiple/Conflicting Connection Header Data Found"] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [hostname "www.elconferencista.com"] [uri "/"] [unique_id "aQLtmcF1ZYOv5z6GLJ0nXAABh0A"]
[Wed Oct 29 21:58:07 2025] [elconferencista.com] [error] [client 43.130.67.33:43008] [pid 1525040] apache2_util.c(271): [client 43.130.67.33] ModSecurity: Access denied with code 418 (phase 1). Pattern match "wp-config.php" at ARGS_GET:fileloc. [file "/etc/modsecurity/mod_sec3_CRS/99_dreamhost_rules.conf"] [line "93"] [id "1990071"] [msg "wp-config.php Local File Inclusion Attempt"] [hostname "www.elconferencista.com"] [uri "/"] [unique_id "aQLwX8F1ZYOv5z6GLJ0rAAABhxs"]
[Wed Oct 29 22:19:47 2025] [elconferencista.com] [error] [client 144.76.68.76:42998] [pid 2525752] apache2_util.c(271): [client 144.76.68.76] ModSecurity: Warning. Matched phrase ".cshrc" at ARGS:fileloc. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: .cshrc found within ARGS:fileloc: /home/ednermusika/.cshrc"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "www.elconferencista.com"] [uri "/conferencias/"] [unique_id "aQL1c3Pm_VZpDYzcRNUHaQABOM8"]
[Wed Oct 29 22:20:13 2025] [elconferencista.com] [error] [client 144.76.68.76:55096] [pid 2525752] apache2_util.c(271): [client 144.76.68.76] ModSecurity: Warning. Matched phrase ".htaccess" at ARGS:fileloc. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: .htaccess found within ARGS:fileloc: /home/ednermusika/elconferencista.com/.well-known/.htaccess"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "www.elconferencista.com"] [uri "/conferencias/"] [unique_id "aQL1jXPm_VZpDYzcRNUHpgABORI"]
[Wed Oct 29 22:20:25 2025] [elconferencista.com] [error] [client 144.76.68.76:60628] [pid 2525752] apache2_util.c(271): [client 144.76.68.76] ModSecurity: Warning. Matched phrase ".htaccess" at ARGS:fileloc. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: .htaccess found within ARGS:fileloc: /home/ednermusika/elconferencista.com/elconferencista.com-110922/.htaccess"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "www.elconferencista.com"] [uri "/conferencias/"] [unique_id "aQL1mXPm_VZpDYzcRNUHxwABOVA"]
[Wed Oct 29 22:24:17 2025] [elconferencista.com] [error] [client 144.76.68.76:54414] [pid 2525752] apache2_util.c(271): [client 144.76.68.76] ModSecurity: Access denied with code 418 (phase 1). Pattern match "wp-config.php" at ARGS_GET:fileloc. [file "/etc/modsecurity/mod_sec3_CRS/99_dreamhost_rules.conf"] [line "93"] [id "1990071"] [msg "wp-config.php Local File Inclusion Attempt"] [hostname "www.elconferencista.com"] [uri "/conferencias/"] [unique_id "aQL2gXPm_VZpDYzcRNUJMgABORI"]
[Wed Oct 29 22:27:46 2025] [elconferencista.com] [error] [client 144.76.68.76:59842] [pid 2525752] apache2_util.c(271): [client 144.76.68.76] ModSecurity: Warning. Matched phrase ".htaccess" at ARGS:fileloc. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: .htaccess found within ARGS:fileloc: /home/ednermusika/elconferencista.com/images/.htaccess"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "www.elconferencista.com"] [uri "/conferencias/"] [unique_id "aQL3UnPm_VZpDYzcRNUKXAABOMI"]
[Wed Oct 29 22:28:08 2025] [elconferencista.com] [error] [client 144.76.68.76:36234] [pid 2525752] apache2_util.c(271): [client 144.76.68.76] ModSecurity: Warning. Matched phrase ".htaccess" at ARGS:fileloc. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: .htaccess found within ARGS:fileloc: /home/ednermusika/elconferencista.com/wp-admin/.htaccess"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "www.elconferencista.com"] [uri "/conferencias/"] [unique_id "aQL3aHPm_VZpDYzcRNUKcgABON4"]
[Wed Oct 29 22:28:37 2025] [elconferencista.com] [error] [client 43.135.144.126:45524] [pid 2525752] apache2_util.c(271): [client 43.135.144.126] ModSecurity: Warning. Pattern match "\\\\b(?:keep-alive|close),\\\\s?(?:keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "352"] [id "920210"] [msg "Multiple/Conflicting Connection Header Data Found"] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [hostname "www.elconferencista.com"] [uri "/sitemap.xml"] [unique_id "aQL3hXPm_VZpDYzcRNUKmgABOTU"]
[Wed Oct 29 22:29:35 2025] [elconferencista.com] [error] [client 144.76.68.76:37946] [pid 2525752] apache2_util.c(271): [client 144.76.68.76] ModSecurity: Warning. Matched phrase ".bash_" at ARGS:fileloc. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: .bash_ found within ARGS:fileloc: /home/ednermusika/.bash_history"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "www.elconferencista.com"] [uri "/conferencias/"] [unique_id "aQL3v3Pm_VZpDYzcRNUK0gABOJY"]
[Wed Oct 29 22:29:52 2025] [elconferencista.com] [error] [client 144.76.68.76:43792] [pid 2525752] apache2_util.c(271): [client 144.76.68.76] ModSecurity: Warning. Matched phrase ".bash_" at ARGS:fileloc. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: .bash_ found within ARGS:fileloc: /home/ednermusika/.bash_profile"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "www.elconferencista.com"] [uri "/conferencias/"] [unique_id "aQL30HPm_VZpDYzcRNUK4gABOOk"]
[Wed Oct 29 22:30:08 2025] [elconferencista.com] [error] [client 144.76.68.76:49446] [pid 2525752] apache2_util.c(271): [client 144.76.68.76] ModSecurity: Warning. Matched phrase ".bashrc" at ARGS:fileloc. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: .bashrc found within ARGS:fileloc: /home/ednermusika/.bashrc"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "www.elconferencista.com"] [uri "/conferencias/"] [unique_id "aQL34HPm_VZpDYzcRNUK7QABOQU"]
[Wed Oct 29 22:39:52 2025] [elconferencista.com] [error] [client 43.166.253.94:52404] [pid 2525752] apache2_util.c(271): [client 43.166.253.94] ModSecurity: Warning. Pattern match "\\\\b(?:keep-alive|close),\\\\s?(?:keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "352"] [id "920210"] [msg "Multiple/Conflicting Connection Header Data Found"] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [hostname "www.elconferencista.com"] [uri "/"] [unique_id "aQL6KHPm_VZpDYzcRNUN7gABOSA"]
[Wed Oct 29 22:40:37 2025] [elconferencista.com] [error] [client 216.73.161.2:61507] [pid 2525752] apache2_util.c(271): [client 216.73.161.2] ModSecurity: Warning. Matched phrase ".env" at REQUEST_FILENAME. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "143"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: .env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "www.elconferencista.com"] [uri "/.env"] [unique_id "aQL6VXPm_VZpDYzcRNUOqwABOVA"]
[Wed Oct 29 22:40:37 2025] [elconferencista.com] [error] [client 216.73.161.2:61507] [pid 2525752] mod_authz_core.c(879): AH01630: client denied by server configuration: /home/ednermusika/elconferencista.com/.env
[Wed Oct 29 22:50:03 2025] [elconferencista.com] [error] [client 216.73.216.32:48103] [pid 2525752] apache2_util.c(271): [client 216.73.216.32] ModSecurity: Warning. Matched phrase ".bashrc" at ARGS:fileloc. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: .bashrc found within ARGS:fileloc: /home/ednermusika/.bashrc"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "www.elconferencista.com"] [uri "/conferencias-edner"] [unique_id "aQL8i3Pm_VZpDYzcRNUTCQE5RyU"]
[Wed Oct 29 22:50:06 2025] [elconferencista.com] [error] [client 216.73.216.32:48103] [pid 2525752] apache2_util.c(271): [client 216.73.216.32] ModSecurity: Warning. Matched phrase ".bash_" at ARGS:fileloc. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: .bash_ found within ARGS:fileloc: /home/ednermusika/.bash_profile"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "www.elconferencista.com"] [uri "/conferencias-edner"] [unique_id "aQL8jnPm_VZpDYzcRNUTDgE5WCs"]
[Wed Oct 29 22:50:51 2025] [elconferencista.com] [error] [client 216.73.216.32:1540] [pid 2525752] apache2_util.c(271): [client 216.73.216.32] ModSecurity: Warning. Matched phrase ".cshrc" at ARGS:fileloc. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: .cshrc found within ARGS:fileloc: /home/ednermusika/.cshrc"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "www.elconferencista.com"] [uri "/conferencias-edner"] [unique_id "aQL8u3Pm_VZpDYzcRNUTPAE46zY"]
[Wed Oct 29 22:52:05 2025] [elconferencista.com] [error] [client 101.33.81.73:51508] [pid 2525752] apache2_util.c(271): [client 101.33.81.73] ModSecurity: Warning. Pattern match "\\\\b(?:keep-alive|close),\\\\s?(?:keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "352"] [id "920210"] [msg "Multiple/Conflicting Connection Header Data Found"] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [hostname "www.elconferencista.com"] [uri "/"] [unique_id "aQL9BXPm_VZpDYzcRNUTrQABOS0"]
[Wed Oct 29 22:52:45 2025] [elconferencista.com] [error] [client 144.76.68.76:37964] [pid 2525752] apache2_util.c(271): [client 144.76.68.76] ModSecurity: Warning. Matched phrase "config.php" at ARGS:fileloc. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: config.php found within ARGS:fileloc: /home/ednermusika/elconferencista.com/wp-admin/setup-config.php"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "www.elconferencista.com"] [uri "/conferencias/"] [unique_id "aQL9LXPm_VZpDYzcRNUT5gABOJ4"]
[Wed Oct 29 22:55:17 2025] [elconferencista.com] [error] [client 144.76.68.76:41680] [pid 2525752] apache2_util.c(271): [client 144.76.68.76] ModSecurity: Warning. Matched phrase ".htaccess" at ARGS:fileloc. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: .htaccess found within ARGS:fileloc: /home/ednermusika/elconferencista.com/wp-content/.htaccess"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "www.elconferencista.com"] [uri "/conferencias/"] [unique_id "aQL9xXPm_VZpDYzcRNUUfgABOUI"]
[Wed Oct 29 22:55:35 2025] [elconferencista.com] [error] [client 144.76.68.76:49112] [pid 2525752] apache2_util.c(271): [client 144.76.68.76] ModSecurity: Warning. Matched phrase ".htaccess" at ARGS:fileloc. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: .htaccess found within ARGS:fileloc: /home/ednermusika/elconferencista.com/wp-includes/.htaccess"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "www.elconferencista.com"] [uri "/conferencias/"] [unique_id "aQL913Pm_VZpDYzcRNUUhwABOI0"]
[Wed Oct 29 22:56:40 2025] [elconferencista.com] [error] [client 43.157.148.38:56610] [pid 2525752] apache2_util.c(271): [client 43.157.148.38] ModSecurity: Warning. Pattern match "\\\\b(?:keep-alive|close),\\\\s?(?:keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "352"] [id "920210"] [msg "Multiple/Conflicting Connection Header Data Found"] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [hostname "www.elconferencista.com"] [uri "/"] [unique_id "aQL-GHPm_VZpDYzcRNUUyQABOQY"]
[Wed Oct 29 23:03:15 2025] [elconferencista.com] [error] [client 216.73.216.32:56666] [pid 2525752] apache2_util.c(271): [client 216.73.216.32] ModSecurity: Warning. Matched phrase ".bash_" at ARGS:fileloc. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: .bash_ found within ARGS:fileloc: /home/ednermusika/.bash_history"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "www.elconferencista.com"] [uri "/conferencias-edner"] [unique_id "aQL_o3Pm_VZpDYzcRNUXIwE5EdY"]
[Wed Oct 29 23:05:20 2025] [elconferencista.com] [error] [client 43.153.113.127:44754] [pid 2525752] apache2_util.c(271): [client 43.153.113.127] ModSecurity: Warning. Pattern match "\\\\b(?:keep-alive|close),\\\\s?(?:keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "352"] [id "920210"] [msg "Multiple/Conflicting Connection Header Data Found"] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [hostname "www.elconferencista.com"] [uri "/"] [unique_id "aQMAIHPm_VZpDYzcRNUX3wABONg"]
[Wed Oct 29 23:09:10 2025] [elconferencista.com] [error] [client 43.153.79.218:37406] [pid 2525752] apache2_util.c(271): [client 43.153.79.218] ModSecurity: Warning. Pattern match "\\\\b(?:keep-alive|close),\\\\s?(?:keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "352"] [id "920210"] [msg "Multiple/Conflicting Connection Header Data Found"] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [hostname "www.elconferencista.com"] [uri "/"] [unique_id "aQMBBnPm_VZpDYzcRNUY_QABOLc"]
[Wed Oct 29 23:20:37 2025] [elconferencista.com] [error] [client 43.135.115.233:58238] [pid 2525752] apache2_util.c(271): [client 43.135.115.233] ModSecurity: Warning. Pattern match "\\\\b(?:keep-alive|close),\\\\s?(?:keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "352"] [id "920210"] [msg "Multiple/Conflicting Connection Header Data Found"] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [hostname "www.elconferencista.com"] [uri "/"] [unique_id "aQMDtXPm_VZpDYzcRNUeOwABOMk"]
[Wed Oct 29 23:27:03 2025] [elconferencista.com] [error] [client 196.40.97.158:50324] [pid 2525752] apache2_util.c(271): [client 196.40.97.158] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "744"] [id "920340"] [msg "Request Containing Content, but Missing Content-Type header"] [severity "NOTICE"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [hostname "www.elconferencista.com"] [uri "/xmlrpc.php"] [unique_id "aQMFN3Pm_VZpDYzcRNUgAAABOQM"]
[Wed Oct 29 23:30:24 2025] [elconferencista.com] [error] [client 144.76.68.76:39000] [pid 2525752] apache2_util.c(271): [client 144.76.68.76] ModSecurity: Warning. Matched phrase ".htaccess" at ARGS:fileloc. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: .htaccess found within ARGS:fileloc: /home/ednermusika/elconferencista.com/wp-includes/.htaccess"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "www.elconferencista.com"] [uri "/conferencias-edner/9-conferencias-motivacion-y-crecimiento-personal-tu-vida-de-subida/"] [unique_id "aQMGAHPm_VZpDYzcRNUg3AABOP4"]
[Wed Oct 29 23:30:51 2025] [elconferencista.com] [error] [client 144.76.68.76:49532] [pid 2525752] apache2_util.c(271): [client 144.76.68.76] ModSecurity: Warning. Matched phrase ".htaccess" at ARGS:fileloc. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: .htaccess found within ARGS:fileloc: /home/ednermusika/elconferencista.com/wp-content/.htaccess"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "www.elconferencista.com"] [uri "/conferencias-edner/9-conferencias-motivacion-y-crecimiento-personal-tu-vida-de-subida/"] [unique_id "aQMGG3Pm_VZpDYzcRNUg7wABOTI"]
[Wed Oct 29 23:33:50 2025] [elconferencista.com] [error] [client 34.255.49.147:59787] [pid 2525752] apache2_util.c(271): [client 34.255.49.147] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "744"] [id "920340"] [msg "Request Containing Content, but Missing Content-Type header"] [severity "NOTICE"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [hostname "www.elconferencista.com"] [uri "/xmlrpc.php"] [unique_id "aQMGznPm_VZpDYzcRNUh0wABOSE"]
[Wed Oct 29 23:34:29 2025] [elconferencista.com] [error] [client 144.76.68.76:35560] [pid 2525752] apache2_util.c(271): [client 144.76.68.76] ModSecurity: Warning. Matched phrase "config.php" at ARGS:fileloc. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: config.php found within ARGS:fileloc: /home/ednermusika/elconferencista.com/wp-admin/setup-config.php"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "www.elconferencista.com"] [uri "/conferencias-edner/9-conferencias-motivacion-y-crecimiento-personal-tu-vida-de-subida/"] [unique_id "aQMG9XPm_VZpDYzcRNUiEQABOIM"]
[Wed Oct 29 23:45:32 2025] [elconferencista.com] [error] [client 144.76.68.76:48402] [pid 2525752] apache2_util.c(271): [client 144.76.68.76] ModSecurity: Warning. Matched phrase ".htaccess" at ARGS:fileloc. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: .htaccess found within ARGS:fileloc: /home/ednermusika/elconferencista.com/wp-admin/.htaccess"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "www.elconferencista.com"] [uri "/conferencias-edner/9-conferencias-motivacion-y-crecimiento-personal-tu-vida-de-subida/"] [unique_id "aQMJjHPm_VZpDYzcRNUnHwABOIo"]
[Wed Oct 29 23:45:39 2025] [elconferencista.com] [error] [client 144.76.68.76:51656] [pid 2525752] apache2_util.c(271): [client 144.76.68.76] ModSecurity: Warning. Matched phrase ".htaccess" at ARGS:fileloc. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: .htaccess found within ARGS:fileloc: /home/ednermusika/elconferencista.com/images/.htaccess"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "www.elconferencista.com"] [uri "/conferencias-edner/9-conferencias-motivacion-y-crecimiento-personal-tu-vida-de-subida/"] [unique_id "aQMJk3Pm_VZpDYzcRNUnKgABOVM"]
[Wed Oct 29 23:47:18 2025] [elconferencista.com] [error] [client 43.167.236.228:40542] [pid 2525752] apache2_util.c(271): [client 43.167.236.228] ModSecurity: Warning. Pattern match "\\\\b(?:keep-alive|close),\\\\s?(?:keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "352"] [id "920210"] [msg "Multiple/Conflicting Connection Header Data Found"] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [hostname "www.elconferencista.com"] [uri "/"] [unique_id "aQMJ9nPm_VZpDYzcRNUnrAABOJE"]
[Wed Oct 29 23:48:07 2025] [elconferencista.com] [error] [client 144.76.68.76:41406] [pid 2525752] apache2_util.c(271): [client 144.76.68.76] ModSecurity: Access denied with code 418 (phase 1). Pattern match "wp-config.php" at ARGS_GET:fileloc. [file "/etc/modsecurity/mod_sec3_CRS/99_dreamhost_rules.conf"] [line "93"] [id "1990071"] [msg "wp-config.php Local File Inclusion Attempt"] [hostname "www.elconferencista.com"] [uri "/conferencias-edner/9-conferencias-motivacion-y-crecimiento-personal-tu-vida-de-subida/"] [unique_id "aQMKJ3Pm_VZpDYzcRNUn3AABORA"]
[Wed Oct 29 23:49:44 2025] [elconferencista.com] [error] [client 144.76.68.76:56536] [pid 2525752] apache2_util.c(271): [client 144.76.68.76] ModSecurity: Warning. Matched phrase ".htaccess" at ARGS:fileloc. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: .htaccess found within ARGS:fileloc: /home/ednermusika/elconferencista.com/elconferencista.com-110922/.htaccess"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "www.elconferencista.com"] [uri "/conferencias-edner/9-conferencias-motivacion-y-crecimiento-personal-tu-vida-de-subida/"] [unique_id "aQMKiHPm_VZpDYzcRNUoVQABOO4"]
[Wed Oct 29 23:49:51 2025] [elconferencista.com] [error] [client 144.76.68.76:59802] [pid 2525752] apache2_util.c(271): [client 144.76.68.76] ModSecurity: Warning. Matched phrase ".htaccess" at ARGS:fileloc. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: .htaccess found within ARGS:fileloc: /home/ednermusika/elconferencista.com/.well-known/.htaccess"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "www.elconferencista.com"] [uri "/conferencias-edner/9-conferencias-motivacion-y-crecimiento-personal-tu-vida-de-subida/"] [unique_id "aQMKj3Pm_VZpDYzcRNUoWwABOSI"]
[Wed Oct 29 23:50:06 2025] [elconferencista.com] [error] [client 144.76.68.76:38938] [pid 2525752] apache2_util.c(271): [client 144.76.68.76] ModSecurity: Warning. Matched phrase ".cshrc" at ARGS:fileloc. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: .cshrc found within ARGS:fileloc: /home/ednermusika/.cshrc"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "www.elconferencista.com"] [uri "/conferencias-edner/9-conferencias-motivacion-y-crecimiento-personal-tu-vida-de-subida/"] [unique_id "aQMKnnPm_VZpDYzcRNUobAABOJI"]
[Wed Oct 29 23:50:13 2025] [elconferencista.com] [error] [client 144.76.68.76:42404] [pid 2525752] apache2_util.c(271): [client 144.76.68.76] ModSecurity: Warning. Matched phrase ".bashrc" at ARGS:fileloc. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: .bashrc found within ARGS:fileloc: /home/ednermusika/.bashrc"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "www.elconferencista.com"] [uri "/conferencias-edner/9-conferencias-motivacion-y-crecimiento-personal-tu-vida-de-subida/"] [unique_id "aQMKpXPm_VZpDYzcRNUoeAABOKQ"]
[Wed Oct 29 23:50:21 2025] [elconferencista.com] [error] [client 144.76.68.76:46248] [pid 2525752] apache2_util.c(271): [client 144.76.68.76] ModSecurity: Warning. Matched phrase ".bash_" at ARGS:fileloc. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: .bash_ found within ARGS:fileloc: /home/ednermusika/.bash_profile"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "www.elconferencista.com"] [uri "/conferencias-edner/9-conferencias-motivacion-y-crecimiento-personal-tu-vida-de-subida/"] [unique_id "aQMKrXPm_VZpDYzcRNUohwABONI"]
[Wed Oct 29 23:50:29 2025] [elconferencista.com] [error] [client 144.76.68.76:49972] [pid 2525752] apache2_util.c(271): [client 144.76.68.76] ModSecurity: Warning. Matched phrase ".bash_" at ARGS:fileloc. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "116"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: .bash_ found within ARGS:fileloc: /home/ednermusika/.bash_history"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "www.elconferencista.com"] [uri "/conferencias-edner/9-conferencias-motivacion-y-crecimiento-personal-tu-vida-de-subida/"] [unique_id "aQMKtXPm_VZpDYzcRNUoiQABOLI"]
[Wed Oct 29 23:51:56 2025] [elconferencista.com] [error] [client 144.76.68.76:56452] [pid 2525752] apache2_util.c(271): [client 144.76.68.76] ModSecurity: Warning. Invalid URL Encoding: Non-hexadecimal digits used at TX:2. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "393"] [id "920220"] [msg "URL Encoding Abuse Attack Attempt"] [data "/conferencias-edner/9-conferencias-motivacion-y-crecimiento-personal-tu-vida-de-subida/?fileloc=%2F%2F.critical_anomaly_score%7D%2Csetvar%3Atx.sql_injection_score%3D+%25%7Btx.critical_anomaly_score%7D&path=%2F"] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/267/72"] [hostname "www.elconferencista.com"] [uri "/conferencias-edner/9-conferencias-motivacion-y-crecimiento-personal-tu-vida-de-subida/"] [unique_id "aQMLDHPm_VZpDYzcRNUo2gABOVY"]
[Wed Oct 29 23:51:56 2025] [elconferencista.com] [error] [client 144.76.68.76:56452] [pid 2525752] apache2_util.c(271): [client 144.76.68.76] ModSecurity: Warning. Invalid URL Encoding: Non-hexadecimal digits used at TX:0. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "427"] [id "920221"] [msg "URL Encoding Abuse Attack Attempt"] [data ""] [severity "CRITICAL"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/267/72"] [hostname "www.elconferencista.com"] [uri "/conferencias-edner/9-conferencias-motivacion-y-crecimiento-personal-tu-vida-de-subida/"] [unique_id "aQMLDHPm_VZpDYzcRNUo2gABOVY"]
[Thu Oct 30 00:08:57 2025] [elconferencista.com] [error] [client 43.135.172.89:57316] [pid 209012] apache2_util.c(271): [client 43.135.172.89] ModSecurity: Warning. Pattern match "\\\\b(?:keep-alive|close),\\\\s?(?:keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "352"] [id "920210"] [msg "Multiple/Conflicting Connection Header Data Found"] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [hostname "www.elconferencista.com"] [uri "/"] [unique_id "aQMPCZY4DQ2npYh906HdNgABOO0"]
[Thu Oct 30 00:09:23 2025] [elconferencista.com] [warn] [client 144.76.68.76:55804] [pid 209012] fcgid_bridge.c(409): (104)Connection reset by peer: mod_fcgid: ap_pass_brigade failed in handle_request_ipc function
[Thu Oct 30 00:14:49 2025] [elconferencista.com] [error] [client 109.228.37.48:42904] [pid 209012] apache2_util.c(271): [client 109.228.37.48] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "744"] [id "920340"] [msg "Request Containing Content, but Missing Content-Type header"] [severity "NOTICE"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [hostname "www.elconferencista.com"] [uri "/xmlrpc.php"] [unique_id "aQMQaZY4DQ2npYh906HfzgABOTI"]
[Thu Oct 30 00:18:47 2025] [elconferencista.com] [error] [client 43.130.105.21:58116] [pid 209012] apache2_util.c(271): [client 43.130.105.21] ModSecurity: Warning. Pattern match "\\\\b(?:keep-alive|close),\\\\s?(?:keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "352"] [id "920210"] [msg "Multiple/Conflicting Connection Header Data Found"] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [hostname "www.elconferencista.com"] [uri "/"] [unique_id "aQMRV5Y4DQ2npYh906Hg5gABOOQ"]
[Thu Oct 30 00:28:27 2025] [elconferencista.com] [error] [client 43.173.1.57:60968] [pid 209012] apache2_util.c(271): [client 43.173.1.57] ModSecurity: Access denied with code 418 (phase 1). Pattern match "wp-config.php" at ARGS_GET:fileloc. [file "/etc/modsecurity/mod_sec3_CRS/99_dreamhost_rules.conf"] [line "93"] [id "1990071"] [msg "wp-config.php Local File Inclusion Attempt"] [hostname "www.elconferencista.com"] [uri "/"] [unique_id "aQMTm5Y4DQ2npYh906HkUAABOIE"]
[Thu Oct 30 00:37:53 2025] [elconferencista.com] [error] [client 43.157.98.187:57246] [pid 209012] apache2_util.c(271): [client 43.157.98.187] ModSecurity: Warning. Pattern match "\\\\b(?:keep-alive|close),\\\\s?(?:keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "352"] [id "920210"] [msg "Multiple/Conflicting Connection Header Data Found"] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [hostname "www.elconferencista.com"] [uri "/"] [unique_id "aQMV0ZY4DQ2npYh906HnRgABOL0"]
[Thu Oct 30 00:47:48 2025] [elconferencista.com] [error] [client 43.157.191.20:38552] [pid 209012] apache2_util.c(271): [client 43.157.191.20] ModSecurity: Warning. Pattern match "\\\\b(?:keep-alive|close),\\\\s?(?:keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/modsecurity/mod_sec3_CRS/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "352"] [id "920210"] [msg "Multiple/Conflicting Connection Header Data Found"] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/4.7.0-dev"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [hostname "www.elconferencista.com"] [uri "/"] [unique_id "aQMYJJY4DQ2npYh906HqlQABOLA"]