ampsstudio.com [Wed Aug 03 14:08:19 2022] [error] [client 5.45.94.172:0] [client 5.45.94.172] ModSecurity: Access denied with code 403 (phase 2). Pattern match "/wp-content/uploads/.*\\\\.php" at REQUEST_FILENAME. [file "remote server"] [line "-1"] [id "430017"] [msg "Malware.Expert - request_uri: Wordpress - prevent PHP files from executing"] [hostname "ampsstudio.com"] [uri "/wp-content/uploads/pass.php"] [unique_id "YupzQw0RApAE03QcYZs72AAAAAM"] ampsstudio.com [Wed Aug 03 15:20:03 2022] [error] [client 152.89.196.102:0] [client 152.89.196.102] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES. [file "remote server"] [line "-1"] [id "580000"] [msg "Malware.Expert - Wordpress - Referer missing"] [hostname "ampsstudio.com"] [uri "/wp-admin/network/opengraph.php"] [unique_id "YuqEE4C2inz22RZxzg4_BAAAAAc"] ampsstudio.com [Wed Aug 03 15:21:06 2022] [error] [client 152.89.196.102:0] [client 152.89.196.102] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES. [file "remote server"] [line "-1"] [id "580000"] [msg "Malware.Expert - Wordpress - Referer missing"] [hostname "ampsstudio.com"] [uri "/wp-admin/network/opengraph.php"] [unique_id "YuqEUhXinKOcb5Y2Dr59-AAAAAM"] ampsstudio.com [Wed Aug 03 15:21:59 2022] [error] [client 152.89.196.102:0] [client 152.89.196.102] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES. [file "remote server"] [line "-1"] [id "580000"] [msg "Malware.Expert - Wordpress - Referer missing"] [hostname "ampsstudio.com"] [uri "/wp-admin/network/opengraph.php"] [unique_id "YuqEh8LhDtlW8a36xKRBMgAAAAY"] cpanel.ampsstudio.com [Wed Aug 03 15:28:25 2022] [error] [client 109.206.241.214:0] [client 109.206.241.214] ModSecurity: Access denied with code 403 (phase 2). Match of "contains index.php" against "REQUEST_URI" required. [file "remote server"] [line "-1"] [id "570076"] [msg "Malware.Expert - Malware"] [hostname "cpanel.ampsstudio.com"] [uri "/wp-plain.php"] [unique_id "YuqGCYC2inz22RZxzg4_CwAAAAc"] cpanel.ampsstudio.com [Wed Aug 03 15:28:55 2022] [error] [client 109.206.241.214:0] [client 109.206.241.214] ModSecurity: Access denied with code 403 (phase 2). Match of "contains index.php" against "REQUEST_URI" required. [file "remote server"] [line "-1"] [id "570076"] [msg "Malware.Expert - Malware"] [hostname "cpanel.ampsstudio.com"] [uri "/wp-plain.php"] [unique_id "YuqGJxXinKOcb5Y2Dr59_wAAAAM"] ampsstudio.com [Wed Aug 03 16:26:03 2022] [error] [client 152.89.196.102:0] [client 152.89.196.102] ModSecurity: Access denied with connection close (phase 2). String match "bot" at ARGS_NAMES:bot. [file "remote server"] [line "-1"] [id "570011"] [msg "Malware.Expert - Wordpress - Malware"] [hostname "ampsstudio.com"] [uri "/wp-content/themes/index.php"] [unique_id "YuqTi8FJgwEtzXpdUliGPQAAAAU"] ampsstudio.com [Wed Aug 03 16:26:11 2022] [error] [client 152.89.196.102:0] [client 152.89.196.102] ModSecurity: Access denied with connection close (phase 2). String match "bot" at ARGS_NAMES:bot. [file "remote server"] [line "-1"] [id "570011"] [msg "Malware.Expert - Wordpress - Malware"] [hostname "ampsstudio.com"] [uri "/wp-content/themes/index.php"] [unique_id "YuqTk2F07T4DdaowQCO52AAAAAA"] ampsstudio.com [Wed Aug 03 16:26:19 2022] [error] [client 152.89.196.102:0] [client 152.89.196.102] ModSecurity: Access denied with connection close (phase 2). String match "bot" at ARGS_NAMES:bot. [file "remote server"] [line "-1"] [id "570011"] [msg "Malware.Expert - Wordpress - Malware"] [hostname "ampsstudio.com"] [uri "/wp-content/themes/index.php"] [unique_id "YuqTm3FYW0SuWiHTroauAwAAAAQ"] ampsstudio.com [Wed Aug 03 16:39:38 2022] [error] [client 152.89.196.102:0] [client 152.89.196.102] ModSecurity: Access denied with code 403 (phase 2). Pattern match "/wp-content/uploads/.*\\\\.php" at REQUEST_FILENAME. [file "remote server"] [line "-1"] [id "430017"] [msg "Malware.Expert - request_uri: Wordpress - prevent PHP files from executing"] [hostname "ampsstudio.com"] [uri "/wp-content/uploads/index.php"] [unique_id "YuqWumF07T4DdaowQCO55gAAAAA"] ampsstudio.com [Wed Aug 03 16:39:48 2022] [error] [client 152.89.196.102:0] [client 152.89.196.102] ModSecurity: Access denied with code 403 (phase 2). Pattern match "/wp-content/uploads/.*\\\\.php" at REQUEST_FILENAME. [file "remote server"] [line "-1"] [id "430017"] [msg "Malware.Expert - request_uri: Wordpress - prevent PHP files from executing"] [hostname "ampsstudio.com"] [uri "/wp-content/uploads/index.php"] [unique_id "YuqWxE1nK0cTXXoPvzqVXwAAAAE"] ampsstudio.com [Wed Aug 03 16:39:55 2022] [error] [client 152.89.196.102:0] [client 152.89.196.102] ModSecurity: Access denied with code 403 (phase 2). Pattern match "/wp-content/uploads/.*\\\\.php" at REQUEST_FILENAME. [file "remote server"] [line "-1"] [id "430017"] [msg "Malware.Expert - request_uri: Wordpress - prevent PHP files from executing"] [hostname "ampsstudio.com"] [uri "/wp-content/uploads/index.php"] [unique_id "YuqWy8LhDtlW8a36xKRBZAAAAAY"] ampsstudio.com [Wed Aug 03 17:02:37 2022] [error] [client 152.89.196.102:0] [client 152.89.196.102] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_HEADERS_NAMES. [file "remote server"] [line "-1"] [id "580001"] [msg "Malware.Expert - Wordpress - Referer missing"] [hostname "ampsstudio.com"] [uri "/wp-content/plugins/wordpress-seo/js/index.php"] [unique_id "YuqcHcFJgwEtzXpdUliGYAAAAAU"] ampsstudio.com [Wed Aug 03 17:02:50 2022] [error] [client 152.89.196.102:0] [client 152.89.196.102] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_HEADERS_NAMES. [file "remote server"] [line "-1"] [id "580001"] [msg "Malware.Expert - Wordpress - Referer missing"] [hostname "ampsstudio.com"] [uri "/wp-content/plugins/wordpress-seo/js/index.php"] [unique_id "YuqcKhXinKOcb5Y2Dr5-SAAAAAM"] ampsstudio.com [Wed Aug 03 17:03:00 2022] [error] [client 152.89.196.102:0] [client 152.89.196.102] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_HEADERS_NAMES. [file "remote server"] [line "-1"] [id "580001"] [msg "Malware.Expert - Wordpress - Referer missing"] [hostname "ampsstudio.com"] [uri "/wp-content/plugins/wordpress-seo/js/index.php"] [unique_id "YuqcNJfs7SlNasGKjDXPtwAAAAI"] ampsstudio.com [Wed Aug 03 17:15:42 2022] [error] [client 152.89.196.102:0] [client 152.89.196.102] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_HEADERS_NAMES. [file "remote server"] [line "-1"] [id "431000"] [msg "Malware.Expert - request_uri: CSS - prevent PHP files from executing"] [hostname "ampsstudio.com"] [uri "/wp-content/plugins/quick-setup/css/index.php"] [unique_id "YuqfLmHddhCrBzXx4A5otAAAAAg"] ampsstudio.com [Wed Aug 03 17:15:54 2022] [error] [client 152.89.196.102:0] [client 152.89.196.102] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_HEADERS_NAMES. [file "remote server"] [line "-1"] [id "431000"] [msg "Malware.Expert - request_uri: CSS - prevent PHP files from executing"] [hostname "ampsstudio.com"] [uri "/wp-content/plugins/quick-setup/css/index.php"] [unique_id "YuqfOsLhDtlW8a36xKRBeQAAAAY"] ampsstudio.com [Wed Aug 03 17:16:06 2022] [error] [client 152.89.196.102:0] [client 152.89.196.102] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_HEADERS_NAMES. [file "remote server"] [line "-1"] [id "431000"] [msg "Malware.Expert - request_uri: CSS - prevent PHP files from executing"] [hostname "ampsstudio.com"] [uri "/wp-content/plugins/quick-setup/css/index.php"] [unique_id "YuqfRsFJgwEtzXpdUliGYwAAAAU"] www.ampsstudio.com [Wed Aug 03 18:42:08 2022] [error] [client 213.193.21.228:0] AH01071: Got error 'PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179' www.ampsstudio.com [Wed Aug 03 18:42:08 2022] [error] [client 213.193.21.228:0] AH01071: Got error 'PHP message: PHP Warning: Cannot modify header information - headers already sent by (output started at /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-includes/functions.php:5275) in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/includes/sonaar-music/css/theme/custom-style.php on line 2' ampsstudio.com [Wed Aug 03 19:30:50 2022] [error] [client 173.255.213.230:0] [client 173.255.213.230] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "ampsstudio.com"] [uri "/.env"] [unique_id "Yuq-2ufon7gD-1MysXedEAAAAA8"] ampsstudio.com [Wed Aug 03 22:28:21 2022] [error] [client 20.244.34.44:0] AH01276: Cannot serve directory /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-admin/includes/: No matching DirectoryIndex (index.php,index.html,index.htm) found, and server-generated directory index forbidden by Options directive www.ampsstudio.com [Thu Aug 04 02:18:49 2022] [error] [client 51.11.6.150:0] AH01071: Got error 'PHP message: PHP Warning: Undefined array key "HTTP_USER_AGENT" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/bookly-responsive-appointment-booking-tool/frontend/modules/booking/ShortCode.php on line 62' www.ampsstudio.com [Thu Aug 04 04:51:23 2022] [error] [client 212.102.50.33:0] AH01071: Got error 'PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179' www.ampsstudio.com [Thu Aug 04 04:51:23 2022] [error] [client 212.102.50.33:0] AH01071: Got error 'PHP message: PHP Warning: Cannot modify header information - headers already sent by (output started at /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-includes/functions.php:5275) in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/includes/sonaar-music/css/theme/custom-style.php on line 2' ampsstudio.com [Thu Aug 04 05:20:50 2022] [error] [client 107.182.129.216:0] [client 107.182.129.216] ModSecurity: Access denied with code 403 (phase 2). Pattern match "/wp-content/uploads/.*\\\\.php" at REQUEST_FILENAME. [file "remote server"] [line "-1"] [id "430017"] [msg "Malware.Expert - request_uri: Wordpress - prevent PHP files from executing"] [hostname "ampsstudio.com"] [uri "/wp-content/uploads/typehub/custom/zwzfwblj/bala.php"] [unique_id "YutJImWYoUdRdKNxlrE-WAAAAAc"] ampsstudio.com [Thu Aug 04 05:22:22 2022] [error] [client 107.182.129.216:0] [client 107.182.129.216] ModSecurity: Access denied with code 403 (phase 2). Pattern match "/ioptimization/.*\\\\.php\\\\?rchk" at REQUEST_URI. [file "remote server"] [line "-1"] [id "570039"] [msg "Malware.Expert - Wordpress malware plugin - ioptimization"] [hostname "ampsstudio.com"] [uri "/wp-content/plugins/ioptimization/IOptimize.php"] [unique_id "YutJfsDybKvDfWfbLCwpDgAAAAI"] ampsstudio.com [Thu Aug 04 05:24:57 2022] [error] [client 107.182.129.216:0] [client 107.182.129.216] ModSecurity: Access denied with code 403 (phase 2). Pattern match "/wp-content/uploads/.*\\\\.php" at REQUEST_FILENAME. [file "remote server"] [line "-1"] [id "430017"] [msg "Malware.Expert - request_uri: Wordpress - prevent PHP files from executing"] [hostname "ampsstudio.com"] [uri "/wp-content/uploads/kaswara/fonts_icon/bala/bala.php"] [unique_id "YutKGdM80Zr0p6W1-pmSNgAAAAE"] ampsstudio.com [Thu Aug 04 05:26:15 2022] [error] [client 107.182.129.216:0] [client 107.182.129.216] ModSecurity: Access denied with code 403 (phase 2). Pattern match "/wp-content/uploads/.*\\\\.php" at REQUEST_FILENAME. [file "remote server"] [line "-1"] [id "430017"] [msg "Malware.Expert - request_uri: Wordpress - prevent PHP files from executing"] [hostname "ampsstudio.com"] [uri "/wp-content/uploads/Mjzrh.php"] [unique_id "YutKZ48MLGVnZcvG018G0wAAAAQ"] ampsstudio.com [Thu Aug 04 05:27:07 2022] [error] [client 107.182.129.216:0] [client 107.182.129.216] ModSecurity: Access denied with code 403 (phase 2). Pattern match "/wp-content/uploads/.*\\\\.php" at REQUEST_FILENAME. [file "remote server"] [line "-1"] [id "430017"] [msg "Malware.Expert - request_uri: Wordpress - prevent PHP files from executing"] [hostname "ampsstudio.com"] [uri "/wp-content/uploads/p3d/bala.php"] [unique_id "YutKm3Tcla63OY_1jLm6nQAAAAU"] www.ampsstudio.com [Thu Aug 04 06:01:08 2022] [error] [client 156.146.41.68:0] AH01071: Got error 'PHP message: PHP Warning: Cannot modify header information - headers already sent by (output started at /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-includes/functions.php:5275) in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/includes/sonaar-music/css/theme/custom-style.php on line 2' www.ampsstudio.com [Thu Aug 04 06:43:34 2022] [error] [client 94.140.134.34:0] AH01071: Got error 'PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179' www.ampsstudio.com [Thu Aug 04 06:43:34 2022] [error] [client 94.140.134.34:0] AH01071: Got error 'PHP message: PHP Warning: Cannot modify header information - headers already sent by (output started at /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-includes/functions.php:5275) in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/includes/sonaar-music/css/theme/custom-style.php on line 2' ampsstudio.com [Thu Aug 04 07:12:34 2022] [error] [client 185.83.144.103:0] [client 185.83.144.103] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "ampsstudio.com"] [uri "/.env/config"] [unique_id "YutjUo8MLGVnZcvG018G-QAAAAQ"] ampsstudio.com [Thu Aug 04 07:59:56 2022] [error] [client 20.213.146.71:0] [client 20.213.146.71] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "ampsstudio.com"] [uri "/.env"] [unique_id "YutubKs-7ZJWCghI5fPnigAAAAg"] ampsstudio.com [Thu Aug 04 10:03:56 2022] [error] [client 208.67.106.176:0] [client 208.67.106.176] ModSecurity: Access denied with code 403 (phase 2). Pattern match "/wp-content/uploads/.*\\\\.php" at REQUEST_FILENAME. [file "remote server"] [line "-1"] [id "430017"] [msg "Malware.Expert - request_uri: Wordpress - prevent PHP files from executing"] [hostname "ampsstudio.com"] [uri "/wp-content/uploads/typehub/custom/tlzhtkxm/bala.php"] [unique_id "YuuLfIF59fuF0puCaaafcAAAAAs"] ampsstudio.com [Thu Aug 04 10:06:26 2022] [error] [client 208.67.106.176:0] [client 208.67.106.176] ModSecurity: Access denied with code 403 (phase 2). Pattern match "/ioptimization/.*\\\\.php\\\\?rchk" at REQUEST_URI. [file "remote server"] [line "-1"] [id "570039"] [msg "Malware.Expert - Wordpress malware plugin - ioptimization"] [hostname "ampsstudio.com"] [uri "/wp-content/plugins/ioptimization/IOptimize.php"] [unique_id "YuuMEuu1LgSuY5Bj5Cy1hwAAAAM"] cpanel.ampsstudio.com [Thu Aug 04 14:52:03 2022] [error] [client 20.213.146.71:0] [client 20.213.146.71] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "cpanel.ampsstudio.com"] [uri "/.env"] [unique_id "YuvPA5K_dkUF7wS5f2KVogAAAAQ"] www.ampsstudio.com [Thu Aug 04 17:20:04 2022] [error] [client 176.109.176.162:0] AH01071: Got error 'PHP message: PHP Warning: Undefined array key "HTTP_USER_AGENT" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/bookly-responsive-appointment-booking-tool/frontend/modules/booking/ShortCode.php on line 62' ampsstudio.com [Thu Aug 04 17:47:17 2022] [error] [client 2600:1f16:1b9:1500:931f:e625:e23e:5ff9:0] [client 2600:1f16:1b9:1500:931f:e625:e23e:5ff9] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "ampsstudio.com"] [uri "/.env"] [unique_id "Yuv4FVe-qnUb9W4DYPFoDwAAAAA"] ampsstudio.com [Thu Aug 04 18:21:39 2022] [error] [client 2600:1f16:1b9:1500:931f:e625:e23e:5ff9:0] [client 2600:1f16:1b9:1500:931f:e625:e23e:5ff9] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "ampsstudio.com"] [uri "/.env"] [unique_id "YuwAIwYzRUg4KiTRsxBWvgAAAAU"] ampsstudio.com [Thu Aug 04 19:50:32 2022] [error] [client 193.233.193.11:0] [client 193.233.193.11] ModSecurity: Access denied with code 403 (phase 2). String match "/.git/config" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430058"] [msg "Malware.Expert - request_uri: .git config"] [hostname "ampsstudio.com"] [uri "/.git/config"] [unique_id "YuwU-PfMz5nPpRJiLUAEfgAAAAE"] ampsstudio.com [Thu Aug 04 19:54:39 2022] [error] [client 2600:1f16:1b9:1500:931f:e625:e23e:5ff9:0] [client 2600:1f16:1b9:1500:931f:e625:e23e:5ff9] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "ampsstudio.com"] [uri "/.env"] [unique_id "YuwV75Fb-8bc76oS6dFNzwAAAAs"] www.ampsstudio.com [Thu Aug 04 21:00:28 2022] [error] [client 88.218.170.57:0] AH01071: Got error 'PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179' www.ampsstudio.com [Thu Aug 04 21:00:28 2022] [error] [client 88.218.170.57:0] AH01071: Got error 'PHP message: PHP Warning: Cannot modify header information - headers already sent by (output started at /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-includes/functions.php:5275) in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/includes/sonaar-music/css/theme/custom-style.php on line 2' ampsstudio.com [Thu Aug 04 21:12:58 2022] [error] [client 2600:1f16:1b9:1500:931f:e625:e23e:5ff9:0] [client 2600:1f16:1b9:1500:931f:e625:e23e:5ff9] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "ampsstudio.com"] [uri "/.env"] [unique_id "YuwoSsu4N7At9oKCXB4bEAAAAAA"] www.ampsstudio.com [Thu Aug 04 21:43:20 2022] [error] [client 212.102.33.66:0] AH01071: Got error 'PHP message: PHP Warning: Cannot modify header information - headers already sent by (output started at /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-includes/functions.php:5275) in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/includes/sonaar-music/css/theme/custom-style.php on line 2' ampsstudio.com [Thu Aug 04 22:13:17 2022] [error] [client 2600:1f16:1b9:1500:931f:e625:e23e:5ff9:0] [client 2600:1f16:1b9:1500:931f:e625:e23e:5ff9] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "ampsstudio.com"] [uri "/.env"] [unique_id "Yuw2bET5sn84Tl8DAEKiHAAAABM"] www.ampsstudio.com [Thu Aug 04 23:48:23 2022] [error] [client 88.147.153.101:0] AH01071: Got error 'PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179' www.ampsstudio.com [Thu Aug 04 23:48:23 2022] [error] [client 88.147.153.101:0] AH01071: Got error 'PHP message: PHP Warning: Cannot modify header information - headers already sent by (output started at /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-includes/functions.php:5275) in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/includes/sonaar-music/css/theme/custom-style.php on line 2' www.ampsstudio.com [Fri Aug 05 00:14:20 2022] [error] [client 185.220.102.250:0] AH01071: Got error 'PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179' www.ampsstudio.com [Fri Aug 05 00:14:20 2022] [error] [client 185.220.102.250:0] AH01071: Got error 'PHP message: PHP Warning: Cannot modify header information - headers already sent by (output started at /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-includes/functions.php:5275) in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/includes/sonaar-music/css/theme/custom-style.php on line 2' www.ampsstudio.com [Fri Aug 05 00:25:35 2022] [error] [client 199.249.230.79:0] AH01071: Got error 'PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179' www.ampsstudio.com [Fri Aug 05 00:25:35 2022] [error] [client 199.249.230.79:0] AH01071: Got error 'PHP message: PHP Warning: Cannot modify header information - headers already sent by (output started at /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-includes/functions.php:5275) in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/includes/sonaar-music/css/theme/custom-style.php on line 2' ampsstudio.com [Fri Aug 05 01:45:06 2022] [error] [client 20.14.86.193:0] [client 20.14.86.193] ModSecurity: Access denied with code 403 (phase 2). Match of "contains index.php" against "REQUEST_URI" required. [file "remote server"] [line "-1"] [id "570076"] [msg "Malware.Expert - Malware"] [hostname "ampsstudio.com"] [uri "/wp-plain.php"] [unique_id "YuxoEmto1x4_RsQoBA96GgAAAAw"] www.ampsstudio.com [Fri Aug 05 01:45:16 2022] [error] [client 20.14.86.193:0] [client 20.14.86.193] ModSecurity: Access denied with code 403 (phase 2). String match "php.suspected" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430059"] [msg "Malware.Expert - request_uri: .PHP suspected files"] [hostname "www.ampsstudio.com"] [uri "/wp-content/plugins/apikey/apikey.php.suspected"] [unique_id "YuxoHJLUu7mIvBS7s53UowAAAAE"] www.ampsstudio.com [Fri Aug 05 01:45:17 2022] [error] [client 20.14.86.193:0] [client 20.14.86.193] ModSecurity: Access denied with code 403 (phase 2). String match "php.suspected" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430059"] [msg "Malware.Expert - request_uri: .PHP suspected files"] [hostname "www.ampsstudio.com"] [uri "/plugins/content/apismtp/apismtp.php.suspected"] [unique_id "YuxoHeEzJWW6Dx5bYc7rVAAAAAo"] www.ampsstudio.com [Fri Aug 05 04:28:20 2022] [error] [client 185.220.101.182:0] AH01071: Got error 'PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179' www.ampsstudio.com [Fri Aug 05 04:28:20 2022] [error] [client 185.220.101.182:0] AH01071: Got error 'PHP message: PHP Warning: Cannot modify header information - headers already sent by (output started at /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-includes/functions.php:5275) in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/includes/sonaar-music/css/theme/custom-style.php on line 2' ampsstudio.com [Fri Aug 05 04:34:12 2022] [error] [client 152.89.196.102:0] [client 152.89.196.102] ModSecurity: Access denied with code 403 (phase 2). Pattern match "/assets/images/.*\\\\.php" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430023"] [msg "Malware.Expert - request_uri: ModX - prevent PHP files from executing"] [hostname "ampsstudio.com"] [uri "/assets/images/accesson.php"] [unique_id "YuyPtDgVl2Rzr4ZZrr3kkwAAAAg"] ampsstudio.com [Fri Aug 05 04:34:23 2022] [error] [client 152.89.196.102:0] [client 152.89.196.102] ModSecurity: Access denied with code 403 (phase 2). Pattern match "/assets/images/.*\\\\.php" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430023"] [msg "Malware.Expert - request_uri: ModX - prevent PHP files from executing"] [hostname "ampsstudio.com"] [uri "/assets/images/accesson.php"] [unique_id "YuyPv_HV6Vplkj4fVUj3ywAAAAA"] ampsstudio.com [Fri Aug 05 04:34:33 2022] [error] [client 152.89.196.102:0] [client 152.89.196.102] ModSecurity: Access denied with code 403 (phase 2). Pattern match "/assets/images/.*\\\\.php" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430023"] [msg "Malware.Expert - request_uri: ModX - prevent PHP files from executing"] [hostname "ampsstudio.com"] [uri "/assets/images/accesson.php"] [unique_id "YuyPyWV1qkBrhIc1putGlAAAAAQ"] www.ampsstudio.com [Fri Aug 05 08:12:54 2022] [error] [client 195.154.18.106:0] [client 195.154.18.106] ModSecurity: Access denied with code 403 (phase 2). String match "/accesson.php" at REQUEST_URI. [file "remote server"] [line "-1"] [id "570042"] [msg "Malware.Expert - Malware"] [hostname "www.ampsstudio.com"] [uri "/accesson.php"] [unique_id "YuzC9lsdkiIrLy5pgkVotQAAAAk"] www.ampsstudio.com [Fri Aug 05 08:13:02 2022] [error] [client 195.154.18.106:0] [client 195.154.18.106] ModSecurity: Access denied with code 403 (phase 2). String match "/ups.php" at REQUEST_URI. [file "remote server"] [line "-1"] [id "570041"] [msg "Malware.Expert - Malware"] [hostname "www.ampsstudio.com"] [uri "/ups.php"] [unique_id "YuzC_tdK9ArTS6ZpX_y-tgAAAAY"] www.ampsstudio.com [Fri Aug 05 10:52:45 2022] [error] [client 23.128.248.213:0] AH01071: Got error 'PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179' www.ampsstudio.com [Fri Aug 05 10:52:45 2022] [error] [client 23.128.248.213:0] AH01071: Got error 'PHP message: PHP Warning: Cannot modify header information - headers already sent by (output started at /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-includes/functions.php:5275) in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/includes/sonaar-music/css/theme/custom-style.php on line 2' www.ampsstudio.com [Fri Aug 05 11:40:35 2022] [error] [client 199.249.230.171:0] AH01071: Got error 'PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179' www.ampsstudio.com [Fri Aug 05 11:40:35 2022] [error] [client 199.249.230.171:0] AH01071: Got error 'PHP message: PHP Warning: Cannot modify header information - headers already sent by (output started at /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-includes/functions.php:5275) in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/includes/sonaar-music/css/theme/custom-style.php on line 2' ampsstudio.com [Fri Aug 05 14:24:23 2022] [error] [client 152.89.196.102:0] [client 152.89.196.102] ModSecurity: Access denied with code 403 (phase 2). Pattern match "/assets/images/.*\\\\.php" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430023"] [msg "Malware.Expert - request_uri: ModX - prevent PHP files from executing"] [hostname "ampsstudio.com"] [uri "/assets/images/ups.php"] [unique_id "Yu0aB1sdkiIrLy5pgkVpwQAAAAk"] ampsstudio.com [Fri Aug 05 14:24:34 2022] [error] [client 152.89.196.102:0] [client 152.89.196.102] ModSecurity: Access denied with code 403 (phase 2). Pattern match "/assets/images/.*\\\\.php" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430023"] [msg "Malware.Expert - request_uri: ModX - prevent PHP files from executing"] [hostname "ampsstudio.com"] [uri "/assets/images/ups.php"] [unique_id "Yu0aEj_tKhVmQHZw2F3URQAAAAc"] webmail.ampsstudio.com [Fri Aug 05 15:42:38 2022] [error] [client 193.233.193.11:0] [client 193.233.193.11] ModSecurity: Access denied with code 403 (phase 2). String match "/.git/config" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430058"] [msg "Malware.Expert - request_uri: .git config"] [hostname "webmail.ampsstudio.com"] [uri "/.git/config"] [unique_id "Yu0sXuziu2QEWcauBBdTKwAAABA"] webdisk.ampsstudio.com [Fri Aug 05 16:12:24 2022] [error] [client 193.233.193.11:0] [client 193.233.193.11] ModSecurity: Access denied with code 403 (phase 2). String match "/.git/config" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430058"] [msg "Malware.Expert - request_uri: .git config"] [hostname "webdisk.ampsstudio.com"] [uri "/.git/config"] [unique_id "Yu0zWDWGu0ps2VsYz1xRtwAAAAI"] ampsstudio.com [Fri Aug 05 17:17:12 2022] [error] [client 52.188.192.242:0] [client 52.188.192.242] ModSecurity: Access denied with code 403 (phase 2). Pattern match "/wp-content/uploads/.*\\\\.php" at REQUEST_FILENAME. [file "remote server"] [line "-1"] [id "430017"] [msg "Malware.Expert - request_uri: Wordpress - prevent PHP files from executing"] [hostname "ampsstudio.com"] [uri "/wp-content/uploads/2021/12/up.php"] [unique_id "Yu1CiDWGu0ps2VsYz1xR0AAAAAI"] ampsstudio.com [Fri Aug 05 17:17:27 2022] [error] [client 52.188.192.242:0] [client 52.188.192.242] ModSecurity: Access denied with code 403 (phase 2). String match "python" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "580102"] [msg "Malware.Expert - Wordpress - unknown python request"] [hostname "ampsstudio.com"] [uri "/wp-admin/alfa.php"] [unique_id "Yu1ClzVtKS9SzIfh4CiMEwAAAAE"] ampsstudio.com [Fri Aug 05 17:17:31 2022] [error] [client 52.188.192.242:0] [client 52.188.192.242] ModSecurity: Access denied with code 403 (phase 2). String match "python" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "580100"] [msg "Malware.Expert - Wordpress - unknown python request"] [hostname "ampsstudio.com"] [uri "/wp-includes/fw.php"] [unique_id "Yu1Cmz_tKhVmQHZw2F3UoQAAAAc"] ampsstudio.com [Fri Aug 05 17:17:32 2022] [error] [client 52.188.192.242:0] [client 52.188.192.242] ModSecurity: Access denied with code 403 (phase 2). String match "python" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "580101"] [msg "Malware.Expert - Wordpress - unknown python request"] [hostname "ampsstudio.com"] [uri "/wp-content/fw.php"] [unique_id "Yu1CnLPT4rIaGTyGf2covwAAAAo"] ampsstudio.com [Fri Aug 05 17:17:33 2022] [error] [client 52.188.192.242:0] [client 52.188.192.242] ModSecurity: Access denied with code 403 (phase 2). String match "python" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "580102"] [msg "Malware.Expert - Wordpress - unknown python request"] [hostname "ampsstudio.com"] [uri "/wp-admin/fw.php"] [unique_id "Yu1CnbJYdPVdLrwtUmtXUQAAAA4"] ampsstudio.com [Fri Aug 05 17:17:34 2022] [error] [client 52.188.192.242:0] [client 52.188.192.242] ModSecurity: Access denied with code 403 (phase 2). Pattern match "/wp-content/uploads/.*\\\\.php" at REQUEST_FILENAME. [file "remote server"] [line "-1"] [id "430017"] [msg "Malware.Expert - request_uri: Wordpress - prevent PHP files from executing"] [hostname "ampsstudio.com"] [uri "/wp-content/uploads/2021/12/fw.php"] [unique_id "Yu1Cnln9YQB7UXDc6HeROQAAAAs"] ampsstudio.com [Fri Aug 05 17:17:35 2022] [error] [client 52.188.192.242:0] [client 52.188.192.242] ModSecurity: Access denied with code 403 (phase 2). String match "/wso.php" at REQUEST_URI. [file "remote server"] [line "-1"] [id "570066"] [msg "Malware.Expert - PHP Command Shell (WSO)"] [hostname "ampsstudio.com"] [uri "/wp-includes/wso.php"] [unique_id "Yu1Cn-ziu2QEWcauBBdTYgAAABA"] ampsstudio.com [Fri Aug 05 17:17:36 2022] [error] [client 52.188.192.242:0] [client 52.188.192.242] ModSecurity: Access denied with code 403 (phase 2). String match "/wso.php" at REQUEST_URI. [file "remote server"] [line "-1"] [id "570066"] [msg "Malware.Expert - PHP Command Shell (WSO)"] [hostname "ampsstudio.com"] [uri "/wp-content/wso.php"] [unique_id "Yu1CoOpMKnY_drYcDADy4QAAAAg"] ampsstudio.com [Fri Aug 05 17:17:38 2022] [error] [client 52.188.192.242:0] [client 52.188.192.242] ModSecurity: Access denied with code 403 (phase 2). String match "/wso.php" at REQUEST_URI. [file "remote server"] [line "-1"] [id "570066"] [msg "Malware.Expert - PHP Command Shell (WSO)"] [hostname "ampsstudio.com"] [uri "/wp-admin/wso.php"] [unique_id "Yu1Coh_tjObwF4-liNb5uQAAAA0"] ampsstudio.com [Fri Aug 05 17:17:47 2022] [error] [client 52.188.192.242:0] [client 52.188.192.242] ModSecurity: Access denied with code 403 (phase 2). String match "/shell.php" at REQUEST_URI. [file "remote server"] [line "-1"] [id "570072"] [msg "Malware.Expert - PHP Command Shell"] [hostname "ampsstudio.com"] [uri "/shell.php"] [unique_id "Yu1Cq-ziu2QEWcauBBdTYwAAABA"] ampsstudio.com [Fri Aug 05 17:17:48 2022] [error] [client 52.188.192.242:0] [client 52.188.192.242] ModSecurity: Access denied with code 403 (phase 2). String match "connector.minimal.php" at REQUEST_URI. [file "remote server"] [line "-1"] [id "500083"] [msg "Malware.Expert - request_uri: 0-Day - Wordpress filemanager plugin"] [hostname "ampsstudio.com"] [uri "/wp-content/plugins/wp-file-manager/lib/php/connector.minimal.php"] [unique_id "Yu1CrOpMKnY_drYcDADy4gAAAAg"] mail.ampsstudio.com [Fri Aug 05 17:21:29 2022] [error] [client 193.233.193.11:0] [client 193.233.193.11] ModSecurity: Access denied with code 403 (phase 2). String match "/.git/config" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430058"] [msg "Malware.Expert - request_uri: .git config"] [hostname "mail.ampsstudio.com"] [uri "/.git/config"] [unique_id "Yu1DiTVtKS9SzIfh4CiMGwAAAAE"] ampsstudio.com [Fri Aug 05 19:30:10 2022] [error] [client 152.89.196.102:0] [client 152.89.196.102] ModSecurity: Access denied with code 403 (phase 2). String match "/ups.php" at REQUEST_URI. [file "remote server"] [line "-1"] [id "570041"] [msg "Malware.Expert - Malware"] [hostname "ampsstudio.com"] [uri "/ups.php"] [unique_id "Yu1hsjWGu0ps2VsYz1xSDwAAAAI"] ampsstudio.com [Fri Aug 05 19:30:20 2022] [error] [client 152.89.196.102:0] [client 152.89.196.102] ModSecurity: Access denied with code 403 (phase 2). String match "/ups.php" at REQUEST_URI. [file "remote server"] [line "-1"] [id "570041"] [msg "Malware.Expert - Malware"] [hostname "ampsstudio.com"] [uri "/ups.php"] [unique_id "Yu1hvCw200xzBCPAZZA9AAAAAAA"] ampsstudio.com [Fri Aug 05 19:30:27 2022] [error] [client 152.89.196.102:0] [client 152.89.196.102] ModSecurity: Access denied with code 403 (phase 2). String match "/ups.php" at REQUEST_URI. [file "remote server"] [line "-1"] [id "570041"] [msg "Malware.Expert - Malware"] [hostname "ampsstudio.com"] [uri "/ups.php"] [unique_id "Yu1hw8f-hTqlnQC3oPONOAAAAA8"] ampsstudio.com [Fri Aug 05 20:48:11 2022] [error] [client 176.124.214.173:0] [client 176.124.214.173] ModSecurity: Access denied with code 403 (phase 2). Pattern match ".+wp-config\\\\..*" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430005"] [msg "Malware.Expert - request_uri: read wordpress configuration file"] [hostname "ampsstudio.com"] [uri "/wp-config.php"] [unique_id "Yu1z--pMKnY_drYcDADzNgAAAAg"] ampsstudio.com [Fri Aug 05 20:48:11 2022] [error] [client 176.124.214.173:0] [client 176.124.214.173] ModSecurity: Access denied with code 403 (phase 2). Pattern match "/wp-config\\\\.php" at QUERY_STRING. [file "remote server"] [line "-1"] [id "410018"] [msg "Malware.Expert - query_string: unwanted wordpress config access"] [hostname "ampsstudio.com"] [uri "/wp-admin/admin-ajax.php"] [unique_id "Yu1z-7_3uNHWjqC4s52bFAAAAAM"] ampsstudio.com [Fri Aug 05 20:48:11 2022] [error] [client 176.124.214.173:0] [client 176.124.214.173] ModSecurity: Access denied with code 403 (phase 2). Pattern match "/wp-config\\\\.php" at QUERY_STRING. [file "remote server"] [line "-1"] [id "410018"] [msg "Malware.Expert - query_string: unwanted wordpress config access"] [hostname "ampsstudio.com"] [uri "/wp-admin/admin-ajax.php"] [unique_id "Yu1z-7_3uNHWjqC4s52bFQAAAAM"] ampsstudio.com [Fri Aug 05 21:18:32 2022] [error] [client 51.13.119.130:0] [client 51.13.119.130] ModSecurity: Access denied with code 403 (phase 2). Match of "contains index.php" against "REQUEST_URI" required. [file "remote server"] [line "-1"] [id "570076"] [msg "Malware.Expert - Malware"] [hostname "ampsstudio.com"] [uri "/wp-admin/admin-post.php"] [unique_id "Yu17GLJYdPVdLrwtUmtXzwAAAA4"] ampsstudio.com [Fri Aug 05 21:18:34 2022] [error] [client 51.13.119.130:0] [client 51.13.119.130] ModSecurity: Access denied with code 403 (phase 2). Pattern match "/wp-content/plugins/.*/up\\\\.php" at REQUEST_URI. [file "remote server"] [line "-1"] [id "570052"] [msg "Malware.Expert - Malware"] [hostname "ampsstudio.com"] [uri "/wp-content/plugins/instabuilder2/cache/up.php"] [unique_id "Yu17GupMKnY_drYcDADzXAAAAAg"] www.ampsstudio.com [Fri Aug 05 21:32:47 2022] [error] [client 66.249.66.201:0] AH01071: Got error 'PHP message: PHP Warning: Undefined array key "block" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/includes/classes/iron_sonaar.class.php on line 212PHP message: PHP Warning: Trying to access array offset on value of type null in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/includes/classes/iron_sonaar.class.php on line 212PHP message: PHP Warning: Undefined array key "block" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/includes/classes/iron_sonaar.class.php on line 214PHP message: PHP Warning: Trying to access array offset on value of type null in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/includes/classes/iron_sonaar.class.php on line 214' www.ampsstudio.com [Fri Aug 05 23:27:43 2022] [error] [client 185.220.101.81:0] AH01071: Got error 'PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179' www.ampsstudio.com [Fri Aug 05 23:27:43 2022] [error] [client 185.220.101.81:0] AH01071: Got error 'PHP message: PHP Warning: Cannot modify header information - headers already sent by (output started at /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-includes/functions.php:5275) in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/includes/sonaar-music/css/theme/custom-style.php on line 2' ampsstudio.com [Sat Aug 06 00:21:33 2022] [error] [client 152.89.196.102:0] [client 152.89.196.102] ModSecurity: Access denied with code 403 (phase 2). String match "/ups.php" at REQUEST_URI. [file "remote server"] [line "-1"] [id "570041"] [msg "Malware.Expert - Malware"] [hostname "ampsstudio.com"] [uri "/sites/default/files/ups.phpups.php"] [unique_id "Yu2l_T_tKhVmQHZw2F3VWgAAAAc"] ampsstudio.com [Sat Aug 06 00:21:42 2022] [error] [client 152.89.196.102:0] [client 152.89.196.102] ModSecurity: Access denied with code 403 (phase 2). String match "/ups.php" at REQUEST_URI. [file "remote server"] [line "-1"] [id "570041"] [msg "Malware.Expert - Malware"] [hostname "ampsstudio.com"] [uri "/sites/default/files/ups.phpups.php"] [unique_id "Yu2mBr_3uNHWjqC4s52beAAAAAM"] ampsstudio.com [Sat Aug 06 00:21:49 2022] [error] [client 152.89.196.102:0] [client 152.89.196.102] ModSecurity: Access denied with code 403 (phase 2). String match "/ups.php" at REQUEST_URI. [file "remote server"] [line "-1"] [id "570041"] [msg "Malware.Expert - Malware"] [hostname "ampsstudio.com"] [uri "/sites/default/files/ups.phpups.php"] [unique_id "Yu2mDTWGu0ps2VsYz1xSjQAAAAI"] ampsstudio.com [Sat Aug 06 00:31:34 2022] [error] [client 20.14.81.23:0] [client 20.14.81.23] ModSecurity: Access denied with code 403 (phase 2). String match "/Util/PHP/eval-stdin.php" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430046"] [msg "Malware.Expert - request_uri: CVE-2017-9841"] [hostname "ampsstudio.com"] [uri "/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php"] [unique_id "Yu2oViw200xzBCPAZZA9kgAAAAA"] ampsstudio.com [Sat Aug 06 00:52:25 2022] [error] [client 152.89.196.102:0] [client 152.89.196.102] ModSecurity: Access denied with code 403 (phase 2). String match "/ups.php" at REQUEST_URI. [file "remote server"] [line "-1"] [id "570041"] [msg "Malware.Expert - Malware"] [hostname "ampsstudio.com"] [uri "/cache/ups.phpups.php"] [unique_id "Yu2tOTVtKS9SzIfh4CiM6wAAAAE"] ampsstudio.com [Sat Aug 06 00:52:33 2022] [error] [client 152.89.196.102:0] [client 152.89.196.102] ModSecurity: Access denied with code 403 (phase 2). String match "/ups.php" at REQUEST_URI. [file "remote server"] [line "-1"] [id "570041"] [msg "Malware.Expert - Malware"] [hostname "ampsstudio.com"] [uri "/cache/ups.phpups.php"] [unique_id "Yu2tQbJYdPVdLrwtUmtYKAAAAA4"] ampsstudio.com [Sat Aug 06 00:52:41 2022] [error] [client 152.89.196.102:0] [client 152.89.196.102] ModSecurity: Access denied with code 403 (phase 2). String match "/ups.php" at REQUEST_URI. [file "remote server"] [line "-1"] [id "570041"] [msg "Malware.Expert - Malware"] [hostname "ampsstudio.com"] [uri "/cache/ups.phpups.php"] [unique_id "Yu2tSTVtKS9SzIfh4CiM7AAAAAE"] ampsstudio.com [Sat Aug 06 01:46:42 2022] [error] [client 152.89.196.102:0] [client 152.89.196.102] ModSecurity: Access denied with code 403 (phase 2). Pattern match "/wp-content/uploads/.*\\\\.php" at REQUEST_FILENAME. [file "remote server"] [line "-1"] [id "430017"] [msg "Malware.Expert - request_uri: Wordpress - prevent PHP files from executing"] [hostname "ampsstudio.com"] [uri "/wp-content/uploads/wp-blockup.php"] [unique_id "Yu258j_tKhVmQHZw2F3VgwAAAAc"] ampsstudio.com [Sat Aug 06 01:46:47 2022] [error] [client 152.89.196.102:0] [client 152.89.196.102] ModSecurity: Access denied with code 403 (phase 2). Pattern match "/wp-content/uploads/.*\\\\.php" at REQUEST_FILENAME. [file "remote server"] [line "-1"] [id "430017"] [msg "Malware.Expert - request_uri: Wordpress - prevent PHP files from executing"] [hostname "ampsstudio.com"] [uri "/wp-content/uploads/wp-blockup.php"] [unique_id "Yu2598lnd1igWv2q6onglQAAAAY"] ampsstudio.com [Sat Aug 06 01:46:51 2022] [error] [client 152.89.196.102:0] [client 152.89.196.102] ModSecurity: Access denied with code 403 (phase 2). Pattern match "/wp-content/uploads/.*\\\\.php" at REQUEST_FILENAME. [file "remote server"] [line "-1"] [id "430017"] [msg "Malware.Expert - request_uri: Wordpress - prevent PHP files from executing"] [hostname "ampsstudio.com"] [uri "/wp-content/uploads/wp-blockup.php"] [unique_id "Yu25-yw200xzBCPAZZA9pQAAAAA"] ampsstudio.com [Sat Aug 06 03:25:28 2022] [error] [client 185.36.81.23:0] [client 185.36.81.23] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "ampsstudio.com"] [uri "/.env"] [unique_id "Yu3RGDVtKS9SzIfh4CiNMgAAAAE"] www.ampsstudio.com [Sat Aug 06 04:30:48 2022] [crit] [client 66.249.92.151:0] AH00529: /home/virtual/vps-aa3942/a/aede5353c4/public_html/.well-known/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/virtual/vps-aa3942/a/aede5353c4/public_html/.well-known/' is executable webdisk.ampsstudio.com [Sat Aug 06 06:01:53 2022] [error] [client 185.36.81.23:0] [client 185.36.81.23] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "webdisk.ampsstudio.com"] [uri "/.env"] [unique_id "Yu31wX2Wqer9EcRRY4c11gAAAAQ"] ampsstudio.com [Sat Aug 06 06:16:54 2022] [error] [client 152.89.196.102:0] [client 152.89.196.102] ModSecurity: Access denied with code 403 (phase 2). Pattern match "/wp-content/uploads/.*\\\\.php" at REQUEST_FILENAME. [file "remote server"] [line "-1"] [id "430017"] [msg "Malware.Expert - request_uri: Wordpress - prevent PHP files from executing"] [hostname "ampsstudio.com"] [uri "/wp-content/uploads/wp-blockup.php"] [unique_id "Yu35RtYxCBXsg5-jmKXkaAAAAAk"] ampsstudio.com [Sat Aug 06 06:16:59 2022] [error] [client 152.89.196.102:0] [client 152.89.196.102] ModSecurity: Access denied with code 403 (phase 2). Pattern match "/wp-content/uploads/.*\\\\.php" at REQUEST_FILENAME. [file "remote server"] [line "-1"] [id "430017"] [msg "Malware.Expert - request_uri: Wordpress - prevent PHP files from executing"] [hostname "ampsstudio.com"] [uri "/wp-content/uploads/wp-blockup.php"] [unique_id "Yu35S8IBIdARdqrBmWXMmAAAAAM"] ampsstudio.com [Sat Aug 06 06:17:04 2022] [error] [client 152.89.196.102:0] [client 152.89.196.102] ModSecurity: Access denied with code 403 (phase 2). Pattern match "/wp-content/uploads/.*\\\\.php" at REQUEST_FILENAME. [file "remote server"] [line "-1"] [id "430017"] [msg "Malware.Expert - request_uri: Wordpress - prevent PHP files from executing"] [hostname "ampsstudio.com"] [uri "/wp-content/uploads/wp-blockup.php"] [unique_id "Yu35ULdmvn-UoRPo3-H4xgAAAAs"] www.ampsstudio.com [Sat Aug 06 06:27:24 2022] [error] [client 207.46.13.180:0] AH01071: Got error 'PHP message: PHP Warning: Attempt to read property "ID" on null in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/archive-event.php on line 15PHP message: PHP Warning: Undefined array key 0 in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/includes/classes/iron_sonaar.class.php on line 212PHP message: PHP Warning: Trying to access array offset on value of type null in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/includes/classes/iron_sonaar.class.php on line 212PHP message: PHP Warning: Undefined array key 0 in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/includes/classes/iron_sonaar.class.php on line 214PHP message: PHP Warning: Trying to access array offset on value of type null in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/includes/classes/iron_sonaar.class.php on line 214' ampsstudio.com [Sat Aug 06 09:27:45 2022] [error] [client 20.2.216.43:0] [client 20.2.216.43] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "ampsstudio.com"] [uri "/.env"] [unique_id "Yu4mAbdmvn-UoRPo3-H5HAAAAAs"] ampsstudio.com [Sat Aug 06 09:27:47 2022] [error] [client 20.2.216.43:0] [client 20.2.216.43] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "ampsstudio.com"] [uri "/.env.txt"] [unique_id "Yu4mA2PyU8a6GoTe9H4LcgAAAA0"] ampsstudio.com [Sat Aug 06 09:27:49 2022] [error] [client 20.2.216.43:0] [client 20.2.216.43] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "ampsstudio.com"] [uri "/.env.example"] [unique_id "Yu4mBc9Ih4HrCa6ujEBPMgAAAA8"] ampsstudio.com [Sat Aug 06 09:27:50 2022] [error] [client 20.2.216.43:0] [client 20.2.216.43] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "ampsstudio.com"] [uri "/.env.old"] [unique_id "Yu4mBm_JwIL8JfK_Bs7UTQAAAAU"] ampsstudio.com [Sat Aug 06 09:27:52 2022] [error] [client 20.2.216.43:0] [client 20.2.216.43] ModSecurity: Access denied with code 403 (phase 2). String match ".aws/credentials" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430069"] [msg "Malware.Expert - request_uri: AWS Credentials"] [hostname "ampsstudio.com"] [uri "/.aws/credentials"] [unique_id "Yu4mCM-SrP2YN4IGYV5KWwAAAAA"] ampsstudio.com [Sat Aug 06 09:28:31 2022] [error] [client 20.2.216.43:0] [client 20.2.216.43] ModSecurity: Access denied with code 403 (phase 2). Pattern match ".+wp-config\\\\..*" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430005"] [msg "Malware.Expert - request_uri: read wordpress configuration file"] [hostname "ampsstudio.com"] [uri "/wp-config.php.bak"] [unique_id "Yu4mL6KDS9Q0nwZlBFoMaQAAAAg"] ampsstudio.com [Sat Aug 06 09:28:32 2022] [error] [client 20.2.216.43:0] [client 20.2.216.43] ModSecurity: Access denied with code 403 (phase 2). String match ".php.bak" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430068"] [msg "Malware.Expert - request_uri: .PHP backup files"] [hostname "ampsstudio.com"] [uri "/settings.php.bak"] [unique_id "Yu4mMLVaAbLHHR5ZGnqjkAAAAAY"] ampsstudio.com [Sat Aug 06 09:28:50 2022] [error] [client 20.2.216.43:0] [client 20.2.216.43] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "ampsstudio.com"] [uri "/.env.bak"] [unique_id "Yu4mQqKDS9Q0nwZlBFoMagAAAAg"] ampsstudio.com [Sat Aug 06 09:29:08 2022] [error] [client 20.2.216.43:0] [client 20.2.216.43] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "ampsstudio.com"] [uri "/.env.dev.local"] [unique_id "Yu4mVKKDS9Q0nwZlBFoMawAAAAg"] ampsstudio.com [Sat Aug 06 09:29:22 2022] [error] [client 20.2.216.43:0] [client 20.2.216.43] ModSecurity: Access denied with code 403 (phase 2). String match "/.git/config" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430058"] [msg "Malware.Expert - request_uri: .git config"] [hostname "ampsstudio.com"] [uri "/.git/config"] [unique_id "Yu4mYm_JwIL8JfK_Bs7UUgAAAAU"] ampsstudio.com [Sat Aug 06 09:29:24 2022] [error] [client 20.2.216.43:0] [client 20.2.216.43] ModSecurity: Access denied with code 403 (phase 2). String match "/configuration.php" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430045"] [msg "Malware.Expert - request_uri: read joomla configuration file"] [hostname "ampsstudio.com"] [uri "/configuration.php-dist"] [unique_id "Yu4mZH2Wqer9EcRRY4c2NwAAAAQ"] www.ampsstudio.com [Sat Aug 06 11:12:48 2022] [error] [client 51.11.6.150:0] AH01071: Got error 'PHP message: PHP Warning: Undefined array key "HTTP_USER_AGENT" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/bookly-responsive-appointment-booking-tool/frontend/modules/booking/ShortCode.php on line 62' cpanel.ampsstudio.com [Sat Aug 06 13:39:17 2022] [error] [client 185.36.81.23:0] [client 185.36.81.23] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "cpanel.ampsstudio.com"] [uri "/.env"] [unique_id "Yu5g9c-SrP2YN4IGYV5KtgAAAAA"] www.ampsstudio.com [Sat Aug 06 14:17:34 2022] [crit] [client 66.249.93.6:0] AH00529: /home/virtual/vps-aa3942/a/aede5353c4/public_html/.well-known/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/virtual/vps-aa3942/a/aede5353c4/public_html/.well-known/' is executable www.ampsstudio.com [Sat Aug 06 14:42:44 2022] [error] [client 213.219.247.125:0] AH01071: Got error 'PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179' www.ampsstudio.com [Sat Aug 06 14:42:44 2022] [error] [client 213.219.247.125:0] AH01071: Got error 'PHP message: PHP Warning: Cannot modify header information - headers already sent by (output started at /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-includes/functions.php:5275) in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/includes/sonaar-music/css/theme/custom-style.php on line 2' www.ampsstudio.com [Sat Aug 06 14:54:44 2022] [error] [client 213.219.247.125:0] AH01071: Got error 'PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179' www.ampsstudio.com [Sat Aug 06 14:54:44 2022] [error] [client 213.219.247.125:0] AH01071: Got error 'PHP message: PHP Warning: Cannot modify header information - headers already sent by (output started at /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-includes/functions.php:5275) in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/includes/sonaar-music/css/theme/custom-style.php on line 2' www.ampsstudio.com [Sat Aug 06 15:51:51 2022] [error] [client 94.140.134.34:0] AH01071: Got error 'PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179' www.ampsstudio.com [Sat Aug 06 15:51:51 2022] [error] [client 94.140.134.34:0] AH01071: Got error 'PHP message: PHP Warning: Cannot modify header information - headers already sent by (output started at /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-includes/functions.php:5275) in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/includes/sonaar-music/css/theme/custom-style.php on line 2' ampsstudio.com [Sat Aug 06 16:03:01 2022] [error] [client 152.89.196.102:0] [client 152.89.196.102] ModSecurity: Access denied with code 403 (phase 2). String match "/ups.php" at REQUEST_URI. [file "remote server"] [line "-1"] [id "570041"] [msg "Malware.Expert - Malware"] [hostname "ampsstudio.com"] [uri "/wp-content/plugins/background-image-cropper/ups.php"] [unique_id "Yu6CpX2Wqer9EcRRY4c2vAAAAAQ"] ampsstudio.com [Sat Aug 06 16:03:06 2022] [error] [client 152.89.196.102:0] [client 152.89.196.102] ModSecurity: Access denied with code 403 (phase 2). String match "/ups.php" at REQUEST_URI. [file "remote server"] [line "-1"] [id "570041"] [msg "Malware.Expert - Malware"] [hostname "ampsstudio.com"] [uri "/wp-content/plugins/background-image-cropper/ups.php"] [unique_id "Yu6CqkUdX9-Qp3yBmB1A2AAAAAE"] ampsstudio.com [Sat Aug 06 16:03:10 2022] [error] [client 152.89.196.102:0] [client 152.89.196.102] ModSecurity: Access denied with code 403 (phase 2). String match "/ups.php" at REQUEST_URI. [file "remote server"] [line "-1"] [id "570041"] [msg "Malware.Expert - Malware"] [hostname "ampsstudio.com"] [uri "/wp-content/plugins/background-image-cropper/ups.php"] [unique_id "Yu6Crrdmvn-UoRPo3-H5pgAAAAs"] www.ampsstudio.com [Sat Aug 06 17:02:00 2022] [error] [client 213.219.247.125:0] AH01071: Got error 'PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179' www.ampsstudio.com [Sat Aug 06 17:02:00 2022] [error] [client 213.219.247.125:0] AH01071: Got error 'PHP message: PHP Warning: Cannot modify header information - headers already sent by (output started at /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-includes/functions.php:5275) in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/includes/sonaar-music/css/theme/custom-style.php on line 2' www.ampsstudio.com [Sat Aug 06 17:05:47 2022] [crit] [client 66.249.93.6:0] AH00529: /home/virtual/vps-aa3942/a/aede5353c4/public_html/.well-known/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/virtual/vps-aa3942/a/aede5353c4/public_html/.well-known/' is executable www.ampsstudio.com [Sat Aug 06 17:19:26 2022] [error] [client 213.219.247.125:0] AH01071: Got error 'PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179' www.ampsstudio.com [Sat Aug 06 17:19:26 2022] [error] [client 213.219.247.125:0] AH01071: Got error 'PHP message: PHP Warning: Cannot modify header information - headers already sent by (output started at /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-includes/functions.php:5275) in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/includes/sonaar-music/css/theme/custom-style.php on line 2' www.ampsstudio.com [Sat Aug 06 17:35:40 2022] [error] [client 213.219.247.125:0] AH01071: Got error 'PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179' www.ampsstudio.com [Sat Aug 06 17:35:40 2022] [error] [client 213.219.247.125:0] AH01071: Got error 'PHP message: PHP Warning: Cannot modify header information - headers already sent by (output started at /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-includes/functions.php:5275) in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/includes/sonaar-music/css/theme/custom-style.php on line 2' ampsstudio.com [Sat Aug 06 19:23:31 2022] [error] [client 152.89.196.102:0] [client 152.89.196.102] ModSecurity: Access denied with code 403 (phase 2). Pattern match "/wp-content/uploads/.*\\\\.php" at REQUEST_FILENAME. [file "remote server"] [line "-1"] [id "430017"] [msg "Malware.Expert - request_uri: Wordpress - prevent PHP files from executing"] [hostname "ampsstudio.com"] [uri "/wp-content/uploads/2022/02/ups.phpups.php"] [unique_id "Yu6xo0csMg9w6uMtVkPapQAAAAk"] ampsstudio.com [Sat Aug 06 19:23:35 2022] [error] [client 152.89.196.102:0] [client 152.89.196.102] ModSecurity: Access denied with code 403 (phase 2). Pattern match "/wp-content/uploads/.*\\\\.php" at REQUEST_FILENAME. [file "remote server"] [line "-1"] [id "430017"] [msg "Malware.Expert - request_uri: Wordpress - prevent PHP files from executing"] [hostname "ampsstudio.com"] [uri "/wp-content/uploads/2022/02/ups.phpups.php"] [unique_id "Yu6xp7OZvQQYAcGfCj2GBgAAAAI"] ampsstudio.com [Sat Aug 06 19:23:38 2022] [error] [client 152.89.196.102:0] [client 152.89.196.102] ModSecurity: Access denied with code 403 (phase 2). Pattern match "/wp-content/uploads/.*\\\\.php" at REQUEST_FILENAME. [file "remote server"] [line "-1"] [id "430017"] [msg "Malware.Expert - request_uri: Wordpress - prevent PHP files from executing"] [hostname "ampsstudio.com"] [uri "/wp-content/uploads/2022/02/ups.phpups.php"] [unique_id "Yu6xqrdmvn-UoRPo3-H8ngAAAAs"] www.ampsstudio.com [Sat Aug 06 19:27:26 2022] [error] [client 5.59.140.154:0] AH01071: Got error 'PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179' www.ampsstudio.com [Sat Aug 06 19:27:26 2022] [error] [client 5.59.140.154:0] AH01071: Got error 'PHP message: PHP Warning: Cannot modify header information - headers already sent by (output started at /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-includes/functions.php:5275) in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/includes/sonaar-music/css/theme/custom-style.php on line 2' ampsstudio.com [Sat Aug 06 19:35:14 2022] [error] [client 152.89.196.102:0] [client 152.89.196.102] ModSecurity: Access denied with code 403 (phase 2). Pattern match "/\\\\..+\\\\.php" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430015"] [msg "Malware.Expert - request_uri: hidden .php execute"] [hostname "ampsstudio.com"] [uri "/wp-content/mu-plugins/.06e0f.php"] [unique_id "Yu60YrOZvQQYAcGfCj2GDQAAAAI"] ampsstudio.com [Sat Aug 06 19:35:20 2022] [error] [client 152.89.196.102:0] [client 152.89.196.102] ModSecurity: Access denied with code 403 (phase 2). Pattern match "/\\\\..+\\\\.php" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430015"] [msg "Malware.Expert - request_uri: hidden .php execute"] [hostname "ampsstudio.com"] [uri "/wp-content/mu-plugins/.06e0f.php"] [unique_id "Yu60aGf4BPrKyHpU_MI6uAAAABM"] ampsstudio.com [Sat Aug 06 19:35:23 2022] [error] [client 152.89.196.102:0] [client 152.89.196.102] ModSecurity: Access denied with code 403 (phase 2). Pattern match "/\\\\..+\\\\.php" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430015"] [msg "Malware.Expert - request_uri: hidden .php execute"] [hostname "ampsstudio.com"] [uri "/wp-content/mu-plugins/.06e0f.php"] [unique_id "Yu60a6OLjpZ3Mr1tWbTOdwAAAAU"] ampsstudio.com [Sat Aug 06 19:49:21 2022] [error] [client 152.89.196.102:0] [client 152.89.196.102] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_HEADERS_NAMES. [file "remote server"] [line "-1"] [id "580001"] [msg "Malware.Expert - Wordpress - Referer missing"] [hostname "ampsstudio.com"] [uri "/wp-content/themes/twentyfive/get.php"] [unique_id "Yu63sdwoknqy6Lb1_E3AdgAAAAw"] ampsstudio.com [Sat Aug 06 19:49:26 2022] [error] [client 152.89.196.102:0] [client 152.89.196.102] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_HEADERS_NAMES. [file "remote server"] [line "-1"] [id "580001"] [msg "Malware.Expert - Wordpress - Referer missing"] [hostname "ampsstudio.com"] [uri "/wp-content/themes/twentyfive/get.php"] [unique_id "Yu63tpeIBTDyz5KRp42d2AAAABE"] ampsstudio.com [Sat Aug 06 19:49:30 2022] [error] [client 152.89.196.102:0] [client 152.89.196.102] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_HEADERS_NAMES. [file "remote server"] [line "-1"] [id "580001"] [msg "Malware.Expert - Wordpress - Referer missing"] [hostname "ampsstudio.com"] [uri "/wp-content/themes/twentyfive/get.php"] [unique_id "Yu63uqOLjpZ3Mr1tWbTOegAAAAU"] ampsstudio.com [Sat Aug 06 19:58:13 2022] [error] [client 152.89.196.102:0] [client 152.89.196.102] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_HEADERS_NAMES. [file "remote server"] [line "-1"] [id "580001"] [msg "Malware.Expert - Wordpress - Referer missing"] [hostname "ampsstudio.com"] [uri "/wp-content/plugins/welcome-to-wordpress/resources/web.config/wp-blockup.php"] [unique_id "Yu65xbNsEqE8RzpSBV6ktwAAABI"] ampsstudio.com [Sat Aug 06 19:58:15 2022] [error] [client 152.89.196.102:0] [client 152.89.196.102] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_HEADERS_NAMES. [file "remote server"] [line "-1"] [id "580001"] [msg "Malware.Expert - Wordpress - Referer missing"] [hostname "ampsstudio.com"] [uri "/wp-content/plugins/welcome-to-wordpress/resources/web.config/wp-blockup.php"] [unique_id "Yu65x7VaAbLHHR5ZGnqmlwAAAAY"] ampsstudio.com [Sat Aug 06 19:58:18 2022] [error] [client 152.89.196.102:0] [client 152.89.196.102] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_HEADERS_NAMES. [file "remote server"] [line "-1"] [id "580001"] [msg "Malware.Expert - Wordpress - Referer missing"] [hostname "ampsstudio.com"] [uri "/wp-content/plugins/welcome-to-wordpress/resources/web.config/wp-blockup.php"] [unique_id "Yu65yrOZvQQYAcGfCj2GFQAAAAI"] ampsstudio.com [Sat Aug 06 20:13:14 2022] [error] [client 152.89.196.102:0] [client 152.89.196.102] ModSecurity: Access denied with code 403 (phase 2). Pattern match "/\\\\..+\\\\.php" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430015"] [msg "Malware.Expert - request_uri: hidden .php execute"] [hostname "ampsstudio.com"] [uri "/.tmb/wp-blockup.php"] [unique_id "Yu69SqmT6ruVSYqRDX53CgAAABA"] ampsstudio.com [Sat Aug 06 20:13:21 2022] [error] [client 152.89.196.102:0] [client 152.89.196.102] ModSecurity: Access denied with code 403 (phase 2). Pattern match "/\\\\..+\\\\.php" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430015"] [msg "Malware.Expert - request_uri: hidden .php execute"] [hostname "ampsstudio.com"] [uri "/.tmb/wp-blockup.php"] [unique_id "Yu69UbNsEqE8RzpSBV6kvwAAABI"] ampsstudio.com [Sat Aug 06 20:13:25 2022] [error] [client 152.89.196.102:0] [client 152.89.196.102] ModSecurity: Access denied with code 403 (phase 2). Pattern match "/\\\\..+\\\\.php" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430015"] [msg "Malware.Expert - request_uri: hidden .php execute"] [hostname "ampsstudio.com"] [uri "/.tmb/wp-blockup.php"] [unique_id "Yu69VbVaAbLHHR5ZGnqmnwAAAAY"] ampsstudio.com [Sat Aug 06 21:06:21 2022] [error] [client 20.123.80.100:0] [client 20.123.80.100] ModSecurity: Access denied with code 403 (phase 2). Pattern match "/wp-content/uploads/.*\\\\.php" at REQUEST_FILENAME. [file "remote server"] [line "-1"] [id "430017"] [msg "Malware.Expert - request_uri: Wordpress - prevent PHP files from executing"] [hostname "ampsstudio.com"] [uri "/wp-content/uploads/2021/12/up.php"] [unique_id "Yu7JvZeIBTDyz5KRp42d8wAAABE"] ampsstudio.com [Sat Aug 06 21:06:26 2022] [error] [client 20.123.80.100:0] [client 20.123.80.100] ModSecurity: Access denied with code 403 (phase 2). String match "python" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "580102"] [msg "Malware.Expert - Wordpress - unknown python request"] [hostname "ampsstudio.com"] [uri "/wp-admin/alfa.php"] [unique_id "Yu7JwpeIBTDyz5KRp42d9AAAABE"] ampsstudio.com [Sat Aug 06 21:06:28 2022] [error] [client 20.123.80.100:0] [client 20.123.80.100] ModSecurity: Access denied with code 403 (phase 2). String match "python" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "580100"] [msg "Malware.Expert - Wordpress - unknown python request"] [hostname "ampsstudio.com"] [uri "/wp-includes/fw.php"] [unique_id "Yu7JxNwoknqy6Lb1_E3AkwAAAAw"] ampsstudio.com [Sat Aug 06 21:06:28 2022] [error] [client 20.123.80.100:0] [client 20.123.80.100] ModSecurity: Access denied with code 403 (phase 2). String match "python" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "580101"] [msg "Malware.Expert - Wordpress - unknown python request"] [hostname "ampsstudio.com"] [uri "/wp-content/fw.php"] [unique_id "Yu7JxLOZvQQYAcGfCj2GLAAAAAI"] ampsstudio.com [Sat Aug 06 21:06:28 2022] [error] [client 20.123.80.100:0] [client 20.123.80.100] ModSecurity: Access denied with code 403 (phase 2). String match "python" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "580102"] [msg "Malware.Expert - Wordpress - unknown python request"] [hostname "ampsstudio.com"] [uri "/wp-admin/fw.php"] [unique_id "Yu7JxLNsEqE8RzpSBV6kzwAAABI"] ampsstudio.com [Sat Aug 06 21:06:28 2022] [error] [client 20.123.80.100:0] [client 20.123.80.100] ModSecurity: Access denied with code 403 (phase 2). Pattern match "/wp-content/uploads/.*\\\\.php" at REQUEST_FILENAME. [file "remote server"] [line "-1"] [id "430017"] [msg "Malware.Expert - request_uri: Wordpress - prevent PHP files from executing"] [hostname "ampsstudio.com"] [uri "/wp-content/uploads/2021/12/fw.php"] [unique_id "Yu7JxKOLjpZ3Mr1tWbTOlgAAAAU"] ampsstudio.com [Sat Aug 06 21:06:28 2022] [error] [client 20.123.80.100:0] [client 20.123.80.100] ModSecurity: Access denied with code 403 (phase 2). String match "/wso.php" at REQUEST_URI. [file "remote server"] [line "-1"] [id "570066"] [msg "Malware.Expert - PHP Command Shell (WSO)"] [hostname "ampsstudio.com"] [uri "/wp-includes/wso.php"] [unique_id "Yu7JxGf4BPrKyHpU_MI61gAAABM"] ampsstudio.com [Sat Aug 06 21:06:28 2022] [error] [client 20.123.80.100:0] [client 20.123.80.100] ModSecurity: Access denied with code 403 (phase 2). String match "/wso.php" at REQUEST_URI. [file "remote server"] [line "-1"] [id "570066"] [msg "Malware.Expert - PHP Command Shell (WSO)"] [hostname "ampsstudio.com"] [uri "/wp-content/wso.php"] [unique_id "Yu7JxLVaAbLHHR5ZGnqmrgAAAAY"] ampsstudio.com [Sat Aug 06 21:06:29 2022] [error] [client 20.123.80.100:0] [client 20.123.80.100] ModSecurity: Access denied with code 403 (phase 2). String match "/wso.php" at REQUEST_URI. [file "remote server"] [line "-1"] [id "570066"] [msg "Malware.Expert - PHP Command Shell (WSO)"] [hostname "ampsstudio.com"] [uri "/wp-admin/wso.php"] [unique_id "Yu7JxamT6ruVSYqRDX53GQAAABA"] ampsstudio.com [Sat Aug 06 21:06:33 2022] [error] [client 20.123.80.100:0] [client 20.123.80.100] ModSecurity: Access denied with code 403 (phase 2). String match "/shell.php" at REQUEST_URI. [file "remote server"] [line "-1"] [id "570072"] [msg "Malware.Expert - PHP Command Shell"] [hostname "ampsstudio.com"] [uri "/shell.php"] [unique_id "Yu7JyWf4BPrKyHpU_MI61wAAABM"] ampsstudio.com [Sat Aug 06 21:06:33 2022] [error] [client 20.123.80.100:0] [client 20.123.80.100] ModSecurity: Access denied with code 403 (phase 2). String match "connector.minimal.php" at REQUEST_URI. [file "remote server"] [line "-1"] [id "500083"] [msg "Malware.Expert - request_uri: 0-Day - Wordpress filemanager plugin"] [hostname "ampsstudio.com"] [uri "/wp-content/plugins/wp-file-manager/lib/php/connector.minimal.php"] [unique_id "Yu7JybVaAbLHHR5ZGnqmrwAAAAY"] ampsstudio.com [Sat Aug 06 21:13:01 2022] [error] [client 20.123.80.100:0] [client 20.123.80.100] ModSecurity: Access denied with code 403 (phase 2). Pattern match "/wp-content/uploads/.*\\\\.php" at REQUEST_FILENAME. [file "remote server"] [line "-1"] [id "430017"] [msg "Malware.Expert - request_uri: Wordpress - prevent PHP files from executing"] [hostname "ampsstudio.com"] [uri "/wp-content/uploads/2021/12/up.php"] [unique_id "Yu7LTdwoknqy6Lb1_E3AnQAAAAw"] ampsstudio.com [Sat Aug 06 21:13:07 2022] [error] [client 20.123.80.100:0] [client 20.123.80.100] ModSecurity: Access denied with code 403 (phase 2). String match "python" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "580102"] [msg "Malware.Expert - Wordpress - unknown python request"] [hostname "ampsstudio.com"] [uri "/wp-admin/alfa.php"] [unique_id "Yu7LU6mT6ruVSYqRDX53IwAAABA"] ampsstudio.com [Sat Aug 06 21:13:08 2022] [error] [client 20.123.80.100:0] [client 20.123.80.100] ModSecurity: Access denied with code 403 (phase 2). String match "python" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "580100"] [msg "Malware.Expert - Wordpress - unknown python request"] [hostname "ampsstudio.com"] [uri "/wp-includes/fw.php"] [unique_id "Yu7LVGf4BPrKyHpU_MI64gAAABM"] ampsstudio.com [Sat Aug 06 21:13:08 2022] [error] [client 20.123.80.100:0] [client 20.123.80.100] ModSecurity: Access denied with code 403 (phase 2). String match "python" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "580101"] [msg "Malware.Expert - Wordpress - unknown python request"] [hostname "ampsstudio.com"] [uri "/wp-content/fw.php"] [unique_id "Yu7LVLVaAbLHHR5ZGnqmugAAAAY"] ampsstudio.com [Sat Aug 06 21:13:08 2022] [error] [client 20.123.80.100:0] [client 20.123.80.100] ModSecurity: Access denied with code 403 (phase 2). String match "python" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "580102"] [msg "Malware.Expert - Wordpress - unknown python request"] [hostname "ampsstudio.com"] [uri "/wp-admin/fw.php"] [unique_id "Yu7LVLOZvQQYAcGfCj2GOAAAAAI"] ampsstudio.com [Sat Aug 06 21:13:08 2022] [error] [client 20.123.80.100:0] [client 20.123.80.100] ModSecurity: Access denied with code 403 (phase 2). Pattern match "/wp-content/uploads/.*\\\\.php" at REQUEST_FILENAME. [file "remote server"] [line "-1"] [id "430017"] [msg "Malware.Expert - request_uri: Wordpress - prevent PHP files from executing"] [hostname "ampsstudio.com"] [uri "/wp-content/uploads/2021/12/fw.php"] [unique_id "Yu7LVKOLjpZ3Mr1tWbTOogAAAAU"] ampsstudio.com [Sat Aug 06 21:13:08 2022] [error] [client 20.123.80.100:0] [client 20.123.80.100] ModSecurity: Access denied with code 403 (phase 2). String match "/wso.php" at REQUEST_URI. [file "remote server"] [line "-1"] [id "570066"] [msg "Malware.Expert - PHP Command Shell (WSO)"] [hostname "ampsstudio.com"] [uri "/wp-includes/wso.php"] [unique_id "Yu7LVLNsEqE8RzpSBV6k2wAAABI"] ampsstudio.com [Sat Aug 06 21:13:09 2022] [error] [client 20.123.80.100:0] [client 20.123.80.100] ModSecurity: Access denied with code 403 (phase 2). String match "/wso.php" at REQUEST_URI. [file "remote server"] [line "-1"] [id "570066"] [msg "Malware.Expert - PHP Command Shell (WSO)"] [hostname "ampsstudio.com"] [uri "/wp-content/wso.php"] [unique_id "Yu7LVUcsMg9w6uMtVkPa3wAAAAk"] ampsstudio.com [Sat Aug 06 21:13:09 2022] [error] [client 20.123.80.100:0] [client 20.123.80.100] ModSecurity: Access denied with code 403 (phase 2). String match "/wso.php" at REQUEST_URI. [file "remote server"] [line "-1"] [id "570066"] [msg "Malware.Expert - PHP Command Shell (WSO)"] [hostname "ampsstudio.com"] [uri "/wp-admin/wso.php"] [unique_id "Yu7LVdwoknqy6Lb1_E3AnwAAAAw"] ampsstudio.com [Sat Aug 06 21:13:12 2022] [error] [client 20.123.80.100:0] [client 20.123.80.100] ModSecurity: Access denied with code 403 (phase 2). String match "/shell.php" at REQUEST_URI. [file "remote server"] [line "-1"] [id "570072"] [msg "Malware.Expert - PHP Command Shell"] [hostname "ampsstudio.com"] [uri "/shell.php"] [unique_id "Yu7LWLNsEqE8RzpSBV6k3AAAABI"] ampsstudio.com [Sat Aug 06 21:13:12 2022] [error] [client 20.123.80.100:0] [client 20.123.80.100] ModSecurity: Access denied with code 403 (phase 2). String match "connector.minimal.php" at REQUEST_URI. [file "remote server"] [line "-1"] [id "500083"] [msg "Malware.Expert - request_uri: 0-Day - Wordpress filemanager plugin"] [hostname "ampsstudio.com"] [uri "/wp-content/plugins/wp-file-manager/lib/php/connector.minimal.php"] [unique_id "Yu7LWEcsMg9w6uMtVkPa4AAAAAk"] ampsstudio.com [Sat Aug 06 21:16:39 2022] [error] [client 20.123.80.100:0] [client 20.123.80.100] ModSecurity: Access denied with code 403 (phase 2). Pattern match "/wp-content/uploads/.*\\\\.php" at REQUEST_FILENAME. [file "remote server"] [line "-1"] [id "430017"] [msg "Malware.Expert - request_uri: Wordpress - prevent PHP files from executing"] [hostname "ampsstudio.com"] [uri "/wp-content/uploads/2021/12/up.php"] [unique_id "Yu7MJ2f4BPrKyHpU_MI65wAAABM"] ampsstudio.com [Sat Aug 06 21:16:44 2022] [error] [client 20.123.80.100:0] [client 20.123.80.100] ModSecurity: Access denied with code 403 (phase 2). String match "python" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "580102"] [msg "Malware.Expert - Wordpress - unknown python request"] [hostname "ampsstudio.com"] [uri "/wp-admin/alfa.php"] [unique_id "Yu7MLEcsMg9w6uMtVkPa4wAAAAk"] ampsstudio.com [Sat Aug 06 21:16:46 2022] [error] [client 20.123.80.100:0] [client 20.123.80.100] ModSecurity: Access denied with code 403 (phase 2). String match "python" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "580100"] [msg "Malware.Expert - Wordpress - unknown python request"] [hostname "ampsstudio.com"] [uri "/wp-includes/fw.php"] [unique_id "Yu7MLrNsEqE8RzpSBV6k4QAAABI"] ampsstudio.com [Sat Aug 06 21:16:46 2022] [error] [client 20.123.80.100:0] [client 20.123.80.100] ModSecurity: Access denied with code 403 (phase 2). String match "python" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "580101"] [msg "Malware.Expert - Wordpress - unknown python request"] [hostname "ampsstudio.com"] [uri "/wp-content/fw.php"] [unique_id "Yu7MLrudp0mSYG9Hk2xXQAAAAAA"] ampsstudio.com [Sat Aug 06 21:16:46 2022] [error] [client 20.123.80.100:0] [client 20.123.80.100] ModSecurity: Access denied with code 403 (phase 2). String match "python" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "580102"] [msg "Malware.Expert - Wordpress - unknown python request"] [hostname "ampsstudio.com"] [uri "/wp-admin/fw.php"] [unique_id "Yu7MLqmT6ruVSYqRDX53KAAAABA"] ampsstudio.com [Sat Aug 06 21:16:46 2022] [error] [client 20.123.80.100:0] [client 20.123.80.100] ModSecurity: Access denied with code 403 (phase 2). Pattern match "/wp-content/uploads/.*\\\\.php" at REQUEST_FILENAME. [file "remote server"] [line "-1"] [id "430017"] [msg "Malware.Expert - request_uri: Wordpress - prevent PHP files from executing"] [hostname "ampsstudio.com"] [uri "/wp-content/uploads/2021/12/fw.php"] [unique_id "Yu7MLpeIBTDyz5KRp42eBgAAABE"] ampsstudio.com [Sat Aug 06 21:16:46 2022] [error] [client 20.123.80.100:0] [client 20.123.80.100] ModSecurity: Access denied with code 403 (phase 2). String match "/wso.php" at REQUEST_URI. [file "remote server"] [line "-1"] [id "570066"] [msg "Malware.Expert - PHP Command Shell (WSO)"] [hostname "ampsstudio.com"] [uri "/wp-includes/wso.php"] [unique_id "Yu7MLtwoknqy6Lb1_E3ApAAAAAw"] ampsstudio.com [Sat Aug 06 21:16:47 2022] [error] [client 20.123.80.100:0] [client 20.123.80.100] ModSecurity: Access denied with code 403 (phase 2). String match "/wso.php" at REQUEST_URI. [file "remote server"] [line "-1"] [id "570066"] [msg "Malware.Expert - PHP Command Shell (WSO)"] [hostname "ampsstudio.com"] [uri "/wp-content/wso.php"] [unique_id "Yu7ML6OLjpZ3Mr1tWbTOqQAAAAU"] ampsstudio.com [Sat Aug 06 21:16:47 2022] [error] [client 20.123.80.100:0] [client 20.123.80.100] ModSecurity: Access denied with code 403 (phase 2). String match "/wso.php" at REQUEST_URI. [file "remote server"] [line "-1"] [id "570066"] [msg "Malware.Expert - PHP Command Shell (WSO)"] [hostname "ampsstudio.com"] [uri "/wp-admin/wso.php"] [unique_id "Yu7ML2f4BPrKyHpU_MI66QAAABM"] ampsstudio.com [Sat Aug 06 21:16:51 2022] [error] [client 20.123.80.100:0] [client 20.123.80.100] ModSecurity: Access denied with code 403 (phase 2). String match "/shell.php" at REQUEST_URI. [file "remote server"] [line "-1"] [id "570072"] [msg "Malware.Expert - PHP Command Shell"] [hostname "ampsstudio.com"] [uri "/shell.php"] [unique_id "Yu7MM9woknqy6Lb1_E3ApQAAAAw"] ampsstudio.com [Sat Aug 06 21:16:51 2022] [error] [client 20.123.80.100:0] [client 20.123.80.100] ModSecurity: Access denied with code 403 (phase 2). String match "connector.minimal.php" at REQUEST_URI. [file "remote server"] [line "-1"] [id "500083"] [msg "Malware.Expert - request_uri: 0-Day - Wordpress filemanager plugin"] [hostname "ampsstudio.com"] [uri "/wp-content/plugins/wp-file-manager/lib/php/connector.minimal.php"] [unique_id "Yu7MM6OLjpZ3Mr1tWbTOqgAAAAU"] ampsstudio.com [Sun Aug 07 00:16:12 2022] [error] [client 152.89.196.102:0] [client 152.89.196.102] ModSecurity: Access denied with code 403 (phase 2). Pattern match "/wp-content/uploads/.*\\\\.php" at REQUEST_FILENAME. [file "remote server"] [line "-1"] [id "430017"] [msg "Malware.Expert - request_uri: Wordpress - prevent PHP files from executing"] [hostname "ampsstudio.com"] [uri "/wp-content/uploads/wp-blockdown.php"] [unique_id "Yu72PGf4BPrKyHpU_MI7PAAAABM"] ampsstudio.com [Sun Aug 07 00:16:16 2022] [error] [client 152.89.196.102:0] [client 152.89.196.102] ModSecurity: Access denied with code 403 (phase 2). Pattern match "/wp-content/uploads/.*\\\\.php" at REQUEST_FILENAME. [file "remote server"] [line "-1"] [id "430017"] [msg "Malware.Expert - request_uri: Wordpress - prevent PHP files from executing"] [hostname "ampsstudio.com"] [uri "/wp-content/uploads/wp-blockdown.php"] [unique_id "Yu72QJeIBTDyz5KRp42eWAAAABE"] ampsstudio.com [Sun Aug 07 00:16:19 2022] [error] [client 152.89.196.102:0] [client 152.89.196.102] ModSecurity: Access denied with code 403 (phase 2). Pattern match "/wp-content/uploads/.*\\\\.php" at REQUEST_FILENAME. [file "remote server"] [line "-1"] [id "430017"] [msg "Malware.Expert - request_uri: Wordpress - prevent PHP files from executing"] [hostname "ampsstudio.com"] [uri "/wp-content/uploads/wp-blockdown.php"] [unique_id "Yu72Q7OZvQQYAcGfCj2GkQAAAAI"] ampsstudio.com [Sun Aug 07 00:18:16 2022] [error] [client 152.89.196.102:0] [client 152.89.196.102] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_HEADERS_NAMES. [file "remote server"] [line "-1"] [id "580001"] [msg "Malware.Expert - Wordpress - Referer missing"] [hostname "ampsstudio.com"] [uri "/wp-content/themes/sketch/get.php"] [unique_id "Yu72uLNsEqE8RzpSBV6lMQAAABI"] ampsstudio.com [Sun Aug 07 00:18:24 2022] [error] [client 152.89.196.102:0] [client 152.89.196.102] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_HEADERS_NAMES. [file "remote server"] [line "-1"] [id "580001"] [msg "Malware.Expert - Wordpress - Referer missing"] [hostname "ampsstudio.com"] [uri "/wp-content/themes/sketch/get.php"] [unique_id "Yu72wLudp0mSYG9Hk2xXkQAAAAA"] ampsstudio.com [Sun Aug 07 00:18:30 2022] [error] [client 152.89.196.102:0] [client 152.89.196.102] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_HEADERS_NAMES. [file "remote server"] [line "-1"] [id "580001"] [msg "Malware.Expert - Wordpress - Referer missing"] [hostname "ampsstudio.com"] [uri "/wp-content/themes/sketch/get.php"] [unique_id "Yu72xtwoknqy6Lb1_E3A8wAAAAw"] ampsstudio.com [Sun Aug 07 00:22:02 2022] [error] [client 152.89.196.102:0] [client 152.89.196.102] ModSecurity: Access denied with code 403 (phase 2). Pattern match "/\\\\..+\\\\.php" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430015"] [msg "Malware.Expert - request_uri: hidden .php execute"] [hostname "ampsstudio.com"] [uri "/.quarantine/wp-blockup.php"] [unique_id "Yu73mmf4BPrKyHpU_MI7PgAAABM"] ampsstudio.com [Sun Aug 07 00:22:06 2022] [error] [client 152.89.196.102:0] [client 152.89.196.102] ModSecurity: Access denied with code 403 (phase 2). Pattern match "/\\\\..+\\\\.php" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430015"] [msg "Malware.Expert - request_uri: hidden .php execute"] [hostname "ampsstudio.com"] [uri "/.quarantine/wp-blockup.php"] [unique_id "Yu73npeIBTDyz5KRp42eWgAAABE"] ampsstudio.com [Sun Aug 07 00:22:10 2022] [error] [client 152.89.196.102:0] [client 152.89.196.102] ModSecurity: Access denied with code 403 (phase 2). Pattern match "/\\\\..+\\\\.php" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430015"] [msg "Malware.Expert - request_uri: hidden .php execute"] [hostname "ampsstudio.com"] [uri "/.quarantine/wp-blockup.php"] [unique_id "Yu73orOZvQQYAcGfCj2GkwAAAAI"] ampsstudio.com [Sun Aug 07 02:12:13 2022] [error] [client 20.123.80.100:0] [client 20.123.80.100] ModSecurity: Access denied with code 403 (phase 2). Pattern match "/wp-content/uploads/.*\\\\.php" at REQUEST_FILENAME. [file "remote server"] [line "-1"] [id "430017"] [msg "Malware.Expert - request_uri: Wordpress - prevent PHP files from executing"] [hostname "ampsstudio.com"] [uri "/wp-content/uploads/2021/12/up.php"] [unique_id "Yu8RbUhP4fHB6-nNaz_IfwAAAAM"] ampsstudio.com [Sun Aug 07 02:12:19 2022] [error] [client 20.123.80.100:0] [client 20.123.80.100] ModSecurity: Access denied with code 403 (phase 2). String match "python" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "580102"] [msg "Malware.Expert - Wordpress - unknown python request"] [hostname "ampsstudio.com"] [uri "/wp-admin/alfa.php"] [unique_id "Yu8Rc6OLjpZ3Mr1tWbTPGQAAAAU"] ampsstudio.com [Sun Aug 07 02:12:20 2022] [error] [client 20.123.80.100:0] [client 20.123.80.100] ModSecurity: Access denied with code 403 (phase 2). String match "python" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "580100"] [msg "Malware.Expert - Wordpress - unknown python request"] [hostname "ampsstudio.com"] [uri "/wp-includes/fw.php"] [unique_id "Yu8RdMEVnq9_sk3Dy_aKdwAAAAY"] ampsstudio.com [Sun Aug 07 02:12:20 2022] [error] [client 20.123.80.100:0] [client 20.123.80.100] ModSecurity: Access denied with code 403 (phase 2). String match "python" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "580101"] [msg "Malware.Expert - Wordpress - unknown python request"] [hostname "ampsstudio.com"] [uri "/wp-content/fw.php"] [unique_id "Yu8RdEcsMg9w6uMtVkPbVQAAAAk"] ampsstudio.com [Sun Aug 07 02:12:20 2022] [error] [client 20.123.80.100:0] [client 20.123.80.100] ModSecurity: Access denied with code 403 (phase 2). String match "python" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "580102"] [msg "Malware.Expert - Wordpress - unknown python request"] [hostname "ampsstudio.com"] [uri "/wp-admin/fw.php"] [unique_id "Yu8RdJeIBTDyz5KRp42eeQAAABE"] ampsstudio.com [Sun Aug 07 02:12:21 2022] [error] [client 20.123.80.100:0] [client 20.123.80.100] ModSecurity: Access denied with code 403 (phase 2). Pattern match "/wp-content/uploads/.*\\\\.php" at REQUEST_FILENAME. [file "remote server"] [line "-1"] [id "430017"] [msg "Malware.Expert - request_uri: Wordpress - prevent PHP files from executing"] [hostname "ampsstudio.com"] [uri "/wp-content/uploads/2021/12/fw.php"] [unique_id "Yu8RdSy8O9m3FgNhh-XzxgAAAAg"] ampsstudio.com [Sun Aug 07 02:12:21 2022] [error] [client 20.123.80.100:0] [client 20.123.80.100] ModSecurity: Access denied with code 403 (phase 2). String match "/wso.php" at REQUEST_URI. [file "remote server"] [line "-1"] [id "570066"] [msg "Malware.Expert - PHP Command Shell (WSO)"] [hostname "ampsstudio.com"] [uri "/wp-includes/wso.php"] [unique_id "Yu8RdQoybntx_OG6AZD3QAAAAAo"] ampsstudio.com [Sun Aug 07 02:12:21 2022] [error] [client 20.123.80.100:0] [client 20.123.80.100] ModSecurity: Access denied with code 403 (phase 2). String match "/wso.php" at REQUEST_URI. [file "remote server"] [line "-1"] [id "570066"] [msg "Malware.Expert - PHP Command Shell (WSO)"] [hostname "ampsstudio.com"] [uri "/wp-content/wso.php"] [unique_id "Yu8RdZua-SB10zeJBH44CwAAAAE"] ampsstudio.com [Sun Aug 07 02:12:21 2022] [error] [client 20.123.80.100:0] [client 20.123.80.100] ModSecurity: Access denied with code 403 (phase 2). String match "/wso.php" at REQUEST_URI. [file "remote server"] [line "-1"] [id "570066"] [msg "Malware.Expert - PHP Command Shell (WSO)"] [hostname "ampsstudio.com"] [uri "/wp-admin/wso.php"] [unique_id "Yu8RdaOLjpZ3Mr1tWbTPGgAAAAU"] ampsstudio.com [Sun Aug 07 02:12:25 2022] [error] [client 20.123.80.100:0] [client 20.123.80.100] ModSecurity: Access denied with code 403 (phase 2). String match "/shell.php" at REQUEST_URI. [file "remote server"] [line "-1"] [id "570072"] [msg "Malware.Expert - PHP Command Shell"] [hostname "ampsstudio.com"] [uri "/shell.php"] [unique_id "Yu8ReQoybntx_OG6AZD3QQAAAAo"] ampsstudio.com [Sun Aug 07 02:12:25 2022] [error] [client 20.123.80.100:0] [client 20.123.80.100] ModSecurity: Access denied with code 403 (phase 2). String match "connector.minimal.php" at REQUEST_URI. [file "remote server"] [line "-1"] [id "500083"] [msg "Malware.Expert - request_uri: 0-Day - Wordpress filemanager plugin"] [hostname "ampsstudio.com"] [uri "/wp-content/plugins/wp-file-manager/lib/php/connector.minimal.php"] [unique_id "Yu8ReZua-SB10zeJBH44DAAAAAE"] ampsstudio.com [Sun Aug 07 03:36:46 2022] [error] [client 20.123.80.100:0] [client 20.123.80.100] ModSecurity: Access denied with code 403 (phase 2). Pattern match "/wp-content/uploads/.*\\\\.php" at REQUEST_FILENAME. [file "remote server"] [line "-1"] [id "430017"] [msg "Malware.Expert - request_uri: Wordpress - prevent PHP files from executing"] [hostname "ampsstudio.com"] [uri "/wp-content/uploads/2021/12/up.php"] [unique_id "Yu8lPiy8O9m3FgNhh-Xz2wAAAAg"] ampsstudio.com [Sun Aug 07 03:36:52 2022] [error] [client 20.123.80.100:0] [client 20.123.80.100] ModSecurity: Access denied with code 403 (phase 2). String match "python" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "580102"] [msg "Malware.Expert - Wordpress - unknown python request"] [hostname "ampsstudio.com"] [uri "/wp-admin/alfa.php"] [unique_id "Yu8lRKOLjpZ3Mr1tWbTPNAAAAAU"] ampsstudio.com [Sun Aug 07 03:36:53 2022] [error] [client 20.123.80.100:0] [client 20.123.80.100] ModSecurity: Access denied with code 403 (phase 2). String match "python" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "580100"] [msg "Malware.Expert - Wordpress - unknown python request"] [hostname "ampsstudio.com"] [uri "/wp-includes/fw.php"] [unique_id "Yu8lRSy8O9m3FgNhh-Xz3AAAAAg"] ampsstudio.com [Sun Aug 07 03:36:53 2022] [error] [client 20.123.80.100:0] [client 20.123.80.100] ModSecurity: Access denied with code 403 (phase 2). String match "python" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "580101"] [msg "Malware.Expert - Wordpress - unknown python request"] [hostname "ampsstudio.com"] [uri "/wp-content/fw.php"] [unique_id "Yu8lRcEVnq9_sk3Dy_aKjgAAAAY"] ampsstudio.com [Sun Aug 07 03:36:54 2022] [error] [client 20.123.80.100:0] [client 20.123.80.100] ModSecurity: Access denied with code 403 (phase 2). String match "python" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "580102"] [msg "Malware.Expert - Wordpress - unknown python request"] [hostname "ampsstudio.com"] [uri "/wp-admin/fw.php"] [unique_id "Yu8lRnW-7xLmnjTZ9DCfWwAAAAQ"] ampsstudio.com [Sun Aug 07 03:36:54 2022] [error] [client 20.123.80.100:0] [client 20.123.80.100] ModSecurity: Access denied with code 403 (phase 2). Pattern match "/wp-content/uploads/.*\\\\.php" at REQUEST_FILENAME. [file "remote server"] [line "-1"] [id "430017"] [msg "Malware.Expert - request_uri: Wordpress - prevent PHP files from executing"] [hostname "ampsstudio.com"] [uri "/wp-content/uploads/2021/12/fw.php"] [unique_id "Yu8lRnVCw4fDe2B2ZSIaDQAAAAA"] ampsstudio.com [Sun Aug 07 03:36:54 2022] [error] [client 20.123.80.100:0] [client 20.123.80.100] ModSecurity: Access denied with code 403 (phase 2). String match "/wso.php" at REQUEST_URI. [file "remote server"] [line "-1"] [id "570066"] [msg "Malware.Expert - PHP Command Shell (WSO)"] [hostname "ampsstudio.com"] [uri "/wp-includes/wso.php"] [unique_id "Yu8lRkYJ_RxspFDlDOrXLwAAAAI"] ampsstudio.com [Sun Aug 07 03:36:54 2022] [error] [client 20.123.80.100:0] [client 20.123.80.100] ModSecurity: Access denied with code 403 (phase 2). String match "/wso.php" at REQUEST_URI. [file "remote server"] [line "-1"] [id "570066"] [msg "Malware.Expert - PHP Command Shell (WSO)"] [hostname "ampsstudio.com"] [uri "/wp-content/wso.php"] [unique_id "Yu8lRkcsMg9w6uMtVkPbbQAAAAk"] ampsstudio.com [Sun Aug 07 03:36:54 2022] [error] [client 20.123.80.100:0] [client 20.123.80.100] ModSecurity: Access denied with code 403 (phase 2). String match "/wso.php" at REQUEST_URI. [file "remote server"] [line "-1"] [id "570066"] [msg "Malware.Expert - PHP Command Shell (WSO)"] [hostname "ampsstudio.com"] [uri "/wp-admin/wso.php"] [unique_id "Yu8lRpua-SB10zeJBH44IQAAAAE"] ampsstudio.com [Sun Aug 07 03:36:58 2022] [error] [client 20.123.80.100:0] [client 20.123.80.100] ModSecurity: Access denied with code 403 (phase 2). String match "/shell.php" at REQUEST_URI. [file "remote server"] [line "-1"] [id "570072"] [msg "Malware.Expert - PHP Command Shell"] [hostname "ampsstudio.com"] [uri "/shell.php"] [unique_id "Yu8lSnVCw4fDe2B2ZSIaDgAAAAA"] ampsstudio.com [Sun Aug 07 03:36:58 2022] [error] [client 20.123.80.100:0] [client 20.123.80.100] ModSecurity: Access denied with code 403 (phase 2). String match "connector.minimal.php" at REQUEST_URI. [file "remote server"] [line "-1"] [id "500083"] [msg "Malware.Expert - request_uri: 0-Day - Wordpress filemanager plugin"] [hostname "ampsstudio.com"] [uri "/wp-content/plugins/wp-file-manager/lib/php/connector.minimal.php"] [unique_id "Yu8lSkYJ_RxspFDlDOrXMAAAAAI"] www.ampsstudio.com [Sun Aug 07 03:40:27 2022] [error] [client 161.117.10.233:0] AH01071: Got error 'PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179' www.ampsstudio.com [Sun Aug 07 03:40:27 2022] [error] [client 161.117.10.233:0] AH01071: Got error 'PHP message: PHP Warning: Cannot modify header information - headers already sent by (output started at /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-includes/functions.php:5275) in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/includes/sonaar-music/css/theme/custom-style.php on line 2' ampsstudio.com [Sun Aug 07 03:42:20 2022] [error] [client 152.89.196.102:0] [client 152.89.196.102] ModSecurity: Access denied with code 403 (phase 2). Pattern match "/wp-content/uploads/.*\\\\.php" at REQUEST_FILENAME. [file "remote server"] [line "-1"] [id "430017"] [msg "Malware.Expert - request_uri: Wordpress - prevent PHP files from executing"] [hostname "ampsstudio.com"] [uri "/wp-content/uploads/2020/12/ups.phpups.php"] [unique_id "Yu8mjHW-7xLmnjTZ9DCfXgAAAAQ"] ampsstudio.com [Sun Aug 07 03:42:24 2022] [error] [client 152.89.196.102:0] [client 152.89.196.102] ModSecurity: Access denied with code 403 (phase 2). Pattern match "/wp-content/uploads/.*\\\\.php" at REQUEST_FILENAME. [file "remote server"] [line "-1"] [id "430017"] [msg "Malware.Expert - request_uri: Wordpress - prevent PHP files from executing"] [hostname "ampsstudio.com"] [uri "/wp-content/uploads/2020/12/ups.phpups.php"] [unique_id "Yu8mkHVCw4fDe2B2ZSIaEAAAAAA"] ampsstudio.com [Sun Aug 07 06:33:42 2022] [error] [client 152.89.196.102:0] [client 152.89.196.102] ModSecurity: Access denied with code 403 (phase 2). Pattern match "/assets/images/.*\\\\.php" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430023"] [msg "Malware.Expert - request_uri: ModX - prevent PHP files from executing"] [hostname "ampsstudio.com"] [uri "/assets/images/1.php"] [unique_id "Yu9OtnqdRvDwhCmtfUinegAAAA0"] ampsstudio.com [Sun Aug 07 06:33:52 2022] [error] [client 152.89.196.102:0] [client 152.89.196.102] ModSecurity: Access denied with code 403 (phase 2). Pattern match "/assets/images/.*\\\\.php" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430023"] [msg "Malware.Expert - request_uri: ModX - prevent PHP files from executing"] [hostname "ampsstudio.com"] [uri "/assets/images/1.php"] [unique_id "Yu9OwOUVY_DaYGkk1N_utAAAABE"] ampsstudio.com [Sun Aug 07 06:33:59 2022] [error] [client 152.89.196.102:0] [client 152.89.196.102] ModSecurity: Access denied with code 403 (phase 2). Pattern match "/assets/images/.*\\\\.php" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430023"] [msg "Malware.Expert - request_uri: ModX - prevent PHP files from executing"] [hostname "ampsstudio.com"] [uri "/assets/images/1.php"] [unique_id "Yu9Oxw_Jox3SYi9PHffPJQAAAAY"] webdisk.ampsstudio.com [Sun Aug 07 06:54:42 2022] [error] [client 109.206.241.214:0] AH01276: Cannot serve directory /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-admin/css/: No matching DirectoryIndex (index.php,index.html,index.htm) found, and server-generated directory index forbidden by Options directive www.ampsstudio.com [Sun Aug 07 08:50:18 2022] [error] [client 216.24.212.9:0] AH01071: Got error 'PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179' www.ampsstudio.com [Sun Aug 07 08:50:18 2022] [error] [client 216.24.212.9:0] AH01071: Got error 'PHP message: PHP Warning: Cannot modify header information - headers already sent by (output started at /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-includes/functions.php:5275) in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/includes/sonaar-music/css/theme/custom-style.php on line 2' ampsstudio.com [Sun Aug 07 10:59:35 2022] [error] [client 20.125.96.47:0] [client 20.125.96.47] ModSecurity: Access denied with code 403 (phase 2). Match of "contains index.php" against "REQUEST_URI" required. [file "remote server"] [line "-1"] [id "570076"] [msg "Malware.Expert - Malware"] [hostname "ampsstudio.com"] [uri "/wp-plain.php"] [unique_id "Yu-NB5hvOBU_b9D8DrFS7AAAAAY"] www.ampsstudio.com [Sun Aug 07 10:59:40 2022] [error] [client 20.125.96.47:0] [client 20.125.96.47] ModSecurity: Access denied with code 403 (phase 2). String match "php.suspected" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430059"] [msg "Malware.Expert - request_uri: .PHP suspected files"] [hostname "www.ampsstudio.com"] [uri "/wp-content/plugins/apikey/apikey.php.suspected"] [unique_id "Yu-NDA-J0PucJKCXcm2MCgAAAAM"] www.ampsstudio.com [Sun Aug 07 10:59:40 2022] [error] [client 20.125.96.47:0] [client 20.125.96.47] ModSecurity: Access denied with code 403 (phase 2). String match "php.suspected" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430059"] [msg "Malware.Expert - request_uri: .PHP suspected files"] [hostname "www.ampsstudio.com"] [uri "/plugins/content/apismtp/apismtp.php.suspected"] [unique_id "Yu-NDN3YWFgMFAcalCjK5QAAAAo"] www.ampsstudio.com [Sun Aug 07 11:16:55 2022] [error] [client 51.11.6.150:0] AH01071: Got error 'PHP message: PHP Warning: Undefined array key "HTTP_USER_AGENT" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/bookly-responsive-appointment-booking-tool/frontend/modules/booking/ShortCode.php on line 62' www.ampsstudio.com [Sun Aug 07 11:34:46 2022] [error] [client 144.172.118.120:0] AH01071: Got error 'PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179' www.ampsstudio.com [Sun Aug 07 11:34:46 2022] [error] [client 144.172.118.120:0] AH01071: Got error 'PHP message: PHP Warning: Cannot modify header information - headers already sent by (output started at /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-includes/functions.php:5275) in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/includes/sonaar-music/css/theme/custom-style.php on line 2' www.ampsstudio.com [Sun Aug 07 13:48:39 2022] [error] [client 94.142.244.16:0] AH01071: Got error 'PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179' www.ampsstudio.com [Sun Aug 07 13:48:39 2022] [error] [client 94.142.244.16:0] AH01071: Got error 'PHP message: PHP Warning: Cannot modify header information - headers already sent by (output started at /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-includes/functions.php:5275) in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/includes/sonaar-music/css/theme/custom-style.php on line 2' cpanel.ampsstudio.com [Sun Aug 07 15:19:43 2022] [error] [client 109.206.241.214:0] AH01276: Cannot serve directory /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-admin/css/: No matching DirectoryIndex (index.php,index.html,index.htm) found, and server-generated directory index forbidden by Options directive mail.ampsstudio.com [Sun Aug 07 16:00:36 2022] [error] [client 185.36.81.23:0] [client 185.36.81.23] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "mail.ampsstudio.com"] [uri "/.env"] [unique_id "Yu_TlId4GteZxVjxEfRxBAAAAAA"] www.ampsstudio.com [Sun Aug 07 16:14:40 2022] [error] [client 193.19.109.137:0] AH01071: Got error 'PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179' www.ampsstudio.com [Sun Aug 07 16:14:40 2022] [error] [client 193.19.109.137:0] AH01071: Got error 'PHP message: PHP Warning: Cannot modify header information - headers already sent by (output started at /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-includes/functions.php:5275) in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/includes/sonaar-music/css/theme/custom-style.php on line 2' ampsstudio.com [Sun Aug 07 16:38:37 2022] [error] [client 51.13.119.130:0] [client 51.13.119.130] ModSecurity: Access denied with code 403 (phase 2). Match of "contains index.php" against "REQUEST_URI" required. [file "remote server"] [line "-1"] [id "570076"] [msg "Malware.Expert - Malware"] [hostname "ampsstudio.com"] [uri "/wp-admin/admin-post.php"] [unique_id "Yu_cfa-OeMP6o3us8kImAwAAAAk"] ampsstudio.com [Sun Aug 07 16:38:39 2022] [error] [client 51.13.119.130:0] [client 51.13.119.130] ModSecurity: Access denied with code 403 (phase 2). Pattern match "/wp-content/plugins/.*/up\\\\.php" at REQUEST_URI. [file "remote server"] [line "-1"] [id "570052"] [msg "Malware.Expert - Malware"] [hostname "ampsstudio.com"] [uri "/wp-content/plugins/instabuilder2/cache/up.php"] [unique_id "Yu_cfw-J0PucJKCXcm2MmwAAAAM"] www.ampsstudio.com [Sun Aug 07 17:01:06 2022] [error] [client 89.58.27.84:0] AH01071: Got error 'PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179' www.ampsstudio.com [Sun Aug 07 17:01:06 2022] [error] [client 89.58.27.84:0] AH01071: Got error 'PHP message: PHP Warning: Cannot modify header information - headers already sent by (output started at /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-includes/functions.php:5275) in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/includes/sonaar-music/css/theme/custom-style.php on line 2' ampsstudio.com [Sun Aug 07 17:18:14 2022] [error] [client 162.0.232.99:0] [client 162.0.232.99] ModSecurity: Access denied with code 403 (phase 2). Pattern match "/wp-config\\\\.php" at QUERY_STRING. [file "remote server"] [line "-1"] [id "410018"] [msg "Malware.Expert - query_string: unwanted wordpress config access"] [hostname "ampsstudio.com"] [uri "/wp-admin/admin-ajax.php"] [unique_id "Yu_lxg-J0PucJKCXcm2MrgAAAAM"] www.ampsstudio.com [Sun Aug 07 18:42:03 2022] [error] [client 185.191.171.44:0] AH01071: Got error 'PHP message: PHP Warning: Attempt to read property "ID" on null in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/archive-event.php on line 15PHP message: PHP Warning: Undefined array key 0 in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/includes/classes/iron_sonaar.class.php on line 212PHP message: PHP Warning: Trying to access array offset on value of type null in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/includes/classes/iron_sonaar.class.php on line 212PHP message: PHP Warning: Undefined array key 0 in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/includes/classes/iron_sonaar.class.php on line 214PHP message: PHP Warning: Trying to access array offset on value of type null in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/includes/classes/iron_sonaar.class.php on line 214' ampsstudio.com [Sun Aug 07 18:56:56 2022] [error] [client 20.163.26.201:0] [client 20.163.26.201] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "ampsstudio.com"] [uri "/.env"] [unique_id "Yu_86FzfdW0KCEsfa9RowgAAAAg"] ampsstudio.com [Sun Aug 07 19:18:39 2022] [error] [client 20.101.76.76:0] [client 20.101.76.76] ModSecurity: Access denied with code 403 (phase 2). String match "/wp-1ogin_bak.php" at REQUEST_URI. [file "remote server"] [line "-1"] [id "570040"] [msg "Malware.Expert - Malware"] [hostname "ampsstudio.com"] [uri "/wp-1ogin_bak.php"] [unique_id "YvAB_865NDDBUF_yixWYhwAAAAs"] www.ampsstudio.com [Sun Aug 07 22:06:36 2022] [error] [client 20.12.45.138:0] [client 20.12.45.138] ModSecurity: Access denied with code 403 (phase 2). String match "python-requests" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "430074"] [msg "Malware.Expert - request_uri: Wordpress - Python request"] [hostname "www.ampsstudio.com"] [uri "/wp-admin/install.php"] [unique_id "YvApXJhvOBU_b9D8DrFUAgAAAAY"] www.ampsstudio.com [Sun Aug 07 22:06:45 2022] [error] [client 20.12.45.138:0] [client 20.12.45.138] ModSecurity: Access denied with code 403 (phase 2). String match "python-requests" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "430075"] [msg "Malware.Expert - request_uri: Wordpress - Python request"] [hostname "www.ampsstudio.com"] [uri "/wp-admin/setup-config.php"] [unique_id "YvApZZAPS7zHk5z1YLN5jAAAAAQ"] www.ampsstudio.com [Sun Aug 07 22:31:23 2022] [error] [client 20.12.45.138:0] [client 20.12.45.138] ModSecurity: Access denied with code 403 (phase 2). String match "python-requests" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "430074"] [msg "Malware.Expert - request_uri: Wordpress - Python request"] [hostname "www.ampsstudio.com"] [uri "/wp-admin/install.php"] [unique_id "YvAvK1zfdW0KCEsfa9RpDgAAAAg"] www.ampsstudio.com [Sun Aug 07 22:31:57 2022] [error] [client 20.12.45.138:0] [client 20.12.45.138] ModSecurity: Access denied with code 403 (phase 2). String match "python-requests" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "430075"] [msg "Malware.Expert - request_uri: Wordpress - Python request"] [hostname "www.ampsstudio.com"] [uri "/wp-admin/setup-config.php"] [unique_id "YvAvTZhvOBU_b9D8DrFUCAAAAAY"] cpanel.ampsstudio.com [Sun Aug 07 23:29:14 2022] [error] [client 20.199.127.142:0] [client 20.199.127.142] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "cpanel.ampsstudio.com"] [uri "/.env"] [unique_id "YvA8us65NDDBUF_yixWY2QAAAAs"] mail.ampsstudio.com [Mon Aug 08 00:32:43 2022] [error] [client 20.199.127.142:0] [client 20.199.127.142] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "mail.ampsstudio.com"] [uri "/.env"] [unique_id "YvBLm6-OeMP6o3us8kImtQAAAAk"] ampsstudio.com [Mon Aug 08 01:10:09 2022] [error] [client 5.161.108.251:0] AH01276: Cannot serve directory /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-admin/css/: No matching DirectoryIndex (index.php,index.html,index.htm) found, and server-generated directory index forbidden by Options directive webdisk.ampsstudio.com [Mon Aug 08 01:48:38 2022] [error] [client 20.199.127.142:0] [client 20.199.127.142] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "webdisk.ampsstudio.com"] [uri "/.env"] [unique_id "YvBdZvfQNtuiNqfpkz0JfwAAAAE"] webmail.ampsstudio.com [Mon Aug 08 02:04:08 2022] [error] [client 20.199.127.142:0] [client 20.199.127.142] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "webmail.ampsstudio.com"] [uri "/.env"] [unique_id "YvBhCJAPS7zHk5z1YLN53gAAAAQ"] www.ampsstudio.com [Mon Aug 08 05:16:13 2022] [error] [client 66.249.76.53:0] AH01071: Got error 'PHP message: PHP Warning: Attempt to read property "ID" on null in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/archive-event.php on line 15PHP message: PHP Warning: Undefined array key 0 in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/includes/classes/iron_sonaar.class.php on line 212PHP message: PHP Warning: Trying to access array offset on value of type null in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/includes/classes/iron_sonaar.class.php on line 212PHP message: PHP Warning: Undefined array key 0 in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/includes/classes/iron_sonaar.class.php on line 214PHP message: PHP Warning: Trying to access array offset on value of type null in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/includes/classes/iron_sonaar.class.php on line 214' ampsstudio.com [Mon Aug 08 08:21:09 2022] [error] [client 20.254.121.118:0] [client 20.254.121.118] ModSecurity: Access denied with code 403 (phase 2). Match of "contains index.php" against "REQUEST_URI" required. [file "remote server"] [line "-1"] [id "570076"] [msg "Malware.Expert - Malware"] [hostname "ampsstudio.com"] [uri "/wp-content/plugins/dzs-zoomsounds/savepng.php"] [unique_id "YvC5ZVQkwFqfdwu0W14GWgAAAAc"] ampsstudio.com [Mon Aug 08 08:21:09 2022] [error] [client 20.254.121.118:0] [client 20.254.121.118] ModSecurity: Access denied with code 403 (phase 2). Match of "contains index.php" against "REQUEST_URI" required. [file "remote server"] [line "-1"] [id "570076"] [msg "Malware.Expert - Malware"] [hostname "ampsstudio.com"] [uri "/wp-content/plugins/dzs-zoomsounds/a57bze8931.php"] [unique_id "YvC5ZdOUzI9LkjABmS4stwAAAAY"] ampsstudio.com [Mon Aug 08 08:21:11 2022] [error] [client 20.254.121.118:0] [client 20.254.121.118] ModSecurity: Access denied with code 403 (phase 2). Match of "contains index.php" against "REQUEST_URI" required. [file "remote server"] [line "-1"] [id "570076"] [msg "Malware.Expert - Malware"] [hostname "ampsstudio.com"] [uri "/wp-content/plugins/ioptimizations/a57bze8931.php"] [unique_id "YvC5ZzTNumQ6JDnYFlGE-AAAAAM"] ampsstudio.com [Mon Aug 08 08:21:12 2022] [error] [client 20.254.121.118:0] [client 20.254.121.118] ModSecurity: Access denied with code 403 (phase 2). Pattern match "/ioptimization/.*\\\\.php\\\\?rchk" at REQUEST_URI. [file "remote server"] [line "-1"] [id "570039"] [msg "Malware.Expert - Wordpress malware plugin - ioptimization"] [hostname "ampsstudio.com"] [uri "/wp-content/plugins/ioptimization/IOptimize.php"] [unique_id "YvC5aDVkVfthzf5BivbLNQAAAAA"] ampsstudio.com [Mon Aug 08 08:21:12 2022] [error] [client 20.254.121.118:0] [client 20.254.121.118] ModSecurity: Access denied with code 403 (phase 2). Match of "contains index.php" against "REQUEST_URI" required. [file "remote server"] [line "-1"] [id "570076"] [msg "Malware.Expert - Malware"] [hostname "ampsstudio.com"] [uri "/wp-content/plugins/ioptimization/a57bze8931.php"] [unique_id "YvC5aOAikaVQgehfZntbHAAAAAE"] ampsstudio.com [Mon Aug 08 08:21:12 2022] [error] [client 20.254.121.118:0] [client 20.254.121.118] ModSecurity: Access denied with code 403 (phase 2). Match of "contains index.php" against "REQUEST_URI" required. [file "remote server"] [line "-1"] [id "570076"] [msg "Malware.Expert - Malware"] [hostname "ampsstudio.com"] [uri "/wp-content/plugins/wp-engine-module/wp-engine.php"] [unique_id "YvC5aH2Z1tdmQBWT3XFghQAAAAQ"] ampsstudio.com [Mon Aug 08 08:21:12 2022] [error] [client 20.254.121.118:0] [client 20.254.121.118] ModSecurity: Access denied with code 403 (phase 2). Match of "contains index.php" against "REQUEST_URI" required. [file "remote server"] [line "-1"] [id "570076"] [msg "Malware.Expert - Malware"] [hostname "ampsstudio.com"] [uri "/wp-content/plugins/wp-engine-module/a57bze8931.php"] [unique_id "YvC5aCI0xrG-j4jH5mCzNgAAAAU"] ampsstudio.com [Mon Aug 08 08:21:13 2022] [error] [client 20.254.121.118:0] [client 20.254.121.118] ModSecurity: Access denied with code 403 (phase 2). Pattern match "/\\\\..+\\\\.php" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430015"] [msg "Malware.Expert - request_uri: hidden .php execute"] [hostname "ampsstudio.com"] [uri "/wp-content/uploads/kaswara/fonts_icon/a57bze8931/.__a57bze8931.php"] [unique_id "YvC5adOUzI9LkjABmS4suAAAAAY"] ampsstudio.com [Mon Aug 08 08:21:13 2022] [error] [client 20.254.121.118:0] [client 20.254.121.118] ModSecurity: Access denied with code 403 (phase 2). Match of "contains index.php" against "REQUEST_URI" required. [file "remote server"] [line "-1"] [id "570076"] [msg "Malware.Expert - Malware"] [hostname "ampsstudio.com"] [uri "/wp-content/plugins/apikey/apikey.php"] [unique_id "YvC5acj3cOsS9jj4rNBF0wAAAAk"] ampsstudio.com [Mon Aug 08 08:21:13 2022] [error] [client 20.254.121.118:0] [client 20.254.121.118] ModSecurity: Access denied with code 403 (phase 2). Match of "contains index.php" against "REQUEST_URI" required. [file "remote server"] [line "-1"] [id "570076"] [msg "Malware.Expert - Malware"] [hostname "ampsstudio.com"] [uri "/wp-content/plugins/apikey/a57bze8931.php"] [unique_id "YvC5aaMPkfRkX56lJPbl7AAAAAo"] ampsstudio.com [Mon Aug 08 08:21:13 2022] [error] [client 20.254.121.118:0] [client 20.254.121.118] ModSecurity: Access denied with code 403 (phase 2). Match of "contains /wp-content/plugins/dopwgg/libraries/php/upload.php" against "REQUEST_URI" required. [file "remote server"] [line "-1"] [id "430073"] [msg "Malware.Expert - request_uri: Wordpress - prevent PHP files from executing"] [hostname "ampsstudio.com"] [uri "/wp-content/plugins/cherry-plugin/admin/import-export/upload.php"] [unique_id "YvC5aTMmyaRjEW6a-p1HqAAAAAI"] ampsstudio.com [Mon Aug 08 08:21:14 2022] [error] [client 20.254.121.118:0] [client 20.254.121.118] ModSecurity: Access denied with code 403 (phase 2). Match of "contains index.php" against "REQUEST_URI" required. [file "remote server"] [line "-1"] [id "570076"] [msg "Malware.Expert - Malware"] [hostname "ampsstudio.com"] [uri "/wp-content/plugins/cherry-plugin/admin/import-export/a57bze8931.php"] [unique_id "YvC5ajTNumQ6JDnYFlGE-QAAAAM"] ampsstudio.com [Mon Aug 08 08:21:15 2022] [error] [client 20.254.121.118:0] [client 20.254.121.118] ModSecurity: Access denied with code 403 (phase 2). Match of "contains index.php" against "REQUEST_URI" required. [file "remote server"] [line "-1"] [id "570076"] [msg "Malware.Expert - Malware"] [hostname "ampsstudio.com"] [uri "/wp-content/plugins/formcraft/file-upload/server/php/files/a57bze8931.php"] [unique_id "YvC5a32Z1tdmQBWT3XFghgAAAAQ"] ampsstudio.com [Mon Aug 08 08:21:15 2022] [error] [client 20.254.121.118:0] [client 20.254.121.118] ModSecurity: Access denied with code 403 (phase 2). Match of "contains index.php" against "REQUEST_URI" required. [file "remote server"] [line "-1"] [id "570076"] [msg "Malware.Expert - Malware"] [hostname "ampsstudio.com"] [uri "/wp-admin/admin-ajax.php"] [unique_id "YvC5ayI0xrG-j4jH5mCzNwAAAAU"] ampsstudio.com [Mon Aug 08 08:21:15 2022] [error] [client 20.254.121.118:0] [client 20.254.121.118] ModSecurity: Access denied with code 403 (phase 2). Pattern match "/\\\\..+\\\\.php" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430015"] [msg "Malware.Expert - request_uri: hidden .php execute"] [hostname "ampsstudio.com"] [uri "/wp-content/uploads/typehub/custom/a57bze8931/.__a57bze8931.php"] [unique_id "YvC5a1QkwFqfdwu0W14GXAAAAAc"] ampsstudio.com [Mon Aug 08 08:21:15 2022] [error] [client 20.254.121.118:0] [client 20.254.121.118] ModSecurity: Access denied with code 403 (phase 2). Match of "contains index.php" against "REQUEST_URI" required. [file "remote server"] [line "-1"] [id "570076"] [msg "Malware.Expert - Malware"] [hostname "ampsstudio.com"] [uri "/wp-admin/admin-ajax.php"] [unique_id "YvC5a9OUzI9LkjABmS4suQAAAAY"] ampsstudio.com [Mon Aug 08 08:21:17 2022] [error] [client 20.254.121.118:0] [client 20.254.121.118] ModSecurity: Access denied with code 403 (phase 1). Pattern match "\\\\.\\\\./\\\\.\\\\." at REQUEST_URI. [file "remote server"] [line "-1"] [id "430064"] [msg "Malware.Expert - request_uri: directory travel"] [hostname "ampsstudio.com"] [uri "/wp-content/plugins/wpcargo/includes/barcode.php"] [unique_id "YvC5bTMmyaRjEW6a-p1HqQAAAAI"] ampsstudio.com [Mon Aug 08 08:21:18 2022] [error] [client 20.254.121.118:0] [client 20.254.121.118] ModSecurity: Access denied with code 403 (phase 2). Match of "contains index.php" against "REQUEST_URI" required. [file "remote server"] [line "-1"] [id "570076"] [msg "Malware.Expert - Malware"] [hostname "ampsstudio.com"] [uri "/wp-content/king.php"] [unique_id "YvC5buAikaVQgehfZntbHgAAAAE"] ampsstudio.com [Mon Aug 08 08:21:18 2022] [error] [client 20.254.121.118:0] [client 20.254.121.118] ModSecurity: Access denied with code 403 (phase 2). String match "connector.minimal.php" at REQUEST_URI. [file "remote server"] [line "-1"] [id "500083"] [msg "Malware.Expert - request_uri: 0-Day - Wordpress filemanager plugin"] [hostname "ampsstudio.com"] [uri "/wp-content/plugins/wp-file-manager/lib/php/connector.minimal.php"] [unique_id "YvC5bn2Z1tdmQBWT3XFghwAAAAQ"] ampsstudio.com [Mon Aug 08 08:21:18 2022] [error] [client 20.254.121.118:0] [client 20.254.121.118] ModSecurity: Access denied with code 403 (phase 2). String match "connector.minimal.php" at REQUEST_URI. [file "remote server"] [line "-1"] [id "500083"] [msg "Malware.Expert - request_uri: 0-Day - Wordpress filemanager plugin"] [hostname "ampsstudio.com"] [uri "/wp-content/plugins/wp-file-manager-pro/lib/php/connector.minimal.php"] [unique_id "YvC5blQkwFqfdwu0W14GXQAAAAc"] ampsstudio.com [Mon Aug 08 08:21:18 2022] [error] [client 20.254.121.118:0] [client 20.254.121.118] ModSecurity: Access denied with code 403 (phase 2). Match of "contains index.php" against "REQUEST_URI" required. [file "remote server"] [line "-1"] [id "570076"] [msg "Malware.Expert - Malware"] [hostname "ampsstudio.com"] [uri "/wp-content/plugins/gatewayapi/inc/css_js.php"] [unique_id "YvC5btOUzI9LkjABmS4sugAAAAY"] ampsstudio.com [Mon Aug 08 08:21:18 2022] [error] [client 20.254.121.118:0] [client 20.254.121.118] ModSecurity: Access denied with code 403 (phase 2). Match of "contains index.php" against "REQUEST_URI" required. [file "remote server"] [line "-1"] [id "570076"] [msg "Malware.Expert - Malware"] [hostname "ampsstudio.com"] [uri "/wp-content/plugins/gatewayapi/inc/a57bze8931.php"] [unique_id "YvC5biI0xrG-j4jH5mCzOAAAAAU"] ampsstudio.com [Mon Aug 08 08:21:18 2022] [error] [client 20.254.121.118:0] [client 20.254.121.118] ModSecurity: Access denied with code 403 (phase 2). Match of "contains /wp-content/plugins/dopwgg/libraries/php/upload.php" against "REQUEST_URI" required. [file "remote server"] [line "-1"] [id "430073"] [msg "Malware.Expert - request_uri: Wordpress - prevent PHP files from executing"] [hostname "ampsstudio.com"] [uri "/wp-content/plugins/divi-contact-extended/includes/upload.php"] [unique_id "YvC5bqMPkfRkX56lJPbl7gAAAAo"] ampsstudio.com [Mon Aug 08 09:35:59 2022] [error] [client 20.241.107.17:0] [client 20.241.107.17] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "ampsstudio.com"] [uri "/.env"] [unique_id "YvDK76MPkfRkX56lJPbl_wAAAAo"] ampsstudio.com [Mon Aug 08 11:37:54 2022] [error] [client 137.184.192.200:0] [client 137.184.192.200] ModSecurity: Access denied with code 403 (phase 2). String match "/wp-admin/install.php" at REQUEST_URI. [file "remote server"] [line "-1"] [id "570074"] [msg "Malware.Expert - Malware"] [hostname "ampsstudio.com"] [uri "/wp-admin/install.php"] [unique_id "YvDngjMmyaRjEW6a-p1IEgAAAAI"] ampsstudio.com [Mon Aug 08 11:38:00 2022] [error] [client 137.184.192.200:0] [client 137.184.192.200] ModSecurity: Access denied with code 403 (phase 2). String match "/wp-admin/install.php" at REQUEST_URI. [file "remote server"] [line "-1"] [id "570074"] [msg "Malware.Expert - Malware"] [hostname "ampsstudio.com"] [uri "/wp/wp-admin/install.php"] [unique_id "YvDniH2Z1tdmQBWT3XFg3QAAAAQ"] ampsstudio.com [Mon Aug 08 11:38:04 2022] [error] [client 137.184.192.200:0] [client 137.184.192.200] ModSecurity: Access denied with code 403 (phase 2). String match "/wp-admin/install.php" at REQUEST_URI. [file "remote server"] [line "-1"] [id "570074"] [msg "Malware.Expert - Malware"] [hostname "ampsstudio.com"] [uri "/new/wp-admin/install.php"] [unique_id "YvDnjCFoGsYiU3CLYaYEbQAAAAg"] ampsstudio.com [Mon Aug 08 11:38:08 2022] [error] [client 137.184.192.200:0] [client 137.184.192.200] ModSecurity: Access denied with code 403 (phase 2). String match "/wp-admin/install.php" at REQUEST_URI. [file "remote server"] [line "-1"] [id "570074"] [msg "Malware.Expert - Malware"] [hostname "ampsstudio.com"] [uri "/old/wp-admin/install.php"] [unique_id "YvDnkNOUzI9LkjABmS4tIAAAAAY"] ampsstudio.com [Mon Aug 08 11:38:10 2022] [error] [client 137.184.192.200:0] [client 137.184.192.200] ModSecurity: Access denied with code 403 (phase 2). String match "/wp-admin/install.php" at REQUEST_URI. [file "remote server"] [line "-1"] [id "570074"] [msg "Malware.Expert - Malware"] [hostname "ampsstudio.com"] [uri "/wordpress/wp-admin/install.php"] [unique_id "YvDnkuAikaVQgehfZntbhQAAAAE"] ampsstudio.com [Mon Aug 08 11:38:15 2022] [error] [client 137.184.192.200:0] [client 137.184.192.200] ModSecurity: Access denied with code 403 (phase 2). String match "/wp-admin/install.php" at REQUEST_URI. [file "remote server"] [line "-1"] [id "570074"] [msg "Malware.Expert - Malware"] [hostname "ampsstudio.com"] [uri "/test/wp-admin/install.php"] [unique_id "YvDnl8j3cOsS9jj4rNBGOAAAAAk"] ampsstudio.com [Mon Aug 08 11:38:20 2022] [error] [client 137.184.192.200:0] [client 137.184.192.200] ModSecurity: Access denied with code 403 (phase 2). String match "/wp-admin/install.php" at REQUEST_URI. [file "remote server"] [line "-1"] [id "570074"] [msg "Malware.Expert - Malware"] [hostname "ampsstudio.com"] [uri "/blog/wp-admin/install.php"] [unique_id "YvDnnFQkwFqfdwu0W14GwwAAAAc"] ampsstudio.com [Mon Aug 08 11:38:23 2022] [error] [client 137.184.192.200:0] [client 137.184.192.200] ModSecurity: Access denied with code 403 (phase 2). String match "/wp-admin/install.php" at REQUEST_URI. [file "remote server"] [line "-1"] [id "570074"] [msg "Malware.Expert - Malware"] [hostname "ampsstudio.com"] [uri "/cms/wp-admin/install.php"] [unique_id "YvDnnyI0xrG-j4jH5mCzmQAAAAU"] ampsstudio.com [Mon Aug 08 11:38:25 2022] [error] [client 137.184.192.200:0] [client 137.184.192.200] ModSecurity: Access denied with code 403 (phase 2). String match "/wp-admin/install.php" at REQUEST_URI. [file "remote server"] [line "-1"] [id "570074"] [msg "Malware.Expert - Malware"] [hostname "ampsstudio.com"] [uri "/web/wp-admin/install.php"] [unique_id "YvDnocj3cOsS9jj4rNBGOQAAAAk"] ampsstudio.com [Mon Aug 08 11:38:29 2022] [error] [client 137.184.192.200:0] [client 137.184.192.200] ModSecurity: Access denied with code 403 (phase 2). String match "/wp-admin/install.php" at REQUEST_URI. [file "remote server"] [line "-1"] [id "570074"] [msg "Malware.Expert - Malware"] [hostname "ampsstudio.com"] [uri "/backup/wp-admin/install.php"] [unique_id "YvDnpU3k5CLpHPJ67cqniAAAAAs"] ampsstudio.com [Mon Aug 08 11:38:29 2022] [error] [client 137.184.192.200:0] [client 137.184.192.200] ModSecurity: Access denied with code 403 (phase 2). String match "/wp-admin/install.php" at REQUEST_URI. [file "remote server"] [line "-1"] [id "570074"] [msg "Malware.Expert - Malware"] [hostname "ampsstudio.com"] [uri "/site/wp-admin/install.php"] [unique_id "YvDnpVQkwFqfdwu0W14GxAAAAAc"] ampsstudio.com [Mon Aug 08 11:38:34 2022] [error] [client 137.184.192.200:0] [client 137.184.192.200] ModSecurity: Access denied with code 403 (phase 2). String match "/wp-admin/install.php" at REQUEST_URI. [file "remote server"] [line "-1"] [id "570074"] [msg "Malware.Expert - Malware"] [hostname "ampsstudio.com"] [uri "/oldsite/wp-admin/install.php"] [unique_id "YvDnqn2Z1tdmQBWT3XFg3wAAAAQ"] mail.ampsstudio.com [Mon Aug 08 14:33:03 2022] [error] [client 109.206.241.214:0] AH01276: Cannot serve directory /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-admin/css/: No matching DirectoryIndex (index.php,index.html,index.htm) found, and server-generated directory index forbidden by Options directive www.ampsstudio.com [Mon Aug 08 15:42:52 2022] [error] [client 147.78.141.237:0] AH01071: Got error 'PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179' www.ampsstudio.com [Mon Aug 08 15:42:52 2022] [error] [client 147.78.141.237:0] AH01071: Got error 'PHP message: PHP Warning: Cannot modify header information - headers already sent by (output started at /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-includes/functions.php:5275) in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/includes/sonaar-music/css/theme/custom-style.php on line 2' ampsstudio.com [Mon Aug 08 16:10:29 2022] [error] [client 20.84.83.10:0] [client 20.84.83.10] ModSecurity: Access denied with code 403 (phase 2). Match of "contains index.php" against "REQUEST_URI" required. [file "remote server"] [line "-1"] [id "570076"] [msg "Malware.Expert - Malware"] [hostname "ampsstudio.com"] [uri "/wp-plain.php"] [unique_id "YvEnZSI0xrG-j4jH5mC0XQAAAAU"] ampsstudio.com [Mon Aug 08 16:10:32 2022] [error] [client 20.84.83.10:0] [client 20.84.83.10] ModSecurity: Access denied with code 403 (phase 2). Match of "contains index.php" against "REQUEST_URI" required. [file "remote server"] [line "-1"] [id "570076"] [msg "Malware.Expert - Malware"] [hostname "ampsstudio.com"] [uri "/wp-plain.php"] [unique_id "YvEnaCFoGsYiU3CLYaYFMQAAAAg"] ampsstudio.com [Mon Aug 08 16:23:34 2022] [error] [client 2607:f298:5:100f::f40:380e:0] [client 2607:f298:5:100f::f40:380e] ModSecurity: Access denied with code 403 (phase 2). Pattern match "/wp-content/plugins/.*/up\\\\.php" at REQUEST_URI. [file "remote server"] [line "-1"] [id "570052"] [msg "Malware.Expert - Malware"] [hostname "ampsstudio.com"] [uri "/wp-content/plugins/seo/up.php"] [unique_id "YvEqdjVkVfthzf5BivbMTwAAAAA"] www.ampsstudio.com [Mon Aug 08 18:55:35 2022] [error] [client 2.92.192.121:0] AH01071: Got error 'PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179' www.ampsstudio.com [Mon Aug 08 18:55:35 2022] [error] [client 2.92.192.121:0] AH01071: Got error 'PHP message: PHP Warning: Cannot modify header information - headers already sent by (output started at /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-includes/functions.php:5275) in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/includes/sonaar-music/css/theme/custom-style.php on line 2' ampsstudio.com [Mon Aug 08 19:03:30 2022] [error] [client 195.154.167.126:0] [client 195.154.167.126] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "ampsstudio.com"] [uri "/.env"] [unique_id "YvFP8tOUzI9LkjABmS4uLwAAAAY"] www.ampsstudio.com [Mon Aug 08 19:07:20 2022] [error] [client 93.190.141.180:0] AH01071: Got error 'PHP message: PHP Warning: Undefined array key "HTTP_USER_AGENT" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/bookly-responsive-appointment-booking-tool/frontend/modules/booking/ShortCode.php on line 62' ampsstudio.com [Mon Aug 08 19:21:55 2022] [error] [client 109.237.100.22:0] [client 109.237.100.22] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "ampsstudio.com"] [uri "/.env"] [unique_id "YvFUQzVkVfthzf5BivbMkQAAAAA"] webdisk.ampsstudio.com [Mon Aug 08 19:49:23 2022] [error] [client 20.38.169.200:0] [client 20.38.169.200] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "webdisk.ampsstudio.com"] [uri "/.env"] [unique_id "YvFasyI0xrG-j4jH5mC0rQAAAAU"] www.ampsstudio.com [Mon Aug 08 20:34:20 2022] [error] [client 173.239.197.22:0] AH01071: Got error 'PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179' www.ampsstudio.com [Mon Aug 08 20:34:20 2022] [error] [client 173.239.197.22:0] AH01071: Got error 'PHP message: PHP Warning: Cannot modify header information - headers already sent by (output started at /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-includes/functions.php:5275) in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/includes/sonaar-music/css/theme/custom-style.php on line 2' www.ampsstudio.com [Mon Aug 08 23:09:06 2022] [error] [client 51.11.6.150:0] AH01071: Got error 'PHP message: PHP Warning: Undefined array key "HTTP_USER_AGENT" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/bookly-responsive-appointment-booking-tool/frontend/modules/booking/ShortCode.php on line 62' www.ampsstudio.com [Mon Aug 08 23:41:08 2022] [error] [client 154.6.18.180:0] AH01071: Got error 'PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179' www.ampsstudio.com [Mon Aug 08 23:41:08 2022] [error] [client 154.6.18.180:0] AH01071: Got error 'PHP message: PHP Warning: Cannot modify header information - headers already sent by (output started at /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-includes/functions.php:5275) in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/includes/sonaar-music/css/theme/custom-style.php on line 2' www.ampsstudio.com [Tue Aug 09 00:39:38 2022] [error] [client 212.102.57.168:0] AH01071: Got error 'PHP message: PHP Warning: Cannot modify header information - headers already sent by (output started at /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-includes/functions.php:5275) in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/includes/sonaar-music/css/theme/custom-style.php on line 2' www.ampsstudio.com [Tue Aug 09 02:41:58 2022] [error] [client 136.0.245.64:0] AH01071: Got error 'PHP message: PHP Warning: Cannot modify header information - headers already sent by (output started at /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-includes/functions.php:5275) in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/includes/sonaar-music/css/theme/custom-style.php on line 2' ampsstudio.com [Tue Aug 09 02:49:49 2022] [error] [client 171.22.30.50:0] [client 171.22.30.50] ModSecurity: Access denied with code 403 (phase 2). Match of "contains index.php" against "REQUEST_URI" required. [file "remote server"] [line "-1"] [id "570076"] [msg "Malware.Expert - Malware"] [hostname "ampsstudio.com"] [uri "/fw.php"] [unique_id "YvG9PeAikaVQgehfZntdIgAAAAE"] ampsstudio.com [Tue Aug 09 02:50:21 2022] [error] [client 171.22.30.50:0] [client 171.22.30.50] ModSecurity: Access denied with code 403 (phase 2). Match of "contains index.php" against "REQUEST_URI" required. [file "remote server"] [line "-1"] [id "570076"] [msg "Malware.Expert - Malware"] [hostname "ampsstudio.com"] [uri "/defaul1.php"] [unique_id "YvG9XSFoGsYiU3CLYaYGCwAAAAg"] ampsstudio.com [Tue Aug 09 02:50:47 2022] [error] [client 171.22.30.50:0] [client 171.22.30.50] ModSecurity: Access denied with code 403 (phase 2). Match of "contains index.php" against "REQUEST_URI" required. [file "remote server"] [line "-1"] [id "570076"] [msg "Malware.Expert - Malware"] [hostname "ampsstudio.com"] [uri "/ffAA531.php"] [unique_id "YvG9d8j3cOsS9jj4rNBH1QAAAAk"] ampsstudio.com [Tue Aug 09 02:50:55 2022] [error] [client 171.22.30.50:0] [client 171.22.30.50] ModSecurity: Access denied with code 403 (phase 2). Match of "contains index.php" against "REQUEST_URI" required. [file "remote server"] [line "-1"] [id "570076"] [msg "Malware.Expert - Malware"] [hostname "ampsstudio.com"] [uri "/WPxdndcf7.php"] [unique_id "YvG9fzMmyaRjEW6a-p1JtwAAAAI"] ampsstudio.com [Tue Aug 09 02:51:37 2022] [error] [client 171.22.30.50:0] [client 171.22.30.50] ModSecurity: Access denied with code 403 (phase 2). Match of "contains index.php" against "REQUEST_URI" required. [file "remote server"] [line "-1"] [id "570076"] [msg "Malware.Expert - Malware"] [hostname "ampsstudio.com"] [uri "/tshop.php"] [unique_id "YvG9qVQkwFqfdwu0W14IZgAAAAc"] ampsstudio.com [Tue Aug 09 02:51:45 2022] [error] [client 171.22.30.50:0] [client 171.22.30.50] ModSecurity: Access denied with code 403 (phase 2). Match of "contains index.php" against "REQUEST_URI" required. [file "remote server"] [line "-1"] [id "570076"] [msg "Malware.Expert - Malware"] [hostname "ampsstudio.com"] [uri "/wp-content/plugins/wp-diambar/includes/loadme.php"] [unique_id "YvG9sSI0xrG-j4jH5mC1NQAAAAU"] ampsstudio.com [Tue Aug 09 02:52:26 2022] [error] [client 171.22.30.50:0] [client 171.22.30.50] ModSecurity: Access denied with code 403 (phase 2). Match of "contains index.php" against "REQUEST_URI" required. [file "remote server"] [line "-1"] [id "570076"] [msg "Malware.Expert - Malware"] [hostname "ampsstudio.com"] [uri "/wp-content/plugins/zaen/includes/loadme.php"] [unique_id "YvG92jVkVfthzf5BivbNIQAAAAA"] ampsstudio.com [Tue Aug 09 02:53:15 2022] [error] [client 171.22.30.50:0] [client 171.22.30.50] ModSecurity: Access denied with code 403 (phase 2). Pattern match "/wp-content/plugins/.*/up\\\\.php" at REQUEST_URI. [file "remote server"] [line "-1"] [id "570052"] [msg "Malware.Expert - Malware"] [hostname "ampsstudio.com"] [uri "/wp-content/plugins/cakil/up.php"] [unique_id "YvG-C8j3cOsS9jj4rNBH1gAAAAk"] ampsstudio.com [Tue Aug 09 02:53:32 2022] [error] [client 171.22.30.50:0] [client 171.22.30.50] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\/wp-content\\\\/plugins\\\\/(ubh|api-wp)\\\\/" at REQUEST_URI. [file "remote server"] [line "-1"] [id "570063"] [msg "Malware.Expert - Wordpress Malware"] [hostname "ampsstudio.com"] [uri "/wp-content/plugins/ubh/con.php"] [unique_id "YvG-HDMmyaRjEW6a-p1JuAAAAAI"] ampsstudio.com [Tue Aug 09 02:54:06 2022] [error] [client 171.22.30.50:0] [client 171.22.30.50] ModSecurity: Access denied with code 403 (phase 2). Match of "contains index.php" against "REQUEST_URI" required. [file "remote server"] [line "-1"] [id "570076"] [msg "Malware.Expert - Malware"] [hostname "ampsstudio.com"] [uri "/f0x.php"] [unique_id "YvG-PlQkwFqfdwu0W14IZwAAAAc"] ampsstudio.com [Tue Aug 09 02:54:44 2022] [error] [client 171.22.30.50:0] [client 171.22.30.50] ModSecurity: Access denied with code 403 (phase 2). Match of "contains index.php" against "REQUEST_URI" required. [file "remote server"] [line "-1"] [id "570076"] [msg "Malware.Expert - Malware"] [hostname "ampsstudio.com"] [uri "/local1.php"] [unique_id "YvG-ZNOUzI9LkjABmS4uxwAAAAY"] ampsstudio.com [Tue Aug 09 02:55:08 2022] [error] [client 171.22.30.50:0] [client 171.22.30.50] ModSecurity: Access denied with code 403 (phase 2). Match of "contains index.php" against "REQUEST_URI" required. [file "remote server"] [line "-1"] [id "570076"] [msg "Malware.Expert - Malware"] [hostname "ampsstudio.com"] [uri "/wp-content/f0x.php"] [unique_id "YvG-fE3k5CLpHPJ67cqpLwAAAAs"] ampsstudio.com [Tue Aug 09 02:56:07 2022] [error] [client 171.22.30.50:0] [client 171.22.30.50] ModSecurity: Access denied with code 403 (phase 2). Match of "contains index.php" against "REQUEST_URI" required. [file "remote server"] [line "-1"] [id "570076"] [msg "Malware.Expert - Malware"] [hostname "ampsstudio.com"] [uri "/wp-includes/f0x.php"] [unique_id "YvG-t-AikaVQgehfZntdJAAAAAE"] ampsstudio.com [Tue Aug 09 02:56:34 2022] [error] [client 171.22.30.50:0] [client 171.22.30.50] ModSecurity: Access denied with code 403 (phase 2). Match of "contains index.php" against "REQUEST_URI" required. [file "remote server"] [line "-1"] [id "570076"] [msg "Malware.Expert - Malware"] [hostname "ampsstudio.com"] [uri "/alfa.php"] [unique_id "YvG-0iFoGsYiU3CLYaYGDQAAAAg"] ampsstudio.com [Tue Aug 09 02:56:42 2022] [error] [client 171.22.30.50:0] [client 171.22.30.50] ModSecurity: Access denied with code 403 (phase 2). Match of "contains index.php" against "REQUEST_URI" required. [file "remote server"] [line "-1"] [id "570076"] [msg "Malware.Expert - Malware"] [hostname "ampsstudio.com"] [uri "/wp-admin/alfa.php"] [unique_id "YvG-2jVkVfthzf5BivbNIgAAAAA"] ampsstudio.com [Tue Aug 09 02:56:52 2022] [error] [client 171.22.30.50:0] [client 171.22.30.50] ModSecurity: Access denied with code 403 (phase 2). Match of "contains index.php" against "REQUEST_URI" required. [file "remote server"] [line "-1"] [id "570076"] [msg "Malware.Expert - Malware"] [hostname "ampsstudio.com"] [uri "/wp-content/alfa.php"] [unique_id "YvG-5Mj3cOsS9jj4rNBH1wAAAAk"] ampsstudio.com [Tue Aug 09 02:57:02 2022] [error] [client 171.22.30.50:0] [client 171.22.30.50] ModSecurity: Access denied with code 403 (phase 2). Match of "contains index.php" against "REQUEST_URI" required. [file "remote server"] [line "-1"] [id "570076"] [msg "Malware.Expert - Malware"] [hostname "ampsstudio.com"] [uri "/wp-blog.php"] [unique_id "YvG-7jMmyaRjEW6a-p1JuQAAAAI"] ampsstudio.com [Tue Aug 09 02:57:34 2022] [error] [client 171.22.30.50:0] [client 171.22.30.50] ModSecurity: Access denied with code 403 (phase 2). Pattern match "/wp-content/uploads/.*\\\\.php" at REQUEST_FILENAME. [file "remote server"] [line "-1"] [id "430017"] [msg "Malware.Expert - request_uri: Wordpress - prevent PHP files from executing"] [hostname "ampsstudio.com"] [uri "/wp-content/uploads/simple-file-list/fox.php"] [unique_id "YvG_DlQkwFqfdwu0W14IaAAAAAc"] ampsstudio.com [Tue Aug 09 02:57:49 2022] [error] [client 171.22.30.50:0] [client 171.22.30.50] ModSecurity: Access denied with code 403 (phase 2). Pattern match "/wp-content/uploads/.*\\\\.php" at REQUEST_FILENAME. [file "remote server"] [line "-1"] [id "430017"] [msg "Malware.Expert - request_uri: Wordpress - prevent PHP files from executing"] [hostname "ampsstudio.com"] [uri "/wp-content/uploads/simple-file-list/DC.php"] [unique_id "YvG_HSI0xrG-j4jH5mC1NwAAAAU"] ampsstudio.com [Tue Aug 09 02:58:32 2022] [error] [client 171.22.30.50:0] [client 171.22.30.50] ModSecurity: Access denied with code 403 (phase 2). Pattern match "/wp-admin/css/.*\\\\.php" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430027"] [msg "Malware.Expert - request_uri: Wordpress - prevent PHP files from executing"] [hostname "ampsstudio.com"] [uri "/wp-admin/css/colors/coffee/x.php"] [unique_id "YvG_SJCqc3GVlpcxLdhynwAAAAo"] ampsstudio.com [Tue Aug 09 02:58:49 2022] [error] [client 171.22.30.50:0] [client 171.22.30.50] ModSecurity: Access denied with code 403 (phase 2). String match "/wso.php" at REQUEST_URI. [file "remote server"] [line "-1"] [id "570066"] [msg "Malware.Expert - PHP Command Shell (WSO)"] [hostname "ampsstudio.com"] [uri "/wp-admin/maint/wso.php"] [unique_id "YvG_WSFoGsYiU3CLYaYGDgAAAAg"] ampsstudio.com [Tue Aug 09 02:59:09 2022] [error] [client 171.22.30.50:0] [client 171.22.30.50] ModSecurity: Access denied with code 403 (phase 2). Pattern match "/wp-admin/includes/.*\\\\.php" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430034"] [msg "Malware.Expert - request_uri: Wordpress - prevent PHP files from executing"] [hostname "ampsstudio.com"] [uri "/wp-admin/includes/mar.php"] [unique_id "YvG_bTVkVfthzf5BivbNIwAAAAA"] ampsstudio.com [Tue Aug 09 02:59:31 2022] [error] [client 171.22.30.50:0] [client 171.22.30.50] ModSecurity: Access denied with code 403 (phase 2). Pattern match "/wp-admin/includes/.*\\\\.php" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430034"] [msg "Malware.Expert - request_uri: Wordpress - prevent PHP files from executing"] [hostname "ampsstudio.com"] [uri "/wp-admin/includes/media-site.php"] [unique_id "YvG_g8j3cOsS9jj4rNBH2AAAAAk"] ampsstudio.com [Tue Aug 09 03:00:35 2022] [error] [client 171.22.30.50:0] [client 171.22.30.50] ModSecurity: Access denied with code 403 (phase 2). Match of "contains index.php" against "REQUEST_URI" required. [file "remote server"] [line "-1"] [id "570076"] [msg "Malware.Expert - Malware"] [hostname "ampsstudio.com"] [uri "/lufix.php"] [unique_id "YvG_wyI0xrG-j4jH5mC1OAAAAAU"] ampsstudio.com [Tue Aug 09 03:00:57 2022] [error] [client 171.22.30.50:0] [client 171.22.30.50] ModSecurity: Access denied with code 403 (phase 2). Match of "contains index.php" against "REQUEST_URI" required. [file "remote server"] [line "-1"] [id "570076"] [msg "Malware.Expert - Malware"] [hostname "ampsstudio.com"] [uri "/wp-admin/maint/langar.php"] [unique_id "YvG_2dOUzI9LkjABmS4uyQAAAAY"] ampsstudio.com [Tue Aug 09 03:01:58 2022] [error] [client 171.22.30.50:0] [client 171.22.30.50] ModSecurity: Access denied with code 403 (phase 2). String match "/xleet-shell.php" at REQUEST_URI. [file "remote server"] [line "-1"] [id "570071"] [msg "Malware.Expert - PHP Command Shell"] [hostname "ampsstudio.com"] [uri "/xleet-shell.php"] [unique_id "YvHAFiFoGsYiU3CLYaYGDwAAAAg"] ampsstudio.com [Tue Aug 09 03:02:23 2022] [error] [client 171.22.30.50:0] [client 171.22.30.50] ModSecurity: Access denied with code 403 (phase 2). Match of "contains index.php" against "REQUEST_URI" required. [file "remote server"] [line "-1"] [id "570076"] [msg "Malware.Expert - Malware"] [hostname "ampsstudio.com"] [uri "/inbexw.php"] [unique_id "YvHALzVkVfthzf5BivbNJAAAAAA"] ampsstudio.com [Tue Aug 09 03:03:10 2022] [error] [client 171.22.30.50:0] [client 171.22.30.50] ModSecurity: Access denied with code 403 (phase 2). Match of "contains index.php" against "REQUEST_URI" required. [file "remote server"] [line "-1"] [id "570076"] [msg "Malware.Expert - Malware"] [hostname "ampsstudio.com"] [uri "/wp-content/plugins/apikey/nocap.php"] [unique_id "YvHAXjMmyaRjEW6a-p1JuwAAAAI"] ampsstudio.com [Tue Aug 09 03:03:36 2022] [error] [client 171.22.30.50:0] [client 171.22.30.50] ModSecurity: Access denied with code 403 (phase 2). Match of "contains index.php" against "REQUEST_URI" required. [file "remote server"] [line "-1"] [id "570076"] [msg "Malware.Expert - Malware"] [hostname "ampsstudio.com"] [uri "/modules/mod_ariimageslidersa/mod_ariimageslidersa.php"] [unique_id "YvHAeJCqc3GVlpcxLdhyoQAAAAo"] ampsstudio.com [Tue Aug 09 03:04:02 2022] [error] [client 171.22.30.50:0] [client 171.22.30.50] ModSecurity: Access denied with code 403 (phase 2). Pattern match "/images/.*\\\\.php" at REQUEST_URI. [file "remote server"] [line "-1"] [id "470000"] [msg "Malware.Expert - request_uri: Images folder - prevent PHP files from executing"] [hostname "ampsstudio.com"] [uri "/images/mod_config.php"] [unique_id "YvHAkuAikaVQgehfZntdJwAAAAE"] ampsstudio.com [Tue Aug 09 03:04:22 2022] [error] [client 171.22.30.50:0] [client 171.22.30.50] ModSecurity: Access denied with code 403 (phase 2). Match of "contains index.php" against "REQUEST_URI" required. [file "remote server"] [line "-1"] [id "570076"] [msg "Malware.Expert - Malware"] [hostname "ampsstudio.com"] [uri "/templates/atomic/error.php"] [unique_id "YvHApsj3cOsS9jj4rNBH2gAAAAk"] ampsstudio.com [Tue Aug 09 03:04:51 2022] [error] [client 171.22.30.50:0] [client 171.22.30.50] ModSecurity: Access denied with code 403 (phase 2). Match of "contains index.php" against "REQUEST_URI" required. [file "remote server"] [line "-1"] [id "570076"] [msg "Malware.Expert - Malware"] [hostname "ampsstudio.com"] [uri "/modules/mod_araticlws/mod_araticlws.php"] [unique_id "YvHAw1QkwFqfdwu0W14IawAAAAc"] ampsstudio.com [Tue Aug 09 03:05:23 2022] [error] [client 171.22.30.50:0] [client 171.22.30.50] ModSecurity: Access denied with code 403 (phase 2). Match of "contains index.php" against "REQUEST_URI" required. [file "remote server"] [line "-1"] [id "570076"] [msg "Malware.Expert - Malware"] [hostname "ampsstudio.com"] [uri "/xl33t.php"] [unique_id "YvHA4yI0xrG-j4jH5mC1OgAAAAU"] ampsstudio.com [Tue Aug 09 03:05:48 2022] [error] [client 171.22.30.50:0] [client 171.22.30.50] ModSecurity: Access denied with code 403 (phase 2). Match of "contains index.php" against "REQUEST_URI" required. [file "remote server"] [line "-1"] [id "570076"] [msg "Malware.Expert - Malware"] [hostname "ampsstudio.com"] [uri "/wp-content/themes/twentyfive/include.php"] [unique_id "YvHA_NOUzI9LkjABmS4uywAAAAY"] ampsstudio.com [Tue Aug 09 03:06:07 2022] [error] [client 171.22.30.50:0] [client 171.22.30.50] ModSecurity: Access denied with code 403 (phase 2). Match of "contains index.php" against "REQUEST_URI" required. [file "remote server"] [line "-1"] [id "570076"] [msg "Malware.Expert - Malware"] [hostname "ampsstudio.com"] [uri "/wp-content/xleet.php"] [unique_id "YvHBD5Cqc3GVlpcxLdhyogAAAAo"] ampsstudio.com [Tue Aug 09 03:06:39 2022] [error] [client 171.22.30.50:0] [client 171.22.30.50] ModSecurity: Access denied with code 403 (phase 2). Match of "contains index.php" against "REQUEST_URI" required. [file "remote server"] [line "-1"] [id "570076"] [msg "Malware.Expert - Malware"] [hostname "ampsstudio.com"] [uri "/wordpress/wp-content/themes/twentyfive/include.php"] [unique_id "YvHBLyFoGsYiU3CLYaYGEQAAAAg"] ampsstudio.com [Tue Aug 09 03:07:13 2022] [error] [client 171.22.30.50:0] [client 171.22.30.50] ModSecurity: Access denied with code 403 (phase 2). Match of "contains index.php" against "REQUEST_URI" required. [file "remote server"] [line "-1"] [id "570076"] [msg "Malware.Expert - Malware"] [hostname "ampsstudio.com"] [uri "/wp-content/themes/sketch/404.php"] [unique_id "YvHBUTVkVfthzf5BivbNJgAAAAA"] ampsstudio.com [Tue Aug 09 03:07:24 2022] [error] [client 171.22.30.50:0] [client 171.22.30.50] ModSecurity: Access denied with code 403 (phase 2). Pattern match "/wp-admin/images/.*\\\\.php" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430030"] [msg "Malware.Expert - request_uri: Wordpress - prevent PHP files from executing"] [hostname "ampsstudio.com"] [uri "/wp-admin/images/xleet.php"] [unique_id "YvHBXMj3cOsS9jj4rNBH2wAAAAk"] ampsstudio.com [Tue Aug 09 03:07:58 2022] [error] [client 171.22.30.50:0] [client 171.22.30.50] ModSecurity: Access denied with code 403 (phase 2). Match of "contains index.php" against "REQUEST_URI" required. [file "remote server"] [line "-1"] [id "570076"] [msg "Malware.Expert - Malware"] [hostname "ampsstudio.com"] [uri "/wp-admin/maint/xleet.php"] [unique_id "YvHBfjMmyaRjEW6a-p1JvQAAAAI"] webdisk.ampsstudio.com [Tue Aug 09 03:08:14 2022] [error] [client 193.233.193.11:0] [client 193.233.193.11] ModSecurity: Access denied with code 403 (phase 2). String match "/.git/config" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430058"] [msg "Malware.Expert - request_uri: .git config"] [hostname "webdisk.ampsstudio.com"] [uri "/.git/config"] [unique_id "YvHBjiFoGsYiU3CLYaYGEgAAAAg"] ampsstudio.com [Tue Aug 09 03:08:18 2022] [error] [client 171.22.30.50:0] [client 171.22.30.50] ModSecurity: Access denied with code 403 (phase 2). Match of "contains index.php" against "REQUEST_URI" required. [file "remote server"] [line "-1"] [id "570076"] [msg "Malware.Expert - Malware"] [hostname "ampsstudio.com"] [uri "/wp-admin/meta/xleet.php"] [unique_id "YvHBkk3k5CLpHPJ67cqpNAAAAAs"] ampsstudio.com [Tue Aug 09 03:08:39 2022] [error] [client 171.22.30.50:0] [client 171.22.30.50] ModSecurity: Access denied with code 403 (phase 2). Match of "contains index.php" against "REQUEST_URI" required. [file "remote server"] [line "-1"] [id "570076"] [msg "Malware.Expert - Malware"] [hostname "ampsstudio.com"] [uri "/wp-admin/network/xleet.php"] [unique_id "YvHBp1QkwFqfdwu0W14IbQAAAAc"] ampsstudio.com [Tue Aug 09 03:09:02 2022] [error] [client 171.22.30.50:0] [client 171.22.30.50] ModSecurity: Access denied with code 403 (phase 2). Match of "contains index.php" against "REQUEST_URI" required. [file "remote server"] [line "-1"] [id "570076"] [msg "Malware.Expert - Malware"] [hostname "ampsstudio.com"] [uri "/wp-admin/user/xleet.php"] [unique_id "YvHBvuAikaVQgehfZntdKgAAAAE"] ampsstudio.com [Tue Aug 09 03:10:13 2022] [error] [client 171.22.30.50:0] [client 171.22.30.50] ModSecurity: Access denied with code 403 (phase 2). Pattern match "/wp-admin/includes/.*\\\\.php" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430034"] [msg "Malware.Expert - request_uri: Wordpress - prevent PHP files from executing"] [hostname "ampsstudio.com"] [uri "/wp-admin/includes/xleet.php"] [unique_id "YvHCBcj3cOsS9jj4rNBH3QAAAAk"] ampsstudio.com [Tue Aug 09 03:10:47 2022] [error] [client 171.22.30.50:0] [client 171.22.30.50] ModSecurity: Access denied with code 403 (phase 2). Pattern match "/wp-admin/css/.*\\\\.php" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430027"] [msg "Malware.Expert - request_uri: Wordpress - prevent PHP files from executing"] [hostname "ampsstudio.com"] [uri "/wp-admin/css/xleet.php"] [unique_id "YvHCJyI0xrG-j4jH5mC1PQAAAAU"] ampsstudio.com [Tue Aug 09 03:11:13 2022] [error] [client 171.22.30.50:0] [client 171.22.30.50] ModSecurity: Access denied with code 403 (phase 2). Match of "contains index.php" against "REQUEST_URI" required. [file "remote server"] [line "-1"] [id "570076"] [msg "Malware.Expert - Malware"] [hostname "ampsstudio.com"] [uri "/wordpress/wp-content/themes/sketch/404.php"] [unique_id "YvHCQU3k5CLpHPJ67cqpNgAAAAs"] ampsstudio.com [Tue Aug 09 03:11:27 2022] [error] [client 171.22.30.50:0] [client 171.22.30.50] ModSecurity: Access denied with code 403 (phase 2). Match of "contains index.php" against "REQUEST_URI" required. [file "remote server"] [line "-1"] [id "570076"] [msg "Malware.Expert - Malware"] [hostname "ampsstudio.com"] [uri "/wp-includes/xleet.php"] [unique_id "YvHCTyFoGsYiU3CLYaYGFAAAAAg"] ampsstudio.com [Tue Aug 09 03:11:59 2022] [error] [client 171.22.30.50:0] [client 171.22.30.50] ModSecurity: Access denied with code 403 (phase 2). Pattern match "/wp-content/uploads/.*\\\\.php" at REQUEST_FILENAME. [file "remote server"] [line "-1"] [id "430017"] [msg "Malware.Expert - request_uri: Wordpress - prevent PHP files from executing"] [hostname "ampsstudio.com"] [uri "/wp-content/uploads/xleet.php"] [unique_id "YvHCbzVkVfthzf5BivbNKQAAAAA"] ampsstudio.com [Tue Aug 09 03:12:35 2022] [crit] [client 171.22.30.50:0] AH00529: /home/virtual/vps-aa3942/a/aede5353c4/public_html/.well-known/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/virtual/vps-aa3942/a/aede5353c4/public_html/.well-known/' is executable ampsstudio.com [Tue Aug 09 03:12:57 2022] [error] [client 171.22.30.50:0] [client 171.22.30.50] ModSecurity: Access denied with code 403 (phase 2). Match of "contains index.php" against "REQUEST_URI" required. [file "remote server"] [line "-1"] [id "570076"] [msg "Malware.Expert - Malware"] [hostname "ampsstudio.com"] [uri "/wp-vatva.php"] [unique_id "YvHCqdOUzI9LkjABmS4uzwAAAAY"] ampsstudio.com [Tue Aug 09 03:13:11 2022] [error] [client 171.22.30.50:0] [client 171.22.30.50] ModSecurity: Access denied with code 403 (phase 2). String match "/wp-2019.php" at REQUEST_URI. [file "remote server"] [line "-1"] [id "570068"] [msg "Malware.Expert - PHP Command Shell (WSO)"] [hostname "ampsstudio.com"] [uri "/wp-2019.php"] [unique_id "YvHCt-AikaVQgehfZntdLAAAAAE"] ampsstudio.com [Tue Aug 09 03:13:40 2022] [error] [client 171.22.30.50:0] [client 171.22.30.50] ModSecurity: Access denied with code 403 (phase 2). Match of "contains index.php" against "REQUEST_URI" required. [file "remote server"] [line "-1"] [id "570076"] [msg "Malware.Expert - Malware"] [hostname "ampsstudio.com"] [uri "/style.php"] [unique_id "YvHC1E3k5CLpHPJ67cqpNwAAAAs"] ampsstudio.com [Tue Aug 09 03:14:09 2022] [error] [client 171.22.30.50:0] [client 171.22.30.50] ModSecurity: Access denied with code 403 (phase 2). Match of "contains index.php" against "REQUEST_URI" required. [file "remote server"] [line "-1"] [id "570076"] [msg "Malware.Expert - Malware"] [hostname "ampsstudio.com"] [uri "/1975.php"] [unique_id "YvHC8VQkwFqfdwu0W14IcAAAAAc"] ampsstudio.com [Tue Aug 09 03:14:48 2022] [error] [client 171.22.30.50:0] [client 171.22.30.50] ModSecurity: Access denied with code 403 (phase 2). Match of "contains index.php" against "REQUEST_URI" required. [file "remote server"] [line "-1"] [id "570076"] [msg "Malware.Expert - Malware"] [hostname "ampsstudio.com"] [uri "/vabba.php"] [unique_id "YvHDGCI0xrG-j4jH5mC1PwAAAAU"] ampsstudio.com [Tue Aug 09 03:14:57 2022] [error] [client 171.22.30.50:0] [client 171.22.30.50] ModSecurity: Access denied with code 403 (phase 2). Match of "contains index.php" against "REQUEST_URI" required. [file "remote server"] [line "-1"] [id "570076"] [msg "Malware.Expert - Malware"] [hostname "ampsstudio.com"] [uri "/qws.php"] [unique_id "YvHDIZCqc3GVlpcxLdhypwAAAAo"] ampsstudio.com [Tue Aug 09 03:15:09 2022] [error] [client 171.22.30.50:0] [client 171.22.30.50] ModSecurity: Access denied with code 403 (phase 2). Match of "contains index.php" against "REQUEST_URI" required. [file "remote server"] [line "-1"] [id "570076"] [msg "Malware.Expert - Malware"] [hostname "ampsstudio.com"] [uri "/wp-content/31cx4.php"] [unique_id "YvHDLdOUzI9LkjABmS4u0AAAAAY"] ampsstudio.com [Tue Aug 09 03:15:34 2022] [error] [client 171.22.30.50:0] [client 171.22.30.50] ModSecurity: Access denied with code 403 (phase 2). Match of "contains index.php" against "REQUEST_URI" required. [file "remote server"] [line "-1"] [id "570076"] [msg "Malware.Expert - Malware"] [hostname "ampsstudio.com"] [uri "/shell20211028.php"] [unique_id "YvHDRjMmyaRjEW6a-p1JwgAAAAI"] ampsstudio.com [Tue Aug 09 03:16:28 2022] [error] [client 171.22.30.50:0] [client 171.22.30.50] ModSecurity: Access denied with code 403 (phase 2). Match of "contains index.php" against "REQUEST_URI" required. [file "remote server"] [line "-1"] [id "570076"] [msg "Malware.Expert - Malware"] [hostname "ampsstudio.com"] [uri "/autoload_classmap.php"] [unique_id "YvHDfNOUzI9LkjABmS4u0QAAAAY"] ampsstudio.com [Tue Aug 09 03:16:48 2022] [error] [client 171.22.30.50:0] [client 171.22.30.50] ModSecurity: Access denied with code 403 (phase 2). Match of "contains index.php" against "REQUEST_URI" required. [file "remote server"] [line "-1"] [id "570076"] [msg "Malware.Expert - Malware"] [hostname "ampsstudio.com"] [uri "/radio.php"] [unique_id "YvHDkOAikaVQgehfZntdLgAAAAE"] ampsstudio.com [Tue Aug 09 03:17:51 2022] [error] [client 171.22.30.50:0] [client 171.22.30.50] ModSecurity: Access denied with code 403 (phase 2). Match of "contains index.php" against "REQUEST_URI" required. [file "remote server"] [line "-1"] [id "570076"] [msg "Malware.Expert - Malware"] [hostname "ampsstudio.com"] [uri "/content.php"] [unique_id "YvHDzzMmyaRjEW6a-p1JwwAAAAI"] ampsstudio.com [Tue Aug 09 03:18:23 2022] [error] [client 171.22.30.50:0] [client 171.22.30.50] ModSecurity: Access denied with code 403 (phase 2). Match of "contains index.php" against "REQUEST_URI" required. [file "remote server"] [line "-1"] [id "570076"] [msg "Malware.Expert - Malware"] [hostname "ampsstudio.com"] [uri "/wp-includes/wp-class.php"] [unique_id "YvHD75Cqc3GVlpcxLdhyqQAAAAo"] ampsstudio.com [Tue Aug 09 03:18:36 2022] [error] [client 171.22.30.50:0] [client 171.22.30.50] ModSecurity: Access denied with code 403 (phase 2). Pattern match "/wp-includes/images/.*\\\\.php" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430032"] [msg "Malware.Expert - request_uri: Wordpress - prevent PHP files from executing"] [hostname "ampsstudio.com"] [uri "/wp-includes/images/media/about.php"] [unique_id "YvHD_OAikaVQgehfZntdLwAAAAE"] ampsstudio.com [Tue Aug 09 03:18:57 2022] [error] [client 171.22.30.50:0] [client 171.22.30.50] ModSecurity: Access denied with code 403 (phase 2). Match of "contains index.php" against "REQUEST_URI" required. [file "remote server"] [line "-1"] [id "570076"] [msg "Malware.Expert - Malware"] [hostname "ampsstudio.com"] [uri "/wp-content/languages/themes/radio.php"] [unique_id "YvHEETVkVfthzf5BivbNLQAAAAA"] ampsstudio.com [Tue Aug 09 03:19:15 2022] [error] [client 171.22.30.50:0] [client 171.22.30.50] ModSecurity: Access denied with code 403 (phase 2). Match of "contains index.php" against "REQUEST_URI" required. [file "remote server"] [line "-1"] [id "570076"] [msg "Malware.Expert - Malware"] [hostname "ampsstudio.com"] [uri "/wp-includes/Text/Diff/content.php"] [unique_id "YvHEI03k5CLpHPJ67cqpOgAAAAs"] ampsstudio.com [Tue Aug 09 03:19:44 2022] [error] [client 171.22.30.50:0] [client 171.22.30.50] ModSecurity: Access denied with code 403 (phase 2). Match of "contains index.php" against "REQUEST_URI" required. [file "remote server"] [line "-1"] [id "570076"] [msg "Malware.Expert - Malware"] [hostname "ampsstudio.com"] [uri "/wp-includes/Text/Diff/radio.php"] [unique_id "YvHEQMj3cOsS9jj4rNBH4gAAAAk"] ampsstudio.com [Tue Aug 09 03:20:07 2022] [error] [client 171.22.30.50:0] [client 171.22.30.50] ModSecurity: Access denied with code 403 (phase 2). Pattern match "/wp-includes/images/.*\\\\.php" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430032"] [msg "Malware.Expert - request_uri: Wordpress - prevent PHP files from executing"] [hostname "ampsstudio.com"] [uri "/wp-includes/images/media/new-index.php"] [unique_id "YvHEV1QkwFqfdwu0W14IcwAAAAc"] ampsstudio.com [Tue Aug 09 03:20:31 2022] [error] [client 171.22.30.50:0] [client 171.22.30.50] ModSecurity: Access denied with code 403 (phase 2). Pattern match "/wp-includes/images/.*\\\\.php" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430032"] [msg "Malware.Expert - request_uri: Wordpress - prevent PHP files from executing"] [hostname "ampsstudio.com"] [uri "/wp-includes/images/smilies/2index.php"] [unique_id "YvHEb9OUzI9LkjABmS4u0wAAAAY"] ampsstudio.com [Tue Aug 09 03:20:57 2022] [error] [client 171.22.30.50:0] [client 171.22.30.50] ModSecurity: Access denied with code 403 (phase 2). Match of "contains index.php" against "REQUEST_URI" required. [file "remote server"] [line "-1"] [id "570076"] [msg "Malware.Expert - Malware"] [hostname "ampsstudio.com"] [uri "/wp-content/themes/twentytwenty/content.php"] [unique_id "YvHEieAikaVQgehfZntdMAAAAAE"] ampsstudio.com [Tue Aug 09 03:21:26 2022] [error] [client 171.22.30.50:0] [client 171.22.30.50] ModSecurity: Access denied with code 403 (phase 2). Pattern match "/wp-includes/images/.*\\\\.php" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430032"] [msg "Malware.Expert - request_uri: Wordpress - prevent PHP files from executing"] [hostname "ampsstudio.com"] [uri "/wp-includes/images/wlw/content.php"] [unique_id "YvHEpk3k5CLpHPJ67cqpOwAAAAs"] ampsstudio.com [Tue Aug 09 03:21:39 2022] [error] [client 171.22.30.50:0] [client 171.22.30.50] ModSecurity: Access denied with code 403 (phase 2). String match "/alwso.php" at REQUEST_URI. [file "remote server"] [line "-1"] [id "570069"] [msg "Malware.Expert - PHP Command Shell (WSO)"] [hostname "ampsstudio.com"] [uri "/alwso.php"] [unique_id "YvHEszMmyaRjEW6a-p1JxQAAAAI"] ampsstudio.com [Tue Aug 09 03:22:11 2022] [error] [client 171.22.30.50:0] [client 171.22.30.50] ModSecurity: Access denied with code 403 (phase 2). Match of "contains index.php" against "REQUEST_URI" required. [file "remote server"] [line "-1"] [id "570076"] [msg "Malware.Expert - Malware"] [hostname "ampsstudio.com"] [uri "/wp-content/themes/zakra/image.php"] [unique_id "YvHE0-lB-XUZ8z-FXC06ugAAAAU"] ampsstudio.com [Tue Aug 09 03:22:47 2022] [error] [client 171.22.30.50:0] [client 171.22.30.50] ModSecurity: Access denied with code 403 (phase 2). Match of "contains index.php" against "REQUEST_URI" required. [file "remote server"] [line "-1"] [id "570076"] [msg "Malware.Expert - Malware"] [hostname "ampsstudio.com"] [uri "/varb.php"] [unique_id "YvHE9-lB-XUZ8z-FXC06uwAAAAU"] ampsstudio.com [Tue Aug 09 03:23:12 2022] [error] [client 171.22.30.50:0] [client 171.22.30.50] ModSecurity: Access denied with code 403 (phase 2). Pattern match "/images/.*\\\\.php" at REQUEST_URI. [file "remote server"] [line "-1"] [id "470000"] [msg "Malware.Expert - request_uri: Images folder - prevent PHP files from executing"] [hostname "ampsstudio.com"] [uri "/images/up.php"] [unique_id "YvHFED26aFqDUdXKTYlnMAAAAAY"] ampsstudio.com [Tue Aug 09 03:24:04 2022] [error] [client 171.22.30.50:0] [client 171.22.30.50] ModSecurity: Access denied with code 403 (phase 2). Match of "contains index.php" against "REQUEST_URI" required. [file "remote server"] [line "-1"] [id "570076"] [msg "Malware.Expert - Malware"] [hostname "ampsstudio.com"] [uri "/wp-signin.php"] [unique_id "YvHFRJ-_urX-4yF60VTN-wAAAAI"] ampsstudio.com [Tue Aug 09 03:24:27 2022] [error] [client 171.22.30.50:0] [client 171.22.30.50] ModSecurity: Access denied with code 403 (phase 2). Match of "contains index.php" against "REQUEST_URI" required. [file "remote server"] [line "-1"] [id "570076"] [msg "Malware.Expert - Malware"] [hostname "ampsstudio.com"] [uri "/local.php"] [unique_id "YvHFW-lB-XUZ8z-FXC06vQAAAAU"] ampsstudio.com [Tue Aug 09 03:24:55 2022] [error] [client 171.22.30.50:0] [client 171.22.30.50] ModSecurity: Access denied with code 403 (phase 2). Match of "contains index.php" against "REQUEST_URI" required. [file "remote server"] [line "-1"] [id "570076"] [msg "Malware.Expert - Malware"] [hostname "ampsstudio.com"] [uri "/wp-content/export.php"] [unique_id "YvHFd1NGAMn9-QNto-Zr1wAAAAE"] ampsstudio.com [Tue Aug 09 03:25:06 2022] [error] [client 171.22.30.50:0] [client 171.22.30.50] ModSecurity: Access denied with code 403 (phase 2). Match of "contains index.php" against "REQUEST_URI" required. [file "remote server"] [line "-1"] [id "570076"] [msg "Malware.Expert - Malware"] [hostname "ampsstudio.com"] [uri "/wp-plugins.php"] [unique_id "YvHFgj26aFqDUdXKTYlnMgAAAAY"] ampsstudio.com [Tue Aug 09 03:25:42 2022] [error] [client 171.22.30.50:0] [client 171.22.30.50] ModSecurity: Access denied with code 403 (phase 2). String match "/ups.php" at REQUEST_URI. [file "remote server"] [line "-1"] [id "570041"] [msg "Malware.Expert - Malware"] [hostname "ampsstudio.com"] [uri "/ups.php"] [unique_id "YvHFpulB-XUZ8z-FXC06vgAAAAU"] ampsstudio.com [Tue Aug 09 03:26:03 2022] [error] [client 171.22.30.50:0] [client 171.22.30.50] ModSecurity: Access denied with code 403 (phase 2). Match of "contains index.php" against "REQUEST_URI" required. [file "remote server"] [line "-1"] [id "570076"] [msg "Malware.Expert - Malware"] [hostname "ampsstudio.com"] [uri "/wp.php"] [unique_id "YvHFuw9_ij9neRLJqKBcFQAAAAM"] ampsstudio.com [Tue Aug 09 03:26:35 2022] [error] [client 171.22.30.50:0] [client 171.22.30.50] ModSecurity: Access denied with code 403 (phase 2). Match of "contains index.php" against "REQUEST_URI" required. [file "remote server"] [line "-1"] [id "570076"] [msg "Malware.Expert - Malware"] [hostname "ampsstudio.com"] [uri "/admin.php"] [unique_id "YvHF28DGnvcIz_oElTJIVwAAAAA"] ampsstudio.com [Tue Aug 09 03:26:58 2022] [error] [client 171.22.30.50:0] [client 171.22.30.50] ModSecurity: Access denied with code 403 (phase 2). Match of "contains index.php" against "REQUEST_URI" required. [file "remote server"] [line "-1"] [id "570076"] [msg "Malware.Expert - Malware"] [hostname "ampsstudio.com"] [uri "/xleet.php"] [unique_id "YvHF8p-_urX-4yF60VTN_QAAAAI"] ampsstudio.com [Tue Aug 09 03:27:12 2022] [error] [client 171.22.30.50:0] [client 171.22.30.50] ModSecurity: Access denied with code 403 (phase 2). Match of "contains index.php" against "REQUEST_URI" required. [file "remote server"] [line "-1"] [id "570076"] [msg "Malware.Expert - Malware"] [hostname "ampsstudio.com"] [uri "/403.php"] [unique_id "YvHGAMBAcM0VfWVcKeWo5QAAAAk"] ampsstudio.com [Tue Aug 09 03:27:30 2022] [error] [client 171.22.30.50:0] [client 171.22.30.50] ModSecurity: Access denied with code 403 (phase 2). Pattern match "/wp-content/plugins/.*/up\\\\.php" at REQUEST_URI. [file "remote server"] [line "-1"] [id "570052"] [msg "Malware.Expert - Malware"] [hostname "ampsstudio.com"] [uri "/wp-content/plugins/ubh/up.php/.well-known/"] [unique_id "YvHGEulB-XUZ8z-FXC06vwAAAAU"] ampsstudio.com [Tue Aug 09 03:27:46 2022] [crit] [client 171.22.30.50:0] AH00529: /home/virtual/vps-aa3942/a/aede5353c4/public_html/.well-known/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/virtual/vps-aa3942/a/aede5353c4/public_html/.well-known/' is executable ampsstudio.com [Tue Aug 09 03:28:09 2022] [error] [client 171.22.30.50:0] AH01276: Cannot serve directory /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-includes/: No matching DirectoryIndex (index.php,index.html,index.htm) found, and server-generated directory index forbidden by Options directive ampsstudio.com [Tue Aug 09 03:28:36 2022] [error] [client 171.22.30.50:0] AH01276: Cannot serve directory /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-admin/css/: No matching DirectoryIndex (index.php,index.html,index.htm) found, and server-generated directory index forbidden by Options directive ampsstudio.com [Tue Aug 09 03:28:58 2022] [error] [client 171.22.30.50:0] AH01276: Cannot serve directory /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-includes/css/: No matching DirectoryIndex (index.php,index.html,index.htm) found, and server-generated directory index forbidden by Options directive ampsstudio.com [Tue Aug 09 03:29:23 2022] [error] [client 171.22.30.50:0] AH01276: Cannot serve directory /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-includes/images/: No matching DirectoryIndex (index.php,index.html,index.htm) found, and server-generated directory index forbidden by Options directive ampsstudio.com [Tue Aug 09 03:29:48 2022] [error] [client 171.22.30.50:0] AH01276: Cannot serve directory /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-admin/maint/: No matching DirectoryIndex (index.php,index.html,index.htm) found, and server-generated directory index forbidden by Options directive ampsstudio.com [Tue Aug 09 03:32:01 2022] [error] [client 171.22.30.50:0] [client 171.22.30.50] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\/wp-content\\\\/plugins\\\\/(ubh|api-wp)\\\\/" at REQUEST_URI. [file "remote server"] [line "-1"] [id "570063"] [msg "Malware.Expert - Wordpress Malware"] [hostname "ampsstudio.com"] [uri "/wp-content/plugins/ubh/"] [unique_id "YvHHIVNGAMn9-QNto-Zr2wAAAAE"] ampsstudio.com [Tue Aug 09 03:32:18 2022] [error] [client 171.22.30.50:0] AH01276: Cannot serve directory /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/languages/: No matching DirectoryIndex (index.php,index.html,index.htm) found, and server-generated directory index forbidden by Options directive ampsstudio.com [Tue Aug 09 03:32:46 2022] [error] [client 171.22.30.50:0] [client 171.22.30.50] ModSecurity: Access denied with code 403 (phase 2). Pattern match "/wp-content/uploads/$" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430061"] [msg "Malware.Expert - Wordpress - Protect uploads diretory listing files"] [hostname "ampsstudio.com"] [uri "/wp-content/uploads/"] [unique_id "YvHHTp-_urX-4yF60VTOAAAAAAI"] ampsstudio.com [Tue Aug 09 04:50:48 2022] [error] [client 20.163.26.201:0] [client 20.163.26.201] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "ampsstudio.com"] [uri "/.env"] [unique_id "YvHZmMBAcM0VfWVcKeWpEgAAAAk"] cpanel.ampsstudio.com [Tue Aug 09 05:26:37 2022] [error] [client 193.233.193.11:0] [client 193.233.193.11] ModSecurity: Access denied with code 403 (phase 2). String match "/.git/config" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430058"] [msg "Malware.Expert - request_uri: .git config"] [hostname "cpanel.ampsstudio.com"] [uri "/.git/config"] [unique_id "YvHh_VNGAMn9-QNto-ZsGAAAAAE"] ampsstudio.com [Tue Aug 09 06:32:08 2022] [error] [client 13.94.195.1:0] [client 13.94.195.1] ModSecurity: Access denied with code 403 (phase 2). String match "/.git/config" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430058"] [msg "Malware.Expert - request_uri: .git config"] [hostname "ampsstudio.com"] [uri "/.git/config"] [unique_id "YvHxWOlB-XUZ8z-FXC07GAAAAAU"] mail.ampsstudio.com [Tue Aug 09 06:52:31 2022] [error] [client 193.233.193.11:0] [client 193.233.193.11] ModSecurity: Access denied with code 403 (phase 2). String match "/.git/config" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430058"] [msg "Malware.Expert - request_uri: .git config"] [hostname "mail.ampsstudio.com"] [uri "/.git/config"] [unique_id "YvH2H2jV1Dxok8uoIvi3JQAAAAg"] webmail.ampsstudio.com [Tue Aug 09 07:01:00 2022] [error] [client 20.38.169.200:0] [client 20.38.169.200] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "webmail.ampsstudio.com"] [uri "/.env"] [unique_id "YvH4HA9_ij9neRLJqKBceAAAAAM"] www.ampsstudio.com [Tue Aug 09 07:04:07 2022] [error] [client 109.70.100.20:0] AH01071: Got error 'PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179' www.ampsstudio.com [Tue Aug 09 07:04:07 2022] [error] [client 109.70.100.20:0] AH01071: Got error 'PHP message: PHP Warning: Cannot modify header information - headers already sent by (output started at /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-includes/functions.php:5275) in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/includes/sonaar-music/css/theme/custom-style.php on line 2' www.ampsstudio.com [Tue Aug 09 10:07:10 2022] [error] [client 87.237.165.31:0] AH01071: Got error 'PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179' www.ampsstudio.com [Tue Aug 09 10:07:10 2022] [error] [client 87.237.165.31:0] AH01071: Got error 'PHP message: PHP Warning: Cannot modify header information - headers already sent by (output started at /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-includes/functions.php:5275) in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/includes/sonaar-music/css/theme/custom-style.php on line 2' ampsstudio.com [Tue Aug 09 14:56:33 2022] [error] [client 80.76.51.29:0] AH01276: Cannot serve directory /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-admin/css/: No matching DirectoryIndex (index.php,index.html,index.htm) found, and server-generated directory index forbidden by Options directive ampsstudio.com [Tue Aug 09 15:50:29 2022] [error] [client 20.123.80.100:0] [client 20.123.80.100] ModSecurity: Access denied with code 403 (phase 2). Pattern match "/wp-content/uploads/.*\\\\.php" at REQUEST_FILENAME. [file "remote server"] [line "-1"] [id "430017"] [msg "Malware.Expert - request_uri: Wordpress - prevent PHP files from executing"] [hostname "ampsstudio.com"] [uri "/wp-content/uploads/2021/12/up.php"] [unique_id "YvJ0NbzTey29620mz7dVIAAAAA8"] ampsstudio.com [Tue Aug 09 15:50:34 2022] [error] [client 20.123.80.100:0] [client 20.123.80.100] ModSecurity: Access denied with code 403 (phase 2). String match "python" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "580102"] [msg "Malware.Expert - Wordpress - unknown python request"] [hostname "ampsstudio.com"] [uri "/wp-admin/alfa.php"] [unique_id "YvJ0OrzTey29620mz7dVIQAAAA8"] ampsstudio.com [Tue Aug 09 15:50:36 2022] [error] [client 20.123.80.100:0] [client 20.123.80.100] ModSecurity: Access denied with code 403 (phase 2). String match "python" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "580100"] [msg "Malware.Expert - Wordpress - unknown python request"] [hostname "ampsstudio.com"] [uri "/wp-includes/fw.php"] [unique_id "YvJ0PPrOaGkMv2YcAe_tTAAAAA4"] ampsstudio.com [Tue Aug 09 15:50:36 2022] [error] [client 20.123.80.100:0] [client 20.123.80.100] ModSecurity: Access denied with code 403 (phase 2). String match "python" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "580101"] [msg "Malware.Expert - Wordpress - unknown python request"] [hostname "ampsstudio.com"] [uri "/wp-content/fw.php"] [unique_id "YvJ0PA9_ij9neRLJqKBeSAAAAAM"] ampsstudio.com [Tue Aug 09 15:50:36 2022] [error] [client 20.123.80.100:0] [client 20.123.80.100] ModSecurity: Access denied with code 403 (phase 2). String match "python" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "580102"] [msg "Malware.Expert - Wordpress - unknown python request"] [hostname "ampsstudio.com"] [uri "/wp-admin/fw.php"] [unique_id "YvJ0PEOXpFi0F9h82hND2AAAAAs"] ampsstudio.com [Tue Aug 09 15:50:36 2022] [error] [client 20.123.80.100:0] [client 20.123.80.100] ModSecurity: Access denied with code 403 (phase 2). Pattern match "/wp-content/uploads/.*\\\\.php" at REQUEST_FILENAME. [file "remote server"] [line "-1"] [id "430017"] [msg "Malware.Expert - request_uri: Wordpress - prevent PHP files from executing"] [hostname "ampsstudio.com"] [uri "/wp-content/uploads/2021/12/fw.php"] [unique_id "YvJ0PD26aFqDUdXKTYlpiQAAAAY"] ampsstudio.com [Tue Aug 09 15:50:36 2022] [error] [client 20.123.80.100:0] [client 20.123.80.100] ModSecurity: Access denied with code 403 (phase 2). String match "/wso.php" at REQUEST_URI. [file "remote server"] [line "-1"] [id "570066"] [msg "Malware.Expert - PHP Command Shell (WSO)"] [hostname "ampsstudio.com"] [uri "/wp-includes/wso.php"] [unique_id "YvJ0PH1funsrc8lzjwgHOgAAAAo"] ampsstudio.com [Tue Aug 09 15:50:36 2022] [error] [client 20.123.80.100:0] [client 20.123.80.100] ModSecurity: Access denied with code 403 (phase 2). String match "/wso.php" at REQUEST_URI. [file "remote server"] [line "-1"] [id "570066"] [msg "Malware.Expert - PHP Command Shell (WSO)"] [hostname "ampsstudio.com"] [uri "/wp-content/wso.php"] [unique_id "YvJ0PBIYiLrmPZM-Ai6pagAAAAU"] ampsstudio.com [Tue Aug 09 15:50:36 2022] [error] [client 20.123.80.100:0] [client 20.123.80.100] ModSecurity: Access denied with code 403 (phase 2). String match "/wso.php" at REQUEST_URI. [file "remote server"] [line "-1"] [id "570066"] [msg "Malware.Expert - PHP Command Shell (WSO)"] [hostname "ampsstudio.com"] [uri "/wp-admin/wso.php"] [unique_id "YvJ0PLzTey29620mz7dVIgAAAA8"] ampsstudio.com [Tue Aug 09 15:50:40 2022] [error] [client 20.123.80.100:0] [client 20.123.80.100] ModSecurity: Access denied with code 403 (phase 2). String match "/shell.php" at REQUEST_URI. [file "remote server"] [line "-1"] [id "570072"] [msg "Malware.Expert - PHP Command Shell"] [hostname "ampsstudio.com"] [uri "/shell.php"] [unique_id "YvJ0QH1funsrc8lzjwgHOwAAAAo"] ampsstudio.com [Tue Aug 09 15:50:41 2022] [error] [client 20.123.80.100:0] [client 20.123.80.100] ModSecurity: Access denied with code 403 (phase 2). String match "connector.minimal.php" at REQUEST_URI. [file "remote server"] [line "-1"] [id "500083"] [msg "Malware.Expert - request_uri: 0-Day - Wordpress filemanager plugin"] [hostname "ampsstudio.com"] [uri "/wp-content/plugins/wp-file-manager/lib/php/connector.minimal.php"] [unique_id "YvJ0QRIYiLrmPZM-Ai6pawAAAAU"] ampsstudio.com [Tue Aug 09 17:45:51 2022] [error] [client 20.123.80.100:0] [client 20.123.80.100] ModSecurity: Access denied with code 403 (phase 2). Pattern match "/wp-content/uploads/.*\\\\.php" at REQUEST_FILENAME. [file "remote server"] [line "-1"] [id "430017"] [msg "Malware.Expert - request_uri: Wordpress - prevent PHP files from executing"] [hostname "ampsstudio.com"] [uri "/wp-content/uploads/2021/12/up.php"] [unique_id "YvKPPziXeuTZONNdjmOjLQAAAAk"] ampsstudio.com [Tue Aug 09 17:45:56 2022] [error] [client 20.123.80.100:0] [client 20.123.80.100] ModSecurity: Access denied with code 403 (phase 2). String match "python" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "580102"] [msg "Malware.Expert - Wordpress - unknown python request"] [hostname "ampsstudio.com"] [uri "/wp-admin/alfa.php"] [unique_id "YvKPRN7U6SkRNNNjExqZIQAAAAQ"] ampsstudio.com [Tue Aug 09 17:45:57 2022] [error] [client 20.123.80.100:0] [client 20.123.80.100] ModSecurity: Access denied with code 403 (phase 2). String match "python" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "580100"] [msg "Malware.Expert - Wordpress - unknown python request"] [hostname "ampsstudio.com"] [uri "/wp-includes/fw.php"] [unique_id "YvKPRUQXLJ3Gi6ATIq8uKAAAABA"] ampsstudio.com [Tue Aug 09 17:45:58 2022] [error] [client 20.123.80.100:0] [client 20.123.80.100] ModSecurity: Access denied with code 403 (phase 2). String match "python" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "580101"] [msg "Malware.Expert - Wordpress - unknown python request"] [hostname "ampsstudio.com"] [uri "/wp-content/fw.php"] [unique_id "YvKPRhIYiLrmPZM-Ai6pswAAAAU"] ampsstudio.com [Tue Aug 09 17:45:58 2022] [error] [client 20.123.80.100:0] [client 20.123.80.100] ModSecurity: Access denied with code 403 (phase 2). String match "python" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "580102"] [msg "Malware.Expert - Wordpress - unknown python request"] [hostname "ampsstudio.com"] [uri "/wp-admin/fw.php"] [unique_id "YvKPRmd9AncD00C6ht-qRQAAAAw"] ampsstudio.com [Tue Aug 09 17:45:58 2022] [error] [client 20.123.80.100:0] [client 20.123.80.100] ModSecurity: Access denied with code 403 (phase 2). Pattern match "/wp-content/uploads/.*\\\\.php" at REQUEST_FILENAME. [file "remote server"] [line "-1"] [id "430017"] [msg "Malware.Expert - request_uri: Wordpress - prevent PHP files from executing"] [hostname "ampsstudio.com"] [uri "/wp-content/uploads/2021/12/fw.php"] [unique_id "YvKPRqbrBoTME0yWqp3dvQAAAAI"] ampsstudio.com [Tue Aug 09 17:45:58 2022] [error] [client 20.123.80.100:0] [client 20.123.80.100] ModSecurity: Access denied with code 403 (phase 2). String match "/wso.php" at REQUEST_URI. [file "remote server"] [line "-1"] [id "570066"] [msg "Malware.Expert - PHP Command Shell (WSO)"] [hostname "ampsstudio.com"] [uri "/wp-includes/wso.php"] [unique_id "YvKPRvrOaGkMv2YcAe_tmQAAAA4"] ampsstudio.com [Tue Aug 09 17:45:58 2022] [error] [client 20.123.80.100:0] [client 20.123.80.100] ModSecurity: Access denied with code 403 (phase 2). String match "/wso.php" at REQUEST_URI. [file "remote server"] [line "-1"] [id "570066"] [msg "Malware.Expert - PHP Command Shell (WSO)"] [hostname "ampsstudio.com"] [uri "/wp-content/wso.php"] [unique_id "YvKPRhJXgnMtJbsleUor2AAAAA0"] ampsstudio.com [Tue Aug 09 17:45:58 2022] [error] [client 20.123.80.100:0] [client 20.123.80.100] ModSecurity: Access denied with code 403 (phase 2). String match "/wso.php" at REQUEST_URI. [file "remote server"] [line "-1"] [id "570066"] [msg "Malware.Expert - PHP Command Shell (WSO)"] [hostname "ampsstudio.com"] [uri "/wp-admin/wso.php"] [unique_id "YvKPRt7U6SkRNNNjExqZIgAAAAQ"] ampsstudio.com [Tue Aug 09 17:46:02 2022] [error] [client 20.123.80.100:0] [client 20.123.80.100] ModSecurity: Access denied with code 403 (phase 2). String match "/shell.php" at REQUEST_URI. [file "remote server"] [line "-1"] [id "570072"] [msg "Malware.Expert - PHP Command Shell"] [hostname "ampsstudio.com"] [uri "/shell.php"] [unique_id "YvKPSvrOaGkMv2YcAe_tmgAAAA4"] ampsstudio.com [Tue Aug 09 17:46:02 2022] [error] [client 20.123.80.100:0] [client 20.123.80.100] ModSecurity: Access denied with code 403 (phase 2). String match "connector.minimal.php" at REQUEST_URI. [file "remote server"] [line "-1"] [id "500083"] [msg "Malware.Expert - request_uri: 0-Day - Wordpress filemanager plugin"] [hostname "ampsstudio.com"] [uri "/wp-content/plugins/wp-file-manager/lib/php/connector.minimal.php"] [unique_id "YvKPShJXgnMtJbsleUor2QAAAA0"] www.ampsstudio.com [Tue Aug 09 18:05:43 2022] [error] [client 2400:6180:100:d0::a5e:b001:0] [client 2400:6180:100:d0::a5e:b001] ModSecurity: Access denied with code 403 (phase 2). Pattern match ".+wp-config\\\\..*" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430005"] [msg "Malware.Expert - request_uri: read wordpress configuration file"] [hostname "www.ampsstudio.com"] [uri "/wp-config.php.restore"] [unique_id "YvKT56brBoTME0yWqp3dxgAAAAI"] www.ampsstudio.com [Tue Aug 09 18:05:44 2022] [error] [client 2400:6180:100:d0::a5e:b001:0] [client 2400:6180:100:d0::a5e:b001] ModSecurity: Access denied with code 403 (phase 2). Pattern match ".+wp-config\\\\..*" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430005"] [msg "Malware.Expert - request_uri: read wordpress configuration file"] [hostname "www.ampsstudio.com"] [uri "/wp-config.php.suspected"] [unique_id "YvKT6D26aFqDUdXKTYlp2QAAAAY"] www.ampsstudio.com [Tue Aug 09 18:05:53 2022] [error] [client 2400:6180:100:d0::a5e:b001:0] [client 2400:6180:100:d0::a5e:b001] ModSecurity: Access denied with code 403 (phase 2). Pattern match ".+wp-config\\\\..*" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430005"] [msg "Malware.Expert - request_uri: read wordpress configuration file"] [hostname "www.ampsstudio.com"] [uri "/wp-config.php~"] [unique_id "YvKT8Wd9AncD00C6ht-qTwAAAAw"] www.ampsstudio.com [Tue Aug 09 18:05:54 2022] [error] [client 2400:6180:100:d0::a5e:b001:0] [client 2400:6180:100:d0::a5e:b001] ModSecurity: Access denied with code 403 (phase 2). Pattern match ".+wp-config\\\\..*" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430005"] [msg "Malware.Expert - request_uri: read wordpress configuration file"] [hostname "www.ampsstudio.com"] [uri "/wp-config.php.bak"] [unique_id "YvKT8hJXgnMtJbsleUor4gAAAA0"] ampsstudio.com [Tue Aug 09 18:51:20 2022] [error] [client 20.123.80.100:0] [client 20.123.80.100] ModSecurity: Access denied with code 403 (phase 2). Pattern match "/wp-content/uploads/.*\\\\.php" at REQUEST_FILENAME. [file "remote server"] [line "-1"] [id "430017"] [msg "Malware.Expert - request_uri: Wordpress - prevent PHP files from executing"] [hostname "ampsstudio.com"] [uri "/wp-content/uploads/2021/12/up.php"] [unique_id "YvKemDiXeuTZONNdjmOjSAAAAAk"] ampsstudio.com [Tue Aug 09 18:51:25 2022] [error] [client 20.123.80.100:0] [client 20.123.80.100] ModSecurity: Access denied with code 403 (phase 2). String match "python" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "580102"] [msg "Malware.Expert - Wordpress - unknown python request"] [hostname "ampsstudio.com"] [uri "/wp-admin/alfa.php"] [unique_id "YvKenWQEpcvnZNWmZQViMgAAABQ"] ampsstudio.com [Tue Aug 09 18:51:26 2022] [error] [client 20.123.80.100:0] [client 20.123.80.100] ModSecurity: Access denied with code 403 (phase 2). String match "python" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "580100"] [msg "Malware.Expert - Wordpress - unknown python request"] [hostname "ampsstudio.com"] [uri "/wp-includes/fw.php"] [unique_id "YvKenjOKL2030AozQ-weXgAAAAo"] ampsstudio.com [Tue Aug 09 18:51:27 2022] [error] [client 20.123.80.100:0] [client 20.123.80.100] ModSecurity: Access denied with code 403 (phase 2). String match "python" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "580101"] [msg "Malware.Expert - Wordpress - unknown python request"] [hostname "ampsstudio.com"] [uri "/wp-content/fw.php"] [unique_id "YvKenw6AuhwZHBsJXChGgAAAABU"] ampsstudio.com [Tue Aug 09 18:51:27 2022] [error] [client 20.123.80.100:0] [client 20.123.80.100] ModSecurity: Access denied with code 403 (phase 2). String match "python" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "580102"] [msg "Malware.Expert - Wordpress - unknown python request"] [hostname "ampsstudio.com"] [uri "/wp-admin/fw.php"] [unique_id "YvKen9bVhYy9N33bnMaGUAAAABY"] ampsstudio.com [Tue Aug 09 18:51:27 2022] [error] [client 20.123.80.100:0] [client 20.123.80.100] ModSecurity: Access denied with code 403 (phase 2). Pattern match "/wp-content/uploads/.*\\\\.php" at REQUEST_FILENAME. [file "remote server"] [line "-1"] [id "430017"] [msg "Malware.Expert - request_uri: Wordpress - prevent PHP files from executing"] [hostname "ampsstudio.com"] [uri "/wp-content/uploads/2021/12/fw.php"] [unique_id "YvKen97U6SkRNNNjExqZPQAAAAQ"] ampsstudio.com [Tue Aug 09 18:51:27 2022] [error] [client 20.123.80.100:0] [client 20.123.80.100] ModSecurity: Access denied with code 403 (phase 2). String match "/wso.php" at REQUEST_URI. [file "remote server"] [line "-1"] [id "570066"] [msg "Malware.Expert - PHP Command Shell (WSO)"] [hostname "ampsstudio.com"] [uri "/wp-includes/wso.php"] [unique_id "YvKenziXeuTZONNdjmOjSgAAAAk"] ampsstudio.com [Tue Aug 09 18:51:27 2022] [error] [client 20.123.80.100:0] [client 20.123.80.100] ModSecurity: Access denied with code 403 (phase 2). String match "/wso.php" at REQUEST_URI. [file "remote server"] [line "-1"] [id "570066"] [msg "Malware.Expert - PHP Command Shell (WSO)"] [hostname "ampsstudio.com"] [uri "/wp-content/wso.php"] [unique_id "YvKen2QEpcvnZNWmZQViMwAAABQ"] ampsstudio.com [Tue Aug 09 18:51:27 2022] [error] [client 20.123.80.100:0] [client 20.123.80.100] ModSecurity: Access denied with code 403 (phase 2). String match "/wso.php" at REQUEST_URI. [file "remote server"] [line "-1"] [id "570066"] [msg "Malware.Expert - PHP Command Shell (WSO)"] [hostname "ampsstudio.com"] [uri "/wp-admin/wso.php"] [unique_id "YvKen0_-Sk9yli2nxN18cQAAABI"] ampsstudio.com [Tue Aug 09 18:51:31 2022] [error] [client 20.123.80.100:0] [client 20.123.80.100] ModSecurity: Access denied with code 403 (phase 2). String match "/shell.php" at REQUEST_URI. [file "remote server"] [line "-1"] [id "570072"] [msg "Malware.Expert - PHP Command Shell"] [hostname "ampsstudio.com"] [uri "/shell.php"] [unique_id "YvKeo3KXR5WWhBKE3JqWxwAAAAM"] ampsstudio.com [Tue Aug 09 18:51:31 2022] [error] [client 20.123.80.100:0] [client 20.123.80.100] ModSecurity: Access denied with code 403 (phase 2). String match "connector.minimal.php" at REQUEST_URI. [file "remote server"] [line "-1"] [id "500083"] [msg "Malware.Expert - request_uri: 0-Day - Wordpress filemanager plugin"] [hostname "ampsstudio.com"] [uri "/wp-content/plugins/wp-file-manager/lib/php/connector.minimal.php"] [unique_id "YvKeo2QEpcvnZNWmZQViNAAAABQ"] ampsstudio.com [Tue Aug 09 20:22:25 2022] [error] [client 20.123.80.100:0] [client 20.123.80.100] ModSecurity: Access denied with code 403 (phase 2). Pattern match "/wp-content/uploads/.*\\\\.php" at REQUEST_FILENAME. [file "remote server"] [line "-1"] [id "430017"] [msg "Malware.Expert - request_uri: Wordpress - prevent PHP files from executing"] [hostname "ampsstudio.com"] [uri "/wp-content/uploads/2021/12/up.php"] [unique_id "YvKz8U_-Sk9yli2nxN18mgAAABI"] ampsstudio.com [Tue Aug 09 21:37:29 2022] [error] [client 20.123.80.100:0] [client 20.123.80.100] ModSecurity: Access denied with code 403 (phase 2). Pattern match "/wp-content/uploads/.*\\\\.php" at REQUEST_FILENAME. [file "remote server"] [line "-1"] [id "430017"] [msg "Malware.Expert - request_uri: Wordpress - prevent PHP files from executing"] [hostname "ampsstudio.com"] [uri "/wp-content/uploads/2021/12/up.php"] [unique_id "YvLFiTOKL2030AozQ-weogAAAAo"] ampsstudio.com [Tue Aug 09 21:37:34 2022] [error] [client 20.123.80.100:0] [client 20.123.80.100] ModSecurity: Access denied with code 403 (phase 2). String match "python" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "580102"] [msg "Malware.Expert - Wordpress - unknown python request"] [hostname "ampsstudio.com"] [uri "/wp-admin/alfa.php"] [unique_id "YvLFjrI9CVfedgKeO2zsdwAAAA8"] ampsstudio.com [Tue Aug 09 21:37:35 2022] [error] [client 20.123.80.100:0] [client 20.123.80.100] ModSecurity: Access denied with code 403 (phase 2). String match "python" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "580100"] [msg "Malware.Expert - Wordpress - unknown python request"] [hostname "ampsstudio.com"] [uri "/wp-includes/fw.php"] [unique_id "YvLFj97U6SkRNNNjExqZfQAAAAQ"] ampsstudio.com [Tue Aug 09 21:37:36 2022] [error] [client 20.123.80.100:0] [client 20.123.80.100] ModSecurity: Access denied with code 403 (phase 2). String match "python" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "580101"] [msg "Malware.Expert - Wordpress - unknown python request"] [hostname "ampsstudio.com"] [uri "/wp-content/fw.php"] [unique_id "YvLFkDOKL2030AozQ-weowAAAAo"] ampsstudio.com [Tue Aug 09 21:37:36 2022] [error] [client 20.123.80.100:0] [client 20.123.80.100] ModSecurity: Access denied with code 403 (phase 2). String match "python" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "580102"] [msg "Malware.Expert - Wordpress - unknown python request"] [hostname "ampsstudio.com"] [uri "/wp-admin/fw.php"] [unique_id "YvLFkGQEpcvnZNWmZQVicQAAABQ"] ampsstudio.com [Tue Aug 09 21:37:36 2022] [error] [client 20.123.80.100:0] [client 20.123.80.100] ModSecurity: Access denied with code 403 (phase 2). Pattern match "/wp-content/uploads/.*\\\\.php" at REQUEST_FILENAME. [file "remote server"] [line "-1"] [id "430017"] [msg "Malware.Expert - request_uri: Wordpress - prevent PHP files from executing"] [hostname "ampsstudio.com"] [uri "/wp-content/uploads/2021/12/fw.php"] [unique_id "YvLFkA6AuhwZHBsJXChGwwAAABU"] ampsstudio.com [Tue Aug 09 21:37:36 2022] [error] [client 20.123.80.100:0] [client 20.123.80.100] ModSecurity: Access denied with code 403 (phase 2). String match "/wso.php" at REQUEST_URI. [file "remote server"] [line "-1"] [id "570066"] [msg "Malware.Expert - PHP Command Shell (WSO)"] [hostname "ampsstudio.com"] [uri "/wp-includes/wso.php"] [unique_id "YvLFkHKXR5WWhBKE3JqXCQAAAAM"] ampsstudio.com [Tue Aug 09 21:37:36 2022] [error] [client 20.123.80.100:0] [client 20.123.80.100] ModSecurity: Access denied with code 403 (phase 2). String match "/wso.php" at REQUEST_URI. [file "remote server"] [line "-1"] [id "570066"] [msg "Malware.Expert - PHP Command Shell (WSO)"] [hostname "ampsstudio.com"] [uri "/wp-content/wso.php"] [unique_id "YvLFkLI9CVfedgKeO2zseAAAAA8"] ampsstudio.com [Tue Aug 09 21:37:36 2022] [error] [client 20.123.80.100:0] [client 20.123.80.100] ModSecurity: Access denied with code 403 (phase 2). String match "/wso.php" at REQUEST_URI. [file "remote server"] [line "-1"] [id "570066"] [msg "Malware.Expert - PHP Command Shell (WSO)"] [hostname "ampsstudio.com"] [uri "/wp-admin/wso.php"] [unique_id "YvLFkNbVhYy9N33bnMaGkQAAABY"] ampsstudio.com [Tue Aug 09 21:37:40 2022] [error] [client 20.123.80.100:0] [client 20.123.80.100] ModSecurity: Access denied with code 403 (phase 2). String match "/shell.php" at REQUEST_URI. [file "remote server"] [line "-1"] [id "570072"] [msg "Malware.Expert - PHP Command Shell"] [hostname "ampsstudio.com"] [uri "/shell.php"] [unique_id "YvLFlHKXR5WWhBKE3JqXCgAAAAM"] ampsstudio.com [Tue Aug 09 21:37:40 2022] [error] [client 20.123.80.100:0] [client 20.123.80.100] ModSecurity: Access denied with code 403 (phase 2). String match "connector.minimal.php" at REQUEST_URI. [file "remote server"] [line "-1"] [id "500083"] [msg "Malware.Expert - request_uri: 0-Day - Wordpress filemanager plugin"] [hostname "ampsstudio.com"] [uri "/wp-content/plugins/wp-file-manager/lib/php/connector.minimal.php"] [unique_id "YvLFlLI9CVfedgKeO2zseQAAAA8"] www.ampsstudio.com [Wed Aug 10 01:00:50 2022] [error] [client 95.55.87.38:0] AH01071: Got error 'PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179' www.ampsstudio.com [Wed Aug 10 01:00:50 2022] [error] [client 95.55.87.38:0] AH01071: Got error 'PHP message: PHP Warning: Cannot modify header information - headers already sent by (output started at /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-includes/functions.php:5275) in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/includes/sonaar-music/css/theme/custom-style.php on line 2' www.ampsstudio.com [Wed Aug 10 01:29:49 2022] [error] [client 185.191.171.36:0] AH01071: Got error 'PHP message: PHP Warning: Attempt to read property "post_content" on null in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/wordpress-seo/src/memoizers/meta-tags-context-memoizer.php on line 140PHP message: PHP Warning: Attempt to read property "post_modified_gmt" on null in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/wordpress-seo/src/presentations/indexable-post-type-presentation.php on line 289PHP message: PHP Warning: Attempt to read property "post_date_gmt" on null in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/wordpress-seo/src/presentations/indexable-post-type-presentation.php on line 289PHP message: PHP Warning: Attempt to read property "post_author" on null in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/wordpress-seo/src/presenters/slack/enhanced-data-presenter.php on line 46PHP message: PHP Warning: Attempt to read property "post_date_gmt" on null in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/wordpress-seo/src/generators/schema/webpage.php on line 51PHP message: PHP Warning: Attempt to read property "post_modified_gmt" on null in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/wordpress-seo/src/generators/schema/webpage.php on line 52PHP message: PHP Warning: Undefined array key 0 in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/includes/classes/iron_sonaar.class.php on line 212PHP message: PHP Warning: Trying to access array offset on value of type null in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/includes/classes/iron_sonaar.class.php on line 212PHP message: PHP Warning: Undefined array key 0 in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/includes/classes/iron_sonaar.class.php on line 214PHP message: PHP Warning: Trying to access array offset on value of type null in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/includes/classes/iron_sonaar.class.php on line 214' www.ampsstudio.com [Wed Aug 10 01:54:25 2022] [crit] [client 66.249.92.200:0] AH00529: /home/virtual/vps-aa3942/a/aede5353c4/public_html/.well-known/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/virtual/vps-aa3942/a/aede5353c4/public_html/.well-known/' is executable www.ampsstudio.com [Wed Aug 10 02:11:26 2022] [error] [client 45.128.38.150:0] AH01071: Got error 'PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179' www.ampsstudio.com [Wed Aug 10 02:11:26 2022] [error] [client 45.128.38.150:0] AH01071: Got error 'PHP message: PHP Warning: Cannot modify header information - headers already sent by (output started at /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-includes/functions.php:5275) in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/includes/sonaar-music/css/theme/custom-style.php on line 2' www.ampsstudio.com [Wed Aug 10 02:56:08 2022] [error] [client 185.191.171.36:0] AH01071: Got error 'PHP message: PHP Warning: Attempt to read property "ID" on null in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/archive-event.php on line 15PHP message: PHP Warning: Undefined array key 0 in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/includes/classes/iron_sonaar.class.php on line 212PHP message: PHP Warning: Trying to access array offset on value of type null in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/includes/classes/iron_sonaar.class.php on line 212PHP message: PHP Warning: Undefined array key 0 in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/includes/classes/iron_sonaar.class.php on line 214PHP message: PHP Warning: Trying to access array offset on value of type null in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/includes/classes/iron_sonaar.class.php on line 214' www.ampsstudio.com [Wed Aug 10 04:01:32 2022] [error] [client 213.219.247.125:0] AH01071: Got error 'PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179' www.ampsstudio.com [Wed Aug 10 04:01:32 2022] [error] [client 213.219.247.125:0] AH01071: Got error 'PHP message: PHP Warning: Cannot modify header information - headers already sent by (output started at /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-includes/functions.php:5275) in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/includes/sonaar-music/css/theme/custom-style.php on line 2' www.ampsstudio.com [Wed Aug 10 04:01:53 2022] [error] [client 213.219.247.125:0] AH01071: Got error 'PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179' www.ampsstudio.com [Wed Aug 10 04:01:53 2022] [error] [client 213.219.247.125:0] AH01071: Got error 'PHP message: PHP Warning: Cannot modify header information - headers already sent by (output started at /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-includes/functions.php:5275) in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/includes/sonaar-music/css/theme/custom-style.php on line 2' www.ampsstudio.com [Wed Aug 10 04:42:13 2022] [error] [client 213.219.247.125:0] AH01071: Got error 'PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179' www.ampsstudio.com [Wed Aug 10 04:42:13 2022] [error] [client 213.219.247.125:0] AH01071: Got error 'PHP message: PHP Warning: Cannot modify header information - headers already sent by (output started at /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-includes/functions.php:5275) in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/includes/sonaar-music/css/theme/custom-style.php on line 2' www.ampsstudio.com [Wed Aug 10 04:42:13 2022] [error] [client 213.219.247.125:0] AH01071: Got error 'PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179' www.ampsstudio.com [Wed Aug 10 04:42:13 2022] [error] [client 213.219.247.125:0] AH01071: Got error 'PHP message: PHP Warning: Cannot modify header information - headers already sent by (output started at /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-includes/functions.php:5275) in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/includes/sonaar-music/css/theme/custom-style.php on line 2' www.ampsstudio.com [Wed Aug 10 05:18:06 2022] [error] [client 213.219.247.125:0] AH01071: Got error 'PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179' www.ampsstudio.com [Wed Aug 10 05:18:06 2022] [error] [client 213.219.247.125:0] AH01071: Got error 'PHP message: PHP Warning: Cannot modify header information - headers already sent by (output started at /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-includes/functions.php:5275) in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/includes/sonaar-music/css/theme/custom-style.php on line 2' ampsstudio.com [Wed Aug 10 06:04:58 2022] [error] [client 20.38.169.200:0] [client 20.38.169.200] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "ampsstudio.com"] [uri "/.env"] [unique_id "YvM8eo3Fhsn81vbkRKhY2QAAAAk"] cpanel.ampsstudio.com [Wed Aug 10 09:50:19 2022] [error] [client 20.38.169.200:0] [client 20.38.169.200] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "cpanel.ampsstudio.com"] [uri "/.env"] [unique_id "YvNxSzwHmjFPodKN0lm3nwAAAAE"] cpanel.ampsstudio.com [Wed Aug 10 11:15:08 2022] [error] [client 154.53.46.46:0] [client 154.53.46.46] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "cpanel.ampsstudio.com"] [uri "/.env"] [unique_id "YvOFLAvfEbLuQNaW4n_4CgAAAAY"] cpanel.ampsstudio.com [Wed Aug 10 11:15:55 2022] [error] [client 154.53.46.46:0] [client 154.53.46.46] ModSecurity: Access denied with code 403 (phase 2). String match "/Util/PHP/eval-stdin.php" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430046"] [msg "Malware.Expert - request_uri: CVE-2017-9841"] [hostname "cpanel.ampsstudio.com"] [uri "/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php"] [unique_id "YvOFW3pwpkveTDrNW7AIogAAAAQ"] cpanel.ampsstudio.com [Wed Aug 10 13:07:17 2022] [error] [client 20.199.127.142:0] [client 20.199.127.142] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "cpanel.ampsstudio.com"] [uri "/.env"] [unique_id "YvOfdQvfEbLuQNaW4n_4VQAAAAY"] ampsstudio.com [Wed Aug 10 13:43:49 2022] [error] [client 162.144.152.168:0] [client 162.144.152.168] ModSecurity: Access denied with code 403 (phase 2). Match of "contains /wp-includes/js/tinymce/wp-tinymce.php" against "REQUEST_URI" required. [file "remote server"] [line "-1"] [id "430036"] [msg "Malware.Expert - request_uri: Wordpress - prevent PHP files from executing"] [hostname "ampsstudio.com"] [uri "/wp-includes/js/plupload/plupload.php"] [unique_id "YvOoBQvfEbLuQNaW4n_4YgAAAAY"] ampsstudio.com [Wed Aug 10 13:55:48 2022] [error] [client 162.144.152.168:0] [client 162.144.152.168] ModSecurity: Access denied with code 403 (phase 2). String match "/wp-content/plugins/core-engine/" at REQUEST_URI. [file "remote server"] [line "-1"] [id "570064"] [msg "Malware.Expert - Wordpress Malware"] [hostname "ampsstudio.com"] [uri "/wp-content/plugins/core-engine/index.php"] [unique_id "YvOq1AvfEbLuQNaW4n_4ZwAAAAY"] www.ampsstudio.com [Wed Aug 10 14:02:32 2022] [error] [client 185.191.171.15:0] AH01071: Got error 'PHP message: PHP Warning: Attempt to read property "ID" on null in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/archive-event.php on line 15PHP message: PHP Warning: Undefined array key 0 in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/includes/classes/iron_sonaar.class.php on line 212PHP message: PHP Warning: Trying to access array offset on value of type null in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/includes/classes/iron_sonaar.class.php on line 212PHP message: PHP Warning: Undefined array key 0 in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/includes/classes/iron_sonaar.class.php on line 214PHP message: PHP Warning: Trying to access array offset on value of type null in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/includes/classes/iron_sonaar.class.php on line 214' mail.ampsstudio.com [Wed Aug 10 14:14:45 2022] [error] [client 20.199.127.142:0] [client 20.199.127.142] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "mail.ampsstudio.com"] [uri "/.env"] [unique_id "YvOvRXt4VLlU-hboDwkxbQAAAAo"] ampsstudio.com [Wed Aug 10 15:29:10 2022] [error] [client 80.76.51.29:0] AH01276: Cannot serve directory /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-admin/css/: No matching DirectoryIndex (index.php,index.html,index.htm) found, and server-generated directory index forbidden by Options directive webdisk.ampsstudio.com [Wed Aug 10 15:46:28 2022] [error] [client 20.199.127.142:0] [client 20.199.127.142] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "webdisk.ampsstudio.com"] [uri "/.env"] [unique_id "YvPExH2cvAZEBOrg8-rJyQAAAAI"] webmail.ampsstudio.com [Wed Aug 10 16:05:03 2022] [error] [client 20.199.127.142:0] [client 20.199.127.142] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "webmail.ampsstudio.com"] [uri "/.env"] [unique_id "YvPJH32cvAZEBOrg8-rJ1wAAAAI"] www.ampsstudio.com [Wed Aug 10 19:05:03 2022] [error] [client 20.210.206.110:0] [client 20.210.206.110] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "www.ampsstudio.com"] [uri "/.env"] [unique_id "YvPzT-W0_Ip-bdN1jHHZHAAAAAc"] mail.ampsstudio.com [Wed Aug 10 19:31:57 2022] [error] [client 20.38.169.200:0] [client 20.38.169.200] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "mail.ampsstudio.com"] [uri "/.env"] [unique_id "YvP5neW0_Ip-bdN1jHHZJgAAAAc"] ampsstudio.com [Wed Aug 10 21:49:37 2022] [error] [client 217.160.70.250:0] [client 217.160.70.250] ModSecurity: Access denied with code 403 (phase 2). String match "python" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "580101"] [msg "Malware.Expert - Wordpress - unknown python request"] [hostname "ampsstudio.com"] [uri "/wp-content/plugins/rios/langar.php"] [unique_id "YvQZ4XpwpkveTDrNW7AJ7QAAAAQ"] ampsstudio.com [Thu Aug 11 02:21:19 2022] [error] [client 20.51.231.64:0] [client 20.51.231.64] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "ampsstudio.com"] [uri "/.env"] [unique_id "YvRZjxEFXtyuCWoPyrDeSgAAAB4"] ampsstudio.com [Thu Aug 11 04:55:08 2022] [error] [client 212.227.213.151:0] [client 212.227.213.151] ModSecurity: Access denied with code 403 (phase 2). String match "python" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "580101"] [msg "Malware.Expert - Wordpress - unknown python request"] [hostname "ampsstudio.com"] [uri "/wp-content/plugins/rios/langar.php"] [unique_id "YvR9nPdgFTPu2OubTr6tkgAAALM"] www.ampsstudio.com [Thu Aug 11 06:28:35 2022] [error] [client 94.180.185.192:0] AH01071: Got error 'PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179' www.ampsstudio.com [Thu Aug 11 06:28:35 2022] [error] [client 94.180.185.192:0] AH01071: Got error 'PHP message: PHP Warning: Cannot modify header information - headers already sent by (output started at /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-includes/functions.php:5275) in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/includes/sonaar-music/css/theme/custom-style.php on line 2' www.ampsstudio.com [Thu Aug 11 07:31:16 2022] [error] [client 193.187.104.178:0] AH01071: Got error 'PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179' www.ampsstudio.com [Thu Aug 11 07:31:16 2022] [error] [client 193.187.104.178:0] AH01071: Got error 'PHP message: PHP Warning: Cannot modify header information - headers already sent by (output started at /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-includes/functions.php:5275) in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/includes/sonaar-music/css/theme/custom-style.php on line 2' ampsstudio.com [Thu Aug 11 07:48:00 2022] [error] [client 34.77.216.170:0] [client 34.77.216.170] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "ampsstudio.com"] [uri "/.env"] [unique_id "YvSmILm7frcheCtvV4pjeAAAABw"] www.ampsstudio.com [Thu Aug 11 08:13:28 2022] [error] [client 2a00:23c7:8487:bf01:f44b:f229:36:a920:0] AH01071: Got error 'PHP message: PHP Warning: Cannot modify header information - headers already sent by (output started at /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-includes/functions.php:5275) in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/includes/sonaar-music/css/theme/custom-style.php on line 2' www.ampsstudio.com [Thu Aug 11 08:26:56 2022] [error] [client 185.125.168.28:0] AH01071: Got error 'PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179' www.ampsstudio.com [Thu Aug 11 08:26:56 2022] [error] [client 185.125.168.28:0] AH01071: Got error 'PHP message: PHP Warning: Cannot modify header information - headers already sent by (output started at /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-includes/functions.php:5275) in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/includes/sonaar-music/css/theme/custom-style.php on line 2' cpanel.ampsstudio.com [Thu Aug 11 11:00:26 2022] [error] [client 34.77.216.170:0] [client 34.77.216.170] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "cpanel.ampsstudio.com"] [uri "/.env"] [unique_id "YvTTOnXMrrlqz_Wt8PYfqAAAABk"] mail.ampsstudio.com [Thu Aug 11 11:59:11 2022] [error] [client 34.77.216.170:0] [client 34.77.216.170] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "mail.ampsstudio.com"] [uri "/.env"] [unique_id "YvTg_12NKEo_vzwiT8MYLgAAAAU"] ampsstudio.com [Thu Aug 11 12:04:42 2022] [error] [client 217.160.70.250:0] [client 217.160.70.250] ModSecurity: Access denied with code 403 (phase 2). String match "python" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "580101"] [msg "Malware.Expert - Wordpress - unknown python request"] [hostname "ampsstudio.com"] [uri "/wp-content/plugins/press/wp-class.php"] [unique_id "YvTiSr4t25UdwR2cpdd3bAAAAGM"] ampsstudio.com [Thu Aug 11 12:26:30 2022] [error] [client 152.89.196.13:0] [client 152.89.196.13] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES. [file "remote server"] [line "-1"] [id "580000"] [msg "Malware.Expert - Wordpress - Referer missing"] [hostname "ampsstudio.com"] [uri "/wp-admin/network/opengraph.php"] [unique_id "YvTnZkgCSgc5Vx4rAv95AwAAAHc"] ampsstudio.com [Thu Aug 11 12:26:37 2022] [error] [client 152.89.196.13:0] [client 152.89.196.13] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES. [file "remote server"] [line "-1"] [id "580000"] [msg "Malware.Expert - Wordpress - Referer missing"] [hostname "ampsstudio.com"] [uri "/wp-admin/network/opengraph.php"] [unique_id "YvTnbRmSCCq4sIE2dMuHLwAAAKw"] ampsstudio.com [Thu Aug 11 12:26:43 2022] [error] [client 152.89.196.13:0] [client 152.89.196.13] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES. [file "remote server"] [line "-1"] [id "580000"] [msg "Malware.Expert - Wordpress - Referer missing"] [hostname "ampsstudio.com"] [uri "/wp-admin/network/opengraph.php"] [unique_id "YvTnc24C8of8kNdHG0-FkgAAAK0"] ampsstudio.com [Thu Aug 11 13:21:08 2022] [error] [client 152.89.196.13:0] [client 152.89.196.13] ModSecurity: Access denied with connection close (phase 2). String match "bot" at ARGS_NAMES:bot. [file "remote server"] [line "-1"] [id "570011"] [msg "Malware.Expert - Wordpress - Malware"] [hostname "ampsstudio.com"] [uri "/wp-content/themes/index.php"] [unique_id "YvT0NN5IZv-ngKVa2myV9gAAADk"] ampsstudio.com [Thu Aug 11 13:21:15 2022] [error] [client 152.89.196.13:0] [client 152.89.196.13] ModSecurity: Access denied with connection close (phase 2). String match "bot" at ARGS_NAMES:bot. [file "remote server"] [line "-1"] [id "570011"] [msg "Malware.Expert - Wordpress - Malware"] [hostname "ampsstudio.com"] [uri "/wp-content/themes/index.php"] [unique_id "YvT0O9kvTEDZro_FiJTX6AAAAFc"] ampsstudio.com [Thu Aug 11 13:21:20 2022] [error] [client 152.89.196.13:0] [client 152.89.196.13] ModSecurity: Access denied with connection close (phase 2). String match "bot" at ARGS_NAMES:bot. [file "remote server"] [line "-1"] [id "570011"] [msg "Malware.Expert - Wordpress - Malware"] [hostname "ampsstudio.com"] [uri "/wp-content/themes/index.php"] [unique_id "YvT0QPJtQF1r7nOdkqpQyQAAAIw"] ampsstudio.com [Thu Aug 11 13:53:06 2022] [error] [client 152.89.196.13:0] [client 152.89.196.13] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_HEADERS_NAMES. [file "remote server"] [line "-1"] [id "431000"] [msg "Malware.Expert - request_uri: CSS - prevent PHP files from executing"] [hostname "ampsstudio.com"] [uri "/wp-content/plugins/quick-setup/css/index.php"] [unique_id "YvT7snigZPVdtXUav3C6YAAAAIc"] ampsstudio.com [Thu Aug 11 13:53:08 2022] [error] [client 152.89.196.13:0] [client 152.89.196.13] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_HEADERS_NAMES. [file "remote server"] [line "-1"] [id "431000"] [msg "Malware.Expert - request_uri: CSS - prevent PHP files from executing"] [hostname "ampsstudio.com"] [uri "/wp-content/plugins/quick-setup/css/index.php"] [unique_id "YvT7tEgCSgc5Vx4rAv95bQAAAHc"] ampsstudio.com [Thu Aug 11 13:53:11 2022] [error] [client 152.89.196.13:0] [client 152.89.196.13] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_HEADERS_NAMES. [file "remote server"] [line "-1"] [id "431000"] [msg "Malware.Expert - request_uri: CSS - prevent PHP files from executing"] [hostname "ampsstudio.com"] [uri "/wp-content/plugins/quick-setup/css/index.php"] [unique_id "YvT7t7tGmApCne0pq_X_AgAAAAA"] ampsstudio.com [Thu Aug 11 14:09:29 2022] [error] [client 152.89.196.13:0] [client 152.89.196.13] ModSecurity: Access denied with code 403 (phase 2). Pattern match "/wp-content/uploads/.*\\\\.php" at REQUEST_FILENAME. [file "remote server"] [line "-1"] [id "430017"] [msg "Malware.Expert - request_uri: Wordpress - prevent PHP files from executing"] [hostname "ampsstudio.com"] [uri "/wp-content/uploads/index.php"] [unique_id "YvT_ibtGmApCne0pq_X_HwAAAAA"] ampsstudio.com [Thu Aug 11 14:09:34 2022] [error] [client 152.89.196.13:0] [client 152.89.196.13] ModSecurity: Access denied with code 403 (phase 2). Pattern match "/wp-content/uploads/.*\\\\.php" at REQUEST_FILENAME. [file "remote server"] [line "-1"] [id "430017"] [msg "Malware.Expert - request_uri: Wordpress - prevent PHP files from executing"] [hostname "ampsstudio.com"] [uri "/wp-content/uploads/index.php"] [unique_id "YvT_jnigZPVdtXUav3C6fAAAAIc"] ampsstudio.com [Thu Aug 11 14:09:39 2022] [error] [client 152.89.196.13:0] [client 152.89.196.13] ModSecurity: Access denied with code 403 (phase 2). Pattern match "/wp-content/uploads/.*\\\\.php" at REQUEST_FILENAME. [file "remote server"] [line "-1"] [id "430017"] [msg "Malware.Expert - request_uri: Wordpress - prevent PHP files from executing"] [hostname "ampsstudio.com"] [uri "/wp-content/uploads/index.php"] [unique_id "YvT_k1EQKU9azRLBT6yGsAAAALQ"] www.ampsstudio.com [Thu Aug 11 14:25:39 2022] [error] [client 51.195.166.196:0] AH01071: Got error 'PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179' www.ampsstudio.com [Thu Aug 11 14:25:39 2022] [error] [client 51.195.166.196:0] AH01071: Got error 'PHP message: PHP Warning: Cannot modify header information - headers already sent by (output started at /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-includes/functions.php:5275) in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/includes/sonaar-music/css/theme/custom-style.php on line 2' ampsstudio.com [Thu Aug 11 14:46:57 2022] [error] [client 152.89.196.13:0] [client 152.89.196.13] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_HEADERS_NAMES. [file "remote server"] [line "-1"] [id "580001"] [msg "Malware.Expert - Wordpress - Referer missing"] [hostname "ampsstudio.com"] [uri "/wp-content/plugins/wordpress-seo/js/index.php"] [unique_id "YvUIUUgCSgc5Vx4rAv95vQAAAHc"] ampsstudio.com [Thu Aug 11 14:47:03 2022] [error] [client 152.89.196.13:0] [client 152.89.196.13] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_HEADERS_NAMES. [file "remote server"] [line "-1"] [id "580001"] [msg "Malware.Expert - Wordpress - Referer missing"] [hostname "ampsstudio.com"] [uri "/wp-content/plugins/wordpress-seo/js/index.php"] [unique_id "YvUIV95IZv-ngKVa2myWcwAAADk"] ampsstudio.com [Thu Aug 11 14:47:07 2022] [error] [client 152.89.196.13:0] [client 152.89.196.13] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_HEADERS_NAMES. [file "remote server"] [line "-1"] [id "580001"] [msg "Malware.Expert - Wordpress - Referer missing"] [hostname "ampsstudio.com"] [uri "/wp-content/plugins/wordpress-seo/js/index.php"] [unique_id "YvUIW8DplRD1y0_4Ly4uggAAAAE"] ampsstudio.com [Thu Aug 11 15:35:38 2022] [error] [client 85.31.46.140:0] AH01276: Cannot serve directory /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-admin/css/: No matching DirectoryIndex (index.php,index.html,index.htm) found, and server-generated directory index forbidden by Options directive ampsstudio.com [Thu Aug 11 15:42:14 2022] [error] [client 20.51.231.64:0] [client 20.51.231.64] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "ampsstudio.com"] [uri "/.env"] [unique_id "YvUVRrHI46TlmL3NOr4QHwAAAAM"] www.ampsstudio.com [Thu Aug 11 15:48:28 2022] [error] [client 102.129.143.41:0] AH01071: Got error 'PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179' www.ampsstudio.com [Thu Aug 11 15:48:28 2022] [error] [client 102.129.143.41:0] AH01071: Got error 'PHP message: PHP Warning: Cannot modify header information - headers already sent by (output started at /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-includes/functions.php:5275) in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/includes/sonaar-music/css/theme/custom-style.php on line 2' webmail.ampsstudio.com [Thu Aug 11 15:55:35 2022] [error] [client 20.38.169.200:0] [client 20.38.169.200] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "webmail.ampsstudio.com"] [uri "/.env"] [unique_id "YvUYZ_JtQF1r7nOdkqpRgwAAAIw"] webmail.ampsstudio.com [Thu Aug 11 16:25:51 2022] [error] [client 34.78.94.206:0] [client 34.78.94.206] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "webmail.ampsstudio.com"] [uri "/.env"] [unique_id "YvUff_rpiad6ABl3u0TOOAAAAJ0"] ampsstudio.com [Thu Aug 11 16:40:34 2022] [error] [client 82.165.241.50:0] [client 82.165.241.50] ModSecurity: Access denied with code 403 (phase 2). Match of "contains index.php" against "REQUEST_URI" required. [file "remote server"] [line "-1"] [id "570076"] [msg "Malware.Expert - Malware"] [hostname "ampsstudio.com"] [uri "/wp-admin/admin-post.php"] [unique_id "YvUi8lg0uubTce-_W8PbZgAAAAc"] ampsstudio.com [Thu Aug 11 16:40:38 2022] [error] [client 82.165.241.50:0] [client 82.165.241.50] ModSecurity: Access denied with code 403 (phase 2). Pattern match "/wp-content/plugins/.*/up\\\\.php" at REQUEST_URI. [file "remote server"] [line "-1"] [id "570052"] [msg "Malware.Expert - Malware"] [hostname "ampsstudio.com"] [uri "/wp-content/plugins/instabuilder2/cache/up.php"] [unique_id "YvUi9uZg7UCfGFybIBfyDQAAAAI"] webdisk.ampsstudio.com [Thu Aug 11 16:58:55 2022] [error] [client 34.78.94.206:0] [client 34.78.94.206] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "webdisk.ampsstudio.com"] [uri "/.env"] [unique_id "YvUnP0gCSgc5Vx4rAv96OgAAAHc"] ampsstudio.com [Thu Aug 11 17:39:01 2022] [error] [client 212.227.213.151:0] [client 212.227.213.151] ModSecurity: Access denied with code 403 (phase 2). Match of "contains index.php" against "REQUEST_URI" required. [file "remote server"] [line "-1"] [id "570076"] [msg "Malware.Expert - Malware"] [hostname "ampsstudio.com"] [uri "/wp-admin/admin-post.php"] [unique_id "YvUwpbHI46TlmL3NOr4QigAAAAM"] ampsstudio.com [Thu Aug 11 17:39:01 2022] [error] [client 212.227.213.151:0] [client 212.227.213.151] ModSecurity: Access denied with code 403 (phase 2). Pattern match "/wp-content/plugins/.*/up\\\\.php" at REQUEST_URI. [file "remote server"] [line "-1"] [id "570052"] [msg "Malware.Expert - Malware"] [hostname "ampsstudio.com"] [uri "/wp-content/plugins/instabuilder2/cache/up.php"] [unique_id "YvUwpcDplRD1y0_4Ly4vDwAAAAE"] www.ampsstudio.com [Thu Aug 11 19:15:59 2022] [error] [client 20.14.86.193:0] AH01071: Got error 'PHP message: PHP Warning: Undefined array key "HTTP_USER_AGENT" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/bookly-responsive-appointment-booking-tool/frontend/modules/booking/ShortCode.php on line 62' cpanel.ampsstudio.com [Thu Aug 11 19:23:13 2022] [error] [client 34.78.94.206:0] [client 34.78.94.206] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "cpanel.ampsstudio.com"] [uri "/.env"] [unique_id "YvVJEVnLVKmDWFiFlR9jZAAAAAk"] ampsstudio.com [Thu Aug 11 19:23:54 2022] [error] [client 34.78.94.206:0] [client 34.78.94.206] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "ampsstudio.com"] [uri "/.env"] [unique_id "YvVJOsDplRD1y0_4Ly4vOwAAAAE"] www.ampsstudio.com [Thu Aug 11 19:26:12 2022] [error] [client 51.120.80.141:0] AH01071: Got error 'PHP message: PHP Warning: Undefined array key "HTTP_USER_AGENT" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/bookly-responsive-appointment-booking-tool/frontend/modules/booking/ShortCode.php on line 62' mail.ampsstudio.com [Thu Aug 11 21:07:27 2022] [error] [client 34.78.94.206:0] [client 34.78.94.206] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "mail.ampsstudio.com"] [uri "/.env"] [unique_id "YvVhf7HI46TlmL3NOr4Q3QAAAAM"] webdisk.ampsstudio.com [Thu Aug 11 21:41:29 2022] [error] [client 34.78.94.206:0] [client 34.78.94.206] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "webdisk.ampsstudio.com"] [uri "/.env"] [unique_id "YvVpeeZg7UCfGFybIBfykwAAAAI"] www.ampsstudio.com [Thu Aug 11 21:58:40 2022] [error] [client 176.221.14.102:0] AH01071: Got error 'PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179' www.ampsstudio.com [Thu Aug 11 21:58:40 2022] [error] [client 176.221.14.102:0] AH01071: Got error 'PHP message: PHP Warning: Cannot modify header information - headers already sent by (output started at /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-includes/functions.php:5275) in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/includes/sonaar-music/css/theme/custom-style.php on line 2' webmail.ampsstudio.com [Thu Aug 11 22:44:07 2022] [error] [client 34.78.94.206:0] [client 34.78.94.206] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "webmail.ampsstudio.com"] [uri "/.env"] [unique_id "YvV4J7tGmApCne0pq_UAdAAAAAA"] ampsstudio.com [Thu Aug 11 23:03:19 2022] [error] [client 82.165.241.50:0] [client 82.165.241.50] ModSecurity: Access denied with code 403 (phase 2). Match of "contains index.php" against "REQUEST_URI" required. [file "remote server"] [line "-1"] [id "570076"] [msg "Malware.Expert - Malware"] [hostname "ampsstudio.com"] [uri "/wp-admin/admin-post.php"] [unique_id "YvV8p7qo--yEhifeZiTmsQAAAAU"] ampsstudio.com [Thu Aug 11 23:03:24 2022] [error] [client 82.165.241.50:0] [client 82.165.241.50] ModSecurity: Access denied with code 403 (phase 2). Pattern match "/wp-content/plugins/.*/up\\\\.php" at REQUEST_URI. [file "remote server"] [line "-1"] [id "570052"] [msg "Malware.Expert - Malware"] [hostname "ampsstudio.com"] [uri "/wp-content/plugins/instabuilder2/cache/up.php"] [unique_id "YvV8rOZg7UCfGFybIBfyugAAAAI"] www.ampsstudio.com [Thu Aug 11 23:26:10 2022] [error] [client 176.124.207.132:0] AH01071: Got error 'PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179' www.ampsstudio.com [Thu Aug 11 23:26:10 2022] [error] [client 176.124.207.132:0] AH01071: Got error 'PHP message: PHP Warning: Cannot modify header information - headers already sent by (output started at /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-includes/functions.php:5275) in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/includes/sonaar-music/css/theme/custom-style.php on line 2' ampsstudio.com [Thu Aug 11 23:56:50 2022] [error] [client 82.165.241.50:0] [client 82.165.241.50] ModSecurity: Access denied with code 403 (phase 2). Match of "contains index.php" against "REQUEST_URI" required. [file "remote server"] [line "-1"] [id "570076"] [msg "Malware.Expert - Malware"] [hostname "ampsstudio.com"] [uri "/wp-admin/admin-post.php"] [unique_id "YvWJMiLPiOliezIPkj8fXgAAAAY"] ampsstudio.com [Thu Aug 11 23:56:52 2022] [error] [client 82.165.241.50:0] [client 82.165.241.50] ModSecurity: Access denied with code 403 (phase 2). Pattern match "/wp-content/plugins/.*/up\\\\.php" at REQUEST_URI. [file "remote server"] [line "-1"] [id "570052"] [msg "Malware.Expert - Malware"] [hostname "ampsstudio.com"] [uri "/wp-content/plugins/instabuilder2/cache/up.php"] [unique_id "YvWJNLHI46TlmL3NOr4RRQAAAAM"] www.ampsstudio.com [Fri Aug 12 01:28:02 2022] [error] [client 185.243.218.46:0] AH01071: Got error 'PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179' www.ampsstudio.com [Fri Aug 12 01:28:02 2022] [error] [client 185.243.218.46:0] AH01071: Got error 'PHP message: PHP Warning: Cannot modify header information - headers already sent by (output started at /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-includes/functions.php:5275) in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/includes/sonaar-music/css/theme/custom-style.php on line 2' ampsstudio.com [Fri Aug 12 04:17:33 2022] [error] [client 217.160.70.250:0] [client 217.160.70.250] ModSecurity: Access denied with code 403 (phase 2). Match of "contains index.php" against "REQUEST_URI" required. [file "remote server"] [line "-1"] [id "570076"] [msg "Malware.Expert - Malware"] [hostname "ampsstudio.com"] [uri "/wp-admin/admin-post.php"] [unique_id "YvXGTYHlji055I2UKtJ7aQAAAAA"] ampsstudio.com [Fri Aug 12 04:17:34 2022] [error] [client 217.160.70.250:0] [client 217.160.70.250] ModSecurity: Access denied with code 403 (phase 2). Pattern match "/wp-content/plugins/.*/up\\\\.php" at REQUEST_URI. [file "remote server"] [line "-1"] [id "570052"] [msg "Malware.Expert - Malware"] [hostname "ampsstudio.com"] [uri "/wp-content/plugins/instabuilder2/cache/up.php"] [unique_id "YvXGTmES_AYBDWmekVrMvQAAAAc"] www.ampsstudio.com [Fri Aug 12 05:09:19 2022] [error] [client 20.25.163.18:0] AH01071: Got error 'PHP message: PHP Warning: Undefined array key "HTTP_USER_AGENT" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/bookly-responsive-appointment-booking-tool/frontend/modules/booking/ShortCode.php on line 62' ampsstudio.com [Fri Aug 12 07:37:15 2022] [error] [client 217.160.67.80:0] [client 217.160.67.80] ModSecurity: Access denied with code 403 (phase 2). Match of "contains index.php" against "REQUEST_URI" required. [file "remote server"] [line "-1"] [id "570076"] [msg "Malware.Expert - Malware"] [hostname "ampsstudio.com"] [uri "/wp-admin/admin-post.php"] [unique_id "YvX1GxS8YTIqqrUxIEeQ6wAAAAI"] ampsstudio.com [Fri Aug 12 07:37:17 2022] [error] [client 217.160.67.80:0] [client 217.160.67.80] ModSecurity: Access denied with code 403 (phase 2). Pattern match "/wp-content/plugins/.*/up\\\\.php" at REQUEST_URI. [file "remote server"] [line "-1"] [id "570052"] [msg "Malware.Expert - Malware"] [hostname "ampsstudio.com"] [uri "/wp-content/plugins/instabuilder2/cache/up.php"] [unique_id "YvX1HYHlji055I2UKtJ7oAAAAAA"] ampsstudio.com [Fri Aug 12 08:09:19 2022] [error] [client 20.77.49.95:0] AH01276: Cannot serve directory /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-admin/css/: No matching DirectoryIndex (index.php,index.html,index.htm) found, and server-generated directory index forbidden by Options directive ampsstudio.com [Fri Aug 12 08:24:56 2022] [error] [client 20.125.150.225:0] [client 20.125.150.225] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "ampsstudio.com"] [uri "/.env"] [unique_id "YvYASAOP-UvzSb99C0YN-gAAAHc"] cpanel.ampsstudio.com [Fri Aug 12 09:20:26 2022] [error] [client 20.125.150.225:0] [client 20.125.150.225] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "cpanel.ampsstudio.com"] [uri "/.env"] [unique_id "YvYNShKvyWuDz5Nrbd8nNQAAAAg"] www.ampsstudio.com [Fri Aug 12 09:25:43 2022] [error] [client 185.246.188.74:0] AH01071: Got error 'PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179' www.ampsstudio.com [Fri Aug 12 09:25:43 2022] [error] [client 185.246.188.74:0] AH01071: Got error 'PHP message: PHP Warning: Cannot modify header information - headers already sent by (output started at /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-includes/functions.php:5275) in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/includes/sonaar-music/css/theme/custom-style.php on line 2' www.ampsstudio.com [Fri Aug 12 10:04:36 2022] [error] [client 176.31.115.13:0] AH01071: Got error 'PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179' www.ampsstudio.com [Fri Aug 12 10:04:36 2022] [error] [client 176.31.115.13:0] AH01071: Got error 'PHP message: PHP Warning: Cannot modify header information - headers already sent by (output started at /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-includes/functions.php:5275) in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/includes/sonaar-music/css/theme/custom-style.php on line 2' www.ampsstudio.com [Fri Aug 12 10:33:06 2022] [error] [client 185.191.171.6:0] AH01071: Got error 'PHP message: PHP Warning: Attempt to read property "post_content" on null in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/wordpress-seo/src/memoizers/meta-tags-context-memoizer.php on line 140PHP message: PHP Warning: Attempt to read property "post_modified_gmt" on null in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/wordpress-seo/src/presentations/indexable-post-type-presentation.php on line 289PHP message: PHP Warning: Attempt to read property "post_date_gmt" on null in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/wordpress-seo/src/presentations/indexable-post-type-presentation.php on line 289PHP message: PHP Warning: Attempt to read property "post_author" on null in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/wordpress-seo/src/presenters/slack/enhanced-data-presenter.php on line 46PHP message: PHP Warning: Attempt to read property "post_date_gmt" on null in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/wordpress-seo/src/generators/schema/webpage.php on line 51PHP message: PHP Warning: Attempt to read property "post_modified_gmt" on null in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/wordpress-seo/src/generators/schema/webpage.php on line 52PHP message: PHP Warning: Undefined array key 0 in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/includes/classes/iron_sonaar.class.php on line 212PHP message: PHP Warning: Trying to access array offset on value of type null in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/includes/classes/iron_sonaar.class.php on line 212PHP message: PHP Warning: Undefined array key 0 in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/includes/classes/iron_sonaar.class.php on line 214PHP message: PHP Warning: Trying to access array offset on value of type null in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/includes/classes/iron_sonaar.class.php on line 214' www.ampsstudio.com [Fri Aug 12 10:33:43 2022] [error] [client 20.244.19.223:0] AH01071: Got error 'PHP message: PHP Warning: Undefined array key "HTTP_USER_AGENT" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/bookly-responsive-appointment-booking-tool/frontend/modules/booking/ShortCode.php on line 62' www.ampsstudio.com [Fri Aug 12 11:27:26 2022] [error] [client 195.178.120.89:0] [client 195.178.120.89] ModSecurity: Access denied with code 403 (phase 2). Match of "contains index.php" against "REQUEST_URI" required. [file "remote server"] [line "-1"] [id "570076"] [msg "Malware.Expert - Malware"] [hostname "www.ampsstudio.com"] [uri "/wp-admin/admin-post.php"] [unique_id "YvYrDruCsKSVcUnAymr7egAAAAk"] www.ampsstudio.com [Fri Aug 12 11:27:26 2022] [error] [client 195.178.120.89:0] [client 195.178.120.89] ModSecurity: Access denied with code 403 (phase 2). Pattern match "/wp-content/plugins/.*/up\\\\.php" at REQUEST_URI. [file "remote server"] [line "-1"] [id "570052"] [msg "Malware.Expert - Malware"] [hostname "www.ampsstudio.com"] [uri "/wp-content/plugins/instabuilder2/cache/up.php"] [unique_id "YvYrDmES_AYBDWmekVrNogAAAAc"] mail.ampsstudio.com [Fri Aug 12 12:11:35 2022] [error] [client 20.125.150.225:0] [client 20.125.150.225] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "mail.ampsstudio.com"] [uri "/.env"] [unique_id "YvY1ZyCylUaYC7WH6iG3BAAAAAo"] www.ampsstudio.com [Fri Aug 12 12:38:13 2022] [error] [client 94.142.241.194:0] AH01071: Got error 'PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179' www.ampsstudio.com [Fri Aug 12 12:38:13 2022] [error] [client 94.142.241.194:0] AH01071: Got error 'PHP message: PHP Warning: Cannot modify header information - headers already sent by (output started at /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-includes/functions.php:5275) in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/includes/sonaar-music/css/theme/custom-style.php on line 2' ampsstudio.com [Fri Aug 12 13:11:33 2022] [error] [client 150.95.219.216:0] [client 150.95.219.216] ModSecurity: Access denied with code 403 (phase 2). Pattern match "/wp-content/uploads/.*\\\\.php" at REQUEST_FILENAME. [file "remote server"] [line "-1"] [id "430017"] [msg "Malware.Expert - request_uri: Wordpress - prevent PHP files from executing"] [hostname "ampsstudio.com"] [uri "/wp-content/uploads/wp-stream.php"] [unique_id "YvZDdSCylUaYC7WH6iG3MAAAAAo"] ampsstudio.com [Fri Aug 12 13:11:33 2022] [error] [client 150.95.219.216:0] [client 150.95.219.216] ModSecurity: Access denied with code 403 (phase 2). Pattern match "/wp-content/uploads/.*\\\\.php" at REQUEST_FILENAME. [file "remote server"] [line "-1"] [id "430017"] [msg "Malware.Expert - request_uri: Wordpress - prevent PHP files from executing"] [hostname "ampsstudio.com"] [uri "/wp-content/uploads/wp-blockup.php"] [unique_id "YvZDdb9kGcdzaYy9OZdXnQAAAAE"] ampsstudio.com [Fri Aug 12 13:11:33 2022] [error] [client 150.95.219.216:0] [client 150.95.219.216] ModSecurity: Access denied with code 403 (phase 2). Pattern match "/wp-content/uploads/.*\\\\.php" at REQUEST_FILENAME. [file "remote server"] [line "-1"] [id "430017"] [msg "Malware.Expert - request_uri: Wordpress - prevent PHP files from executing"] [hostname "ampsstudio.com"] [uri "/wp-content/uploads/wp-blockdown.php"] [unique_id "YvZDddQTPKax8v04SA2v6QAAAIw"] webdisk.ampsstudio.com [Fri Aug 12 14:55:27 2022] [error] [client 20.125.150.225:0] [client 20.125.150.225] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "webdisk.ampsstudio.com"] [uri "/.env"] [unique_id "YvZbzyCylUaYC7WH6iG3cQAAAAo"] webmail.ampsstudio.com [Fri Aug 12 15:47:21 2022] [error] [client 20.125.150.225:0] [client 20.125.150.225] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "webmail.ampsstudio.com"] [uri "/.env"] [unique_id "YvZn-TgGvm4ZS6Hn-rY4VwAAAAQ"] www.ampsstudio.com [Fri Aug 12 18:00:59 2022] [error] [client 213.219.247.125:0] AH01071: Got error 'PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179' www.ampsstudio.com [Fri Aug 12 18:00:59 2022] [error] [client 213.219.247.125:0] AH01071: Got error 'PHP message: PHP Warning: Cannot modify header information - headers already sent by (output started at /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-includes/functions.php:5275) in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/includes/sonaar-music/css/theme/custom-style.php on line 2' www.ampsstudio.com [Fri Aug 12 18:14:47 2022] [error] [client 213.219.247.125:0] AH01071: Got error 'PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179' www.ampsstudio.com [Fri Aug 12 18:14:47 2022] [error] [client 213.219.247.125:0] AH01071: Got error 'PHP message: PHP Warning: Cannot modify header information - headers already sent by (output started at /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-includes/functions.php:5275) in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/includes/sonaar-music/css/theme/custom-style.php on line 2' www.ampsstudio.com [Fri Aug 12 18:49:05 2022] [error] [client 213.219.247.125:0] AH01071: Got error 'PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179' www.ampsstudio.com [Fri Aug 12 18:49:05 2022] [error] [client 213.219.247.125:0] AH01071: Got error 'PHP message: PHP Warning: Cannot modify header information - headers already sent by (output started at /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-includes/functions.php:5275) in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/includes/sonaar-music/css/theme/custom-style.php on line 2' ampsstudio.com [Fri Aug 12 19:08:36 2022] [error] [client 20.125.147.96:0] AH01276: Cannot serve directory /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-admin/css/: No matching DirectoryIndex (index.php,index.html,index.htm) found, and server-generated directory index forbidden by Options directive ampsstudio.com [Fri Aug 12 20:33:13 2022] [error] [client 20.25.164.187:0] AH01276: Cannot serve directory /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-admin/css/: No matching DirectoryIndex (index.php,index.html,index.htm) found, and server-generated directory index forbidden by Options directive www.ampsstudio.com [Fri Aug 12 22:07:48 2022] [error] [client 185.220.100.253:0] AH01071: Got error 'PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179' www.ampsstudio.com [Fri Aug 12 22:07:48 2022] [error] [client 185.220.100.253:0] AH01071: Got error 'PHP message: PHP Warning: Cannot modify header information - headers already sent by (output started at /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-includes/functions.php:5275) in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/includes/sonaar-music/css/theme/custom-style.php on line 2' ampsstudio.com [Fri Aug 12 23:52:38 2022] [error] [client 20.29.26.144:0] [client 20.29.26.144] ModSecurity: Access denied with code 403 (phase 2). Match of "contains index.php" against "REQUEST_URI" required. [file "remote server"] [line "-1"] [id "570076"] [msg "Malware.Expert - Malware"] [hostname "ampsstudio.com"] [uri "/wp-plain.php"] [unique_id "YvbZtqYAT3GrnqhvypuwcQAAAAs"] www.ampsstudio.com [Fri Aug 12 23:52:44 2022] [error] [client 20.29.26.144:0] [client 20.29.26.144] ModSecurity: Access denied with code 403 (phase 2). String match "php.suspected" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430059"] [msg "Malware.Expert - request_uri: .PHP suspected files"] [hostname "www.ampsstudio.com"] [uri "/wp-content/plugins/apikey/apikey.php.suspected"] [unique_id "YvbZvL9kGcdzaYy9OZda5AAAAAE"] www.ampsstudio.com [Fri Aug 12 23:52:45 2022] [error] [client 20.29.26.144:0] [client 20.29.26.144] ModSecurity: Access denied with code 403 (phase 2). String match "php.suspected" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430059"] [msg "Malware.Expert - request_uri: .PHP suspected files"] [hostname "www.ampsstudio.com"] [uri "/plugins/content/apismtp/apismtp.php.suspected"] [unique_id "YvbZvdHRVXUGJzacweahHwAAAAM"] www.ampsstudio.com [Sat Aug 13 00:53:07 2022] [error] [client 185.220.101.19:0] AH01071: Got error 'PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179' www.ampsstudio.com [Sat Aug 13 00:53:07 2022] [error] [client 185.220.101.19:0] AH01071: Got error 'PHP message: PHP Warning: Cannot modify header information - headers already sent by (output started at /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-includes/functions.php:5275) in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/includes/sonaar-music/css/theme/custom-style.php on line 2' ampsstudio.com [Sat Aug 13 00:58:24 2022] [error] [client 20.125.147.96:0] AH01276: Cannot serve directory /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-admin/css/: No matching DirectoryIndex (index.php,index.html,index.htm) found, and server-generated directory index forbidden by Options directive www.ampsstudio.com [Sat Aug 13 01:35:12 2022] [error] [client 176.124.207.132:0] AH01071: Got error 'PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179' www.ampsstudio.com [Sat Aug 13 01:35:12 2022] [error] [client 176.124.207.132:0] AH01071: Got error 'PHP message: PHP Warning: Cannot modify header information - headers already sent by (output started at /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-includes/functions.php:5275) in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/includes/sonaar-music/css/theme/custom-style.php on line 2' www.ampsstudio.com [Sat Aug 13 04:17:00 2022] [error] [client 213.219.247.125:0] AH01071: Got error 'PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179' www.ampsstudio.com [Sat Aug 13 04:17:00 2022] [error] [client 213.219.247.125:0] AH01071: Got error 'PHP message: PHP Warning: Cannot modify header information - headers already sent by (output started at /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-includes/functions.php:5275) in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/includes/sonaar-music/css/theme/custom-style.php on line 2' www.ampsstudio.com [Sat Aug 13 07:27:53 2022] [error] [client 213.219.247.125:0] AH01071: Got error 'PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179' www.ampsstudio.com [Sat Aug 13 07:27:53 2022] [error] [client 213.219.247.125:0] AH01071: Got error 'PHP message: PHP Warning: Cannot modify header information - headers already sent by (output started at /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-includes/functions.php:5275) in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/includes/sonaar-music/css/theme/custom-style.php on line 2' mail.ampsstudio.com [Sat Aug 13 07:50:32 2022] [error] [client 20.125.150.225:0] [client 20.125.150.225] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "mail.ampsstudio.com"] [uri "/.env"] [unique_id "YvdJuJAxDcIdaIlKCpplmgAAAAs"] mail.ampsstudio.com [Sat Aug 13 08:42:31 2022] [error] [client 20.125.147.96:0] AH01276: Cannot serve directory /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-admin/css/: No matching DirectoryIndex (index.php,index.html,index.htm) found, and server-generated directory index forbidden by Options directive www.ampsstudio.com [Sat Aug 13 08:43:34 2022] [error] [client 94.181.156.63:0] AH01071: Got error 'PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179' www.ampsstudio.com [Sat Aug 13 08:43:34 2022] [error] [client 94.181.156.63:0] AH01071: Got error 'PHP message: PHP Warning: Cannot modify header information - headers already sent by (output started at /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-includes/functions.php:5275) in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/includes/sonaar-music/css/theme/custom-style.php on line 2' ampsstudio.com [Sat Aug 13 09:50:27 2022] [error] [client 85.31.46.140:0] AH01276: Cannot serve directory /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-admin/css/: No matching DirectoryIndex (index.php,index.html,index.htm) found, and server-generated directory index forbidden by Options directive www.ampsstudio.com [Sat Aug 13 10:53:54 2022] [error] [client 142.111.241.161:0] AH01071: Got error 'PHP message: PHP Warning: Cannot modify header information - headers already sent by (output started at /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-includes/functions.php:5275) in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/includes/sonaar-music/css/theme/custom-style.php on line 2' ampsstudio.com [Sat Aug 13 11:07:42 2022] [error] [client 38.141.146.226:0] [client 38.141.146.226] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "ampsstudio.com"] [uri "/.env"] [unique_id "Yvd37Rm5_xBfdyanvc3WXQAAAAk"] webdisk.ampsstudio.com [Sat Aug 13 11:16:36 2022] [error] [client 20.125.150.225:0] [client 20.125.150.225] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "webdisk.ampsstudio.com"] [uri "/.env"] [unique_id "Yvd6BIx0JTrSz65qVktmqAAAAAI"] webmail.ampsstudio.com [Sat Aug 13 11:41:25 2022] [error] [client 20.125.150.225:0] [client 20.125.150.225] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "webmail.ampsstudio.com"] [uri "/.env"] [unique_id "Yvd_1dDfHRtgOG_4U1j0hwAAAAE"] ampsstudio.com [Sat Aug 13 13:49:17 2022] [error] [client 20.77.92.126:0] [client 20.77.92.126] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "ampsstudio.com"] [uri "/.env"] [unique_id "YvedzdDfHRtgOG_4U1j0wwAAAAE"] ampsstudio.com [Sat Aug 13 14:17:20 2022] [error] [client 20.9.72.249:0] [client 20.9.72.249] ModSecurity: Access denied with connection close (phase 2). Pattern match "^wp_is_mobile$" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "420038"] [msg "Malware.Expert - user-agent: Webshell user-agent"] [hostname "ampsstudio.com"] [uri "/wp-load.php"] [unique_id "YvekYOKMPqVFyUnwDfdY4QAAAAU"] ampsstudio.com [Sat Aug 13 14:17:20 2022] [error] [client 20.9.72.249:0] [client 20.9.72.249] ModSecurity: Access denied with connection close (phase 2). Pattern match "^wp_is_mobile$" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "420038"] [msg "Malware.Expert - user-agent: Webshell user-agent"] [hostname "ampsstudio.com"] [uri "/wp-load.php"] [unique_id "YvekYEs6feyYmYT_T5yzvgAAAAc"] ampsstudio.com [Sat Aug 13 14:17:27 2022] [error] [client 20.9.72.249:0] [client 20.9.72.249] ModSecurity: Access denied with connection close (phase 2). Pattern match "^wp_is_mobile$" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "420038"] [msg "Malware.Expert - user-agent: Webshell user-agent"] [hostname "ampsstudio.com"] [uri "/style.php"] [unique_id "YvekZ4x0JTrSz65qVktnBwAAAAI"] ampsstudio.com [Sat Aug 13 14:17:27 2022] [error] [client 20.9.72.249:0] [client 20.9.72.249] ModSecurity: Access denied with connection close (phase 2). Pattern match "^wp_is_mobile$" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "420038"] [msg "Malware.Expert - user-agent: Webshell user-agent"] [hostname "ampsstudio.com"] [uri "/wp-admin/style.php"] [unique_id "YvekZ5AxDcIdaIlKCppmNQAAAAs"] ampsstudio.com [Sat Aug 13 14:17:39 2022] [error] [client 20.9.72.249:0] [client 20.9.72.249] ModSecurity: Access denied with connection close (phase 2). Pattern match "^wp_is_mobile$" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "420038"] [msg "Malware.Expert - user-agent: Webshell user-agent"] [hostname "ampsstudio.com"] [uri "/s_e.php"] [unique_id "Yvekc9DfHRtgOG_4U1j02AAAAAE"] ampsstudio.com [Sat Aug 13 14:18:19 2022] [error] [client 20.9.72.249:0] [client 20.9.72.249] ModSecurity: Access denied with connection close (phase 2). Pattern match "^wp_is_mobile$" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "420038"] [msg "Malware.Expert - user-agent: Webshell user-agent"] [hostname "ampsstudio.com"] [uri "/s_ne.php"] [unique_id "Yvekmxm5_xBfdyanvc3WvgAAAAk"] ampsstudio.com [Sat Aug 13 14:19:21 2022] [error] [client 20.9.72.249:0] [client 20.9.72.249] ModSecurity: Access denied with connection close (phase 2). Pattern match "^wp_is_mobile$" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "420038"] [msg "Malware.Expert - user-agent: Webshell user-agent"] [hostname "ampsstudio.com"] [uri "/radio.php"] [unique_id "Yvek2ZAxDcIdaIlKCppmNgAAAAs"] ampsstudio.com [Sat Aug 13 14:19:36 2022] [error] [client 20.9.72.249:0] [client 20.9.72.249] ModSecurity: Access denied with connection close (phase 2). Pattern match "^wp_is_mobile$" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "420038"] [msg "Malware.Expert - user-agent: Webshell user-agent"] [hostname "ampsstudio.com"] [uri "/doc.php"] [unique_id "Yvek6PcxzPiRqABCdxlAsgAAAAQ"] ampsstudio.com [Sat Aug 13 14:20:04 2022] [error] [client 20.9.72.249:0] [client 20.9.72.249] ModSecurity: Access denied with code 403 (phase 2). Match of "contains index.php" against "REQUEST_URI" required. [file "remote server"] [line "-1"] [id "570075"] [msg "Malware.Expert - Malware"] [hostname "ampsstudio.com"] [uri "/wp_wrong_datlib.php"] [unique_id "YvelBOKMPqVFyUnwDfdY4wAAAAU"] ampsstudio.com [Sat Aug 13 14:20:22 2022] [error] [client 20.9.72.249:0] [client 20.9.72.249] ModSecurity: Access denied with code 403 (phase 2). Match of "contains index.php" against "REQUEST_URI" required. [file "remote server"] [line "-1"] [id "570075"] [msg "Malware.Expert - Malware"] [hostname "ampsstudio.com"] [uri "/beence.php"] [unique_id "YvelFox0JTrSz65qVktnCQAAAAI"] ampsstudio.com [Sat Aug 13 14:20:33 2022] [error] [client 20.9.72.249:0] [client 20.9.72.249] ModSecurity: Access denied with connection close (phase 2). Pattern match "^wp_is_mobile$" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "420038"] [msg "Malware.Expert - user-agent: Webshell user-agent"] [hostname "ampsstudio.com"] [uri "/ups.php"] [unique_id "YvelIfcxzPiRqABCdxlAswAAAAQ"] ampsstudio.com [Sat Aug 13 14:20:41 2022] [error] [client 20.9.72.249:0] [client 20.9.72.249] ModSecurity: Access denied with connection close (phase 2). Pattern match "^wp_is_mobile$" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "420038"] [msg "Malware.Expert - user-agent: Webshell user-agent"] [hostname "ampsstudio.com"] [uri "/wp-signin.php"] [unique_id "YvelKXNJm0WWAie7nN5QIQAAAAg"] ampsstudio.com [Sat Aug 13 14:20:51 2022] [error] [client 20.9.72.249:0] [client 20.9.72.249] ModSecurity: Access denied with connection close (phase 2). Pattern match "^wp_is_mobile$" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "420038"] [msg "Malware.Expert - user-agent: Webshell user-agent"] [hostname "ampsstudio.com"] [uri "/media-admin.php"] [unique_id "YvelMxm5_xBfdyanvc3WwAAAAAk"] ampsstudio.com [Sat Aug 13 14:21:02 2022] [error] [client 20.9.72.249:0] [client 20.9.72.249] ModSecurity: Access denied with code 403 (phase 2). Match of "contains index.php" against "REQUEST_URI" required. [file "remote server"] [line "-1"] [id "570075"] [msg "Malware.Expert - Malware"] [hostname "ampsstudio.com"] [uri "/export.php"] [unique_id "YvelPoqTVGNXkFh-59l0GwAAAAM"] ampsstudio.com [Sat Aug 13 14:21:03 2022] [error] [client 20.9.72.249:0] [client 20.9.72.249] ModSecurity: Access denied with code 403 (phase 2). Match of "contains index.php" against "REQUEST_URI" required. [file "remote server"] [line "-1"] [id "570075"] [msg "Malware.Expert - Malware"] [hostname "ampsstudio.com"] [uri "/wp-content/export.php"] [unique_id "YvelP-KMPqVFyUnwDfdY5AAAAAU"] ampsstudio.com [Sat Aug 13 14:21:05 2022] [error] [client 20.9.72.249:0] [client 20.9.72.249] ModSecurity: Access denied with connection close (phase 2). Pattern match "^wp_is_mobile$" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "420038"] [msg "Malware.Expert - user-agent: Webshell user-agent"] [hostname "ampsstudio.com"] [uri "/wp-includes/wp-class.php"] [unique_id "YvelQYx0JTrSz65qVktnCgAAAAI"] ampsstudio.com [Sat Aug 13 14:21:16 2022] [error] [client 20.9.72.249:0] [client 20.9.72.249] ModSecurity: Access denied with code 403 (phase 2). Match of "contains index.php" against "REQUEST_URI" required. [file "remote server"] [line "-1"] [id "570075"] [msg "Malware.Expert - Malware"] [hostname "ampsstudio.com"] [uri "/wp-includes/wp-atom.php"] [unique_id "YvelTPcxzPiRqABCdxlAtAAAAAQ"] ampsstudio.com [Sat Aug 13 14:21:20 2022] [error] [client 20.9.72.249:0] [client 20.9.72.249] ModSecurity: Access denied with code 403 (phase 2). Pattern match "/wp-includes/images/.*\\\\.php" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430032"] [msg "Malware.Expert - request_uri: Wordpress - prevent PHP files from executing"] [hostname "ampsstudio.com"] [uri "/wp-includes/images/css.php"] [unique_id "YvelUBm5_xBfdyanvc3WwQAAAAk"] ampsstudio.com [Sat Aug 13 14:21:21 2022] [error] [client 20.9.72.249:0] [client 20.9.72.249] ModSecurity: Access denied with code 403 (phase 2). Pattern match "/wp-includes/css/.*\\\\.php" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430035"] [msg "Malware.Expert - request_uri: Wordpress - prevent PHP files from executing"] [hostname "ampsstudio.com"] [uri "/wp-includes/css/css.php"] [unique_id "YvelUfwYA2Qkx5BG4A6juwAAAAo"] ampsstudio.com [Sat Aug 13 14:21:26 2022] [error] [client 20.9.72.249:0] [client 20.9.72.249] ModSecurity: Access denied with code 403 (phase 2). Match of "contains index.php" against "REQUEST_URI" required. [file "remote server"] [line "-1"] [id "570075"] [msg "Malware.Expert - Malware"] [hostname "ampsstudio.com"] [uri "/defau1t.php"] [unique_id "YvelVtDfHRtgOG_4U1j02wAAAAE"] ampsstudio.com [Sat Aug 13 14:21:34 2022] [error] [client 20.9.72.249:0] [client 20.9.72.249] ModSecurity: Access denied with code 403 (phase 2). Match of "contains index.php" against "REQUEST_URI" required. [file "remote server"] [line "-1"] [id "570075"] [msg "Malware.Expert - Malware"] [hostname "ampsstudio.com"] [uri "/moduless.php"] [unique_id "YvelXks6feyYmYT_T5yzwgAAAAc"] ampsstudio.com [Sat Aug 13 14:21:42 2022] [error] [client 20.9.72.249:0] [client 20.9.72.249] ModSecurity: Access denied with connection close (phase 2). Pattern match "^wp_is_mobile$" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "420038"] [msg "Malware.Expert - user-agent: Webshell user-agent"] [hostname "ampsstudio.com"] [uri "/wp-booking.php"] [unique_id "YvelZoqTVGNXkFh-59l0HAAAAAM"] ampsstudio.com [Sat Aug 13 14:21:46 2022] [error] [client 20.9.72.249:0] [client 20.9.72.249] ModSecurity: Access denied with connection close (phase 2). Pattern match "^wp_is_mobile$" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "420038"] [msg "Malware.Expert - user-agent: Webshell user-agent"] [hostname "ampsstudio.com"] [uri "/wp-content/plugins/backup_index.php"] [unique_id "YvelauKMPqVFyUnwDfdY5QAAAAU"] ampsstudio.com [Sat Aug 13 14:21:59 2022] [error] [client 20.9.72.249:0] [client 20.9.72.249] ModSecurity: Access denied with connection close (phase 2). Pattern match "^wp_is_mobile$" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "420038"] [msg "Malware.Expert - user-agent: Webshell user-agent"] [hostname "ampsstudio.com"] [uri "/wp-content/mu-plugins/db-safe-mode.php"] [unique_id "Yveld4x0JTrSz65qVktnCwAAAAI"] ampsstudio.com [Sat Aug 13 14:22:05 2022] [error] [client 20.9.72.249:0] [client 20.9.72.249] ModSecurity: Access denied with connection close (phase 2). Pattern match "^wp_is_mobile$" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "420038"] [msg "Malware.Expert - user-agent: Webshell user-agent"] [hostname "ampsstudio.com"] [uri "/wp-includes/css/wp-config.php"] [unique_id "YvelfZAxDcIdaIlKCppmOQAAAAs"] ampsstudio.com [Sat Aug 13 14:22:08 2022] [error] [client 20.9.72.249:0] [client 20.9.72.249] ModSecurity: Access denied with connection close (phase 2). Pattern match "^wp_is_mobile$" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "420038"] [msg "Malware.Expert - user-agent: Webshell user-agent"] [hostname "ampsstudio.com"] [uri "/config.bak.php"] [unique_id "YvelgPcxzPiRqABCdxlAtQAAAAQ"] ampsstudio.com [Sat Aug 13 14:22:09 2022] [error] [client 20.9.72.249:0] [client 20.9.72.249] ModSecurity: Access denied with connection close (phase 2). Pattern match "^wp_is_mobile$" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "420038"] [msg "Malware.Expert - user-agent: Webshell user-agent"] [hostname "ampsstudio.com"] [uri "/wp-content/themes/config.bak.php"] [unique_id "YvelgXNJm0WWAie7nN5QIwAAAAg"] ampsstudio.com [Sat Aug 13 14:22:33 2022] [error] [client 20.9.72.249:0] [client 20.9.72.249] ModSecurity: Access denied with connection close (phase 2). Pattern match "^wp_is_mobile$" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "420038"] [msg "Malware.Expert - user-agent: Webshell user-agent"] [hostname "ampsstudio.com"] [uri "/legion.php"] [unique_id "YvelmfwYA2Qkx5BG4A6jvAAAAAo"] ampsstudio.com [Sat Aug 13 14:22:47 2022] [error] [client 20.9.72.249:0] [client 20.9.72.249] ModSecurity: Access denied with connection close (phase 2). Pattern match "^wp_is_mobile$" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "420038"] [msg "Malware.Expert - user-agent: Webshell user-agent"] [hostname "ampsstudio.com"] [uri "/wp-plugins.php"] [unique_id "Yvelp-KMPqVFyUnwDfdY5gAAAAU"] ampsstudio.com [Sat Aug 13 14:22:53 2022] [error] [client 20.9.72.249:0] [client 20.9.72.249] ModSecurity: Access denied with connection close (phase 2). Pattern match "^wp_is_mobile$" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "420038"] [msg "Malware.Expert - user-agent: Webshell user-agent"] [hostname "ampsstudio.com"] [uri "/gank.php.PhP"] [unique_id "YvelrYx0JTrSz65qVktnDAAAAAI"] ampsstudio.com [Sat Aug 13 14:22:56 2022] [error] [client 20.9.72.249:0] [client 20.9.72.249] ModSecurity: Access denied with connection close (phase 2). Pattern match "^wp_is_mobile$" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "420038"] [msg "Malware.Expert - user-agent: Webshell user-agent"] [hostname "ampsstudio.com"] [uri "/wp-content/db-cache.php"] [unique_id "YvelsJAxDcIdaIlKCppmOgAAAAs"] ampsstudio.com [Sat Aug 13 14:22:58 2022] [error] [client 20.9.72.249:0] [client 20.9.72.249] ModSecurity: Access denied with code 403 (phase 2). Match of "contains index.php" against "REQUEST_URI" required. [file "remote server"] [line "-1"] [id "570075"] [msg "Malware.Expert - Malware"] [hostname "ampsstudio.com"] [uri "/archives.php"] [unique_id "YvelsvcxzPiRqABCdxlAtgAAAAQ"] ampsstudio.com [Sat Aug 13 14:23:11 2022] [error] [client 20.9.72.249:0] [client 20.9.72.249] ModSecurity: Access denied with code 403 (phase 2). Match of "contains index.php" against "REQUEST_URI" required. [file "remote server"] [line "-1"] [id "570075"] [msg "Malware.Expert - Malware"] [hostname "ampsstudio.com"] [uri "/defau11.php"] [unique_id "Yvelv3NJm0WWAie7nN5QJAAAAAg"] ampsstudio.com [Sat Aug 13 14:23:13 2022] [error] [client 20.9.72.249:0] [client 20.9.72.249] ModSecurity: Access denied with connection close (phase 2). Pattern match "^wp_is_mobile$" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "420038"] [msg "Malware.Expert - user-agent: Webshell user-agent"] [hostname "ampsstudio.com"] [uri "/wp-content/outcms.php"] [unique_id "YvelwRm5_xBfdyanvc3WwwAAAAk"] ampsstudio.com [Sat Aug 13 14:23:23 2022] [error] [client 20.9.72.249:0] [client 20.9.72.249] ModSecurity: Access denied with connection close (phase 2). Pattern match "^wp_is_mobile$" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "420038"] [msg "Malware.Expert - user-agent: Webshell user-agent"] [hostname "ampsstudio.com"] [uri "/system_log.php"] [unique_id "Yvely_wYA2Qkx5BG4A6jvQAAAAo"] ampsstudio.com [Sat Aug 13 14:23:30 2022] [error] [client 20.9.72.249:0] [client 20.9.72.249] ModSecurity: Access denied with connection close (phase 2). Pattern match "^wp_is_mobile$" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "420038"] [msg "Malware.Expert - user-agent: Webshell user-agent"] [hostname "ampsstudio.com"] [uri "/wp-backup-sql-302.php"] [unique_id "Yvel0ks6feyYmYT_T5yzxAAAAAc"] ampsstudio.com [Sat Aug 13 14:23:43 2022] [error] [client 20.9.72.249:0] [client 20.9.72.249] ModSecurity: Access denied with connection close (phase 2). Pattern match "^wp_is_mobile$" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "420038"] [msg "Malware.Expert - user-agent: Webshell user-agent"] [hostname "ampsstudio.com"] [uri "/error.php"] [unique_id "Yvel39DfHRtgOG_4U1j03QAAAAE"] ampsstudio.com [Sat Aug 13 14:23:51 2022] [error] [client 20.9.72.249:0] [client 20.9.72.249] ModSecurity: Access denied with connection close (phase 2). Pattern match "^wp_is_mobile$" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "420038"] [msg "Malware.Expert - user-agent: Webshell user-agent"] [hostname "ampsstudio.com"] [uri "/ALFA_DATA"] [unique_id "Yvel5-KMPqVFyUnwDfdY5wAAAAU"] ampsstudio.com [Sat Aug 13 14:23:52 2022] [error] [client 20.9.72.249:0] [client 20.9.72.249] ModSecurity: Access denied with connection close (phase 2). Pattern match "^wp_is_mobile$" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "420038"] [msg "Malware.Expert - user-agent: Webshell user-agent"] [hostname "ampsstudio.com"] [uri "/alfacgiapi"] [unique_id "Yvel6JAxDcIdaIlKCppmOwAAAAs"] ampsstudio.com [Sat Aug 13 14:23:53 2022] [error] [client 20.9.72.249:0] [client 20.9.72.249] ModSecurity: Access denied with connection close (phase 2). Pattern match "^wp_is_mobile$" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "420038"] [msg "Malware.Expert - user-agent: Webshell user-agent"] [hostname "ampsstudio.com"] [uri "/cgialfa"] [unique_id "Yvel6fcxzPiRqABCdxlAtwAAAAQ"] ampsstudio.com [Sat Aug 13 14:23:54 2022] [crit] [client 20.9.72.249:0] AH00529: /home/virtual/vps-aa3942/a/aede5353c4/public_html/.well-known/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/virtual/vps-aa3942/a/aede5353c4/public_html/.well-known/' is executable ampsstudio.com [Sat Aug 13 14:23:54 2022] [crit] [client 20.9.72.249:0] AH00529: /home/virtual/vps-aa3942/a/aede5353c4/public_html/.well-known/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/virtual/vps-aa3942/a/aede5353c4/public_html/.well-known/' is executable ampsstudio.com [Sat Aug 13 14:23:55 2022] [crit] [client 20.9.72.249:0] AH00529: /home/virtual/vps-aa3942/a/aede5353c4/public_html/.well-known/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/virtual/vps-aa3942/a/aede5353c4/public_html/.well-known/' is executable ampsstudio.com [Sat Aug 13 14:23:56 2022] [error] [client 20.9.72.249:0] [client 20.9.72.249] ModSecurity: Access denied with connection close (phase 2). Pattern match "^wp_is_mobile$" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "420038"] [msg "Malware.Expert - user-agent: Webshell user-agent"] [hostname "ampsstudio.com"] [uri "/wp-content/uploads/ALFA_DATA"] [unique_id "Yvel7Es6feyYmYT_T5yzxQAAAAc"] ampsstudio.com [Sat Aug 13 14:23:57 2022] [error] [client 20.9.72.249:0] [client 20.9.72.249] ModSecurity: Access denied with connection close (phase 2). Pattern match "^wp_is_mobile$" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "420038"] [msg "Malware.Expert - user-agent: Webshell user-agent"] [hostname "ampsstudio.com"] [uri "/wp-content/uploads/alfacgiapi"] [unique_id "Yvel7dDfHRtgOG_4U1j03gAAAAE"] ampsstudio.com [Sat Aug 13 14:23:58 2022] [error] [client 20.9.72.249:0] [client 20.9.72.249] ModSecurity: Access denied with connection close (phase 2). Pattern match "^wp_is_mobile$" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "420038"] [msg "Malware.Expert - user-agent: Webshell user-agent"] [hostname "ampsstudio.com"] [uri "/wp-content/uploads/cgialfa"] [unique_id "Yvel7uKMPqVFyUnwDfdY6AAAAAU"] ampsstudio.com [Sat Aug 13 14:24:00 2022] [error] [client 20.9.72.249:0] [client 20.9.72.249] ModSecurity: Access denied with connection close (phase 2). Pattern match "^wp_is_mobile$" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "420038"] [msg "Malware.Expert - user-agent: Webshell user-agent"] [hostname "ampsstudio.com"] [uri "/wp-includes/ALFA_DATA"] [unique_id "Yvel8Ix0JTrSz65qVktnDgAAAAI"] ampsstudio.com [Sat Aug 13 14:24:01 2022] [error] [client 20.9.72.249:0] [client 20.9.72.249] ModSecurity: Access denied with connection close (phase 2). Pattern match "^wp_is_mobile$" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "420038"] [msg "Malware.Expert - user-agent: Webshell user-agent"] [hostname "ampsstudio.com"] [uri "/wp-includes/alfacgiapi"] [unique_id "Yvel8YqTVGNXkFh-59l0HwAAAAM"] ampsstudio.com [Sat Aug 13 14:24:02 2022] [error] [client 20.9.72.249:0] [client 20.9.72.249] ModSecurity: Access denied with connection close (phase 2). Pattern match "^wp_is_mobile$" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "420038"] [msg "Malware.Expert - user-agent: Webshell user-agent"] [hostname "ampsstudio.com"] [uri "/wp-includes/cgialfa"] [unique_id "Yvel8hm5_xBfdyanvc3WxQAAAAk"] ampsstudio.com [Sat Aug 13 14:24:03 2022] [error] [client 20.9.72.249:0] [client 20.9.72.249] ModSecurity: Access denied with connection close (phase 2). Pattern match "^wp_is_mobile$" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "420038"] [msg "Malware.Expert - user-agent: Webshell user-agent"] [hostname "ampsstudio.com"] [uri "/wp-admin/ALFA_DATA"] [unique_id "Yvel8_wYA2Qkx5BG4A6jvwAAAAo"] ampsstudio.com [Sat Aug 13 14:24:04 2022] [error] [client 20.9.72.249:0] [client 20.9.72.249] ModSecurity: Access denied with connection close (phase 2). Pattern match "^wp_is_mobile$" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "420038"] [msg "Malware.Expert - user-agent: Webshell user-agent"] [hostname "ampsstudio.com"] [uri "/wp-admin/alfacgiapi"] [unique_id "Yvel9Es6feyYmYT_T5yzxgAAAAc"] ampsstudio.com [Sat Aug 13 14:24:05 2022] [error] [client 20.9.72.249:0] [client 20.9.72.249] ModSecurity: Access denied with connection close (phase 2). Pattern match "^wp_is_mobile$" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "420038"] [msg "Malware.Expert - user-agent: Webshell user-agent"] [hostname "ampsstudio.com"] [uri "/wp-admin/cgialfa"] [unique_id "Yvel9dDfHRtgOG_4U1j03wAAAAE"] ampsstudio.com [Sat Aug 13 14:24:07 2022] [error] [client 20.9.72.249:0] [client 20.9.72.249] ModSecurity: Access denied with connection close (phase 2). Pattern match "^wp_is_mobile$" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "420038"] [msg "Malware.Expert - user-agent: Webshell user-agent"] [hostname "ampsstudio.com"] [uri "/wp-content/ALFA_DATA"] [unique_id "Yvel9-KMPqVFyUnwDfdY6QAAAAU"] ampsstudio.com [Sat Aug 13 14:24:08 2022] [error] [client 20.9.72.249:0] [client 20.9.72.249] ModSecurity: Access denied with connection close (phase 2). Pattern match "^wp_is_mobile$" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "420038"] [msg "Malware.Expert - user-agent: Webshell user-agent"] [hostname "ampsstudio.com"] [uri "/wp-content/alfacgiapi"] [unique_id "Yvel-Ix0JTrSz65qVktnDwAAAAI"] ampsstudio.com [Sat Aug 13 14:24:10 2022] [error] [client 20.9.72.249:0] [client 20.9.72.249] ModSecurity: Access denied with connection close (phase 2). Pattern match "^wp_is_mobile$" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "420038"] [msg "Malware.Expert - user-agent: Webshell user-agent"] [hostname "ampsstudio.com"] [uri "/wp-content/cgialfa"] [unique_id "Yvel-oqTVGNXkFh-59l0IAAAAAM"] ampsstudio.com [Sat Aug 13 14:24:12 2022] [error] [client 20.9.72.249:0] [client 20.9.72.249] ModSecurity: Access denied with connection close (phase 2). Pattern match "^wp_is_mobile$" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "420038"] [msg "Malware.Expert - user-agent: Webshell user-agent"] [hostname "ampsstudio.com"] [uri "/templates/beez3/ALFA_DATA"] [unique_id "Yvel_Bm5_xBfdyanvc3WxgAAAAk"] ampsstudio.com [Sat Aug 13 14:24:15 2022] [error] [client 20.9.72.249:0] [client 20.9.72.249] ModSecurity: Access denied with connection close (phase 2). Pattern match "^wp_is_mobile$" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "420038"] [msg "Malware.Expert - user-agent: Webshell user-agent"] [hostname "ampsstudio.com"] [uri "/templates/beez3/alfacgiapi"] [unique_id "Yvel_5AxDcIdaIlKCppmPQAAAAs"] ampsstudio.com [Sat Aug 13 14:24:15 2022] [error] [client 20.9.72.249:0] [client 20.9.72.249] ModSecurity: Access denied with connection close (phase 2). Pattern match "^wp_is_mobile$" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "420038"] [msg "Malware.Expert - user-agent: Webshell user-agent"] [hostname "ampsstudio.com"] [uri "/templates/beez3/cgialfa"] [unique_id "Yvel__wYA2Qkx5BG4A6jwAAAAAo"] ampsstudio.com [Sat Aug 13 14:24:16 2022] [error] [client 20.9.72.249:0] [client 20.9.72.249] ModSecurity: Access denied with connection close (phase 2). Pattern match "^wp_is_mobile$" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "420038"] [msg "Malware.Expert - user-agent: Webshell user-agent"] [hostname "ampsstudio.com"] [uri "/sites/default/files/ALFA_DATA"] [unique_id "YvemAEs6feyYmYT_T5yzxwAAAAc"] ampsstudio.com [Sat Aug 13 14:24:17 2022] [error] [client 20.9.72.249:0] [client 20.9.72.249] ModSecurity: Access denied with connection close (phase 2). Pattern match "^wp_is_mobile$" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "420038"] [msg "Malware.Expert - user-agent: Webshell user-agent"] [hostname "ampsstudio.com"] [uri "/sites/default/files/alfacgiapi"] [unique_id "YvemAdDfHRtgOG_4U1j04AAAAAE"] ampsstudio.com [Sat Aug 13 14:24:18 2022] [error] [client 20.9.72.249:0] [client 20.9.72.249] ModSecurity: Access denied with connection close (phase 2). Pattern match "^wp_is_mobile$" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "420038"] [msg "Malware.Expert - user-agent: Webshell user-agent"] [hostname "ampsstudio.com"] [uri "/sites/default/files/cgialfa"] [unique_id "YvemAnNJm0WWAie7nN5QJwAAAAg"] ampsstudio.com [Sat Aug 13 14:24:19 2022] [error] [client 20.9.72.249:0] [client 20.9.72.249] ModSecurity: Access denied with connection close (phase 2). Pattern match "^wp_is_mobile$" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "420038"] [msg "Malware.Expert - user-agent: Webshell user-agent"] [hostname "ampsstudio.com"] [uri "/admin/controller/extension/extension/ALFA_DATA"] [unique_id "YvemA-KMPqVFyUnwDfdY6gAAAAU"] ampsstudio.com [Sat Aug 13 14:24:20 2022] [error] [client 20.9.72.249:0] [client 20.9.72.249] ModSecurity: Access denied with connection close (phase 2). Pattern match "^wp_is_mobile$" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "420038"] [msg "Malware.Expert - user-agent: Webshell user-agent"] [hostname "ampsstudio.com"] [uri "/admin/controller/extension/extension/alfacgiapi"] [unique_id "YvemBIx0JTrSz65qVktnEAAAAAI"] ampsstudio.com [Sat Aug 13 14:24:21 2022] [error] [client 20.9.72.249:0] [client 20.9.72.249] ModSecurity: Access denied with connection close (phase 2). Pattern match "^wp_is_mobile$" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "420038"] [msg "Malware.Expert - user-agent: Webshell user-agent"] [hostname "ampsstudio.com"] [uri "/admin/controller/extension/extension/cgialfa"] [unique_id "YvemBYqTVGNXkFh-59l0IQAAAAM"] ampsstudio.com [Sat Aug 13 14:24:27 2022] [error] [client 20.9.72.249:0] [client 20.9.72.249] ModSecurity: Access denied with connection close (phase 2). Pattern match "^wp_is_mobile$" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "420038"] [msg "Malware.Expert - user-agent: Webshell user-agent"] [hostname "ampsstudio.com"] [uri "/wp-content/plugins/ubh/up.php"] [unique_id "YvemC5AxDcIdaIlKCppmPgAAAAs"] ampsstudio.com [Sat Aug 13 14:24:28 2022] [error] [client 20.9.72.249:0] [client 20.9.72.249] ModSecurity: Access denied with connection close (phase 2). Pattern match "^wp_is_mobile$" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "420038"] [msg "Malware.Expert - user-agent: Webshell user-agent"] [hostname "ampsstudio.com"] [uri "/index.php"] [unique_id "YvemDPwYA2Qkx5BG4A6jwQAAAAo"] ampsstudio.com [Sat Aug 13 14:24:30 2022] [error] [client 20.9.72.249:0] [client 20.9.72.249] ModSecurity: Access denied with connection close (phase 2). Pattern match "^wp_is_mobile$" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "420038"] [msg "Malware.Expert - user-agent: Webshell user-agent"] [hostname "ampsstudio.com"] [uri "/olux.php"] [unique_id "YvemDvcxzPiRqABCdxlAugAAAAQ"] ampsstudio.com [Sat Aug 13 14:24:32 2022] [error] [client 20.9.72.249:0] [client 20.9.72.249] ModSecurity: Access denied with connection close (phase 2). Pattern match "^wp_is_mobile$" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "420038"] [msg "Malware.Expert - user-agent: Webshell user-agent"] [hostname "ampsstudio.com"] [uri "/xleet.php"] [unique_id "YvemEEs6feyYmYT_T5yzyAAAAAc"] ampsstudio.com [Sat Aug 13 14:24:32 2022] [error] [client 20.9.72.249:0] [client 20.9.72.249] ModSecurity: Access denied with connection close (phase 2). Pattern match "^wp_is_mobile$" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "420038"] [msg "Malware.Expert - user-agent: Webshell user-agent"] [hostname "ampsstudio.com"] [uri "/wso.php"] [unique_id "YvemENDfHRtgOG_4U1j04QAAAAE"] ampsstudio.com [Sat Aug 13 14:24:33 2022] [error] [client 20.9.72.249:0] [client 20.9.72.249] ModSecurity: Access denied with connection close (phase 2). Pattern match "^wp_is_mobile$" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "420038"] [msg "Malware.Expert - user-agent: Webshell user-agent"] [hostname "ampsstudio.com"] [uri "/shell.php"] [unique_id "YvemEXNJm0WWAie7nN5QKAAAAAg"] ampsstudio.com [Sat Aug 13 14:24:34 2022] [error] [client 20.9.72.249:0] [client 20.9.72.249] ModSecurity: Access denied with connection close (phase 2). Pattern match "^wp_is_mobile$" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "420038"] [msg "Malware.Expert - user-agent: Webshell user-agent"] [hostname "ampsstudio.com"] [uri "/up.php"] [unique_id "YvemEuKMPqVFyUnwDfdY6wAAAAU"] ampsstudio.com [Sat Aug 13 14:24:35 2022] [error] [client 20.9.72.249:0] [client 20.9.72.249] ModSecurity: Access denied with connection close (phase 2). Pattern match "^wp_is_mobile$" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "420038"] [msg "Malware.Expert - user-agent: Webshell user-agent"] [hostname "ampsstudio.com"] [uri "/upload.php"] [unique_id "YvemE4x0JTrSz65qVktnEQAAAAI"] ampsstudio.com [Sat Aug 13 14:24:35 2022] [error] [client 20.9.72.249:0] [client 20.9.72.249] ModSecurity: Access denied with connection close (phase 2). Pattern match "^wp_is_mobile$" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "420038"] [msg "Malware.Expert - user-agent: Webshell user-agent"] [hostname "ampsstudio.com"] [uri "/1.php"] [unique_id "YvemE4qTVGNXkFh-59l0IgAAAAM"] ampsstudio.com [Sat Aug 13 14:24:36 2022] [error] [client 20.9.72.249:0] [client 20.9.72.249] ModSecurity: Access denied with connection close (phase 2). Pattern match "^wp_is_mobile$" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "420038"] [msg "Malware.Expert - user-agent: Webshell user-agent"] [hostname "ampsstudio.com"] [uri "/x.php"] [unique_id "YvemFBm5_xBfdyanvc3WyAAAAAk"] ampsstudio.com [Sat Aug 13 14:24:37 2022] [error] [client 20.9.72.249:0] [client 20.9.72.249] ModSecurity: Access denied with connection close (phase 2). Pattern match "^wp_is_mobile$" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "420038"] [msg "Malware.Expert - user-agent: Webshell user-agent"] [hostname "ampsstudio.com"] [uri "/z.php"] [unique_id "YvemFZAxDcIdaIlKCppmPwAAAAs"] ampsstudio.com [Sat Aug 13 14:24:38 2022] [error] [client 20.9.72.249:0] [client 20.9.72.249] ModSecurity: Access denied with connection close (phase 2). Pattern match "^wp_is_mobile$" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "420038"] [msg "Malware.Expert - user-agent: Webshell user-agent"] [hostname "ampsstudio.com"] [uri "/a.php"] [unique_id "YvemFvwYA2Qkx5BG4A6jwgAAAAo"] ampsstudio.com [Sat Aug 13 14:24:38 2022] [error] [client 20.9.72.249:0] [client 20.9.72.249] ModSecurity: Access denied with connection close (phase 2). Pattern match "^wp_is_mobile$" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "420038"] [msg "Malware.Expert - user-agent: Webshell user-agent"] [hostname "ampsstudio.com"] [uri "/test.php"] [unique_id "YvemFvcxzPiRqABCdxlAuwAAAAQ"] ampsstudio.com [Sat Aug 13 14:24:39 2022] [error] [client 20.9.72.249:0] [client 20.9.72.249] ModSecurity: Access denied with connection close (phase 2). Pattern match "^wp_is_mobile$" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "420038"] [msg "Malware.Expert - user-agent: Webshell user-agent"] [hostname "ampsstudio.com"] [uri "/wp.php"] [unique_id "YvemF0s6feyYmYT_T5yzyQAAAAc"] ampsstudio.com [Sat Aug 13 14:24:40 2022] [error] [client 20.9.72.249:0] [client 20.9.72.249] ModSecurity: Access denied with connection close (phase 2). Pattern match "^wp_is_mobile$" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "420038"] [msg "Malware.Expert - user-agent: Webshell user-agent"] [hostname "ampsstudio.com"] [uri "/alfa.php"] [unique_id "YvemGNDfHRtgOG_4U1j04gAAAAE"] ampsstudio.com [Sat Aug 13 14:24:41 2022] [error] [client 20.9.72.249:0] [client 20.9.72.249] ModSecurity: Access denied with connection close (phase 2). Pattern match "^wp_is_mobile$" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "420038"] [msg "Malware.Expert - user-agent: Webshell user-agent"] [hostname "ampsstudio.com"] [uri "/config.php"] [unique_id "YvemGXNJm0WWAie7nN5QKQAAAAg"] ampsstudio.com [Sat Aug 13 14:24:41 2022] [error] [client 20.9.72.249:0] [client 20.9.72.249] ModSecurity: Access denied with connection close (phase 2). Pattern match "^wp_is_mobile$" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "420038"] [msg "Malware.Expert - user-agent: Webshell user-agent"] [hostname "ampsstudio.com"] [uri "/templates/beez3/index.php"] [unique_id "YvemGeKMPqVFyUnwDfdY7AAAAAU"] ampsstudio.com [Sat Aug 13 14:24:42 2022] [error] [client 20.9.72.249:0] [client 20.9.72.249] ModSecurity: Access denied with connection close (phase 2). Pattern match "^wp_is_mobile$" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "420038"] [msg "Malware.Expert - user-agent: Webshell user-agent"] [hostname "ampsstudio.com"] [uri "/about.php"] [unique_id "YvemGox0JTrSz65qVktnEgAAAAI"] ampsstudio.com [Sat Aug 13 14:24:43 2022] [error] [client 20.9.72.249:0] [client 20.9.72.249] ModSecurity: Access denied with connection close (phase 2). Pattern match "^wp_is_mobile$" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "420038"] [msg "Malware.Expert - user-agent: Webshell user-agent"] [hostname "ampsstudio.com"] [uri "/shells.php"] [unique_id "YvemG4qTVGNXkFh-59l0IwAAAAM"] ampsstudio.com [Sat Aug 13 22:02:13 2022] [error] [client 20.124.91.98:0] [client 20.124.91.98] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "ampsstudio.com"] [uri "/.env"] [unique_id "YvgRVc_3dxzpj8C23obWYQAAAA4"] ampsstudio.com [Sat Aug 13 22:17:13 2022] [error] [client 156.146.54.85:0] [client 156.146.54.85] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "ampsstudio.com"] [uri "/.env"] [unique_id "YvgU2c_3dxzpj8C23obWZgAAAA4"] ampsstudio.com [Sun Aug 14 02:37:55 2022] [error] [client 20.125.150.225:0] [client 20.125.150.225] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "ampsstudio.com"] [uri "/.env"] [unique_id "YvhR89DfHRtgOG_4U1j15wAAAAE"] www.ampsstudio.com [Sun Aug 14 03:46:48 2022] [crit] [client 66.249.92.152:0] AH00529: /home/virtual/vps-aa3942/a/aede5353c4/public_html/.well-known/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/virtual/vps-aa3942/a/aede5353c4/public_html/.well-known/' is executable cpanel.ampsstudio.com [Sun Aug 14 04:33:57 2022] [error] [client 20.125.150.225:0] [client 20.125.150.225] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "cpanel.ampsstudio.com"] [uri "/.env"] [unique_id "YvhtJbfeUtit-xj8rwuyEwAAAAU"] ampsstudio.com [Sun Aug 14 07:29:30 2022] [error] [client 20.38.2.26:0] [client 20.38.2.26] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "ampsstudio.com"] [uri "/.env"] [unique_id "YviWStAnaD4nryp2PC7YGgAAAAc"] www.ampsstudio.com [Sun Aug 14 09:01:00 2022] [error] [client 51.11.6.150:0] AH01071: Got error 'PHP message: PHP Warning: Undefined array key "HTTP_USER_AGENT" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/bookly-responsive-appointment-booking-tool/frontend/modules/booking/ShortCode.php on line 62' ampsstudio.com [Sun Aug 14 09:27:39 2022] [error] [client 20.14.76.137:0] [client 20.14.76.137] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "ampsstudio.com"] [uri "/.env"] [unique_id "Yvix-28P2zCdnHpaYAxAHAAAAAI"] ampsstudio.com [Sun Aug 14 10:58:26 2022] [error] [client 198.54.126.164:0] [client 198.54.126.164] ModSecurity: Access denied with code 403 (phase 2). Pattern match "revslider_show_image&img=.+/.+\\\\.php" at REQUEST_URI. [file "remote server"] [line "-1"] [id "500007"] [msg "Malware.Expert - request_uri: 0-Day - Revslider LFI"] [hostname "ampsstudio.com"] [uri "/wp-admin/admin-ajax.php"] [unique_id "YvjHQj0OmudzWgg9AsRuCgAAAAA"] ampsstudio.com [Sun Aug 14 10:58:26 2022] [error] [client 198.54.126.164:0] [client 198.54.126.164] ModSecurity: Access denied with code 403 (phase 2). Pattern match "/wp-config\\\\.php" at QUERY_STRING. [file "remote server"] [line "-1"] [id "410018"] [msg "Malware.Expert - query_string: unwanted wordpress config access"] [hostname "ampsstudio.com"] [uri "/wp-admin/admin-ajax.php"] [unique_id "YvjHQmxOGKKdnZSytG2gBgAAAAs"] www.ampsstudio.com [Sun Aug 14 11:01:30 2022] [error] [client 167.172.244.131:0] AH01071: Got error 'PHP message: PHP Warning: Undefined array key "HTTP_USER_AGENT" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/bookly-responsive-appointment-booking-tool/frontend/modules/booking/ShortCode.php on line 62' www.ampsstudio.com [Sun Aug 14 11:01:34 2022] [error] [client 2604:a880:800:c1::3d7:3001:0] AH01071: Got error 'PHP message: PHP Warning: include(/home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor/includes/widgets/inner-section.php): Failed to open stream: No such file or directory in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor/includes/managers/widgets.php on line 82PHP message: PHP Warning: include(): Failed opening '/home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor/includes/widgets/inner-section.php' for inclusion (include_path='.:/usr/share/pear') in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor/includes/managers/widgets.php on line 82PHP message: PHP Fatal error: Uncaught Error: Class "Elementor\\Widget_inner_section" not found in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor/includes/managers/widgets.php:88\nStack trace:\n#0 /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor/includes/managers/widgets.php(243): Elementor\\Widgets_Manager->init_widgets()\n#1 /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor/includes/managers/widgets.php(228): Elementor\\Widgets_Manager->register(Object(Elementor\\SR_SiteLogo))\n#2 /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-for-sonaar/widgets/sr-sitelogo.php(909): Elementor\\Widgets_Manager->register_widget_type(Object(Elementor\\SR_SiteLogo))\n#3 /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-for-sonaar/elementor-for-sonaar.php(225): include_once('/home/virtual/v...')\n#4 /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-includes/class-wp-hook.php...PHP message: PHP Fatal error: Uncaught Error: Class "Elementor\\Core\\Logger\\Loggers\\Logger_Interface" not found in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor/core/logger/manager.php:237\nStack trace:\n#0 /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor/core/logger/manager.php(44): Elementor\\Core\\Logger\\Manager->get_log_type_from_php_error(1)\n#1 [internal function]: Elementor\\Core\\Logger\\Manager->shutdown()\n#2 {main}\n thrown in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor/core/logger/manager.php on line 237' www.ampsstudio.com [Sun Aug 14 11:01:34 2022] [error] [client 2604:a880:800:c1::3d7:3001:0] AH01071: Got error 'PHP message: PHP Warning: include(/home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor/includes/widgets/common.php): Failed to open stream: No such file or directory in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor/includes/managers/widgets.php on line 82PHP message: PHP Warning: include(): Failed opening '/home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor/includes/widgets/common.php' for inclusion (include_path='.:/usr/share/pear') in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor/includes/managers/widgets.php on line 82PHP message: PHP Fatal error: Uncaught Error: Class "Elementor\\Widget_common" not found in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor/includes/managers/widgets.php:88\nStack trace:\n#0 /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor/includes/managers/widgets.php(243): Elementor\\Widgets_Manager->init_widgets()\n#1 /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor/includes/managers/widgets.php(228): Elementor\\Widgets_Manager->register(Object(Elementor\\SR_SiteLogo))\n#2 /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-for-sonaar/widgets/sr-sitelogo.php(909): Elementor\\Widgets_Manager->register_widget_type(Object(Elementor\\SR_SiteLogo))\n#3 /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-for-sonaar/elementor-for-sonaar.php(225): include_once('/home/virtual/v...')\n#4 /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-includes/class-wp-hook.php(307): ...PHP message: PHP Fatal error: Uncaught Error: Class "Elementor\\Core\\Logger\\Loggers\\Logger_Interface" not found in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor/core/logger/manager.php:237\nStack trace:\n#0 /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor/core/logger/manager.php(44): Elementor\\Core\\Logger\\Manager->get_log_type_from_php_error(1)\n#1 [internal function]: Elementor\\Core\\Logger\\Manager->shutdown()\n#2 {main}\n thrown in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor/core/logger/manager.php on line 237' www.ampsstudio.com [Sun Aug 14 11:01:34 2022] [error] [client 2604:a880:800:c1::3d7:3001:0] AH01071: Got error 'PHP message: PHP Fatal error: Uncaught Error: Class "Elementor\\Core\\DocumentTypes\\Post" not found in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor/core/documents-manager.php:121\nStack trace:\n#0 /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-includes/class-wp-hook.php(307): Elementor\\Core\\Documents_Manager->register_default_types(Object(Elementor\\Core\\Documents_Manager))\n#1 /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-includes/class-wp-hook.php(331): WP_Hook->apply_filters('', Array)\n#2 /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-includes/plugin.php(476): WP_Hook->do_action(Array)\n#3 /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor/core/documents-manager.php(692): do_action('elementor/docum...', Object(Elementor\\Core\\Documents_Manager))\n#4 /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor/core/documents-manager.php(177): Elementor\\Core\\Documents_Manager->register_types()\n#5 /home/virt...PHP message: PHP Fatal error: Uncaught Error: Class "Elementor\\Core\\Logger\\Loggers\\Logger_Interface" not found in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor/core/logger/manager.php:237\nStack trace:\n#0 /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor/core/logger/manager.php(44): Elementor\\Core\\Logger\\Manager->get_log_type_from_php_error(1)\n#1 [internal function]: Elementor\\Core\\Logger\\Manager->shutdown()\n#2 {main}\n thrown in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor/core/logger/manager.php on line 237' www.ampsstudio.com [Sun Aug 14 15:11:03 2022] [crit] [client 66.249.93.9:0] AH00529: /home/virtual/vps-aa3942/a/aede5353c4/public_html/.well-known/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/virtual/vps-aa3942/a/aede5353c4/public_html/.well-known/' is executable www.ampsstudio.com [Sun Aug 14 16:10:39 2022] [error] [client 178.34.151.75:0] AH01071: Got error 'PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179' www.ampsstudio.com [Sun Aug 14 16:10:39 2022] [error] [client 178.34.151.75:0] AH01071: Got error 'PHP message: PHP Warning: Cannot modify header information - headers already sent by (output started at /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-includes/functions.php:5275) in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/includes/sonaar-music/css/theme/custom-style.php on line 2' ampsstudio.com [Sun Aug 14 19:34:24 2022] [error] [client 80.76.51.29:0] AH01276: Cannot serve directory /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-admin/css/: No matching DirectoryIndex (index.php,index.html,index.htm) found, and server-generated directory index forbidden by Options directive cpanel.ampsstudio.com [Sun Aug 14 20:09:38 2022] [error] [client 92.205.56.212:0] AH01276: Cannot serve directory /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-admin/css/: No matching DirectoryIndex (index.php,index.html,index.htm) found, and server-generated directory index forbidden by Options directive ampsstudio.com [Mon Aug 15 00:37:04 2022] [error] [client 51.142.188.114:0] [client 51.142.188.114] ModSecurity: Access denied with code 403 (phase 2). Match of "contains index.php" against "REQUEST_URI" required. [file "remote server"] [line "-1"] [id "570076"] [msg "Malware.Expert - Malware"] [hostname "ampsstudio.com"] [uri "/wp-admin/admin-post.php"] [unique_id "YvmHID0AHMCUTDgkOxTf5AAAAAU"] ampsstudio.com [Mon Aug 15 00:37:19 2022] [error] [client 51.142.188.114:0] [client 51.142.188.114] ModSecurity: Access denied with code 403 (phase 2). Pattern match "/wp-content/plugins/.*/up\\\\.php" at REQUEST_URI. [file "remote server"] [line "-1"] [id "570052"] [msg "Malware.Expert - Malware"] [hostname "ampsstudio.com"] [uri "/wp-content/plugins/instabuilder2/cache/up.php"] [unique_id "YvmHL2xOGKKdnZSytG2hVwAAAAs"] ampsstudio.com [Mon Aug 15 00:54:43 2022] [error] [client 198.54.126.164:0] [client 198.54.126.164] ModSecurity: Access denied with code 403 (phase 1). Pattern match "\\\\.\\\\./\\\\.\\\\." at REQUEST_URI. [file "remote server"] [line "-1"] [id "430064"] [msg "Malware.Expert - request_uri: directory travel"] [hostname "ampsstudio.com"] [uri "/wp-admin/admin-post.php"] [unique_id "YvmLQ7L-9zfkRiCvQam_igAAAAM"] ampsstudio.com [Mon Aug 15 00:54:43 2022] [error] [client 198.54.126.164:0] [client 198.54.126.164] ModSecurity: Access denied with code 403 (phase 1). Pattern match "\\\\.\\\\./\\\\.\\\\." at REQUEST_URI. [file "remote server"] [line "-1"] [id "430064"] [msg "Malware.Expert - request_uri: directory travel"] [hostname "ampsstudio.com"] [uri "/wp-admin/admin-post.php"] [unique_id "YvmLQz0AHMCUTDgkOxTf6QAAAAU"] ampsstudio.com [Mon Aug 15 03:38:38 2022] [error] [client 20.163.75.186:0] [client 20.163.75.186] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "ampsstudio.com"] [uri "/.env"] [unique_id "YvmxrhOz22Vn-EGv28QfTAAAAAQ"] ampsstudio.com [Mon Aug 15 03:58:01 2022] [error] [client 40.124.109.223:0] [client 40.124.109.223] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "ampsstudio.com"] [uri "/.env"] [unique_id "Yvm2OR5FYZSuuoqYM0TZVwAAAAA"] www.ampsstudio.com [Mon Aug 15 06:22:10 2022] [error] [client 94.181.152.76:0] AH01071: Got error 'PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179' www.ampsstudio.com [Mon Aug 15 06:22:10 2022] [error] [client 94.181.152.76:0] AH01071: Got error 'PHP message: PHP Warning: Cannot modify header information - headers already sent by (output started at /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-includes/functions.php:5275) in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/includes/sonaar-music/css/theme/custom-style.php on line 2' www.ampsstudio.com [Mon Aug 15 07:52:14 2022] [error] [client 80.67.172.162:0] AH01071: Got error 'PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179' www.ampsstudio.com [Mon Aug 15 07:52:14 2022] [error] [client 80.67.172.162:0] AH01071: Got error 'PHP message: PHP Warning: Cannot modify header information - headers already sent by (output started at /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-includes/functions.php:5275) in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/includes/sonaar-music/css/theme/custom-style.php on line 2' www.ampsstudio.com [Mon Aug 15 08:03:55 2022] [error] [client 199.249.230.140:0] AH01071: Got error 'PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179' www.ampsstudio.com [Mon Aug 15 08:03:55 2022] [error] [client 199.249.230.140:0] AH01071: Got error 'PHP message: PHP Warning: Cannot modify header information - headers already sent by (output started at /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-includes/functions.php:5275) in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/includes/sonaar-music/css/theme/custom-style.php on line 2' ampsstudio.com [Mon Aug 15 10:00:29 2022] [error] [client 51.142.188.114:0] [client 51.142.188.114] ModSecurity: Access denied with code 403 (phase 2). Match of "contains index.php" against "REQUEST_URI" required. [file "remote server"] [line "-1"] [id "570076"] [msg "Malware.Expert - Malware"] [hostname "ampsstudio.com"] [uri "/wp-admin/admin-post.php"] [unique_id "YvoLLRuMk8V_e10VjaT1VwAAAAM"] ampsstudio.com [Mon Aug 15 10:00:54 2022] [error] [client 51.142.188.114:0] [client 51.142.188.114] ModSecurity: Access denied with code 403 (phase 2). Pattern match "/wp-content/plugins/.*/up\\\\.php" at REQUEST_URI. [file "remote server"] [line "-1"] [id "570052"] [msg "Malware.Expert - Malware"] [hostname "ampsstudio.com"] [uri "/wp-content/plugins/instabuilder2/cache/up.php"] [unique_id "YvoLRj5iC9AiLG5Bi87UmAAAAAE"] www.ampsstudio.com [Mon Aug 15 10:12:30 2022] [error] [client 138.199.59.139:0] AH01071: Got error 'PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179' www.ampsstudio.com [Mon Aug 15 10:12:30 2022] [error] [client 138.199.59.139:0] AH01071: Got error 'PHP message: PHP Warning: Cannot modify header information - headers already sent by (output started at /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-includes/functions.php:5275) in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/includes/sonaar-music/css/theme/custom-style.php on line 2' ampsstudio.com [Mon Aug 15 10:20:20 2022] [error] [client 20.0.1.204:0] AH01276: Cannot serve directory /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-admin/css/: No matching DirectoryIndex (index.php,index.html,index.htm) found, and server-generated directory index forbidden by Options directive mail.ampsstudio.com [Mon Aug 15 11:52:56 2022] [error] [client 45.132.227.173:0] [client 45.132.227.173] ModSecurity: Access denied with code 403 (phase 2). String match "/.git/config" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430058"] [msg "Malware.Expert - request_uri: .git config"] [hostname "mail.ampsstudio.com"] [uri "/.git/config"] [unique_id "YvoliB5FYZSuuoqYM0TaHAAAAAA"] ampsstudio.com [Mon Aug 15 18:04:30 2022] [error] [client 20.90.15.205:0] [client 20.90.15.205] ModSecurity: Access denied with code 403 (phase 2). String match "python" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "580100"] [msg "Malware.Expert - Wordpress - unknown python request"] [hostname "ampsstudio.com"] [uri "/wp-includes/wp-class.php"] [unique_id "Yvp8nh5FYZSuuoqYM0Ta4AAAAAA"] ampsstudio.com [Mon Aug 15 20:30:20 2022] [error] [client 20.125.150.225:0] [client 20.125.150.225] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "ampsstudio.com"] [uri "/.env"] [unique_id "YvqezBuMk8V_e10VjaT2hAAAAAM"] ampsstudio.com [Mon Aug 15 21:29:12 2022] [error] [client 20.38.47.222:0] [client 20.38.47.222] ModSecurity: Access denied with code 403 (phase 2). Match of "contains index.php" against "REQUEST_URI" required. [file "remote server"] [line "-1"] [id "570076"] [msg "Malware.Expert - Malware"] [hostname "ampsstudio.com"] [uri "/wp-plain.php"] [unique_id "YvqsmBuMk8V_e10VjaT2pwAAAAM"] www.ampsstudio.com [Mon Aug 15 21:29:17 2022] [error] [client 20.38.47.222:0] [client 20.38.47.222] ModSecurity: Access denied with code 403 (phase 2). String match "php.suspected" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430059"] [msg "Malware.Expert - request_uri: .PHP suspected files"] [hostname "www.ampsstudio.com"] [uri "/wp-content/plugins/apikey/apikey.php.suspected"] [unique_id "YvqsnROz22Vn-EGv28QhOwAAAAQ"] www.ampsstudio.com [Mon Aug 15 21:29:18 2022] [error] [client 20.38.47.222:0] [client 20.38.47.222] ModSecurity: Access denied with code 403 (phase 2). String match "php.suspected" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430059"] [msg "Malware.Expert - request_uri: .PHP suspected files"] [hostname "www.ampsstudio.com"] [uri "/plugins/content/apismtp/apismtp.php.suspected"] [unique_id "Yvqsno7nYCLqRoQ_SMNbWwAAAAo"] www.ampsstudio.com [Mon Aug 15 22:12:24 2022] [error] [client 84.38.188.16:0] AH01071: Got error 'PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179' www.ampsstudio.com [Mon Aug 15 22:12:24 2022] [error] [client 84.38.188.16:0] AH01071: Got error 'PHP message: PHP Warning: Cannot modify header information - headers already sent by (output started at /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-includes/functions.php:5275) in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/includes/sonaar-music/css/theme/custom-style.php on line 2' webdisk.ampsstudio.com [Mon Aug 15 23:06:13 2022] [error] [client 20.125.150.225:0] [client 20.125.150.225] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "webdisk.ampsstudio.com"] [uri "/.env"] [unique_id "YvrDVR5FYZSuuoqYM0TbWwAAAAA"] cpanel.ampsstudio.com [Mon Aug 15 23:50:16 2022] [error] [client 20.125.150.225:0] [client 20.125.150.225] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "cpanel.ampsstudio.com"] [uri "/.env"] [unique_id "YvrNqB5FYZSuuoqYM0TbZgAAAAA"] webmail.ampsstudio.com [Tue Aug 16 00:13:09 2022] [error] [client 20.125.150.225:0] [client 20.125.150.225] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "webmail.ampsstudio.com"] [uri "/.env"] [unique_id "YvrTBROz22Vn-EGv28QhfgAAAAQ"] ampsstudio.com [Tue Aug 16 00:28:25 2022] [error] [client 20.254.121.118:0] [client 20.254.121.118] ModSecurity: Access denied with code 403 (phase 2). Match of "contains index.php" against "REQUEST_URI" required. [file "remote server"] [line "-1"] [id "570076"] [msg "Malware.Expert - Malware"] [hostname "ampsstudio.com"] [uri "/wp-admin/admin-post.php"] [unique_id "YvrWmROz22Vn-EGv28QhhgAAAAQ"] ampsstudio.com [Tue Aug 16 00:28:40 2022] [error] [client 20.254.121.118:0] [client 20.254.121.118] ModSecurity: Access denied with code 403 (phase 2). Pattern match "/wp-content/plugins/.*/up\\\\.php" at REQUEST_URI. [file "remote server"] [line "-1"] [id "570052"] [msg "Malware.Expert - Malware"] [hostname "ampsstudio.com"] [uri "/wp-content/plugins/instabuilder2/cache/up.php"] [unique_id "YvrWqDQ0njhT4jqs3TaiMgAAAAc"] ampsstudio.com [Tue Aug 16 00:43:23 2022] [error] [client 20.150.216.72:0] [client 20.150.216.72] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "ampsstudio.com"] [uri "/.env"] [unique_id "YvraGxuMk8V_e10VjaT3BQAAAAM"] www.ampsstudio.com [Tue Aug 16 02:12:05 2022] [error] [client 137.184.75.144:0] AH01071: Got error 'PHP message: PHP Warning: Undefined array key "HTTP_USER_AGENT" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/bookly-responsive-appointment-booking-tool/frontend/modules/booking/ShortCode.php on line 62' mail.ampsstudio.com [Tue Aug 16 07:57:01 2022] [error] [client 20.125.150.225:0] [client 20.125.150.225] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "mail.ampsstudio.com"] [uri "/.env"] [unique_id "Yvs_vdqJZFnZSGYnypB1jwAAAAg"] ampsstudio.com [Tue Aug 16 09:37:29 2022] [error] [client 152.89.196.13:0] [client 152.89.196.13] ModSecurity: Access denied with code 403 (phase 2). Pattern match "/assets/images/.*\\\\.php" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430023"] [msg "Malware.Expert - request_uri: ModX - prevent PHP files from executing"] [hostname "ampsstudio.com"] [uri "/assets/images/ups.php"] [unique_id "YvtXSVHfhSjpELEW4APqEQAAAAQ"] www.ampsstudio.com [Tue Aug 16 10:12:11 2022] [error] [client 185.220.101.22:0] AH01071: Got error 'PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179' www.ampsstudio.com [Tue Aug 16 10:12:11 2022] [error] [client 185.220.101.22:0] AH01071: Got error 'PHP message: PHP Warning: Cannot modify header information - headers already sent by (output started at /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-includes/functions.php:5275) in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/includes/sonaar-music/css/theme/custom-style.php on line 2' www.ampsstudio.com [Tue Aug 16 12:08:21 2022] [error] [client 51.195.42.226:0] AH01071: Got error 'PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179' www.ampsstudio.com [Tue Aug 16 12:08:21 2022] [error] [client 51.195.42.226:0] AH01071: Got error 'PHP message: PHP Warning: Cannot modify header information - headers already sent by (output started at /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-includes/functions.php:5275) in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/includes/sonaar-music/css/theme/custom-style.php on line 2' ampsstudio.com [Tue Aug 16 12:09:52 2022] [error] [client 95.77.98.92:0] [client 95.77.98.92] ModSecurity: Access denied with code 403 (phase 2). Pattern match "/wp-content/uploads/.*\\\\.php" at REQUEST_FILENAME. [file "remote server"] [line "-1"] [id "430017"] [msg "Malware.Expert - request_uri: Wordpress - prevent PHP files from executing"] [hostname "ampsstudio.com"] [uri "/wp-content/uploads/2022/06/klp.php"] [unique_id "Yvt7APD0CmH5sKDArqzqhgAAAAU"] ampsstudio.com [Tue Aug 16 12:10:08 2022] [error] [client 95.77.98.92:0] [client 95.77.98.92] ModSecurity: Access denied with code 403 (phase 2). Pattern match "/wp-content/uploads/.*\\\\.php" at REQUEST_FILENAME. [file "remote server"] [line "-1"] [id "430017"] [msg "Malware.Expert - request_uri: Wordpress - prevent PHP files from executing"] [hostname "ampsstudio.com"] [uri "/wp-content/uploads/2022/05/klp.php"] [unique_id "Yvt7EHKiCLhTQOLAe1qougAAAAc"] ampsstudio.com [Tue Aug 16 12:11:35 2022] [error] [client 95.77.98.92:0] [client 95.77.98.92] ModSecurity: Access denied with code 403 (phase 2). Pattern match "/wp-content/uploads/.*\\\\.php" at REQUEST_FILENAME. [file "remote server"] [line "-1"] [id "430017"] [msg "Malware.Expert - request_uri: Wordpress - prevent PHP files from executing"] [hostname "ampsstudio.com"] [uri "/wp-content/uploads/2022/05/xatin.php"] [unique_id "Yvt7Z_D0CmH5sKDArqzqhwAAAAU"] ampsstudio.com [Tue Aug 16 12:13:24 2022] [error] [client 95.77.98.92:0] [client 95.77.98.92] ModSecurity: Access denied with code 403 (phase 2). Pattern match "/wp-content/uploads/.*\\\\.php" at REQUEST_FILENAME. [file "remote server"] [line "-1"] [id "430017"] [msg "Malware.Expert - request_uri: Wordpress - prevent PHP files from executing"] [hostname "ampsstudio.com"] [uri "/wp-content/uploads/2022/05/inda.php"] [unique_id "Yvt71HKiCLhTQOLAe1qowwAAAAc"] www.ampsstudio.com [Tue Aug 16 14:43:02 2022] [error] [client 185.100.86.74:0] AH01071: Got error 'PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179' www.ampsstudio.com [Tue Aug 16 14:43:02 2022] [error] [client 185.100.86.74:0] AH01071: Got error 'PHP message: PHP Warning: Cannot modify header information - headers already sent by (output started at /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-includes/functions.php:5275) in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/includes/sonaar-music/css/theme/custom-style.php on line 2' webdisk.ampsstudio.com [Tue Aug 16 15:01:03 2022] [error] [client 185.36.81.23:0] [client 185.36.81.23] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "webdisk.ampsstudio.com"] [uri "/.env"] [unique_id "YvujH9qJZFnZSGYnypB3IAAAAAg"] ampsstudio.com [Tue Aug 16 16:04:38 2022] [error] [client 68.183.28.180:0] [client 68.183.28.180] ModSecurity: Access denied with code 403 (phase 2). Match of "contains index.php" against "REQUEST_URI" required. [file "remote server"] [line "-1"] [id "570076"] [msg "Malware.Expert - Malware"] [hostname "ampsstudio.com"] [uri "/wp-plain.php"] [unique_id "YvuyBlHfhSjpELEW4APrmgAAAAQ"] www.ampsstudio.com [Tue Aug 16 16:04:43 2022] [error] [client 68.183.28.180:0] [client 68.183.28.180] ModSecurity: Access denied with code 403 (phase 2). String match "php.suspected" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430059"] [msg "Malware.Expert - request_uri: .PHP suspected files"] [hostname "www.ampsstudio.com"] [uri "/wp-content/plugins/apikey/apikey.php.suspected"] [unique_id "YvuyCydcgoO_itnuHyE7jwAAAAM"] www.ampsstudio.com [Tue Aug 16 16:04:43 2022] [error] [client 68.183.28.180:0] [client 68.183.28.180] ModSecurity: Access denied with code 403 (phase 2). String match "php.suspected" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430059"] [msg "Malware.Expert - request_uri: .PHP suspected files"] [hostname "www.ampsstudio.com"] [uri "/plugins/content/apismtp/apismtp.php.suspected"] [unique_id "YvuyC_OLN5I3EwXHQvK4vAAAAAI"] ampsstudio.com [Tue Aug 16 16:30:58 2022] [error] [client 152.89.196.13:0] [client 152.89.196.13] ModSecurity: Access denied with code 403 (phase 2). String match "/ups.php" at REQUEST_URI. [file "remote server"] [line "-1"] [id "570041"] [msg "Malware.Expert - Malware"] [hostname "ampsstudio.com"] [uri "/cache/ups.phpups.php"] [unique_id "Yvu4MvD0CmH5sKDArqzrXAAAAAU"] ampsstudio.com [Tue Aug 16 17:09:16 2022] [error] [client 152.89.196.13:0] [client 152.89.196.13] ModSecurity: Access denied with code 403 (phase 2). String match "/ups.php" at REQUEST_URI. [file "remote server"] [line "-1"] [id "570041"] [msg "Malware.Expert - Malware"] [hostname "ampsstudio.com"] [uri "/ups.php"] [unique_id "YvvBLAl3_8-mCueAxtftzgAAAAo"] cpanel.ampsstudio.com [Tue Aug 16 18:20:23 2022] [error] [client 185.36.81.23:0] [client 185.36.81.23] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "cpanel.ampsstudio.com"] [uri "/.env"] [unique_id "YvvR12POyfPP7p-3DllUZgAAAAw"] ampsstudio.com [Tue Aug 16 18:33:47 2022] [error] [client 20.168.96.42:0] [client 20.168.96.42] ModSecurity: Access denied with code 403 (phase 2). Match of "contains index.php" against "REQUEST_URI" required. [file "remote server"] [line "-1"] [id "570076"] [msg "Malware.Expert - Malware"] [hostname "ampsstudio.com"] [uri "/wp-plain.php"] [unique_id "YvvU-xUSOL7jJalZ6Ql7uAAAAAg"] ampsstudio.com [Tue Aug 16 18:33:51 2022] [error] [client 20.168.96.42:0] [client 20.168.96.42] ModSecurity: Access denied with code 403 (phase 2). Match of "contains index.php" against "REQUEST_URI" required. [file "remote server"] [line "-1"] [id "570076"] [msg "Malware.Expert - Malware"] [hostname "ampsstudio.com"] [uri "/wp-plain.php"] [unique_id "YvvU_xERxFs6S4MxiDctEQAAAAA"] www.ampsstudio.com [Tue Aug 16 18:59:19 2022] [error] [client 185.220.101.153:0] AH01071: Got error 'PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179' www.ampsstudio.com [Tue Aug 16 18:59:19 2022] [error] [client 185.220.101.153:0] AH01071: Got error 'PHP message: PHP Warning: Cannot modify header information - headers already sent by (output started at /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-includes/functions.php:5275) in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/includes/sonaar-music/css/theme/custom-style.php on line 2' www.ampsstudio.com [Wed Aug 17 00:29:12 2022] [error] [client 185.100.87.133:0] AH01071: Got error 'PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179' www.ampsstudio.com [Wed Aug 17 00:29:12 2022] [error] [client 185.100.87.133:0] AH01071: Got error 'PHP message: PHP Warning: Cannot modify header information - headers already sent by (output started at /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-includes/functions.php:5275) in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/includes/sonaar-music/css/theme/custom-style.php on line 2' ampsstudio.com [Wed Aug 17 00:34:47 2022] [error] [client 152.89.196.13:0] [client 152.89.196.13] ModSecurity: Access denied with code 403 (phase 2). String match "/ups.php" at REQUEST_URI. [file "remote server"] [line "-1"] [id "570041"] [msg "Malware.Expert - Malware"] [hostname "ampsstudio.com"] [uri "/wp-content/plugins/background-image-cropper/ups.php"] [unique_id "YvwplydcgoO_itnuHyE8bwAAAAM"] www.ampsstudio.com [Wed Aug 17 01:29:20 2022] [error] [client 207.46.13.35:0] AH01071: Got error 'PHP message: PHP Warning: Attempt to read property "ID" on null in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/includes/classes/iron_sonaar_archive.class.php on line 59PHP message: PHP Warning: Undefined array key 0 in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/includes/classes/iron_sonaar.class.php on line 212PHP message: PHP Warning: Trying to access array offset on value of type null in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/includes/classes/iron_sonaar.class.php on line 212PHP message: PHP Warning: Undefined array key 0 in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/includes/classes/iron_sonaar.class.php on line 214PHP message: PHP Warning: Trying to access array offset on value of type null in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/includes/classes/iron_sonaar.class.php on line 214PHP message: PHP Warning: Attempt to read property "ID" on null in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/includes/classes/iron_sonaar_archive.class.php on line 166PHP message: PHP Warning: Attempt to read property "post_title" on null in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/includes/classes/iron_sonaar_archive.class.php on line 302PHP message: PHP Warning: Attempt to read property "post_title" on null in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/includes/classes/iron_sonaar_archive.class.php on line 302' www.ampsstudio.com [Wed Aug 17 01:56:35 2022] [error] [client 102.37.159.6:0] [client 102.37.159.6] ModSecurity: Access denied with code 403 (phase 2). Pattern match "/wp-config\\\\.php" at QUERY_STRING. [file "remote server"] [line "-1"] [id "410018"] [msg "Malware.Expert - query_string: unwanted wordpress config access"] [hostname "www.ampsstudio.com"] [uri "/wp-admin/admin-ajax.php"] [unique_id "Yvw8w_OLN5I3EwXHQvK5wgAAAAI"] www.ampsstudio.com [Wed Aug 17 01:56:37 2022] [error] [client 102.37.159.6:0] [client 102.37.159.6] ModSecurity: Access denied with code 403 (phase 2). Pattern match "/wp-config\\\\.php" at QUERY_STRING. [file "remote server"] [line "-1"] [id "410018"] [msg "Malware.Expert - query_string: unwanted wordpress config access"] [hostname "www.ampsstudio.com"] [uri "/wp-content/plugins/mapsvg/gm_download.php"] [unique_id "Yvw8xTfdEZkFoofhkNP4XwAAAAs"] www.ampsstudio.com [Wed Aug 17 01:56:37 2022] [error] [client 102.37.159.6:0] [client 102.37.159.6] ModSecurity: Access denied with code 403 (phase 2). Pattern match "/wp-config\\\\.php" at QUERY_STRING. [file "remote server"] [line "-1"] [id "410018"] [msg "Malware.Expert - query_string: unwanted wordpress config access"] [hostname "www.ampsstudio.com"] [uri "/wp-content/plugins/mapsvg-lite-interactive-vector-maps/gm_download.php"] [unique_id "Yvw8xRUSOL7jJalZ6Ql8cwAAAAg"] www.ampsstudio.com [Wed Aug 17 01:57:00 2022] [error] [client 102.37.159.6:0] [client 102.37.159.6] ModSecurity: Access denied with code 403 (phase 2). Pattern match "/wp-config\\\\.php" at QUERY_STRING. [file "remote server"] [line "-1"] [id "410018"] [msg "Malware.Expert - query_string: unwanted wordpress config access"] [hostname "www.ampsstudio.com"] [uri "/wp-admin/admin-ajax.php"] [unique_id "Yvw83Al3_8-mCueAxtfurQAAAAo"] www.ampsstudio.com [Wed Aug 17 01:57:02 2022] [error] [client 102.37.159.6:0] [client 102.37.159.6] ModSecurity: Access denied with code 403 (phase 1). Pattern match "\\\\.\\\\./\\\\.\\\\." at REQUEST_URI. [file "remote server"] [line "-1"] [id "430064"] [msg "Malware.Expert - request_uri: directory travel"] [hostname "www.ampsstudio.com"] [uri "/wp-admin/admin-ajax.php"] [unique_id "Yvw83vD0CmH5sKDArqzsTAAAAAU"] www.ampsstudio.com [Wed Aug 17 01:57:02 2022] [error] [client 102.37.159.6:0] [client 102.37.159.6] ModSecurity: Access denied with code 403 (phase 1). Pattern match "\\\\.\\\\./\\\\.\\\\." at REQUEST_URI. [file "remote server"] [line "-1"] [id "430064"] [msg "Malware.Expert - request_uri: directory travel"] [hostname "www.ampsstudio.com"] [uri "/wp-content/plugins/post-pdf-export/dompdf/dompdf.php"] [unique_id "Yvw83vOLN5I3EwXHQvK5xQAAAAI"] www.ampsstudio.com [Wed Aug 17 01:57:02 2022] [error] [client 102.37.159.6:0] [client 102.37.159.6] ModSecurity: Access denied with code 403 (phase 1). Pattern match "\\\\.\\\\./\\\\.\\\\." at REQUEST_URI. [file "remote server"] [line "-1"] [id "430064"] [msg "Malware.Expert - request_uri: directory travel"] [hostname "www.ampsstudio.com"] [uri "/wp-content/plugins/wp-ecommerce-shop-styling/includes/download.php"] [unique_id "Yvw83hERxFs6S4MxiDctxwAAAAA"] www.ampsstudio.com [Wed Aug 17 01:57:03 2022] [error] [client 102.37.159.6:0] [client 102.37.159.6] ModSecurity: Access denied with code 403 (phase 1). Pattern match "\\\\.\\\\./\\\\.\\\\." at REQUEST_URI. [file "remote server"] [line "-1"] [id "430064"] [msg "Malware.Expert - request_uri: directory travel"] [hostname "www.ampsstudio.com"] [uri "/wp-content/plugins/cherry-plugin/admin/import-export/download-content.php"] [unique_id "Yvw831V6OfJAu2DbTMaebgAAAA4"] www.ampsstudio.com [Wed Aug 17 01:57:03 2022] [error] [client 102.37.159.6:0] [client 102.37.159.6] ModSecurity: Access denied with code 403 (phase 1). Pattern match "\\\\.\\\\./\\\\.\\\\." at REQUEST_URI. [file "remote server"] [line "-1"] [id "430064"] [msg "Malware.Expert - request_uri: directory travel"] [hostname "www.ampsstudio.com"] [uri "/wp-content/plugins/web-portal-lite-client-portal-secure-file-sharing-private-messaging/includes/libs/pdf/dompdf.php"] [unique_id "Yvw832POyfPP7p-3DllVIwAAAAw"] www.ampsstudio.com [Wed Aug 17 03:19:39 2022] [error] [client 46.148.206.226:0] AH01071: Got error 'PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179' www.ampsstudio.com [Wed Aug 17 03:19:39 2022] [error] [client 46.148.206.226:0] AH01071: Got error 'PHP message: PHP Warning: Cannot modify header information - headers already sent by (output started at /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-includes/functions.php:5275) in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/includes/sonaar-music/css/theme/custom-style.php on line 2' www.ampsstudio.com [Wed Aug 17 03:42:52 2022] [error] [client 185.67.82.114:0] AH01071: Got error 'PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179' www.ampsstudio.com [Wed Aug 17 03:42:52 2022] [error] [client 185.67.82.114:0] AH01071: Got error 'PHP message: PHP Warning: Cannot modify header information - headers already sent by (output started at /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-includes/functions.php:5275) in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/includes/sonaar-music/css/theme/custom-style.php on line 2' www.ampsstudio.com [Wed Aug 17 03:46:46 2022] [error] [client 46.148.206.226:0] AH01071: Got error 'PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179' www.ampsstudio.com [Wed Aug 17 03:46:46 2022] [error] [client 46.148.206.226:0] AH01071: Got error 'PHP message: PHP Warning: Cannot modify header information - headers already sent by (output started at /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-includes/functions.php:5275) in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/includes/sonaar-music/css/theme/custom-style.php on line 2' webdisk.ampsstudio.com [Wed Aug 17 04:34:25 2022] [error] [client 20.193.135.50:0] AH01276: Cannot serve directory /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-admin/css/: No matching DirectoryIndex (index.php,index.html,index.htm) found, and server-generated directory index forbidden by Options directive ampsstudio.com [Wed Aug 17 05:28:53 2022] [error] [client 81.169.180.242:0] [client 81.169.180.242] ModSecurity: Access denied with code 403 (phase 2). Pattern match "/wp-includes/css/.*\\\\.php" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430035"] [msg "Malware.Expert - request_uri: Wordpress - prevent PHP files from executing"] [hostname "ampsstudio.com"] [uri "/wp-includes/css/modules.php"] [unique_id "YvxuhcnianTVMqYP79EZAgAAAAI"] ampsstudio.com [Wed Aug 17 05:28:54 2022] [error] [client 81.169.180.242:0] [client 81.169.180.242] ModSecurity: Access denied with code 403 (phase 2). String match "/wso.php" at REQUEST_URI. [file "remote server"] [line "-1"] [id "570066"] [msg "Malware.Expert - PHP Command Shell (WSO)"] [hostname "ampsstudio.com"] [uri "/wso.php"] [unique_id "Yvxuhi9UEhYPnsFderUoRQAAAAo"] ampsstudio.com [Wed Aug 17 05:28:54 2022] [error] [client 81.169.180.242:0] [client 81.169.180.242] ModSecurity: Access denied with code 403 (phase 2). String match "python" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "580101"] [msg "Malware.Expert - Wordpress - unknown python request"] [hostname "ampsstudio.com"] [uri "/wp-content/plugins/upspy/index.php"] [unique_id "Yvxuhioa8xNrOHQX6liNXwAAAAw"] ampsstudio.com [Wed Aug 17 05:28:54 2022] [error] [client 81.169.180.242:0] [client 81.169.180.242] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\/wp-content\\\\/plugins\\\\/(ubh|api-wp)\\\\/" at REQUEST_URI. [file "remote server"] [line "-1"] [id "570063"] [msg "Malware.Expert - Wordpress Malware"] [hostname "ampsstudio.com"] [uri "/wp-content/plugins/ubh/index.php"] [unique_id "YvxuhmDrUQhFiIpIzbZa8wAAAAY"] ampsstudio.com [Wed Aug 17 05:28:54 2022] [error] [client 81.169.180.242:0] [client 81.169.180.242] ModSecurity: Access denied with code 403 (phase 2). String match "python" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "580101"] [msg "Malware.Expert - Wordpress - unknown python request"] [hostname "ampsstudio.com"] [uri "/wp-content/plugins/vwcleanerplugin/bump.php"] [unique_id "Yvxuhjip6yiOezEHzyQfIAAAAAQ"] ampsstudio.com [Wed Aug 17 05:28:55 2022] [error] [client 81.169.180.242:0] [client 81.169.180.242] ModSecurity: Access denied with code 403 (phase 2). String match "python" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "580101"] [msg "Malware.Expert - Wordpress - unknown python request"] [hostname "ampsstudio.com"] [uri "/wp-content/plugins/xichang/x.php"] [unique_id "Yvxuh5CrchBd2pgQuWrWnQAAAAE"] ampsstudio.com [Wed Aug 17 05:28:57 2022] [error] [client 81.169.180.242:0] [client 81.169.180.242] ModSecurity: Access denied with code 403 (phase 2). String match "python" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "580102"] [msg "Malware.Expert - Wordpress - unknown python request"] [hostname "ampsstudio.com"] [uri "/wp-admin/shapes.php"] [unique_id "YvxuiUWijFYcC-gzSZ-s1wAAAAM"] ampsstudio.com [Wed Aug 17 05:29:04 2022] [error] [client 81.169.180.242:0] [client 81.169.180.242] ModSecurity: Access denied with code 403 (phase 2). Pattern match "/wp-content/uploads/$" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430061"] [msg "Malware.Expert - Wordpress - Protect uploads diretory listing files"] [hostname "ampsstudio.com"] [uri "/wp-content/uploads/"] [unique_id "YvxukNvDk3XK1z8oTjElfAAAAAA"] ampsstudio.com [Wed Aug 17 05:29:04 2022] [error] [client 81.169.180.242:0] [client 81.169.180.242] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_HEADERS_NAMES. [file "remote server"] [line "-1"] [id "430062"] [msg "Malware.Expert - Wordpress - Protect uploads diretory listing files"] [hostname "ampsstudio.com"] [uri "/wp-content/uploads/2022/08/"] [unique_id "YvxukGDrUQhFiIpIzbZa9QAAAAY"] ampsstudio.com [Wed Aug 17 05:29:04 2022] [error] [client 81.169.180.242:0] [client 81.169.180.242] ModSecurity: Access denied with code 403 (phase 2). String match "/shell.php" at REQUEST_URI. [file "remote server"] [line "-1"] [id "570072"] [msg "Malware.Expert - PHP Command Shell"] [hostname "ampsstudio.com"] [uri "/shell.php"] [unique_id "YvxukEWijFYcC-gzSZ-s2AAAAAM"] ampsstudio.com [Wed Aug 17 05:29:05 2022] [error] [client 81.169.180.242:0] [client 81.169.180.242] ModSecurity: Access denied with code 403 (phase 2). String match "python" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "580102"] [msg "Malware.Expert - Wordpress - unknown python request"] [hostname "ampsstudio.com"] [uri "/wp-admin/network/wp-footer.php"] [unique_id "YvxukcnianTVMqYP79EZBAAAAAI"] ampsstudio.com [Wed Aug 17 05:29:05 2022] [error] [client 81.169.180.242:0] [client 81.169.180.242] ModSecurity: Access denied with code 403 (phase 2). String match "/wp-info.php" at REQUEST_URI. [file "remote server"] [line "-1"] [id "570012"] [msg "Malware.Expert - wp-info.php - Malware"] [hostname "ampsstudio.com"] [uri "/wp-info.php"] [unique_id "YvxukS9UEhYPnsFderUoRwAAAAo"] ampsstudio.com [Wed Aug 17 05:29:05 2022] [error] [client 81.169.180.242:0] [client 81.169.180.242] ModSecurity: Access denied with code 403 (phase 2). String match "python" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "580101"] [msg "Malware.Expert - Wordpress - unknown python request"] [hostname "ampsstudio.com"] [uri "/wp-content/vuln.php"] [unique_id "YvxukTip6yiOezEHzyQfIgAAAAQ"] ampsstudio.com [Wed Aug 17 05:29:07 2022] [error] [client 81.169.180.242:0] [client 81.169.180.242] ModSecurity: Access denied with code 403 (phase 2). Pattern match "/wp-content/plugins/.*/up\\\\.php" at REQUEST_URI. [file "remote server"] [line "-1"] [id "570052"] [msg "Malware.Expert - Malware"] [hostname "ampsstudio.com"] [uri "/wp-content/plugins/ppus/up.php"] [unique_id "Yvxuk-4XzO1BZW8umHf0TAAAAAc"] ampsstudio.com [Wed Aug 17 05:29:11 2022] [error] [client 81.169.180.242:0] [client 81.169.180.242] ModSecurity: Access denied with code 403 (phase 2). String match "python" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "580101"] [msg "Malware.Expert - Wordpress - unknown python request"] [hostname "ampsstudio.com"] [uri "/wp-content/plugins/theme-configurator/mini.php"] [unique_id "Yvxul-4XzO1BZW8umHf0TQAAAAc"] ampsstudio.com [Wed Aug 17 05:29:11 2022] [error] [client 81.169.180.242:0] [client 81.169.180.242] ModSecurity: Access denied with code 403 (phase 2). String match "python" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "580101"] [msg "Malware.Expert - Wordpress - unknown python request"] [hostname "ampsstudio.com"] [uri "/wp-content/plugins/widget-logic/mini.php"] [unique_id "Yvxul9Vx5jDn8tU2LPjeqwAAAAU"] ampsstudio.com [Wed Aug 17 05:29:12 2022] [error] [client 81.169.180.242:0] [client 81.169.180.242] ModSecurity: Access denied with code 403 (phase 2). String match "/wso.php" at REQUEST_URI. [file "remote server"] [line "-1"] [id "570066"] [msg "Malware.Expert - PHP Command Shell (WSO)"] [hostname "ampsstudio.com"] [uri "/wso.php"] [unique_id "YvxumGDrUQhFiIpIzbZa9gAAAAY"] ampsstudio.com [Wed Aug 17 05:29:20 2022] [error] [client 81.169.180.242:0] [client 81.169.180.242] ModSecurity: Access denied with code 403 (phase 2). Pattern match "/images/.*\\\\.php" at REQUEST_URI. [file "remote server"] [line "-1"] [id "470000"] [msg "Malware.Expert - request_uri: Images folder - prevent PHP files from executing"] [hostname "ampsstudio.com"] [uri "/images/vuln.php"] [unique_id "YvxuoKsh9NH0HC3yNkw4kAAAAAg"] ampsstudio.com [Wed Aug 17 05:29:39 2022] [error] [client 81.169.180.242:0] [client 81.169.180.242] ModSecurity: Access denied with code 403 (phase 2). String match "/shell.php" at REQUEST_URI. [file "remote server"] [line "-1"] [id "570072"] [msg "Malware.Expert - PHP Command Shell"] [hostname "ampsstudio.com"] [uri "/shell.php"] [unique_id "Yvxusyoa8xNrOHQX6liNZwAAAAw"] ampsstudio.com [Wed Aug 17 05:30:10 2022] [error] [client 81.169.180.242:0] [client 81.169.180.242] ModSecurity: Access denied with code 403 (phase 2). String match "/wso.php" at REQUEST_URI. [file "remote server"] [line "-1"] [id "570066"] [msg "Malware.Expert - PHP Command Shell (WSO)"] [hostname "ampsstudio.com"] [uri "/wso.php"] [unique_id "Yvxu0jip6yiOezEHzyQfKwAAAAQ"] ampsstudio.com [Wed Aug 17 05:30:25 2022] [error] [client 81.169.180.242:0] [client 81.169.180.242] ModSecurity: Access denied with code 403 (phase 2). String match "/shell.php" at REQUEST_URI. [file "remote server"] [line "-1"] [id "570072"] [msg "Malware.Expert - PHP Command Shell"] [hostname "ampsstudio.com"] [uri "/shell.php"] [unique_id "Yvxu4Soa8xNrOHQX6liNbgAAAAw"] www.ampsstudio.com [Wed Aug 17 06:03:34 2022] [error] [client 51.11.6.150:0] AH01071: Got error 'PHP message: PHP Warning: Undefined array key "HTTP_USER_AGENT" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/bookly-responsive-appointment-booking-tool/frontend/modules/booking/ShortCode.php on line 62' www.ampsstudio.com [Wed Aug 17 07:41:14 2022] [crit] [client 66.249.93.14:0] AH00529: /home/virtual/vps-aa3942/a/aede5353c4/public_html/.well-known/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/virtual/vps-aa3942/a/aede5353c4/public_html/.well-known/' is executable www.ampsstudio.com [Wed Aug 17 07:47:43 2022] [error] [client 23.81.50.245:0] AH01071: Got error 'PHP message: PHP Warning: Cannot modify header information - headers already sent by (output started at /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-includes/functions.php:5275) in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/includes/sonaar-music/css/theme/custom-style.php on line 2' www.ampsstudio.com [Wed Aug 17 08:18:27 2022] [error] [client 198.98.51.189:0] AH01071: Got error 'PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179' www.ampsstudio.com [Wed Aug 17 08:18:27 2022] [error] [client 198.98.51.189:0] AH01071: Got error 'PHP message: PHP Warning: Cannot modify header information - headers already sent by (output started at /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-includes/functions.php:5275) in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/includes/sonaar-music/css/theme/custom-style.php on line 2' webmail.ampsstudio.com [Wed Aug 17 08:41:59 2022] [error] [client 20.193.135.50:0] AH01276: Cannot serve directory /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-admin/css/: No matching DirectoryIndex (index.php,index.html,index.htm) found, and server-generated directory index forbidden by Options directive ampsstudio.com [Wed Aug 17 11:12:10 2022] [error] [client 152.89.196.13:0] [client 152.89.196.13] ModSecurity: Access denied with code 403 (phase 2). Pattern match "/assets/images/.*\\\\.php" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430023"] [msg "Malware.Expert - request_uri: ModX - prevent PHP files from executing"] [hostname "ampsstudio.com"] [uri "/assets/images/accesson.php"] [unique_id "Yvy--jip6yiOezEHzyQgAgAAAAQ"] www.ampsstudio.com [Wed Aug 17 11:13:54 2022] [crit] [client 66.249.93.14:0] AH00529: /home/virtual/vps-aa3942/a/aede5353c4/public_html/.well-known/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/virtual/vps-aa3942/a/aede5353c4/public_html/.well-known/' is executable www.ampsstudio.com [Wed Aug 17 11:20:16 2022] [error] [client 88.147.174.147:0] AH01071: Got error 'PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179' www.ampsstudio.com [Wed Aug 17 11:20:16 2022] [error] [client 88.147.174.147:0] AH01071: Got error 'PHP message: PHP Warning: Cannot modify header information - headers already sent by (output started at /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-includes/functions.php:5275) in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/includes/sonaar-music/css/theme/custom-style.php on line 2' www.ampsstudio.com [Wed Aug 17 12:17:56 2022] [error] [client 162.247.73.192:0] AH01071: Got error 'PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179' www.ampsstudio.com [Wed Aug 17 12:17:56 2022] [error] [client 162.247.73.192:0] AH01071: Got error 'PHP message: PHP Warning: Cannot modify header information - headers already sent by (output started at /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-includes/functions.php:5275) in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/includes/sonaar-music/css/theme/custom-style.php on line 2' ampsstudio.com [Wed Aug 17 12:47:41 2022] [error] [client 20.168.96.42:0] [client 20.168.96.42] ModSecurity: Access denied with code 403 (phase 2). Match of "contains index.php" against "REQUEST_URI" required. [file "remote server"] [line "-1"] [id "570076"] [msg "Malware.Expert - Malware"] [hostname "ampsstudio.com"] [uri "/wp-plain.php"] [unique_id "YvzVXZCrchBd2pgQuWrX2AAAAAE"] www.ampsstudio.com [Wed Aug 17 12:47:46 2022] [error] [client 20.168.96.42:0] [client 20.168.96.42] ModSecurity: Access denied with code 403 (phase 2). String match "php.suspected" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430059"] [msg "Malware.Expert - request_uri: .PHP suspected files"] [hostname "www.ampsstudio.com"] [uri "/wp-content/plugins/apikey/apikey.php.suspected"] [unique_id "YvzVYkWijFYcC-gzSZ-uCwAAAAM"] www.ampsstudio.com [Wed Aug 17 12:47:46 2022] [error] [client 20.168.96.42:0] [client 20.168.96.42] ModSecurity: Access denied with code 403 (phase 2). String match "php.suspected" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430059"] [msg "Malware.Expert - request_uri: .PHP suspected files"] [hostname "www.ampsstudio.com"] [uri "/plugins/content/apismtp/apismtp.php.suspected"] [unique_id "YvzVYpCrchBd2pgQuWrX2QAAAAE"] ampsstudio.com [Wed Aug 17 12:56:58 2022] [error] [client 20.203.177.98:0] [client 20.203.177.98] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "ampsstudio.com"] [uri "/.env"] [unique_id "YvzXii9UEhYPnsFderUpewAAAAo"] www.ampsstudio.com [Wed Aug 17 17:09:27 2022] [error] [client 82.132.218.62:0] AH01071: Got error 'PHP message: PHP Warning: Cannot modify header information - headers already sent by (output started at /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-includes/functions.php:5275) in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/includes/sonaar-music/css/theme/custom-style.php on line 2' ampsstudio.com [Wed Aug 17 17:20:47 2022] [error] [client 52.188.192.242:0] [client 52.188.192.242] ModSecurity: Access denied with code 403 (phase 2). Pattern match "/wp-content/uploads/.*\\\\.php" at REQUEST_FILENAME. [file "remote server"] [line "-1"] [id "430017"] [msg "Malware.Expert - request_uri: Wordpress - prevent PHP files from executing"] [hostname "ampsstudio.com"] [uri "/wp-content/uploads/2021/12/up.php"] [unique_id "Yv0VX5CrchBd2pgQuWrYuwAAAAE"] ampsstudio.com [Wed Aug 17 17:21:00 2022] [error] [client 52.188.192.242:0] [client 52.188.192.242] ModSecurity: Access denied with code 403 (phase 2). String match "python" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "580102"] [msg "Malware.Expert - Wordpress - unknown python request"] [hostname "ampsstudio.com"] [uri "/wp-admin/alfa.php"] [unique_id "Yv0VbDqknM9migVDXqR_FwAAAAI"] ampsstudio.com [Wed Aug 17 17:21:03 2022] [error] [client 52.188.192.242:0] [client 52.188.192.242] ModSecurity: Access denied with code 403 (phase 2). String match "python" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "580100"] [msg "Malware.Expert - Wordpress - unknown python request"] [hostname "ampsstudio.com"] [uri "/wp-includes/fw.php"] [unique_id "Yv0Vby9UEhYPnsFderUqUAAAAAo"] ampsstudio.com [Wed Aug 17 17:21:04 2022] [error] [client 52.188.192.242:0] [client 52.188.192.242] ModSecurity: Access denied with code 403 (phase 2). String match "python" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "580101"] [msg "Malware.Expert - Wordpress - unknown python request"] [hostname "ampsstudio.com"] [uri "/wp-content/fw.php"] [unique_id "Yv0VcNvDk3XK1z8oTjEnjAAAAAA"] ampsstudio.com [Wed Aug 17 17:21:05 2022] [error] [client 52.188.192.242:0] [client 52.188.192.242] ModSecurity: Access denied with code 403 (phase 2). String match "python" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "580102"] [msg "Malware.Expert - Wordpress - unknown python request"] [hostname "ampsstudio.com"] [uri "/wp-admin/fw.php"] [unique_id "Yv0VcTip6yiOezEHzyQhQQAAAAQ"] ampsstudio.com [Wed Aug 17 17:21:06 2022] [error] [client 52.188.192.242:0] [client 52.188.192.242] ModSecurity: Access denied with code 403 (phase 2). Pattern match "/wp-content/uploads/.*\\\\.php" at REQUEST_FILENAME. [file "remote server"] [line "-1"] [id "430017"] [msg "Malware.Expert - request_uri: Wordpress - prevent PHP files from executing"] [hostname "ampsstudio.com"] [uri "/wp-content/uploads/2021/12/fw.php"] [unique_id "Yv0Vcmsef5qph8JMADU-yQAAAAs"] ampsstudio.com [Wed Aug 17 17:21:07 2022] [error] [client 52.188.192.242:0] [client 52.188.192.242] ModSecurity: Access denied with code 403 (phase 2). String match "/wso.php" at REQUEST_URI. [file "remote server"] [line "-1"] [id "570066"] [msg "Malware.Expert - PHP Command Shell (WSO)"] [hostname "ampsstudio.com"] [uri "/wp-includes/wso.php"] [unique_id "Yv0Vc4W4c-DBlItKLDSsAwAAAAM"] ampsstudio.com [Wed Aug 17 17:21:08 2022] [error] [client 52.188.192.242:0] [client 52.188.192.242] ModSecurity: Access denied with code 403 (phase 2). String match "/wso.php" at REQUEST_URI. [file "remote server"] [line "-1"] [id "570066"] [msg "Malware.Expert - PHP Command Shell (WSO)"] [hostname "ampsstudio.com"] [uri "/wp-content/wso.php"] [unique_id "Yv0VdGDrUQhFiIpIzbZdBAAAAAY"] ampsstudio.com [Wed Aug 17 17:21:09 2022] [error] [client 52.188.192.242:0] [client 52.188.192.242] ModSecurity: Access denied with code 403 (phase 2). String match "/wso.php" at REQUEST_URI. [file "remote server"] [line "-1"] [id "570066"] [msg "Malware.Expert - PHP Command Shell (WSO)"] [hostname "ampsstudio.com"] [uri "/wp-admin/wso.php"] [unique_id "Yv0Vdaqjfc6CG7lBtLKLKgAAAAg"] ampsstudio.com [Wed Aug 17 17:21:18 2022] [error] [client 52.188.192.242:0] [client 52.188.192.242] ModSecurity: Access denied with code 403 (phase 2). String match "/shell.php" at REQUEST_URI. [file "remote server"] [line "-1"] [id "570072"] [msg "Malware.Expert - PHP Command Shell"] [hostname "ampsstudio.com"] [uri "/shell.php"] [unique_id "Yv0VfoW4c-DBlItKLDSsBAAAAAM"] ampsstudio.com [Wed Aug 17 17:21:20 2022] [error] [client 52.188.192.242:0] [client 52.188.192.242] ModSecurity: Access denied with code 403 (phase 2). String match "connector.minimal.php" at REQUEST_URI. [file "remote server"] [line "-1"] [id "500083"] [msg "Malware.Expert - request_uri: 0-Day - Wordpress filemanager plugin"] [hostname "ampsstudio.com"] [uri "/wp-content/plugins/wp-file-manager/lib/php/connector.minimal.php"] [unique_id "Yv0VgGDrUQhFiIpIzbZdBQAAAAY"] ampsstudio.com [Wed Aug 17 18:44:04 2022] [error] [client 152.89.196.13:0] [client 152.89.196.13] ModSecurity: Access denied with code 403 (phase 2). Pattern match "/wp-content/uploads/.*\\\\.php" at REQUEST_FILENAME. [file "remote server"] [line "-1"] [id "430017"] [msg "Malware.Expert - request_uri: Wordpress - prevent PHP files from executing"] [hostname "ampsstudio.com"] [uri "/wp-content/uploads/wp-blockup.php"] [unique_id "Yv0o5DqknM9migVDXqR_TwAAAAI"] www.ampsstudio.com [Wed Aug 17 18:59:18 2022] [error] [client 82.223.14.245:0] AH01071: Got error 'PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179' www.ampsstudio.com [Wed Aug 17 18:59:18 2022] [error] [client 82.223.14.245:0] AH01071: Got error 'PHP message: PHP Warning: Cannot modify header information - headers already sent by (output started at /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-includes/functions.php:5275) in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/includes/sonaar-music/css/theme/custom-style.php on line 2' mail.ampsstudio.com [Wed Aug 17 20:35:18 2022] [error] [client 185.36.81.23:0] [client 185.36.81.23] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "mail.ampsstudio.com"] [uri "/.env"] [unique_id "Yv1C9tvDk3XK1z8oTjEn8wAAAAA"] ampsstudio.com [Wed Aug 17 20:55:52 2022] [error] [client 20.168.39.124:0] AH01276: Cannot serve directory /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-admin/css/: No matching DirectoryIndex (index.php,index.html,index.htm) found, and server-generated directory index forbidden by Options directive www.ampsstudio.com [Wed Aug 17 21:20:25 2022] [error] [client 66.249.76.47:0] AH01071: Got error 'PHP message: PHP Warning: Attempt to read property "ID" on null in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/archive-event.php on line 15PHP message: PHP Warning: Undefined array key 0 in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/includes/classes/iron_sonaar.class.php on line 212PHP message: PHP Warning: Trying to access array offset on value of type null in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/includes/classes/iron_sonaar.class.php on line 212PHP message: PHP Warning: Undefined array key 0 in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/includes/classes/iron_sonaar.class.php on line 214PHP message: PHP Warning: Trying to access array offset on value of type null in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/includes/classes/iron_sonaar.class.php on line 214' ampsstudio.com [Wed Aug 17 23:39:46 2022] [error] [client 152.89.196.13:0] [client 152.89.196.13] ModSecurity: Access denied with code 403 (phase 2). Pattern match "/wp-content/uploads/.*\\\\.php" at REQUEST_FILENAME. [file "remote server"] [line "-1"] [id "430017"] [msg "Malware.Expert - request_uri: Wordpress - prevent PHP files from executing"] [hostname "ampsstudio.com"] [uri "/wp-content/uploads/wp-blockup.php"] [unique_id "Yv1uMmsef5qph8JMADU_jAAAAAs"] cpanel.ampsstudio.com [Thu Aug 18 01:17:53 2022] [error] [client 20.193.135.50:0] AH01276: Cannot serve directory /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-admin/css/: No matching DirectoryIndex (index.php,index.html,index.htm) found, and server-generated directory index forbidden by Options directive www.ampsstudio.com [Thu Aug 18 01:54:03 2022] [error] [client 104.144.117.32:0] AH01071: Got error 'PHP message: PHP Warning: Cannot modify header information - headers already sent by (output started at /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-includes/functions.php:5275) in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/includes/sonaar-music/css/theme/custom-style.php on line 2' mail.ampsstudio.com [Thu Aug 18 02:19:24 2022] [error] [client 20.193.135.50:0] AH01276: Cannot serve directory /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-admin/css/: No matching DirectoryIndex (index.php,index.html,index.htm) found, and server-generated directory index forbidden by Options directive ampsstudio.com [Thu Aug 18 02:59:29 2022] [error] [client 20.193.135.50:0] AH01276: Cannot serve directory /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-admin/css/: No matching DirectoryIndex (index.php,index.html,index.htm) found, and server-generated directory index forbidden by Options directive www.ampsstudio.com [Thu Aug 18 04:18:19 2022] [crit] [client 66.249.92.50:0] AH00529: /home/virtual/vps-aa3942/a/aede5353c4/public_html/.well-known/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/virtual/vps-aa3942/a/aede5353c4/public_html/.well-known/' is executable ampsstudio.com [Thu Aug 18 04:18:57 2022] [error] [client 152.89.196.13:0] [client 152.89.196.13] ModSecurity: Access denied with code 403 (phase 2). Pattern match "/wp-content/uploads/.*\\\\.php" at REQUEST_FILENAME. [file "remote server"] [line "-1"] [id "430017"] [msg "Malware.Expert - request_uri: Wordpress - prevent PHP files from executing"] [hostname "ampsstudio.com"] [uri "/wp-content/uploads/wp-blockdown.php"] [unique_id "Yv2voaGPhUHVTXEB0uwKogAAAAg"] ampsstudio.com [Thu Aug 18 04:21:38 2022] [error] [client 152.89.196.13:0] [client 152.89.196.13] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_HEADERS_NAMES. [file "remote server"] [line "-1"] [id "580001"] [msg "Malware.Expert - Wordpress - Referer missing"] [hostname "ampsstudio.com"] [uri "/wp-content/themes/twentyfive/get.php"] [unique_id "Yv2wQgjLhdkZ-9N83B-uzwAAAAA"] ampsstudio.com [Thu Aug 18 04:47:50 2022] [error] [client 152.89.196.13:0] [client 152.89.196.13] ModSecurity: Access denied with code 403 (phase 2). String match "/ups.php" at REQUEST_URI. [file "remote server"] [line "-1"] [id "570041"] [msg "Malware.Expert - Malware"] [hostname "ampsstudio.com"] [uri "/sites/default/files/ups.phpups.php"] [unique_id "Yv22Zq1cHAvlFgU0tNAlOgAAAAo"] ampsstudio.com [Thu Aug 18 05:03:30 2022] [error] [client 152.89.196.13:0] [client 152.89.196.13] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_HEADERS_NAMES. [file "remote server"] [line "-1"] [id "580001"] [msg "Malware.Expert - Wordpress - Referer missing"] [hostname "ampsstudio.com"] [uri "/wp-content/themes/sketch/get.php"] [unique_id "Yv26EsQoi3sccujrX0sVhAAAAAE"] ampsstudio.com [Thu Aug 18 05:26:20 2022] [error] [client 152.89.196.13:0] [client 152.89.196.13] ModSecurity: Access denied with code 403 (phase 2). Pattern match "/assets/images/.*\\\\.php" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430023"] [msg "Malware.Expert - request_uri: ModX - prevent PHP files from executing"] [hostname "ampsstudio.com"] [uri "/assets/images/1.php"] [unique_id "Yv2_bMgrmo-4YXoZn3MFXwAAAAU"] ampsstudio.com [Thu Aug 18 05:52:11 2022] [error] [client 152.89.196.13:0] [client 152.89.196.13] ModSecurity: Access denied with code 403 (phase 2). Pattern match "/\\\\..+\\\\.php" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430015"] [msg "Malware.Expert - request_uri: hidden .php execute"] [hostname "ampsstudio.com"] [uri "/.quarantine/wp-blockup.php"] [unique_id "Yv3Fe6GPhUHVTXEB0uwKygAAAAg"] ampsstudio.com [Thu Aug 18 06:32:30 2022] [error] [client 152.89.196.13:0] [client 152.89.196.13] ModSecurity: Access denied with code 403 (phase 2). Pattern match "/wp-content/uploads/.*\\\\.php" at REQUEST_FILENAME. [file "remote server"] [line "-1"] [id "430017"] [msg "Malware.Expert - request_uri: Wordpress - prevent PHP files from executing"] [hostname "ampsstudio.com"] [uri "/wp-content/uploads/2022/02/ups.phpups.php"] [unique_id "Yv3O7q1cHAvlFgU0tNAlbwAAAAo"] ampsstudio.com [Thu Aug 18 06:56:59 2022] [error] [client 3.239.76.156:0] [client 3.239.76.156] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "ampsstudio.com"] [uri "/.env"] [unique_id "Yv3Uq9k3BQpAhhPetBlcSQAAAAI"] ampsstudio.com [Thu Aug 18 06:57:03 2022] [error] [client 3.239.76.156:0] [client 3.239.76.156] ModSecurity: Access denied with code 403 (phase 2). String match "/Util/PHP/eval-stdin.php" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430046"] [msg "Malware.Expert - request_uri: CVE-2017-9841"] [hostname "ampsstudio.com"] [uri "/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php"] [unique_id "Yv3Ur61cHAvlFgU0tNAleQAAAAo"] ampsstudio.com [Thu Aug 18 07:21:11 2022] [error] [client 152.89.196.13:0] [client 152.89.196.13] ModSecurity: Access denied with code 403 (phase 2). Pattern match "/\\\\..+\\\\.php" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430015"] [msg "Malware.Expert - request_uri: hidden .php execute"] [hostname "ampsstudio.com"] [uri "/.tmb/wp-blockup.php"] [unique_id "Yv3aV6GPhUHVTXEB0uwK9wAAAAg"] ampsstudio.com [Thu Aug 18 07:50:31 2022] [error] [client 152.89.196.13:0] [client 152.89.196.13] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_HEADERS_NAMES. [file "remote server"] [line "-1"] [id "580001"] [msg "Malware.Expert - Wordpress - Referer missing"] [hostname "ampsstudio.com"] [uri "/wp-content/plugins/welcome-to-wordpress/resources/web.config/wp-blockup.php"] [unique_id "Yv3hN8QjiqQk7EiT4KjKJQAAAAQ"] ampsstudio.com [Thu Aug 18 08:01:45 2022] [error] [client 152.89.196.13:0] [client 152.89.196.13] ModSecurity: Access denied with code 403 (phase 2). Pattern match "/wp-content/uploads/.*\\\\.php" at REQUEST_FILENAME. [file "remote server"] [line "-1"] [id "430017"] [msg "Malware.Expert - request_uri: Wordpress - prevent PHP files from executing"] [hostname "ampsstudio.com"] [uri "/wp-content/uploads/2020/12/ups.phpups.php"] [unique_id "Yv3j2SkHIU4egJD1-wbLHwAAAAY"] mail.ampsstudio.com [Thu Aug 18 08:24:31 2022] [error] [client 20.168.39.124:0] AH01276: Cannot serve directory /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-admin/css/: No matching DirectoryIndex (index.php,index.html,index.htm) found, and server-generated directory index forbidden by Options directive ampsstudio.com [Thu Aug 18 10:22:03 2022] [error] [client 3.239.76.156:0] [client 3.239.76.156] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "ampsstudio.com"] [uri "/.env"] [unique_id "Yv4EuxMvqHdomRUEKrIvOgAAAAs"] ampsstudio.com [Thu Aug 18 10:22:08 2022] [error] [client 3.239.76.156:0] [client 3.239.76.156] ModSecurity: Access denied with code 403 (phase 2). String match "/Util/PHP/eval-stdin.php" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430046"] [msg "Malware.Expert - request_uri: CVE-2017-9841"] [hostname "ampsstudio.com"] [uri "/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php"] [unique_id "Yv4EwH7xBwkxBT8wsJl0hgAAAAk"] ampsstudio.com [Thu Aug 18 11:02:06 2022] [error] [client 152.89.196.13:0] [client 152.89.196.13] ModSecurity: Access denied with code 403 (phase 2). Pattern match "/\\\\..+\\\\.php" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430015"] [msg "Malware.Expert - request_uri: hidden .php execute"] [hostname "ampsstudio.com"] [uri "/wp-content/mu-plugins/.06e0f.php"] [unique_id "Yv4OHsgrmo-4YXoZn3MGrAAAAAU"] ampsstudio.com [Thu Aug 18 11:13:37 2022] [error] [client 3.239.76.156:0] [client 3.239.76.156] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "ampsstudio.com"] [uri "/.env"] [unique_id "Yv4Q0aGPhUHVTXEB0uwMIQAAAAg"] ampsstudio.com [Thu Aug 18 11:13:40 2022] [error] [client 3.239.76.156:0] [client 3.239.76.156] ModSecurity: Access denied with code 403 (phase 2). String match "/Util/PHP/eval-stdin.php" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430046"] [msg "Malware.Expert - request_uri: CVE-2017-9841"] [hostname "ampsstudio.com"] [uri "/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php"] [unique_id "Yv4Q1H7xBwkxBT8wsJl0pgAAAAk"] www.ampsstudio.com [Thu Aug 18 12:10:00 2022] [error] [client 207.46.13.35:0] AH01071: Got error 'PHP message: PHP Fatal error: Uncaught Error: Class "Iron_sonaar_Archive" not found in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/index.php:3\nStack trace:\n#0 {main}\n thrown in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/index.php on line 3' www.ampsstudio.com [Thu Aug 18 12:20:46 2022] [error] [client 185.220.100.254:0] AH01071: Got error 'PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179' www.ampsstudio.com [Thu Aug 18 12:20:46 2022] [error] [client 185.220.100.254:0] AH01071: Got error 'PHP message: PHP Warning: Cannot modify header information - headers already sent by (output started at /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-includes/functions.php:5275) in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/includes/sonaar-music/css/theme/custom-style.php on line 2' ampsstudio.com [Thu Aug 18 12:34:56 2022] [error] [client 3.239.76.156:0] [client 3.239.76.156] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "ampsstudio.com"] [uri "/.env"] [unique_id "Yv4j4Mgrmo-4YXoZn3MG9wAAAAU"] ampsstudio.com [Thu Aug 18 12:34:59 2022] [error] [client 3.239.76.156:0] [client 3.239.76.156] ModSecurity: Access denied with code 403 (phase 2). String match "/Util/PHP/eval-stdin.php" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430046"] [msg "Malware.Expert - request_uri: CVE-2017-9841"] [hostname "ampsstudio.com"] [uri "/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php"] [unique_id "Yv4j49k3BQpAhhPetBldwAAAAAI"] ampsstudio.com [Thu Aug 18 12:44:02 2022] [error] [client 3.239.76.156:0] [client 3.239.76.156] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "ampsstudio.com"] [uri "/.env"] [unique_id "Yv4mAsQoi3sccujrX0sXQwAAAAE"] ampsstudio.com [Thu Aug 18 12:44:06 2022] [error] [client 3.239.76.156:0] [client 3.239.76.156] ModSecurity: Access denied with code 403 (phase 2). String match "/Util/PHP/eval-stdin.php" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430046"] [msg "Malware.Expert - request_uri: CVE-2017-9841"] [hostname "ampsstudio.com"] [uri "/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php"] [unique_id "Yv4mBsQjiqQk7EiT4KjLtwAAAAQ"] www.ampsstudio.com [Thu Aug 18 13:32:10 2022] [error] [client 138.68.104.176:0] [client 138.68.104.176] ModSecurity: Access denied with code 403 (phase 2). String match "php.suspected" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430059"] [msg "Malware.Expert - request_uri: .PHP suspected files"] [hostname "www.ampsstudio.com"] [uri "/votes.php.suspected"] [unique_id "Yv4xSikHIU4egJD1-wbM8gAAAAY"] www.ampsstudio.com [Thu Aug 18 13:32:11 2022] [error] [client 138.68.104.176:0] [client 138.68.104.176] ModSecurity: Access denied with code 403 (phase 2). String match "php.suspected" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430059"] [msg "Malware.Expert - request_uri: .PHP suspected files"] [hostname "www.ampsstudio.com"] [uri "/votes.php.suspected"] [unique_id "Yv4xS8OqyAZtu3JZkIzLkAAAAAk"] www.ampsstudio.com [Thu Aug 18 13:32:12 2022] [error] [client 138.68.104.176:0] [client 138.68.104.176] ModSecurity: Access denied with code 403 (phase 2). String match "php.suspected" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430059"] [msg "Malware.Expert - request_uri: .PHP suspected files"] [hostname "www.ampsstudio.com"] [uri "/wp-includes/ms-cache.php.suspected"] [unique_id "Yv4xTAVR1-YK1Bdd6njKbgAAAAc"] www.ampsstudio.com [Thu Aug 18 13:32:13 2022] [error] [client 138.68.104.176:0] [client 138.68.104.176] ModSecurity: Access denied with code 403 (phase 2). String match "php.suspected" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430059"] [msg "Malware.Expert - request_uri: .PHP suspected files"] [hostname "www.ampsstudio.com"] [uri "/wp-includes/ms-cache.php.suspected"] [unique_id "Yv4xTcgrmo-4YXoZn3MHYQAAAAU"] www.ampsstudio.com [Thu Aug 18 13:32:13 2022] [error] [client 138.68.104.176:0] [client 138.68.104.176] ModSecurity: Access denied with code 403 (phase 2). String match "php.suspected" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430059"] [msg "Malware.Expert - request_uri: .PHP suspected files"] [hostname "www.ampsstudio.com"] [uri "/2index.php.suspected"] [unique_id "Yv4xTcQoi3sccujrX0sXnAAAAAE"] www.ampsstudio.com [Thu Aug 18 13:32:14 2022] [error] [client 138.68.104.176:0] [client 138.68.104.176] ModSecurity: Access denied with code 403 (phase 2). String match "php.suspected" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430059"] [msg "Malware.Expert - request_uri: .PHP suspected files"] [hostname "www.ampsstudio.com"] [uri "/load.php.suspected"] [unique_id "Yv4xTikHIU4egJD1-wbM8wAAAAY"] www.ampsstudio.com [Thu Aug 18 13:32:15 2022] [error] [client 138.68.104.176:0] [client 138.68.104.176] ModSecurity: Access denied with code 403 (phase 2). String match "php.suspected" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430059"] [msg "Malware.Expert - request_uri: .PHP suspected files"] [hostname "www.ampsstudio.com"] [uri "/admin.php.suspected"] [unique_id "Yv4xTwjLhdkZ-9N83B-xBwAAAAA"] ampsstudio.com [Thu Aug 18 13:48:13 2022] [error] [client 40.86.9.251:0] [client 40.86.9.251] ModSecurity: Access denied with code 403 (phase 2). Pattern match "/wp-includes/css/.*\\\\.php" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430035"] [msg "Malware.Expert - request_uri: Wordpress - prevent PHP files from executing"] [hostname "ampsstudio.com"] [uri "/wp-includes/css/css.php"] [unique_id "Yv41DRMvqHdomRUEKrIwNAAAAAs"] ampsstudio.com [Thu Aug 18 13:48:23 2022] [error] [client 40.86.9.251:0] [client 40.86.9.251] ModSecurity: Access denied with code 403 (phase 2). Pattern match "/wp-includes/images/.*\\\\.php" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430032"] [msg "Malware.Expert - request_uri: Wordpress - prevent PHP files from executing"] [hostname "ampsstudio.com"] [uri "/wp-includes/images/css.php"] [unique_id "Yv41F8grmo-4YXoZn3MHdAAAAAU"] ampsstudio.com [Thu Aug 18 13:50:14 2022] [error] [client 40.86.9.251:0] [client 40.86.9.251] ModSecurity: Access denied with code 403 (phase 2). String match "/wp-1ogin_bak.php" at REQUEST_URI. [file "remote server"] [line "-1"] [id "570040"] [msg "Malware.Expert - Malware"] [hostname "ampsstudio.com"] [uri "/wp-1ogin_bak.php"] [unique_id "Yv41hqGPhUHVTXEB0uwM-wAAAAg"] www.ampsstudio.com [Thu Aug 18 16:21:47 2022] [crit] [client 66.249.93.14:0] AH00529: /home/virtual/vps-aa3942/a/aede5353c4/public_html/.well-known/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/virtual/vps-aa3942/a/aede5353c4/public_html/.well-known/' is executable www.ampsstudio.com [Thu Aug 18 16:36:57 2022] [error] [client 49.205.134.255:0] AH01071: Got error 'PHP message: PHP Warning: Cannot modify header information - headers already sent by (output started at /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-includes/functions.php:5275) in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/includes/sonaar-music/css/theme/custom-style.php on line 2' mail.ampsstudio.com [Thu Aug 18 17:10:44 2022] [error] [client 185.74.5.84:0] [client 185.74.5.84] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "mail.ampsstudio.com"] [uri "/.env"] [unique_id "Yv5khKGPhUHVTXEB0uwOBwAAAAg"] www.ampsstudio.com [Thu Aug 18 18:09:05 2022] [error] [client 185.255.96.99:0] AH01071: Got error 'PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179' www.ampsstudio.com [Thu Aug 18 18:09:05 2022] [error] [client 185.255.96.99:0] AH01071: Got error 'PHP message: PHP Warning: Cannot modify header information - headers already sent by (output started at /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-includes/functions.php:5275) in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/includes/sonaar-music/css/theme/custom-style.php on line 2' ampsstudio.com [Thu Aug 18 19:28:25 2022] [error] [client 3.239.76.156:0] [client 3.239.76.156] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "ampsstudio.com"] [uri "/.env"] [unique_id "Yv6EyRMvqHdomRUEKrIxoAAAAAs"] ampsstudio.com [Thu Aug 18 19:28:25 2022] [error] [client 3.239.76.156:0] [client 3.239.76.156] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "ampsstudio.com"] [uri "/.env.bak"] [unique_id "Yv6EyaGPhUHVTXEB0uwOaAAAAAg"] ampsstudio.com [Thu Aug 18 19:28:29 2022] [error] [client 3.239.76.156:0] [client 3.239.76.156] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "ampsstudio.com"] [uri "/laravel/.env"] [unique_id "Yv6EzQjLhdkZ-9N83B-yiwAAAAA"] ampsstudio.com [Thu Aug 18 19:28:29 2022] [error] [client 3.239.76.156:0] [client 3.239.76.156] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "ampsstudio.com"] [uri "/local/.env"] [unique_id "Yv6Ezc527HTLIrQUJjh0GAAAAAM"] ampsstudio.com [Thu Aug 18 19:28:30 2022] [error] [client 3.239.76.156:0] [client 3.239.76.156] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "ampsstudio.com"] [uri "/cgi-bin/.env"] [unique_id "Yv6EzhMvqHdomRUEKrIxoQAAAAs"] ampsstudio.com [Thu Aug 18 19:28:30 2022] [error] [client 3.239.76.156:0] [client 3.239.76.156] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "ampsstudio.com"] [uri "/backend/.env"] [unique_id "Yv6EzqGPhUHVTXEB0uwOaQAAAAg"] ampsstudio.com [Thu Aug 18 19:28:34 2022] [error] [client 3.239.76.156:0] [client 3.239.76.156] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "ampsstudio.com"] [uri "/protected/.env"] [unique_id "Yv6E0qBNa0c8NJxsH5B0bAAAAAI"] ampsstudio.com [Thu Aug 18 19:28:34 2022] [error] [client 3.239.76.156:0] [client 3.239.76.156] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "ampsstudio.com"] [uri "/database/.env"] [unique_id "Yv6E0hyc2LnOyQx5wH9dVgAAABM"] ampsstudio.com [Thu Aug 18 19:28:34 2022] [error] [client 3.239.76.156:0] [client 3.239.76.156] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "ampsstudio.com"] [uri "/public/.env"] [unique_id "Yv6E0gjLhdkZ-9N83B-yjAAAAAA"] ampsstudio.com [Thu Aug 18 19:28:35 2022] [error] [client 3.239.76.156:0] [client 3.239.76.156] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "ampsstudio.com"] [uri "/app/config/.env"] [unique_id "Yv6E08527HTLIrQUJjh0GQAAAAM"] ampsstudio.com [Thu Aug 18 19:28:35 2022] [error] [client 3.239.76.156:0] [client 3.239.76.156] ModSecurity: Access denied with code 403 (phase 2). String match ".aws/credentials" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430069"] [msg "Malware.Expert - request_uri: AWS Credentials"] [hostname "ampsstudio.com"] [uri "/.aws/credentials"] [unique_id "Yv6E0xMvqHdomRUEKrIxogAAAAs"] webdisk.ampsstudio.com [Thu Aug 18 21:25:28 2022] [error] [client 20.168.39.124:0] AH01276: Cannot serve directory /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-admin/css/: No matching DirectoryIndex (index.php,index.html,index.htm) found, and server-generated directory index forbidden by Options directive webdisk.ampsstudio.com [Thu Aug 18 22:18:48 2022] [error] [client 168.61.6.7:0] [client 168.61.6.7] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "webdisk.ampsstudio.com"] [uri "/.env"] [unique_id "Yv6suEQS5MiUHXTK5_ETIAAAAAM"] webmail.ampsstudio.com [Thu Aug 18 23:16:59 2022] [error] [client 168.61.6.7:0] [client 168.61.6.7] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "webmail.ampsstudio.com"] [uri "/.env"] [unique_id "Yv66W6GPhUHVTXEB0uwO7AAAAAg"] ampsstudio.com [Thu Aug 18 23:36:07 2022] [error] [client 3.239.76.156:0] [client 3.239.76.156] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "ampsstudio.com"] [uri "/.env"] [unique_id "Yv6-18bGgUOaAmEwOkU0HwAAAAU"] ampsstudio.com [Thu Aug 18 23:36:08 2022] [error] [client 3.239.76.156:0] [client 3.239.76.156] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "ampsstudio.com"] [uri "/.env.bak"] [unique_id "Yv6-2NpFDGiBtx6xwgLs0QAAABA"] ampsstudio.com [Thu Aug 18 23:36:10 2022] [error] [client 3.239.76.156:0] [client 3.239.76.156] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "ampsstudio.com"] [uri "/laravel/.env"] [unique_id "Yv6-2kvw5jwv6jvPoBMBjwAAAA4"] ampsstudio.com [Thu Aug 18 23:36:10 2022] [error] [client 3.239.76.156:0] [client 3.239.76.156] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "ampsstudio.com"] [uri "/local/.env"] [unique_id "Yv6-2sQoi3sccujrX0sZuAAAAAE"] ampsstudio.com [Thu Aug 18 23:36:11 2022] [error] [client 3.239.76.156:0] [client 3.239.76.156] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "ampsstudio.com"] [uri "/cgi-bin/.env"] [unique_id "Yv6-26BNa0c8NJxsH5B09AAAAAI"] ampsstudio.com [Thu Aug 18 23:36:11 2022] [error] [client 3.239.76.156:0] [client 3.239.76.156] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "ampsstudio.com"] [uri "/backend/.env"] [unique_id "Yv6-20QS5MiUHXTK5_ETRAAAAAM"] ampsstudio.com [Thu Aug 18 23:36:14 2022] [error] [client 3.239.76.156:0] [client 3.239.76.156] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "ampsstudio.com"] [uri "/protected/.env"] [unique_id "Yv6-3kPL2oqxtQhKXq_46AAAAAQ"] ampsstudio.com [Thu Aug 18 23:36:15 2022] [error] [client 3.239.76.156:0] [client 3.239.76.156] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "ampsstudio.com"] [uri "/database/.env"] [unique_id "Yv6-3xyc2LnOyQx5wH9d3AAAABM"] ampsstudio.com [Thu Aug 18 23:36:15 2022] [error] [client 3.239.76.156:0] [client 3.239.76.156] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "ampsstudio.com"] [uri "/public/.env"] [unique_id "Yv6-30vw5jwv6jvPoBMBkAAAAA4"] ampsstudio.com [Thu Aug 18 23:36:15 2022] [error] [client 3.239.76.156:0] [client 3.239.76.156] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "ampsstudio.com"] [uri "/app/config/.env"] [unique_id "Yv6-36BNa0c8NJxsH5B09QAAAAI"] ampsstudio.com [Thu Aug 18 23:36:16 2022] [error] [client 3.239.76.156:0] [client 3.239.76.156] ModSecurity: Access denied with code 403 (phase 2). String match ".aws/credentials" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430069"] [msg "Malware.Expert - request_uri: AWS Credentials"] [hostname "ampsstudio.com"] [uri "/.aws/credentials"] [unique_id "Yv6-4EQS5MiUHXTK5_ETRQAAAAM"] www.ampsstudio.com [Thu Aug 18 23:53:05 2022] [error] [client 5.227.27.9:0] AH01071: Got error 'PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179' www.ampsstudio.com [Thu Aug 18 23:53:05 2022] [error] [client 5.227.27.9:0] AH01071: Got error 'PHP message: PHP Warning: Cannot modify header information - headers already sent by (output started at /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-includes/functions.php:5275) in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/includes/sonaar-music/css/theme/custom-style.php on line 2' www.ampsstudio.com [Fri Aug 19 00:01:08 2022] [error] [client 95.79.135.99:0] AH01071: Got error 'PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179' www.ampsstudio.com [Fri Aug 19 00:01:08 2022] [error] [client 95.79.135.99:0] AH01071: Got error 'PHP message: PHP Warning: Cannot modify header information - headers already sent by (output started at /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-includes/functions.php:5275) in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/includes/sonaar-music/css/theme/custom-style.php on line 2' webmail.ampsstudio.com [Fri Aug 19 07:02:30 2022] [error] [client 3.226.244.247:0] [client 3.226.244.247] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "webmail.ampsstudio.com"] [uri "/.env"] [unique_id "Yv8ndueixga_-ocRC19hfwAAAAE"] webmail.ampsstudio.com [Fri Aug 19 07:02:36 2022] [error] [client 3.226.244.247:0] [client 3.226.244.247] ModSecurity: Access denied with code 403 (phase 2). String match "/Util/PHP/eval-stdin.php" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430046"] [msg "Malware.Expert - request_uri: CVE-2017-9841"] [hostname "webmail.ampsstudio.com"] [uri "/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php"] [unique_id "Yv8nfLYUm0evOrm4HvMHiQAAAAI"] www.ampsstudio.com [Fri Aug 19 08:38:01 2022] [error] [client 154.6.18.137:0] AH01071: Got error 'PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179' www.ampsstudio.com [Fri Aug 19 08:38:01 2022] [error] [client 154.6.18.137:0] AH01071: Got error 'PHP message: PHP Warning: Cannot modify header information - headers already sent by (output started at /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-includes/functions.php:5275) in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/includes/sonaar-music/css/theme/custom-style.php on line 2' www.ampsstudio.com [Fri Aug 19 10:30:16 2022] [error] [client 45.82.179.75:0] AH01071: Got error 'PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179' www.ampsstudio.com [Fri Aug 19 10:30:16 2022] [error] [client 45.82.179.75:0] AH01071: Got error 'PHP message: PHP Warning: Cannot modify header information - headers already sent by (output started at /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-includes/functions.php:5275) in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/includes/sonaar-music/css/theme/custom-style.php on line 2' ampsstudio.com [Fri Aug 19 10:44:32 2022] [error] [client 80.76.202.21:0] [client 80.76.202.21] ModSecurity: Access denied with code 403 (phase 2). Pattern match "/wp-content/uploads/.*\\\\.php" at REQUEST_FILENAME. [file "remote server"] [line "-1"] [id "430017"] [msg "Malware.Expert - request_uri: Wordpress - prevent PHP files from executing"] [hostname "ampsstudio.com"] [uri "/wp-content/uploads/2022/radio.php"] [unique_id "Yv9bgGb4wtilpMXuUP1MuwAAAAY"] ampsstudio.com [Fri Aug 19 10:52:49 2022] [error] [client 80.76.202.21:0] AH01071: Got error 'PHP message: PHP Fatal error: Uncaught Error: Call to undefined function get_header() in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/twentytwenty/index.php:17\nStack trace:\n#0 {main}\n thrown in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/twentytwenty/index.php on line 17' ampsstudio.com [Fri Aug 19 10:52:53 2022] [error] [client 80.76.202.21:0] AH01071: Got error 'PHP message: PHP Fatal error: Uncaught Error: Call to undefined function get_header() in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/twentynineteen/index.php:17\nStack trace:\n#0 {main}\n thrown in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/twentynineteen/index.php on line 17' ampsstudio.com [Fri Aug 19 10:53:15 2022] [error] [client 80.76.202.21:0] [client 80.76.202.21] ModSecurity: Access denied with code 403 (phase 2). Pattern match "/wp-admin/css/.*\\\\.php" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430027"] [msg "Malware.Expert - request_uri: Wordpress - prevent PHP files from executing"] [hostname "ampsstudio.com"] [uri "/wp-admin/css/colors/new-index.php"] [unique_id "Yv9di2b4wtilpMXuUP1MwgAAAAY"] ampsstudio.com [Fri Aug 19 11:01:35 2022] [error] [client 80.76.202.21:0] [client 80.76.202.21] ModSecurity: Access denied with code 403 (phase 2). Pattern match "/wp-content/uploads/.*\\\\.php" at REQUEST_FILENAME. [file "remote server"] [line "-1"] [id "430017"] [msg "Malware.Expert - request_uri: Wordpress - prevent PHP files from executing"] [hostname "ampsstudio.com"] [uri "/wp-content/uploads/2021/new-index.php"] [unique_id "Yv9ff7nfqVGu7IQtQnl47QAAABA"] ampsstudio.com [Fri Aug 19 11:03:15 2022] [error] [client 80.76.202.21:0] [client 80.76.202.21] ModSecurity: Access denied with code 403 (phase 2). Pattern match "/wp-content/uploads/.*\\\\.php" at REQUEST_FILENAME. [file "remote server"] [line "-1"] [id "430017"] [msg "Malware.Expert - request_uri: Wordpress - prevent PHP files from executing"] [hostname "ampsstudio.com"] [uri "/wp-content/uploads/2021/2index.php"] [unique_id "Yv9f4zdWqlXE7nKQgsCk6QAAABM"] ampsstudio.com [Fri Aug 19 11:03:52 2022] [error] [client 80.76.202.21:0] [client 80.76.202.21] ModSecurity: Access denied with code 403 (phase 2). Pattern match "/wp-includes/images/.*\\\\.php" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430032"] [msg "Malware.Expert - request_uri: Wordpress - prevent PHP files from executing"] [hostname "ampsstudio.com"] [uri "/wp-includes/images/wlw/radio.php"] [unique_id "Yv9gCHEZaII-H6OiXYg1JwAAAAc"] ampsstudio.com [Fri Aug 19 11:23:10 2022] [error] [client 80.76.202.21:0] AH01630: client denied by server configuration: /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/akismet/radio.php webmail.ampsstudio.com [Fri Aug 19 13:49:41 2022] [error] [client 3.226.244.247:0] [client 3.226.244.247] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "webmail.ampsstudio.com"] [uri "/.env"] [unique_id "Yv-G5bYUm0evOrm4HvMIngAAAAI"] webmail.ampsstudio.com [Fri Aug 19 13:49:43 2022] [error] [client 3.226.244.247:0] [client 3.226.244.247] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "webmail.ampsstudio.com"] [uri "/.env.bak"] [unique_id "Yv-G51-_L85hw6g4aGZD-wAAAAM"] webmail.ampsstudio.com [Fri Aug 19 13:49:48 2022] [error] [client 3.226.244.247:0] [client 3.226.244.247] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "webmail.ampsstudio.com"] [uri "/laravel/.env"] [unique_id "Yv-G7LnfqVGu7IQtQnl5QgAAABA"] webmail.ampsstudio.com [Fri Aug 19 13:50:00 2022] [error] [client 3.226.244.247:0] [client 3.226.244.247] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "webmail.ampsstudio.com"] [uri "/local/.env"] [unique_id "Yv-G-MszD-k6OUu0A8gJywAAAAg"] webmail.ampsstudio.com [Fri Aug 19 13:50:01 2022] [error] [client 3.226.244.247:0] [client 3.226.244.247] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "webmail.ampsstudio.com"] [uri "/cgi-bin/.env"] [unique_id "Yv-G-Wb4wtilpMXuUP1NJwAAAAY"] webmail.ampsstudio.com [Fri Aug 19 13:50:04 2022] [error] [client 3.226.244.247:0] [client 3.226.244.247] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "webmail.ampsstudio.com"] [uri "/backend/.env"] [unique_id "Yv-G_Oeixga_-ocRC19ijgAAAAE"] webmail.ampsstudio.com [Fri Aug 19 13:50:13 2022] [error] [client 3.226.244.247:0] [client 3.226.244.247] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "webmail.ampsstudio.com"] [uri "/protected/.env"] [unique_id "Yv-HBbYUm0evOrm4HvMInwAAAAI"] webmail.ampsstudio.com [Fri Aug 19 13:50:16 2022] [error] [client 3.226.244.247:0] [client 3.226.244.247] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "webmail.ampsstudio.com"] [uri "/database/.env"] [unique_id "Yv-HCF-_L85hw6g4aGZD_AAAAAM"] webmail.ampsstudio.com [Fri Aug 19 13:50:19 2022] [error] [client 3.226.244.247:0] [client 3.226.244.247] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "webmail.ampsstudio.com"] [uri "/public/.env"] [unique_id "Yv-HC3EZaII-H6OiXYg1fQAAAAc"] webmail.ampsstudio.com [Fri Aug 19 13:50:22 2022] [error] [client 3.226.244.247:0] [client 3.226.244.247] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "webmail.ampsstudio.com"] [uri "/app/config/.env"] [unique_id "Yv-HDrnfqVGu7IQtQnl5QwAAABA"] webmail.ampsstudio.com [Fri Aug 19 13:50:25 2022] [error] [client 3.226.244.247:0] [client 3.226.244.247] ModSecurity: Access denied with code 403 (phase 2). String match ".aws/credentials" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430069"] [msg "Malware.Expert - request_uri: AWS Credentials"] [hostname "webmail.ampsstudio.com"] [uri "/.aws/credentials"] [unique_id "Yv-HEcszD-k6OUu0A8gJzAAAAAg"] www.ampsstudio.com [Fri Aug 19 15:57:19 2022] [error] [client 216.24.212.52:0] AH01071: Got error 'PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179' www.ampsstudio.com [Fri Aug 19 15:57:19 2022] [error] [client 216.24.212.52:0] AH01071: Got error 'PHP message: PHP Warning: Cannot modify header information - headers already sent by (output started at /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-includes/functions.php:5275) in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/includes/sonaar-music/css/theme/custom-style.php on line 2' www.ampsstudio.com [Fri Aug 19 16:38:07 2022] [error] [client 155.133.138.66:0] AH01276: Cannot serve directory /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-includes/SimplePie/: No matching DirectoryIndex (index.php,index.html,index.htm) found, and server-generated directory index forbidden by Options directive ampsstudio.com [Fri Aug 19 18:47:23 2022] [error] [client 3.226.244.247:0] [client 3.226.244.247] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "ampsstudio.com"] [uri "/.env"] [unique_id "Yv_Mq3EZaII-H6OiXYg2ygAAAAc"] ampsstudio.com [Fri Aug 19 18:47:27 2022] [error] [client 3.226.244.247:0] [client 3.226.244.247] ModSecurity: Access denied with code 403 (phase 2). String match "/Util/PHP/eval-stdin.php" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430046"] [msg "Malware.Expert - request_uri: CVE-2017-9841"] [hostname "ampsstudio.com"] [uri "/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php"] [unique_id "Yv_Mr8LROyjyXYJSgqFaAAAAAAo"] ampsstudio.com [Fri Aug 19 20:22:42 2022] [error] [client 168.61.6.7:0] [client 168.61.6.7] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "ampsstudio.com"] [uri "/.env"] [unique_id "Yv_jAnEZaII-H6OiXYg27gAAAAc"] ampsstudio.com [Fri Aug 19 20:41:21 2022] [error] [client 20.168.39.124:0] AH01276: Cannot serve directory /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-admin/css/: No matching DirectoryIndex (index.php,index.html,index.htm) found, and server-generated directory index forbidden by Options directive cpanel.ampsstudio.com [Fri Aug 19 21:43:07 2022] [error] [client 168.61.6.7:0] [client 168.61.6.7] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "cpanel.ampsstudio.com"] [uri "/.env"] [unique_id "Yv_127nfqVGu7IQtQnl6vQAAABA"] webdisk.ampsstudio.com [Fri Aug 19 21:45:47 2022] [error] [client 20.168.39.124:0] AH01276: Cannot serve directory /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-admin/css/: No matching DirectoryIndex (index.php,index.html,index.htm) found, and server-generated directory index forbidden by Options directive mail.ampsstudio.com [Fri Aug 19 22:15:51 2022] [error] [client 3.226.244.247:0] [client 3.226.244.247] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "mail.ampsstudio.com"] [uri "/.env"] [unique_id "Yv_9hylUiLzSVdxwMxtHWAAAAAU"] mail.ampsstudio.com [Fri Aug 19 22:15:55 2022] [error] [client 3.226.244.247:0] [client 3.226.244.247] ModSecurity: Access denied with code 403 (phase 2). String match "/Util/PHP/eval-stdin.php" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430046"] [msg "Malware.Expert - request_uri: CVE-2017-9841"] [hostname "mail.ampsstudio.com"] [uri "/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php"] [unique_id "Yv_9i3EZaII-H6OiXYg3JgAAAAc"] www.ampsstudio.com [Fri Aug 19 23:33:57 2022] [error] [client 45.82.179.75:0] AH01071: Got error 'PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179' www.ampsstudio.com [Fri Aug 19 23:33:57 2022] [error] [client 45.82.179.75:0] AH01071: Got error 'PHP message: PHP Warning: Cannot modify header information - headers already sent by (output started at /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-includes/functions.php:5275) in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/includes/sonaar-music/css/theme/custom-style.php on line 2' mail.ampsstudio.com [Sat Aug 20 00:52:01 2022] [error] [client 20.168.39.124:0] AH01276: Cannot serve directory /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-admin/css/: No matching DirectoryIndex (index.php,index.html,index.htm) found, and server-generated directory index forbidden by Options directive mail.ampsstudio.com [Sat Aug 20 03:33:45 2022] [error] [client 168.61.6.7:0] [client 168.61.6.7] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "mail.ampsstudio.com"] [uri "/.env"] [unique_id "YwBICTOoyMe87Db1SXIBhgAAABA"] cpanel.ampsstudio.com [Sat Aug 20 03:46:23 2022] [error] [client 3.226.244.247:0] [client 3.226.244.247] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "cpanel.ampsstudio.com"] [uri "/.env"] [unique_id "YwBK_07VrnfdLMZ3lGSPoQAAAAE"] cpanel.ampsstudio.com [Sat Aug 20 03:46:28 2022] [error] [client 3.226.244.247:0] [client 3.226.244.247] ModSecurity: Access denied with code 403 (phase 2). String match "/Util/PHP/eval-stdin.php" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430046"] [msg "Malware.Expert - request_uri: CVE-2017-9841"] [hostname "cpanel.ampsstudio.com"] [uri "/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php"] [unique_id "YwBLBCbX75Gkdyorwy0qCwAAAAc"] www.ampsstudio.com [Sat Aug 20 04:17:53 2022] [error] [client 185.220.103.117:0] AH01071: Got error 'PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179' www.ampsstudio.com [Sat Aug 20 04:17:53 2022] [error] [client 185.220.103.117:0] AH01071: Got error 'PHP message: PHP Warning: Cannot modify header information - headers already sent by (output started at /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-includes/functions.php:5275) in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/includes/sonaar-music/css/theme/custom-style.php on line 2' www.ampsstudio.com [Sat Aug 20 06:02:12 2022] [error] [client 185.244.192.175:0] AH01071: Got error 'PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179' www.ampsstudio.com [Sat Aug 20 06:02:12 2022] [error] [client 185.244.192.175:0] AH01071: Got error 'PHP message: PHP Warning: Cannot modify header information - headers already sent by (output started at /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-includes/functions.php:5275) in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/includes/sonaar-music/css/theme/custom-style.php on line 2' www.ampsstudio.com [Sat Aug 20 07:35:07 2022] [error] [client 49.205.134.255:0] AH01071: Got error 'PHP message: PHP Warning: Cannot modify header information - headers already sent by (output started at /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-includes/functions.php:5275) in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/includes/sonaar-music/css/theme/custom-style.php on line 2' webdisk.ampsstudio.com [Sat Aug 20 08:00:43 2022] [error] [client 3.142.84.228:0] [client 3.142.84.228] ModSecurity: Access denied with code 403 (phase 2). String match "/.git/config" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430058"] [msg "Malware.Expert - request_uri: .git config"] [hostname "webdisk.ampsstudio.com"] [uri "/.git/config"] [unique_id "YwCGmybX75Gkdyorwy0qmgAAAAc"] ampsstudio.com [Sat Aug 20 09:00:31 2022] [error] [client 52.15.193.110:0] [client 52.15.193.110] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "ampsstudio.com"] [uri "/.env"] [unique_id "YwCUn-8U0aoaN5i2UhGPXAAAAAY"] ampsstudio.com [Sat Aug 20 09:00:47 2022] [error] [client 52.15.193.110:0] [client 52.15.193.110] ModSecurity: Access denied with code 403 (phase 2). String match "/Util/PHP/eval-stdin.php" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430046"] [msg "Malware.Expert - request_uri: CVE-2017-9841"] [hostname "ampsstudio.com"] [uri "/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php"] [unique_id "YwCUr6SIVg0lDUVddbJB9wAAAAg"] ampsstudio.com [Sat Aug 20 09:25:39 2022] [error] [client 20.168.40.67:0] [client 20.168.40.67] ModSecurity: Access denied with code 403 (phase 2). String match "/xleet-shell.php" at REQUEST_URI. [file "remote server"] [line "-1"] [id "570071"] [msg "Malware.Expert - PHP Command Shell"] [hostname "ampsstudio.com"] [uri "/xleet-shell.php"] [unique_id "YwCag4j0Qsm00A7P6qWzaQAAAAA"] ampsstudio.com [Sat Aug 20 09:25:42 2022] [error] [client 20.168.40.67:0] [client 20.168.40.67] ModSecurity: Access denied with code 403 (phase 2). String match "/ups.php" at REQUEST_URI. [file "remote server"] [line "-1"] [id "570041"] [msg "Malware.Expert - Malware"] [hostname "ampsstudio.com"] [uri "/ups.php"] [unique_id "YwCahu8U0aoaN5i2UhGPZQAAAAY"] ampsstudio.com [Sat Aug 20 09:26:06 2022] [error] [client 20.168.40.67:0] [client 20.168.40.67] ModSecurity: Access denied with code 403 (phase 2). String match "/alwso.php" at REQUEST_URI. [file "remote server"] [line "-1"] [id "570069"] [msg "Malware.Expert - PHP Command Shell (WSO)"] [hostname "ampsstudio.com"] [uri "/alwso.php"] [unique_id "YwCanvJBYZ0pcEHCh5bwUAAAAAo"] ampsstudio.com [Sat Aug 20 09:26:32 2022] [error] [client 20.168.40.67:0] [client 20.168.40.67] ModSecurity: Access denied with code 403 (phase 2). Pattern match "/wp-admin/images/.*\\\\.php" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430030"] [msg "Malware.Expert - request_uri: Wordpress - prevent PHP files from executing"] [hostname "ampsstudio.com"] [uri "/wp-admin/images/atomlib.php"] [unique_id "YwCauCbX75Gkdyorwy0qtAAAAAc"] ampsstudio.com [Sat Aug 20 09:26:34 2022] [error] [client 20.168.40.67:0] [client 20.168.40.67] ModSecurity: Access denied with code 403 (phase 2). String match "/shell.php" at REQUEST_URI. [file "remote server"] [line "-1"] [id "570072"] [msg "Malware.Expert - PHP Command Shell"] [hostname "ampsstudio.com"] [uri "/shell.php"] [unique_id "YwCaupTCCc7fH9xjLmqLLgAAAAQ"] ampsstudio.com [Sat Aug 20 09:28:23 2022] [error] [client 20.168.40.67:0] [client 20.168.40.67] ModSecurity: Access denied with code 403 (phase 2). String match "/wso.php" at REQUEST_URI. [file "remote server"] [line "-1"] [id "570066"] [msg "Malware.Expert - PHP Command Shell (WSO)"] [hostname "ampsstudio.com"] [uri "/wso.php"] [unique_id "YwCbJz3LF05L18LgjkpBfQAAAAI"] ampsstudio.com [Sat Aug 20 09:29:49 2022] [error] [client 20.168.40.67:0] [client 20.168.40.67] ModSecurity: Access denied with code 403 (phase 2). Pattern match "/images/.*\\\\.php" at REQUEST_URI. [file "remote server"] [line "-1"] [id "470000"] [msg "Malware.Expert - request_uri: Images folder - prevent PHP files from executing"] [hostname "ampsstudio.com"] [uri "/images/about.php"] [unique_id "YwCbffJBYZ0pcEHCh5bwXAAAAAo"] ampsstudio.com [Sat Aug 20 09:30:44 2022] [error] [client 20.168.40.67:0] [client 20.168.40.67] ModSecurity: Access denied with code 403 (phase 2). String match "/wso.php" at REQUEST_URI. [file "remote server"] [line "-1"] [id "570066"] [msg "Malware.Expert - PHP Command Shell (WSO)"] [hostname "ampsstudio.com"] [uri "/WSO.php"] [unique_id "YwCbtCbX75Gkdyorwy0qvwAAAAc"] ampsstudio.com [Sat Aug 20 09:31:17 2022] [error] [client 20.168.40.67:0] [client 20.168.40.67] ModSecurity: Access denied with code 403 (phase 2). String match "/wp-info.php" at REQUEST_URI. [file "remote server"] [line "-1"] [id "570012"] [msg "Malware.Expert - wp-info.php - Malware"] [hostname "ampsstudio.com"] [uri "/wp-info.php"] [unique_id "YwCb1Yj0Qsm00A7P6qWzeAAAAAA"] ampsstudio.com [Sat Aug 20 09:31:20 2022] [error] [client 20.168.40.67:0] [client 20.168.40.67] ModSecurity: Access denied with code 403 (phase 2). String match "/wso.php" at REQUEST_URI. [file "remote server"] [line "-1"] [id "570066"] [msg "Malware.Expert - PHP Command Shell (WSO)"] [hostname "ampsstudio.com"] [uri "/wp-content/wso.php"] [unique_id "YwCb2O8U0aoaN5i2UhGPdAAAAAY"] ampsstudio.com [Sat Aug 20 09:31:36 2022] [error] [client 20.168.40.67:0] [client 20.168.40.67] ModSecurity: Access denied with code 403 (phase 2). String match "/wso.php" at REQUEST_URI. [file "remote server"] [line "-1"] [id "570066"] [msg "Malware.Expert - PHP Command Shell (WSO)"] [hostname "ampsstudio.com"] [uri "/wp-admin/wso.php"] [unique_id "YwCb6J1I2LtC_6wlpqD8XwAAAAM"] ampsstudio.com [Sat Aug 20 09:33:07 2022] [error] [client 20.168.40.67:0] [client 20.168.40.67] ModSecurity: Access denied with code 403 (phase 2). Pattern match "/wp-content/plugins/.*/up\\\\.php" at REQUEST_URI. [file "remote server"] [line "-1"] [id "570052"] [msg "Malware.Expert - Malware"] [hostname "ampsstudio.com"] [uri "/wp-content/plugins/ubh/up.php"] [unique_id "YwCcQzOoyMe87Db1SXICRwAAABA"] ampsstudio.com [Sat Aug 20 09:33:30 2022] [error] [client 20.168.40.67:0] [client 20.168.40.67] ModSecurity: Access denied with code 403 (phase 2). Pattern match ".+wp-config\\\\..*" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430005"] [msg "Malware.Expert - request_uri: read wordpress configuration file"] [hostname "ampsstudio.com"] [uri "/wp-includes/css/wp-config.php"] [unique_id "YwCcWjOoyMe87Db1SXICSAAAABA"] ampsstudio.com [Sat Aug 20 09:33:33 2022] [error] [client 20.168.40.67:0] [client 20.168.40.67] ModSecurity: Access denied with code 403 (phase 2). String match "/config.bak.php" at REQUEST_URI. [file "remote server"] [line "-1"] [id "570053"] [msg "Malware.Expert - Malware"] [hostname "ampsstudio.com"] [uri "/wp-content/themes/config.bak.php"] [unique_id "YwCcXaSIVg0lDUVddbJCFQAAAAg"] ampsstudio.com [Sat Aug 20 09:33:36 2022] [error] [client 20.168.40.67:0] [client 20.168.40.67] ModSecurity: Access denied with code 403 (phase 2). Pattern match "/wp-includes/images/.*\\\\.php" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430032"] [msg "Malware.Expert - request_uri: Wordpress - prevent PHP files from executing"] [hostname "ampsstudio.com"] [uri "/wp-includes/images/css.php"] [unique_id "YwCcYIj0Qsm00A7P6qWzfwAAAAA"] ampsstudio.com [Sat Aug 20 09:33:39 2022] [error] [client 20.168.40.67:0] [client 20.168.40.67] ModSecurity: Access denied with code 403 (phase 2). Pattern match "/wp-includes/css/.*\\\\.php" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430035"] [msg "Malware.Expert - request_uri: Wordpress - prevent PHP files from executing"] [hostname "ampsstudio.com"] [uri "/wp-includes/css/css.php"] [unique_id "YwCcYybX75Gkdyorwy0qyAAAAAc"] ampsstudio.com [Sat Aug 20 09:33:42 2022] [error] [client 20.168.40.67:0] [client 20.168.40.67] ModSecurity: Access denied with code 403 (phase 2). Pattern match "/wp-content/uploads/.*\\\\.php" at REQUEST_FILENAME. [file "remote server"] [line "-1"] [id "430017"] [msg "Malware.Expert - request_uri: Wordpress - prevent PHP files from executing"] [hostname "ampsstudio.com"] [uri "/wp-content/uploads/wp-stream.php"] [unique_id "YwCcZvJBYZ0pcEHCh5bwZwAAAAo"] ampsstudio.com [Sat Aug 20 09:34:00 2022] [error] [client 20.168.40.67:0] [client 20.168.40.67] ModSecurity: Access denied with code 403 (phase 2). Pattern match "/wp-content/uploads/.*\\\\.php" at REQUEST_FILENAME. [file "remote server"] [line "-1"] [id "430017"] [msg "Malware.Expert - request_uri: Wordpress - prevent PHP files from executing"] [hostname "ampsstudio.com"] [uri "/wp-content/uploads/wp-blockdown.php"] [unique_id "YwCceKSIVg0lDUVddbJCFgAAAAg"] ampsstudio.com [Sat Aug 20 09:34:07 2022] [error] [client 20.168.40.67:0] [client 20.168.40.67] ModSecurity: Access denied with code 403 (phase 2). Pattern match "/wp-admin/includes/.*\\\\.php" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430034"] [msg "Malware.Expert - request_uri: Wordpress - prevent PHP files from executing"] [hostname "ampsstudio.com"] [uri "/wp-admin/includes/class-wp-media-list-data.php"] [unique_id "YwCcfybX75Gkdyorwy0qyQAAAAc"] ampsstudio.com [Sat Aug 20 09:36:05 2022] [error] [client 20.168.40.67:0] [client 20.168.40.67] ModSecurity: Access denied with code 403 (phase 2). Pattern match "/wp-content/plugins/.*/up\\\\.php" at REQUEST_URI. [file "remote server"] [line "-1"] [id "570052"] [msg "Malware.Expert - Malware"] [hostname "ampsstudio.com"] [uri "/wp-content/plugins/ppus/up.php"] [unique_id "YwCc9fJBYZ0pcEHCh5bwbgAAAAo"] ampsstudio.com [Sat Aug 20 09:36:37 2022] [error] [client 20.168.40.67:0] [client 20.168.40.67] ModSecurity: Access denied with code 403 (phase 2). String match "/shell.php" at REQUEST_URI. [file "remote server"] [line "-1"] [id "570072"] [msg "Malware.Expert - PHP Command Shell"] [hostname "ampsstudio.com"] [uri "/wp-content/shell.php"] [unique_id "YwCdFe8U0aoaN5i2UhGPhAAAAAY"] ampsstudio.com [Sat Aug 20 09:36:46 2022] [error] [client 20.168.40.67:0] [client 20.168.40.67] ModSecurity: Access denied with code 403 (phase 2). String match "/shell.php" at REQUEST_URI. [file "remote server"] [line "-1"] [id "570072"] [msg "Malware.Expert - PHP Command Shell"] [hostname "ampsstudio.com"] [uri "/wp-admin/shell.php"] [unique_id "YwCdHk7VrnfdLMZ3lGSQYwAAAAE"] ampsstudio.com [Sat Aug 20 09:36:55 2022] [error] [client 20.168.40.67:0] [client 20.168.40.67] ModSecurity: Access denied with code 403 (phase 2). Pattern match "/\\\\..+\\\\.php" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430015"] [msg "Malware.Expert - request_uri: hidden .php execute"] [hostname "ampsstudio.com"] [uri "/.alf.php"] [unique_id "YwCdJ6SIVg0lDUVddbJCHwAAAAg"] ampsstudio.com [Sat Aug 20 09:36:58 2022] [error] [client 20.168.40.67:0] [client 20.168.40.67] ModSecurity: Access denied with code 403 (phase 2). Pattern match "/\\\\..+\\\\.php" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430015"] [msg "Malware.Expert - request_uri: hidden .php execute"] [hostname "ampsstudio.com"] [uri "/.fk.php"] [unique_id "YwCdKpTCCc7fH9xjLmqLTAAAAAQ"] ampsstudio.com [Sat Aug 20 09:36:59 2022] [error] [client 20.168.40.67:0] [client 20.168.40.67] ModSecurity: Access denied with code 403 (phase 2). Pattern match "/\\\\..+\\\\.php" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430015"] [msg "Malware.Expert - request_uri: hidden .php execute"] [hostname "ampsstudio.com"] [uri "/.wp-cache.php"] [unique_id "YwCdK-8U0aoaN5i2UhGPhQAAAAY"] ampsstudio.com [Sat Aug 20 09:37:46 2022] [error] [client 20.168.40.67:0] [client 20.168.40.67] ModSecurity: Access denied with code 403 (phase 2). Pattern match "/wp-includes/css/.*\\\\.php" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430035"] [msg "Malware.Expert - request_uri: Wordpress - prevent PHP files from executing"] [hostname "ampsstudio.com"] [uri "/wp-includes/css/modules.php"] [unique_id "YwCdWu8U0aoaN5i2UhGPhwAAAAY"] ampsstudio.com [Sat Aug 20 09:39:57 2022] [crit] [client 20.168.40.67:0] AH00529: /home/virtual/vps-aa3942/a/aede5353c4/public_html/.well-known/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/virtual/vps-aa3942/a/aede5353c4/public_html/.well-known/' is executable ampsstudio.com [Sat Aug 20 09:41:05 2022] [error] [client 20.168.40.67:0] [client 20.168.40.67] ModSecurity: Access denied with code 403 (phase 2). Pattern match "/images/.*\\\\.php" at REQUEST_URI. [file "remote server"] [line "-1"] [id "470000"] [msg "Malware.Expert - request_uri: Images folder - prevent PHP files from executing"] [hostname "ampsstudio.com"] [uri "/images/sym.php"] [unique_id "YwCeIYj0Qsm00A7P6qWzlQAAAAA"] ampsstudio.com [Sat Aug 20 09:41:08 2022] [error] [client 20.168.40.67:0] [client 20.168.40.67] ModSecurity: Access denied with code 403 (phase 2). Pattern match "/images/.*\\\\.php" at REQUEST_URI. [file "remote server"] [line "-1"] [id "470000"] [msg "Malware.Expert - request_uri: Images folder - prevent PHP files from executing"] [hostname "ampsstudio.com"] [uri "/images/vuln.php"] [unique_id "YwCeJE7VrnfdLMZ3lGSQcAAAAAE"] ampsstudio.com [Sat Aug 20 09:45:42 2022] [error] [client 20.168.40.67:0] [client 20.168.40.67] ModSecurity: Access denied with code 403 (phase 2). Pattern match "/wp-admin/css/.*\\\\.php" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430027"] [msg "Malware.Expert - request_uri: Wordpress - prevent PHP files from executing"] [hostname "ampsstudio.com"] [uri "/wp-admin/css/colors/coffee/fw.php"] [unique_id "YwCfNp1I2LtC_6wlpqD8iwAAAAM"] ampsstudio.com [Sat Aug 20 09:45:46 2022] [error] [client 20.168.40.67:0] [client 20.168.40.67] ModSecurity: Access denied with code 403 (phase 2). Pattern match "/wp-admin/css/.*\\\\.php" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430027"] [msg "Malware.Expert - request_uri: Wordpress - prevent PHP files from executing"] [hostname "ampsstudio.com"] [uri "/wp-admin/css/fw.php"] [unique_id "YwCfOqSIVg0lDUVddbJCOgAAAAg"] ampsstudio.com [Sat Aug 20 09:45:48 2022] [error] [client 20.168.40.67:0] [client 20.168.40.67] ModSecurity: Access denied with code 403 (phase 2). Pattern match "/wp-admin/css/.*\\\\.php" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430027"] [msg "Malware.Expert - request_uri: Wordpress - prevent PHP files from executing"] [hostname "ampsstudio.com"] [uri "/wp-admin/css/index.php"] [unique_id "YwCfPO8U0aoaN5i2UhGPoAAAAAY"] ampsstudio.com [Sat Aug 20 09:45:50 2022] [error] [client 20.168.40.67:0] [client 20.168.40.67] ModSecurity: Access denied with code 403 (phase 2). Pattern match "/wp-admin/includes/.*\\\\.php" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430034"] [msg "Malware.Expert - request_uri: Wordpress - prevent PHP files from executing"] [hostname "ampsstudio.com"] [uri "/wp-admin/includes/fw.php"] [unique_id "YwCfPk7VrnfdLMZ3lGSQfwAAAAE"] ampsstudio.com [Sat Aug 20 09:46:45 2022] [error] [client 20.168.40.67:0] [client 20.168.40.67] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\/wp-content\\\\/plugins\\\\/(ubh|api-wp)\\\\/" at REQUEST_URI. [file "remote server"] [line "-1"] [id "570063"] [msg "Malware.Expert - Wordpress Malware"] [hostname "ampsstudio.com"] [uri "/wp-content/plugins/ubh/index.php"] [unique_id "YwCfdT3LF05L18LgjkpBtQAAAAI"] ampsstudio.com [Sat Aug 20 09:48:20 2022] [error] [client 20.168.40.67:0] [client 20.168.40.67] ModSecurity: Access denied with code 403 (phase 2). Pattern match "/images/.*\\\\.php" at REQUEST_URI. [file "remote server"] [line "-1"] [id "470000"] [msg "Malware.Expert - request_uri: Images folder - prevent PHP files from executing"] [hostname "ampsstudio.com"] [uri "/images/c99.php"] [unique_id "YwCf1KSIVg0lDUVddbJCQgAAAAg"] www.ampsstudio.com [Sat Aug 20 10:40:21 2022] [error] [client 212.227.213.151:0] [client 212.227.213.151] ModSecurity: Access denied with code 403 (phase 2). Match of "contains index.php" against "REQUEST_URI" required. [file "remote server"] [line "-1"] [id "570076"] [msg "Malware.Expert - Malware"] [hostname "www.ampsstudio.com"] [uri "/wp-admin/admin-post.php"] [unique_id "YwCsBSbX75Gkdyorwy0rDwAAAAc"] www.ampsstudio.com [Sat Aug 20 10:40:21 2022] [error] [client 212.227.213.151:0] [client 212.227.213.151] ModSecurity: Access denied with code 403 (phase 2). Pattern match "/wp-content/plugins/.*/up\\\\.php" at REQUEST_URI. [file "remote server"] [line "-1"] [id "570052"] [msg "Malware.Expert - Malware"] [hostname "www.ampsstudio.com"] [uri "/wp-content/plugins/instabuilder2/cache/up.php"] [unique_id "YwCsBfJBYZ0pcEHCh5bwrQAAAAo"] www.ampsstudio.com [Sat Aug 20 10:40:21 2022] [error] [client 212.227.213.151:0] [client 212.227.213.151] ModSecurity: Access denied with code 403 (phase 2). Match of "contains index.php" against "REQUEST_URI" required. [file "remote server"] [line "-1"] [id "570076"] [msg "Malware.Expert - Malware"] [hostname "www.ampsstudio.com"] [uri "/wp-admin/admin-ajax.php"] [unique_id "YwCsBZTCCc7fH9xjLmqLiwAAAAQ"] www.ampsstudio.com [Sat Aug 20 10:40:21 2022] [error] [client 212.227.213.151:0] [client 212.227.213.151] ModSecurity: Access denied with code 403 (phase 2). Match of "contains index.php" against "REQUEST_URI" required. [file "remote server"] [line "-1"] [id "570076"] [msg "Malware.Expert - Malware"] [hostname "www.ampsstudio.com"] [uri "/wp-admin/admin-ajax.php"] [unique_id "YwCsBaSIVg0lDUVddbJCXAAAAAg"] www.ampsstudio.com [Sat Aug 20 10:40:21 2022] [error] [client 212.227.213.151:0] [client 212.227.213.151] ModSecurity: Access denied with code 403 (phase 1). Pattern match "\\\\.\\\\./\\\\.\\\\." at REQUEST_URI. [file "remote server"] [line "-1"] [id "430064"] [msg "Malware.Expert - request_uri: directory travel"] [hostname "www.ampsstudio.com"] [uri "/wp-content/plugins/fwduvp/content/downloader.php"] [unique_id "YwCsBZ1I2LtC_6wlpqD8rQAAAAM"] www.ampsstudio.com [Sat Aug 20 10:40:21 2022] [error] [client 212.227.213.151:0] [client 212.227.213.151] ModSecurity: Access denied with code 403 (phase 1). Pattern match "\\\\.\\\\./\\\\.\\\\." at REQUEST_URI. [file "remote server"] [line "-1"] [id "430064"] [msg "Malware.Expert - request_uri: directory travel"] [hostname "www.ampsstudio.com"] [uri "/wp-content/plugins/fwduvp/content/downloader.php"] [unique_id "YwCsBU7VrnfdLMZ3lGSQoQAAAAE"] ampsstudio.com [Sat Aug 20 10:57:54 2022] [error] [client 52.15.193.110:0] [client 52.15.193.110] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "ampsstudio.com"] [uri "/.env"] [unique_id "YwCwIj3LF05L18LgjkpB1wAAAAI"] ampsstudio.com [Sat Aug 20 10:57:54 2022] [error] [client 52.15.193.110:0] [client 52.15.193.110] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "ampsstudio.com"] [uri "/.env.bak"] [unique_id "YwCwIoj0Qsm00A7P6qWzyQAAAAA"] ampsstudio.com [Sat Aug 20 10:58:08 2022] [error] [client 52.15.193.110:0] [client 52.15.193.110] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "ampsstudio.com"] [uri "/laravel/.env"] [unique_id "YwCwMCbX75Gkdyorwy0rEwAAAAc"] ampsstudio.com [Sat Aug 20 10:58:09 2022] [error] [client 52.15.193.110:0] [client 52.15.193.110] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "ampsstudio.com"] [uri "/local/.env"] [unique_id "YwCwMTOoyMe87Db1SXICkwAAABA"] ampsstudio.com [Sat Aug 20 10:58:09 2022] [error] [client 52.15.193.110:0] [client 52.15.193.110] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "ampsstudio.com"] [uri "/cgi-bin/.env"] [unique_id "YwCwMfJBYZ0pcEHCh5bwsQAAAAo"] ampsstudio.com [Sat Aug 20 10:58:10 2022] [error] [client 52.15.193.110:0] [client 52.15.193.110] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "ampsstudio.com"] [uri "/backend/.env"] [unique_id "YwCwMqSIVg0lDUVddbJCYAAAAAg"] ampsstudio.com [Sat Aug 20 10:58:15 2022] [error] [client 52.15.193.110:0] [client 52.15.193.110] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "ampsstudio.com"] [uri "/protected/.env"] [unique_id "YwCwN-8U0aoaN5i2UhGPxgAAAAY"] ampsstudio.com [Sat Aug 20 10:58:16 2022] [error] [client 52.15.193.110:0] [client 52.15.193.110] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "ampsstudio.com"] [uri "/database/.env"] [unique_id "YwCwOCbX75Gkdyorwy0rFAAAAAc"] ampsstudio.com [Sat Aug 20 10:58:17 2022] [error] [client 52.15.193.110:0] [client 52.15.193.110] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "ampsstudio.com"] [uri "/public/.env"] [unique_id "YwCwOTOoyMe87Db1SXIClAAAABA"] ampsstudio.com [Sat Aug 20 10:58:17 2022] [error] [client 52.15.193.110:0] [client 52.15.193.110] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "ampsstudio.com"] [uri "/app/config/.env"] [unique_id "YwCwOfJBYZ0pcEHCh5bwsgAAAAo"] ampsstudio.com [Sat Aug 20 10:58:18 2022] [error] [client 52.15.193.110:0] [client 52.15.193.110] ModSecurity: Access denied with code 403 (phase 2). String match ".aws/credentials" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430069"] [msg "Malware.Expert - request_uri: AWS Credentials"] [hostname "ampsstudio.com"] [uri "/.aws/credentials"] [unique_id "YwCwOqSIVg0lDUVddbJCYQAAAAg"] www.ampsstudio.com [Sat Aug 20 11:55:33 2022] [error] [client 89.238.150.171:0] AH01071: Got error 'PHP message: PHP Warning: Cannot modify header information - headers already sent by (output started at /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-includes/functions.php:5275) in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/includes/sonaar-music/css/theme/custom-style.php on line 2' ampsstudio.com [Sat Aug 20 12:32:05 2022] [error] [client 20.150.149.234:0] [client 20.150.149.234] ModSecurity: Access denied with connection close (phase 2). Pattern match "^wp_is_mobile$" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "420038"] [msg "Malware.Expert - user-agent: Webshell user-agent"] [hostname "ampsstudio.com"] [uri "/wp-load.php"] [unique_id "YwDGNZ1I2LtC_6wlpqD89gAAAAM"] ampsstudio.com [Sat Aug 20 12:32:05 2022] [error] [client 20.150.149.234:0] [client 20.150.149.234] ModSecurity: Access denied with connection close (phase 2). Pattern match "^wp_is_mobile$" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "420038"] [msg "Malware.Expert - user-agent: Webshell user-agent"] [hostname "ampsstudio.com"] [uri "/wp-load.php"] [unique_id "YwDGNT3LF05L18LgjkpCJAAAAAI"] ampsstudio.com [Sat Aug 20 12:32:07 2022] [error] [client 20.150.149.234:0] [client 20.150.149.234] ModSecurity: Access denied with connection close (phase 2). Pattern match "^wp_is_mobile$" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "420038"] [msg "Malware.Expert - user-agent: Webshell user-agent"] [hostname "ampsstudio.com"] [uri "/style.php"] [unique_id "YwDGNybX75Gkdyorwy0rXAAAAAc"] ampsstudio.com [Sat Aug 20 12:32:07 2022] [error] [client 20.150.149.234:0] [client 20.150.149.234] ModSecurity: Access denied with connection close (phase 2). Pattern match "^wp_is_mobile$" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "420038"] [msg "Malware.Expert - user-agent: Webshell user-agent"] [hostname "ampsstudio.com"] [uri "/wp-admin/style.php"] [unique_id "YwDGNzOoyMe87Db1SXIC3wAAABA"] ampsstudio.com [Sat Aug 20 12:32:09 2022] [error] [client 20.150.149.234:0] [client 20.150.149.234] ModSecurity: Access denied with connection close (phase 2). Pattern match "^wp_is_mobile$" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "420038"] [msg "Malware.Expert - user-agent: Webshell user-agent"] [hostname "ampsstudio.com"] [uri "/s_e.php"] [unique_id "YwDGOZTCCc7fH9xjLmqL2QAAAAQ"] ampsstudio.com [Sat Aug 20 12:32:10 2022] [error] [client 20.150.149.234:0] [client 20.150.149.234] ModSecurity: Access denied with connection close (phase 2). Pattern match "^wp_is_mobile$" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "420038"] [msg "Malware.Expert - user-agent: Webshell user-agent"] [hostname "ampsstudio.com"] [uri "/s_ne.php"] [unique_id "YwDGOoj0Qsm00A7P6qW0FQAAAAA"] ampsstudio.com [Sat Aug 20 12:32:15 2022] [error] [client 20.150.149.234:0] [client 20.150.149.234] ModSecurity: Access denied with connection close (phase 2). Pattern match "^wp_is_mobile$" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "420038"] [msg "Malware.Expert - user-agent: Webshell user-agent"] [hostname "ampsstudio.com"] [uri "/radio.php"] [unique_id "YwDGP6SIVg0lDUVddbJCrQAAAAg"] ampsstudio.com [Sat Aug 20 12:32:16 2022] [error] [client 20.150.149.234:0] [client 20.150.149.234] ModSecurity: Access denied with connection close (phase 2). Pattern match "^wp_is_mobile$" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "420038"] [msg "Malware.Expert - user-agent: Webshell user-agent"] [hostname "ampsstudio.com"] [uri "/doc.php"] [unique_id "YwDGQJ1I2LtC_6wlpqD89wAAAAM"] ampsstudio.com [Sat Aug 20 12:32:18 2022] [error] [client 20.150.149.234:0] [client 20.150.149.234] ModSecurity: Access denied with code 403 (phase 2). Match of "contains index.php" against "REQUEST_URI" required. [file "remote server"] [line "-1"] [id "570075"] [msg "Malware.Expert - Malware"] [hostname "ampsstudio.com"] [uri "/wp_wrong_datlib.php"] [unique_id "YwDGQj3LF05L18LgjkpCJQAAAAI"] ampsstudio.com [Sat Aug 20 12:32:19 2022] [error] [client 20.150.149.234:0] [client 20.150.149.234] ModSecurity: Access denied with code 403 (phase 2). Match of "contains index.php" against "REQUEST_URI" required. [file "remote server"] [line "-1"] [id "570075"] [msg "Malware.Expert - Malware"] [hostname "ampsstudio.com"] [uri "/beence.php"] [unique_id "YwDGQybX75Gkdyorwy0rXQAAAAc"] ampsstudio.com [Sat Aug 20 12:32:20 2022] [error] [client 20.150.149.234:0] [client 20.150.149.234] ModSecurity: Access denied with connection close (phase 2). Pattern match "^wp_is_mobile$" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "420038"] [msg "Malware.Expert - user-agent: Webshell user-agent"] [hostname "ampsstudio.com"] [uri "/ups.php"] [unique_id "YwDGRDOoyMe87Db1SXIC4AAAABA"] ampsstudio.com [Sat Aug 20 12:32:21 2022] [error] [client 20.150.149.234:0] [client 20.150.149.234] ModSecurity: Access denied with connection close (phase 2). Pattern match "^wp_is_mobile$" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "420038"] [msg "Malware.Expert - user-agent: Webshell user-agent"] [hostname "ampsstudio.com"] [uri "/wp-signin.php"] [unique_id "YwDGRZTCCc7fH9xjLmqL2gAAAAQ"] ampsstudio.com [Sat Aug 20 12:32:22 2022] [error] [client 20.150.149.234:0] [client 20.150.149.234] ModSecurity: Access denied with connection close (phase 2). Pattern match "^wp_is_mobile$" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "420038"] [msg "Malware.Expert - user-agent: Webshell user-agent"] [hostname "ampsstudio.com"] [uri "/media-admin.php"] [unique_id "YwDGRoj0Qsm00A7P6qW0FgAAAAA"] ampsstudio.com [Sat Aug 20 12:32:24 2022] [error] [client 20.150.149.234:0] [client 20.150.149.234] ModSecurity: Access denied with code 403 (phase 2). Match of "contains index.php" against "REQUEST_URI" required. [file "remote server"] [line "-1"] [id "570075"] [msg "Malware.Expert - Malware"] [hostname "ampsstudio.com"] [uri "/export.php"] [unique_id "YwDGSPJBYZ0pcEHCh5bw_wAAAAo"] ampsstudio.com [Sat Aug 20 12:32:24 2022] [error] [client 20.150.149.234:0] [client 20.150.149.234] ModSecurity: Access denied with code 403 (phase 2). Match of "contains index.php" against "REQUEST_URI" required. [file "remote server"] [line "-1"] [id "570075"] [msg "Malware.Expert - Malware"] [hostname "ampsstudio.com"] [uri "/wp-content/export.php"] [unique_id "YwDGSO8U0aoaN5i2UhGQFgAAAAY"] ampsstudio.com [Sat Aug 20 12:32:27 2022] [error] [client 20.150.149.234:0] [client 20.150.149.234] ModSecurity: Access denied with connection close (phase 2). Pattern match "^wp_is_mobile$" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "420038"] [msg "Malware.Expert - user-agent: Webshell user-agent"] [hostname "ampsstudio.com"] [uri "/wp-includes/wp-class.php"] [unique_id "YwDGS6SIVg0lDUVddbJCrgAAAAg"] ampsstudio.com [Sat Aug 20 12:32:28 2022] [error] [client 20.150.149.234:0] [client 20.150.149.234] ModSecurity: Access denied with code 403 (phase 2). Match of "contains index.php" against "REQUEST_URI" required. [file "remote server"] [line "-1"] [id "570075"] [msg "Malware.Expert - Malware"] [hostname "ampsstudio.com"] [uri "/wp-includes/wp-atom.php"] [unique_id "YwDGTJ1I2LtC_6wlpqD8-AAAAAM"] ampsstudio.com [Sat Aug 20 12:32:29 2022] [error] [client 20.150.149.234:0] [client 20.150.149.234] ModSecurity: Access denied with code 403 (phase 2). Pattern match "/wp-includes/images/.*\\\\.php" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430032"] [msg "Malware.Expert - request_uri: Wordpress - prevent PHP files from executing"] [hostname "ampsstudio.com"] [uri "/wp-includes/images/css.php"] [unique_id "YwDGTT3LF05L18LgjkpCJgAAAAI"] ampsstudio.com [Sat Aug 20 12:32:30 2022] [error] [client 20.150.149.234:0] [client 20.150.149.234] ModSecurity: Access denied with code 403 (phase 2). Pattern match "/wp-includes/css/.*\\\\.php" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430035"] [msg "Malware.Expert - request_uri: Wordpress - prevent PHP files from executing"] [hostname "ampsstudio.com"] [uri "/wp-includes/css/css.php"] [unique_id "YwDGTibX75Gkdyorwy0rXgAAAAc"] ampsstudio.com [Sat Aug 20 12:32:31 2022] [error] [client 20.150.149.234:0] [client 20.150.149.234] ModSecurity: Access denied with code 403 (phase 2). Match of "contains index.php" against "REQUEST_URI" required. [file "remote server"] [line "-1"] [id "570075"] [msg "Malware.Expert - Malware"] [hostname "ampsstudio.com"] [uri "/defau1t.php"] [unique_id "YwDGTzOoyMe87Db1SXIC4QAAABA"] ampsstudio.com [Sat Aug 20 12:32:32 2022] [error] [client 20.150.149.234:0] [client 20.150.149.234] ModSecurity: Access denied with code 403 (phase 2). Match of "contains index.php" against "REQUEST_URI" required. [file "remote server"] [line "-1"] [id "570075"] [msg "Malware.Expert - Malware"] [hostname "ampsstudio.com"] [uri "/moduless.php"] [unique_id "YwDGUJTCCc7fH9xjLmqL2wAAAAQ"] ampsstudio.com [Sat Aug 20 12:32:34 2022] [error] [client 20.150.149.234:0] [client 20.150.149.234] ModSecurity: Access denied with connection close (phase 2). Pattern match "^wp_is_mobile$" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "420038"] [msg "Malware.Expert - user-agent: Webshell user-agent"] [hostname "ampsstudio.com"] [uri "/wp-booking.php"] [unique_id "YwDGUoj0Qsm00A7P6qW0FwAAAAA"] ampsstudio.com [Sat Aug 20 12:32:35 2022] [error] [client 20.150.149.234:0] [client 20.150.149.234] ModSecurity: Access denied with connection close (phase 2). Pattern match "^wp_is_mobile$" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "420038"] [msg "Malware.Expert - user-agent: Webshell user-agent"] [hostname "ampsstudio.com"] [uri "/wp-content/plugins/backup_index.php"] [unique_id "YwDGU_JBYZ0pcEHCh5bxAAAAAAo"] ampsstudio.com [Sat Aug 20 12:32:36 2022] [error] [client 20.150.149.234:0] [client 20.150.149.234] ModSecurity: Access denied with connection close (phase 2). Pattern match "^wp_is_mobile$" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "420038"] [msg "Malware.Expert - user-agent: Webshell user-agent"] [hostname "ampsstudio.com"] [uri "/wp-content/mu-plugins/db-safe-mode.php"] [unique_id "YwDGVO8U0aoaN5i2UhGQFwAAAAY"] ampsstudio.com [Sat Aug 20 12:32:37 2022] [error] [client 20.150.149.234:0] [client 20.150.149.234] ModSecurity: Access denied with connection close (phase 2). Pattern match "^wp_is_mobile$" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "420038"] [msg "Malware.Expert - user-agent: Webshell user-agent"] [hostname "ampsstudio.com"] [uri "/wp-includes/css/wp-config.php"] [unique_id "YwDGVU7VrnfdLMZ3lGSQ7QAAAAE"] ampsstudio.com [Sat Aug 20 12:32:38 2022] [error] [client 20.150.149.234:0] [client 20.150.149.234] ModSecurity: Access denied with connection close (phase 2). Pattern match "^wp_is_mobile$" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "420038"] [msg "Malware.Expert - user-agent: Webshell user-agent"] [hostname "ampsstudio.com"] [uri "/config.bak.php"] [unique_id "YwDGVqSIVg0lDUVddbJCrwAAAAg"] ampsstudio.com [Sat Aug 20 12:32:39 2022] [error] [client 20.150.149.234:0] [client 20.150.149.234] ModSecurity: Access denied with connection close (phase 2). Pattern match "^wp_is_mobile$" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "420038"] [msg "Malware.Expert - user-agent: Webshell user-agent"] [hostname "ampsstudio.com"] [uri "/wp-content/themes/config.bak.php"] [unique_id "YwDGV51I2LtC_6wlpqD8-QAAAAM"] ampsstudio.com [Sat Aug 20 12:32:40 2022] [error] [client 20.150.149.234:0] [client 20.150.149.234] ModSecurity: Access denied with connection close (phase 2). Pattern match "^wp_is_mobile$" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "420038"] [msg "Malware.Expert - user-agent: Webshell user-agent"] [hostname "ampsstudio.com"] [uri "/legion.php"] [unique_id "YwDGWCbX75Gkdyorwy0rXwAAAAc"] ampsstudio.com [Sat Aug 20 12:32:45 2022] [error] [client 20.150.149.234:0] [client 20.150.149.234] ModSecurity: Access denied with connection close (phase 2). Pattern match "^wp_is_mobile$" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "420038"] [msg "Malware.Expert - user-agent: Webshell user-agent"] [hostname "ampsstudio.com"] [uri "/wp-plugins.php"] [unique_id "YwDGXTOoyMe87Db1SXIC4gAAABA"] ampsstudio.com [Sat Aug 20 12:32:46 2022] [error] [client 20.150.149.234:0] [client 20.150.149.234] ModSecurity: Access denied with connection close (phase 2). Pattern match "^wp_is_mobile$" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "420038"] [msg "Malware.Expert - user-agent: Webshell user-agent"] [hostname "ampsstudio.com"] [uri "/gank.php.PhP"] [unique_id "YwDGXvJBYZ0pcEHCh5bxAQAAAAo"] ampsstudio.com [Sat Aug 20 12:32:47 2022] [error] [client 20.150.149.234:0] [client 20.150.149.234] ModSecurity: Access denied with connection close (phase 2). Pattern match "^wp_is_mobile$" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "420038"] [msg "Malware.Expert - user-agent: Webshell user-agent"] [hostname "ampsstudio.com"] [uri "/wp-content/db-cache.php"] [unique_id "YwDGX5TCCc7fH9xjLmqL3AAAAAQ"] ampsstudio.com [Sat Aug 20 12:32:48 2022] [error] [client 20.150.149.234:0] [client 20.150.149.234] ModSecurity: Access denied with code 403 (phase 2). Match of "contains index.php" against "REQUEST_URI" required. [file "remote server"] [line "-1"] [id "570075"] [msg "Malware.Expert - Malware"] [hostname "ampsstudio.com"] [uri "/archives.php"] [unique_id "YwDGYO8U0aoaN5i2UhGQGAAAAAY"] ampsstudio.com [Sat Aug 20 12:32:49 2022] [error] [client 20.150.149.234:0] [client 20.150.149.234] ModSecurity: Access denied with code 403 (phase 2). Match of "contains index.php" against "REQUEST_URI" required. [file "remote server"] [line "-1"] [id "570075"] [msg "Malware.Expert - Malware"] [hostname "ampsstudio.com"] [uri "/defau11.php"] [unique_id "YwDGYU7VrnfdLMZ3lGSQ7gAAAAE"] ampsstudio.com [Sat Aug 20 12:32:51 2022] [error] [client 20.150.149.234:0] [client 20.150.149.234] ModSecurity: Access denied with connection close (phase 2). Pattern match "^wp_is_mobile$" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "420038"] [msg "Malware.Expert - user-agent: Webshell user-agent"] [hostname "ampsstudio.com"] [uri "/wp-content/outcms.php"] [unique_id "YwDGY6SIVg0lDUVddbJCsAAAAAg"] ampsstudio.com [Sat Aug 20 12:32:52 2022] [error] [client 20.150.149.234:0] [client 20.150.149.234] ModSecurity: Access denied with connection close (phase 2). Pattern match "^wp_is_mobile$" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "420038"] [msg "Malware.Expert - user-agent: Webshell user-agent"] [hostname "ampsstudio.com"] [uri "/system_log.php"] [unique_id "YwDGZJ1I2LtC_6wlpqD8-gAAAAM"] ampsstudio.com [Sat Aug 20 12:32:53 2022] [error] [client 20.150.149.234:0] [client 20.150.149.234] ModSecurity: Access denied with connection close (phase 2). Pattern match "^wp_is_mobile$" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "420038"] [msg "Malware.Expert - user-agent: Webshell user-agent"] [hostname "ampsstudio.com"] [uri "/wp-backup-sql-302.php"] [unique_id "YwDGZSbX75Gkdyorwy0rYAAAAAc"] ampsstudio.com [Sat Aug 20 12:32:54 2022] [error] [client 20.150.149.234:0] [client 20.150.149.234] ModSecurity: Access denied with connection close (phase 2). Pattern match "^wp_is_mobile$" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "420038"] [msg "Malware.Expert - user-agent: Webshell user-agent"] [hostname "ampsstudio.com"] [uri "/error.php"] [unique_id "YwDGZj3LF05L18LgjkpCKAAAAAI"] ampsstudio.com [Sat Aug 20 12:32:56 2022] [error] [client 20.150.149.234:0] [client 20.150.149.234] ModSecurity: Access denied with connection close (phase 2). Pattern match "^wp_is_mobile$" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "420038"] [msg "Malware.Expert - user-agent: Webshell user-agent"] [hostname "ampsstudio.com"] [uri "/ALFA_DATA"] [unique_id "YwDGaIj0Qsm00A7P6qW0GQAAAAA"] ampsstudio.com [Sat Aug 20 12:32:57 2022] [error] [client 20.150.149.234:0] [client 20.150.149.234] ModSecurity: Access denied with connection close (phase 2). Pattern match "^wp_is_mobile$" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "420038"] [msg "Malware.Expert - user-agent: Webshell user-agent"] [hostname "ampsstudio.com"] [uri "/alfacgiapi"] [unique_id "YwDGaTOoyMe87Db1SXIC4wAAABA"] ampsstudio.com [Sat Aug 20 12:32:58 2022] [error] [client 20.150.149.234:0] [client 20.150.149.234] ModSecurity: Access denied with connection close (phase 2). Pattern match "^wp_is_mobile$" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "420038"] [msg "Malware.Expert - user-agent: Webshell user-agent"] [hostname "ampsstudio.com"] [uri "/cgialfa"] [unique_id "YwDGavJBYZ0pcEHCh5bxAgAAAAo"] ampsstudio.com [Sat Aug 20 12:33:00 2022] [crit] [client 20.150.149.234:0] AH00529: /home/virtual/vps-aa3942/a/aede5353c4/public_html/.well-known/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/virtual/vps-aa3942/a/aede5353c4/public_html/.well-known/' is executable ampsstudio.com [Sat Aug 20 12:33:02 2022] [crit] [client 20.150.149.234:0] AH00529: /home/virtual/vps-aa3942/a/aede5353c4/public_html/.well-known/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/virtual/vps-aa3942/a/aede5353c4/public_html/.well-known/' is executable ampsstudio.com [Sat Aug 20 12:33:03 2022] [crit] [client 20.150.149.234:0] AH00529: /home/virtual/vps-aa3942/a/aede5353c4/public_html/.well-known/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/virtual/vps-aa3942/a/aede5353c4/public_html/.well-known/' is executable ampsstudio.com [Sat Aug 20 12:33:05 2022] [error] [client 20.150.149.234:0] [client 20.150.149.234] ModSecurity: Access denied with connection close (phase 2). Pattern match "^wp_is_mobile$" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "420038"] [msg "Malware.Expert - user-agent: Webshell user-agent"] [hostname "ampsstudio.com"] [uri "/wp-content/uploads/ALFA_DATA"] [unique_id "YwDGcaSIVg0lDUVddbJCsQAAAAg"] ampsstudio.com [Sat Aug 20 12:33:06 2022] [error] [client 20.150.149.234:0] [client 20.150.149.234] ModSecurity: Access denied with connection close (phase 2). Pattern match "^wp_is_mobile$" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "420038"] [msg "Malware.Expert - user-agent: Webshell user-agent"] [hostname "ampsstudio.com"] [uri "/wp-content/uploads/alfacgiapi"] [unique_id "YwDGcp1I2LtC_6wlpqD8-wAAAAM"] ampsstudio.com [Sat Aug 20 12:33:22 2022] [error] [client 20.150.149.234:0] [client 20.150.149.234] ModSecurity: Access denied with connection close (phase 2). Pattern match "^wp_is_mobile$" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "420038"] [msg "Malware.Expert - user-agent: Webshell user-agent"] [hostname "ampsstudio.com"] [uri "/wp-content/uploads/cgialfa"] [unique_id "YwDGgibX75Gkdyorwy0rYQAAAAc"] ampsstudio.com [Sat Aug 20 12:33:25 2022] [error] [client 20.150.149.234:0] [client 20.150.149.234] ModSecurity: Access denied with connection close (phase 2). Pattern match "^wp_is_mobile$" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "420038"] [msg "Malware.Expert - user-agent: Webshell user-agent"] [hostname "ampsstudio.com"] [uri "/wp-includes/ALFA_DATA"] [unique_id "YwDGhT3LF05L18LgjkpCKQAAAAI"] ampsstudio.com [Sat Aug 20 12:33:27 2022] [error] [client 20.150.149.234:0] [client 20.150.149.234] ModSecurity: Access denied with connection close (phase 2). Pattern match "^wp_is_mobile$" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "420038"] [msg "Malware.Expert - user-agent: Webshell user-agent"] [hostname "ampsstudio.com"] [uri "/wp-includes/alfacgiapi"] [unique_id "YwDGh4j0Qsm00A7P6qW0GgAAAAA"] ampsstudio.com [Sat Aug 20 12:33:29 2022] [error] [client 20.150.149.234:0] [client 20.150.149.234] ModSecurity: Access denied with connection close (phase 2). Pattern match "^wp_is_mobile$" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "420038"] [msg "Malware.Expert - user-agent: Webshell user-agent"] [hostname "ampsstudio.com"] [uri "/wp-includes/cgialfa"] [unique_id "YwDGiTOoyMe87Db1SXIC5AAAABA"] ampsstudio.com [Sat Aug 20 12:33:31 2022] [error] [client 20.150.149.234:0] [client 20.150.149.234] ModSecurity: Access denied with connection close (phase 2). Pattern match "^wp_is_mobile$" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "420038"] [msg "Malware.Expert - user-agent: Webshell user-agent"] [hostname "ampsstudio.com"] [uri "/wp-admin/ALFA_DATA"] [unique_id "YwDGi_JBYZ0pcEHCh5bxAwAAAAo"] ampsstudio.com [Sat Aug 20 12:33:33 2022] [error] [client 20.150.149.234:0] [client 20.150.149.234] ModSecurity: Access denied with connection close (phase 2). Pattern match "^wp_is_mobile$" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "420038"] [msg "Malware.Expert - user-agent: Webshell user-agent"] [hostname "ampsstudio.com"] [uri "/wp-admin/alfacgiapi"] [unique_id "YwDGjZTCCc7fH9xjLmqL3gAAAAQ"] ampsstudio.com [Sat Aug 20 12:33:35 2022] [error] [client 20.150.149.234:0] [client 20.150.149.234] ModSecurity: Access denied with connection close (phase 2). Pattern match "^wp_is_mobile$" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "420038"] [msg "Malware.Expert - user-agent: Webshell user-agent"] [hostname "ampsstudio.com"] [uri "/wp-admin/cgialfa"] [unique_id "YwDGj-8U0aoaN5i2UhGQGgAAAAY"] ampsstudio.com [Sat Aug 20 12:33:38 2022] [error] [client 20.150.149.234:0] [client 20.150.149.234] ModSecurity: Access denied with connection close (phase 2). Pattern match "^wp_is_mobile$" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "420038"] [msg "Malware.Expert - user-agent: Webshell user-agent"] [hostname "ampsstudio.com"] [uri "/wp-content/ALFA_DATA"] [unique_id "YwDGkk7VrnfdLMZ3lGSQ8AAAAAE"] ampsstudio.com [Sat Aug 20 12:33:40 2022] [error] [client 20.150.149.234:0] [client 20.150.149.234] ModSecurity: Access denied with connection close (phase 2). Pattern match "^wp_is_mobile$" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "420038"] [msg "Malware.Expert - user-agent: Webshell user-agent"] [hostname "ampsstudio.com"] [uri "/wp-content/alfacgiapi"] [unique_id "YwDGlJ1I2LtC_6wlpqD8_AAAAAM"] ampsstudio.com [Sat Aug 20 12:33:42 2022] [error] [client 20.150.149.234:0] [client 20.150.149.234] ModSecurity: Access denied with connection close (phase 2). Pattern match "^wp_is_mobile$" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "420038"] [msg "Malware.Expert - user-agent: Webshell user-agent"] [hostname "ampsstudio.com"] [uri "/wp-content/cgialfa"] [unique_id "YwDGlibX75Gkdyorwy0rYgAAAAc"] ampsstudio.com [Sat Aug 20 12:33:43 2022] [error] [client 20.150.149.234:0] [client 20.150.149.234] ModSecurity: Access denied with connection close (phase 2). Pattern match "^wp_is_mobile$" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "420038"] [msg "Malware.Expert - user-agent: Webshell user-agent"] [hostname "ampsstudio.com"] [uri "/templates/beez3/ALFA_DATA"] [unique_id "YwDGlz3LF05L18LgjkpCKgAAAAI"] ampsstudio.com [Sat Aug 20 12:33:44 2022] [error] [client 20.150.149.234:0] [client 20.150.149.234] ModSecurity: Access denied with connection close (phase 2). Pattern match "^wp_is_mobile$" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "420038"] [msg "Malware.Expert - user-agent: Webshell user-agent"] [hostname "ampsstudio.com"] [uri "/templates/beez3/alfacgiapi"] [unique_id "YwDGmIj0Qsm00A7P6qW0GwAAAAA"] ampsstudio.com [Sat Aug 20 12:33:45 2022] [error] [client 20.150.149.234:0] [client 20.150.149.234] ModSecurity: Access denied with connection close (phase 2). Pattern match "^wp_is_mobile$" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "420038"] [msg "Malware.Expert - user-agent: Webshell user-agent"] [hostname "ampsstudio.com"] [uri "/templates/beez3/cgialfa"] [unique_id "YwDGmTOoyMe87Db1SXIC5QAAABA"] ampsstudio.com [Sat Aug 20 12:33:47 2022] [error] [client 20.150.149.234:0] [client 20.150.149.234] ModSecurity: Access denied with connection close (phase 2). Pattern match "^wp_is_mobile$" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "420038"] [msg "Malware.Expert - user-agent: Webshell user-agent"] [hostname "ampsstudio.com"] [uri "/sites/default/files/ALFA_DATA"] [unique_id "YwDGm_JBYZ0pcEHCh5bxBAAAAAo"] ampsstudio.com [Sat Aug 20 12:33:48 2022] [error] [client 20.150.149.234:0] [client 20.150.149.234] ModSecurity: Access denied with connection close (phase 2). Pattern match "^wp_is_mobile$" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "420038"] [msg "Malware.Expert - user-agent: Webshell user-agent"] [hostname "ampsstudio.com"] [uri "/sites/default/files/alfacgiapi"] [unique_id "YwDGnJTCCc7fH9xjLmqL3wAAAAQ"] ampsstudio.com [Sat Aug 20 12:33:49 2022] [error] [client 20.150.149.234:0] [client 20.150.149.234] ModSecurity: Access denied with connection close (phase 2). Pattern match "^wp_is_mobile$" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "420038"] [msg "Malware.Expert - user-agent: Webshell user-agent"] [hostname "ampsstudio.com"] [uri "/sites/default/files/cgialfa"] [unique_id "YwDGne8U0aoaN5i2UhGQGwAAAAY"] ampsstudio.com [Sat Aug 20 12:33:50 2022] [error] [client 20.150.149.234:0] [client 20.150.149.234] ModSecurity: Access denied with connection close (phase 2). Pattern match "^wp_is_mobile$" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "420038"] [msg "Malware.Expert - user-agent: Webshell user-agent"] [hostname "ampsstudio.com"] [uri "/admin/controller/extension/extension/ALFA_DATA"] [unique_id "YwDGnk7VrnfdLMZ3lGSQ8QAAAAE"] ampsstudio.com [Sat Aug 20 12:33:52 2022] [error] [client 20.150.149.234:0] [client 20.150.149.234] ModSecurity: Access denied with connection close (phase 2). Pattern match "^wp_is_mobile$" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "420038"] [msg "Malware.Expert - user-agent: Webshell user-agent"] [hostname "ampsstudio.com"] [uri "/admin/controller/extension/extension/alfacgiapi"] [unique_id "YwDGoKSIVg0lDUVddbJCswAAAAg"] ampsstudio.com [Sat Aug 20 12:33:54 2022] [error] [client 20.150.149.234:0] [client 20.150.149.234] ModSecurity: Access denied with connection close (phase 2). Pattern match "^wp_is_mobile$" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "420038"] [msg "Malware.Expert - user-agent: Webshell user-agent"] [hostname "ampsstudio.com"] [uri "/admin/controller/extension/extension/cgialfa"] [unique_id "YwDGop1I2LtC_6wlpqD8_QAAAAM"] ampsstudio.com [Sat Aug 20 12:33:55 2022] [error] [client 20.150.149.234:0] [client 20.150.149.234] ModSecurity: Access denied with connection close (phase 2). Pattern match "^wp_is_mobile$" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "420038"] [msg "Malware.Expert - user-agent: Webshell user-agent"] [hostname "ampsstudio.com"] [uri "/wp-content/plugins/ubh/up.php"] [unique_id "YwDGoybX75Gkdyorwy0rYwAAAAc"] ampsstudio.com [Sat Aug 20 12:33:56 2022] [error] [client 20.150.149.234:0] [client 20.150.149.234] ModSecurity: Access denied with connection close (phase 2). Pattern match "^wp_is_mobile$" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "420038"] [msg "Malware.Expert - user-agent: Webshell user-agent"] [hostname "ampsstudio.com"] [uri "/index.php"] [unique_id "YwDGpD3LF05L18LgjkpCKwAAAAI"] ampsstudio.com [Sat Aug 20 12:33:57 2022] [error] [client 20.150.149.234:0] [client 20.150.149.234] ModSecurity: Access denied with connection close (phase 2). Pattern match "^wp_is_mobile$" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "420038"] [msg "Malware.Expert - user-agent: Webshell user-agent"] [hostname "ampsstudio.com"] [uri "/olux.php"] [unique_id "YwDGpYj0Qsm00A7P6qW0HAAAAAA"] ampsstudio.com [Sat Aug 20 12:33:58 2022] [error] [client 20.150.149.234:0] [client 20.150.149.234] ModSecurity: Access denied with connection close (phase 2). Pattern match "^wp_is_mobile$" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "420038"] [msg "Malware.Expert - user-agent: Webshell user-agent"] [hostname "ampsstudio.com"] [uri "/xleet.php"] [unique_id "YwDGpjOoyMe87Db1SXIC5gAAABA"] ampsstudio.com [Sat Aug 20 12:33:59 2022] [error] [client 20.150.149.234:0] [client 20.150.149.234] ModSecurity: Access denied with connection close (phase 2). Pattern match "^wp_is_mobile$" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "420038"] [msg "Malware.Expert - user-agent: Webshell user-agent"] [hostname "ampsstudio.com"] [uri "/wso.php"] [unique_id "YwDGp_JBYZ0pcEHCh5bxBQAAAAo"] ampsstudio.com [Sat Aug 20 12:34:00 2022] [error] [client 20.150.149.234:0] [client 20.150.149.234] ModSecurity: Access denied with connection close (phase 2). Pattern match "^wp_is_mobile$" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "420038"] [msg "Malware.Expert - user-agent: Webshell user-agent"] [hostname "ampsstudio.com"] [uri "/shell.php"] [unique_id "YwDGqJTCCc7fH9xjLmqL4AAAAAQ"] ampsstudio.com [Sat Aug 20 12:34:01 2022] [error] [client 20.150.149.234:0] [client 20.150.149.234] ModSecurity: Access denied with connection close (phase 2). Pattern match "^wp_is_mobile$" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "420038"] [msg "Malware.Expert - user-agent: Webshell user-agent"] [hostname "ampsstudio.com"] [uri "/up.php"] [unique_id "YwDGqe8U0aoaN5i2UhGQHAAAAAY"] ampsstudio.com [Sat Aug 20 12:34:02 2022] [error] [client 20.150.149.234:0] [client 20.150.149.234] ModSecurity: Access denied with connection close (phase 2). Pattern match "^wp_is_mobile$" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "420038"] [msg "Malware.Expert - user-agent: Webshell user-agent"] [hostname "ampsstudio.com"] [uri "/upload.php"] [unique_id "YwDGqk7VrnfdLMZ3lGSQ8gAAAAE"] ampsstudio.com [Sat Aug 20 12:34:02 2022] [error] [client 20.150.149.234:0] [client 20.150.149.234] ModSecurity: Access denied with connection close (phase 2). Pattern match "^wp_is_mobile$" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "420038"] [msg "Malware.Expert - user-agent: Webshell user-agent"] [hostname "ampsstudio.com"] [uri "/1.php"] [unique_id "YwDGqqSIVg0lDUVddbJCtAAAAAg"] ampsstudio.com [Sat Aug 20 12:34:03 2022] [error] [client 20.150.149.234:0] [client 20.150.149.234] ModSecurity: Access denied with connection close (phase 2). Pattern match "^wp_is_mobile$" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "420038"] [msg "Malware.Expert - user-agent: Webshell user-agent"] [hostname "ampsstudio.com"] [uri "/x.php"] [unique_id "YwDGq51I2LtC_6wlpqD8_gAAAAM"] ampsstudio.com [Sat Aug 20 12:34:04 2022] [error] [client 20.150.149.234:0] [client 20.150.149.234] ModSecurity: Access denied with connection close (phase 2). Pattern match "^wp_is_mobile$" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "420038"] [msg "Malware.Expert - user-agent: Webshell user-agent"] [hostname "ampsstudio.com"] [uri "/z.php"] [unique_id "YwDGrCbX75Gkdyorwy0rZAAAAAc"] ampsstudio.com [Sat Aug 20 12:34:05 2022] [error] [client 20.150.149.234:0] [client 20.150.149.234] ModSecurity: Access denied with connection close (phase 2). Pattern match "^wp_is_mobile$" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "420038"] [msg "Malware.Expert - user-agent: Webshell user-agent"] [hostname "ampsstudio.com"] [uri "/a.php"] [unique_id "YwDGrT3LF05L18LgjkpCLAAAAAI"] ampsstudio.com [Sat Aug 20 12:34:06 2022] [error] [client 20.150.149.234:0] [client 20.150.149.234] ModSecurity: Access denied with connection close (phase 2). Pattern match "^wp_is_mobile$" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "420038"] [msg "Malware.Expert - user-agent: Webshell user-agent"] [hostname "ampsstudio.com"] [uri "/test.php"] [unique_id "YwDGroj0Qsm00A7P6qW0HQAAAAA"] ampsstudio.com [Sat Aug 20 12:34:07 2022] [error] [client 20.150.149.234:0] [client 20.150.149.234] ModSecurity: Access denied with connection close (phase 2). Pattern match "^wp_is_mobile$" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "420038"] [msg "Malware.Expert - user-agent: Webshell user-agent"] [hostname "ampsstudio.com"] [uri "/wp.php"] [unique_id "YwDGrzOoyMe87Db1SXIC5wAAABA"] ampsstudio.com [Sat Aug 20 12:34:07 2022] [error] [client 20.150.149.234:0] [client 20.150.149.234] ModSecurity: Access denied with connection close (phase 2). Pattern match "^wp_is_mobile$" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "420038"] [msg "Malware.Expert - user-agent: Webshell user-agent"] [hostname "ampsstudio.com"] [uri "/alfa.php"] [unique_id "YwDGr_JBYZ0pcEHCh5bxBgAAAAo"] ampsstudio.com [Sat Aug 20 12:34:08 2022] [error] [client 20.150.149.234:0] [client 20.150.149.234] ModSecurity: Access denied with connection close (phase 2). Pattern match "^wp_is_mobile$" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "420038"] [msg "Malware.Expert - user-agent: Webshell user-agent"] [hostname "ampsstudio.com"] [uri "/config.php"] [unique_id "YwDGsJTCCc7fH9xjLmqL4QAAAAQ"] ampsstudio.com [Sat Aug 20 12:34:09 2022] [error] [client 20.150.149.234:0] [client 20.150.149.234] ModSecurity: Access denied with connection close (phase 2). Pattern match "^wp_is_mobile$" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "420038"] [msg "Malware.Expert - user-agent: Webshell user-agent"] [hostname "ampsstudio.com"] [uri "/templates/beez3/index.php"] [unique_id "YwDGse8U0aoaN5i2UhGQHQAAAAY"] ampsstudio.com [Sat Aug 20 12:34:10 2022] [error] [client 20.150.149.234:0] [client 20.150.149.234] ModSecurity: Access denied with connection close (phase 2). Pattern match "^wp_is_mobile$" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "420038"] [msg "Malware.Expert - user-agent: Webshell user-agent"] [hostname "ampsstudio.com"] [uri "/about.php"] [unique_id "YwDGsk7VrnfdLMZ3lGSQ8wAAAAE"] ampsstudio.com [Sat Aug 20 12:34:10 2022] [error] [client 20.150.149.234:0] [client 20.150.149.234] ModSecurity: Access denied with connection close (phase 2). Pattern match "^wp_is_mobile$" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "420038"] [msg "Malware.Expert - user-agent: Webshell user-agent"] [hostname "ampsstudio.com"] [uri "/shells.php"] [unique_id "YwDGsqSIVg0lDUVddbJCtQAAAAg"] ampsstudio.com [Sat Aug 20 13:55:46 2022] [error] [client 3.226.244.247:0] [client 3.226.244.247] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "ampsstudio.com"] [uri "/.env"] [unique_id "YwDZ0jOoyMe87Db1SXIDCQAAABA"] ampsstudio.com [Sat Aug 20 13:55:49 2022] [error] [client 3.226.244.247:0] [client 3.226.244.247] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "ampsstudio.com"] [uri "/.env.bak"] [unique_id "YwDZ1e8U0aoaN5i2UhGQPgAAAAY"] ampsstudio.com [Sat Aug 20 13:55:55 2022] [error] [client 3.226.244.247:0] [client 3.226.244.247] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "ampsstudio.com"] [uri "/laravel/.env"] [unique_id "YwDZ2_JBYZ0pcEHCh5bxJwAAAAo"] ampsstudio.com [Sat Aug 20 13:55:57 2022] [error] [client 3.226.244.247:0] [client 3.226.244.247] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "ampsstudio.com"] [uri "/local/.env"] [unique_id "YwDZ3Yj0Qsm00A7P6qW0PwAAAAA"] ampsstudio.com [Sat Aug 20 13:55:59 2022] [error] [client 3.226.244.247:0] [client 3.226.244.247] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "ampsstudio.com"] [uri "/cgi-bin/.env"] [unique_id "YwDZ36SIVg0lDUVddbJC1wAAAAg"] ampsstudio.com [Sat Aug 20 13:56:02 2022] [error] [client 3.226.244.247:0] [client 3.226.244.247] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "ampsstudio.com"] [uri "/backend/.env"] [unique_id "YwDZ4pTCCc7fH9xjLmqMAgAAAAQ"] ampsstudio.com [Sat Aug 20 13:56:11 2022] [error] [client 3.226.244.247:0] [client 3.226.244.247] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "ampsstudio.com"] [uri "/protected/.env"] [unique_id "YwDZ651I2LtC_6wlpqD9IQAAAAM"] ampsstudio.com [Sat Aug 20 13:56:13 2022] [error] [client 3.226.244.247:0] [client 3.226.244.247] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "ampsstudio.com"] [uri "/database/.env"] [unique_id "YwDZ7fJBYZ0pcEHCh5bxKAAAAAo"] ampsstudio.com [Sat Aug 20 13:56:14 2022] [error] [client 3.226.244.247:0] [client 3.226.244.247] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "ampsstudio.com"] [uri "/public/.env"] [unique_id "YwDZ7oj0Qsm00A7P6qW0QAAAAAA"] ampsstudio.com [Sat Aug 20 13:56:16 2022] [error] [client 3.226.244.247:0] [client 3.226.244.247] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "ampsstudio.com"] [uri "/app/config/.env"] [unique_id "YwDZ8KSIVg0lDUVddbJC2AAAAAg"] ampsstudio.com [Sat Aug 20 13:56:17 2022] [error] [client 3.226.244.247:0] [client 3.226.244.247] ModSecurity: Access denied with code 403 (phase 2). String match ".aws/credentials" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430069"] [msg "Malware.Expert - request_uri: AWS Credentials"] [hostname "ampsstudio.com"] [uri "/.aws/credentials"] [unique_id "YwDZ8ZTCCc7fH9xjLmqMAwAAAAQ"] mail.ampsstudio.com [Sat Aug 20 14:36:23 2022] [error] [client 20.125.150.225:0] [client 20.125.150.225] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "mail.ampsstudio.com"] [uri "/.env"] [unique_id "YwDjV90u1SK_J1VTTE9p9gAAAAk"] www.ampsstudio.com [Sat Aug 20 15:23:13 2022] [error] [client 144.172.73.66:0] AH01071: Got error 'PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179' www.ampsstudio.com [Sat Aug 20 15:23:13 2022] [error] [client 144.172.73.66:0] AH01071: Got error 'PHP message: PHP Warning: Cannot modify header information - headers already sent by (output started at /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-includes/functions.php:5275) in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/includes/sonaar-music/css/theme/custom-style.php on line 2' webdisk.ampsstudio.com [Sat Aug 20 15:49:41 2022] [error] [client 3.226.244.247:0] [client 3.226.244.247] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "webdisk.ampsstudio.com"] [uri "/.env"] [unique_id "YwD0hT3LF05L18LgjkpCgQAAAAI"] webdisk.ampsstudio.com [Sat Aug 20 15:49:56 2022] [error] [client 3.226.244.247:0] [client 3.226.244.247] ModSecurity: Access denied with code 403 (phase 2). String match "/Util/PHP/eval-stdin.php" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430046"] [msg "Malware.Expert - request_uri: CVE-2017-9841"] [hostname "webdisk.ampsstudio.com"] [uri "/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php"] [unique_id "YwD0lN0u1SK_J1VTTE9qDwAAAAk"] www.ampsstudio.com [Sat Aug 20 16:40:08 2022] [error] [client 46.35.252.130:0] AH01071: Got error 'PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179' www.ampsstudio.com [Sat Aug 20 16:40:08 2022] [error] [client 46.35.252.130:0] AH01071: Got error 'PHP message: PHP Warning: Cannot modify header information - headers already sent by (output started at /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-includes/functions.php:5275) in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/includes/sonaar-music/css/theme/custom-style.php on line 2' mail.ampsstudio.com [Sat Aug 20 19:38:30 2022] [error] [client 3.226.244.247:0] [client 3.226.244.247] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "mail.ampsstudio.com"] [uri "/.env"] [unique_id "YwEqJj3LF05L18LgjkpC2AAAAAI"] mail.ampsstudio.com [Sat Aug 20 19:38:31 2022] [error] [client 3.226.244.247:0] [client 3.226.244.247] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "mail.ampsstudio.com"] [uri "/.env.bak"] [unique_id "YwEqJ90u1SK_J1VTTE9qbwAAAAk"] mail.ampsstudio.com [Sat Aug 20 19:38:34 2022] [error] [client 3.226.244.247:0] [client 3.226.244.247] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "mail.ampsstudio.com"] [uri "/laravel/.env"] [unique_id "YwEqKpTCCc7fH9xjLmqMkwAAAAQ"] mail.ampsstudio.com [Sat Aug 20 19:38:36 2022] [error] [client 3.226.244.247:0] [client 3.226.244.247] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "mail.ampsstudio.com"] [uri "/local/.env"] [unique_id "YwEqLPJBYZ0pcEHCh5bxuQAAAAo"] mail.ampsstudio.com [Sat Aug 20 19:38:38 2022] [error] [client 3.226.244.247:0] [client 3.226.244.247] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "mail.ampsstudio.com"] [uri "/cgi-bin/.env"] [unique_id "YwEqLqCBH5evCrtwtKtcHQAAAAU"] mail.ampsstudio.com [Sat Aug 20 19:38:39 2022] [error] [client 3.226.244.247:0] [client 3.226.244.247] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "mail.ampsstudio.com"] [uri "/backend/.env"] [unique_id "YwEqLzHUkFdcj-m50SCqoQAAAAg"] mail.ampsstudio.com [Sat Aug 20 19:38:45 2022] [error] [client 3.226.244.247:0] [client 3.226.244.247] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "mail.ampsstudio.com"] [uri "/protected/.env"] [unique_id "YwEqNe8U0aoaN5i2UhGQygAAAAY"] mail.ampsstudio.com [Sat Aug 20 19:38:47 2022] [error] [client 3.226.244.247:0] [client 3.226.244.247] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "mail.ampsstudio.com"] [uri "/database/.env"] [unique_id "YwEqNz3LF05L18LgjkpC2QAAAAI"] mail.ampsstudio.com [Sat Aug 20 19:38:49 2022] [error] [client 3.226.244.247:0] [client 3.226.244.247] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "mail.ampsstudio.com"] [uri "/public/.env"] [unique_id "YwEqOd0u1SK_J1VTTE9qcAAAAAk"] mail.ampsstudio.com [Sat Aug 20 19:38:50 2022] [error] [client 3.226.244.247:0] [client 3.226.244.247] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "mail.ampsstudio.com"] [uri "/app/config/.env"] [unique_id "YwEqOoj0Qsm00A7P6qW0zgAAAAA"] mail.ampsstudio.com [Sat Aug 20 19:38:51 2022] [error] [client 3.226.244.247:0] [client 3.226.244.247] ModSecurity: Access denied with code 403 (phase 2). String match ".aws/credentials" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430069"] [msg "Malware.Expert - request_uri: AWS Credentials"] [hostname "mail.ampsstudio.com"] [uri "/.aws/credentials"] [unique_id "YwEqO5TCCc7fH9xjLmqMlAAAAAQ"] ampsstudio.com [Sat Aug 20 19:56:40 2022] [error] [client 20.25.178.115:0] AH01276: Cannot serve directory /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-admin/css/: No matching DirectoryIndex (index.php,index.html,index.htm) found, and server-generated directory index forbidden by Options directive cpanel.ampsstudio.com [Sat Aug 20 20:48:38 2022] [error] [client 156.146.63.157:0] [client 156.146.63.157] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "cpanel.ampsstudio.com"] [uri "/.env"] [unique_id "YwE6lu8U0aoaN5i2UhGQ4QAAAAY"] cpanel.ampsstudio.com [Sat Aug 20 21:19:28 2022] [error] [client 156.146.63.157:0] [client 156.146.63.157] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "cpanel.ampsstudio.com"] [uri "/.env"] [unique_id "YwFB0KCBH5evCrtwtKtcPgAAAAU"] webmail.ampsstudio.com [Sat Aug 20 23:05:03 2022] [error] [client 156.146.63.157:0] [client 156.146.63.157] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "webmail.ampsstudio.com"] [uri "/.env"] [unique_id "YwFaj90u1SK_J1VTTE9qugAAAAk"] www.ampsstudio.com [Sat Aug 20 23:10:14 2022] [error] [client 178.168.220.6:0] AH01071: Got error 'PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179' www.ampsstudio.com [Sat Aug 20 23:10:14 2022] [error] [client 178.168.220.6:0] AH01071: Got error 'PHP message: PHP Warning: Cannot modify header information - headers already sent by (output started at /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-includes/functions.php:5275) in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/includes/sonaar-music/css/theme/custom-style.php on line 2' www.ampsstudio.com [Sun Aug 21 00:42:12 2022] [error] [client 23.80.164.51:0] AH01071: Got error 'PHP message: PHP Warning: Cannot modify header information - headers already sent by (output started at /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-includes/functions.php:5275) in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/includes/sonaar-music/css/theme/custom-style.php on line 2' ampsstudio.com [Sun Aug 21 00:46:32 2022] [error] [client 20.0.44.85:0] [client 20.0.44.85] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "ampsstudio.com"] [uri "/.env"] [unique_id "YwFyWO8U0aoaN5i2UhGRKAAAAAY"] ampsstudio.com [Sun Aug 21 00:46:40 2022] [error] [client 20.0.44.85:0] [client 20.0.44.85] ModSecurity: Access denied with code 403 (phase 2). String match "/Util/PHP/eval-stdin.php" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430046"] [msg "Malware.Expert - request_uri: CVE-2017-9841"] [hostname "ampsstudio.com"] [uri "/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php"] [unique_id "YwFyYE7VrnfdLMZ3lGSSFAAAAAE"] cpanel.ampsstudio.com [Sun Aug 21 02:24:39 2022] [error] [client 3.226.244.247:0] [client 3.226.244.247] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "cpanel.ampsstudio.com"] [uri "/.env"] [unique_id "YwGJVybX75Gkdyorwy0skwAAAAc"] cpanel.ampsstudio.com [Sun Aug 21 02:24:41 2022] [error] [client 3.226.244.247:0] [client 3.226.244.247] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "cpanel.ampsstudio.com"] [uri "/.env.bak"] [unique_id "YwGJWT3LF05L18LgjkpDVwAAAAI"] cpanel.ampsstudio.com [Sun Aug 21 02:24:45 2022] [error] [client 3.226.244.247:0] [client 3.226.244.247] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "cpanel.ampsstudio.com"] [uri "/laravel/.env"] [unique_id "YwGJXe8U0aoaN5i2UhGRQwAAAAY"] cpanel.ampsstudio.com [Sun Aug 21 02:24:46 2022] [error] [client 3.226.244.247:0] [client 3.226.244.247] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "cpanel.ampsstudio.com"] [uri "/local/.env"] [unique_id "YwGJXoj0Qsm00A7P6qW1TwAAAAA"] cpanel.ampsstudio.com [Sun Aug 21 02:24:48 2022] [error] [client 3.226.244.247:0] [client 3.226.244.247] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "cpanel.ampsstudio.com"] [uri "/cgi-bin/.env"] [unique_id "YwGJYKCBH5evCrtwtKtcmwAAAAU"] cpanel.ampsstudio.com [Sun Aug 21 02:24:51 2022] [error] [client 3.226.244.247:0] [client 3.226.244.247] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "cpanel.ampsstudio.com"] [uri "/backend/.env"] [unique_id "YwGJY5TCCc7fH9xjLmqNFAAAAAQ"] cpanel.ampsstudio.com [Sun Aug 21 02:24:57 2022] [error] [client 3.226.244.247:0] [client 3.226.244.247] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "cpanel.ampsstudio.com"] [uri "/protected/.env"] [unique_id "YwGJaTHUkFdcj-m50SCrIwAAAAg"] cpanel.ampsstudio.com [Sun Aug 21 02:24:58 2022] [error] [client 3.226.244.247:0] [client 3.226.244.247] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "cpanel.ampsstudio.com"] [uri "/database/.env"] [unique_id "YwGJaibX75Gkdyorwy0slAAAAAc"] cpanel.ampsstudio.com [Sun Aug 21 02:25:01 2022] [error] [client 3.226.244.247:0] [client 3.226.244.247] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "cpanel.ampsstudio.com"] [uri "/public/.env"] [unique_id "YwGJbT3LF05L18LgjkpDWAAAAAI"] cpanel.ampsstudio.com [Sun Aug 21 02:25:02 2022] [error] [client 3.226.244.247:0] [client 3.226.244.247] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "cpanel.ampsstudio.com"] [uri "/app/config/.env"] [unique_id "YwGJbk7VrnfdLMZ3lGSSMAAAAAE"] cpanel.ampsstudio.com [Sun Aug 21 02:25:05 2022] [error] [client 3.226.244.247:0] [client 3.226.244.247] ModSecurity: Access denied with code 403 (phase 2). String match ".aws/credentials" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430069"] [msg "Malware.Expert - request_uri: AWS Credentials"] [hostname "cpanel.ampsstudio.com"] [uri "/.aws/credentials"] [unique_id "YwGJce8U0aoaN5i2UhGRRAAAAAY"] mail.ampsstudio.com [Sun Aug 21 05:35:39 2022] [error] [client 156.146.63.157:0] [client 156.146.63.157] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "mail.ampsstudio.com"] [uri "/.env"] [unique_id "YwG2G-J7zPT65_8nwpSeYAAAAAk"] ampsstudio.com [Sun Aug 21 06:43:12 2022] [error] [client 20.127.196.24:0] AH01276: Cannot serve directory /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-admin/css/: No matching DirectoryIndex (index.php,index.html,index.htm) found, and server-generated directory index forbidden by Options directive www.ampsstudio.com [Sun Aug 21 08:26:53 2022] [error] [client 45.39.252.241:0] AH01071: Got error 'PHP message: PHP Warning: Cannot modify header information - headers already sent by (output started at /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-includes/functions.php:5275) in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/includes/sonaar-music/css/theme/custom-style.php on line 2' www.ampsstudio.com [Sun Aug 21 08:34:34 2022] [error] [client 94.181.152.44:0] AH01071: Got error 'PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179' www.ampsstudio.com [Sun Aug 21 08:34:34 2022] [error] [client 94.181.152.44:0] AH01071: Got error 'PHP message: PHP Warning: Cannot modify header information - headers already sent by (output started at /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-includes/functions.php:5275) in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/includes/sonaar-music/css/theme/custom-style.php on line 2' mail.ampsstudio.com [Sun Aug 21 09:42:55 2022] [error] [client 51.104.47.213:0] [client 51.104.47.213] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "mail.ampsstudio.com"] [uri "/.env"] [unique_id "YwHwD1PCy0MFqE9zIDrTtgAAAAA"] mail.ampsstudio.com [Sun Aug 21 09:42:55 2022] [error] [client 51.104.47.213:0] [client 51.104.47.213] ModSecurity: Access denied with code 403 (phase 2). String match "/.git/config" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430058"] [msg "Malware.Expert - request_uri: .git config"] [hostname "mail.ampsstudio.com"] [uri "/.git/config"] [unique_id "YwHwD34vElCf-HzPTfsb8gAAAAo"] www.ampsstudio.com [Sun Aug 21 10:36:20 2022] [error] [client 81.103.40.184:0] AH01071: Got error 'PHP message: PHP Warning: Cannot modify header information - headers already sent by (output started at /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-includes/functions.php:5275) in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/includes/sonaar-music/css/theme/custom-style.php on line 2' ampsstudio.com [Sun Aug 21 10:37:13 2022] [error] [client 51.104.47.213:0] [client 51.104.47.213] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "ampsstudio.com"] [uri "/.env"] [unique_id "YwH8yZxV_5tlVzxUIYD1eQAAAAg"] ampsstudio.com [Sun Aug 21 10:37:13 2022] [error] [client 51.104.47.213:0] [client 51.104.47.213] ModSecurity: Access denied with code 403 (phase 2). String match "/.git/config" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430058"] [msg "Malware.Expert - request_uri: .git config"] [hostname "ampsstudio.com"] [uri "/.git/config"] [unique_id "YwH8ybr3xlpDxLbh9cxJSgAAAAY"] cpanel.ampsstudio.com [Sun Aug 21 11:04:00 2022] [error] [client 51.104.47.213:0] [client 51.104.47.213] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "cpanel.ampsstudio.com"] [uri "/.env"] [unique_id "YwIDEOz1a6dO4ZDv49cVXgAAAAQ"] cpanel.ampsstudio.com [Sun Aug 21 11:04:01 2022] [error] [client 51.104.47.213:0] [client 51.104.47.213] ModSecurity: Access denied with code 403 (phase 2). String match "/.git/config" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430058"] [msg "Malware.Expert - request_uri: .git config"] [hostname "cpanel.ampsstudio.com"] [uri "/.git/config"] [unique_id "YwIDEX4vElCf-HzPTfscKQAAAAo"] webdisk.ampsstudio.com [Sun Aug 21 11:04:31 2022] [error] [client 51.104.47.213:0] [client 51.104.47.213] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "webdisk.ampsstudio.com"] [uri "/.env"] [unique_id "YwIDL7r3xlpDxLbh9cxJVQAAAAY"] webdisk.ampsstudio.com [Sun Aug 21 11:04:31 2022] [error] [client 51.104.47.213:0] [client 51.104.47.213] ModSecurity: Access denied with code 403 (phase 2). String match "/.git/config" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430058"] [msg "Malware.Expert - request_uri: .git config"] [hostname "webdisk.ampsstudio.com"] [uri "/.git/config"] [unique_id "YwIDL7EsShpunwPMmQxwwAAAAAs"] webmail.ampsstudio.com [Sun Aug 21 11:16:55 2022] [error] [client 51.104.47.213:0] [client 51.104.47.213] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "webmail.ampsstudio.com"] [uri "/.env"] [unique_id "YwIGFz7UOS47S0orfMwzhQAAAAM"] webmail.ampsstudio.com [Sun Aug 21 11:16:55 2022] [error] [client 51.104.47.213:0] [client 51.104.47.213] ModSecurity: Access denied with code 403 (phase 2). String match "/.git/config" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430058"] [msg "Malware.Expert - request_uri: .git config"] [hostname "webmail.ampsstudio.com"] [uri "/.git/config"] [unique_id "YwIGFxkkhRfNkWetCn5GPgAAAAU"] mail.ampsstudio.com [Sun Aug 21 12:57:55 2022] [error] [client 156.146.63.157:0] [client 156.146.63.157] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "mail.ampsstudio.com"] [uri "/.env"] [unique_id "YwIdw34vElCf-HzPTfscVAAAAAo"] www.ampsstudio.com [Sun Aug 21 13:02:06 2022] [error] [client 20.0.44.85:0] [client 20.0.44.85] ModSecurity: Access denied with code 403 (phase 2). String match "connector.minimal.php" at REQUEST_URI. [file "remote server"] [line "-1"] [id "500083"] [msg "Malware.Expert - request_uri: 0-Day - Wordpress filemanager plugin"] [hostname "www.ampsstudio.com"] [uri "/wp-content/plugins/wp-file-manager/lib/php/connector.minimal.php"] [unique_id "YwIevrr3xlpDxLbh9cxJhAAAAAY"] www.ampsstudio.com [Sun Aug 21 13:02:11 2022] [error] [client 20.0.44.85:0] [client 20.0.44.85] ModSecurity: Access denied with code 403 (phase 2). Pattern match "/wp-content/plugins/wp-file-manager/lib/files/.*\\\\.php" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430056"] [msg "Malware.Expert - request_uri: Wordpress - prevent PHP files from executing"] [hostname "www.ampsstudio.com"] [uri "/wp-content/plugins/wp-file-manager/lib/files/x.php"] [unique_id "YwIew34vElCf-HzPTfscVgAAAAo"] www.ampsstudio.com [Sun Aug 21 13:02:15 2022] [error] [client 20.0.44.85:0] [client 20.0.44.85] ModSecurity: Access denied with code 403 (phase 2). Pattern match "/wp-content/plugins/wp-file-manager/lib/files/.*\\\\.php" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430056"] [msg "Malware.Expert - request_uri: Wordpress - prevent PHP files from executing"] [hostname "www.ampsstudio.com"] [uri "/wp-content/plugins/wp-file-manager/lib/files/x.php"] [unique_id "YwIex1PCy0MFqE9zIDrUIwAAAAA"] www.ampsstudio.com [Sun Aug 21 13:25:05 2022] [crit] [client 66.249.93.14:0] AH00529: /home/virtual/vps-aa3942/a/aede5353c4/public_html/.well-known/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/virtual/vps-aa3942/a/aede5353c4/public_html/.well-known/' is executable www.ampsstudio.com [Sun Aug 21 15:12:15 2022] [error] [client 20.0.44.85:0] [client 20.0.44.85] ModSecurity: Access denied with code 403 (phase 2). Match of "contains index.php" against "REQUEST_URI" required. [file "remote server"] [line "-1"] [id "570076"] [msg "Malware.Expert - Malware"] [hostname "www.ampsstudio.com"] [uri "/wp-plain.php"] [unique_id "YwI9PxkkhRfNkWetCn5GpQAAAAU"] www.ampsstudio.com [Sun Aug 21 15:12:33 2022] [error] [client 20.0.44.85:0] [client 20.0.44.85] ModSecurity: Access denied with code 403 (phase 2). Match of "contains index.php" against "REQUEST_URI" required. [file "remote server"] [line "-1"] [id "570076"] [msg "Malware.Expert - Malware"] [hostname "www.ampsstudio.com"] [uri "/wp-plain.php"] [unique_id "YwI9UVPCy0MFqE9zIDrUXwAAAAA"] www.ampsstudio.com [Sun Aug 21 15:32:41 2022] [error] [client 20.204.98.114:0] [client 20.204.98.114] ModSecurity: Access denied with code 403 (phase 2). Match of "contains index.php" against "REQUEST_URI" required. [file "remote server"] [line "-1"] [id "570076"] [msg "Malware.Expert - Malware"] [hostname "www.ampsstudio.com"] [uri "/wp-plain.php"] [unique_id "YwJCCUm5XGmabS3OcELb2QAAAAc"] www.ampsstudio.com [Sun Aug 21 15:32:54 2022] [error] [client 20.204.98.114:0] [client 20.204.98.114] ModSecurity: Access denied with code 403 (phase 2). Match of "contains index.php" against "REQUEST_URI" required. [file "remote server"] [line "-1"] [id "570076"] [msg "Malware.Expert - Malware"] [hostname "www.ampsstudio.com"] [uri "/wp-plain.php"] [unique_id "YwJCFlPCy0MFqE9zIDrUagAAAAA"] www.ampsstudio.com [Sun Aug 21 16:53:09 2022] [error] [client 91.132.144.59:0] AH01071: Got error 'PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179' www.ampsstudio.com [Sun Aug 21 16:53:09 2022] [error] [client 91.132.144.59:0] AH01071: Got error 'PHP message: PHP Warning: Cannot modify header information - headers already sent by (output started at /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-includes/functions.php:5275) in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/includes/sonaar-music/css/theme/custom-style.php on line 2' ampsstudio.com [Sun Aug 21 16:58:35 2022] [error] [client 40.81.235.115:0] AH01276: Cannot serve directory /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-admin/css/: No matching DirectoryIndex (index.php,index.html,index.htm) found, and server-generated directory index forbidden by Options directive webdisk.ampsstudio.com [Sun Aug 21 19:08:24 2022] [error] [client 3.226.244.247:0] [client 3.226.244.247] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "webdisk.ampsstudio.com"] [uri "/.env"] [unique_id "YwJ0mPyCSx8SuccmbzB13gAAAAI"] webdisk.ampsstudio.com [Sun Aug 21 19:08:25 2022] [error] [client 3.226.244.247:0] [client 3.226.244.247] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "webdisk.ampsstudio.com"] [uri "/.env.bak"] [unique_id "YwJ0meyFw9CtRpo826BpMgAAAAo"] webdisk.ampsstudio.com [Sun Aug 21 19:08:27 2022] [error] [client 3.226.244.247:0] [client 3.226.244.247] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "webdisk.ampsstudio.com"] [uri "/laravel/.env"] [unique_id "YwJ0m1PCy0MFqE9zIDrUzAAAAAA"] webdisk.ampsstudio.com [Sun Aug 21 19:08:28 2022] [error] [client 3.226.244.247:0] [client 3.226.244.247] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "webdisk.ampsstudio.com"] [uri "/local/.env"] [unique_id "YwJ0nLr3xlpDxLbh9cxKMAAAAAY"] webdisk.ampsstudio.com [Sun Aug 21 19:08:29 2022] [error] [client 3.226.244.247:0] [client 3.226.244.247] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "webdisk.ampsstudio.com"] [uri "/cgi-bin/.env"] [unique_id "YwJ0neJ7zPT65_8nwpSf2wAAAAk"] webdisk.ampsstudio.com [Sun Aug 21 19:08:30 2022] [error] [client 3.226.244.247:0] [client 3.226.244.247] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "webdisk.ampsstudio.com"] [uri "/backend/.env"] [unique_id "YwJ0nuz1a6dO4ZDv49cWPQAAAAQ"] webdisk.ampsstudio.com [Sun Aug 21 19:08:34 2022] [error] [client 3.226.244.247:0] [client 3.226.244.247] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "webdisk.ampsstudio.com"] [uri "/protected/.env"] [unique_id "YwJ0osAut-YQ-SviQi2B5AAAAAg"] webdisk.ampsstudio.com [Sun Aug 21 19:08:35 2022] [error] [client 3.226.244.247:0] [client 3.226.244.247] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "webdisk.ampsstudio.com"] [uri "/database/.env"] [unique_id "YwJ0o_yCSx8SuccmbzB13wAAAAI"] webdisk.ampsstudio.com [Sun Aug 21 19:08:36 2022] [error] [client 3.226.244.247:0] [client 3.226.244.247] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "webdisk.ampsstudio.com"] [uri "/public/.env"] [unique_id "YwJ0pOyFw9CtRpo826BpMwAAAAo"] webdisk.ampsstudio.com [Sun Aug 21 19:08:36 2022] [error] [client 3.226.244.247:0] [client 3.226.244.247] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "webdisk.ampsstudio.com"] [uri "/app/config/.env"] [unique_id "YwJ0pBkkhRfNkWetCn5HDQAAAAU"] webdisk.ampsstudio.com [Sun Aug 21 19:08:38 2022] [error] [client 3.226.244.247:0] [client 3.226.244.247] ModSecurity: Access denied with code 403 (phase 2). String match ".aws/credentials" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430069"] [msg "Malware.Expert - request_uri: AWS Credentials"] [hostname "webdisk.ampsstudio.com"] [uri "/.aws/credentials"] [unique_id "YwJ0plPCy0MFqE9zIDrUzQAAAAA"] ampsstudio.com [Sun Aug 21 19:46:24 2022] [error] [client 20.232.15.218:0] [client 20.232.15.218] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "ampsstudio.com"] [uri "/.env"] [unique_id "YwJ9gPyCSx8SuccmbzB19QAAAAI"] mail.ampsstudio.com [Sun Aug 21 20:24:52 2022] [error] [client 156.146.63.157:0] [client 156.146.63.157] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "mail.ampsstudio.com"] [uri "/.env"] [unique_id "YwKGhLr3xlpDxLbh9cxKUQAAAAY"] ampsstudio.com [Sun Aug 21 21:04:04 2022] [error] [client 109.206.241.214:0] AH01276: Cannot serve directory /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-admin/css/: No matching DirectoryIndex (index.php,index.html,index.htm) found, and server-generated directory index forbidden by Options directive webmail.ampsstudio.com [Sun Aug 21 21:40:55 2022] [error] [client 20.125.150.225:0] [client 20.125.150.225] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "webmail.ampsstudio.com"] [uri "/.env"] [unique_id "YwKYV-J7zPT65_8nwpSgEwAAAAk"] ampsstudio.com [Sun Aug 21 22:03:13 2022] [error] [client 156.146.63.157:0] [client 156.146.63.157] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "ampsstudio.com"] [uri "/.env"] [unique_id "YwKdkez1a6dO4ZDv49cWgwAAAAQ"] webdisk.ampsstudio.com [Sun Aug 21 22:58:09 2022] [error] [client 40.81.235.115:0] AH01276: Cannot serve directory /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-admin/css/: No matching DirectoryIndex (index.php,index.html,index.htm) found, and server-generated directory index forbidden by Options directive mail.ampsstudio.com [Sun Aug 21 23:10:33 2022] [error] [client 40.81.235.115:0] AH01276: Cannot serve directory /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-admin/css/: No matching DirectoryIndex (index.php,index.html,index.htm) found, and server-generated directory index forbidden by Options directive www.ampsstudio.com [Mon Aug 22 02:31:15 2022] [error] [client 23.236.168.168:0] AH01071: Got error 'PHP message: PHP Warning: Cannot modify header information - headers already sent by (output started at /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-includes/functions.php:5275) in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/includes/sonaar-music/css/theme/custom-style.php on line 2' webdisk.ampsstudio.com [Mon Aug 22 02:49:17 2022] [error] [client 156.146.63.157:0] [client 156.146.63.157] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "webdisk.ampsstudio.com"] [uri "/.env"] [unique_id "YwLgnbr3xlpDxLbh9cxKwAAAAAY"] www.ampsstudio.com [Mon Aug 22 04:03:08 2022] [error] [client 161.117.10.233:0] AH01071: Got error 'PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179' www.ampsstudio.com [Mon Aug 22 04:03:08 2022] [error] [client 161.117.10.233:0] AH01071: Got error 'PHP message: PHP Warning: Cannot modify header information - headers already sent by (output started at /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-includes/functions.php:5275) in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/includes/sonaar-music/css/theme/custom-style.php on line 2' www.ampsstudio.com [Mon Aug 22 04:03:08 2022] [error] [client 161.117.5.252:0] AH01071: Got error 'PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179' www.ampsstudio.com [Mon Aug 22 04:03:08 2022] [error] [client 161.117.5.252:0] AH01071: Got error 'PHP message: PHP Warning: Cannot modify header information - headers already sent by (output started at /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-includes/functions.php:5275) in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/includes/sonaar-music/css/theme/custom-style.php on line 2' ampsstudio.com [Mon Aug 22 04:05:21 2022] [error] [client 85.31.46.140:0] AH01276: Cannot serve directory /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-admin/css/: No matching DirectoryIndex (index.php,index.html,index.htm) found, and server-generated directory index forbidden by Options directive cpanel.ampsstudio.com [Mon Aug 22 04:06:33 2022] [error] [client 156.146.63.157:0] [client 156.146.63.157] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "cpanel.ampsstudio.com"] [uri "/.env"] [unique_id "YwLyuVEtCDAsLAro0dBZrwAAAAU"] www.ampsstudio.com [Mon Aug 22 04:12:23 2022] [error] [client 185.220.102.241:0] AH01071: Got error 'PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179' www.ampsstudio.com [Mon Aug 22 04:12:23 2022] [error] [client 185.220.102.241:0] AH01071: Got error 'PHP message: PHP Warning: Cannot modify header information - headers already sent by (output started at /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-includes/functions.php:5275) in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/includes/sonaar-music/css/theme/custom-style.php on line 2' webmail.ampsstudio.com [Mon Aug 22 04:19:24 2022] [error] [client 156.146.63.157:0] [client 156.146.63.157] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "webmail.ampsstudio.com"] [uri "/.env"] [unique_id "YwL1vPNmiS09QRrJYv0u5AAAAAk"] www.ampsstudio.com [Mon Aug 22 05:02:03 2022] [error] [client 185.195.71.3:0] AH01071: Got error 'PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179' www.ampsstudio.com [Mon Aug 22 05:02:03 2022] [error] [client 185.195.71.3:0] AH01071: Got error 'PHP message: PHP Warning: Cannot modify header information - headers already sent by (output started at /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-includes/functions.php:5275) in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/includes/sonaar-music/css/theme/custom-style.php on line 2' mail.ampsstudio.com [Mon Aug 22 05:52:44 2022] [error] [client 156.146.63.157:0] [client 156.146.63.157] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "mail.ampsstudio.com"] [uri "/.env"] [unique_id "YwMLnA-A32Fmnh6uLs1pJQAAAAE"] ampsstudio.com [Mon Aug 22 06:11:40 2022] [error] [client 20.0.44.85:0] [client 20.0.44.85] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "ampsstudio.com"] [uri "/.env"] [unique_id "YwMQDL7Jx4SisE8TAdXMfwAAAAM"] ampsstudio.com [Mon Aug 22 06:11:43 2022] [error] [client 20.0.44.85:0] [client 20.0.44.85] ModSecurity: Access denied with code 403 (phase 2). String match "/Util/PHP/eval-stdin.php" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430046"] [msg "Malware.Expert - request_uri: CVE-2017-9841"] [hostname "ampsstudio.com"] [uri "/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php"] [unique_id "YwMQD_NmiS09QRrJYv0vDAAAAAk"] webmail.ampsstudio.com [Mon Aug 22 08:51:01 2022] [error] [client 156.146.63.157:0] [client 156.146.63.157] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "webmail.ampsstudio.com"] [uri "/.env"] [unique_id "YwM1ZQwMcaHfvloHUxjRJgAAAAY"] www.ampsstudio.com [Mon Aug 22 10:32:02 2022] [crit] [client 66.249.93.18:0] AH00529: /home/virtual/vps-aa3942/a/aede5353c4/public_html/.well-known/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/virtual/vps-aa3942/a/aede5353c4/public_html/.well-known/' is executable ampsstudio.com [Mon Aug 22 10:34:50 2022] [error] [client 156.146.63.157:0] [client 156.146.63.157] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "ampsstudio.com"] [uri "/.env"] [unique_id "YwNNuqMmdpwjGmxeoY_7YwAAAAo"] ampsstudio.com [Mon Aug 22 11:03:05 2022] [error] [client 185.225.73.129:0] [client 185.225.73.129] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "ampsstudio.com"] [uri "/.env"] [unique_id "YwNUWVEtCDAsLAro0dBadQAAAAU"] cpanel.ampsstudio.com [Mon Aug 22 11:17:45 2022] [error] [client 109.206.241.214:0] AH01276: Cannot serve directory /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-admin/css/: No matching DirectoryIndex (index.php,index.html,index.htm) found, and server-generated directory index forbidden by Options directive cpanel.ampsstudio.com [Mon Aug 22 14:16:52 2022] [error] [client 156.146.63.157:0] [client 156.146.63.157] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "cpanel.ampsstudio.com"] [uri "/.env"] [unique_id "YwOBxFEtCDAsLAro0dBbeQAAAAU"] www.ampsstudio.com [Mon Aug 22 16:22:04 2022] [error] [client 46.3.197.7:0] AH01071: Got error 'PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179' www.ampsstudio.com [Mon Aug 22 16:22:04 2022] [error] [client 46.3.197.7:0] AH01071: Got error 'PHP message: PHP Warning: Cannot modify header information - headers already sent by (output started at /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-includes/functions.php:5275) in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/includes/sonaar-music/css/theme/custom-style.php on line 2' ampsstudio.com [Mon Aug 22 16:35:52 2022] [error] [client 52.188.192.242:0] [client 52.188.192.242] ModSecurity: Access denied with code 403 (phase 2). Pattern match "/wp-content/uploads/.*\\\\.php" at REQUEST_FILENAME. [file "remote server"] [line "-1"] [id "430017"] [msg "Malware.Expert - request_uri: Wordpress - prevent PHP files from executing"] [hostname "ampsstudio.com"] [uri "/wp-content/uploads/2021/12/up.php"] [unique_id "YwOiWOUrnFfOBRx0YSaD8QAAAAk"] ampsstudio.com [Mon Aug 22 16:36:05 2022] [error] [client 52.188.192.242:0] [client 52.188.192.242] ModSecurity: Access denied with code 403 (phase 2). String match "python" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "580102"] [msg "Malware.Expert - Wordpress - unknown python request"] [hostname "ampsstudio.com"] [uri "/wp-admin/alfa.php"] [unique_id "YwOiZeUrnFfOBRx0YSaD8gAAAAk"] ampsstudio.com [Mon Aug 22 16:36:09 2022] [error] [client 52.188.192.242:0] [client 52.188.192.242] ModSecurity: Access denied with code 403 (phase 2). String match "python" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "580100"] [msg "Malware.Expert - Wordpress - unknown python request"] [hostname "ampsstudio.com"] [uri "/wp-includes/fw.php"] [unique_id "YwOiabBaiwFRInnzKSmYuQAAAAI"] ampsstudio.com [Mon Aug 22 16:36:10 2022] [error] [client 52.188.192.242:0] [client 52.188.192.242] ModSecurity: Access denied with code 403 (phase 2). String match "python" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "580101"] [msg "Malware.Expert - Wordpress - unknown python request"] [hostname "ampsstudio.com"] [uri "/wp-content/fw.php"] [unique_id "YwOiagTaQWuJJM6aa-mMbQAAAAE"] ampsstudio.com [Mon Aug 22 16:36:11 2022] [error] [client 52.188.192.242:0] [client 52.188.192.242] ModSecurity: Access denied with code 403 (phase 2). String match "python" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "580102"] [msg "Malware.Expert - Wordpress - unknown python request"] [hostname "ampsstudio.com"] [uri "/wp-admin/fw.php"] [unique_id "YwOia2hRUn3fDO_xt-pQOQAAAAg"] ampsstudio.com [Mon Aug 22 16:36:12 2022] [error] [client 52.188.192.242:0] [client 52.188.192.242] ModSecurity: Access denied with code 403 (phase 2). Pattern match "/wp-content/uploads/.*\\\\.php" at REQUEST_FILENAME. [file "remote server"] [line "-1"] [id "430017"] [msg "Malware.Expert - request_uri: Wordpress - prevent PHP files from executing"] [hostname "ampsstudio.com"] [uri "/wp-content/uploads/2021/12/fw.php"] [unique_id "YwOibAwMcaHfvloHUxjTeQAAAAY"] ampsstudio.com [Mon Aug 22 16:36:12 2022] [error] [client 52.188.192.242:0] [client 52.188.192.242] ModSecurity: Access denied with code 403 (phase 2). String match "/wso.php" at REQUEST_URI. [file "remote server"] [line "-1"] [id "570066"] [msg "Malware.Expert - PHP Command Shell (WSO)"] [hostname "ampsstudio.com"] [uri "/wp-includes/wso.php"] [unique_id "YwOibFEtCDAsLAro0dBcfwAAAAU"] ampsstudio.com [Mon Aug 22 16:36:13 2022] [error] [client 52.188.192.242:0] [client 52.188.192.242] ModSecurity: Access denied with code 403 (phase 2). String match "/wso.php" at REQUEST_URI. [file "remote server"] [line "-1"] [id "570066"] [msg "Malware.Expert - PHP Command Shell (WSO)"] [hostname "ampsstudio.com"] [uri "/wp-content/wso.php"] [unique_id "YwOibYeCK5jIpYKYSANsfwAAAAc"] ampsstudio.com [Mon Aug 22 16:36:14 2022] [error] [client 52.188.192.242:0] [client 52.188.192.242] ModSecurity: Access denied with code 403 (phase 2). String match "/wso.php" at REQUEST_URI. [file "remote server"] [line "-1"] [id "570066"] [msg "Malware.Expert - PHP Command Shell (WSO)"] [hostname "ampsstudio.com"] [uri "/wp-admin/wso.php"] [unique_id "YwOibh7wZGI8D_nmixvFCQAAAAo"] ampsstudio.com [Mon Aug 22 16:36:24 2022] [error] [client 52.188.192.242:0] [client 52.188.192.242] ModSecurity: Access denied with code 403 (phase 2). String match "/shell.php" at REQUEST_URI. [file "remote server"] [line "-1"] [id "570072"] [msg "Malware.Expert - PHP Command Shell"] [hostname "ampsstudio.com"] [uri "/shell.php"] [unique_id "YwOieB7wZGI8D_nmixvFCgAAAAo"] ampsstudio.com [Mon Aug 22 16:36:25 2022] [error] [client 52.188.192.242:0] [client 52.188.192.242] ModSecurity: Access denied with code 403 (phase 2). String match "connector.minimal.php" at REQUEST_URI. [file "remote server"] [line "-1"] [id "500083"] [msg "Malware.Expert - request_uri: 0-Day - Wordpress filemanager plugin"] [hostname "ampsstudio.com"] [uri "/wp-content/plugins/wp-file-manager/lib/php/connector.minimal.php"] [unique_id "YwOieQwMcaHfvloHUxjTegAAAAY"] www.ampsstudio.com [Mon Aug 22 17:59:19 2022] [error] [client 154.6.18.64:0] AH01071: Got error 'PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179' www.ampsstudio.com [Mon Aug 22 17:59:19 2022] [error] [client 154.6.18.64:0] AH01071: Got error 'PHP message: PHP Warning: Cannot modify header information - headers already sent by (output started at /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-includes/functions.php:5275) in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/includes/sonaar-music/css/theme/custom-style.php on line 2' www.ampsstudio.com [Mon Aug 22 23:20:02 2022] [error] [client 20.214.206.132:0] [client 20.214.206.132] ModSecurity: Access denied with code 403 (phase 2). Match of "contains index.php" against "REQUEST_URI" required. [file "remote server"] [line "-1"] [id "570076"] [msg "Malware.Expert - Malware"] [hostname "www.ampsstudio.com"] [uri "/wp-plain.php"] [unique_id "YwQBEowcAoF7ic4OzjKzkQAAAAg"] www.ampsstudio.com [Mon Aug 22 23:20:06 2022] [error] [client 20.214.206.132:0] [client 20.214.206.132] ModSecurity: Access denied with code 403 (phase 2). String match "php.suspected" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430059"] [msg "Malware.Expert - request_uri: .PHP suspected files"] [hostname "www.ampsstudio.com"] [uri "/wp-content/plugins/apikey/apikey.php.suspected"] [unique_id "YwQBFkXGvjBFm8nW3zE48QAAAAA"] www.ampsstudio.com [Mon Aug 22 23:20:06 2022] [error] [client 20.214.206.132:0] [client 20.214.206.132] ModSecurity: Access denied with code 403 (phase 2). String match "php.suspected" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430059"] [msg "Malware.Expert - request_uri: .PHP suspected files"] [hostname "www.ampsstudio.com"] [uri "/plugins/content/apismtp/apismtp.php.suspected"] [unique_id "YwQBFrBaiwFRInnzKSmZVwAAAAI"] ampsstudio.com [Tue Aug 23 02:18:41 2022] [error] [client 195.178.120.89:0] [client 195.178.120.89] ModSecurity: Access denied with code 403 (phase 2). Match of "contains index.php" against "REQUEST_URI" required. [file "remote server"] [line "-1"] [id "570076"] [msg "Malware.Expert - Malware"] [hostname "ampsstudio.com"] [uri "/wp-admin/admin-post.php"] [unique_id "YwQq8QpnufTFr_56na8Q8AAAAAY"] ampsstudio.com [Tue Aug 23 02:18:41 2022] [error] [client 195.178.120.89:0] [client 195.178.120.89] ModSecurity: Access denied with code 403 (phase 2). Pattern match "/wp-content/plugins/.*/up\\\\.php" at REQUEST_URI. [file "remote server"] [line "-1"] [id "570052"] [msg "Malware.Expert - Malware"] [hostname "ampsstudio.com"] [uri "/wp-content/plugins/instabuilder2/cache/up.php"] [unique_id "YwQq8YwcAoF7ic4OzjKzxwAAAAg"] ampsstudio.com [Tue Aug 23 02:18:41 2022] [error] [client 195.178.120.89:0] [client 195.178.120.89] ModSecurity: Access denied with code 403 (phase 2). Match of "contains index.php" against "REQUEST_URI" required. [file "remote server"] [line "-1"] [id "570076"] [msg "Malware.Expert - Malware"] [hostname "ampsstudio.com"] [uri "/wp-admin/admin-ajax.php"] [unique_id "YwQq8UXGvjBFm8nW3zE5JgAAAAA"] ampsstudio.com [Tue Aug 23 02:18:42 2022] [error] [client 195.178.120.89:0] [client 195.178.120.89] ModSecurity: Access denied with code 403 (phase 2). Match of "contains index.php" against "REQUEST_URI" required. [file "remote server"] [line "-1"] [id "570076"] [msg "Malware.Expert - Malware"] [hostname "ampsstudio.com"] [uri "/wp-admin/admin-ajax.php"] [unique_id "YwQq8h7wZGI8D_nmixvF2QAAAAo"] ampsstudio.com [Tue Aug 23 02:18:42 2022] [error] [client 195.178.120.89:0] [client 195.178.120.89] ModSecurity: Access denied with code 403 (phase 1). Pattern match "\\\\.\\\\./\\\\.\\\\." at REQUEST_URI. [file "remote server"] [line "-1"] [id "430064"] [msg "Malware.Expert - request_uri: directory travel"] [hostname "ampsstudio.com"] [uri "/wp-content/plugins/fwduvp/content/downloader.php"] [unique_id "YwQq8r3c0O_v7ngUbhGLfgAAAAM"] ampsstudio.com [Tue Aug 23 02:19:44 2022] [error] [client 195.178.120.89:0] [client 195.178.120.89] ModSecurity: Access denied with code 403 (phase 2). Match of "contains index.php" against "REQUEST_URI" required. [file "remote server"] [line "-1"] [id "570076"] [msg "Malware.Expert - Malware"] [hostname "ampsstudio.com"] [uri "/wp-admin/admin-post.php"] [unique_id "YwQrMByFQpDRH968VMa6TgAAAAQ"] ampsstudio.com [Tue Aug 23 02:19:44 2022] [error] [client 195.178.120.89:0] [client 195.178.120.89] ModSecurity: Access denied with code 403 (phase 2). Pattern match "/wp-content/plugins/.*/up\\\\.php" at REQUEST_URI. [file "remote server"] [line "-1"] [id "570052"] [msg "Malware.Expert - Malware"] [hostname "ampsstudio.com"] [uri "/wp-content/plugins/instabuilder2/cache/up.php"] [unique_id "YwQrMEF5pdMHm1m9wszOSwAAAA4"] ampsstudio.com [Tue Aug 23 02:19:45 2022] [error] [client 195.178.120.89:0] [client 195.178.120.89] ModSecurity: Access denied with code 403 (phase 2). Match of "contains index.php" against "REQUEST_URI" required. [file "remote server"] [line "-1"] [id "570076"] [msg "Malware.Expert - Malware"] [hostname "ampsstudio.com"] [uri "/wp-admin/admin-ajax.php"] [unique_id "YwQrMVEtCDAsLAro0dBdYQAAAAU"] ampsstudio.com [Tue Aug 23 02:19:45 2022] [error] [client 195.178.120.89:0] [client 195.178.120.89] ModSecurity: Access denied with code 403 (phase 2). Match of "contains index.php" against "REQUEST_URI" required. [file "remote server"] [line "-1"] [id "570076"] [msg "Malware.Expert - Malware"] [hostname "ampsstudio.com"] [uri "/wp-admin/admin-ajax.php"] [unique_id "YwQrMYeCK5jIpYKYSANtYgAAAAc"] ampsstudio.com [Tue Aug 23 02:19:45 2022] [error] [client 195.178.120.89:0] [client 195.178.120.89] ModSecurity: Access denied with code 403 (phase 1). Pattern match "\\\\.\\\\./\\\\.\\\\." at REQUEST_URI. [file "remote server"] [line "-1"] [id "430064"] [msg "Malware.Expert - request_uri: directory travel"] [hostname "ampsstudio.com"] [uri "/wp-content/plugins/fwduvp/content/downloader.php"] [unique_id "YwQrMbBaiwFRInnzKSmZjgAAAAI"] ampsstudio.com [Tue Aug 23 04:24:48 2022] [error] [client 212.227.213.151:0] [client 212.227.213.151] ModSecurity: Access denied with code 403 (phase 2). Match of "contains index.php" against "REQUEST_URI" required. [file "remote server"] [line "-1"] [id "570076"] [msg "Malware.Expert - Malware"] [hostname "ampsstudio.com"] [uri "/wp-content/plugins/dzs-zoomsounds/savepng.php"] [unique_id "YwRIgKslVKsnLPP8lvZKpAAAAAU"] ampsstudio.com [Tue Aug 23 04:24:52 2022] [error] [client 212.227.213.151:0] [client 212.227.213.151] ModSecurity: Access denied with code 403 (phase 2). Match of "contains index.php" against "REQUEST_URI" required. [file "remote server"] [line "-1"] [id "570076"] [msg "Malware.Expert - Malware"] [hostname "ampsstudio.com"] [uri "/wp-content/plugins/dzs-zoomsounds/a57bze8931.php"] [unique_id "YwRIhEgLdt_9dM1CFNcFowAAAAE"] ampsstudio.com [Tue Aug 23 04:25:04 2022] [error] [client 212.227.213.151:0] [client 212.227.213.151] ModSecurity: Access denied with code 403 (phase 2). Match of "contains index.php" against "REQUEST_URI" required. [file "remote server"] [line "-1"] [id "570076"] [msg "Malware.Expert - Malware"] [hostname "ampsstudio.com"] [uri "/wp-content/plugins/ioptimizations/a57bze8931.php"] [unique_id "YwRIkBYOEpuy2S9lvCNYzwAAAA4"] ampsstudio.com [Tue Aug 23 04:25:08 2022] [error] [client 212.227.213.151:0] [client 212.227.213.151] ModSecurity: Access denied with code 403 (phase 2). Pattern match "/ioptimization/.*\\\\.php\\\\?rchk" at REQUEST_URI. [file "remote server"] [line "-1"] [id "570039"] [msg "Malware.Expert - Wordpress malware plugin - ioptimization"] [hostname "ampsstudio.com"] [uri "/wp-content/plugins/ioptimization/IOptimize.php"] [unique_id "YwRIlNz1BdNj5HW3P42PhwAAAAA"] ampsstudio.com [Tue Aug 23 04:25:12 2022] [error] [client 212.227.213.151:0] [client 212.227.213.151] ModSecurity: Access denied with code 403 (phase 2). Match of "contains index.php" against "REQUEST_URI" required. [file "remote server"] [line "-1"] [id "570076"] [msg "Malware.Expert - Malware"] [hostname "ampsstudio.com"] [uri "/wp-content/plugins/ioptimization/a57bze8931.php"] [unique_id "YwRImJ8GBJyMXZWkl7q1bAAAAAI"] ampsstudio.com [Tue Aug 23 04:25:16 2022] [error] [client 212.227.213.151:0] [client 212.227.213.151] ModSecurity: Access denied with code 403 (phase 2). Match of "contains index.php" against "REQUEST_URI" required. [file "remote server"] [line "-1"] [id "570076"] [msg "Malware.Expert - Malware"] [hostname "ampsstudio.com"] [uri "/wp-content/plugins/wp-engine-module/wp-engine.php"] [unique_id "YwRInKslVKsnLPP8lvZKpQAAAAU"] ampsstudio.com [Tue Aug 23 04:25:19 2022] [error] [client 212.227.213.151:0] [client 212.227.213.151] ModSecurity: Access denied with code 403 (phase 2). Match of "contains index.php" against "REQUEST_URI" required. [file "remote server"] [line "-1"] [id "570076"] [msg "Malware.Expert - Malware"] [hostname "ampsstudio.com"] [uri "/wp-content/plugins/wp-engine-module/a57bze8931.php"] [unique_id "YwRIn0gLdt_9dM1CFNcFpAAAAAE"] ampsstudio.com [Tue Aug 23 04:25:27 2022] [error] [client 212.227.213.151:0] [client 212.227.213.151] ModSecurity: Access denied with code 403 (phase 2). Pattern match "/\\\\..+\\\\.php" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430015"] [msg "Malware.Expert - request_uri: hidden .php execute"] [hostname "ampsstudio.com"] [uri "/wp-content/uploads/kaswara/fonts_icon/a57bze8931/.__a57bze8931.php"] [unique_id "YwRIpyKH1buuUpaldUKK6QAAAAM"] ampsstudio.com [Tue Aug 23 04:25:30 2022] [error] [client 212.227.213.151:0] [client 212.227.213.151] ModSecurity: Access denied with code 403 (phase 2). Match of "contains index.php" against "REQUEST_URI" required. [file "remote server"] [line "-1"] [id "570076"] [msg "Malware.Expert - Malware"] [hostname "ampsstudio.com"] [uri "/wp-content/plugins/apikey/apikey.php"] [unique_id "YwRIqhYOEpuy2S9lvCNY0AAAAA4"] ampsstudio.com [Tue Aug 23 04:25:34 2022] [error] [client 212.227.213.151:0] [client 212.227.213.151] ModSecurity: Access denied with code 403 (phase 2). Match of "contains index.php" against "REQUEST_URI" required. [file "remote server"] [line "-1"] [id "570076"] [msg "Malware.Expert - Malware"] [hostname "ampsstudio.com"] [uri "/wp-content/plugins/apikey/a57bze8931.php"] [unique_id "YwRIrtz1BdNj5HW3P42PiAAAAAA"] ampsstudio.com [Tue Aug 23 04:25:38 2022] [error] [client 212.227.213.151:0] [client 212.227.213.151] ModSecurity: Access denied with code 403 (phase 2). Match of "contains /wp-content/plugins/dopwgg/libraries/php/upload.php" against "REQUEST_URI" required. [file "remote server"] [line "-1"] [id "430073"] [msg "Malware.Expert - request_uri: Wordpress - prevent PHP files from executing"] [hostname "ampsstudio.com"] [uri "/wp-content/plugins/cherry-plugin/admin/import-export/upload.php"] [unique_id "YwRIsp8GBJyMXZWkl7q1bQAAAAI"] ampsstudio.com [Tue Aug 23 04:25:42 2022] [error] [client 212.227.213.151:0] [client 212.227.213.151] ModSecurity: Access denied with code 403 (phase 2). Match of "contains index.php" against "REQUEST_URI" required. [file "remote server"] [line "-1"] [id "570076"] [msg "Malware.Expert - Malware"] [hostname "ampsstudio.com"] [uri "/wp-content/plugins/cherry-plugin/admin/import-export/a57bze8931.php"] [unique_id "YwRItqslVKsnLPP8lvZKpgAAAAU"] ampsstudio.com [Tue Aug 23 04:25:54 2022] [error] [client 212.227.213.151:0] [client 212.227.213.151] ModSecurity: Access denied with code 403 (phase 2). Match of "contains index.php" against "REQUEST_URI" required. [file "remote server"] [line "-1"] [id "570076"] [msg "Malware.Expert - Malware"] [hostname "ampsstudio.com"] [uri "/wp-content/plugins/formcraft/file-upload/server/php/files/a57bze8931.php"] [unique_id "YwRIwqaz4geqkixWThYWcgAAAAo"] ampsstudio.com [Tue Aug 23 04:25:58 2022] [error] [client 212.227.213.151:0] [client 212.227.213.151] ModSecurity: Access denied with code 403 (phase 2). Match of "contains index.php" against "REQUEST_URI" required. [file "remote server"] [line "-1"] [id "570076"] [msg "Malware.Expert - Malware"] [hostname "ampsstudio.com"] [uri "/wp-admin/admin-ajax.php"] [unique_id "YwRIxhYOEpuy2S9lvCNY0QAAAA4"] ampsstudio.com [Tue Aug 23 04:26:03 2022] [error] [client 212.227.213.151:0] [client 212.227.213.151] ModSecurity: Access denied with code 403 (phase 2). Pattern match "/\\\\..+\\\\.php" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430015"] [msg "Malware.Expert - request_uri: hidden .php execute"] [hostname "ampsstudio.com"] [uri "/wp-content/uploads/typehub/custom/a57bze8931/.__a57bze8931.php"] [unique_id "YwRIy6slVKsnLPP8lvZKpwAAAAU"] ampsstudio.com [Tue Aug 23 04:26:22 2022] [error] [client 212.227.213.151:0] [client 212.227.213.151] ModSecurity: Access denied with code 403 (phase 2). String match "connector.minimal.php" at REQUEST_URI. [file "remote server"] [line "-1"] [id "500083"] [msg "Malware.Expert - request_uri: 0-Day - Wordpress filemanager plugin"] [hostname "ampsstudio.com"] [uri "/wp-content/plugins/wp-file-manager/lib/php/connector.minimal.php"] [unique_id "YwRI3iKH1buuUpaldUKK6wAAAAM"] ampsstudio.com [Tue Aug 23 04:26:26 2022] [error] [client 212.227.213.151:0] [client 212.227.213.151] ModSecurity: Access denied with code 403 (phase 2). String match "connector.minimal.php" at REQUEST_URI. [file "remote server"] [line "-1"] [id "500083"] [msg "Malware.Expert - request_uri: 0-Day - Wordpress filemanager plugin"] [hostname "ampsstudio.com"] [uri "/wp-content/plugins/wp-file-manager-pro/lib/php/connector.minimal.php"] [unique_id "YwRI4p8GBJyMXZWkl7q1bwAAAAI"] ampsstudio.com [Tue Aug 23 04:26:30 2022] [error] [client 212.227.213.151:0] [client 212.227.213.151] ModSecurity: Access denied with code 403 (phase 2). Match of "contains index.php" against "REQUEST_URI" required. [file "remote server"] [line "-1"] [id "570076"] [msg "Malware.Expert - Malware"] [hostname "ampsstudio.com"] [uri "/wp-content/plugins/gatewayapi/inc/css_js.php"] [unique_id "YwRI5tz1BdNj5HW3P42PigAAAAA"] ampsstudio.com [Tue Aug 23 04:26:33 2022] [error] [client 212.227.213.151:0] [client 212.227.213.151] ModSecurity: Access denied with code 403 (phase 2). Match of "contains index.php" against "REQUEST_URI" required. [file "remote server"] [line "-1"] [id "570076"] [msg "Malware.Expert - Malware"] [hostname "ampsstudio.com"] [uri "/wp-content/plugins/gatewayapi/inc/a57bze8931.php"] [unique_id "YwRI6aslVKsnLPP8lvZKqAAAAAU"] ampsstudio.com [Tue Aug 23 04:26:37 2022] [error] [client 212.227.213.151:0] [client 212.227.213.151] ModSecurity: Access denied with code 403 (phase 2). Match of "contains /wp-content/plugins/dopwgg/libraries/php/upload.php" against "REQUEST_URI" required. [file "remote server"] [line "-1"] [id "430073"] [msg "Malware.Expert - request_uri: Wordpress - prevent PHP files from executing"] [hostname "ampsstudio.com"] [uri "/wp-content/plugins/divi-contact-extended/includes/upload.php"] [unique_id "YwRI7fAi8CBDHMmDfulSewAAAAc"] www.ampsstudio.com [Tue Aug 23 04:30:32 2022] [error] [client 92.205.64.73:0] [client 92.205.64.73] ModSecurity: Access denied with code 403 (phase 2). String match "php.suspected" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430059"] [msg "Malware.Expert - request_uri: .PHP suspected files"] [hostname "www.ampsstudio.com"] [uri "/wp-dumpme.php.suspected"] [unique_id "YwRJ2CKH1buuUpaldUKK7gAAAAM"] www.ampsstudio.com [Tue Aug 23 04:30:33 2022] [error] [client 92.205.64.73:0] [client 92.205.64.73] ModSecurity: Access denied with code 403 (phase 2). String match "php.suspected" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430059"] [msg "Malware.Expert - request_uri: .PHP suspected files"] [hostname "www.ampsstudio.com"] [uri "/wp-clearline.php.suspected"] [unique_id "YwRJ2aslVKsnLPP8lvZKqwAAAAU"] www.ampsstudio.com [Tue Aug 23 04:30:34 2022] [error] [client 92.205.64.73:0] [client 92.205.64.73] ModSecurity: Access denied with code 403 (phase 2). String match "php.suspected" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430059"] [msg "Malware.Expert - request_uri: .PHP suspected files"] [hostname "www.ampsstudio.com"] [uri "/defaul1.php.suspected"] [unique_id "YwRJ2vAi8CBDHMmDfulSfgAAAAc"] www.ampsstudio.com [Tue Aug 23 04:30:35 2022] [error] [client 92.205.64.73:0] [client 92.205.64.73] ModSecurity: Access denied with code 403 (phase 2). String match "php.suspected" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430059"] [msg "Malware.Expert - request_uri: .PHP suspected files"] [hostname "www.ampsstudio.com"] [uri "/defau1t.php.suspected"] [unique_id "YwRJ2xYOEpuy2S9lvCNY1gAAAA4"] www.ampsstudio.com [Tue Aug 23 04:30:36 2022] [error] [client 92.205.64.73:0] [client 92.205.64.73] ModSecurity: Access denied with code 403 (phase 2). String match "php.suspected" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430059"] [msg "Malware.Expert - request_uri: .PHP suspected files"] [hostname "www.ampsstudio.com"] [uri "/fresh.php.suspected"] [unique_id "YwRJ3CKH1buuUpaldUKK7wAAAAM"] www.ampsstudio.com [Tue Aug 23 04:30:37 2022] [error] [client 92.205.64.73:0] [client 92.205.64.73] ModSecurity: Access denied with code 403 (phase 2). String match "php.suspected" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430059"] [msg "Malware.Expert - request_uri: .PHP suspected files"] [hostname "www.ampsstudio.com"] [uri "/fresh1.php.suspected"] [unique_id "YwRJ3aslVKsnLPP8lvZKrAAAAAU"] www.ampsstudio.com [Tue Aug 23 04:30:38 2022] [error] [client 92.205.64.73:0] [client 92.205.64.73] ModSecurity: Access denied with code 403 (phase 2). String match "php.suspected" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430059"] [msg "Malware.Expert - request_uri: .PHP suspected files"] [hostname "www.ampsstudio.com"] [uri "/index.php.suspected"] [unique_id "YwRJ3kgLdt_9dM1CFNcFqwAAAAE"] www.ampsstudio.com [Tue Aug 23 04:30:39 2022] [error] [client 92.205.64.73:0] [client 92.205.64.73] ModSecurity: Access denied with code 403 (phase 2). String match "php.suspected" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430059"] [msg "Malware.Expert - request_uri: .PHP suspected files"] [hostname "www.ampsstudio.com"] [uri "/wp-blockdown.php.suspected"] [unique_id "YwRJ3yKH1buuUpaldUKK8AAAAAM"] www.ampsstudio.com [Tue Aug 23 04:30:40 2022] [error] [client 92.205.64.73:0] [client 92.205.64.73] ModSecurity: Access denied with code 403 (phase 2). String match "php.suspected" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430059"] [msg "Malware.Expert - request_uri: .PHP suspected files"] [hostname "www.ampsstudio.com"] [uri "/wp-blockup.php.suspected"] [unique_id "YwRJ4KslVKsnLPP8lvZKrQAAAAU"] www.ampsstudio.com [Tue Aug 23 04:30:40 2022] [error] [client 92.205.64.73:0] [client 92.205.64.73] ModSecurity: Access denied with code 403 (phase 2). String match "php.suspected" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430059"] [msg "Malware.Expert - request_uri: .PHP suspected files"] [hostname "www.ampsstudio.com"] [uri "/wp-stream.php.suspected"] [unique_id "YwRJ4EgLdt_9dM1CFNcFrAAAAAE"] www.ampsstudio.com [Tue Aug 23 04:30:41 2022] [error] [client 92.205.64.73:0] [client 92.205.64.73] ModSecurity: Access denied with code 403 (phase 2). String match "php.suspected" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430059"] [msg "Malware.Expert - request_uri: .PHP suspected files"] [hostname "www.ampsstudio.com"] [uri "/wp-temp-ali.php.suspected"] [unique_id "YwRJ4SKH1buuUpaldUKK8QAAAAM"] www.ampsstudio.com [Tue Aug 23 04:30:42 2022] [error] [client 92.205.64.73:0] [client 92.205.64.73] ModSecurity: Access denied with code 403 (phase 2). String match "php.suspected" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430059"] [msg "Malware.Expert - request_uri: .PHP suspected files"] [hostname "www.ampsstudio.com"] [uri "/wpecho.php.suspected"] [unique_id "YwRJ4qslVKsnLPP8lvZKrgAAAAU"] www.ampsstudio.com [Tue Aug 23 04:30:43 2022] [error] [client 92.205.64.73:0] [client 92.205.64.73] ModSecurity: Access denied with code 403 (phase 2). String match "php.suspected" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430059"] [msg "Malware.Expert - request_uri: .PHP suspected files"] [hostname "www.ampsstudio.com"] [uri "/wp-content/upgrade/lll/3.php.suspected"] [unique_id "YwRJ4_Ai8CBDHMmDfulSgAAAAAc"] www.ampsstudio.com [Tue Aug 23 04:30:44 2022] [error] [client 92.205.64.73:0] [client 92.205.64.73] ModSecurity: Access denied with code 403 (phase 2). String match "php.suspected" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430059"] [msg "Malware.Expert - request_uri: .PHP suspected files"] [hostname "www.ampsstudio.com"] [uri "/wp-content/plugins/wp-striplple/striplple.php.suspected"] [unique_id "YwRJ5CKH1buuUpaldUKK8gAAAAM"] www.ampsstudio.com [Tue Aug 23 04:30:44 2022] [error] [client 92.205.64.73:0] [client 92.205.64.73] ModSecurity: Access denied with code 403 (phase 2). String match "php.suspected" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430059"] [msg "Malware.Expert - request_uri: .PHP suspected files"] [hostname "www.ampsstudio.com"] [uri "/votes.php.suspected"] [unique_id "YwRJ5J8GBJyMXZWkl7q1dgAAAAI"] www.ampsstudio.com [Tue Aug 23 04:30:45 2022] [error] [client 92.205.64.73:0] [client 92.205.64.73] ModSecurity: Access denied with code 403 (phase 2). String match "php.suspected" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430059"] [msg "Malware.Expert - request_uri: .PHP suspected files"] [hostname "www.ampsstudio.com"] [uri "/2index.php.suspected"] [unique_id "YwRJ5UgLdt_9dM1CFNcFrgAAAAE"] www.ampsstudio.com [Tue Aug 23 04:30:49 2022] [error] [client 92.205.64.73:0] [client 92.205.64.73] ModSecurity: Access denied with code 403 (phase 2). String match "php.suspected" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430059"] [msg "Malware.Expert - request_uri: .PHP suspected files"] [hostname "www.ampsstudio.com"] [uri "/load.php.suspected"] [unique_id "YwRJ6aslVKsnLPP8lvZKsAAAAAU"] www.ampsstudio.com [Tue Aug 23 04:30:50 2022] [error] [client 92.205.64.73:0] [client 92.205.64.73] ModSecurity: Access denied with code 403 (phase 2). String match "php.suspected" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430059"] [msg "Malware.Expert - request_uri: .PHP suspected files"] [hostname "www.ampsstudio.com"] [uri "/admin.php.suspected"] [unique_id "YwRJ6tz1BdNj5HW3P42PkQAAAAA"] www.ampsstudio.com [Tue Aug 23 04:30:51 2022] [error] [client 92.205.64.73:0] [client 92.205.64.73] ModSecurity: Access denied with code 403 (phase 2). String match "php.suspected" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430059"] [msg "Malware.Expert - request_uri: .PHP suspected files"] [hostname "www.ampsstudio.com"] [uri "/wikindex.php.suspected"] [unique_id "YwRJ6yKH1buuUpaldUKK9AAAAAM"] www.ampsstudio.com [Tue Aug 23 04:30:51 2022] [error] [client 92.205.64.73:0] [client 92.205.64.73] ModSecurity: Access denied with code 403 (phase 2). String match "php.suspected" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430059"] [msg "Malware.Expert - request_uri: .PHP suspected files"] [hostname "www.ampsstudio.com"] [uri "/xmlrpc.php.suspected"] [unique_id "YwRJ60gLdt_9dM1CFNcFrwAAAAE"] www.ampsstudio.com [Tue Aug 23 04:30:51 2022] [error] [client 92.205.64.73:0] [client 92.205.64.73] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_HEADERS_NAMES. [file "remote server"] [line "-1"] [id "431000"] [msg "Malware.Expert - request_uri: CSS - prevent PHP files from executing"] [hostname "www.ampsstudio.com"] [uri "/css/votes.php"] [unique_id "YwRJ66slVKsnLPP8lvZKsQAAAAU"] www.ampsstudio.com [Tue Aug 23 04:30:51 2022] [error] [client 92.205.64.73:0] [client 92.205.64.73] ModSecurity: Access denied with code 403 (phase 2). String match "php.suspected" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430059"] [msg "Malware.Expert - request_uri: .PHP suspected files"] [hostname "www.ampsstudio.com"] [uri "/css/votes.php.suspected"] [unique_id "YwRJ6_Ai8CBDHMmDfulSggAAAAc"] www.ampsstudio.com [Tue Aug 23 04:30:51 2022] [error] [client 92.205.64.73:0] [client 92.205.64.73] ModSecurity: Access denied with code 403 (phase 2). String match "/accesson.php" at REQUEST_URI. [file "remote server"] [line "-1"] [id "570042"] [msg "Malware.Expert - Malware"] [hostname "www.ampsstudio.com"] [uri "/accesson.php"] [unique_id "YwRJ69z1BdNj5HW3P42PkgAAAAA"] www.ampsstudio.com [Tue Aug 23 04:30:51 2022] [error] [client 92.205.64.73:0] [client 92.205.64.73] ModSecurity: Access denied with code 403 (phase 2). String match "php.suspected" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430059"] [msg "Malware.Expert - request_uri: .PHP suspected files"] [hostname "www.ampsstudio.com"] [uri "/accesson.php.suspected"] [unique_id "YwRJ66az4geqkixWThYWfAAAAAo"] www.ampsstudio.com [Tue Aug 23 04:30:52 2022] [error] [client 92.205.64.73:0] [client 92.205.64.73] ModSecurity: Access denied with code 403 (phase 2). String match "php.suspected" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430059"] [msg "Malware.Expert - request_uri: .PHP suspected files"] [hostname "www.ampsstudio.com"] [uri "/auto_seo.php.suspected"] [unique_id "YwRJ7KslVKsnLPP8lvZKsgAAAAU"] www.ampsstudio.com [Tue Aug 23 04:30:53 2022] [error] [client 92.205.64.73:0] [client 92.205.64.73] ModSecurity: Access denied with code 403 (phase 2). String match "php.suspected" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430059"] [msg "Malware.Expert - request_uri: .PHP suspected files"] [hostname "www.ampsstudio.com"] [uri "/wp-plain.php.suspected"] [unique_id "YwRJ7RYOEpuy2S9lvCNY2gAAAA4"] ampsstudio.com [Tue Aug 23 04:57:23 2022] [error] [client 104.243.37.207:0] [client 104.243.37.207] ModSecurity: Access denied with code 403 (phase 2). Match of "contains index.php" against "REQUEST_URI" required. [file "remote server"] [line "-1"] [id "570076"] [msg "Malware.Expert - Malware"] [hostname "ampsstudio.com"] [uri "/wp-admin/admin-post.php"] [unique_id "YwRQI6slVKsnLPP8lvZKuwAAAAU"] ampsstudio.com [Tue Aug 23 04:57:27 2022] [error] [client 104.243.37.207:0] [client 104.243.37.207] ModSecurity: Access denied with code 403 (phase 2). Pattern match "/wp-content/plugins/.*/up\\\\.php" at REQUEST_URI. [file "remote server"] [line "-1"] [id "570052"] [msg "Malware.Expert - Malware"] [hostname "ampsstudio.com"] [uri "/wp-content/plugins/instabuilder2/cache/up.php"] [unique_id "YwRQJ6az4geqkixWThYWhQAAAAo"] www.ampsstudio.com [Tue Aug 23 05:05:16 2022] [error] [client 20.0.44.85:0] [client 20.0.44.85] ModSecurity: Access denied with code 403 (phase 2). String match "connector.minimal.php" at REQUEST_URI. [file "remote server"] [line "-1"] [id "500083"] [msg "Malware.Expert - request_uri: 0-Day - Wordpress filemanager plugin"] [hostname "www.ampsstudio.com"] [uri "/wp-content/plugins/wp-file-manager/lib/php/connector.minimal.php"] [unique_id "YwRR_Nz1BdNj5HW3P42PoAAAAAA"] www.ampsstudio.com [Tue Aug 23 05:05:18 2022] [error] [client 20.0.44.85:0] [client 20.0.44.85] ModSecurity: Access denied with code 403 (phase 2). Pattern match "/wp-content/plugins/wp-file-manager/lib/files/.*\\\\.php" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430056"] [msg "Malware.Expert - request_uri: Wordpress - prevent PHP files from executing"] [hostname "www.ampsstudio.com"] [uri "/wp-content/plugins/wp-file-manager/lib/files/x.php"] [unique_id "YwRR_qaz4geqkixWThYWiQAAAAo"] www.ampsstudio.com [Tue Aug 23 05:05:21 2022] [error] [client 20.0.44.85:0] [client 20.0.44.85] ModSecurity: Access denied with code 403 (phase 2). Pattern match "/wp-content/plugins/wp-file-manager/lib/files/.*\\\\.php" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430056"] [msg "Malware.Expert - request_uri: Wordpress - prevent PHP files from executing"] [hostname "www.ampsstudio.com"] [uri "/wp-content/plugins/wp-file-manager/lib/files/x.php"] [unique_id "YwRSAaslVKsnLPP8lvZKwAAAAAU"] www.ampsstudio.com [Tue Aug 23 08:59:22 2022] [error] [client 1.169.129.163:0] AH01071: Got error 'PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179' www.ampsstudio.com [Tue Aug 23 08:59:22 2022] [error] [client 1.169.129.163:0] AH01071: Got error 'PHP message: PHP Warning: Cannot modify header information - headers already sent by (output started at /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-includes/functions.php:5275) in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/includes/sonaar-music/css/theme/custom-style.php on line 2' www.ampsstudio.com [Tue Aug 23 09:37:20 2022] [error] [client 148.252.133.117:0] AH01071: Got error 'PHP message: PHP Warning: Cannot modify header information - headers already sent by (output started at /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-includes/functions.php:5275) in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/includes/sonaar-music/css/theme/custom-style.php on line 2' www.ampsstudio.com [Tue Aug 23 12:02:08 2022] [error] [client 83.130.58.90:0] AH01071: Got error 'PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179' www.ampsstudio.com [Tue Aug 23 12:02:08 2022] [error] [client 83.130.58.90:0] AH01071: Got error 'PHP message: PHP Warning: Cannot modify header information - headers already sent by (output started at /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-includes/functions.php:5275) in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/includes/sonaar-music/css/theme/custom-style.php on line 2' ampsstudio.com [Tue Aug 23 13:39:37 2022] [error] [client 20.193.135.50:0] AH01276: Cannot serve directory /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-admin/css/: No matching DirectoryIndex (index.php,index.html,index.htm) found, and server-generated directory index forbidden by Options directive www.ampsstudio.com [Tue Aug 23 13:44:25 2022] [error] [client 161.117.10.46:0] AH01071: Got error 'PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179' www.ampsstudio.com [Tue Aug 23 13:44:25 2022] [error] [client 161.117.10.46:0] AH01071: Got error 'PHP message: PHP Warning: Cannot modify header information - headers already sent by (output started at /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-includes/functions.php:5275) in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/includes/sonaar-music/css/theme/custom-style.php on line 2' ampsstudio.com [Tue Aug 23 14:36:44 2022] [error] [client 20.193.135.50:0] AH01276: Cannot serve directory /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-admin/css/: No matching DirectoryIndex (index.php,index.html,index.htm) found, and server-generated directory index forbidden by Options directive ampsstudio.com [Tue Aug 23 15:12:55 2022] [error] [client 20.193.135.50:0] AH01276: Cannot serve directory /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-admin/css/: No matching DirectoryIndex (index.php,index.html,index.htm) found, and server-generated directory index forbidden by Options directive ampsstudio.com [Tue Aug 23 15:56:42 2022] [error] [client 20.193.135.50:0] AH01276: Cannot serve directory /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-admin/css/: No matching DirectoryIndex (index.php,index.html,index.htm) found, and server-generated directory index forbidden by Options directive www.ampsstudio.com [Tue Aug 23 18:34:09 2022] [error] [client 46.148.206.226:0] AH01071: Got error 'PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179' www.ampsstudio.com [Tue Aug 23 18:34:09 2022] [error] [client 46.148.206.226:0] AH01071: Got error 'PHP message: PHP Warning: Cannot modify header information - headers already sent by (output started at /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-includes/functions.php:5275) in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/includes/sonaar-music/css/theme/custom-style.php on line 2' www.ampsstudio.com [Tue Aug 23 19:28:40 2022] [error] [client 23.184.144.39:0] AH01071: Got error 'PHP message: PHP Warning: Cannot modify header information - headers already sent by (output started at /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-includes/functions.php:5275) in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/includes/sonaar-music/css/theme/custom-style.php on line 2' ampsstudio.com [Tue Aug 23 20:56:05 2022] [error] [client 20.104.220.25:0] [client 20.104.220.25] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "ampsstudio.com"] [uri "/.env"] [unique_id "YwUw1VuHIC8ac2kcSiRKLgAAAAI"] ampsstudio.com [Tue Aug 23 21:33:41 2022] [error] [client 20.117.240.223:0] AH01276: Cannot serve directory /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-admin/css/: No matching DirectoryIndex (index.php,index.html,index.htm) found, and server-generated directory index forbidden by Options directive www.ampsstudio.com [Tue Aug 23 21:44:14 2022] [error] [client 104.243.37.207:0] [client 104.243.37.207] ModSecurity: Access denied with code 403 (phase 2). Match of "contains index.php" against "REQUEST_URI" required. [file "remote server"] [line "-1"] [id "570076"] [msg "Malware.Expert - Malware"] [hostname "www.ampsstudio.com"] [uri "/wp-admin/admin-post.php"] [unique_id "YwU8HluHIC8ac2kcSiRKPQAAAAI"] www.ampsstudio.com [Tue Aug 23 21:44:17 2022] [error] [client 104.243.37.207:0] [client 104.243.37.207] ModSecurity: Access denied with code 403 (phase 2). Pattern match "/wp-content/plugins/.*/up\\\\.php" at REQUEST_URI. [file "remote server"] [line "-1"] [id "570052"] [msg "Malware.Expert - Malware"] [hostname "www.ampsstudio.com"] [uri "/wp-content/plugins/instabuilder2/cache/up.php"] [unique_id "YwU8IXDEJUKSiUFUF-1aCQAAAAU"] cpanel.ampsstudio.com [Tue Aug 23 21:56:50 2022] [error] [client 20.104.220.25:0] [client 20.104.220.25] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "cpanel.ampsstudio.com"] [uri "/.env"] [unique_id "YwU_EmP8-tLoGePddhj2fAAAAAs"] www.ampsstudio.com [Wed Aug 24 01:44:35 2022] [error] [client 46.35.252.130:0] AH01071: Got error 'PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179' www.ampsstudio.com [Wed Aug 24 01:44:35 2022] [error] [client 46.35.252.130:0] AH01071: Got error 'PHP message: PHP Warning: Cannot modify header information - headers already sent by (output started at /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-includes/functions.php:5275) in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/includes/sonaar-music/css/theme/custom-style.php on line 2' www.ampsstudio.com [Wed Aug 24 02:03:37 2022] [error] [client 23.128.248.13:0] AH01071: Got error 'PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179' www.ampsstudio.com [Wed Aug 24 02:03:37 2022] [error] [client 23.128.248.13:0] AH01071: Got error 'PHP message: PHP Warning: Cannot modify header information - headers already sent by (output started at /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-includes/functions.php:5275) in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/includes/sonaar-music/css/theme/custom-style.php on line 2' www.ampsstudio.com [Wed Aug 24 02:40:41 2022] [error] [client 109.70.100.27:0] AH01071: Got error 'PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179' www.ampsstudio.com [Wed Aug 24 02:40:41 2022] [error] [client 109.70.100.27:0] AH01071: Got error 'PHP message: PHP Warning: Cannot modify header information - headers already sent by (output started at /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-includes/functions.php:5275) in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/includes/sonaar-music/css/theme/custom-style.php on line 2' mail.ampsstudio.com [Wed Aug 24 02:46:37 2022] [error] [client 20.104.220.25:0] [client 20.104.220.25] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "mail.ampsstudio.com"] [uri "/.env"] [unique_id "YwWC_aZsHjcKgwPrM3F8zQAAAAI"] ampsstudio.com [Wed Aug 24 03:09:08 2022] [error] [client 20.163.104.128:0] AH01276: Cannot serve directory /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-admin/css/: No matching DirectoryIndex (index.php,index.html,index.htm) found, and server-generated directory index forbidden by Options directive ampsstudio.com [Wed Aug 24 04:15:16 2022] [error] [client 20.77.49.95:0] AH01276: Cannot serve directory /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-admin/css/: No matching DirectoryIndex (index.php,index.html,index.htm) found, and server-generated directory index forbidden by Options directive www.ampsstudio.com [Wed Aug 24 04:38:41 2022] [error] [client 162.247.74.202:0] AH01071: Got error 'PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179' www.ampsstudio.com [Wed Aug 24 04:38:41 2022] [error] [client 162.247.74.202:0] AH01071: Got error 'PHP message: PHP Warning: Cannot modify header information - headers already sent by (output started at /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-includes/functions.php:5275) in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/includes/sonaar-music/css/theme/custom-style.php on line 2' mail.ampsstudio.com [Wed Aug 24 04:47:24 2022] [error] [client 20.117.240.223:0] AH01276: Cannot serve directory /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-admin/css/: No matching DirectoryIndex (index.php,index.html,index.htm) found, and server-generated directory index forbidden by Options directive webdisk.ampsstudio.com [Wed Aug 24 06:43:24 2022] [error] [client 20.117.240.223:0] AH01276: Cannot serve directory /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-admin/css/: No matching DirectoryIndex (index.php,index.html,index.htm) found, and server-generated directory index forbidden by Options directive www.ampsstudio.com [Wed Aug 24 08:56:19 2022] [error] [client 198.98.59.120:0] AH01071: Got error 'PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179' www.ampsstudio.com [Wed Aug 24 08:56:19 2022] [error] [client 198.98.59.120:0] AH01071: Got error 'PHP message: PHP Warning: Cannot modify header information - headers already sent by (output started at /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-includes/functions.php:5275) in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/includes/sonaar-music/css/theme/custom-style.php on line 2' ampsstudio.com [Wed Aug 24 09:56:53 2022] [error] [client 20.118.171.111:0] AH01276: Cannot serve directory /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-admin/css/: No matching DirectoryIndex (index.php,index.html,index.htm) found, and server-generated directory index forbidden by Options directive ampsstudio.com [Wed Aug 24 11:08:03 2022] [error] [client 20.0.44.85:0] [client 20.0.44.85] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "ampsstudio.com"] [uri "/.env"] [unique_id "YwX4g1vwkzEquVqcEkd7FAAAAAI"] ampsstudio.com [Wed Aug 24 11:08:09 2022] [error] [client 20.0.44.85:0] [client 20.0.44.85] ModSecurity: Access denied with code 403 (phase 2). String match "/Util/PHP/eval-stdin.php" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430046"] [msg "Malware.Expert - request_uri: CVE-2017-9841"] [hostname "ampsstudio.com"] [uri "/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php"] [unique_id "YwX4iX_bK6Jb7lTJclj2AwAAAAY"] ampsstudio.com [Wed Aug 24 16:31:37 2022] [error] [client 20.104.220.25:0] [client 20.104.220.25] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "ampsstudio.com"] [uri "/.env"] [unique_id "YwZEWVvwkzEquVqcEkd8UAAAAAI"] cpanel.ampsstudio.com [Wed Aug 24 17:26:41 2022] [error] [client 20.104.220.25:0] [client 20.104.220.25] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "cpanel.ampsstudio.com"] [uri "/.env"] [unique_id "YwZRQQY_KZmxP9hvnNHkPgAAAAk"] mail.ampsstudio.com [Wed Aug 24 22:00:15 2022] [error] [client 20.104.220.25:0] [client 20.104.220.25] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "mail.ampsstudio.com"] [uri "/.env"] [unique_id "YwaRXwY_KZmxP9hvnNHkuwAAAAk"] www.ampsstudio.com [Wed Aug 24 23:14:47 2022] [error] [client 212.102.33.76:0] AH01071: Got error 'PHP message: PHP Warning: Cannot modify header information - headers already sent by (output started at /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-includes/functions.php:5275) in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/includes/sonaar-music/css/theme/custom-style.php on line 2' www.ampsstudio.com [Thu Aug 25 00:03:18 2022] [error] [client 5.255.97.133:0] AH01071: Got error 'PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179' www.ampsstudio.com [Thu Aug 25 00:03:18 2022] [error] [client 5.255.97.133:0] AH01071: Got error 'PHP message: PHP Warning: Cannot modify header information - headers already sent by (output started at /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-includes/functions.php:5275) in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/includes/sonaar-music/css/theme/custom-style.php on line 2' webdisk.ampsstudio.com [Thu Aug 25 00:56:34 2022] [error] [client 20.104.220.25:0] [client 20.104.220.25] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "webdisk.ampsstudio.com"] [uri "/.env"] [unique_id "Ywa6sn_bK6Jb7lTJclj4LAAAAAY"] webmail.ampsstudio.com [Thu Aug 25 01:49:43 2022] [error] [client 20.104.220.25:0] [client 20.104.220.25] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "webmail.ampsstudio.com"] [uri "/.env"] [unique_id "YwbHJ5gHkE2GRALXdFlHQwAAAAQ"] www.ampsstudio.com [Thu Aug 25 01:59:25 2022] [error] [client 88.147.152.99:0] AH01071: Got error 'PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179' www.ampsstudio.com [Thu Aug 25 01:59:25 2022] [error] [client 88.147.152.99:0] AH01071: Got error 'PHP message: PHP Warning: Cannot modify header information - headers already sent by (output started at /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-includes/functions.php:5275) in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/includes/sonaar-music/css/theme/custom-style.php on line 2' webmail.ampsstudio.com [Thu Aug 25 02:17:09 2022] [error] [client 20.0.60.160:0] AH01276: Cannot serve directory /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-admin/css/: No matching DirectoryIndex (index.php,index.html,index.htm) found, and server-generated directory index forbidden by Options directive ampsstudio.com [Thu Aug 25 02:17:25 2022] [error] [client 139.99.62.224:0] [client 139.99.62.224] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "ampsstudio.com"] [uri "/.env.bak"] [unique_id "YwbNpX_bK6Jb7lTJclj4SgAAAAY"] ampsstudio.com [Thu Aug 25 02:17:34 2022] [error] [client 139.99.62.224:0] [client 139.99.62.224] ModSecurity: Access denied with code 403 (phase 2). String match ".aws/credentials" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430069"] [msg "Malware.Expert - request_uri: AWS Credentials"] [hostname "ampsstudio.com"] [uri "/.aws/credentials"] [unique_id "YwbNrsywTQHlWF94gWhopwAAAAE"] www.ampsstudio.com [Thu Aug 25 03:11:31 2022] [error] [client 88.218.170.57:0] AH01071: Got error 'PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179' www.ampsstudio.com [Thu Aug 25 03:11:31 2022] [error] [client 88.218.170.57:0] AH01071: Got error 'PHP message: PHP Warning: Cannot modify header information - headers already sent by (output started at /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-includes/functions.php:5275) in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/includes/sonaar-music/css/theme/custom-style.php on line 2' www.ampsstudio.com [Thu Aug 25 03:29:23 2022] [error] [client 40.77.167.79:0] AH01276: Cannot serve directory /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/includes/sonaar-music/: No matching DirectoryIndex (index.php,index.html,index.htm) found, and server-generated directory index forbidden by Options directive webdisk.ampsstudio.com [Thu Aug 25 04:31:28 2022] [error] [client 20.0.60.160:0] AH01276: Cannot serve directory /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-admin/css/: No matching DirectoryIndex (index.php,index.html,index.htm) found, and server-generated directory index forbidden by Options directive mail.ampsstudio.com [Thu Aug 25 07:00:57 2022] [error] [client 20.0.60.160:0] AH01276: Cannot serve directory /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-admin/css/: No matching DirectoryIndex (index.php,index.html,index.htm) found, and server-generated directory index forbidden by Options directive ampsstudio.com [Thu Aug 25 07:37:02 2022] [error] [client 20.0.60.160:0] AH01276: Cannot serve directory /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-admin/css/: No matching DirectoryIndex (index.php,index.html,index.htm) found, and server-generated directory index forbidden by Options directive ampsstudio.com [Thu Aug 25 14:40:50 2022] [error] [client 20.234.61.118:0] AH01276: Cannot serve directory /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-admin/css/: No matching DirectoryIndex (index.php,index.html,index.htm) found, and server-generated directory index forbidden by Options directive www.ampsstudio.com [Thu Aug 25 15:41:23 2022] [error] [client 66.249.70.157:0] AH01071: Got error 'PHP message: PHP Warning: Undefined array key "block" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/includes/classes/iron_sonaar.class.php on line 212PHP message: PHP Warning: Trying to access array offset on value of type null in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/includes/classes/iron_sonaar.class.php on line 212PHP message: PHP Warning: Undefined array key "block" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/includes/classes/iron_sonaar.class.php on line 214PHP message: PHP Warning: Trying to access array offset on value of type null in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/includes/classes/iron_sonaar.class.php on line 214' www.ampsstudio.com [Thu Aug 25 17:19:23 2022] [error] [client 51.11.6.150:0] AH01071: Got error 'PHP message: PHP Warning: Undefined array key "HTTP_USER_AGENT" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/bookly-responsive-appointment-booking-tool/frontend/modules/booking/ShortCode.php on line 62' cpanel.ampsstudio.com [Thu Aug 25 19:18:03 2022] [error] [client 20.0.60.160:0] AH01276: Cannot serve directory /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-admin/css/: No matching DirectoryIndex (index.php,index.html,index.htm) found, and server-generated directory index forbidden by Options directive www.ampsstudio.com [Fri Aug 26 03:39:57 2022] [crit] [client 66.249.93.44:0] AH00529: /home/virtual/vps-aa3942/a/aede5353c4/public_html/.well-known/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/virtual/vps-aa3942/a/aede5353c4/public_html/.well-known/' is executable www.ampsstudio.com [Fri Aug 26 04:03:29 2022] [error] [client 20.222.255.227:0] [client 20.222.255.227] ModSecurity: Access denied with code 403 (phase 2). Match of "contains index.php" against "REQUEST_URI" required. [file "remote server"] [line "-1"] [id "570076"] [msg "Malware.Expert - Malware"] [hostname "www.ampsstudio.com"] [uri "/wp-plain.php"] [unique_id "Ywg4Ac3eDU9uOL1j2nEMOgAAAAY"] www.ampsstudio.com [Fri Aug 26 04:03:46 2022] [error] [client 20.222.255.227:0] [client 20.222.255.227] ModSecurity: Access denied with code 403 (phase 2). Match of "contains index.php" against "REQUEST_URI" required. [file "remote server"] [line "-1"] [id "570076"] [msg "Malware.Expert - Malware"] [hostname "www.ampsstudio.com"] [uri "/wp-plain.php"] [unique_id "Ywg4Eutox0b9oyS5PLVSxQAAAAA"] www.ampsstudio.com [Fri Aug 26 05:12:39 2022] [error] [client 54.183.179.198:0] AH01071: Got error 'PHP message: PHP Warning: Undefined array key "HTTP_USER_AGENT" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/bookly-responsive-appointment-booking-tool/frontend/modules/booking/ShortCode.php on line 66' www.ampsstudio.com [Fri Aug 26 05:12:41 2022] [error] [client 54.183.179.198:0] AH01071: Got error 'PHP message: PHP Warning: Undefined array key "HTTP_USER_AGENT" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/bookly-responsive-appointment-booking-tool/frontend/modules/booking/ShortCode.php on line 66' www.ampsstudio.com [Fri Aug 26 05:12:44 2022] [error] [client 54.183.179.198:0] AH01071: Got error 'PHP message: PHP Warning: Undefined array key "HTTP_USER_AGENT" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/bookly-responsive-appointment-booking-tool/frontend/modules/booking/ShortCode.php on line 66' www.ampsstudio.com [Fri Aug 26 05:12:47 2022] [error] [client 54.183.179.198:0] AH01071: Got error 'PHP message: PHP Warning: Undefined array key "HTTP_USER_AGENT" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/bookly-responsive-appointment-booking-tool/frontend/modules/booking/ShortCode.php on line 66' www.ampsstudio.com [Fri Aug 26 05:12:50 2022] [error] [client 54.183.179.198:0] AH01071: Got error 'PHP message: PHP Warning: Undefined array key "HTTP_USER_AGENT" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/bookly-responsive-appointment-booking-tool/frontend/modules/booking/ShortCode.php on line 66' www.ampsstudio.com [Fri Aug 26 13:12:45 2022] [error] [client 95.79.135.99:0] AH01071: Got error 'PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179' www.ampsstudio.com [Fri Aug 26 13:12:45 2022] [error] [client 95.79.135.99:0] AH01071: Got error 'PHP message: PHP Warning: Cannot modify header information - headers already sent by (output started at /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-includes/functions.php:5275) in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/includes/sonaar-music/css/theme/custom-style.php on line 2' ampsstudio.com [Fri Aug 26 13:27:47 2022] [error] [client 194.246.93.70:0] [client 194.246.93.70] ModSecurity: Access denied with code 403 (phase 2). String match "/wso.php" at REQUEST_URI. [file "remote server"] [line "-1"] [id "570066"] [msg "Malware.Expert - PHP Command Shell (WSO)"] [hostname "ampsstudio.com"] [uri "/wso.php"] [unique_id "Ywi8QwxiuD9PWbTuyWoN9QAAAAc"] www.ampsstudio.com [Fri Aug 26 19:29:38 2022] [error] [client 188.68.56.175:0] AH01071: Got error 'PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179' www.ampsstudio.com [Fri Aug 26 19:29:38 2022] [error] [client 188.68.56.175:0] AH01071: Got error 'PHP message: PHP Warning: Cannot modify header information - headers already sent by (output started at /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-includes/functions.php:5275) in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/includes/sonaar-music/css/theme/custom-style.php on line 2' ampsstudio.com [Fri Aug 26 20:01:22 2022] [error] [client 195.178.120.89:0] [client 195.178.120.89] ModSecurity: Access denied with code 403 (phase 2). Match of "contains index.php" against "REQUEST_URI" required. [file "remote server"] [line "-1"] [id "570076"] [msg "Malware.Expert - Malware"] [hostname "ampsstudio.com"] [uri "/wp-admin/admin-post.php"] [unique_id "YwkYgnP9caVvYhNyODF08gAAAAk"] ampsstudio.com [Fri Aug 26 20:01:22 2022] [error] [client 195.178.120.89:0] [client 195.178.120.89] ModSecurity: Access denied with code 403 (phase 2). Pattern match "/wp-content/plugins/.*/up\\\\.php" at REQUEST_URI. [file "remote server"] [line "-1"] [id "570052"] [msg "Malware.Expert - Malware"] [hostname "ampsstudio.com"] [uri "/wp-content/plugins/instabuilder2/cache/up.php"] [unique_id "YwkYgsPlBu0dvWPS6ky2xwAAAAM"] ampsstudio.com [Fri Aug 26 20:01:23 2022] [error] [client 195.178.120.89:0] [client 195.178.120.89] ModSecurity: Access denied with code 403 (phase 2). Match of "contains index.php" against "REQUEST_URI" required. [file "remote server"] [line "-1"] [id "570076"] [msg "Malware.Expert - Malware"] [hostname "ampsstudio.com"] [uri "/wp-admin/admin-ajax.php"] [unique_id "YwkYg5DvbPI-E0XTT8rOSAAAAAY"] ampsstudio.com [Fri Aug 26 20:01:23 2022] [error] [client 195.178.120.89:0] [client 195.178.120.89] ModSecurity: Access denied with code 403 (phase 2). Match of "contains index.php" against "REQUEST_URI" required. [file "remote server"] [line "-1"] [id "570076"] [msg "Malware.Expert - Malware"] [hostname "ampsstudio.com"] [uri "/wp-admin/admin-ajax.php"] [unique_id "YwkYgwxiuD9PWbTuyWoOtwAAAAc"] ampsstudio.com [Fri Aug 26 20:01:24 2022] [error] [client 195.178.120.89:0] [client 195.178.120.89] ModSecurity: Access denied with code 403 (phase 1). Pattern match "\\\\.\\\\./\\\\.\\\\." at REQUEST_URI. [file "remote server"] [line "-1"] [id "430064"] [msg "Malware.Expert - request_uri: directory travel"] [hostname "ampsstudio.com"] [uri "/wp-content/plugins/fwduvp/content/downloader.php"] [unique_id "YwkYhKN-2aRcGCU8u8DDygAAAAQ"] www.ampsstudio.com [Fri Aug 26 22:44:32 2022] [error] [client 173.239.197.63:0] AH01071: Got error 'PHP message: PHP Warning: Cannot modify header information - headers already sent by (output started at /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-includes/functions.php:5275) in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/includes/sonaar-music/css/theme/custom-style.php on line 2' www.ampsstudio.com [Sat Aug 27 00:01:02 2022] [error] [client 212.227.213.151:0] [client 212.227.213.151] ModSecurity: Access denied with code 403 (phase 2). Match of "contains index.php" against "REQUEST_URI" required. [file "remote server"] [line "-1"] [id "570076"] [msg "Malware.Expert - Malware"] [hostname "www.ampsstudio.com"] [uri "/wp-content/plugins/dzs-zoomsounds/savepng.php"] [unique_id "YwlQrp1el5sCW-MpIb_9vAAAAAU"] www.ampsstudio.com [Sat Aug 27 00:01:03 2022] [error] [client 212.227.213.151:0] [client 212.227.213.151] ModSecurity: Access denied with code 403 (phase 2). Match of "contains index.php" against "REQUEST_URI" required. [file "remote server"] [line "-1"] [id "570076"] [msg "Malware.Expert - Malware"] [hostname "www.ampsstudio.com"] [uri "/wp-content/plugins/dzs-zoomsounds/a57bze8931.php"] [unique_id "YwlQr3P9caVvYhNyODF1ZgAAAAk"] www.ampsstudio.com [Sat Aug 27 00:01:05 2022] [error] [client 212.227.213.151:0] [client 212.227.213.151] ModSecurity: Access denied with connection close (phase 2). Pattern match "\\\\.php" at FILES:userfile. [file "remote server"] [line "-1"] [id "600000"] [msg "Malware.Expert - PHP files not allowed upload"] [hostname "www.ampsstudio.com"] [uri "/wp-content/plugins/ioptimizations/IOptimizes.php"] [unique_id "YwlQsUsiIvF2nX0d-GIPWgAAAAE"] www.ampsstudio.com [Sat Aug 27 00:01:06 2022] [error] [client 212.227.213.151:0] [client 212.227.213.151] ModSecurity: Access denied with code 403 (phase 2). Match of "contains index.php" against "REQUEST_URI" required. [file "remote server"] [line "-1"] [id "570076"] [msg "Malware.Expert - Malware"] [hostname "www.ampsstudio.com"] [uri "/wp-content/plugins/ioptimizations/a57bze8931.php"] [unique_id "YwlQssPlBu0dvWPS6ky3OgAAAAM"] www.ampsstudio.com [Sat Aug 27 00:01:07 2022] [error] [client 212.227.213.151:0] [client 212.227.213.151] ModSecurity: Access denied with code 403 (phase 2). Pattern match "/ioptimization/.*\\\\.php\\\\?rchk" at REQUEST_URI. [file "remote server"] [line "-1"] [id "570039"] [msg "Malware.Expert - Wordpress malware plugin - ioptimization"] [hostname "www.ampsstudio.com"] [uri "/wp-content/plugins/ioptimization/IOptimize.php"] [unique_id "YwlQs5DvbPI-E0XTT8rOvAAAAAY"] www.ampsstudio.com [Sat Aug 27 00:01:09 2022] [error] [client 212.227.213.151:0] [client 212.227.213.151] ModSecurity: Access denied with code 403 (phase 2). Match of "contains index.php" against "REQUEST_URI" required. [file "remote server"] [line "-1"] [id "570076"] [msg "Malware.Expert - Malware"] [hostname "www.ampsstudio.com"] [uri "/wp-content/plugins/ioptimization/a57bze8931.php"] [unique_id "YwlQtaYxYbw3J-HdtBRUygAAABQ"] www.ampsstudio.com [Sat Aug 27 00:01:10 2022] [error] [client 212.227.213.151:0] [client 212.227.213.151] ModSecurity: Access denied with code 403 (phase 2). Match of "contains index.php" against "REQUEST_URI" required. [file "remote server"] [line "-1"] [id "570076"] [msg "Malware.Expert - Malware"] [hostname "www.ampsstudio.com"] [uri "/wp-content/plugins/wp-engine-module/wp-engine.php"] [unique_id "YwlQttk0BnNfh37zAiQsJwAAAAA"] www.ampsstudio.com [Sat Aug 27 00:01:13 2022] [error] [client 212.227.213.151:0] [client 212.227.213.151] ModSecurity: Access denied with code 403 (phase 2). Match of "contains index.php" against "REQUEST_URI" required. [file "remote server"] [line "-1"] [id "570076"] [msg "Malware.Expert - Malware"] [hostname "www.ampsstudio.com"] [uri "/wp-content/plugins/wp-engine-module/a57bze8931.php"] [unique_id "YwlQuVbC-vVftvngGr7fagAAABo"] www.ampsstudio.com [Sat Aug 27 00:01:19 2022] [error] [client 212.227.213.151:0] [client 212.227.213.151] ModSecurity: Access denied with code 403 (phase 2). Pattern match "/\\\\..+\\\\.php" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430015"] [msg "Malware.Expert - request_uri: hidden .php execute"] [hostname "www.ampsstudio.com"] [uri "/wp-content/uploads/kaswara/fonts_icon/a57bze8931/.__a57bze8931.php"] [unique_id "YwlQv51el5sCW-MpIb_9vQAAAAU"] www.ampsstudio.com [Sat Aug 27 00:01:20 2022] [error] [client 212.227.213.151:0] [client 212.227.213.151] ModSecurity: Access denied with code 403 (phase 2). Match of "contains index.php" against "REQUEST_URI" required. [file "remote server"] [line "-1"] [id "570076"] [msg "Malware.Expert - Malware"] [hostname "www.ampsstudio.com"] [uri "/wp-content/plugins/apikey/apikey.php"] [unique_id "YwlQwEsiIvF2nX0d-GIPWwAAAAE"] www.ampsstudio.com [Sat Aug 27 00:01:22 2022] [error] [client 212.227.213.151:0] [client 212.227.213.151] ModSecurity: Access denied with code 403 (phase 2). Match of "contains index.php" against "REQUEST_URI" required. [file "remote server"] [line "-1"] [id "570076"] [msg "Malware.Expert - Malware"] [hostname "www.ampsstudio.com"] [uri "/wp-content/plugins/apikey/a57bze8931.php"] [unique_id "YwlQwsPlBu0dvWPS6ky3OwAAAAM"] www.ampsstudio.com [Sat Aug 27 00:01:23 2022] [error] [client 212.227.213.151:0] [client 212.227.213.151] ModSecurity: Access denied with code 403 (phase 2). Match of "contains /wp-content/plugins/dopwgg/libraries/php/upload.php" against "REQUEST_URI" required. [file "remote server"] [line "-1"] [id "430073"] [msg "Malware.Expert - request_uri: Wordpress - prevent PHP files from executing"] [hostname "www.ampsstudio.com"] [uri "/wp-content/plugins/cherry-plugin/admin/import-export/upload.php"] [unique_id "YwlQw3P9caVvYhNyODF1ZwAAAAk"] www.ampsstudio.com [Sat Aug 27 00:01:24 2022] [error] [client 212.227.213.151:0] [client 212.227.213.151] ModSecurity: Access denied with code 403 (phase 2). Match of "contains index.php" against "REQUEST_URI" required. [file "remote server"] [line "-1"] [id "570076"] [msg "Malware.Expert - Malware"] [hostname "www.ampsstudio.com"] [uri "/wp-content/plugins/cherry-plugin/admin/import-export/a57bze8931.php"] [unique_id "YwlQxJDvbPI-E0XTT8rOvQAAAAY"] www.ampsstudio.com [Sat Aug 27 00:01:26 2022] [error] [client 212.227.213.151:0] [client 212.227.213.151] ModSecurity: Access denied with connection close (phase 2). Pattern match "\\\\.php" at FILES:files[]. [file "remote server"] [line "-1"] [id "600000"] [msg "Malware.Expert - PHP files not allowed upload"] [hostname "www.ampsstudio.com"] [uri "/wp-content/plugins/formcraft/file-upload/server/php/"] [unique_id "YwlQxqYxYbw3J-HdtBRUywAAABQ"] www.ampsstudio.com [Sat Aug 27 00:01:27 2022] [error] [client 212.227.213.151:0] [client 212.227.213.151] ModSecurity: Access denied with code 403 (phase 2). Match of "contains index.php" against "REQUEST_URI" required. [file "remote server"] [line "-1"] [id "570076"] [msg "Malware.Expert - Malware"] [hostname "www.ampsstudio.com"] [uri "/wp-content/plugins/formcraft/file-upload/server/php/files/a57bze8931.php"] [unique_id "YwlQx9k0BnNfh37zAiQsKAAAAAA"] www.ampsstudio.com [Sat Aug 27 00:01:29 2022] [error] [client 212.227.213.151:0] [client 212.227.213.151] ModSecurity: Access denied with code 403 (phase 2). Match of "contains index.php" against "REQUEST_URI" required. [file "remote server"] [line "-1"] [id "570076"] [msg "Malware.Expert - Malware"] [hostname "www.ampsstudio.com"] [uri "/wp-admin/admin-ajax.php"] [unique_id "YwlQyVbC-vVftvngGr7fawAAABo"] www.ampsstudio.com [Sat Aug 27 00:01:30 2022] [error] [client 212.227.213.151:0] [client 212.227.213.151] ModSecurity: Access denied with code 403 (phase 2). Pattern match "/\\\\..+\\\\.php" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430015"] [msg "Malware.Expert - request_uri: hidden .php execute"] [hostname "www.ampsstudio.com"] [uri "/wp-content/uploads/typehub/custom/a57bze8931/.__a57bze8931.php"] [unique_id "YwlQygxiuD9PWbTuyWoPKwAAAAc"] www.ampsstudio.com [Sat Aug 27 00:01:31 2022] [error] [client 212.227.213.151:0] [client 212.227.213.151] ModSecurity: Access denied with code 403 (phase 2). Match of "contains index.php" against "REQUEST_URI" required. [file "remote server"] [line "-1"] [id "570076"] [msg "Malware.Expert - Malware"] [hostname "www.ampsstudio.com"] [uri "/wp-admin/admin-ajax.php"] [unique_id "YwlQy6N-2aRcGCU8u8DEPwAAAAQ"] www.ampsstudio.com [Sat Aug 27 00:01:36 2022] [error] [client 212.227.213.151:0] [client 212.227.213.151] ModSecurity: Access denied with code 403 (phase 1). Pattern match "\\\\.\\\\./\\\\.\\\\." at REQUEST_URI. [file "remote server"] [line "-1"] [id "430064"] [msg "Malware.Expert - request_uri: directory travel"] [hostname "www.ampsstudio.com"] [uri "/wp-content/plugins/wpcargo/includes/barcode.php"] [unique_id "YwlQ0MPlBu0dvWPS6ky3PAAAAAM"] www.ampsstudio.com [Sat Aug 27 00:01:37 2022] [error] [client 212.227.213.151:0] [client 212.227.213.151] ModSecurity: Access denied with code 403 (phase 2). String match "wget+http" at REQUEST_BODY. [file "remote server"] [line "-1"] [id "440014"] [msg "Malware.Expert - unwanted shell access"] [hostname "www.ampsstudio.com"] [uri "/wp-content/x.php"] [unique_id "YwlQ0XP9caVvYhNyODF1aAAAAAk"] www.ampsstudio.com [Sat Aug 27 00:01:38 2022] [error] [client 212.227.213.151:0] [client 212.227.213.151] ModSecurity: Access denied with code 403 (phase 2). Match of "contains index.php" against "REQUEST_URI" required. [file "remote server"] [line "-1"] [id "570076"] [msg "Malware.Expert - Malware"] [hostname "www.ampsstudio.com"] [uri "/wp-content/king.php"] [unique_id "YwlQ0pDvbPI-E0XTT8rOvgAAAAY"] www.ampsstudio.com [Sat Aug 27 00:01:40 2022] [error] [client 212.227.213.151:0] [client 212.227.213.151] ModSecurity: Access denied with code 403 (phase 2). String match "connector.minimal.php" at REQUEST_URI. [file "remote server"] [line "-1"] [id "500083"] [msg "Malware.Expert - request_uri: 0-Day - Wordpress filemanager plugin"] [hostname "www.ampsstudio.com"] [uri "/wp-content/plugins/wp-file-manager/lib/php/connector.minimal.php"] [unique_id "YwlQ1KYxYbw3J-HdtBRUzAAAABQ"] www.ampsstudio.com [Sat Aug 27 00:01:41 2022] [error] [client 212.227.213.151:0] [client 212.227.213.151] ModSecurity: Access denied with code 403 (phase 2). String match "connector.minimal.php" at REQUEST_URI. [file "remote server"] [line "-1"] [id "500083"] [msg "Malware.Expert - request_uri: 0-Day - Wordpress filemanager plugin"] [hostname "www.ampsstudio.com"] [uri "/wp-content/plugins/wp-file-manager-pro/lib/php/connector.minimal.php"] [unique_id "YwlQ1dk0BnNfh37zAiQsKQAAAAA"] www.ampsstudio.com [Sat Aug 27 00:01:42 2022] [error] [client 212.227.213.151:0] [client 212.227.213.151] ModSecurity: Access denied with code 403 (phase 2). Match of "contains index.php" against "REQUEST_URI" required. [file "remote server"] [line "-1"] [id "570076"] [msg "Malware.Expert - Malware"] [hostname "www.ampsstudio.com"] [uri "/wp-content/plugins/gatewayapi/inc/css_js.php"] [unique_id "YwlQ1lbC-vVftvngGr7fbAAAABo"] www.ampsstudio.com [Sat Aug 27 00:01:44 2022] [error] [client 212.227.213.151:0] [client 212.227.213.151] ModSecurity: Access denied with code 403 (phase 2). Match of "contains index.php" against "REQUEST_URI" required. [file "remote server"] [line "-1"] [id "570076"] [msg "Malware.Expert - Malware"] [hostname "www.ampsstudio.com"] [uri "/wp-content/plugins/gatewayapi/inc/a57bze8931.php"] [unique_id "YwlQ2AxiuD9PWbTuyWoPLAAAAAc"] www.ampsstudio.com [Sat Aug 27 00:01:45 2022] [error] [client 212.227.213.151:0] [client 212.227.213.151] ModSecurity: Access denied with code 403 (phase 2). Match of "contains /wp-content/plugins/dopwgg/libraries/php/upload.php" against "REQUEST_URI" required. [file "remote server"] [line "-1"] [id "430073"] [msg "Malware.Expert - request_uri: Wordpress - prevent PHP files from executing"] [hostname "www.ampsstudio.com"] [uri "/wp-content/plugins/divi-contact-extended/includes/upload.php"] [unique_id "YwlQ2aN-2aRcGCU8u8DEQAAAAAQ"] ampsstudio.com [Sat Aug 27 01:48:50 2022] [error] [client 54.183.179.198:0] [client 54.183.179.198] ModSecurity: Access denied with code 403 (phase 2). Match of "contains index.php" against "REQUEST_URI" required. [file "remote server"] [line "-1"] [id "570076"] [msg "Malware.Expert - Malware"] [hostname "ampsstudio.com"] [uri "/wp-plain.php"] [unique_id "Ywlp8gxiuD9PWbTuyWoPVAAAAAc"] www.ampsstudio.com [Sat Aug 27 01:48:55 2022] [error] [client 54.183.179.198:0] [client 54.183.179.198] ModSecurity: Access denied with code 403 (phase 2). String match "php.suspected" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430059"] [msg "Malware.Expert - request_uri: .PHP suspected files"] [hostname "www.ampsstudio.com"] [uri "/wp-content/plugins/apikey/apikey.php.suspected"] [unique_id "Ywlp9wxiuD9PWbTuyWoPVQAAAAc"] www.ampsstudio.com [Sat Aug 27 01:48:56 2022] [error] [client 54.183.179.198:0] [client 54.183.179.198] ModSecurity: Access denied with code 403 (phase 2). String match "php.suspected" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430059"] [msg "Malware.Expert - request_uri: .PHP suspected files"] [hostname "www.ampsstudio.com"] [uri "/plugins/content/apismtp/apismtp.php.suspected"] [unique_id "Ywlp-EsiIvF2nX0d-GIPhAAAAAE"] ampsstudio.com [Sat Aug 27 02:06:50 2022] [error] [client 80.76.51.29:0] AH01276: Cannot serve directory /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-admin/css/: No matching DirectoryIndex (index.php,index.html,index.htm) found, and server-generated directory index forbidden by Options directive www.ampsstudio.com [Sat Aug 27 06:24:54 2022] [error] [client 178.168.220.180:0] AH01071: Got error 'PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179' www.ampsstudio.com [Sat Aug 27 06:24:54 2022] [error] [client 178.168.220.180:0] AH01071: Got error 'PHP message: PHP Warning: Cannot modify header information - headers already sent by (output started at /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-includes/functions.php:5275) in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/includes/sonaar-music/css/theme/custom-style.php on line 2' www.ampsstudio.com [Sat Aug 27 09:39:06 2022] [error] [client 103.152.17.9:0] AH01071: Got error 'PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179' www.ampsstudio.com [Sat Aug 27 09:39:06 2022] [error] [client 103.152.17.9:0] AH01071: Got error 'PHP message: PHP Warning: Cannot modify header information - headers already sent by (output started at /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-includes/functions.php:5275) in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/includes/sonaar-music/css/theme/custom-style.php on line 2' www.ampsstudio.com [Sat Aug 27 10:06:48 2022] [error] [client 109.70.100.23:0] AH01071: Got error 'PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179' www.ampsstudio.com [Sat Aug 27 10:06:48 2022] [error] [client 109.70.100.23:0] AH01071: Got error 'PHP message: PHP Warning: Cannot modify header information - headers already sent by (output started at /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-includes/functions.php:5275) in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/includes/sonaar-music/css/theme/custom-style.php on line 2' www.ampsstudio.com [Sat Aug 27 10:43:06 2022] [error] [client 185.220.101.0:0] AH01071: Got error 'PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179' www.ampsstudio.com [Sat Aug 27 10:43:06 2022] [error] [client 185.220.101.0:0] AH01071: Got error 'PHP message: PHP Warning: Cannot modify header information - headers already sent by (output started at /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-includes/functions.php:5275) in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/includes/sonaar-music/css/theme/custom-style.php on line 2' www.ampsstudio.com [Sat Aug 27 12:29:31 2022] [error] [client 191.101.31.39:0] AH01071: Got error 'PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179' www.ampsstudio.com [Sat Aug 27 12:29:31 2022] [error] [client 191.101.31.39:0] AH01071: Got error 'PHP message: PHP Warning: Cannot modify header information - headers already sent by (output started at /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-includes/functions.php:5275) in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/includes/sonaar-music/css/theme/custom-style.php on line 2' www.ampsstudio.com [Sat Aug 27 12:46:20 2022] [error] [client 23.81.59.250:0] AH01071: Got error 'PHP message: PHP Warning: Cannot modify header information - headers already sent by (output started at /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-includes/functions.php:5275) in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/includes/sonaar-music/css/theme/custom-style.php on line 2' mail.ampsstudio.com [Sat Aug 27 14:40:10 2022] [error] [client 20.205.176.66:0] [client 20.205.176.66] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "mail.ampsstudio.com"] [uri "/.env"] [unique_id "Ywoeur2X4N75jd3axSLBmQAAABQ"] webmail.ampsstudio.com [Sat Aug 27 15:09:03 2022] [error] [client 20.205.176.66:0] [client 20.205.176.66] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "webmail.ampsstudio.com"] [uri "/.env"] [unique_id "Ywolf72X4N75jd3axSLBpAAAABQ"] ampsstudio.com [Sat Aug 27 16:25:52 2022] [error] [client 167.172.231.42:0] [client 167.172.231.42] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "ampsstudio.com"] [uri "/.env"] [unique_id "Ywo3gAGLfC8RnxfH1kBKcQAAAAQ"] www.ampsstudio.com [Sat Aug 27 18:48:29 2022] [error] [client 213.139.193.30:0] AH01071: Got error 'PHP message: PHP Warning: Cannot modify header information - headers already sent by (output started at /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-includes/functions.php:5275) in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/includes/sonaar-music/css/theme/custom-style.php on line 2' ampsstudio.com [Sat Aug 27 18:55:47 2022] [error] [client 195.178.120.89:0] [client 195.178.120.89] ModSecurity: Access denied with code 403 (phase 2). Match of "contains index.php" against "REQUEST_URI" required. [file "remote server"] [line "-1"] [id "570076"] [msg "Malware.Expert - Malware"] [hostname "ampsstudio.com"] [uri "/wp-content/plugins/smartquizbuilder/includes/lib/export/rgx.php"] [unique_id "YwpaowGLfC8RnxfH1kBKoQAAAAQ"] ampsstudio.com [Sat Aug 27 18:55:47 2022] [error] [client 195.178.120.89:0] [client 195.178.120.89] ModSecurity: Access denied with code 403 (phase 1). Pattern match "\\\\.\\\\./\\\\.\\\\." at REQUEST_URI. [file "remote server"] [line "-1"] [id "430064"] [msg "Malware.Expert - request_uri: directory travel"] [hostname "ampsstudio.com"] [uri "/wp-admin/admin-post.php"] [unique_id "Ywpao72X4N75jd3axSLB_wAAABQ"] www.ampsstudio.com [Sat Aug 27 18:58:00 2022] [error] [client 146.185.140.66:0] [client 146.185.140.66] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_HEADERS_NAMES. [file "remote server"] [line "-1"] [id "580001"] [msg "Malware.Expert - Wordpress - Referer missing"] [hostname "www.ampsstudio.com"] [uri "/wp-content/uploads/alfacgiapi/perl.alfa"] [unique_id "YwpbKL2X4N75jd3axSLCAAAAABQ"] www.ampsstudio.com [Sat Aug 27 18:58:03 2022] [error] [client 146.185.140.66:0] [client 146.185.140.66] ModSecurity: Access denied with code 403 (phase 2). Pattern match "/wp-content/plugins/.*/up\\\\.php" at REQUEST_URI. [file "remote server"] [line "-1"] [id "570052"] [msg "Malware.Expert - Malware"] [hostname "www.ampsstudio.com"] [uri "/wp-content/plugins/ubh/up.php"] [unique_id "YwpbK7Oz4iRFh8cdljOb4gAAAAU"] www.ampsstudio.com [Sat Aug 27 18:58:05 2022] [error] [client 146.185.140.66:0] [client 146.185.140.66] ModSecurity: Access denied with code 403 (phase 2). String match "/config.bak.php" at REQUEST_URI. [file "remote server"] [line "-1"] [id "570053"] [msg "Malware.Expert - Malware"] [hostname "www.ampsstudio.com"] [uri "/wp-content/plugins/config.bak.php"] [unique_id "YwpbLRu9T44WhIzCxFE0UQAAAAA"] www.ampsstudio.com [Sat Aug 27 18:58:05 2022] [error] [client 146.185.140.66:0] [client 146.185.140.66] ModSecurity: Access denied with code 403 (phase 2). String match "/config.bak.php" at REQUEST_URI. [file "remote server"] [line "-1"] [id "570053"] [msg "Malware.Expert - Malware"] [hostname "www.ampsstudio.com"] [uri "/wp-content/themes/config.bak.php"] [unique_id "YwpbLQGLfC8RnxfH1kBKowAAAAQ"] ampsstudio.com [Sun Aug 28 00:46:26 2022] [error] [client 51.142.181.246:0] AH01276: Cannot serve directory /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-admin/css/: No matching DirectoryIndex (index.php,index.html,index.htm) found, and server-generated directory index forbidden by Options directive ampsstudio.com [Sun Aug 28 00:53:28 2022] [error] [client 51.124.119.41:0] [client 51.124.119.41] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "ampsstudio.com"] [uri "/.env"] [unique_id "YwqueNLISBetO9-MijfUfgAAAAY"] www.ampsstudio.com [Sun Aug 28 02:05:18 2022] [error] [client 185.191.171.13:0] AH01071: Got error 'PHP message: PHP Warning: Attempt to read property "ID" on null in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/archive-event.php on line 15PHP message: PHP Warning: Undefined array key 0 in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/includes/classes/iron_sonaar.class.php on line 212PHP message: PHP Warning: Trying to access array offset on value of type null in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/includes/classes/iron_sonaar.class.php on line 212PHP message: PHP Warning: Undefined array key 0 in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/includes/classes/iron_sonaar.class.php on line 214PHP message: PHP Warning: Trying to access array offset on value of type null in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/includes/classes/iron_sonaar.class.php on line 214' www.ampsstudio.com [Sun Aug 28 02:17:30 2022] [error] [client 107.189.13.251:0] AH01071: Got error 'PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179' www.ampsstudio.com [Sun Aug 28 02:17:30 2022] [error] [client 107.189.13.251:0] AH01071: Got error 'PHP message: PHP Warning: Cannot modify header information - headers already sent by (output started at /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-includes/functions.php:5275) in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/includes/sonaar-music/css/theme/custom-style.php on line 2' www.ampsstudio.com [Sun Aug 28 03:59:12 2022] [error] [client 185.220.101.2:0] AH01071: Got error 'PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179' www.ampsstudio.com [Sun Aug 28 03:59:12 2022] [error] [client 185.220.101.2:0] AH01071: Got error 'PHP message: PHP Warning: Cannot modify header information - headers already sent by (output started at /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-includes/functions.php:5275) in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/includes/sonaar-music/css/theme/custom-style.php on line 2' www.ampsstudio.com [Sun Aug 28 05:12:33 2022] [error] [client 66.249.76.41:0] AH01071: Got error 'PHP message: PHP Warning: Attempt to read property "ID" on null in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/archive-event.php on line 15PHP message: PHP Warning: Undefined array key 0 in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/includes/classes/iron_sonaar.class.php on line 212PHP message: PHP Warning: Trying to access array offset on value of type null in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/includes/classes/iron_sonaar.class.php on line 212PHP message: PHP Warning: Undefined array key 0 in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/includes/classes/iron_sonaar.class.php on line 214PHP message: PHP Warning: Trying to access array offset on value of type null in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/includes/classes/iron_sonaar.class.php on line 214' ampsstudio.com [Sun Aug 28 06:39:38 2022] [error] [client 156.146.63.157:0] [client 156.146.63.157] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "ampsstudio.com"] [uri "/.env"] [unique_id "Ywr_mgB82CqRJoel2CxVGgAAAAQ"] webdisk.ampsstudio.com [Sun Aug 28 06:50:58 2022] [error] [client 51.124.119.41:0] [client 51.124.119.41] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "webdisk.ampsstudio.com"] [uri "/.env"] [unique_id "YwsCQgB82CqRJoel2CxVHwAAAAQ"] cpanel.ampsstudio.com [Sun Aug 28 07:40:37 2022] [error] [client 51.124.119.41:0] [client 51.124.119.41] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "cpanel.ampsstudio.com"] [uri "/.env"] [unique_id "YwsN5W50Y4HsZnxY2HBSiAAAAAA"] webdisk.ampsstudio.com [Sun Aug 28 08:58:14 2022] [error] [client 20.205.176.66:0] [client 20.205.176.66] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "webdisk.ampsstudio.com"] [uri "/.env"] [unique_id "YwsgFq3JxRRCnR8ajUpLoQAAABo"] webmail.ampsstudio.com [Sun Aug 28 09:16:13 2022] [error] [client 51.124.119.41:0] [client 51.124.119.41] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "webmail.ampsstudio.com"] [uri "/.env"] [unique_id "YwskTaUZiLNWnyQ-m8t7iAAAAAY"] www.ampsstudio.com [Sun Aug 28 09:44:43 2022] [crit] [client 66.249.93.18:0] AH00529: /home/virtual/vps-aa3942/a/aede5353c4/public_html/.well-known/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/virtual/vps-aa3942/a/aede5353c4/public_html/.well-known/' is executable cpanel.ampsstudio.com [Sun Aug 28 12:12:49 2022] [error] [client 156.146.63.157:0] [client 156.146.63.157] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "cpanel.ampsstudio.com"] [uri "/.env"] [unique_id "YwtNsW50Y4HsZnxY2HBTEAAAAAA"] mail.ampsstudio.com [Sun Aug 28 13:16:08 2022] [error] [client 156.146.63.157:0] [client 156.146.63.157] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "mail.ampsstudio.com"] [uri "/.env"] [unique_id "YwtciAI-245KokPn5KfysQAAAAU"] www.ampsstudio.com [Sun Aug 28 14:03:17 2022] [error] [client 5.227.27.9:0] AH01071: Got error 'PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179' www.ampsstudio.com [Sun Aug 28 15:14:23 2022] [error] [client 77.35.205.148:0] AH01071: Got error 'PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179' www.ampsstudio.com [Sun Aug 28 15:14:23 2022] [error] [client 77.35.205.148:0] AH01071: Got error 'PHP message: PHP Warning: Cannot modify header information - headers already sent by (output started at /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-includes/functions.php:5275) in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/includes/sonaar-music/css/theme/custom-style.php on line 2' webmail.ampsstudio.com [Sun Aug 28 15:24:46 2022] [error] [client 156.146.63.157:0] [client 156.146.63.157] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "webmail.ampsstudio.com"] [uri "/.env"] [unique_id "Ywt6rm50Y4HsZnxY2HBTXwAAAAA"] cpanel.ampsstudio.com [Sun Aug 28 18:31:44 2022] [error] [client 156.146.63.157:0] [client 156.146.63.157] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "cpanel.ampsstudio.com"] [uri "/.env"] [unique_id "YwumgK3JxRRCnR8ajUpMmAAAABo"] mail.ampsstudio.com [Sun Aug 28 18:39:32 2022] [error] [client 156.146.63.157:0] [client 156.146.63.157] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "mail.ampsstudio.com"] [uri "/.env"] [unique_id "YwuoVKUZiLNWnyQ-m8t8bwAAAAY"] cpanel.ampsstudio.com [Sun Aug 28 19:01:35 2022] [error] [client 156.146.63.157:0] [client 156.146.63.157] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "cpanel.ampsstudio.com"] [uri "/.env"] [unique_id "Ywutf6UZiLNWnyQ-m8t8dgAAAAY"] www.ampsstudio.com [Sun Aug 28 20:17:34 2022] [error] [client 46.3.197.7:0] AH01071: Got error 'PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179' www.ampsstudio.com [Sun Aug 28 20:17:34 2022] [error] [client 46.3.197.7:0] AH01071: Got error 'PHP message: PHP Warning: Cannot modify header information - headers already sent by (output started at /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-includes/functions.php:5275) in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/includes/sonaar-music/css/theme/custom-style.php on line 2' cpanel.ampsstudio.com [Sun Aug 28 20:42:32 2022] [error] [client 52.143.138.12:0] [client 52.143.138.12] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "cpanel.ampsstudio.com"] [uri "/.env"] [unique_id "YwvFKDiGvRruJoPa_VmSAQAAABQ"] cpanel.ampsstudio.com [Sun Aug 28 21:14:51 2022] [error] [client 156.146.63.157:0] [client 156.146.63.157] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "cpanel.ampsstudio.com"] [uri "/.env"] [unique_id "YwvMu8QvY0PDI7b_kGTa2AAAAAg"] www.ampsstudio.com [Sun Aug 28 22:24:49 2022] [error] [client 88.218.170.57:0] AH01071: Got error 'PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179' www.ampsstudio.com [Sun Aug 28 22:24:49 2022] [error] [client 88.218.170.57:0] AH01071: Got error 'PHP message: PHP Warning: Cannot modify header information - headers already sent by (output started at /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-includes/functions.php:5275) in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/includes/sonaar-music/css/theme/custom-style.php on line 2' cpanel.ampsstudio.com [Sun Aug 28 22:30:14 2022] [error] [client 156.146.63.157:0] [client 156.146.63.157] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "cpanel.ampsstudio.com"] [uri "/.env"] [unique_id "YwveZgB82CqRJoel2CxWiQAAAAQ"] www.ampsstudio.com [Mon Aug 29 00:12:19 2022] [error] [client 217.199.103.58:0] AH01071: Got error 'PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179' www.ampsstudio.com [Mon Aug 29 00:12:19 2022] [error] [client 217.199.103.58:0] AH01071: Got error 'PHP message: PHP Warning: Cannot modify header information - headers already sent by (output started at /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-includes/functions.php:5275) in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/includes/sonaar-music/css/theme/custom-style.php on line 2' www.ampsstudio.com [Mon Aug 29 01:47:02 2022] [error] [client 216.24.212.18:0] AH01071: Got error 'PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179' www.ampsstudio.com [Mon Aug 29 01:47:02 2022] [error] [client 216.24.212.18:0] AH01071: Got error 'PHP message: PHP Warning: Cannot modify header information - headers already sent by (output started at /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-includes/functions.php:5275) in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/includes/sonaar-music/css/theme/custom-style.php on line 2' webmail.ampsstudio.com [Mon Aug 29 02:04:31 2022] [error] [client 156.146.63.157:0] [client 156.146.63.157] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "webmail.ampsstudio.com"] [uri "/.env"] [unique_id "YwwQnwB82CqRJoel2CxW0gAAAAQ"] webdisk.ampsstudio.com [Mon Aug 29 02:14:47 2022] [error] [client 156.146.63.157:0] [client 156.146.63.157] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "webdisk.ampsstudio.com"] [uri "/.env"] [unique_id "YwwTBwI-245KokPn5KfzvgAAAAU"] www.ampsstudio.com [Mon Aug 29 03:16:30 2022] [error] [client 154.6.18.120:0] AH01071: Got error 'PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179' www.ampsstudio.com [Mon Aug 29 03:16:30 2022] [error] [client 154.6.18.120:0] AH01071: Got error 'PHP message: PHP Warning: Cannot modify header information - headers already sent by (output started at /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-includes/functions.php:5275) in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/includes/sonaar-music/css/theme/custom-style.php on line 2' mail.ampsstudio.com [Mon Aug 29 03:25:50 2022] [error] [client 156.146.63.157:0] [client 156.146.63.157] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "mail.ampsstudio.com"] [uri "/.env"] [unique_id "YwwjrjiGvRruJoPa_VmSkgAAABQ"] cpanel.ampsstudio.com [Mon Aug 29 04:38:26 2022] [error] [client 156.146.63.157:0] [client 156.146.63.157] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "cpanel.ampsstudio.com"] [uri "/.env"] [unique_id "Yww0soGhiiQr9mKZeJbTxwAAAAA"] webmail.ampsstudio.com [Mon Aug 29 04:38:41 2022] [error] [client 156.146.63.157:0] [client 156.146.63.157] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "webmail.ampsstudio.com"] [uri "/.env"] [unique_id "Yww0weYkVuxWBGPD6fGcjAAAAAM"] cpanel.ampsstudio.com [Mon Aug 29 06:52:07 2022] [error] [client 156.146.63.157:0] [client 156.146.63.157] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "cpanel.ampsstudio.com"] [uri "/.env"] [unique_id "YwxUBz6R2hVQm6ZNRgyzNQAAAAQ"] webdisk.ampsstudio.com [Mon Aug 29 07:30:05 2022] [error] [client 156.146.63.157:0] [client 156.146.63.157] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "webdisk.ampsstudio.com"] [uri "/.env"] [unique_id "Ywxc7aG9TfzpTAX7I9ehVQAAAAU"] www.ampsstudio.com [Mon Aug 29 09:08:33 2022] [error] [client 185.220.100.252:0] AH01071: Got error 'PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179' www.ampsstudio.com [Mon Aug 29 09:08:33 2022] [error] [client 185.220.100.252:0] AH01071: Got error 'PHP message: PHP Warning: Cannot modify header information - headers already sent by (output started at /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-includes/functions.php:5275) in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/includes/sonaar-music/css/theme/custom-style.php on line 2' ampsstudio.com [Mon Aug 29 09:36:53 2022] [error] [client 51.124.119.41:0] [client 51.124.119.41] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "ampsstudio.com"] [uri "/.env"] [unique_id "Ywx6pYltImY5UNodvx3yegAAAAE"] www.ampsstudio.com [Mon Aug 29 09:59:43 2022] [error] [client 154.6.18.69:0] AH01071: Got error 'PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179' www.ampsstudio.com [Mon Aug 29 09:59:43 2022] [error] [client 154.6.18.69:0] AH01071: Got error 'PHP message: PHP Warning: Cannot modify header information - headers already sent by (output started at /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-includes/functions.php:5275) in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/includes/sonaar-music/css/theme/custom-style.php on line 2' webdisk.ampsstudio.com [Mon Aug 29 11:18:22 2022] [error] [client 52.143.138.12:0] [client 52.143.138.12] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "webdisk.ampsstudio.com"] [uri "/.env"] [unique_id "YwySbpsLKnfU0RsR04JDBwAAABo"] webmail.ampsstudio.com [Mon Aug 29 11:24:32 2022] [error] [client 156.146.63.157:0] [client 156.146.63.157] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "webmail.ampsstudio.com"] [uri "/.env"] [unique_id "YwyT4IpL4P6d0RZP99ha_QAAAAc"] ampsstudio.com [Mon Aug 29 12:26:59 2022] [error] [client 20.38.8.68:0] AH01071: Got error 'PHP message: PHP Fatal error: Uncaught Error: Call to undefined function get_header() in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/twentyfourteen/404.php:10\nStack trace:\n#0 {main}\n thrown in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/twentyfourteen/404.php on line 10' ampsstudio.com [Mon Aug 29 12:27:00 2022] [error] [client 20.38.8.68:0] AH01071: Got error 'PHP message: PHP Fatal error: Uncaught Error: Call to undefined function get_header() in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/twentyfifteen/404.php:10\nStack trace:\n#0 {main}\n thrown in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/twentyfifteen/404.php on line 10' ampsstudio.com [Mon Aug 29 12:27:04 2022] [error] [client 20.38.8.68:0] AH01071: Got error 'PHP message: PHP Fatal error: Uncaught Error: Call to undefined function get_header() in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/twentyseventeen/404.php:13\nStack trace:\n#0 {main}\n thrown in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/twentyseventeen/404.php on line 13' ampsstudio.com [Mon Aug 29 12:27:08 2022] [error] [client 20.38.8.68:0] AH01071: Got error 'PHP message: PHP Fatal error: Uncaught Error: Call to undefined function get_header() in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/twentynineteen/404.php:12\nStack trace:\n#0 {main}\n thrown in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/twentynineteen/404.php on line 12' ampsstudio.com [Mon Aug 29 12:27:09 2022] [error] [client 20.38.8.68:0] AH01071: Got error 'PHP message: PHP Fatal error: Uncaught Error: Call to undefined function get_header() in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/twentytwenty/404.php:10\nStack trace:\n#0 {main}\n thrown in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/twentytwenty/404.php on line 10' ampsstudio.com [Mon Aug 29 12:27:22 2022] [error] [client 20.38.8.68:0] AH01630: client denied by server configuration: /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/akismet/akismet.php ampsstudio.com [Mon Aug 29 12:27:23 2022] [error] [client 20.38.8.68:0] [client 20.38.8.68] ModSecurity: Access denied with code 403 (phase 2). String match "/wso.php" at REQUEST_URI. [file "remote server"] [line "-1"] [id "570066"] [msg "Malware.Expert - PHP Command Shell (WSO)"] [hostname "ampsstudio.com"] [uri "/wp-content/themes/twentyfifteen/wso.php"] [unique_id "Ywyim-YkVuxWBGPD6fGdcwAAAAM"] ampsstudio.com [Mon Aug 29 12:27:32 2022] [error] [client 20.38.8.68:0] AH01071: Got error 'PHP message: PHP Fatal error: Uncaught Error: Undefined constant "ABSPATH" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-includes/cache.php:12\nStack trace:\n#0 {main}\n thrown in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-includes/cache.php on line 12' ampsstudio.com [Mon Aug 29 12:27:33 2022] [error] [client 20.38.8.68:0] [client 20.38.8.68] ModSecurity: Access denied with code 403 (phase 2). Pattern match "/fonts/.*\\\\.php" at REQUEST_URI. [file "remote server"] [line "-1"] [id "468000"] [msg "Malware.Expert - request_uri: Fonts folder - prevent PHP files from executing"] [hostname "ampsstudio.com"] [uri "/wp-includes/fonts/my1.php"] [unique_id "YwyipYGhiiQr9mKZeJbUqAAAAAA"] ampsstudio.com [Mon Aug 29 12:27:42 2022] [error] [client 20.38.8.68:0] [client 20.38.8.68] ModSecurity: Access denied with code 403 (phase 2). String match "/shell.php" at REQUEST_URI. [file "remote server"] [line "-1"] [id "570072"] [msg "Malware.Expert - PHP Command Shell"] [hostname "ampsstudio.com"] [uri "/shell.php"] [unique_id "YwyirvcCs_HcDQyxkMPRJgAAAAg"] ampsstudio.com [Mon Aug 29 12:27:46 2022] [error] [client 20.38.8.68:0] [client 20.38.8.68] ModSecurity: Access denied with code 403 (phase 2). String match "/wso.php" at REQUEST_URI. [file "remote server"] [line "-1"] [id "570066"] [msg "Malware.Expert - PHP Command Shell (WSO)"] [hostname "ampsstudio.com"] [uri "/wso.php"] [unique_id "YwyisoGhiiQr9mKZeJbUqQAAAAA"] ampsstudio.com [Mon Aug 29 12:28:00 2022] [error] [client 20.38.8.68:0] [client 20.38.8.68] ModSecurity: Access denied with code 403 (phase 2). String match "/_.php" at REQUEST_URI. [file "remote server"] [line "-1"] [id "570038"] [msg "Malware.Expert - Malware"] [hostname "ampsstudio.com"] [uri "/_.php"] [unique_id "YwyiwOYkVuxWBGPD6fGddgAAAAM"] ampsstudio.com [Mon Aug 29 12:28:15 2022] [error] [client 20.38.8.68:0] [client 20.38.8.68] ModSecurity: Access denied with code 403 (phase 2). String match "/wso.php" at REQUEST_URI. [file "remote server"] [line "-1"] [id "570066"] [msg "Malware.Expert - PHP Command Shell (WSO)"] [hostname "ampsstudio.com"] [uri "/wp-content/themes/twentytwelve/wso.php"] [unique_id "Ywyizz6R2hVQm6ZNRgyz4QAAAAQ"] ampsstudio.com [Mon Aug 29 12:28:24 2022] [error] [client 20.38.8.68:0] AH01071: Got error 'PHP message: PHP Fatal error: Uncaught Error: Call to undefined function do_action() in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/twentyfifteen/footer.php:23\nStack trace:\n#0 {main}\n thrown in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/twentyfifteen/footer.php on line 23' www.ampsstudio.com [Mon Aug 29 13:20:49 2022] [error] [client 217.199.121.228:0] AH01071: Got error 'PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179' www.ampsstudio.com [Mon Aug 29 13:20:49 2022] [error] [client 217.199.121.228:0] AH01071: Got error 'PHP message: PHP Warning: Cannot modify header information - headers already sent by (output started at /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-includes/functions.php:5275) in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/includes/sonaar-music/css/theme/custom-style.php on line 2' webdisk.ampsstudio.com [Mon Aug 29 14:27:18 2022] [error] [client 51.124.119.41:0] [client 51.124.119.41] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "webdisk.ampsstudio.com"] [uri "/.env"] [unique_id "Ywy-tvcCs_HcDQyxkMPRgQAAAAg"] webdisk.ampsstudio.com [Mon Aug 29 14:27:44 2022] [error] [client 51.124.119.41:0] [client 51.124.119.41] ModSecurity: Access denied with code 403 (phase 2). String match "/Util/PHP/eval-stdin.php" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430046"] [msg "Malware.Expert - request_uri: CVE-2017-9841"] [hostname "webdisk.ampsstudio.com"] [uri "/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php"] [unique_id "Ywy-0IpL4P6d0RZP99hbhgAAAAc"] ampsstudio.com [Mon Aug 29 14:50:31 2022] [error] [client 20.38.2.42:0] [client 20.38.2.42] ModSecurity: Access denied with code 403 (phase 2). Match of "contains index.php" against "REQUEST_URI" required. [file "remote server"] [line "-1"] [id "570076"] [msg "Malware.Expert - Malware"] [hostname "ampsstudio.com"] [uri "/wp-plain.php"] [unique_id "YwzEJ-YkVuxWBGPD6fGd1wAAAAM"] www.ampsstudio.com [Mon Aug 29 14:50:37 2022] [error] [client 20.38.2.42:0] [client 20.38.2.42] ModSecurity: Access denied with code 403 (phase 2). String match "php.suspected" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430059"] [msg "Malware.Expert - request_uri: .PHP suspected files"] [hostname "www.ampsstudio.com"] [uri "/wp-content/plugins/apikey/apikey.php.suspected"] [unique_id "YwzELaG9TfzpTAX7I9eiWAAAAAU"] www.ampsstudio.com [Mon Aug 29 14:50:37 2022] [error] [client 20.38.2.42:0] [client 20.38.2.42] ModSecurity: Access denied with code 403 (phase 2). String match "php.suspected" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430059"] [msg "Malware.Expert - request_uri: .PHP suspected files"] [hostname "www.ampsstudio.com"] [uri "/plugins/content/apismtp/apismtp.php.suspected"] [unique_id "YwzELZsLKnfU0RsR04JDmwAAABo"] ampsstudio.com [Mon Aug 29 14:52:04 2022] [error] [client 85.31.46.140:0] AH01276: Cannot serve directory /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-admin/css/: No matching DirectoryIndex (index.php,index.html,index.htm) found, and server-generated directory index forbidden by Options directive ampsstudio.com [Mon Aug 29 14:53:22 2022] [error] [client 20.125.141.209:0] [client 20.125.141.209] ModSecurity: Access denied with code 403 (phase 2). Match of "contains index.php" against "REQUEST_URI" required. [file "remote server"] [line "-1"] [id "570076"] [msg "Malware.Expert - Malware"] [hostname "ampsstudio.com"] [uri "/wp-plain.php"] [unique_id "YwzE0lZEveXtADR0xIBYkgAAAAY"] ampsstudio.com [Mon Aug 29 14:53:33 2022] [error] [client 20.125.141.209:0] [client 20.125.141.209] ModSecurity: Access denied with code 403 (phase 2). Match of "contains index.php" against "REQUEST_URI" required. [file "remote server"] [line "-1"] [id "570076"] [msg "Malware.Expert - Malware"] [hostname "ampsstudio.com"] [uri "/wp-plain.php"] [unique_id "YwzE3SJpiDDo0cBTBNBpxAAAAAI"] ampsstudio.com [Mon Aug 29 15:05:35 2022] [error] [client 154.6.12.156:0] [client 154.6.12.156] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "ampsstudio.com"] [uri "/.env"] [unique_id "YwzHr4ltImY5UNodvx3zUQAAAAE"] cpanel.ampsstudio.com [Mon Aug 29 15:12:28 2022] [error] [client 51.124.119.41:0] [client 51.124.119.41] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "cpanel.ampsstudio.com"] [uri "/.env"] [unique_id "YwzJTOYkVuxWBGPD6fGd6wAAAAM"] www.ampsstudio.com [Mon Aug 29 15:50:21 2022] [error] [client 185.191.171.36:0] AH01071: Got error 'PHP message: PHP Warning: Attempt to read property "ID" on null in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/archive-event.php on line 15PHP message: PHP Warning: Undefined array key 0 in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/includes/classes/iron_sonaar.class.php on line 212PHP message: PHP Warning: Trying to access array offset on value of type null in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/includes/classes/iron_sonaar.class.php on line 212PHP message: PHP Warning: Undefined array key 0 in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/includes/classes/iron_sonaar.class.php on line 214PHP message: PHP Warning: Trying to access array offset on value of type null in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/includes/classes/iron_sonaar.class.php on line 214' www.ampsstudio.com [Mon Aug 29 16:41:25 2022] [error] [client 185.220.100.251:0] AH01071: Got error 'PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179' www.ampsstudio.com [Mon Aug 29 16:41:25 2022] [error] [client 185.220.100.251:0] AH01071: Got error 'PHP message: PHP Warning: Cannot modify header information - headers already sent by (output started at /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-includes/functions.php:5275) in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/includes/sonaar-music/css/theme/custom-style.php on line 2' ampsstudio.com [Mon Aug 29 16:59:32 2022] [error] [client 193.19.109.132:0] [client 193.19.109.132] ModSecurity: Access denied with code 403 (phase 2). String match "/.git/config" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430058"] [msg "Malware.Expert - request_uri: .git config"] [hostname "ampsstudio.com"] [uri "/.git/config"] [unique_id "YwziZD6R2hVQm6ZNRgy0ogAAAAQ"] cpanel.ampsstudio.com [Mon Aug 29 18:40:44 2022] [error] [client 175.100.20.207:0] [client 175.100.20.207] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "cpanel.ampsstudio.com"] [uri "/.env"] [unique_id "Ywz6HAqzI8cyJ9YUrwudfgAAAAc"] www.ampsstudio.com [Mon Aug 29 20:11:35 2022] [error] [client 23.19.125.140:0] AH01071: Got error 'PHP message: PHP Warning: Cannot modify header information - headers already sent by (output started at /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-includes/functions.php:5275) in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/includes/sonaar-music/css/theme/custom-style.php on line 2' webdisk.ampsstudio.com [Mon Aug 29 20:44:13 2022] [error] [client 156.146.63.157:0] [client 156.146.63.157] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "webdisk.ampsstudio.com"] [uri "/.env"] [unique_id "Yw0XDT6R2hVQm6ZNRgy08gAAAAQ"] ampsstudio.com [Mon Aug 29 21:31:32 2022] [error] [client 175.100.20.207:0] [client 175.100.20.207] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "ampsstudio.com"] [uri "/.env"] [unique_id "Yw0iJPcCs_HcDQyxkMPSQwAAAAg"] www.ampsstudio.com [Mon Aug 29 21:50:01 2022] [error] [client 46.148.206.226:0] AH01071: Got error 'PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179' www.ampsstudio.com [Mon Aug 29 21:50:01 2022] [error] [client 46.148.206.226:0] AH01071: Got error 'PHP message: PHP Warning: Cannot modify header information - headers already sent by (output started at /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-includes/functions.php:5275) in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/includes/sonaar-music/css/theme/custom-style.php on line 2' ampsstudio.com [Mon Aug 29 22:30:33 2022] [error] [client 20.244.12.3:0] [client 20.244.12.3] ModSecurity: Access denied with code 403 (phase 2). Match of "contains index.php" against "REQUEST_URI" required. [file "remote server"] [line "-1"] [id "570076"] [msg "Malware.Expert - Malware"] [hostname "ampsstudio.com"] [uri "/wp-plain.php"] [unique_id "Yw0v-fcCs_HcDQyxkMPSVgAAAAg"] www.ampsstudio.com [Mon Aug 29 22:30:40 2022] [error] [client 20.244.12.3:0] [client 20.244.12.3] ModSecurity: Access denied with code 403 (phase 2). String match "php.suspected" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430059"] [msg "Malware.Expert - request_uri: .PHP suspected files"] [hostname "www.ampsstudio.com"] [uri "/wp-content/plugins/apikey/apikey.php.suspected"] [unique_id "Yw0wAPcCs_HcDQyxkMPSVwAAAAg"] www.ampsstudio.com [Mon Aug 29 22:30:40 2022] [error] [client 20.244.12.3:0] [client 20.244.12.3] ModSecurity: Access denied with code 403 (phase 2). String match "php.suspected" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430059"] [msg "Malware.Expert - request_uri: .PHP suspected files"] [hostname "www.ampsstudio.com"] [uri "/plugins/content/apismtp/apismtp.php.suspected"] [unique_id "Yw0wAFZEveXtADR0xIBZWgAAAAY"] webmail.ampsstudio.com [Mon Aug 29 23:47:18 2022] [error] [client 156.146.63.157:0] [client 156.146.63.157] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "webmail.ampsstudio.com"] [uri "/.env"] [unique_id "Yw1B9psLKnfU0RsR04JEfAAAABo"] webmail.ampsstudio.com [Tue Aug 30 00:39:54 2022] [error] [client 175.100.20.207:0] [client 175.100.20.207] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "webmail.ampsstudio.com"] [uri "/.env"] [unique_id "Yw1OSoltImY5UNodvx30QQAAAAE"] www.ampsstudio.com [Tue Aug 30 02:07:25 2022] [error] [client 195.178.120.89:0] [client 195.178.120.89] ModSecurity: Access denied with code 403 (phase 1). Pattern match "\\\\.\\\\./\\\\.\\\\." at REQUEST_URI. [file "remote server"] [line "-1"] [id "430064"] [msg "Malware.Expert - request_uri: directory travel"] [hostname "www.ampsstudio.com"] [uri "/wp-admin/admin-post.php"] [unique_id "Yw1izaG9TfzpTAX7I9ejbAAAAAU"] www.ampsstudio.com [Tue Aug 30 03:24:46 2022] [error] [client 185.191.171.35:0] AH01071: Got error 'PHP message: PHP Warning: Attempt to read property "post_content" on null in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/wordpress-seo/src/memoizers/meta-tags-context-memoizer.php on line 140PHP message: PHP Warning: Attempt to read property "post_modified_gmt" on null in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/wordpress-seo/src/presentations/indexable-post-type-presentation.php on line 289PHP message: PHP Warning: Attempt to read property "post_date_gmt" on null in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/wordpress-seo/src/presentations/indexable-post-type-presentation.php on line 289PHP message: PHP Warning: Attempt to read property "post_author" on null in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/wordpress-seo/src/presenters/slack/enhanced-data-presenter.php on line 46PHP message: PHP Warning: Attempt to read property "post_date_gmt" on null in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/wordpress-seo/src/generators/schema/webpage.php on line 51PHP message: PHP Warning: Attempt to read property "post_modified_gmt" on null in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/wordpress-seo/src/generators/schema/webpage.php on line 52PHP message: PHP Warning: Undefined array key 0 in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/includes/classes/iron_sonaar.class.php on line 212PHP message: PHP Warning: Trying to access array offset on value of type null in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/includes/classes/iron_sonaar.class.php on line 212PHP message: PHP Warning: Undefined array key 0 in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/includes/classes/iron_sonaar.class.php on line 214PHP message: PHP Warning: Trying to access array offset on value of type null in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/includes/classes/iron_sonaar.class.php on line 214' www.ampsstudio.com [Tue Aug 30 04:49:38 2022] [error] [client 93.120.32.195:0] AH01071: Got error 'PHP message: PHP Warning: Cannot modify header information - headers already sent by (output started at /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-includes/functions.php:5275) in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/includes/sonaar-music/css/theme/custom-style.php on line 2' ampsstudio.com [Tue Aug 30 05:52:13 2022] [error] [client 13.92.212.57:0] [client 13.92.212.57] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "ampsstudio.com"] [uri "/.env"] [unique_id "Yw2Xffxp2H7ouRd1gt3m2AAAAAI"] www.ampsstudio.com [Tue Aug 30 06:14:13 2022] [error] [client 212.66.42.154:0] AH01071: Got error 'PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179' www.ampsstudio.com [Tue Aug 30 06:14:13 2022] [error] [client 212.66.42.154:0] AH01071: Got error 'PHP message: PHP Warning: Cannot modify header information - headers already sent by (output started at /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-includes/functions.php:5275) in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/includes/sonaar-music/css/theme/custom-style.php on line 2' ampsstudio.com [Tue Aug 30 07:35:48 2022] [error] [client 20.213.237.233:0] [client 20.213.237.233] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "ampsstudio.com"] [uri "/.env"] [unique_id "Yw2vxEgBSJO2cy-g8WaLZgAAAAE"] ampsstudio.com [Tue Aug 30 07:35:50 2022] [error] [client 20.213.237.233:0] [client 20.213.237.233] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "ampsstudio.com"] [uri "/.env.example"] [unique_id "Yw2vxigKxJbszepHjK2zlQAAAAM"] ampsstudio.com [Tue Aug 30 07:35:52 2022] [error] [client 20.213.237.233:0] [client 20.213.237.233] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "ampsstudio.com"] [uri "/.env.old"] [unique_id "Yw2vyGICli6YUQW6xYDUvAAAABo"] ampsstudio.com [Tue Aug 30 07:35:54 2022] [error] [client 20.213.237.233:0] [client 20.213.237.233] ModSecurity: Access denied with code 403 (phase 2). String match ".aws/credentials" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430069"] [msg "Malware.Expert - request_uri: AWS Credentials"] [hostname "ampsstudio.com"] [uri "/.aws/credentials"] [unique_id "Yw2vytbu-saHdk77zwostgAAAAQ"] ampsstudio.com [Tue Aug 30 07:36:35 2022] [error] [client 20.213.237.233:0] [client 20.213.237.233] ModSecurity: Access denied with code 403 (phase 2). Pattern match ".+wp-config\\\\..*" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430005"] [msg "Malware.Expert - request_uri: read wordpress configuration file"] [hostname "ampsstudio.com"] [uri "/wp-config.php.bak"] [unique_id "Yw2v8_qn7xVuHX9tOrZwnQAAAAA"] ampsstudio.com [Tue Aug 30 07:36:37 2022] [error] [client 20.213.237.233:0] [client 20.213.237.233] ModSecurity: Access denied with code 403 (phase 2). String match ".php.bak" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430068"] [msg "Malware.Expert - request_uri: .PHP backup files"] [hostname "ampsstudio.com"] [uri "/settings.php.bak"] [unique_id "Yw2v9dPKGE-lqxVzeYCg7gAAAAY"] ampsstudio.com [Tue Aug 30 07:36:52 2022] [error] [client 20.213.237.233:0] [client 20.213.237.233] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "ampsstudio.com"] [uri "/.env.bak"] [unique_id "Yw2wBPqn7xVuHX9tOrZwngAAAAA"] ampsstudio.com [Tue Aug 30 07:37:12 2022] [error] [client 20.213.237.233:0] [client 20.213.237.233] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "ampsstudio.com"] [uri "/.env.dev.local"] [unique_id "Yw2wGNPKGE-lqxVzeYCg8AAAAAY"] ampsstudio.com [Tue Aug 30 07:37:27 2022] [error] [client 20.213.237.233:0] [client 20.213.237.233] ModSecurity: Access denied with code 403 (phase 2). String match "/.git/config" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430058"] [msg "Malware.Expert - request_uri: .git config"] [hostname "ampsstudio.com"] [uri "/.git/config"] [unique_id "Yw2wJ_xp2H7ouRd1gt3nDgAAAAI"] ampsstudio.com [Tue Aug 30 07:37:29 2022] [error] [client 20.213.237.233:0] [client 20.213.237.233] ModSecurity: Access denied with code 403 (phase 2). String match "/configuration.php" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430045"] [msg "Malware.Expert - request_uri: read joomla configuration file"] [hostname "ampsstudio.com"] [uri "/configuration.php-dist"] [unique_id "Yw2wKUgBSJO2cy-g8WaLbQAAAAE"] www.ampsstudio.com [Tue Aug 30 10:25:34 2022] [error] [client 216.24.212.36:0] AH01071: Got error 'PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179' www.ampsstudio.com [Tue Aug 30 10:25:34 2022] [error] [client 216.24.212.36:0] AH01071: Got error 'PHP message: PHP Warning: Cannot modify header information - headers already sent by (output started at /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-includes/functions.php:5275) in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/includes/sonaar-music/css/theme/custom-style.php on line 2' www.ampsstudio.com [Tue Aug 30 10:40:53 2022] [error] [client 185.220.101.77:0] AH01071: Got error 'PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179' www.ampsstudio.com [Tue Aug 30 10:40:53 2022] [error] [client 185.220.101.77:0] AH01071: Got error 'PHP message: PHP Warning: Cannot modify header information - headers already sent by (output started at /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-includes/functions.php:5275) in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/includes/sonaar-music/css/theme/custom-style.php on line 2' www.ampsstudio.com [Tue Aug 30 10:48:25 2022] [error] [client 185.191.171.14:0] AH01071: Got error 'PHP message: PHP Warning: Attempt to read property "ID" on null in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/includes/classes/iron_sonaar_archive.class.php on line 59PHP message: PHP Warning: Undefined array key 0 in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/includes/classes/iron_sonaar.class.php on line 212PHP message: PHP Warning: Trying to access array offset on value of type null in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/includes/classes/iron_sonaar.class.php on line 212PHP message: PHP Warning: Undefined array key 0 in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/includes/classes/iron_sonaar.class.php on line 214PHP message: PHP Warning: Trying to access array offset on value of type null in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/includes/classes/iron_sonaar.class.php on line 214PHP message: PHP Warning: Attempt to read property "ID" on null in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/includes/classes/iron_sonaar_archive.class.php on line 166PHP message: PHP Warning: Undefined variable $my_post_array in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/archive-podcast.php on line 94PHP message: PHP Fatal error: Uncaught TypeError: implode(): Argument #1 ($pieces) must be of type array, string given in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/archive-podcast.php:94\nStack trace:\n#0 /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/archive-podcast.php(94): implode(',', NULL)\n#1 /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-includes/template-loader.php(106): include('/home/virtual/v...')\n#2 /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-blog-header.php(19): require_once('/home/virtual/v...')\n#3 /home/virtual/vps-aa3942/a/aede5353c4/public_html/index.php(17): require('/home/virtual/v...')\n#4 {main}\n thrown in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/archive-podcast.php on line 94' ampsstudio.com [Tue Aug 30 10:57:43 2022] [error] [client 175.100.20.208:0] [client 175.100.20.208] ModSecurity: Access denied with code 403 (phase 2). Pattern match "/wp-includes/css/.*\\\\.php" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430035"] [msg "Malware.Expert - request_uri: Wordpress - prevent PHP files from executing"] [hostname "ampsstudio.com"] [uri "/wp-includes/css/xm.php"] [unique_id "Yw3fF8g4c9LRzxmVCtI0bgAAAAo"] ampsstudio.com [Tue Aug 30 10:58:15 2022] [error] [client 175.100.20.208:0] [client 175.100.20.208] ModSecurity: Access denied with code 403 (phase 2). String match "/ups.php" at REQUEST_URI. [file "remote server"] [line "-1"] [id "570041"] [msg "Malware.Expert - Malware"] [hostname "ampsstudio.com"] [uri "/ups.php"] [unique_id "Yw3fN_xp2H7ouRd1gt3n6gAAAAI"] ampsstudio.com [Tue Aug 30 10:59:46 2022] [error] [client 175.100.20.208:0] [client 175.100.20.208] ModSecurity: Access denied with code 403 (phase 2). Pattern match "/\\\\..+\\\\.php" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430015"] [msg "Malware.Expert - request_uri: hidden .php execute"] [hostname "ampsstudio.com"] [uri "/.cgi/cache/index.php"] [unique_id "Yw3fktbu-saHdk77zwotlgAAAAQ"] ampsstudio.com [Tue Aug 30 11:01:37 2022] [error] [client 175.100.20.208:0] [client 175.100.20.208] ModSecurity: Access denied with code 403 (phase 2). Pattern match "/wp-includes/css/.*\\\\.php" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430035"] [msg "Malware.Expert - request_uri: Wordpress - prevent PHP files from executing"] [hostname "ampsstudio.com"] [uri "/wp-includes/css/css.php"] [unique_id "Yw3gASOdYmff2OM1rt6adwAAAAg"] ampsstudio.com [Tue Aug 30 11:01:45 2022] [error] [client 175.100.20.208:0] [client 175.100.20.208] ModSecurity: Access denied with code 403 (phase 2). Pattern match "/wp-includes/css/.*\\\\.php" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430035"] [msg "Malware.Expert - request_uri: Wordpress - prevent PHP files from executing"] [hostname "ampsstudio.com"] [uri "/wp-includes/css/wp-atom.php"] [unique_id "Yw3gCWICli6YUQW6xYDVqwAAABo"] ampsstudio.com [Tue Aug 30 11:02:15 2022] [error] [client 175.100.20.208:0] [client 175.100.20.208] ModSecurity: Access denied with code 403 (phase 2). Pattern match "/wp-includes/images/.*\\\\.php" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430032"] [msg "Malware.Expert - request_uri: Wordpress - prevent PHP files from executing"] [hostname "ampsstudio.com"] [uri "/wp-includes/images/wp-blog.php"] [unique_id "Yw3gJ_xp2H7ouRd1gt3n7gAAAAI"] ampsstudio.com [Tue Aug 30 11:02:26 2022] [error] [client 175.100.20.208:0] [client 175.100.20.208] ModSecurity: Access denied with code 403 (phase 2). Pattern match "/wp-includes/css/.*\\\\.php" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430035"] [msg "Malware.Expert - request_uri: Wordpress - prevent PHP files from executing"] [hostname "ampsstudio.com"] [uri "/wp-includes/css/wp.php"] [unique_id "Yw3gMm99eZ3cgBMVuUzzBQAAAAk"] ampsstudio.com [Tue Aug 30 11:02:55 2022] [error] [client 175.100.20.208:0] [client 175.100.20.208] ModSecurity: Access denied with code 403 (phase 2). String match "/wso.php" at REQUEST_URI. [file "remote server"] [line "-1"] [id "570066"] [msg "Malware.Expert - PHP Command Shell (WSO)"] [hostname "ampsstudio.com"] [uri "/wso.php"] [unique_id "Yw3gTyOdYmff2OM1rt6aeAAAAAg"] ampsstudio.com [Tue Aug 30 11:03:07 2022] [error] [client 175.100.20.208:0] [client 175.100.20.208] ModSecurity: Access denied with code 403 (phase 2). String match "/alwso.php" at REQUEST_URI. [file "remote server"] [line "-1"] [id "570069"] [msg "Malware.Expert - PHP Command Shell (WSO)"] [hostname "ampsstudio.com"] [uri "/alwso.php"] [unique_id "Yw3gWygKxJbszepHjK20hgAAAAM"] ampsstudio.com [Tue Aug 30 11:03:48 2022] [crit] [client 175.100.20.208:0] AH00529: /home/virtual/vps-aa3942/a/aede5353c4/public_html/.well-known/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/virtual/vps-aa3942/a/aede5353c4/public_html/.well-known/' is executable ampsstudio.com [Tue Aug 30 11:04:28 2022] [error] [client 175.100.20.208:0] [client 175.100.20.208] ModSecurity: Access denied with code 403 (phase 2). Pattern match "/wp-admin/includes/.*\\\\.php" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430034"] [msg "Malware.Expert - request_uri: Wordpress - prevent PHP files from executing"] [hostname "ampsstudio.com"] [uri "/wp-admin/includes/class-wp-media-list-data.php"] [unique_id "Yw3grG99eZ3cgBMVuUzzCgAAAAk"] ampsstudio.com [Tue Aug 30 11:09:41 2022] [error] [client 175.100.20.208:0] [client 175.100.20.208] ModSecurity: Access denied with code 403 (phase 2). String match "/xleet-shell.php" at REQUEST_URI. [file "remote server"] [line "-1"] [id "570071"] [msg "Malware.Expert - PHP Command Shell"] [hostname "ampsstudio.com"] [uri "/xleet-shell.php"] [unique_id "Yw3h5dPKGE-lqxVzeYCh3gAAAAY"] ampsstudio.com [Tue Aug 30 11:10:25 2022] [error] [client 175.100.20.208:0] [client 175.100.20.208] ModSecurity: Access denied with code 403 (phase 2). String match "python" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "580101"] [msg "Malware.Expert - Wordpress - unknown python request"] [hostname "ampsstudio.com"] [uri "/wp-content/radio.php"] [unique_id "Yw3iEdbu-saHdk77zwotpAAAAAQ"] ampsstudio.com [Tue Aug 30 11:10:35 2022] [error] [client 175.100.20.208:0] [client 175.100.20.208] ModSecurity: Access denied with code 403 (phase 2). String match "python" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "580102"] [msg "Malware.Expert - Wordpress - unknown python request"] [hostname "ampsstudio.com"] [uri "/wp-admin/radio.php"] [unique_id "Yw3iG8g4c9LRzxmVCtI0fAAAAAo"] ampsstudio.com [Tue Aug 30 11:11:06 2022] [error] [client 175.100.20.208:0] [client 175.100.20.208] ModSecurity: Access denied with code 403 (phase 2). String match "connector.minimal.php" at REQUEST_URI. [file "remote server"] [line "-1"] [id "500083"] [msg "Malware.Expert - request_uri: 0-Day - Wordpress filemanager plugin"] [hostname "ampsstudio.com"] [uri "/wp-content/plugins/wp-file-manager/lib/php/connector.minimal.php"] [unique_id "Yw3iOigKxJbszepHjK20jQAAAAM"] ampsstudio.com [Tue Aug 30 11:11:30 2022] [error] [client 175.100.20.208:0] [client 175.100.20.208] ModSecurity: Access denied with code 403 (phase 2). String match "python" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "580101"] [msg "Malware.Expert - Wordpress - unknown python request"] [hostname "ampsstudio.com"] [uri "/wp-content/plugins/wp-file-manager/lib/php/1975.php"] [unique_id "Yw3iUsg4c9LRzxmVCtI0fwAAAAo"] mail.ampsstudio.com [Tue Aug 30 11:33:45 2022] [error] [client 175.100.20.208:0] [client 175.100.20.208] ModSecurity: Access denied with code 403 (phase 2). Pattern match "/wp-includes/css/.*\\\\.php" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430035"] [msg "Malware.Expert - request_uri: Wordpress - prevent PHP files from executing"] [hostname "mail.ampsstudio.com"] [uri "/wp-includes/css/xm.php"] [unique_id "Yw3niSgKxJbszepHjK20owAAAAM"] mail.ampsstudio.com [Tue Aug 30 11:34:08 2022] [error] [client 175.100.20.208:0] [client 175.100.20.208] ModSecurity: Access denied with code 403 (phase 2). String match "/ups.php" at REQUEST_URI. [file "remote server"] [line "-1"] [id "570041"] [msg "Malware.Expert - Malware"] [hostname "mail.ampsstudio.com"] [uri "/ups.php"] [unique_id "Yw3noCOdYmff2OM1rt6alwAAAAg"] mail.ampsstudio.com [Tue Aug 30 11:37:18 2022] [error] [client 175.100.20.208:0] [client 175.100.20.208] ModSecurity: Access denied with code 403 (phase 2). Pattern match "/\\\\..+\\\\.php" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430015"] [msg "Malware.Expert - request_uri: hidden .php execute"] [hostname "mail.ampsstudio.com"] [uri "/.cgi/cache/index.php"] [unique_id "Yw3oXmICli6YUQW6xYDVzQAAABo"] mail.ampsstudio.com [Tue Aug 30 11:38:41 2022] [error] [client 175.100.20.208:0] [client 175.100.20.208] ModSecurity: Access denied with code 403 (phase 2). Pattern match "/wp-includes/css/.*\\\\.php" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430035"] [msg "Malware.Expert - request_uri: Wordpress - prevent PHP files from executing"] [hostname "mail.ampsstudio.com"] [uri "/wp-includes/css/css.php"] [unique_id "Yw3osfqn7xVuHX9tOrZxlgAAAAA"] mail.ampsstudio.com [Tue Aug 30 11:38:50 2022] [error] [client 175.100.20.208:0] [client 175.100.20.208] ModSecurity: Access denied with code 403 (phase 2). Pattern match "/wp-includes/css/.*\\\\.php" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430035"] [msg "Malware.Expert - request_uri: Wordpress - prevent PHP files from executing"] [hostname "mail.ampsstudio.com"] [uri "/wp-includes/css/wp-atom.php"] [unique_id "Yw3oumICli6YUQW6xYDVzgAAABo"] mail.ampsstudio.com [Tue Aug 30 11:39:13 2022] [error] [client 175.100.20.208:0] [client 175.100.20.208] ModSecurity: Access denied with code 403 (phase 2). Pattern match "/wp-includes/images/.*\\\\.php" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430032"] [msg "Malware.Expert - request_uri: Wordpress - prevent PHP files from executing"] [hostname "mail.ampsstudio.com"] [uri "/wp-includes/images/wp-blog.php"] [unique_id "Yw3o0dPKGE-lqxVzeYCh-wAAAAY"] mail.ampsstudio.com [Tue Aug 30 11:39:24 2022] [error] [client 175.100.20.208:0] [client 175.100.20.208] ModSecurity: Access denied with code 403 (phase 2). Pattern match "/wp-includes/css/.*\\\\.php" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430035"] [msg "Malware.Expert - request_uri: Wordpress - prevent PHP files from executing"] [hostname "mail.ampsstudio.com"] [uri "/wp-includes/css/wp.php"] [unique_id "Yw3o3G99eZ3cgBMVuUzzKQAAAAk"] mail.ampsstudio.com [Tue Aug 30 11:39:52 2022] [error] [client 175.100.20.208:0] [client 175.100.20.208] ModSecurity: Access denied with code 403 (phase 2). String match "/wso.php" at REQUEST_URI. [file "remote server"] [line "-1"] [id "570066"] [msg "Malware.Expert - PHP Command Shell (WSO)"] [hostname "mail.ampsstudio.com"] [uri "/wso.php"] [unique_id "Yw3o-CgKxJbszepHjK20qQAAAAM"] mail.ampsstudio.com [Tue Aug 30 11:40:06 2022] [error] [client 175.100.20.208:0] [client 175.100.20.208] ModSecurity: Access denied with code 403 (phase 2). String match "/alwso.php" at REQUEST_URI. [file "remote server"] [line "-1"] [id "570069"] [msg "Malware.Expert - PHP Command Shell (WSO)"] [hostname "mail.ampsstudio.com"] [uri "/alwso.php"] [unique_id "Yw3pBvqn7xVuHX9tOrZxlwAAAAA"] mail.ampsstudio.com [Tue Aug 30 11:40:42 2022] [crit] [client 175.100.20.208:0] AH00529: /home/virtual/vps-aa3942/a/aede5353c4/public_html/.well-known/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/virtual/vps-aa3942/a/aede5353c4/public_html/.well-known/' is executable mail.ampsstudio.com [Tue Aug 30 11:41:04 2022] [error] [client 175.100.20.208:0] [client 175.100.20.208] ModSecurity: Access denied with code 403 (phase 2). Pattern match "/wp-admin/includes/.*\\\\.php" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430034"] [msg "Malware.Expert - request_uri: Wordpress - prevent PHP files from executing"] [hostname "mail.ampsstudio.com"] [uri "/wp-admin/includes/class-wp-media-list-data.php"] [unique_id "Yw3pQMg4c9LRzxmVCtI0mwAAAAo"] www.ampsstudio.com [Tue Aug 30 11:41:27 2022] [error] [client 185.220.102.242:0] AH01071: Got error 'PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179' www.ampsstudio.com [Tue Aug 30 11:41:27 2022] [error] [client 185.220.102.242:0] AH01071: Got error 'PHP message: PHP Warning: Cannot modify header information - headers already sent by (output started at /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-includes/functions.php:5275) in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/includes/sonaar-music/css/theme/custom-style.php on line 2' mail.ampsstudio.com [Tue Aug 30 11:43:01 2022] [error] [client 175.100.20.208:0] [client 175.100.20.208] ModSecurity: Access denied with code 403 (phase 2). String match "/xleet-shell.php" at REQUEST_URI. [file "remote server"] [line "-1"] [id "570071"] [msg "Malware.Expert - PHP Command Shell"] [hostname "mail.ampsstudio.com"] [uri "/xleet-shell.php"] [unique_id "Yw3ptdbu-saHdk77zwotvQAAAAQ"] mail.ampsstudio.com [Tue Aug 30 11:43:35 2022] [error] [client 175.100.20.208:0] [client 175.100.20.208] ModSecurity: Access denied with code 403 (phase 2). String match "python" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "580101"] [msg "Malware.Expert - Wordpress - unknown python request"] [hostname "mail.ampsstudio.com"] [uri "/wp-content/radio.php"] [unique_id "Yw3p1299eZ3cgBMVuUzzLQAAAAk"] mail.ampsstudio.com [Tue Aug 30 11:43:49 2022] [error] [client 175.100.20.208:0] [client 175.100.20.208] ModSecurity: Access denied with code 403 (phase 2). String match "python" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "580102"] [msg "Malware.Expert - Wordpress - unknown python request"] [hostname "mail.ampsstudio.com"] [uri "/wp-admin/radio.php"] [unique_id "Yw3p5cg4c9LRzxmVCtI0ngAAAAo"] mail.ampsstudio.com [Tue Aug 30 11:44:09 2022] [error] [client 175.100.20.208:0] [client 175.100.20.208] ModSecurity: Access denied with code 403 (phase 2). String match "connector.minimal.php" at REQUEST_URI. [file "remote server"] [line "-1"] [id "500083"] [msg "Malware.Expert - request_uri: 0-Day - Wordpress filemanager plugin"] [hostname "mail.ampsstudio.com"] [uri "/wp-content/plugins/wp-file-manager/lib/php/connector.minimal.php"] [unique_id "Yw3p-fqn7xVuHX9tOrZxmwAAAAA"] mail.ampsstudio.com [Tue Aug 30 11:44:22 2022] [error] [client 175.100.20.208:0] [client 175.100.20.208] ModSecurity: Access denied with code 403 (phase 2). String match "python" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "580101"] [msg "Malware.Expert - Wordpress - unknown python request"] [hostname "mail.ampsstudio.com"] [uri "/wp-content/plugins/wp-file-manager/lib/php/1975.php"] [unique_id "Yw3qBtbu-saHdk77zwotvgAAAAQ"] ampsstudio.com [Tue Aug 30 11:51:48 2022] [error] [client 20.163.126.194:0] [client 20.163.126.194] ModSecurity: Access denied with code 403 (phase 2). Match of "contains index.php" against "REQUEST_URI" required. [file "remote server"] [line "-1"] [id "570076"] [msg "Malware.Expert - Malware"] [hostname "ampsstudio.com"] [uri "/wp-plain.php"] [unique_id "Yw3rxPxp2H7ouRd1gt3oHgAAAAI"] www.ampsstudio.com [Tue Aug 30 11:51:55 2022] [error] [client 20.163.126.194:0] [client 20.163.126.194] ModSecurity: Access denied with code 403 (phase 2). String match "php.suspected" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430059"] [msg "Malware.Expert - request_uri: .PHP suspected files"] [hostname "www.ampsstudio.com"] [uri "/wp-content/plugins/apikey/apikey.php.suspected"] [unique_id "Yw3ry7IvW9Coy5IufR2VIgAAAAc"] www.ampsstudio.com [Tue Aug 30 11:51:56 2022] [error] [client 20.163.126.194:0] [client 20.163.126.194] ModSecurity: Access denied with code 403 (phase 2). String match "php.suspected" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430059"] [msg "Malware.Expert - request_uri: .PHP suspected files"] [hostname "www.ampsstudio.com"] [uri "/plugins/content/apismtp/apismtp.php.suspected"] [unique_id "Yw3rzCOdYmff2OM1rt6aqgAAAAg"] www.ampsstudio.com [Tue Aug 30 12:07:47 2022] [error] [client 109.70.100.24:0] AH01071: Got error 'PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179' www.ampsstudio.com [Tue Aug 30 12:07:47 2022] [error] [client 109.70.100.24:0] AH01071: Got error 'PHP message: PHP Warning: Cannot modify header information - headers already sent by (output started at /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-includes/functions.php:5275) in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/includes/sonaar-music/css/theme/custom-style.php on line 2' ampsstudio.com [Tue Aug 30 12:47:10 2022] [error] [client 20.168.96.42:0] [client 20.168.96.42] ModSecurity: Access denied with code 403 (phase 2). Match of "contains index.php" against "REQUEST_URI" required. [file "remote server"] [line "-1"] [id "570076"] [msg "Malware.Expert - Malware"] [hostname "ampsstudio.com"] [uri "/wp-plain.php"] [unique_id "Yw34vm99eZ3cgBMVuUzzcAAAAAk"] www.ampsstudio.com [Tue Aug 30 12:47:16 2022] [error] [client 20.168.96.42:0] [client 20.168.96.42] ModSecurity: Access denied with code 403 (phase 2). String match "php.suspected" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430059"] [msg "Malware.Expert - request_uri: .PHP suspected files"] [hostname "www.ampsstudio.com"] [uri "/wp-content/plugins/apikey/apikey.php.suspected"] [unique_id "Yw34xE1WQDbAXfh3Ic2y_gAAAAE"] www.ampsstudio.com [Tue Aug 30 12:47:16 2022] [error] [client 20.168.96.42:0] [client 20.168.96.42] ModSecurity: Access denied with code 403 (phase 2). String match "php.suspected" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430059"] [msg "Malware.Expert - request_uri: .PHP suspected files"] [hostname "www.ampsstudio.com"] [uri "/plugins/content/apismtp/apismtp.php.suspected"] [unique_id "Yw34xNPKGE-lqxVzeYCiRAAAAAY"] ampsstudio.com [Tue Aug 30 13:58:36 2022] [error] [client 51.13.171.156:0] [client 51.13.171.156] ModSecurity: Access denied with code 403 (phase 2). String match "/ups.php" at REQUEST_URI. [file "remote server"] [line "-1"] [id "570041"] [msg "Malware.Expert - Malware"] [hostname "ampsstudio.com"] [uri "/ups.php"] [unique_id "Yw4JfE1WQDbAXfh3Ic2zMwAAAAE"] www.ampsstudio.com [Tue Aug 30 14:07:25 2022] [error] [client 213.139.193.30:0] AH01071: Got error 'PHP message: PHP Warning: Cannot modify header information - headers already sent by (output started at /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-includes/functions.php:5275) in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/includes/sonaar-music/css/theme/custom-style.php on line 2' ampsstudio.com [Tue Aug 30 16:10:18 2022] [error] [client 88.119.177.38:0] [client 88.119.177.38] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "ampsstudio.com"] [uri "/.env"] [unique_id "Yw4oWgQ8lTKpU37zXx5FwwAAAAY"] www.ampsstudio.com [Tue Aug 30 19:50:40 2022] [error] [client 185.107.80.192:0] AH01071: Got error 'PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179' www.ampsstudio.com [Tue Aug 30 19:50:40 2022] [error] [client 185.107.80.192:0] AH01071: Got error 'PHP message: PHP Warning: Cannot modify header information - headers already sent by (output started at /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-includes/functions.php:5275) in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/includes/sonaar-music/css/theme/custom-style.php on line 2' ampsstudio.com [Tue Aug 30 20:32:29 2022] [error] [client 51.142.181.246:0] AH01276: Cannot serve directory /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-admin/css/: No matching DirectoryIndex (index.php,index.html,index.htm) found, and server-generated directory index forbidden by Options directive www.ampsstudio.com [Tue Aug 30 21:28:41 2022] [error] [client 185.244.192.175:0] AH01071: Got error 'PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179' www.ampsstudio.com [Tue Aug 30 21:28:41 2022] [error] [client 185.244.192.175:0] AH01071: Got error 'PHP message: PHP Warning: Cannot modify header information - headers already sent by (output started at /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-includes/functions.php:5275) in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/includes/sonaar-music/css/theme/custom-style.php on line 2' www.ampsstudio.com [Tue Aug 30 22:26:08 2022] [error] [client 185.191.171.6:0] AH01071: Got error 'PHP message: PHP Warning: Undefined array key "block" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/includes/classes/iron_sonaar.class.php on line 212PHP message: PHP Warning: Trying to access array offset on value of type null in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/includes/classes/iron_sonaar.class.php on line 212PHP message: PHP Warning: Undefined array key "block" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/includes/classes/iron_sonaar.class.php on line 214PHP message: PHP Warning: Trying to access array offset on value of type null in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/includes/classes/iron_sonaar.class.php on line 214' ampsstudio.com [Wed Aug 31 04:19:07 2022] [error] [client 20.169.19.209:0] [client 20.169.19.209] ModSecurity: Access denied with code 403 (phase 2). String match "/ups.php" at REQUEST_URI. [file "remote server"] [line "-1"] [id "570041"] [msg "Malware.Expert - Malware"] [hostname "ampsstudio.com"] [uri "/ups.php"] [unique_id "Yw7TK4svDBRmLk9RE80oTAAAAAE"] ampsstudio.com [Wed Aug 31 05:14:59 2022] [error] [client 167.99.239.156:0] [client 167.99.239.156] ModSecurity: Access denied with code 403 (phase 2). String match "/wp-admin/install.php" at REQUEST_URI. [file "remote server"] [line "-1"] [id "570074"] [msg "Malware.Expert - Malware"] [hostname "ampsstudio.com"] [uri "/wp-admin/install.php"] [unique_id "Yw7gQ4svDBRmLk9RE80oXwAAAAE"] ampsstudio.com [Wed Aug 31 05:15:00 2022] [error] [client 167.99.239.156:0] [client 167.99.239.156] ModSecurity: Access denied with code 403 (phase 2). String match "/wp-admin/install.php" at REQUEST_URI. [file "remote server"] [line "-1"] [id "570074"] [msg "Malware.Expert - Malware"] [hostname "ampsstudio.com"] [uri "/wp/wp-admin/install.php"] [unique_id "Yw7gREJsqSFns3nRKIiR1wAAAAQ"] ampsstudio.com [Wed Aug 31 05:15:00 2022] [error] [client 167.99.239.156:0] [client 167.99.239.156] ModSecurity: Access denied with code 403 (phase 2). String match "/wp-admin/install.php" at REQUEST_URI. [file "remote server"] [line "-1"] [id "570074"] [msg "Malware.Expert - Malware"] [hostname "ampsstudio.com"] [uri "/new/wp-admin/install.php"] [unique_id "Yw7gRI-0uVaoyUzgxbYjZQAAAAs"] ampsstudio.com [Wed Aug 31 05:15:01 2022] [error] [client 167.99.239.156:0] [client 167.99.239.156] ModSecurity: Access denied with code 403 (phase 2). String match "/wp-admin/install.php" at REQUEST_URI. [file "remote server"] [line "-1"] [id "570074"] [msg "Malware.Expert - Malware"] [hostname "ampsstudio.com"] [uri "/old/wp-admin/install.php"] [unique_id "Yw7gRRfOGRJ9ULXBGNkwsgAAAAg"] ampsstudio.com [Wed Aug 31 05:15:01 2022] [error] [client 167.99.239.156:0] [client 167.99.239.156] ModSecurity: Access denied with code 403 (phase 2). String match "/wp-admin/install.php" at REQUEST_URI. [file "remote server"] [line "-1"] [id "570074"] [msg "Malware.Expert - Malware"] [hostname "ampsstudio.com"] [uri "/wordpress/wp-admin/install.php"] [unique_id "Yw7gRT8yqlqRsvu1zgMC6AAAAAI"] ampsstudio.com [Wed Aug 31 05:15:02 2022] [error] [client 167.99.239.156:0] [client 167.99.239.156] ModSecurity: Access denied with code 403 (phase 2). String match "/wp-admin/install.php" at REQUEST_URI. [file "remote server"] [line "-1"] [id "570074"] [msg "Malware.Expert - Malware"] [hostname "ampsstudio.com"] [uri "/test/wp-admin/install.php"] [unique_id "Yw7gRmGqCFE0EOf_UzkwMAAAAAA"] ampsstudio.com [Wed Aug 31 05:15:02 2022] [error] [client 167.99.239.156:0] [client 167.99.239.156] ModSecurity: Access denied with code 403 (phase 2). String match "/wp-admin/install.php" at REQUEST_URI. [file "remote server"] [line "-1"] [id "570074"] [msg "Malware.Expert - Malware"] [hostname "ampsstudio.com"] [uri "/blog/wp-admin/install.php"] [unique_id "Yw7gRgzV_IoiboPq6wLExAAAAAc"] ampsstudio.com [Wed Aug 31 05:15:03 2022] [error] [client 167.99.239.156:0] [client 167.99.239.156] ModSecurity: Access denied with code 403 (phase 2). String match "/wp-admin/install.php" at REQUEST_URI. [file "remote server"] [line "-1"] [id "570074"] [msg "Malware.Expert - Malware"] [hostname "ampsstudio.com"] [uri "/cms/wp-admin/install.php"] [unique_id "Yw7gR_FtJXM689Diqqx0dgAAAAM"] ampsstudio.com [Wed Aug 31 05:15:04 2022] [error] [client 167.99.239.156:0] [client 167.99.239.156] ModSecurity: Access denied with code 403 (phase 2). String match "/wp-admin/install.php" at REQUEST_URI. [file "remote server"] [line "-1"] [id "570074"] [msg "Malware.Expert - Malware"] [hostname "ampsstudio.com"] [uri "/web/wp-admin/install.php"] [unique_id "Yw7gSIsvDBRmLk9RE80oYAAAAAE"] ampsstudio.com [Wed Aug 31 05:15:05 2022] [error] [client 167.99.239.156:0] [client 167.99.239.156] ModSecurity: Access denied with code 403 (phase 2). String match "/wp-admin/install.php" at REQUEST_URI. [file "remote server"] [line "-1"] [id "570074"] [msg "Malware.Expert - Malware"] [hostname "ampsstudio.com"] [uri "/backup/wp-admin/install.php"] [unique_id "Yw7gSUJsqSFns3nRKIiR2AAAAAQ"] ampsstudio.com [Wed Aug 31 05:15:06 2022] [error] [client 167.99.239.156:0] [client 167.99.239.156] ModSecurity: Access denied with code 403 (phase 2). String match "/wp-admin/install.php" at REQUEST_URI. [file "remote server"] [line "-1"] [id "570074"] [msg "Malware.Expert - Malware"] [hostname "ampsstudio.com"] [uri "/site/wp-admin/install.php"] [unique_id "Yw7gShfOGRJ9ULXBGNkwswAAAAg"] ampsstudio.com [Wed Aug 31 05:15:07 2022] [error] [client 167.99.239.156:0] [client 167.99.239.156] ModSecurity: Access denied with code 403 (phase 2). String match "/wp-admin/install.php" at REQUEST_URI. [file "remote server"] [line "-1"] [id "570074"] [msg "Malware.Expert - Malware"] [hostname "ampsstudio.com"] [uri "/oldsite/wp-admin/install.php"] [unique_id "Yw7gSz8yqlqRsvu1zgMC6QAAAAI"] www.ampsstudio.com [Wed Aug 31 06:27:42 2022] [error] [client 20.254.119.246:0] [client 20.254.119.246] ModSecurity: Access denied with code 403 (phase 2). Match of "contains index.php" against "REQUEST_URI" required. [file "remote server"] [line "-1"] [id "570076"] [msg "Malware.Expert - Malware"] [hostname "www.ampsstudio.com"] [uri "/wp-content/plugins/dzs-zoomsounds/savepng.php"] [unique_id "Yw7xThfOGRJ9ULXBGNkwzQAAAAg"] www.ampsstudio.com [Wed Aug 31 06:27:42 2022] [error] [client 20.254.119.246:0] [client 20.254.119.246] ModSecurity: Access denied with code 403 (phase 2). Match of "contains index.php" against "REQUEST_URI" required. [file "remote server"] [line "-1"] [id "570076"] [msg "Malware.Expert - Malware"] [hostname "www.ampsstudio.com"] [uri "/wp-content/plugins/dzs-zoomsounds/a57bze8931.php"] [unique_id "Yw7xTgzV_IoiboPq6wLE3wAAAAc"] www.ampsstudio.com [Wed Aug 31 06:28:05 2022] [error] [client 20.254.119.246:0] [client 20.254.119.246] ModSecurity: Access denied with connection close (phase 2). Pattern match "\\\\.php" at FILES:userfile. [file "remote server"] [line "-1"] [id "600000"] [msg "Malware.Expert - PHP files not allowed upload"] [hostname "www.ampsstudio.com"] [uri "/wp-content/plugins/ioptimizations/IOptimizes.php"] [unique_id "Yw7xZQzV_IoiboPq6wLE4AAAAAc"] www.ampsstudio.com [Wed Aug 31 06:28:05 2022] [error] [client 20.254.119.246:0] [client 20.254.119.246] ModSecurity: Access denied with code 403 (phase 2). Match of "contains index.php" against "REQUEST_URI" required. [file "remote server"] [line "-1"] [id "570076"] [msg "Malware.Expert - Malware"] [hostname "www.ampsstudio.com"] [uri "/wp-content/plugins/ioptimizations/a57bze8931.php"] [unique_id "Yw7xZYsvDBRmLk9RE80ofQAAAAE"] www.ampsstudio.com [Wed Aug 31 06:28:30 2022] [error] [client 20.254.119.246:0] [client 20.254.119.246] ModSecurity: Access denied with code 403 (phase 2). Pattern match "/ioptimization/.*\\\\.php\\\\?rchk" at REQUEST_URI. [file "remote server"] [line "-1"] [id "570039"] [msg "Malware.Expert - Wordpress malware plugin - ioptimization"] [hostname "www.ampsstudio.com"] [uri "/wp-content/plugins/ioptimization/IOptimize.php"] [unique_id "Yw7xfvFtJXM689Diqqx0kAAAAAM"] www.ampsstudio.com [Wed Aug 31 06:28:30 2022] [error] [client 20.254.119.246:0] [client 20.254.119.246] ModSecurity: Access denied with code 403 (phase 2). Match of "contains index.php" against "REQUEST_URI" required. [file "remote server"] [line "-1"] [id "570076"] [msg "Malware.Expert - Malware"] [hostname "www.ampsstudio.com"] [uri "/wp-content/plugins/ioptimization/a57bze8931.php"] [unique_id "Yw7xfhfOGRJ9ULXBGNkwzgAAAAg"] www.ampsstudio.com [Wed Aug 31 06:29:25 2022] [error] [client 20.254.119.246:0] [client 20.254.119.246] ModSecurity: Access denied with code 403 (phase 2). Match of "contains index.php" against "REQUEST_URI" required. [file "remote server"] [line "-1"] [id "570076"] [msg "Malware.Expert - Malware"] [hostname "www.ampsstudio.com"] [uri "/wp-content/plugins/wp-engine-module/wp-engine.php"] [unique_id "Yw7xtT8yqlqRsvu1zgMDBAAAAAI"] www.ampsstudio.com [Wed Aug 31 06:29:25 2022] [error] [client 20.254.119.246:0] [client 20.254.119.246] ModSecurity: Access denied with code 403 (phase 2). Match of "contains index.php" against "REQUEST_URI" required. [file "remote server"] [line "-1"] [id "570076"] [msg "Malware.Expert - Malware"] [hostname "www.ampsstudio.com"] [uri "/wp-content/plugins/wp-engine-module/a57bze8931.php"] [unique_id "Yw7xtWGqCFE0EOf_UzkwTgAAAAA"] www.ampsstudio.com [Wed Aug 31 06:29:39 2022] [error] [client 20.254.119.246:0] [client 20.254.119.246] ModSecurity: Access denied with code 403 (phase 2). Pattern match "/\\\\..+\\\\.php" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430015"] [msg "Malware.Expert - request_uri: hidden .php execute"] [hostname "www.ampsstudio.com"] [uri "/wp-content/uploads/kaswara/fonts_icon/a57bze8931/.__a57bze8931.php"] [unique_id "Yw7xw_FtJXM689Diqqx0kQAAAAM"] www.ampsstudio.com [Wed Aug 31 06:29:49 2022] [error] [client 20.254.119.246:0] [client 20.254.119.246] ModSecurity: Access denied with code 403 (phase 2). Match of "contains index.php" against "REQUEST_URI" required. [file "remote server"] [line "-1"] [id "570076"] [msg "Malware.Expert - Malware"] [hostname "www.ampsstudio.com"] [uri "/wp-content/plugins/apikey/apikey.php"] [unique_id "Yw7xzUJsqSFns3nRKIiR8wAAAAQ"] www.ampsstudio.com [Wed Aug 31 06:29:49 2022] [error] [client 20.254.119.246:0] [client 20.254.119.246] ModSecurity: Access denied with code 403 (phase 2). Match of "contains index.php" against "REQUEST_URI" required. [file "remote server"] [line "-1"] [id "570076"] [msg "Malware.Expert - Malware"] [hostname "www.ampsstudio.com"] [uri "/wp-content/plugins/apikey/a57bze8931.php"] [unique_id "Yw7xzY-0uVaoyUzgxbYjggAAAAs"] www.ampsstudio.com [Wed Aug 31 06:30:11 2022] [error] [client 20.254.119.246:0] [client 20.254.119.246] ModSecurity: Access denied with code 403 (phase 2). Match of "contains /wp-content/plugins/dopwgg/libraries/php/upload.php" against "REQUEST_URI" required. [file "remote server"] [line "-1"] [id "430073"] [msg "Malware.Expert - request_uri: Wordpress - prevent PHP files from executing"] [hostname "www.ampsstudio.com"] [uri "/wp-content/plugins/cherry-plugin/admin/import-export/upload.php"] [unique_id "Yw7x4xfOGRJ9ULXBGNkw0AAAAAg"] www.ampsstudio.com [Wed Aug 31 06:30:11 2022] [error] [client 20.254.119.246:0] [client 20.254.119.246] ModSecurity: Access denied with code 403 (phase 2). Match of "contains index.php" against "REQUEST_URI" required. [file "remote server"] [line "-1"] [id "570076"] [msg "Malware.Expert - Malware"] [hostname "www.ampsstudio.com"] [uri "/wp-content/plugins/cherry-plugin/admin/import-export/a57bze8931.php"] [unique_id "Yw7x4_FtJXM689Diqqx0kgAAAAM"] www.ampsstudio.com [Wed Aug 31 06:30:36 2022] [error] [client 20.254.119.246:0] [client 20.254.119.246] ModSecurity: Access denied with connection close (phase 2). Pattern match "\\\\.php" at FILES:files[]. [file "remote server"] [line "-1"] [id "600000"] [msg "Malware.Expert - PHP files not allowed upload"] [hostname "www.ampsstudio.com"] [uri "/wp-content/plugins/formcraft/file-upload/server/php/"] [unique_id "Yw7x_D8yqlqRsvu1zgMDBgAAAAI"] www.ampsstudio.com [Wed Aug 31 06:30:36 2022] [error] [client 20.254.119.246:0] [client 20.254.119.246] ModSecurity: Access denied with code 403 (phase 2). Match of "contains index.php" against "REQUEST_URI" required. [file "remote server"] [line "-1"] [id "570076"] [msg "Malware.Expert - Malware"] [hostname "www.ampsstudio.com"] [uri "/wp-content/plugins/formcraft/file-upload/server/php/files/a57bze8931.php"] [unique_id "Yw7x_GGqCFE0EOf_UzkwUAAAAAA"] www.ampsstudio.com [Wed Aug 31 06:30:54 2022] [error] [client 20.254.119.246:0] [client 20.254.119.246] ModSecurity: Access denied with code 403 (phase 2). Match of "contains index.php" against "REQUEST_URI" required. [file "remote server"] [line "-1"] [id "570076"] [msg "Malware.Expert - Malware"] [hostname "www.ampsstudio.com"] [uri "/wp-admin/admin-ajax.php"] [unique_id "Yw7yDkJsqSFns3nRKIiR9AAAAAQ"] www.ampsstudio.com [Wed Aug 31 06:30:54 2022] [error] [client 20.254.119.246:0] [client 20.254.119.246] ModSecurity: Access denied with code 403 (phase 2). Pattern match "/\\\\..+\\\\.php" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430015"] [msg "Malware.Expert - request_uri: hidden .php execute"] [hostname "www.ampsstudio.com"] [uri "/wp-content/uploads/typehub/custom/a57bze8931/.__a57bze8931.php"] [unique_id "Yw7yDo-0uVaoyUzgxbYjgwAAAAs"] www.ampsstudio.com [Wed Aug 31 06:31:22 2022] [error] [client 20.254.119.246:0] [client 20.254.119.246] ModSecurity: Access denied with code 403 (phase 2). Match of "contains index.php" against "REQUEST_URI" required. [file "remote server"] [line "-1"] [id "570076"] [msg "Malware.Expert - Malware"] [hostname "www.ampsstudio.com"] [uri "/wp-content/plugins/superstorefinder-wp/ssf-wp-admin/pages/import.php"] [unique_id "Yw7yKosvDBRmLk9RE80ogAAAAAE"] www.ampsstudio.com [Wed Aug 31 06:31:22 2022] [error] [client 20.254.119.246:0] [client 20.254.119.246] ModSecurity: Access denied with code 403 (phase 2). Match of "contains index.php" against "REQUEST_URI" required. [file "remote server"] [line "-1"] [id "570076"] [msg "Malware.Expert - Malware"] [hostname "www.ampsstudio.com"] [uri "/wp-content/plugins/superstorefinder-wp/ssf-wp-admin/pages/SSF_WP_UPLOADS_PATH/csv/import/abruzi.php"] [unique_id "Yw7yKgzV_IoiboPq6wLE4wAAAAc"] www.ampsstudio.com [Wed Aug 31 06:32:25 2022] [error] [client 20.254.119.246:0] [client 20.254.119.246] ModSecurity: Access denied with code 403 (phase 2). Match of "contains index.php" against "REQUEST_URI" required. [file "remote server"] [line "-1"] [id "570076"] [msg "Malware.Expert - Malware"] [hostname "www.ampsstudio.com"] [uri "/wp-admin/admin-ajax.php"] [unique_id "Yw7yaWGqCFE0EOf_UzkwUQAAAAA"] www.ampsstudio.com [Wed Aug 31 06:33:07 2022] [error] [client 20.254.119.246:0] [client 20.254.119.246] ModSecurity: Access denied with connection close (phase 2). Pattern match "\\\\.php" at FILES:file. [file "remote server"] [line "-1"] [id "600000"] [msg "Malware.Expert - PHP files not allowed upload"] [hostname "www.ampsstudio.com"] [uri "/wp-json/wp_live_chat_support/v1/remote_upload"] [unique_id "Yw7ykxfOGRJ9ULXBGNkw0gAAAAg"] www.ampsstudio.com [Wed Aug 31 06:33:07 2022] [error] [client 20.254.119.246:0] [client 20.254.119.246] ModSecurity: Access denied with code 403 (phase 2). Pattern match "/wp-content/uploads/.*\\\\.php" at REQUEST_FILENAME. [file "remote server"] [line "-1"] [id "430017"] [msg "Malware.Expert - request_uri: Wordpress - prevent PHP files from executing"] [hostname "www.ampsstudio.com"] [uri "/wp-content/uploads/wp_live_chat/abruzi.php"] [unique_id "Yw7ykz8yqlqRsvu1zgMDCAAAAAI"] www.ampsstudio.com [Wed Aug 31 06:33:17 2022] [error] [client 20.254.119.246:0] [client 20.254.119.246] ModSecurity: Access denied with connection close (phase 2). Pattern match "\\\\.php" at FILES:local_importing[]. [file "remote server"] [line "-1"] [id "600000"] [msg "Malware.Expert - PHP files not allowed upload"] [hostname "www.ampsstudio.com"] [uri "/wp-admin/admin.php"] [unique_id "Yw7ynfFtJXM689Diqqx0lAAAAAM"] www.ampsstudio.com [Wed Aug 31 06:33:18 2022] [error] [client 20.254.119.246:0] [client 20.254.119.246] ModSecurity: Access denied with code 403 (phase 2). Pattern match "/wp-content/uploads/.*\\\\.php" at REQUEST_FILENAME. [file "remote server"] [line "-1"] [id "430017"] [msg "Malware.Expert - request_uri: Wordpress - prevent PHP files from executing"] [hostname "www.ampsstudio.com"] [uri "/wp-content/uploads/html2wp/abruzi.php"] [unique_id "Yw7ynmGqCFE0EOf_UzkwUgAAAAA"] www.ampsstudio.com [Wed Aug 31 06:33:26 2022] [error] [client 20.254.119.246:0] [client 20.254.119.246] ModSecurity: Access denied with code 403 (phase 1). Pattern match "\\\\.\\\\./\\\\.\\\\." at REQUEST_URI. [file "remote server"] [line "-1"] [id "430064"] [msg "Malware.Expert - request_uri: directory travel"] [hostname "www.ampsstudio.com"] [uri "/wp-content/plugins/wpcargo/includes/barcode.php"] [unique_id "Yw7ypo-0uVaoyUzgxbYjhQAAAAs"] www.ampsstudio.com [Wed Aug 31 06:33:26 2022] [error] [client 20.254.119.246:0] [client 20.254.119.246] ModSecurity: Access denied with code 403 (phase 2). String match "wget+http" at REQUEST_BODY. [file "remote server"] [line "-1"] [id "440014"] [msg "Malware.Expert - unwanted shell access"] [hostname "www.ampsstudio.com"] [uri "/wp-content/x.php"] [unique_id "Yw7ypkJsqSFns3nRKIiR9gAAAAQ"] www.ampsstudio.com [Wed Aug 31 06:33:26 2022] [error] [client 20.254.119.246:0] [client 20.254.119.246] ModSecurity: Access denied with code 403 (phase 2). Match of "contains index.php" against "REQUEST_URI" required. [file "remote server"] [line "-1"] [id "570076"] [msg "Malware.Expert - Malware"] [hostname "www.ampsstudio.com"] [uri "/wp-content/king.php"] [unique_id "Yw7yposvDBRmLk9RE80oggAAAAE"] www.ampsstudio.com [Wed Aug 31 06:33:35 2022] [error] [client 20.254.119.246:0] [client 20.254.119.246] ModSecurity: Access denied with code 403 (phase 2). String match "python" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "580102"] [msg "Malware.Expert - Wordpress - unknown python request"] [hostname "www.ampsstudio.com"] [uri "/wp-admin/admin-ajax.php"] [unique_id "Yw7yrz8yqlqRsvu1zgMDCQAAAAI"] www.ampsstudio.com [Wed Aug 31 06:33:35 2022] [error] [client 20.254.119.246:0] [client 20.254.119.246] ModSecurity: Access denied with code 403 (phase 2). String match "python" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "580102"] [msg "Malware.Expert - Wordpress - unknown python request"] [hostname "www.ampsstudio.com"] [uri "/wp-admin/admin-ajax.php"] [unique_id "Yw7yr_FtJXM689Diqqx0lQAAAAM"] www.ampsstudio.com [Wed Aug 31 06:33:36 2022] [error] [client 20.254.119.246:0] [client 20.254.119.246] ModSecurity: Access denied with code 403 (phase 2). String match "connector.minimal.php" at REQUEST_URI. [file "remote server"] [line "-1"] [id "500083"] [msg "Malware.Expert - request_uri: 0-Day - Wordpress filemanager plugin"] [hostname "www.ampsstudio.com"] [uri "/wp-content/plugins/wp-file-manager/lib/php/connector.minimal.php"] [unique_id "Yw7ysGGqCFE0EOf_UzkwUwAAAAA"] www.ampsstudio.com [Wed Aug 31 06:34:17 2022] [error] [client 20.254.119.246:0] [client 20.254.119.246] ModSecurity: Access denied with code 403 (phase 2). String match "connector.minimal.php" at REQUEST_URI. [file "remote server"] [line "-1"] [id "500083"] [msg "Malware.Expert - request_uri: 0-Day - Wordpress filemanager plugin"] [hostname "www.ampsstudio.com"] [uri "/wp-content/plugins/wp-file-manager-pro/lib/php/connector.minimal.php"] [unique_id "Yw7y2YsvDBRmLk9RE80ogwAAAAE"] ampsstudio.com [Wed Aug 31 06:57:05 2022] [error] [client 20.107.61.207:0] [client 20.107.61.207] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "ampsstudio.com"] [uri "/.env"] [unique_id "Yw74MUJsqSFns3nRKIiSBQAAAAQ"] cpanel.ampsstudio.com [Wed Aug 31 07:04:46 2022] [error] [client 175.100.20.208:0] [client 175.100.20.208] ModSecurity: Access denied with code 403 (phase 2). String match "/ups.php" at REQUEST_URI. [file "remote server"] [line "-1"] [id "570041"] [msg "Malware.Expert - Malware"] [hostname "cpanel.ampsstudio.com"] [uri "/ups.php"] [unique_id "Yw75_vFtJXM689Diqqx0pQAAAAM"] ampsstudio.com [Wed Aug 31 07:40:51 2022] [error] [client 51.142.159.100:0] AH01276: Cannot serve directory /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-admin/includes/: No matching DirectoryIndex (index.php,index.html,index.htm) found, and server-generated directory index forbidden by Options directive mail.ampsstudio.com [Wed Aug 31 07:50:14 2022] [error] [client 175.100.20.208:0] [client 175.100.20.208] ModSecurity: Access denied with code 403 (phase 2). String match "/ups.php" at REQUEST_URI. [file "remote server"] [line "-1"] [id "570041"] [msg "Malware.Expert - Malware"] [hostname "mail.ampsstudio.com"] [uri "/ups.php"] [unique_id "Yw8Epo-0uVaoyUzgxbYjpAAAAAs"] mail.ampsstudio.com [Wed Aug 31 07:50:30 2022] [error] [client 175.100.20.208:0] [client 175.100.20.208] ModSecurity: Access denied with code 403 (phase 2). String match "/shell.php" at REQUEST_URI. [file "remote server"] [line "-1"] [id "570072"] [msg "Malware.Expert - PHP Command Shell"] [hostname "mail.ampsstudio.com"] [uri "/shell.php"] [unique_id "Yw8EtosvDBRmLk9RE80oogAAAAE"] mail.ampsstudio.com [Wed Aug 31 07:50:34 2022] [error] [client 175.100.20.208:0] [client 175.100.20.208] ModSecurity: Access denied with code 403 (phase 2). String match "/wso.php" at REQUEST_URI. [file "remote server"] [line "-1"] [id "570066"] [msg "Malware.Expert - PHP Command Shell (WSO)"] [hostname "mail.ampsstudio.com"] [uri "/wso.php"] [unique_id "Yw8EugzV_IoiboPq6wLFBQAAAAc"] ampsstudio.com [Wed Aug 31 08:49:18 2022] [error] [client 109.237.100.22:0] [client 109.237.100.22] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "ampsstudio.com"] [uri "/.env"] [unique_id "Yw8SfosvDBRmLk9RE80oygAAAAE"] ampsstudio.com [Wed Aug 31 10:17:02 2022] [error] [client 20.248.198.120:0] [client 20.248.198.120] ModSecurity: Access denied with code 403 (phase 2). String match "/.git/config" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430058"] [msg "Malware.Expert - request_uri: .git config"] [hostname "ampsstudio.com"] [uri "/.git/config"] [unique_id "Yw8nDosvDBRmLk9RE80pLgAAAAE"] www.ampsstudio.com [Wed Aug 31 10:55:32 2022] [error] [client 144.172.73.66:0] AH01071: Got error 'PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179' www.ampsstudio.com [Wed Aug 31 10:55:32 2022] [error] [client 144.172.73.66:0] AH01071: Got error 'PHP message: PHP Warning: Cannot modify header information - headers already sent by (output started at /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-includes/functions.php:5275) in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/includes/sonaar-music/css/theme/custom-style.php on line 2' webmail.ampsstudio.com [Wed Aug 31 12:23:05 2022] [error] [client 175.100.20.208:0] [client 175.100.20.208] ModSecurity: Access denied with code 403 (phase 2). String match "/ups.php" at REQUEST_URI. [file "remote server"] [line "-1"] [id "570041"] [msg "Malware.Expert - Malware"] [hostname "webmail.ampsstudio.com"] [uri "/ups.php"] [unique_id "Yw9EmQzV_IoiboPq6wLF-AAAAAc"] webmail.ampsstudio.com [Wed Aug 31 12:23:23 2022] [error] [client 175.100.20.208:0] [client 175.100.20.208] ModSecurity: Access denied with code 403 (phase 2). String match "/shell.php" at REQUEST_URI. [file "remote server"] [line "-1"] [id "570072"] [msg "Malware.Expert - PHP Command Shell"] [hostname "webmail.ampsstudio.com"] [uri "/shell.php"] [unique_id "Yw9Eq0JsqSFns3nRKIiTAgAAAAQ"] webmail.ampsstudio.com [Wed Aug 31 12:23:27 2022] [error] [client 175.100.20.208:0] [client 175.100.20.208] ModSecurity: Access denied with code 403 (phase 2). String match "/wso.php" at REQUEST_URI. [file "remote server"] [line "-1"] [id "570066"] [msg "Malware.Expert - PHP Command Shell (WSO)"] [hostname "webmail.ampsstudio.com"] [uri "/wso.php"] [unique_id "Yw9ErxfOGRJ9ULXBGNkxzQAAAAg"] www.ampsstudio.com [Wed Aug 31 15:29:35 2022] [error] [client 144.168.141.14:0] AH01071: Got error 'PHP message: PHP Warning: Cannot modify header information - headers already sent by (output started at /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-includes/functions.php:5275) in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/includes/sonaar-music/css/theme/custom-style.php on line 2' ampsstudio.com [Wed Aug 31 20:07:01 2022] [error] [client 40.83.49.235:0] [client 40.83.49.235] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "ampsstudio.com"] [uri "/.env"] [unique_id "Yw-xVQzV_IoiboPq6wLHAAAAAAc"] ampsstudio.com [Wed Aug 31 20:07:03 2022] [error] [client 40.83.49.235:0] [client 40.83.49.235] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "ampsstudio.com"] [uri "/.env.bak"] [unique_id "Yw-xV0f8Fpj4nPUfhhcA_AAAAAU"] ampsstudio.com [Wed Aug 31 20:07:06 2022] [error] [client 40.83.49.235:0] [client 40.83.49.235] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "ampsstudio.com"] [uri "/laravel/.env"] [unique_id "Yw-xWkJsqSFns3nRKIiUCgAAAAQ"] ampsstudio.com [Wed Aug 31 20:07:07 2022] [error] [client 40.83.49.235:0] [client 40.83.49.235] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "ampsstudio.com"] [uri "/local/.env"] [unique_id "Yw-xW4-0uVaoyUzgxbYlfgAAAAs"] ampsstudio.com [Wed Aug 31 20:07:08 2022] [error] [client 40.83.49.235:0] [client 40.83.49.235] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "ampsstudio.com"] [uri "/cgi-bin/.env"] [unique_id "Yw-xXGGqCFE0EOf_UzkyXwAAAAA"] ampsstudio.com [Wed Aug 31 20:07:09 2022] [error] [client 40.83.49.235:0] [client 40.83.49.235] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "ampsstudio.com"] [uri "/backend/.env"] [unique_id "Yw-xXfFtJXM689Diqqx2sAAAAAM"] ampsstudio.com [Wed Aug 31 20:07:17 2022] [error] [client 40.83.49.235:0] [client 40.83.49.235] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "ampsstudio.com"] [uri "/protected/.env"] [unique_id "Yw-xZQzV_IoiboPq6wLHAgAAAAc"] ampsstudio.com [Wed Aug 31 20:07:18 2022] [error] [client 40.83.49.235:0] [client 40.83.49.235] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "ampsstudio.com"] [uri "/database/.env"] [unique_id "Yw-xZkf8Fpj4nPUfhhcA_gAAAAU"] ampsstudio.com [Wed Aug 31 20:07:19 2022] [error] [client 40.83.49.235:0] [client 40.83.49.235] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "ampsstudio.com"] [uri "/public/.env"] [unique_id "Yw-xZz8yqlqRsvu1zgMFJAAAAAI"] ampsstudio.com [Wed Aug 31 20:07:20 2022] [error] [client 40.83.49.235:0] [client 40.83.49.235] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "ampsstudio.com"] [uri "/app/config/.env"] [unique_id "Yw-xaPeKOZ-2uJruMGk8MgAAAAY"] ampsstudio.com [Wed Aug 31 20:07:22 2022] [error] [client 40.83.49.235:0] [client 40.83.49.235] ModSecurity: Access denied with code 403 (phase 2). String match ".aws/credentials" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430069"] [msg "Malware.Expert - request_uri: AWS Credentials"] [hostname "ampsstudio.com"] [uri "/.aws/credentials"] [unique_id "Yw-xaosvDBRmLk9RE80qkAAAAAE"] ampsstudio.com [Wed Aug 31 20:17:40 2022] [error] [client 20.244.28.61:0] [client 20.244.28.61] ModSecurity: Access denied with code 403 (phase 2). String match "/wso.php" at REQUEST_URI. [file "remote server"] [line "-1"] [id "570066"] [msg "Malware.Expert - PHP Command Shell (WSO)"] [hostname "ampsstudio.com"] [uri "/wso.php"] [unique_id "Yw-z1GGqCFE0EOf_UzkyZgAAAAA"] ampsstudio.com [Wed Aug 31 20:18:23 2022] [error] [client 20.244.28.61:0] [client 20.244.28.61] ModSecurity: Access denied with code 403 (phase 2). String match "/wp-2019.php" at REQUEST_URI. [file "remote server"] [line "-1"] [id "570068"] [msg "Malware.Expert - PHP Command Shell (WSO)"] [hostname "ampsstudio.com"] [uri "/wp-2019.php"] [unique_id "Yw-z__FtJXM689Diqqx2ugAAAAM"] ampsstudio.com [Wed Aug 31 20:18:40 2022] [error] [client 20.244.28.61:0] [client 20.244.28.61] ModSecurity: Access denied with code 403 (phase 2). String match "/wp-info.php" at REQUEST_URI. [file "remote server"] [line "-1"] [id "570012"] [msg "Malware.Expert - wp-info.php - Malware"] [hostname "ampsstudio.com"] [uri "/wp-info.php"] [unique_id "Yw-0EEf8Fpj4nPUfhhcBCAAAAAU"] ampsstudio.com [Wed Aug 31 20:21:09 2022] [error] [client 20.244.28.61:0] [client 20.244.28.61] ModSecurity: Access denied with code 403 (phase 2). Pattern match "/images/.*\\\\.php" at REQUEST_URI. [file "remote server"] [line "-1"] [id "470000"] [msg "Malware.Expert - request_uri: Images folder - prevent PHP files from executing"] [hostname "ampsstudio.com"] [uri "/images/vuln.php"] [unique_id "Yw-0pYsvDBRmLk9RE80qpAAAAAE"] ampsstudio.com [Wed Aug 31 20:22:35 2022] [error] [client 20.244.28.61:0] [client 20.244.28.61] ModSecurity: Access denied with code 403 (phase 2). String match "/ups.php" at REQUEST_URI. [file "remote server"] [line "-1"] [id "570041"] [msg "Malware.Expert - Malware"] [hostname "ampsstudio.com"] [uri "/ups.php"] [unique_id "Yw-0-4svDBRmLk9RE80qqgAAAAE"] ampsstudio.com [Wed Aug 31 20:23:16 2022] [error] [client 20.244.28.61:0] [client 20.244.28.61] ModSecurity: Access denied with code 403 (phase 2). Pattern match "/\\\\..+\\\\.php" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430015"] [msg "Malware.Expert - request_uri: hidden .php execute"] [hostname "ampsstudio.com"] [uri "/.fk.php"] [unique_id "Yw-1JIsvDBRmLk9RE80qrQAAAAE"] ampsstudio.com [Wed Aug 31 20:24:00 2022] [error] [client 20.244.28.61:0] [client 20.244.28.61] ModSecurity: Access denied with code 403 (phase 2). String match "/shell.php" at REQUEST_URI. [file "remote server"] [line "-1"] [id "570072"] [msg "Malware.Expert - PHP Command Shell"] [hostname "ampsstudio.com"] [uri "/shell.php"] [unique_id "Yw-1UEf8Fpj4nPUfhhcBIAAAAAU"] ampsstudio.com [Wed Aug 31 20:26:04 2022] [error] [client 20.244.28.61:0] [client 20.244.28.61] ModSecurity: Access denied with code 403 (phase 2). String match "/wso.php" at REQUEST_URI. [file "remote server"] [line "-1"] [id "570066"] [msg "Malware.Expert - PHP Command Shell (WSO)"] [hostname "ampsstudio.com"] [uri "/WSO.php"] [unique_id "Yw-1zPFtJXM689Diqqx23AAAAAM"] ampsstudio.com [Wed Aug 31 20:26:05 2022] [error] [client 20.244.28.61:0] [client 20.244.28.61] ModSecurity: Access denied with code 403 (phase 2). String match "/alwso.php" at REQUEST_URI. [file "remote server"] [line "-1"] [id "570069"] [msg "Malware.Expert - PHP Command Shell (WSO)"] [hostname "ampsstudio.com"] [uri "/alwso.php"] [unique_id "Yw-1zfeKOZ-2uJruMGk8WwAAAAY"] ampsstudio.com [Wed Aug 31 20:26:10 2022] [error] [client 20.244.28.61:0] [client 20.244.28.61] ModSecurity: Access denied with code 403 (phase 2). Pattern match "/wp-content/uploads/.*\\\\.php" at REQUEST_FILENAME. [file "remote server"] [line "-1"] [id "430017"] [msg "Malware.Expert - request_uri: Wordpress - prevent PHP files from executing"] [hostname "ampsstudio.com"] [uri "/wp-content/uploads/readindex.php"] [unique_id "Yw-10gzV_IoiboPq6wLHLAAAAAc"] ampsstudio.com [Wed Aug 31 20:26:11 2022] [error] [client 20.244.28.61:0] [client 20.244.28.61] ModSecurity: Access denied with code 403 (phase 2). Pattern match "/wp-content/uploads/.*\\\\.php" at REQUEST_FILENAME. [file "remote server"] [line "-1"] [id "430017"] [msg "Malware.Expert - request_uri: Wordpress - prevent PHP files from executing"] [hostname "ampsstudio.com"] [uri "/wp-content/uploads/small.php"] [unique_id "Yw-100f8Fpj4nPUfhhcBKQAAAAU"] ampsstudio.com [Wed Aug 31 20:26:12 2022] [error] [client 20.244.28.61:0] [client 20.244.28.61] ModSecurity: Access denied with code 403 (phase 2). Pattern match "/wp-admin/includes/.*\\\\.php" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430034"] [msg "Malware.Expert - request_uri: Wordpress - prevent PHP files from executing"] [hostname "ampsstudio.com"] [uri "/wp-admin/includes/mar.php"] [unique_id "Yw-11IsvDBRmLk9RE80qugAAAAE"] ampsstudio.com [Wed Aug 31 20:26:12 2022] [error] [client 20.244.28.61:0] [client 20.244.28.61] ModSecurity: Access denied with code 403 (phase 2). Pattern match "/wp-admin/includes/.*\\\\.php" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430034"] [msg "Malware.Expert - request_uri: Wordpress - prevent PHP files from executing"] [hostname "ampsstudio.com"] [uri "/wp-admin/includes/readindex.php"] [unique_id "Yw-11IsvDBRmLk9RE80quwAAAAE"] ampsstudio.com [Wed Aug 31 20:26:13 2022] [error] [client 20.244.28.61:0] [client 20.244.28.61] ModSecurity: Access denied with code 403 (phase 2). Pattern match "/wp-admin/includes/.*\\\\.php" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430034"] [msg "Malware.Expert - request_uri: Wordpress - prevent PHP files from executing"] [hostname "ampsstudio.com"] [uri "/wp-admin/includes/maint/wp-readindex.php"] [unique_id "Yw-11YsvDBRmLk9RE80qvAAAAAE"] ampsstudio.com [Wed Aug 31 20:26:13 2022] [error] [client 20.244.28.61:0] [client 20.244.28.61] ModSecurity: Access denied with code 403 (phase 2). Pattern match "/wp-admin/includes/.*\\\\.php" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430034"] [msg "Malware.Expert - request_uri: Wordpress - prevent PHP files from executing"] [hostname "ampsstudio.com"] [uri "/wp-admin/includes/maint/wp-cron.php"] [unique_id "Yw-11YsvDBRmLk9RE80qvQAAAAE"] ampsstudio.com [Wed Aug 31 20:26:14 2022] [error] [client 20.244.28.61:0] [client 20.244.28.61] ModSecurity: Access denied with code 403 (phase 2). Pattern match "/wp-admin/includes/.*\\\\.php" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430034"] [msg "Malware.Expert - request_uri: Wordpress - prevent PHP files from executing"] [hostname "ampsstudio.com"] [uri "/wp-admin/includes/media-site.php"] [unique_id "Yw-11hfOGRJ9ULXBGNky_gAAAAg"] ampsstudio.com [Wed Aug 31 20:26:14 2022] [error] [client 20.244.28.61:0] [client 20.244.28.61] ModSecurity: Access denied with code 403 (phase 2). Pattern match "/wp-admin/includes/.*\\\\.php" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430034"] [msg "Malware.Expert - request_uri: Wordpress - prevent PHP files from executing"] [hostname "ampsstudio.com"] [uri "/wp-admin/includes/class-wp-media-list-data.php"] [unique_id "Yw-11j8yqlqRsvu1zgMFTgAAAAI"] ampsstudio.com [Wed Aug 31 20:26:15 2022] [error] [client 20.244.28.61:0] [client 20.244.28.61] ModSecurity: Access denied with code 403 (phase 2). Pattern match "/wp-admin/includes/.*\\\\.php" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430034"] [msg "Malware.Expert - request_uri: Wordpress - prevent PHP files from executing"] [hostname "ampsstudio.com"] [uri "/wp-admin/includes/maint/repair-bak.php"] [unique_id "Yw-112GqCFE0EOf_UzkyiwAAAAA"] ampsstudio.com [Wed Aug 31 20:26:15 2022] [error] [client 20.244.28.61:0] [client 20.244.28.61] ModSecurity: Access denied with code 403 (phase 2). Pattern match "/wp-admin/includes/.*\\\\.php" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430034"] [msg "Malware.Expert - request_uri: Wordpress - prevent PHP files from executing"] [hostname "ampsstudio.com"] [uri "/wp-admin/includes/edit-tag-menu.php"] [unique_id "Yw-114-0uVaoyUzgxbYlrAAAAAs"] ampsstudio.com [Wed Aug 31 20:26:16 2022] [error] [client 20.244.28.61:0] [client 20.244.28.61] ModSecurity: Access denied with code 403 (phase 2). Pattern match "/wp-admin/includes/.*\\\\.php" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430034"] [msg "Malware.Expert - request_uri: Wordpress - prevent PHP files from executing"] [hostname "ampsstudio.com"] [uri "/wp-admin/includes/tablepress_controllers.php"] [unique_id "Yw-12I-0uVaoyUzgxbYlrQAAAAs"] ampsstudio.com [Wed Aug 31 20:26:16 2022] [error] [client 20.244.28.61:0] [client 20.244.28.61] ModSecurity: Access denied with code 403 (phase 2). Pattern match "/wp-admin/includes/.*\\\\.php" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430034"] [msg "Malware.Expert - request_uri: Wordpress - prevent PHP files from executing"] [hostname "ampsstudio.com"] [uri "/wp-admin/includes/block-line.php"] [unique_id "Yw-12I-0uVaoyUzgxbYlrgAAAAs"] ampsstudio.com [Wed Aug 31 20:26:17 2022] [error] [client 20.244.28.61:0] [client 20.244.28.61] ModSecurity: Access denied with code 403 (phase 2). Pattern match "/wp-admin/css/.*\\\\.php" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430027"] [msg "Malware.Expert - request_uri: Wordpress - prevent PHP files from executing"] [hostname "ampsstudio.com"] [uri "/wp-admin/css/modern/colors.css.php"] [unique_id "Yw-12Y-0uVaoyUzgxbYlrwAAAAs"] www.ampsstudio.com [Wed Aug 31 20:32:26 2022] [error] [client 185.220.101.21:0] AH01071: Got error 'PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179' www.ampsstudio.com [Wed Aug 31 20:32:26 2022] [error] [client 185.220.101.21:0] AH01071: Got error 'PHP message: PHP Warning: Cannot modify header information - headers already sent by (output started at /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-includes/functions.php:5275) in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/includes/sonaar-music/css/theme/custom-style.php on line 2' www.ampsstudio.com [Wed Aug 31 23:15:36 2022] [error] [client 185.207.104.96:0] AH01071: Got error 'PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179' www.ampsstudio.com [Wed Aug 31 23:15:36 2022] [error] [client 185.207.104.96:0] AH01071: Got error 'PHP message: PHP Warning: Cannot modify header information - headers already sent by (output started at /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-includes/functions.php:5275) in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/includes/sonaar-music/css/theme/custom-style.php on line 2' ampsstudio.com [Thu Sep 01 01:55:47 2022] [error] [client 5.62.62.71:0] [client 5.62.62.71] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "ampsstudio.com"] [uri "/.env"] [unique_id "YxADE2GqCFE0EOf_UzkzFwAAAAA"] www.ampsstudio.com [Thu Sep 01 03:02:40 2022] [error] [client 20.117.233.50:0] AH01071: Got error 'PHP message: PHP Warning: Undefined array key "HTTP_USER_AGENT" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/bookly-responsive-appointment-booking-tool/frontend/modules/booking/ShortCode.php on line 66' www.ampsstudio.com [Thu Sep 01 03:02:42 2022] [error] [client 20.117.233.50:0] AH01071: Got error 'PHP message: PHP Warning: Undefined array key "HTTP_USER_AGENT" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/bookly-responsive-appointment-booking-tool/frontend/modules/booking/ShortCode.php on line 66' www.ampsstudio.com [Thu Sep 01 03:02:43 2022] [error] [client 20.117.233.50:0] AH01071: Got error 'PHP message: PHP Warning: Undefined array key "HTTP_USER_AGENT" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/bookly-responsive-appointment-booking-tool/frontend/modules/booking/ShortCode.php on line 66' www.ampsstudio.com [Thu Sep 01 03:02:44 2022] [error] [client 20.117.233.50:0] AH01071: Got error 'PHP message: PHP Warning: Undefined array key "HTTP_USER_AGENT" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/bookly-responsive-appointment-booking-tool/frontend/modules/booking/ShortCode.php on line 66' www.ampsstudio.com [Thu Sep 01 03:02:45 2022] [error] [client 20.117.233.50:0] AH01071: Got error 'PHP message: PHP Warning: Undefined array key "HTTP_USER_AGENT" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/bookly-responsive-appointment-booking-tool/frontend/modules/booking/ShortCode.php on line 66' ampsstudio.com [Thu Sep 01 03:02:45 2022] [error] [client 20.117.233.50:0] AH01276: Cannot serve directory /home/virtual/vps-aa3942/a/aede5353c4/public_html/test/: No matching DirectoryIndex (index.php,index.html,index.htm) found, and server-generated directory index forbidden by Options directive www.ampsstudio.com [Thu Sep 01 03:02:47 2022] [error] [client 20.117.233.50:0] AH01071: Got error 'PHP message: PHP Warning: Undefined array key "HTTP_USER_AGENT" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/bookly-responsive-appointment-booking-tool/frontend/modules/booking/ShortCode.php on line 66' www.ampsstudio.com [Thu Sep 01 03:02:48 2022] [error] [client 20.117.233.50:0] AH01071: Got error 'PHP message: PHP Warning: Undefined array key "HTTP_USER_AGENT" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/bookly-responsive-appointment-booking-tool/frontend/modules/booking/ShortCode.php on line 66' www.ampsstudio.com [Thu Sep 01 03:02:49 2022] [error] [client 20.117.233.50:0] AH01071: Got error 'PHP message: PHP Warning: Undefined array key "HTTP_USER_AGENT" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/bookly-responsive-appointment-booking-tool/frontend/modules/booking/ShortCode.php on line 66' ampsstudio.com [Thu Sep 01 04:27:46 2022] [error] [client 51.142.139.249:0] [client 51.142.139.249] ModSecurity: Access denied with code 403 (phase 2). Match of "contains index.php" against "REQUEST_URI" required. [file "remote server"] [line "-1"] [id "570076"] [msg "Malware.Expert - Malware"] [hostname "ampsstudio.com"] [uri "/wp-commentin.php"] [unique_id "YxAmsi3NDFjbbKpHNx01UAAAAAA"] ampsstudio.com [Thu Sep 01 04:27:52 2022] [error] [client 51.142.139.249:0] [client 51.142.139.249] ModSecurity: Access denied with code 403 (phase 2). Match of "contains index.php" against "REQUEST_URI" required. [file "remote server"] [line "-1"] [id "570076"] [msg "Malware.Expert - Malware"] [hostname "ampsstudio.com"] [uri "/wp-commentin.php"] [unique_id "YxAmuPLjqwsSTJc2pjdu7gAAAAE"] webmail.ampsstudio.com [Thu Sep 01 05:37:52 2022] [error] [client 156.146.63.157:0] [client 156.146.63.157] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "webmail.ampsstudio.com"] [uri "/.env"] [unique_id "YxA3IHPi_BeXP9GTQpJPYAAAAAQ"] www.ampsstudio.com [Thu Sep 01 07:30:31 2022] [error] [client 190.2.131.157:0] AH01071: Got error 'PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179' www.ampsstudio.com [Thu Sep 01 07:30:31 2022] [error] [client 190.2.131.157:0] AH01071: Got error 'PHP message: PHP Warning: Cannot modify header information - headers already sent by (output started at /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-includes/functions.php:5275) in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/includes/sonaar-music/css/theme/custom-style.php on line 2' ampsstudio.com [Thu Sep 01 07:49:03 2022] [error] [client 137.117.232.115:0] [client 137.117.232.115] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "ampsstudio.com"] [uri "/.env"] [unique_id "YxBV3y3NDFjbbKpHNx01oQAAAAA"] www.ampsstudio.com [Thu Sep 01 10:20:25 2022] [error] [client 195.140.212.254:0] AH01071: Got error 'PHP message: PHP Warning: Cannot modify header information - headers already sent by (output started at /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-includes/functions.php:5275) in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/includes/sonaar-music/css/theme/custom-style.php on line 2' www.ampsstudio.com [Thu Sep 01 10:44:03 2022] [crit] [client 66.249.93.18:0] AH00529: /home/virtual/vps-aa3942/a/aede5353c4/public_html/.well-known/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/virtual/vps-aa3942/a/aede5353c4/public_html/.well-known/' is executable ampsstudio.com [Thu Sep 01 12:56:03 2022] [error] [client 20.111.51.222:0] [client 20.111.51.222] ModSecurity: Access denied with connection close (phase 2). Pattern match "^wp_is_mobile$" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "420038"] [msg "Malware.Expert - user-agent: Webshell user-agent"] [hostname "ampsstudio.com"] [uri "/wp-load.php"] [unique_id "YxCd04OhSK1R2wCT21kLHgAAAAY"] ampsstudio.com [Thu Sep 01 12:56:05 2022] [error] [client 20.111.51.222:0] [client 20.111.51.222] ModSecurity: Access denied with connection close (phase 2). Pattern match "^wp_is_mobile$" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "420038"] [msg "Malware.Expert - user-agent: Webshell user-agent"] [hostname "ampsstudio.com"] [uri "/wp-load.php"] [unique_id "YxCd1evXfFELJw_XED_aAwAAAAU"] ampsstudio.com [Thu Sep 01 12:56:06 2022] [error] [client 20.111.51.222:0] [client 20.111.51.222] ModSecurity: Access denied with connection close (phase 2). Pattern match "^wp_is_mobile$" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "420038"] [msg "Malware.Expert - user-agent: Webshell user-agent"] [hostname "ampsstudio.com"] [uri "/style.php"] [unique_id "YxCd1m-wYKxtUiaGq3JD_gAAAAA"] ampsstudio.com [Thu Sep 01 12:56:06 2022] [error] [client 20.111.51.222:0] [client 20.111.51.222] ModSecurity: Access denied with connection close (phase 2). Pattern match "^wp_is_mobile$" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "420038"] [msg "Malware.Expert - user-agent: Webshell user-agent"] [hostname "ampsstudio.com"] [uri "/wp-admin/style.php"] [unique_id "YxCd1k5nXug0jUKW5ggyxQAAAAs"] ampsstudio.com [Thu Sep 01 12:56:07 2022] [error] [client 20.111.51.222:0] [client 20.111.51.222] ModSecurity: Access denied with connection close (phase 2). Pattern match "^wp_is_mobile$" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "420038"] [msg "Malware.Expert - user-agent: Webshell user-agent"] [hostname "ampsstudio.com"] [uri "/s_e.php"] [unique_id "YxCd16UAIJYlZWqGwJRWHgAAAAM"] ampsstudio.com [Thu Sep 01 12:56:08 2022] [error] [client 20.111.51.222:0] [client 20.111.51.222] ModSecurity: Access denied with connection close (phase 2). Pattern match "^wp_is_mobile$" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "420038"] [msg "Malware.Expert - user-agent: Webshell user-agent"] [hostname "ampsstudio.com"] [uri "/s_ne.php"] [unique_id "YxCd2HPi_BeXP9GTQpJQoAAAAAQ"] ampsstudio.com [Thu Sep 01 12:56:12 2022] [error] [client 20.111.51.222:0] [client 20.111.51.222] ModSecurity: Access denied with connection close (phase 2). Pattern match "^wp_is_mobile$" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "420038"] [msg "Malware.Expert - user-agent: Webshell user-agent"] [hostname "ampsstudio.com"] [uri "/radio.php"] [unique_id "YxCd3AnK7ZwkdOAZV0jeuQAAAAo"] ampsstudio.com [Thu Sep 01 12:56:13 2022] [error] [client 20.111.51.222:0] [client 20.111.51.222] ModSecurity: Access denied with connection close (phase 2). Pattern match "^wp_is_mobile$" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "420038"] [msg "Malware.Expert - user-agent: Webshell user-agent"] [hostname "ampsstudio.com"] [uri "/doc.php"] [unique_id "YxCd3YOhSK1R2wCT21kLHwAAAAY"] ampsstudio.com [Thu Sep 01 12:56:14 2022] [error] [client 20.111.51.222:0] [client 20.111.51.222] ModSecurity: Access denied with code 403 (phase 2). Match of "contains index.php" against "REQUEST_URI" required. [file "remote server"] [line "-1"] [id "570075"] [msg "Malware.Expert - Malware"] [hostname "ampsstudio.com"] [uri "/wp_wrong_datlib.php"] [unique_id "YxCd3uvXfFELJw_XED_aBAAAAAU"] ampsstudio.com [Thu Sep 01 12:56:15 2022] [error] [client 20.111.51.222:0] [client 20.111.51.222] ModSecurity: Access denied with code 403 (phase 2). Match of "contains index.php" against "REQUEST_URI" required. [file "remote server"] [line "-1"] [id "570075"] [msg "Malware.Expert - Malware"] [hostname "ampsstudio.com"] [uri "/beence.php"] [unique_id "YxCd32-wYKxtUiaGq3JD_wAAAAA"] ampsstudio.com [Thu Sep 01 12:56:18 2022] [error] [client 20.111.51.222:0] [client 20.111.51.222] ModSecurity: Access denied with connection close (phase 2). Pattern match "^wp_is_mobile$" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "420038"] [msg "Malware.Expert - user-agent: Webshell user-agent"] [hostname "ampsstudio.com"] [uri "/ups.php"] [unique_id "YxCd4k5nXug0jUKW5ggyxgAAAAs"] ampsstudio.com [Thu Sep 01 12:56:19 2022] [error] [client 20.111.51.222:0] [client 20.111.51.222] ModSecurity: Access denied with connection close (phase 2). Pattern match "^wp_is_mobile$" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "420038"] [msg "Malware.Expert - user-agent: Webshell user-agent"] [hostname "ampsstudio.com"] [uri "/wp-signin.php"] [unique_id "YxCd46UAIJYlZWqGwJRWHwAAAAM"] ampsstudio.com [Thu Sep 01 12:56:19 2022] [error] [client 20.111.51.222:0] [client 20.111.51.222] ModSecurity: Access denied with connection close (phase 2). Pattern match "^wp_is_mobile$" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "420038"] [msg "Malware.Expert - user-agent: Webshell user-agent"] [hostname "ampsstudio.com"] [uri "/media-admin.php"] [unique_id "YxCd43Pi_BeXP9GTQpJQoQAAAAQ"] ampsstudio.com [Thu Sep 01 12:56:20 2022] [error] [client 20.111.51.222:0] [client 20.111.51.222] ModSecurity: Access denied with code 403 (phase 2). Match of "contains index.php" against "REQUEST_URI" required. [file "remote server"] [line "-1"] [id "570075"] [msg "Malware.Expert - Malware"] [hostname "ampsstudio.com"] [uri "/export.php"] [unique_id "YxCd5LwRl414_smjJCbLeAAAAAw"] ampsstudio.com [Thu Sep 01 12:56:21 2022] [error] [client 20.111.51.222:0] [client 20.111.51.222] ModSecurity: Access denied with code 403 (phase 2). Match of "contains index.php" against "REQUEST_URI" required. [file "remote server"] [line "-1"] [id "570075"] [msg "Malware.Expert - Malware"] [hostname "ampsstudio.com"] [uri "/wp-content/export.php"] [unique_id "YxCd5TirrHdMR3etwoLIgQAAAAk"] ampsstudio.com [Thu Sep 01 12:56:22 2022] [error] [client 20.111.51.222:0] [client 20.111.51.222] ModSecurity: Access denied with connection close (phase 2). Pattern match "^wp_is_mobile$" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "420038"] [msg "Malware.Expert - user-agent: Webshell user-agent"] [hostname "ampsstudio.com"] [uri "/wp-includes/wp-class.php"] [unique_id "YxCd5gnK7ZwkdOAZV0jeugAAAAo"] ampsstudio.com [Thu Sep 01 12:56:23 2022] [error] [client 20.111.51.222:0] [client 20.111.51.222] ModSecurity: Access denied with code 403 (phase 2). Match of "contains index.php" against "REQUEST_URI" required. [file "remote server"] [line "-1"] [id "570075"] [msg "Malware.Expert - Malware"] [hostname "ampsstudio.com"] [uri "/wp-includes/wp-atom.php"] [unique_id "YxCd5_LjqwsSTJc2pjdwLgAAAAE"] ampsstudio.com [Thu Sep 01 12:56:24 2022] [error] [client 20.111.51.222:0] [client 20.111.51.222] ModSecurity: Access denied with code 403 (phase 2). Pattern match "/wp-includes/images/.*\\\\.php" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430032"] [msg "Malware.Expert - request_uri: Wordpress - prevent PHP files from executing"] [hostname "ampsstudio.com"] [uri "/wp-includes/images/css.php"] [unique_id "YxCd6IOhSK1R2wCT21kLIAAAAAY"] ampsstudio.com [Thu Sep 01 12:56:25 2022] [error] [client 20.111.51.222:0] [client 20.111.51.222] ModSecurity: Access denied with code 403 (phase 2). Pattern match "/wp-includes/css/.*\\\\.php" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430035"] [msg "Malware.Expert - request_uri: Wordpress - prevent PHP files from executing"] [hostname "ampsstudio.com"] [uri "/wp-includes/css/css.php"] [unique_id "YxCd6W-wYKxtUiaGq3JEAAAAAAA"] ampsstudio.com [Thu Sep 01 12:56:26 2022] [error] [client 20.111.51.222:0] [client 20.111.51.222] ModSecurity: Access denied with code 403 (phase 2). Match of "contains index.php" against "REQUEST_URI" required. [file "remote server"] [line "-1"] [id "570075"] [msg "Malware.Expert - Malware"] [hostname "ampsstudio.com"] [uri "/defau1t.php"] [unique_id "YxCd6uvXfFELJw_XED_aBQAAAAU"] ampsstudio.com [Thu Sep 01 12:56:26 2022] [error] [client 20.111.51.222:0] [client 20.111.51.222] ModSecurity: Access denied with code 403 (phase 2). Match of "contains index.php" against "REQUEST_URI" required. [file "remote server"] [line "-1"] [id "570075"] [msg "Malware.Expert - Malware"] [hostname "ampsstudio.com"] [uri "/moduless.php"] [unique_id "YxCd6k5nXug0jUKW5ggyxwAAAAs"] ampsstudio.com [Thu Sep 01 12:56:27 2022] [error] [client 20.111.51.222:0] [client 20.111.51.222] ModSecurity: Access denied with connection close (phase 2). Pattern match "^wp_is_mobile$" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "420038"] [msg "Malware.Expert - user-agent: Webshell user-agent"] [hostname "ampsstudio.com"] [uri "/wp-booking.php"] [unique_id "YxCd66UAIJYlZWqGwJRWIAAAAAM"] ampsstudio.com [Thu Sep 01 12:56:28 2022] [error] [client 20.111.51.222:0] [client 20.111.51.222] ModSecurity: Access denied with connection close (phase 2). Pattern match "^wp_is_mobile$" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "420038"] [msg "Malware.Expert - user-agent: Webshell user-agent"] [hostname "ampsstudio.com"] [uri "/wp-content/plugins/backup_index.php"] [unique_id "YxCd7HPi_BeXP9GTQpJQogAAAAQ"] ampsstudio.com [Thu Sep 01 12:56:30 2022] [error] [client 20.111.51.222:0] [client 20.111.51.222] ModSecurity: Access denied with connection close (phase 2). Pattern match "^wp_is_mobile$" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "420038"] [msg "Malware.Expert - user-agent: Webshell user-agent"] [hostname "ampsstudio.com"] [uri "/wp-content/mu-plugins/db-safe-mode.php"] [unique_id "YxCd7rwRl414_smjJCbLeQAAAAw"] ampsstudio.com [Thu Sep 01 12:56:32 2022] [error] [client 20.111.51.222:0] [client 20.111.51.222] ModSecurity: Access denied with connection close (phase 2). Pattern match "^wp_is_mobile$" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "420038"] [msg "Malware.Expert - user-agent: Webshell user-agent"] [hostname "ampsstudio.com"] [uri "/wp-includes/css/wp-config.php"] [unique_id "YxCd8DirrHdMR3etwoLIggAAAAk"] ampsstudio.com [Thu Sep 01 12:56:34 2022] [error] [client 20.111.51.222:0] [client 20.111.51.222] ModSecurity: Access denied with connection close (phase 2). Pattern match "^wp_is_mobile$" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "420038"] [msg "Malware.Expert - user-agent: Webshell user-agent"] [hostname "ampsstudio.com"] [uri "/config.bak.php"] [unique_id "YxCd8gnK7ZwkdOAZV0jeuwAAAAo"] ampsstudio.com [Thu Sep 01 12:56:35 2022] [error] [client 20.111.51.222:0] [client 20.111.51.222] ModSecurity: Access denied with connection close (phase 2). Pattern match "^wp_is_mobile$" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "420038"] [msg "Malware.Expert - user-agent: Webshell user-agent"] [hostname "ampsstudio.com"] [uri "/wp-content/themes/config.bak.php"] [unique_id "YxCd8_LjqwsSTJc2pjdwLwAAAAE"] ampsstudio.com [Thu Sep 01 12:56:36 2022] [error] [client 20.111.51.222:0] [client 20.111.51.222] ModSecurity: Access denied with connection close (phase 2). Pattern match "^wp_is_mobile$" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "420038"] [msg "Malware.Expert - user-agent: Webshell user-agent"] [hostname "ampsstudio.com"] [uri "/legion.php"] [unique_id "YxCd9IOhSK1R2wCT21kLIQAAAAY"] ampsstudio.com [Thu Sep 01 12:56:44 2022] [error] [client 20.111.51.222:0] [client 20.111.51.222] ModSecurity: Access denied with connection close (phase 2). Pattern match "^wp_is_mobile$" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "420038"] [msg "Malware.Expert - user-agent: Webshell user-agent"] [hostname "ampsstudio.com"] [uri "/wp-plugins.php"] [unique_id "YxCd_E5nXug0jUKW5ggyyAAAAAs"] ampsstudio.com [Thu Sep 01 12:56:48 2022] [error] [client 20.111.51.222:0] [client 20.111.51.222] ModSecurity: Access denied with connection close (phase 2). Pattern match "^wp_is_mobile$" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "420038"] [msg "Malware.Expert - user-agent: Webshell user-agent"] [hostname "ampsstudio.com"] [uri "/gank.php.PhP"] [unique_id "YxCeAKUAIJYlZWqGwJRWIQAAAAM"] ampsstudio.com [Thu Sep 01 12:56:50 2022] [error] [client 20.111.51.222:0] [client 20.111.51.222] ModSecurity: Access denied with connection close (phase 2). Pattern match "^wp_is_mobile$" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "420038"] [msg "Malware.Expert - user-agent: Webshell user-agent"] [hostname "ampsstudio.com"] [uri "/wp-content/db-cache.php"] [unique_id "YxCeAnPi_BeXP9GTQpJQowAAAAQ"] ampsstudio.com [Thu Sep 01 12:56:52 2022] [error] [client 20.111.51.222:0] [client 20.111.51.222] ModSecurity: Access denied with code 403 (phase 2). Match of "contains index.php" against "REQUEST_URI" required. [file "remote server"] [line "-1"] [id "570075"] [msg "Malware.Expert - Malware"] [hostname "ampsstudio.com"] [uri "/archives.php"] [unique_id "YxCeBLwRl414_smjJCbLegAAAAw"] ampsstudio.com [Thu Sep 01 12:56:55 2022] [error] [client 20.111.51.222:0] [client 20.111.51.222] ModSecurity: Access denied with code 403 (phase 2). Match of "contains index.php" against "REQUEST_URI" required. [file "remote server"] [line "-1"] [id "570075"] [msg "Malware.Expert - Malware"] [hostname "ampsstudio.com"] [uri "/defau11.php"] [unique_id "YxCeBzirrHdMR3etwoLIgwAAAAk"] ampsstudio.com [Thu Sep 01 12:56:57 2022] [error] [client 20.111.51.222:0] [client 20.111.51.222] ModSecurity: Access denied with connection close (phase 2). Pattern match "^wp_is_mobile$" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "420038"] [msg "Malware.Expert - user-agent: Webshell user-agent"] [hostname "ampsstudio.com"] [uri "/wp-content/outcms.php"] [unique_id "YxCeCQnK7ZwkdOAZV0jevAAAAAo"] ampsstudio.com [Thu Sep 01 12:56:59 2022] [error] [client 20.111.51.222:0] [client 20.111.51.222] ModSecurity: Access denied with connection close (phase 2). Pattern match "^wp_is_mobile$" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "420038"] [msg "Malware.Expert - user-agent: Webshell user-agent"] [hostname "ampsstudio.com"] [uri "/system_log.php"] [unique_id "YxCeC_LjqwsSTJc2pjdwMAAAAAE"] ampsstudio.com [Thu Sep 01 12:57:02 2022] [error] [client 20.111.51.222:0] [client 20.111.51.222] ModSecurity: Access denied with connection close (phase 2). Pattern match "^wp_is_mobile$" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "420038"] [msg "Malware.Expert - user-agent: Webshell user-agent"] [hostname "ampsstudio.com"] [uri "/wp-backup-sql-302.php"] [unique_id "YxCeDoOhSK1R2wCT21kLIgAAAAY"] ampsstudio.com [Thu Sep 01 12:57:04 2022] [error] [client 20.111.51.222:0] [client 20.111.51.222] ModSecurity: Access denied with connection close (phase 2). Pattern match "^wp_is_mobile$" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "420038"] [msg "Malware.Expert - user-agent: Webshell user-agent"] [hostname "ampsstudio.com"] [uri "/error.php"] [unique_id "YxCeEG-wYKxtUiaGq3JEAgAAAAA"] ampsstudio.com [Thu Sep 01 12:57:05 2022] [error] [client 20.111.51.222:0] [client 20.111.51.222] ModSecurity: Access denied with connection close (phase 2). Pattern match "^wp_is_mobile$" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "420038"] [msg "Malware.Expert - user-agent: Webshell user-agent"] [hostname "ampsstudio.com"] [uri "/ALFA_DATA"] [unique_id "YxCeEevXfFELJw_XED_aBwAAAAU"] ampsstudio.com [Thu Sep 01 12:57:08 2022] [error] [client 20.111.51.222:0] [client 20.111.51.222] ModSecurity: Access denied with connection close (phase 2). Pattern match "^wp_is_mobile$" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "420038"] [msg "Malware.Expert - user-agent: Webshell user-agent"] [hostname "ampsstudio.com"] [uri "/alfacgiapi"] [unique_id "YxCeFE5nXug0jUKW5ggyyQAAAAs"] ampsstudio.com [Thu Sep 01 12:57:11 2022] [error] [client 20.111.51.222:0] [client 20.111.51.222] ModSecurity: Access denied with connection close (phase 2). Pattern match "^wp_is_mobile$" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "420038"] [msg "Malware.Expert - user-agent: Webshell user-agent"] [hostname "ampsstudio.com"] [uri "/cgialfa"] [unique_id "YxCeF6UAIJYlZWqGwJRWIgAAAAM"] ampsstudio.com [Thu Sep 01 12:57:29 2022] [crit] [client 20.111.51.222:0] AH00529: /home/virtual/vps-aa3942/a/aede5353c4/public_html/.well-known/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/virtual/vps-aa3942/a/aede5353c4/public_html/.well-known/' is executable ampsstudio.com [Thu Sep 01 12:57:31 2022] [crit] [client 20.111.51.222:0] AH00529: /home/virtual/vps-aa3942/a/aede5353c4/public_html/.well-known/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/virtual/vps-aa3942/a/aede5353c4/public_html/.well-known/' is executable ampsstudio.com [Thu Sep 01 12:57:35 2022] [crit] [client 20.111.51.222:0] AH00529: /home/virtual/vps-aa3942/a/aede5353c4/public_html/.well-known/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/virtual/vps-aa3942/a/aede5353c4/public_html/.well-known/' is executable ampsstudio.com [Thu Sep 01 12:57:38 2022] [error] [client 20.111.51.222:0] [client 20.111.51.222] ModSecurity: Access denied with connection close (phase 2). Pattern match "^wp_is_mobile$" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "420038"] [msg "Malware.Expert - user-agent: Webshell user-agent"] [hostname "ampsstudio.com"] [uri "/wp-content/uploads/ALFA_DATA"] [unique_id "YxCeMgnK7ZwkdOAZV0jevQAAAAo"] ampsstudio.com [Thu Sep 01 12:57:40 2022] [error] [client 20.111.51.222:0] [client 20.111.51.222] ModSecurity: Access denied with connection close (phase 2). Pattern match "^wp_is_mobile$" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "420038"] [msg "Malware.Expert - user-agent: Webshell user-agent"] [hostname "ampsstudio.com"] [uri "/wp-content/uploads/alfacgiapi"] [unique_id "YxCeNPLjqwsSTJc2pjdwMQAAAAE"] ampsstudio.com [Thu Sep 01 12:57:43 2022] [error] [client 20.111.51.222:0] [client 20.111.51.222] ModSecurity: Access denied with connection close (phase 2). Pattern match "^wp_is_mobile$" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "420038"] [msg "Malware.Expert - user-agent: Webshell user-agent"] [hostname "ampsstudio.com"] [uri "/wp-content/uploads/cgialfa"] [unique_id "YxCeN4OhSK1R2wCT21kLIwAAAAY"] ampsstudio.com [Thu Sep 01 12:57:45 2022] [error] [client 20.111.51.222:0] [client 20.111.51.222] ModSecurity: Access denied with connection close (phase 2). Pattern match "^wp_is_mobile$" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "420038"] [msg "Malware.Expert - user-agent: Webshell user-agent"] [hostname "ampsstudio.com"] [uri "/wp-includes/ALFA_DATA"] [unique_id "YxCeOW-wYKxtUiaGq3JEAwAAAAA"] ampsstudio.com [Thu Sep 01 12:57:47 2022] [error] [client 20.111.51.222:0] [client 20.111.51.222] ModSecurity: Access denied with connection close (phase 2). Pattern match "^wp_is_mobile$" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "420038"] [msg "Malware.Expert - user-agent: Webshell user-agent"] [hostname "ampsstudio.com"] [uri "/wp-includes/alfacgiapi"] [unique_id "YxCeO3Pi_BeXP9GTQpJQpQAAAAQ"] ampsstudio.com [Thu Sep 01 12:57:49 2022] [error] [client 20.111.51.222:0] [client 20.111.51.222] ModSecurity: Access denied with connection close (phase 2). Pattern match "^wp_is_mobile$" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "420038"] [msg "Malware.Expert - user-agent: Webshell user-agent"] [hostname "ampsstudio.com"] [uri "/wp-includes/cgialfa"] [unique_id "YxCePbwRl414_smjJCbLfAAAAAw"] ampsstudio.com [Thu Sep 01 12:57:51 2022] [error] [client 20.111.51.222:0] [client 20.111.51.222] ModSecurity: Access denied with connection close (phase 2). Pattern match "^wp_is_mobile$" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "420038"] [msg "Malware.Expert - user-agent: Webshell user-agent"] [hostname "ampsstudio.com"] [uri "/wp-admin/ALFA_DATA"] [unique_id "YxCePzirrHdMR3etwoLIhQAAAAk"] ampsstudio.com [Thu Sep 01 13:04:10 2022] [error] [client 20.111.51.222:0] [client 20.111.51.222] ModSecurity: Access denied with connection close (phase 2). Pattern match "^wp_is_mobile$" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "420038"] [msg "Malware.Expert - user-agent: Webshell user-agent"] [hostname "ampsstudio.com"] [uri "/wp-admin/alfacgiapi"] [unique_id "YxCfuk5nXug0jUKW5ggyzgAAAAs"] ampsstudio.com [Thu Sep 01 13:04:12 2022] [error] [client 20.111.51.222:0] [client 20.111.51.222] ModSecurity: Access denied with connection close (phase 2). Pattern match "^wp_is_mobile$" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "420038"] [msg "Malware.Expert - user-agent: Webshell user-agent"] [hostname "ampsstudio.com"] [uri "/wp-admin/cgialfa"] [unique_id "YxCfvOvXfFELJw_XED_aCwAAAAU"] ampsstudio.com [Thu Sep 01 13:04:14 2022] [error] [client 20.111.51.222:0] [client 20.111.51.222] ModSecurity: Access denied with connection close (phase 2). Pattern match "^wp_is_mobile$" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "420038"] [msg "Malware.Expert - user-agent: Webshell user-agent"] [hostname "ampsstudio.com"] [uri "/wp-content/ALFA_DATA"] [unique_id "YxCfvoOhSK1R2wCT21kLJwAAAAY"] ampsstudio.com [Thu Sep 01 13:04:17 2022] [error] [client 20.111.51.222:0] [client 20.111.51.222] ModSecurity: Access denied with connection close (phase 2). Pattern match "^wp_is_mobile$" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "420038"] [msg "Malware.Expert - user-agent: Webshell user-agent"] [hostname "ampsstudio.com"] [uri "/wp-content/alfacgiapi"] [unique_id "YxCfwaUAIJYlZWqGwJRWJwAAAAM"] ampsstudio.com [Thu Sep 01 13:04:19 2022] [error] [client 20.111.51.222:0] [client 20.111.51.222] ModSecurity: Access denied with connection close (phase 2). Pattern match "^wp_is_mobile$" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "420038"] [msg "Malware.Expert - user-agent: Webshell user-agent"] [hostname "ampsstudio.com"] [uri "/wp-content/cgialfa"] [unique_id "YxCfw2-wYKxtUiaGq3JEBwAAAAA"] ampsstudio.com [Thu Sep 01 13:04:21 2022] [error] [client 20.111.51.222:0] [client 20.111.51.222] ModSecurity: Access denied with connection close (phase 2). Pattern match "^wp_is_mobile$" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "420038"] [msg "Malware.Expert - user-agent: Webshell user-agent"] [hostname "ampsstudio.com"] [uri "/templates/beez3/ALFA_DATA"] [unique_id "YxCfxXPi_BeXP9GTQpJQqQAAAAQ"] ampsstudio.com [Thu Sep 01 13:04:23 2022] [error] [client 20.111.51.222:0] [client 20.111.51.222] ModSecurity: Access denied with connection close (phase 2). Pattern match "^wp_is_mobile$" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "420038"] [msg "Malware.Expert - user-agent: Webshell user-agent"] [hostname "ampsstudio.com"] [uri "/templates/beez3/alfacgiapi"] [unique_id "YxCfxzirrHdMR3etwoLIiQAAAAk"] ampsstudio.com [Thu Sep 01 13:04:26 2022] [error] [client 20.111.51.222:0] [client 20.111.51.222] ModSecurity: Access denied with connection close (phase 2). Pattern match "^wp_is_mobile$" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "420038"] [msg "Malware.Expert - user-agent: Webshell user-agent"] [hostname "ampsstudio.com"] [uri "/templates/beez3/cgialfa"] [unique_id "YxCfyrwRl414_smjJCbLgAAAAAw"] ampsstudio.com [Thu Sep 01 13:04:43 2022] [error] [client 20.111.51.222:0] [client 20.111.51.222] ModSecurity: Access denied with connection close (phase 2). Pattern match "^wp_is_mobile$" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "420038"] [msg "Malware.Expert - user-agent: Webshell user-agent"] [hostname "ampsstudio.com"] [uri "/sites/default/files/ALFA_DATA"] [unique_id "YxCf2_LjqwsSTJc2pjdwNgAAAAE"] ampsstudio.com [Thu Sep 01 13:04:44 2022] [error] [client 20.111.51.222:0] [client 20.111.51.222] ModSecurity: Access denied with connection close (phase 2). Pattern match "^wp_is_mobile$" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "420038"] [msg "Malware.Expert - user-agent: Webshell user-agent"] [hostname "ampsstudio.com"] [uri "/sites/default/files/alfacgiapi"] [unique_id "YxCf3AnK7ZwkdOAZV0jewgAAAAo"] ampsstudio.com [Thu Sep 01 13:04:46 2022] [error] [client 20.111.51.222:0] [client 20.111.51.222] ModSecurity: Access denied with connection close (phase 2). Pattern match "^wp_is_mobile$" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "420038"] [msg "Malware.Expert - user-agent: Webshell user-agent"] [hostname "ampsstudio.com"] [uri "/sites/default/files/cgialfa"] [unique_id "YxCf3k5nXug0jUKW5ggyzwAAAAs"] ampsstudio.com [Thu Sep 01 13:04:48 2022] [error] [client 20.111.51.222:0] [client 20.111.51.222] ModSecurity: Access denied with connection close (phase 2). Pattern match "^wp_is_mobile$" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "420038"] [msg "Malware.Expert - user-agent: Webshell user-agent"] [hostname "ampsstudio.com"] [uri "/admin/controller/extension/extension/ALFA_DATA"] [unique_id "YxCf4OvXfFELJw_XED_aDAAAAAU"] ampsstudio.com [Thu Sep 01 13:04:50 2022] [error] [client 20.111.51.222:0] [client 20.111.51.222] ModSecurity: Access denied with connection close (phase 2). Pattern match "^wp_is_mobile$" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "420038"] [msg "Malware.Expert - user-agent: Webshell user-agent"] [hostname "ampsstudio.com"] [uri "/admin/controller/extension/extension/alfacgiapi"] [unique_id "YxCf4oOhSK1R2wCT21kLKAAAAAY"] ampsstudio.com [Thu Sep 01 13:04:52 2022] [error] [client 20.111.51.222:0] [client 20.111.51.222] ModSecurity: Access denied with connection close (phase 2). Pattern match "^wp_is_mobile$" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "420038"] [msg "Malware.Expert - user-agent: Webshell user-agent"] [hostname "ampsstudio.com"] [uri "/admin/controller/extension/extension/cgialfa"] [unique_id "YxCf5KUAIJYlZWqGwJRWKAAAAAM"] ampsstudio.com [Thu Sep 01 13:04:54 2022] [error] [client 20.111.51.222:0] [client 20.111.51.222] ModSecurity: Access denied with connection close (phase 2). Pattern match "^wp_is_mobile$" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "420038"] [msg "Malware.Expert - user-agent: Webshell user-agent"] [hostname "ampsstudio.com"] [uri "/wp-content/plugins/ubh/up.php"] [unique_id "YxCf5m-wYKxtUiaGq3JECAAAAAA"] ampsstudio.com [Thu Sep 01 13:04:56 2022] [error] [client 20.111.51.222:0] [client 20.111.51.222] ModSecurity: Access denied with connection close (phase 2). Pattern match "^wp_is_mobile$" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "420038"] [msg "Malware.Expert - user-agent: Webshell user-agent"] [hostname "ampsstudio.com"] [uri "/index.php"] [unique_id "YxCf6HPi_BeXP9GTQpJQqgAAAAQ"] ampsstudio.com [Thu Sep 01 13:04:58 2022] [error] [client 20.111.51.222:0] [client 20.111.51.222] ModSecurity: Access denied with connection close (phase 2). Pattern match "^wp_is_mobile$" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "420038"] [msg "Malware.Expert - user-agent: Webshell user-agent"] [hostname "ampsstudio.com"] [uri "/olux.php"] [unique_id "YxCf6jirrHdMR3etwoLIigAAAAk"] ampsstudio.com [Thu Sep 01 13:05:00 2022] [error] [client 20.111.51.222:0] [client 20.111.51.222] ModSecurity: Access denied with connection close (phase 2). Pattern match "^wp_is_mobile$" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "420038"] [msg "Malware.Expert - user-agent: Webshell user-agent"] [hostname "ampsstudio.com"] [uri "/xleet.php"] [unique_id "YxCf7LwRl414_smjJCbLgQAAAAw"] ampsstudio.com [Thu Sep 01 13:05:02 2022] [error] [client 20.111.51.222:0] [client 20.111.51.222] ModSecurity: Access denied with connection close (phase 2). Pattern match "^wp_is_mobile$" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "420038"] [msg "Malware.Expert - user-agent: Webshell user-agent"] [hostname "ampsstudio.com"] [uri "/wso.php"] [unique_id "YxCf7vLjqwsSTJc2pjdwNwAAAAE"] ampsstudio.com [Thu Sep 01 13:05:04 2022] [error] [client 20.111.51.222:0] [client 20.111.51.222] ModSecurity: Access denied with connection close (phase 2). Pattern match "^wp_is_mobile$" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "420038"] [msg "Malware.Expert - user-agent: Webshell user-agent"] [hostname "ampsstudio.com"] [uri "/shell.php"] [unique_id "YxCf8AnK7ZwkdOAZV0jewwAAAAo"] ampsstudio.com [Thu Sep 01 13:05:05 2022] [error] [client 20.111.51.222:0] [client 20.111.51.222] ModSecurity: Access denied with connection close (phase 2). Pattern match "^wp_is_mobile$" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "420038"] [msg "Malware.Expert - user-agent: Webshell user-agent"] [hostname "ampsstudio.com"] [uri "/up.php"] [unique_id "YxCf8U5nXug0jUKW5ggy0AAAAAs"] ampsstudio.com [Thu Sep 01 13:05:07 2022] [error] [client 20.111.51.222:0] [client 20.111.51.222] ModSecurity: Access denied with connection close (phase 2). Pattern match "^wp_is_mobile$" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "420038"] [msg "Malware.Expert - user-agent: Webshell user-agent"] [hostname "ampsstudio.com"] [uri "/upload.php"] [unique_id "YxCf8-vXfFELJw_XED_aDQAAAAU"] ampsstudio.com [Thu Sep 01 13:05:08 2022] [error] [client 20.111.51.222:0] [client 20.111.51.222] ModSecurity: Access denied with connection close (phase 2). Pattern match "^wp_is_mobile$" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "420038"] [msg "Malware.Expert - user-agent: Webshell user-agent"] [hostname "ampsstudio.com"] [uri "/1.php"] [unique_id "YxCf9IOhSK1R2wCT21kLKQAAAAY"] ampsstudio.com [Thu Sep 01 13:05:10 2022] [error] [client 20.111.51.222:0] [client 20.111.51.222] ModSecurity: Access denied with connection close (phase 2). Pattern match "^wp_is_mobile$" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "420038"] [msg "Malware.Expert - user-agent: Webshell user-agent"] [hostname "ampsstudio.com"] [uri "/x.php"] [unique_id "YxCf9qUAIJYlZWqGwJRWKQAAAAM"] ampsstudio.com [Thu Sep 01 13:05:12 2022] [error] [client 20.111.51.222:0] [client 20.111.51.222] ModSecurity: Access denied with connection close (phase 2). Pattern match "^wp_is_mobile$" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "420038"] [msg "Malware.Expert - user-agent: Webshell user-agent"] [hostname "ampsstudio.com"] [uri "/z.php"] [unique_id "YxCf-G-wYKxtUiaGq3JECQAAAAA"] ampsstudio.com [Thu Sep 01 13:05:18 2022] [error] [client 20.111.51.222:0] [client 20.111.51.222] ModSecurity: Access denied with connection close (phase 2). Pattern match "^wp_is_mobile$" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "420038"] [msg "Malware.Expert - user-agent: Webshell user-agent"] [hostname "ampsstudio.com"] [uri "/a.php"] [unique_id "YxCf_nPi_BeXP9GTQpJQqwAAAAQ"] ampsstudio.com [Thu Sep 01 13:05:19 2022] [error] [client 20.111.51.222:0] [client 20.111.51.222] ModSecurity: Access denied with connection close (phase 2). Pattern match "^wp_is_mobile$" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "420038"] [msg "Malware.Expert - user-agent: Webshell user-agent"] [hostname "ampsstudio.com"] [uri "/test.php"] [unique_id "YxCf_zirrHdMR3etwoLIiwAAAAk"] ampsstudio.com [Thu Sep 01 13:05:21 2022] [error] [client 20.111.51.222:0] [client 20.111.51.222] ModSecurity: Access denied with connection close (phase 2). Pattern match "^wp_is_mobile$" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "420038"] [msg "Malware.Expert - user-agent: Webshell user-agent"] [hostname "ampsstudio.com"] [uri "/wp.php"] [unique_id "YxCgAbwRl414_smjJCbLggAAAAw"] ampsstudio.com [Thu Sep 01 13:05:23 2022] [error] [client 20.111.51.222:0] [client 20.111.51.222] ModSecurity: Access denied with connection close (phase 2). Pattern match "^wp_is_mobile$" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "420038"] [msg "Malware.Expert - user-agent: Webshell user-agent"] [hostname "ampsstudio.com"] [uri "/alfa.php"] [unique_id "YxCgA_LjqwsSTJc2pjdwOAAAAAE"] ampsstudio.com [Thu Sep 01 13:05:31 2022] [error] [client 20.111.51.222:0] [client 20.111.51.222] ModSecurity: Access denied with connection close (phase 2). Pattern match "^wp_is_mobile$" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "420038"] [msg "Malware.Expert - user-agent: Webshell user-agent"] [hostname "ampsstudio.com"] [uri "/config.php"] [unique_id "YxCgCwnK7ZwkdOAZV0jexAAAAAo"] ampsstudio.com [Thu Sep 01 13:05:33 2022] [error] [client 20.111.51.222:0] [client 20.111.51.222] ModSecurity: Access denied with connection close (phase 2). Pattern match "^wp_is_mobile$" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "420038"] [msg "Malware.Expert - user-agent: Webshell user-agent"] [hostname "ampsstudio.com"] [uri "/templates/beez3/index.php"] [unique_id "YxCgDU5nXug0jUKW5ggy0QAAAAs"] ampsstudio.com [Thu Sep 01 13:05:35 2022] [error] [client 20.111.51.222:0] [client 20.111.51.222] ModSecurity: Access denied with connection close (phase 2). Pattern match "^wp_is_mobile$" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "420038"] [msg "Malware.Expert - user-agent: Webshell user-agent"] [hostname "ampsstudio.com"] [uri "/about.php"] [unique_id "YxCgD-vXfFELJw_XED_aDgAAAAU"] ampsstudio.com [Thu Sep 01 13:05:38 2022] [error] [client 20.111.51.222:0] [client 20.111.51.222] ModSecurity: Access denied with connection close (phase 2). Pattern match "^wp_is_mobile$" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "420038"] [msg "Malware.Expert - user-agent: Webshell user-agent"] [hostname "ampsstudio.com"] [uri "/shells.php"] [unique_id "YxCgEoOhSK1R2wCT21kLKgAAAAY"] www.ampsstudio.com [Thu Sep 01 13:15:03 2022] [error] [client 109.173.100.69:0] AH01071: Got error 'PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179' www.ampsstudio.com [Thu Sep 01 13:15:03 2022] [error] [client 109.173.100.69:0] AH01071: Got error 'PHP message: PHP Warning: Cannot modify header information - headers already sent by (output started at /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-includes/functions.php:5275) in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/includes/sonaar-music/css/theme/custom-style.php on line 2' www.ampsstudio.com [Thu Sep 01 13:33:54 2022] [error] [client 62.102.148.68:0] AH01071: Got error 'PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179' www.ampsstudio.com [Thu Sep 01 13:33:54 2022] [error] [client 62.102.148.68:0] AH01071: Got error 'PHP message: PHP Warning: Cannot modify header information - headers already sent by (output started at /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-includes/functions.php:5275) in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/includes/sonaar-music/css/theme/custom-style.php on line 2' www.ampsstudio.com [Thu Sep 01 14:30:48 2022] [error] [client 23.154.177.8:0] AH01071: Got error 'PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179' www.ampsstudio.com [Thu Sep 01 14:30:48 2022] [error] [client 23.154.177.8:0] AH01071: Got error 'PHP message: PHP Warning: Cannot modify header information - headers already sent by (output started at /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-includes/functions.php:5275) in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/includes/sonaar-music/css/theme/custom-style.php on line 2' www.ampsstudio.com [Thu Sep 01 14:56:05 2022] [error] [client 51.142.139.249:0] [client 51.142.139.249] ModSecurity: Access denied with code 403 (phase 2). Match of "contains index.php" against "REQUEST_URI" required. [file "remote server"] [line "-1"] [id "570076"] [msg "Malware.Expert - Malware"] [hostname "www.ampsstudio.com"] [uri "/wp-commentin.php"] [unique_id "YxC59aUAIJYlZWqGwJRWfgAAAAM"] www.ampsstudio.com [Thu Sep 01 14:56:20 2022] [error] [client 51.142.139.249:0] [client 51.142.139.249] ModSecurity: Access denied with code 403 (phase 2). Match of "contains index.php" against "REQUEST_URI" required. [file "remote server"] [line "-1"] [id "570076"] [msg "Malware.Expert - Malware"] [hostname "www.ampsstudio.com"] [uri "/wp-commentin.php"] [unique_id "YxC6BDirrHdMR3etwoLI2wAAAAk"] ampsstudio.com [Thu Sep 01 15:15:08 2022] [error] [client 20.213.237.233:0] [client 20.213.237.233] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "ampsstudio.com"] [uri "/.env"] [unique_id "YxC-bIOhSK1R2wCT21kLiAAAAAY"] ampsstudio.com [Thu Sep 01 15:15:09 2022] [error] [client 20.213.237.233:0] [client 20.213.237.233] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "ampsstudio.com"] [uri "/.env.example"] [unique_id "YxC-bQnK7ZwkdOAZV0jfKAAAAAo"] ampsstudio.com [Thu Sep 01 15:15:11 2022] [error] [client 20.213.237.233:0] [client 20.213.237.233] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "ampsstudio.com"] [uri "/.env.old"] [unique_id "YxC-b7wRl414_smjJCbL4QAAAAw"] ampsstudio.com [Thu Sep 01 15:15:13 2022] [error] [client 20.213.237.233:0] [client 20.213.237.233] ModSecurity: Access denied with code 403 (phase 2). String match ".aws/credentials" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430069"] [msg "Malware.Expert - request_uri: AWS Credentials"] [hostname "ampsstudio.com"] [uri "/.aws/credentials"] [unique_id "YxC-cXjTb4m18O422dxhQQAAAAc"] ampsstudio.com [Thu Sep 01 15:15:56 2022] [error] [client 20.213.237.233:0] [client 20.213.237.233] ModSecurity: Access denied with code 403 (phase 2). Pattern match ".+wp-config\\\\..*" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430005"] [msg "Malware.Expert - request_uri: read wordpress configuration file"] [hostname "ampsstudio.com"] [uri "/wp-config.php.bak"] [unique_id "YxC-nIOhSK1R2wCT21kLjQAAAAY"] ampsstudio.com [Thu Sep 01 15:15:58 2022] [error] [client 20.213.237.233:0] [client 20.213.237.233] ModSecurity: Access denied with code 403 (phase 2). String match ".php.bak" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430068"] [msg "Malware.Expert - request_uri: .PHP backup files"] [hostname "ampsstudio.com"] [uri "/settings.php.bak"] [unique_id "YxC-nrwRl414_smjJCbL5gAAAAw"] ampsstudio.com [Thu Sep 01 15:16:13 2022] [error] [client 20.213.237.233:0] [client 20.213.237.233] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "ampsstudio.com"] [uri "/.env.bak"] [unique_id "YxC-rXjTb4m18O422dxhRgAAAAc"] ampsstudio.com [Thu Sep 01 15:16:32 2022] [error] [client 20.213.237.233:0] [client 20.213.237.233] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "ampsstudio.com"] [uri "/.env.dev.local"] [unique_id "YxC-wHjTb4m18O422dxhRwAAAAc"] ampsstudio.com [Thu Sep 01 15:16:47 2022] [error] [client 20.213.237.233:0] [client 20.213.237.233] ModSecurity: Access denied with code 403 (phase 2). String match "/.git/config" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430058"] [msg "Malware.Expert - request_uri: .git config"] [hostname "ampsstudio.com"] [uri "/.git/config"] [unique_id "YxC-z6UAIJYlZWqGwJRWlQAAAAM"] www.ampsstudio.com [Thu Sep 01 17:01:55 2022] [error] [client 122.176.206.32:0] AH01071: Got error 'PHP message: PHP Warning: Cannot modify header information - headers already sent by (output started at /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-includes/functions.php:5275) in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/includes/sonaar-music/css/theme/custom-style.php on line 2' ampsstudio.com [Thu Sep 01 17:23:43 2022] [error] [client 20.248.198.120:0] [client 20.248.198.120] ModSecurity: Access denied with code 403 (phase 2). String match "/.git/config" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430058"] [msg "Malware.Expert - request_uri: .git config"] [hostname "ampsstudio.com"] [uri "/.git/config"] [unique_id "YxDcjtGhW_bEz2fV6HCfoQAAAAQ"] ampsstudio.com [Thu Sep 01 18:33:45 2022] [error] [client 20.111.29.83:0] AH01276: Cannot serve directory /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-admin/css/: No matching DirectoryIndex (index.php,index.html,index.htm) found, and server-generated directory index forbidden by Options directive ampsstudio.com [Thu Sep 01 18:52:30 2022] [error] [client 20.163.104.128:0] AH01276: Cannot serve directory /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-admin/css/: No matching DirectoryIndex (index.php,index.html,index.htm) found, and server-generated directory index forbidden by Options directive ampsstudio.com [Thu Sep 01 19:16:21 2022] [error] [client 80.76.51.29:0] AH01276: Cannot serve directory /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-admin/includes/: No matching DirectoryIndex (index.php,index.html,index.htm) found, and server-generated directory index forbidden by Options directive www.ampsstudio.com [Thu Sep 01 20:12:41 2022] [error] [client 185.107.80.192:0] AH01071: Got error 'PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179' www.ampsstudio.com [Thu Sep 01 20:12:41 2022] [error] [client 185.107.80.192:0] AH01071: Got error 'PHP message: PHP Warning: Cannot modify header information - headers already sent by (output started at /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-includes/functions.php:5275) in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/includes/sonaar-music/css/theme/custom-style.php on line 2' www.ampsstudio.com [Thu Sep 01 21:42:14 2022] [error] [client 196.196.216.136:0] AH01071: Got error 'PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179' www.ampsstudio.com [Thu Sep 01 21:42:14 2022] [error] [client 196.196.216.136:0] AH01071: Got error 'PHP message: PHP Warning: Cannot modify header information - headers already sent by (output started at /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-includes/functions.php:5275) in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/includes/sonaar-music/css/theme/custom-style.php on line 2' mail.ampsstudio.com [Thu Sep 01 22:57:47 2022] [error] [client 175.100.20.208:0] [client 175.100.20.208] ModSecurity: Access denied with code 403 (phase 2). String match "/wso.php" at REQUEST_URI. [file "remote server"] [line "-1"] [id "570066"] [msg "Malware.Expert - PHP Command Shell (WSO)"] [hostname "mail.ampsstudio.com"] [uri "/WSO.php"] [unique_id "YxEq2_LjqwsSTJc2pjdxrwAAAAE"] mail.ampsstudio.com [Thu Sep 01 22:58:30 2022] [error] [client 175.100.20.208:0] [client 175.100.20.208] ModSecurity: Access denied with code 403 (phase 2). Pattern match "/\\\\..+\\\\.php" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430015"] [msg "Malware.Expert - request_uri: hidden .php execute"] [hostname "mail.ampsstudio.com"] [uri "/.wp-cache.php"] [unique_id "YxErBvLjqwsSTJc2pjdxtQAAAAE"] ampsstudio.com [Thu Sep 01 23:17:31 2022] [error] [client 103.242.232.8:0] [client 103.242.232.8] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "ampsstudio.com"] [uri "/.env"] [unique_id "YxEve6UAIJYlZWqGwJRXtQAAAAM"] www.ampsstudio.com [Thu Sep 01 23:57:47 2022] [error] [client 51.11.6.150:0] AH01071: Got error 'PHP message: PHP Warning: Undefined array key "HTTP_USER_AGENT" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/bookly-responsive-appointment-booking-tool/frontend/modules/booking/ShortCode.php on line 66' www.ampsstudio.com [Fri Sep 02 00:02:01 2022] [error] [client 172.94.53.34:0] AH01071: Got error 'PHP message: PHP Warning: Cannot modify header information - headers already sent by (output started at /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-includes/functions.php:5275) in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/includes/sonaar-music/css/theme/custom-style.php on line 2' webdisk.ampsstudio.com [Fri Sep 02 04:19:16 2022] [error] [client 41.216.188.45:0] AH01276: Cannot serve directory /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-admin/css/: No matching DirectoryIndex (index.php,index.html,index.htm) found, and server-generated directory index forbidden by Options directive ampsstudio.com [Fri Sep 02 06:28:07 2022] [error] [client 104.211.35.73:0] [client 104.211.35.73] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "ampsstudio.com"] [uri "/.env"] [unique_id "YxGUZ_4Z33HwYQyE6D7NjAAAAAI"] ampsstudio.com [Fri Sep 02 06:28:08 2022] [error] [client 104.211.35.73:0] [client 104.211.35.73] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "ampsstudio.com"] [uri "/.env.bak"] [unique_id "YxGUaIWKtqTsRh9cjeaGaQAAAAo"] ampsstudio.com [Fri Sep 02 06:28:10 2022] [error] [client 104.211.35.73:0] [client 104.211.35.73] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "ampsstudio.com"] [uri "/laravel/.env"] [unique_id "YxGUauBSLL7WH_YltUw7lgAAAAg"] ampsstudio.com [Fri Sep 02 06:28:10 2022] [error] [client 104.211.35.73:0] [client 104.211.35.73] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "ampsstudio.com"] [uri "/local/.env"] [unique_id "YxGUagAlNZb8v1LpY0fGgQAAAAM"] ampsstudio.com [Fri Sep 02 06:28:11 2022] [error] [client 104.211.35.73:0] [client 104.211.35.73] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "ampsstudio.com"] [uri "/cgi-bin/.env"] [unique_id "YxGUa5Dd7-0sO0sWCMJYVgAAAAE"] ampsstudio.com [Fri Sep 02 06:28:11 2022] [error] [client 104.211.35.73:0] [client 104.211.35.73] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "ampsstudio.com"] [uri "/backend/.env"] [unique_id "YxGUa1HjZ0S_GBFwEXRGPQAAAAs"] ampsstudio.com [Fri Sep 02 06:28:26 2022] [error] [client 104.211.35.73:0] [client 104.211.35.73] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "ampsstudio.com"] [uri "/protected/.env"] [unique_id "YxGUen9xRWuDdMu4_KAQ9wAAAAU"] ampsstudio.com [Fri Sep 02 06:28:26 2022] [error] [client 104.211.35.73:0] [client 104.211.35.73] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "ampsstudio.com"] [uri "/database/.env"] [unique_id "YxGUeuBSLL7WH_YltUw7lwAAAAg"] ampsstudio.com [Fri Sep 02 06:28:27 2022] [error] [client 104.211.35.73:0] [client 104.211.35.73] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "ampsstudio.com"] [uri "/public/.env"] [unique_id "YxGUewAlNZb8v1LpY0fGggAAAAM"] ampsstudio.com [Fri Sep 02 06:28:27 2022] [error] [client 104.211.35.73:0] [client 104.211.35.73] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "ampsstudio.com"] [uri "/app/config/.env"] [unique_id "YxGUe5Dd7-0sO0sWCMJYVwAAAAE"] ampsstudio.com [Fri Sep 02 06:28:27 2022] [error] [client 104.211.35.73:0] [client 104.211.35.73] ModSecurity: Access denied with code 403 (phase 2). String match ".aws/credentials" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430069"] [msg "Malware.Expert - request_uri: AWS Credentials"] [hostname "ampsstudio.com"] [uri "/.aws/credentials"] [unique_id "YxGUe70IRLrhscOTgMBgCwAAAAA"] ampsstudio.com [Fri Sep 02 08:35:13 2022] [error] [client 137.117.232.115:0] [client 137.117.232.115] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "ampsstudio.com"] [uri "/.env"] [unique_id "YxGyMQAlNZb8v1LpY0fGuAAAAAM"] ampsstudio.com [Fri Sep 02 08:35:55 2022] [error] [client 137.117.232.115:0] [client 137.117.232.115] ModSecurity: Access denied with code 403 (phase 2). String match "/Util/PHP/eval-stdin.php" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430046"] [msg "Malware.Expert - request_uri: CVE-2017-9841"] [hostname "ampsstudio.com"] [uri "/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php"] [unique_id "YxGyW5Dd7-0sO0sWCMJYkgAAAAE"] mail.ampsstudio.com [Fri Sep 02 08:39:46 2022] [error] [client 156.146.63.157:0] [client 156.146.63.157] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "mail.ampsstudio.com"] [uri "/.env"] [unique_id "YxGzQn9xRWuDdMu4_KARMQAAAAU"] www.ampsstudio.com [Fri Sep 02 09:40:37 2022] [error] [client 52.55.214.25:0] [client 52.55.214.25] ModSecurity: Access denied with code 403 (phase 2). String match "/.git/config" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430058"] [msg "Malware.Expert - request_uri: .git config"] [hostname "www.ampsstudio.com"] [uri "/.git/config"] [unique_id "YxHBhYWKtqTsRh9cjeaHFQAAAAo"] webmail.ampsstudio.com [Fri Sep 02 09:41:13 2022] [error] [client 156.146.63.157:0] [client 156.146.63.157] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "webmail.ampsstudio.com"] [uri "/.env"] [unique_id "YxHBqYWKtqTsRh9cjeaHFwAAAAo"] cpanel.ampsstudio.com [Fri Sep 02 10:45:52 2022] [error] [client 41.216.188.45:0] AH01276: Cannot serve directory /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-admin/css/: No matching DirectoryIndex (index.php,index.html,index.htm) found, and server-generated directory index forbidden by Options directive www.ampsstudio.com [Fri Sep 02 11:02:10 2022] [error] [client 3.19.27.203:0] AH01071: Got error 'PHP message: PHP Warning: Undefined array key "HTTP_USER_AGENT" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/bookly-responsive-appointment-booking-tool/frontend/modules/booking/ShortCode.php on line 66' cpanel.ampsstudio.com [Fri Sep 02 13:05:45 2022] [error] [client 156.146.63.157:0] [client 156.146.63.157] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "cpanel.ampsstudio.com"] [uri "/.env"] [unique_id "YxHxmRW9bDsQqyzUAWlAvwAAAAA"] ampsstudio.com [Fri Sep 02 14:45:35 2022] [error] [client 156.146.63.157:0] [client 156.146.63.157] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "ampsstudio.com"] [uri "/.env"] [unique_id "YxII_pYNs3jY0Fv93G59jAAAAAE"] www.ampsstudio.com [Fri Sep 02 15:08:09 2022] [error] [client 66.249.66.89:0] AH01071: Got error 'PHP message: PHP Warning: Attempt to read property "post_content" on null in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/wordpress-seo/src/memoizers/meta-tags-context-memoizer.php on line 140PHP message: PHP Warning: Attempt to read property "post_modified_gmt" on null in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/wordpress-seo/src/presentations/indexable-post-type-presentation.php on line 289PHP message: PHP Warning: Attempt to read property "post_date_gmt" on null in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/wordpress-seo/src/presentations/indexable-post-type-presentation.php on line 289PHP message: PHP Warning: Attempt to read property "post_author" on null in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/wordpress-seo/src/presenters/slack/enhanced-data-presenter.php on line 46PHP message: PHP Warning: Attempt to read property "post_date_gmt" on null in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/wordpress-seo/src/generators/schema/webpage.php on line 51PHP message: PHP Warning: Attempt to read property "post_modified_gmt" on null in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/wordpress-seo/src/generators/schema/webpage.php on line 52PHP message: PHP Warning: Undefined array key 0 in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/includes/classes/iron_sonaar.class.php on line 212PHP message: PHP Warning: Trying to access array offset on value of type null in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/includes/classes/iron_sonaar.class.php on line 212PHP message: PHP Warning: Undefined array key 0 in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/includes/classes/iron_sonaar.class.php on line 214PHP message: PHP Warning: Trying to access array offset on value of type null in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/includes/classes/iron_sonaar.class.php on line 214' mail.ampsstudio.com [Fri Sep 02 15:52:24 2022] [error] [client 156.146.63.157:0] [client 156.146.63.157] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "mail.ampsstudio.com"] [uri "/.env"] [unique_id "YxIYp6awwRiHdjjATLxQEwAAAAw"] www.ampsstudio.com [Fri Sep 02 15:55:26 2022] [error] [client 51.11.6.150:0] AH01071: Got error 'PHP message: PHP Warning: Undefined array key "HTTP_USER_AGENT" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/bookly-responsive-appointment-booking-tool/frontend/modules/booking/ShortCode.php on line 66' webdisk.ampsstudio.com [Fri Sep 02 17:15:51 2022] [error] [client 156.146.63.157:0] [client 156.146.63.157] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "webdisk.ampsstudio.com"] [uri "/.env"] [unique_id "YxIsN4GnxtPcdppxMoAoeQAAAAI"] www.ampsstudio.com [Fri Sep 02 19:57:45 2022] [error] [client 88.147.152.99:0] AH01071: Got error 'PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179' www.ampsstudio.com [Fri Sep 02 19:57:45 2022] [error] [client 88.147.152.99:0] AH01071: Got error 'PHP message: PHP Warning: Cannot modify header information - headers already sent by (output started at /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-includes/functions.php:5275) in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/includes/sonaar-music/css/theme/custom-style.php on line 2' www.ampsstudio.com [Fri Sep 02 21:22:01 2022] [crit] [client 66.249.92.152:0] AH00529: /home/virtual/vps-aa3942/a/aede5353c4/public_html/.well-known/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/virtual/vps-aa3942/a/aede5353c4/public_html/.well-known/' is executable www.ampsstudio.com [Fri Sep 02 21:58:47 2022] [crit] [client 66.249.93.14:0] AH00529: /home/virtual/vps-aa3942/a/aede5353c4/public_html/.well-known/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/virtual/vps-aa3942/a/aede5353c4/public_html/.well-known/' is executable www.ampsstudio.com [Sat Sep 03 01:26:00 2022] [error] [client 107.158.92.227:0] AH01071: Got error 'PHP message: PHP Warning: Cannot modify header information - headers already sent by (output started at /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-includes/functions.php:5275) in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/includes/sonaar-music/css/theme/custom-style.php on line 2' www.ampsstudio.com [Sat Sep 03 01:26:59 2022] [error] [client 50.235.92.14:0] AH01071: Got error 'PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179' www.ampsstudio.com [Sat Sep 03 01:26:59 2022] [error] [client 50.235.92.14:0] AH01071: Got error 'PHP message: PHP Warning: Cannot modify header information - headers already sent by (output started at /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-includes/functions.php:5275) in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/includes/sonaar-music/css/theme/custom-style.php on line 2' mail.ampsstudio.com [Sat Sep 03 03:21:46 2022] [error] [client 41.216.188.45:0] AH01276: Cannot serve directory /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-admin/css/: No matching DirectoryIndex (index.php,index.html,index.htm) found, and server-generated directory index forbidden by Options directive cpanel.ampsstudio.com [Sat Sep 03 03:22:10 2022] [error] [client 20.205.176.66:0] [client 20.205.176.66] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "cpanel.ampsstudio.com"] [uri "/.env"] [unique_id "YxK6Uok6I8ps7UOZLarXqQAAAAU"] www.ampsstudio.com [Sat Sep 03 08:32:16 2022] [error] [client 23.81.60.87:0] AH01071: Got error 'PHP message: PHP Warning: Cannot modify header information - headers already sent by (output started at /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-includes/functions.php:5275) in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/includes/sonaar-music/css/theme/custom-style.php on line 2' ampsstudio.com [Sat Sep 03 08:38:48 2022] [error] [client 20.199.19.71:0] [client 20.199.19.71] ModSecurity: Access denied with code 403 (phase 2). Match of "contains index.php" against "REQUEST_URI" required. [file "remote server"] [line "-1"] [id "570076"] [msg "Malware.Expert - Malware"] [hostname "ampsstudio.com"] [uri "/wp-content/plugins/dzs-zoomsounds/savepng.php"] [unique_id "YxMEiDi8qKDCa4-C7WYwzgAAAAA"] ampsstudio.com [Sat Sep 03 08:38:48 2022] [error] [client 20.199.19.71:0] [client 20.199.19.71] ModSecurity: Access denied with code 403 (phase 2). Match of "contains index.php" against "REQUEST_URI" required. [file "remote server"] [line "-1"] [id "570076"] [msg "Malware.Expert - Malware"] [hostname "ampsstudio.com"] [uri "/wp-content/plugins/dzs-zoomsounds/a57bze8931.php"] [unique_id "YxMEiCXr-111sOjNq2Z0eQAAAA4"] ampsstudio.com [Sat Sep 03 08:38:50 2022] [error] [client 20.199.19.71:0] [client 20.199.19.71] ModSecurity: Access denied with code 403 (phase 2). Match of "contains index.php" against "REQUEST_URI" required. [file "remote server"] [line "-1"] [id "570076"] [msg "Malware.Expert - Malware"] [hostname "ampsstudio.com"] [uri "/wp-content/plugins/ioptimizations/a57bze8931.php"] [unique_id "YxMEihLJTDv2Liku15yT1AAAAAw"] ampsstudio.com [Sat Sep 03 08:38:50 2022] [error] [client 20.199.19.71:0] [client 20.199.19.71] ModSecurity: Access denied with code 403 (phase 2). Pattern match "/ioptimization/.*\\\\.php\\\\?rchk" at REQUEST_URI. [file "remote server"] [line "-1"] [id "570039"] [msg "Malware.Expert - Wordpress malware plugin - ioptimization"] [hostname "ampsstudio.com"] [uri "/wp-content/plugins/ioptimization/IOptimize.php"] [unique_id "YxMEimbrSgyAA7po5g6jIgAAAAM"] ampsstudio.com [Sat Sep 03 08:38:51 2022] [error] [client 20.199.19.71:0] [client 20.199.19.71] ModSecurity: Access denied with code 403 (phase 2). Match of "contains index.php" against "REQUEST_URI" required. [file "remote server"] [line "-1"] [id "570076"] [msg "Malware.Expert - Malware"] [hostname "ampsstudio.com"] [uri "/wp-content/plugins/ioptimization/a57bze8931.php"] [unique_id "YxMEizWPelJTpBZApwDwqgAAAAI"] ampsstudio.com [Sat Sep 03 08:38:51 2022] [error] [client 20.199.19.71:0] [client 20.199.19.71] ModSecurity: Access denied with code 403 (phase 2). Match of "contains index.php" against "REQUEST_URI" required. [file "remote server"] [line "-1"] [id "570076"] [msg "Malware.Expert - Malware"] [hostname "ampsstudio.com"] [uri "/wp-content/plugins/wp-engine-module/wp-engine.php"] [unique_id "YxMEi03slOG5GJcMChNzFwAAAA8"] ampsstudio.com [Sat Sep 03 08:38:51 2022] [error] [client 20.199.19.71:0] [client 20.199.19.71] ModSecurity: Access denied with code 403 (phase 2). Match of "contains index.php" against "REQUEST_URI" required. [file "remote server"] [line "-1"] [id "570076"] [msg "Malware.Expert - Malware"] [hostname "ampsstudio.com"] [uri "/wp-content/plugins/wp-engine-module/a57bze8931.php"] [unique_id "YxMEizi8qKDCa4-C7WYwzwAAAAA"] ampsstudio.com [Sat Sep 03 08:38:52 2022] [error] [client 20.199.19.71:0] [client 20.199.19.71] ModSecurity: Access denied with code 403 (phase 2). Pattern match "/\\\\..+\\\\.php" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430015"] [msg "Malware.Expert - request_uri: hidden .php execute"] [hostname "ampsstudio.com"] [uri "/wp-content/uploads/kaswara/fonts_icon/a57bze8931/.__a57bze8931.php"] [unique_id "YxMEjH6ys5uh--tGGuBdZAAAAAg"] ampsstudio.com [Sat Sep 03 08:38:52 2022] [error] [client 20.199.19.71:0] [client 20.199.19.71] ModSecurity: Access denied with code 403 (phase 2). Match of "contains index.php" against "REQUEST_URI" required. [file "remote server"] [line "-1"] [id "570076"] [msg "Malware.Expert - Malware"] [hostname "ampsstudio.com"] [uri "/wp-content/plugins/apikey/apikey.php"] [unique_id "YxMEjEoasBsNSZJGRLOYLgAAAAE"] ampsstudio.com [Sat Sep 03 08:38:52 2022] [error] [client 20.199.19.71:0] [client 20.199.19.71] ModSecurity: Access denied with code 403 (phase 2). Match of "contains index.php" against "REQUEST_URI" required. [file "remote server"] [line "-1"] [id "570076"] [msg "Malware.Expert - Malware"] [hostname "ampsstudio.com"] [uri "/wp-content/plugins/apikey/a57bze8931.php"] [unique_id "YxMEjNfncl9lOX7DQbO10AAAAAQ"] ampsstudio.com [Sat Sep 03 08:38:53 2022] [error] [client 20.199.19.71:0] [client 20.199.19.71] ModSecurity: Access denied with code 403 (phase 2). Match of "contains /wp-content/plugins/dopwgg/libraries/php/upload.php" against "REQUEST_URI" required. [file "remote server"] [line "-1"] [id "430073"] [msg "Malware.Expert - request_uri: Wordpress - prevent PHP files from executing"] [hostname "ampsstudio.com"] [uri "/wp-content/plugins/cherry-plugin/admin/import-export/upload.php"] [unique_id "YxMEjRLJTDv2Liku15yT1QAAAAw"] ampsstudio.com [Sat Sep 03 08:38:53 2022] [error] [client 20.199.19.71:0] [client 20.199.19.71] ModSecurity: Access denied with code 403 (phase 2). Match of "contains index.php" against "REQUEST_URI" required. [file "remote server"] [line "-1"] [id "570076"] [msg "Malware.Expert - Malware"] [hostname "ampsstudio.com"] [uri "/wp-content/plugins/cherry-plugin/admin/import-export/a57bze8931.php"] [unique_id "YxMEjWbrSgyAA7po5g6jIwAAAAM"] ampsstudio.com [Sat Sep 03 08:38:54 2022] [error] [client 20.199.19.71:0] [client 20.199.19.71] ModSecurity: Access denied with code 403 (phase 2). Match of "contains index.php" against "REQUEST_URI" required. [file "remote server"] [line "-1"] [id "570076"] [msg "Malware.Expert - Malware"] [hostname "ampsstudio.com"] [uri "/wp-content/plugins/formcraft/file-upload/server/php/files/a57bze8931.php"] [unique_id "YxMEjiXr-111sOjNq2Z0ewAAAA4"] ampsstudio.com [Sat Sep 03 08:38:54 2022] [error] [client 20.199.19.71:0] [client 20.199.19.71] ModSecurity: Access denied with code 403 (phase 2). Match of "contains index.php" against "REQUEST_URI" required. [file "remote server"] [line "-1"] [id "570076"] [msg "Malware.Expert - Malware"] [hostname "ampsstudio.com"] [uri "/wp-admin/admin-ajax.php"] [unique_id "YxMEjn6ys5uh--tGGuBdZQAAAAg"] ampsstudio.com [Sat Sep 03 08:38:55 2022] [error] [client 20.199.19.71:0] [client 20.199.19.71] ModSecurity: Access denied with code 403 (phase 2). Pattern match "/\\\\..+\\\\.php" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430015"] [msg "Malware.Expert - request_uri: hidden .php execute"] [hostname "ampsstudio.com"] [uri "/wp-content/uploads/typehub/custom/a57bze8931/.__a57bze8931.php"] [unique_id "YxMEj0oasBsNSZJGRLOYLwAAAAE"] ampsstudio.com [Sat Sep 03 08:38:56 2022] [error] [client 20.199.19.71:0] [client 20.199.19.71] ModSecurity: Access denied with code 403 (phase 1). Pattern match "\\\\.\\\\./\\\\.\\\\." at REQUEST_URI. [file "remote server"] [line "-1"] [id "430064"] [msg "Malware.Expert - request_uri: directory travel"] [hostname "ampsstudio.com"] [uri "/wp-content/plugins/wpcargo/includes/barcode.php"] [unique_id "YxMEkDWPelJTpBZApwDwrAAAAAI"] ampsstudio.com [Sat Sep 03 08:38:58 2022] [error] [client 20.199.19.71:0] [client 20.199.19.71] ModSecurity: Access denied with code 403 (phase 2). Match of "contains index.php" against "REQUEST_URI" required. [file "remote server"] [line "-1"] [id "570076"] [msg "Malware.Expert - Malware"] [hostname "ampsstudio.com"] [uri "/wp-content/king.php"] [unique_id "YxMEkn6ys5uh--tGGuBdZgAAAAg"] ampsstudio.com [Sat Sep 03 08:38:58 2022] [error] [client 20.199.19.71:0] [client 20.199.19.71] ModSecurity: Access denied with code 403 (phase 2). String match "connector.minimal.php" at REQUEST_URI. [file "remote server"] [line "-1"] [id "500083"] [msg "Malware.Expert - request_uri: 0-Day - Wordpress filemanager plugin"] [hostname "ampsstudio.com"] [uri "/wp-content/plugins/wp-file-manager/lib/php/connector.minimal.php"] [unique_id "YxMEkkoasBsNSZJGRLOYMAAAAAE"] ampsstudio.com [Sat Sep 03 08:38:58 2022] [error] [client 20.199.19.71:0] [client 20.199.19.71] ModSecurity: Access denied with code 403 (phase 2). String match "connector.minimal.php" at REQUEST_URI. [file "remote server"] [line "-1"] [id "500083"] [msg "Malware.Expert - request_uri: 0-Day - Wordpress filemanager plugin"] [hostname "ampsstudio.com"] [uri "/wp-content/plugins/wp-file-manager-pro/lib/php/connector.minimal.php"] [unique_id "YxMEktfncl9lOX7DQbO10QAAAAQ"] ampsstudio.com [Sat Sep 03 08:38:58 2022] [error] [client 20.199.19.71:0] [client 20.199.19.71] ModSecurity: Access denied with code 403 (phase 2). Match of "contains index.php" against "REQUEST_URI" required. [file "remote server"] [line "-1"] [id "570076"] [msg "Malware.Expert - Malware"] [hostname "ampsstudio.com"] [uri "/wp-content/plugins/gatewayapi/inc/css_js.php"] [unique_id "YxMEkmbrSgyAA7po5g6jJQAAAAM"] ampsstudio.com [Sat Sep 03 08:38:58 2022] [error] [client 20.199.19.71:0] [client 20.199.19.71] ModSecurity: Access denied with code 403 (phase 2). Match of "contains index.php" against "REQUEST_URI" required. [file "remote server"] [line "-1"] [id "570076"] [msg "Malware.Expert - Malware"] [hostname "ampsstudio.com"] [uri "/wp-content/plugins/gatewayapi/inc/a57bze8931.php"] [unique_id "YxMEkjWPelJTpBZApwDwrQAAAAI"] ampsstudio.com [Sat Sep 03 08:38:59 2022] [error] [client 20.199.19.71:0] [client 20.199.19.71] ModSecurity: Access denied with code 403 (phase 2). Match of "contains /wp-content/plugins/dopwgg/libraries/php/upload.php" against "REQUEST_URI" required. [file "remote server"] [line "-1"] [id "430073"] [msg "Malware.Expert - request_uri: Wordpress - prevent PHP files from executing"] [hostname "ampsstudio.com"] [uri "/wp-content/plugins/divi-contact-extended/includes/upload.php"] [unique_id "YxMEk03slOG5GJcMChNzGQAAAA8"] www.ampsstudio.com [Sat Sep 03 08:47:14 2022] [error] [client 154.28.85.42:0] AH01071: Got error 'PHP message: PHP Warning: Cannot modify header information - headers already sent by (output started at /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-includes/functions.php:5275) in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/includes/sonaar-music/css/theme/custom-style.php on line 2' ampsstudio.com [Sat Sep 03 08:53:13 2022] [error] [client 20.205.176.66:0] [client 20.205.176.66] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "ampsstudio.com"] [uri "/.env"] [unique_id "YxMH6dfncl9lOX7DQbO12wAAAAQ"] ampsstudio.com [Sat Sep 03 10:05:14 2022] [error] [client 20.244.8.112:0] [client 20.244.8.112] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "ampsstudio.com"] [uri "/.env"] [unique_id "YxMYyjWPelJTpBZApwDw0gAAAAI"] www.ampsstudio.com [Sat Sep 03 11:11:18 2022] [error] [client 161.117.9.99:0] AH01071: Got error 'PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179' www.ampsstudio.com [Sat Sep 03 11:11:18 2022] [error] [client 161.117.9.99:0] AH01071: Got error 'PHP message: PHP Warning: Cannot modify header information - headers already sent by (output started at /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-includes/functions.php:5275) in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/includes/sonaar-music/css/theme/custom-style.php on line 2' webmail.ampsstudio.com [Sat Sep 03 14:12:29 2022] [error] [client 20.106.95.213:0] [client 20.106.95.213] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "webmail.ampsstudio.com"] [uri "/.env"] [unique_id "YxNSvSXr-111sOjNq2Z1IwAAAA4"] webmail.ampsstudio.com [Sat Sep 03 14:12:30 2022] [error] [client 20.106.95.213:0] [client 20.106.95.213] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "webmail.ampsstudio.com"] [uri "/.env.bak"] [unique_id "YxNSvuiKbCXGF4kKgdRvkgAAAAU"] webmail.ampsstudio.com [Sat Sep 03 14:12:38 2022] [error] [client 20.106.95.213:0] [client 20.106.95.213] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "webmail.ampsstudio.com"] [uri "/laravel/.env"] [unique_id "YxNSxji8qKDCa4-C7WYxdAAAAAA"] webmail.ampsstudio.com [Sat Sep 03 14:12:39 2022] [error] [client 20.106.95.213:0] [client 20.106.95.213] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "webmail.ampsstudio.com"] [uri "/local/.env"] [unique_id "YxNSx2brSgyAA7po5g6j1wAAAAM"] webmail.ampsstudio.com [Sat Sep 03 14:12:40 2022] [error] [client 20.106.95.213:0] [client 20.106.95.213] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "webmail.ampsstudio.com"] [uri "/cgi-bin/.env"] [unique_id "YxNSyEoasBsNSZJGRLOY1gAAAAE"] webmail.ampsstudio.com [Sat Sep 03 14:12:42 2022] [error] [client 20.106.95.213:0] [client 20.106.95.213] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "webmail.ampsstudio.com"] [uri "/backend/.env"] [unique_id "YxNSygv6c_fooD_-BgfWcAAAAAY"] webmail.ampsstudio.com [Sat Sep 03 14:12:50 2022] [error] [client 20.106.95.213:0] [client 20.106.95.213] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "webmail.ampsstudio.com"] [uri "/protected/.env"] [unique_id "YxNS0n6ys5uh--tGGuBeDQAAAAg"] webmail.ampsstudio.com [Sat Sep 03 14:12:51 2022] [error] [client 20.106.95.213:0] [client 20.106.95.213] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "webmail.ampsstudio.com"] [uri "/database/.env"] [unique_id "YxNS0yXr-111sOjNq2Z1JAAAAA4"] webmail.ampsstudio.com [Sat Sep 03 14:12:53 2022] [error] [client 20.106.95.213:0] [client 20.106.95.213] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "webmail.ampsstudio.com"] [uri "/public/.env"] [unique_id "YxNS1eiKbCXGF4kKgdRvkwAAAAU"] webmail.ampsstudio.com [Sat Sep 03 14:12:54 2022] [error] [client 20.106.95.213:0] [client 20.106.95.213] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "webmail.ampsstudio.com"] [uri "/app/config/.env"] [unique_id "YxNS1jWPelJTpBZApwDxXwAAAAI"] webmail.ampsstudio.com [Sat Sep 03 14:12:55 2022] [error] [client 20.106.95.213:0] [client 20.106.95.213] ModSecurity: Access denied with code 403 (phase 2). String match ".aws/credentials" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430069"] [msg "Malware.Expert - request_uri: AWS Credentials"] [hostname "webmail.ampsstudio.com"] [uri "/.aws/credentials"] [unique_id "YxNS1zi8qKDCa4-C7WYxdQAAAAA"] ampsstudio.com [Sat Sep 03 15:18:29 2022] [error] [client 20.248.198.120:0] [client 20.248.198.120] ModSecurity: Access denied with code 403 (phase 2). String match "/.git/config" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430058"] [msg "Malware.Expert - request_uri: .git config"] [hostname "ampsstudio.com"] [uri "/.git/config"] [unique_id "YxNiNSXr-111sOjNq2Z1PwAAAA4"] ampsstudio.com [Sat Sep 03 16:40:06 2022] [error] [client 51.142.181.246:0] AH01276: Cannot serve directory /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-admin/css/: No matching DirectoryIndex (index.php,index.html,index.htm) found, and server-generated directory index forbidden by Options directive mail.ampsstudio.com [Sat Sep 03 17:59:16 2022] [error] [client 20.106.95.213:0] [client 20.106.95.213] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "mail.ampsstudio.com"] [uri "/.env"] [unique_id "YxOH5Di8qKDCa4-C7WYx8gAAAAA"] mail.ampsstudio.com [Sat Sep 03 17:59:18 2022] [error] [client 20.106.95.213:0] [client 20.106.95.213] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "mail.ampsstudio.com"] [uri "/.env.bak"] [unique_id "YxOH5kGhrxtiV18Zw7O1PAAAAAc"] mail.ampsstudio.com [Sat Sep 03 17:59:33 2022] [error] [client 20.106.95.213:0] [client 20.106.95.213] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "mail.ampsstudio.com"] [uri "/laravel/.env"] [unique_id "YxOH9eiKbCXGF4kKgdRwBgAAAAU"] mail.ampsstudio.com [Sat Sep 03 17:59:35 2022] [error] [client 20.106.95.213:0] [client 20.106.95.213] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "mail.ampsstudio.com"] [uri "/local/.env"] [unique_id "YxOH9yXr-111sOjNq2Z1jwAAAA4"] mail.ampsstudio.com [Sat Sep 03 17:59:37 2022] [error] [client 20.106.95.213:0] [client 20.106.95.213] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "mail.ampsstudio.com"] [uri "/cgi-bin/.env"] [unique_id "YxOH-YAiMbOi-QaLunejpAAAAAY"] mail.ampsstudio.com [Sat Sep 03 17:59:39 2022] [error] [client 20.106.95.213:0] [client 20.106.95.213] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "mail.ampsstudio.com"] [uri "/backend/.env"] [unique_id "YxOH-36ys5uh--tGGuBeewAAAAg"] mail.ampsstudio.com [Sat Sep 03 17:59:51 2022] [error] [client 20.106.95.213:0] [client 20.106.95.213] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "mail.ampsstudio.com"] [uri "/protected/.env"] [unique_id "YxOIB03slOG5GJcMChN0QwAAAA8"] mail.ampsstudio.com [Sat Sep 03 17:59:52 2022] [error] [client 20.106.95.213:0] [client 20.106.95.213] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "mail.ampsstudio.com"] [uri "/database/.env"] [unique_id "YxOICDi8qKDCa4-C7WYx8wAAAAA"] mail.ampsstudio.com [Sat Sep 03 17:59:53 2022] [error] [client 20.106.95.213:0] [client 20.106.95.213] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "mail.ampsstudio.com"] [uri "/public/.env"] [unique_id "YxOICSt5ImE2bK7w1JxkXQAAAAQ"] mail.ampsstudio.com [Sat Sep 03 17:59:56 2022] [error] [client 20.106.95.213:0] [client 20.106.95.213] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "mail.ampsstudio.com"] [uri "/app/config/.env"] [unique_id "YxOIDOiKbCXGF4kKgdRwBwAAAAU"] mail.ampsstudio.com [Sat Sep 03 17:59:57 2022] [error] [client 20.106.95.213:0] [client 20.106.95.213] ModSecurity: Access denied with code 403 (phase 2). String match ".aws/credentials" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430069"] [msg "Malware.Expert - request_uri: AWS Credentials"] [hostname "mail.ampsstudio.com"] [uri "/.aws/credentials"] [unique_id "YxOIDSXr-111sOjNq2Z1kAAAAA4"] cpanel.ampsstudio.com [Sat Sep 03 20:00:55 2022] [error] [client 20.106.95.213:0] [client 20.106.95.213] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "cpanel.ampsstudio.com"] [uri "/.env"] [unique_id "YxOkZ01ruPPykgBWfflnXAAAAAM"] cpanel.ampsstudio.com [Sat Sep 03 20:00:57 2022] [error] [client 20.106.95.213:0] [client 20.106.95.213] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "cpanel.ampsstudio.com"] [uri "/.env.bak"] [unique_id "YxOkaSt5ImE2bK7w1JxkrwAAAAQ"] cpanel.ampsstudio.com [Sat Sep 03 20:01:12 2022] [error] [client 20.106.95.213:0] [client 20.106.95.213] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "cpanel.ampsstudio.com"] [uri "/laravel/.env"] [unique_id "YxOkeH6ys5uh--tGGuBexwAAAAg"] cpanel.ampsstudio.com [Sat Sep 03 20:01:13 2022] [error] [client 20.106.95.213:0] [client 20.106.95.213] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "cpanel.ampsstudio.com"] [uri "/local/.env"] [unique_id "YxOkeTWPelJTpBZApwDyGQAAAAI"] cpanel.ampsstudio.com [Sat Sep 03 20:01:15 2022] [error] [client 20.106.95.213:0] [client 20.106.95.213] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "cpanel.ampsstudio.com"] [uri "/cgi-bin/.env"] [unique_id "YxOke0cBMG1_1WmH6qtFgwAAAAs"] cpanel.ampsstudio.com [Sat Sep 03 20:01:16 2022] [error] [client 20.106.95.213:0] [client 20.106.95.213] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "cpanel.ampsstudio.com"] [uri "/backend/.env"] [unique_id "YxOkfLzo8nXJcTFGbBWwDgAAAAE"] cpanel.ampsstudio.com [Sat Sep 03 20:01:25 2022] [error] [client 20.106.95.213:0] [client 20.106.95.213] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "cpanel.ampsstudio.com"] [uri "/protected/.env"] [unique_id "YxOkhU1ruPPykgBWfflnXQAAAAM"] cpanel.ampsstudio.com [Sat Sep 03 20:01:27 2022] [error] [client 20.106.95.213:0] [client 20.106.95.213] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "cpanel.ampsstudio.com"] [uri "/database/.env"] [unique_id "YxOkhyt5ImE2bK7w1JxksAAAAAQ"] cpanel.ampsstudio.com [Sat Sep 03 20:01:28 2022] [error] [client 20.106.95.213:0] [client 20.106.95.213] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "cpanel.ampsstudio.com"] [uri "/public/.env"] [unique_id "YxOkiIai_q1nfZE-Di6_fAAAAAk"] cpanel.ampsstudio.com [Sat Sep 03 20:01:29 2022] [error] [client 20.106.95.213:0] [client 20.106.95.213] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "cpanel.ampsstudio.com"] [uri "/app/config/.env"] [unique_id "YxOkiX6ys5uh--tGGuBeyAAAAAg"] cpanel.ampsstudio.com [Sat Sep 03 20:01:31 2022] [error] [client 20.106.95.213:0] [client 20.106.95.213] ModSecurity: Access denied with code 403 (phase 2). String match ".aws/credentials" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430069"] [msg "Malware.Expert - request_uri: AWS Credentials"] [hostname "cpanel.ampsstudio.com"] [uri "/.aws/credentials"] [unique_id "YxOkizWPelJTpBZApwDyGgAAAAI"] www.ampsstudio.com [Sat Sep 03 22:28:31 2022] [error] [client 37.19.217.100:0] AH01071: Got error 'PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179' www.ampsstudio.com [Sat Sep 03 22:28:31 2022] [error] [client 37.19.217.100:0] AH01071: Got error 'PHP message: PHP Warning: Cannot modify header information - headers already sent by (output started at /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-includes/functions.php:5275) in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/includes/sonaar-music/css/theme/custom-style.php on line 2' www.ampsstudio.com [Sat Sep 03 23:01:53 2022] [error] [client 46.3.197.7:0] AH01071: Got error 'PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179' www.ampsstudio.com [Sat Sep 03 23:01:53 2022] [error] [client 46.3.197.7:0] AH01071: Got error 'PHP message: PHP Warning: Cannot modify header information - headers already sent by (output started at /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-includes/functions.php:5275) in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/includes/sonaar-music/css/theme/custom-style.php on line 2' www.ampsstudio.com [Sat Sep 03 23:03:26 2022] [error] [client 46.35.252.130:0] AH01071: Got error 'PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179' www.ampsstudio.com [Sat Sep 03 23:03:26 2022] [error] [client 46.35.252.130:0] AH01071: Got error 'PHP message: PHP Warning: Cannot modify header information - headers already sent by (output started at /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-includes/functions.php:5275) in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/includes/sonaar-music/css/theme/custom-style.php on line 2' ampsstudio.com [Sun Sep 04 00:19:51 2022] [error] [client 20.106.95.213:0] [client 20.106.95.213] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "ampsstudio.com"] [uri "/.env"] [unique_id "YxPhF01ruPPykgBWfflnwwAAAAM"] ampsstudio.com [Sun Sep 04 00:19:53 2022] [error] [client 20.106.95.213:0] [client 20.106.95.213] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "ampsstudio.com"] [uri "/.env.bak"] [unique_id "YxPhGTWPelJTpBZApwDyfgAAAAI"] ampsstudio.com [Sun Sep 04 00:20:10 2022] [error] [client 20.106.95.213:0] [client 20.106.95.213] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "ampsstudio.com"] [uri "/laravel/.env"] [unique_id "YxPhKit5ImE2bK7w1JxlHwAAAAQ"] ampsstudio.com [Sun Sep 04 00:20:12 2022] [error] [client 20.106.95.213:0] [client 20.106.95.213] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "ampsstudio.com"] [uri "/local/.env"] [unique_id "YxPhLEcBMG1_1WmH6qtF6QAAAAs"] ampsstudio.com [Sun Sep 04 00:20:14 2022] [error] [client 20.106.95.213:0] [client 20.106.95.213] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "ampsstudio.com"] [uri "/cgi-bin/.env"] [unique_id "YxPhLoai_q1nfZE-Di6_6gAAAAk"] ampsstudio.com [Sun Sep 04 00:20:15 2022] [error] [client 20.106.95.213:0] [client 20.106.95.213] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "ampsstudio.com"] [uri "/backend/.env"] [unique_id "YxPhL4AiMbOi-QaLunekXwAAAAY"] ampsstudio.com [Sun Sep 04 00:20:23 2022] [error] [client 20.106.95.213:0] [client 20.106.95.213] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "ampsstudio.com"] [uri "/protected/.env"] [unique_id "YxPhNwOw2Z9zPrnvSdnKvQAAAAo"] ampsstudio.com [Sun Sep 04 00:20:25 2022] [error] [client 20.106.95.213:0] [client 20.106.95.213] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "ampsstudio.com"] [uri "/database/.env"] [unique_id "YxPhOSt5ImE2bK7w1JxlIAAAAAQ"] ampsstudio.com [Sun Sep 04 00:20:26 2022] [error] [client 20.106.95.213:0] [client 20.106.95.213] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "ampsstudio.com"] [uri "/public/.env"] [unique_id "YxPhOn6ys5uh--tGGuBfNgAAAAg"] ampsstudio.com [Sun Sep 04 00:20:27 2022] [error] [client 20.106.95.213:0] [client 20.106.95.213] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "ampsstudio.com"] [uri "/app/config/.env"] [unique_id "YxPhO0cBMG1_1WmH6qtF6gAAAAs"] ampsstudio.com [Sun Sep 04 00:20:29 2022] [error] [client 20.106.95.213:0] [client 20.106.95.213] ModSecurity: Access denied with code 403 (phase 2). String match ".aws/credentials" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430069"] [msg "Malware.Expert - request_uri: AWS Credentials"] [hostname "ampsstudio.com"] [uri "/.aws/credentials"] [unique_id "YxPhPYai_q1nfZE-Di6_6wAAAAk"] www.ampsstudio.com [Sun Sep 04 01:13:01 2022] [error] [client 46.38.254.246:0] AH01071: Got error 'PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179' www.ampsstudio.com [Sun Sep 04 01:13:01 2022] [error] [client 46.38.254.246:0] AH01071: Got error 'PHP message: PHP Warning: Cannot modify header information - headers already sent by (output started at /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-includes/functions.php:5275) in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/includes/sonaar-music/css/theme/custom-style.php on line 2' webdisk.ampsstudio.com [Sun Sep 04 01:21:24 2022] [error] [client 154.16.192.24:0] [client 154.16.192.24] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "webdisk.ampsstudio.com"] [uri "/.env"] [unique_id "YxPvhEcBMG1_1WmH6qtF_gAAAAs"] www.ampsstudio.com [Sun Sep 04 02:24:57 2022] [error] [client 185.16.38.111:0] AH01071: Got error 'PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179' www.ampsstudio.com [Sun Sep 04 02:24:57 2022] [error] [client 185.16.38.111:0] AH01071: Got error 'PHP message: PHP Warning: Cannot modify header information - headers already sent by (output started at /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-includes/functions.php:5275) in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/includes/sonaar-music/css/theme/custom-style.php on line 2' ampsstudio.com [Sun Sep 04 05:04:13 2022] [error] [client 80.76.51.29:0] [client 80.76.51.29] ModSecurity: Access denied with code 403 (phase 2). Match of "contains index.php" against "REQUEST_URI" required. [file "remote server"] [line "-1"] [id "570076"] [msg "Malware.Expert - Malware"] [hostname "ampsstudio.com"] [uri "/wp-commentin.php"] [unique_id "YxQjvflZ5nfQ7StWNuqbNgAAAAc"] ampsstudio.com [Sun Sep 04 05:04:23 2022] [error] [client 80.76.51.29:0] [client 80.76.51.29] ModSecurity: Access denied with code 403 (phase 2). Match of "contains index.php" against "REQUEST_URI" required. [file "remote server"] [line "-1"] [id "570076"] [msg "Malware.Expert - Malware"] [hostname "ampsstudio.com"] [uri "/wp/wp-commentin.php"] [unique_id "YxQjx_KtA2xb1otdhDfdCAAAAAE"] ampsstudio.com [Sun Sep 04 05:04:40 2022] [error] [client 80.76.51.29:0] [client 80.76.51.29] ModSecurity: Access denied with code 403 (phase 2). Match of "contains index.php" against "REQUEST_URI" required. [file "remote server"] [line "-1"] [id "570076"] [msg "Malware.Expert - Malware"] [hostname "ampsstudio.com"] [uri "/wordpress/wp-commentin.php"] [unique_id "YxQj2DNgwn3YcKPc6OEeDgAAAAM"] ampsstudio.com [Sun Sep 04 05:04:53 2022] [error] [client 80.76.51.29:0] [client 80.76.51.29] ModSecurity: Access denied with code 403 (phase 2). Match of "contains index.php" against "REQUEST_URI" required. [file "remote server"] [line "-1"] [id "570076"] [msg "Malware.Expert - Malware"] [hostname "ampsstudio.com"] [uri "/blog/wp-commentin.php"] [unique_id "YxQj5flZ5nfQ7StWNuqbNwAAAAc"] ampsstudio.com [Sun Sep 04 05:05:16 2022] [error] [client 80.76.51.29:0] [client 80.76.51.29] ModSecurity: Access denied with code 403 (phase 2). Match of "contains index.php" against "REQUEST_URI" required. [file "remote server"] [line "-1"] [id "570076"] [msg "Malware.Expert - Malware"] [hostname "ampsstudio.com"] [uri "/site/wp-commentin.php"] [unique_id "YxQj_I5Su9EIxfHmJK3DvwAAAAg"] webdisk.ampsstudio.com [Sun Sep 04 08:13:41 2022] [error] [client 51.142.241.69:0] [client 51.142.241.69] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "webdisk.ampsstudio.com"] [uri "/.env"] [unique_id "YxRQJflZ5nfQ7StWNuqbcwAAAAc"] www.ampsstudio.com [Sun Sep 04 11:08:37 2022] [error] [client 66.249.76.49:0] AH01071: Got error 'PHP message: PHP Warning: Attempt to read property "ID" on null in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/archive-event.php on line 15PHP message: PHP Warning: Undefined array key 0 in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/includes/classes/iron_sonaar.class.php on line 212PHP message: PHP Warning: Trying to access array offset on value of type null in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/includes/classes/iron_sonaar.class.php on line 212PHP message: PHP Warning: Undefined array key 0 in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/includes/classes/iron_sonaar.class.php on line 214PHP message: PHP Warning: Trying to access array offset on value of type null in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/includes/classes/iron_sonaar.class.php on line 214' ampsstudio.com [Sun Sep 04 16:15:41 2022] [error] [client 88.214.43.118:0] [client 88.214.43.118] ModSecurity: Access denied with code 403 (phase 2). Pattern match "/\\\\..+\\\\.php" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430015"] [msg "Malware.Expert - request_uri: hidden .php execute"] [hostname "ampsstudio.com"] [uri "/.credentials.php"] [unique_id "YxTBHUdWzS-uCKXSJL2xJwAAAAk"] ampsstudio.com [Sun Sep 04 17:25:23 2022] [error] [client 20.111.8.10:0] [client 20.111.8.10] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "ampsstudio.com"] [uri "/.env"] [unique_id "YxTRc45Su9EIxfHmJK3E6wAAAAg"] ampsstudio.com [Sun Sep 04 18:55:17 2022] [error] [client 85.31.46.140:0] AH01276: Cannot serve directory /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-admin/css/: No matching DirectoryIndex (index.php,index.html,index.htm) found, and server-generated directory index forbidden by Options directive www.ampsstudio.com [Sun Sep 04 22:01:52 2022] [error] [client 95.84.4.89:0] AH01071: Got error 'PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179' www.ampsstudio.com [Sun Sep 04 22:01:52 2022] [error] [client 95.84.4.89:0] AH01071: Got error 'PHP message: PHP Warning: Cannot modify header information - headers already sent by (output started at /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-includes/functions.php:5275) in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/includes/sonaar-music/css/theme/custom-style.php on line 2' ampsstudio.com [Sun Sep 04 23:09:57 2022] [error] [client 20.169.43.167:0] AH01276: Cannot serve directory /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-admin/css/: No matching DirectoryIndex (index.php,index.html,index.htm) found, and server-generated directory index forbidden by Options directive mail.ampsstudio.com [Sun Sep 04 23:28:32 2022] [error] [client 20.231.9.199:0] [client 20.231.9.199] ModSecurity: Access denied with code 403 (phase 2). String match "/.git/config" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430058"] [msg "Malware.Expert - request_uri: .git config"] [hostname "mail.ampsstudio.com"] [uri "/.git/config"] [unique_id "YxUmkLCSRJWJFv7Ezw8hswAAAAA"] www.ampsstudio.com [Sun Sep 04 23:31:44 2022] [error] [client 171.25.193.77:0] AH01071: Got error 'PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179' www.ampsstudio.com [Sun Sep 04 23:31:44 2022] [error] [client 171.25.193.77:0] AH01071: Got error 'PHP message: PHP Warning: Cannot modify header information - headers already sent by (output started at /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-includes/functions.php:5275) in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/includes/sonaar-music/css/theme/custom-style.php on line 2' webmail.ampsstudio.com [Sun Sep 04 23:41:07 2022] [error] [client 20.231.9.199:0] [client 20.231.9.199] ModSecurity: Access denied with code 403 (phase 2). String match "/.git/config" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430058"] [msg "Malware.Expert - request_uri: .git config"] [hostname "webmail.ampsstudio.com"] [uri "/.git/config"] [unique_id "YxUpg3thYixioGvniW_xHwAAAAo"] cpanel.ampsstudio.com [Sun Sep 04 23:48:26 2022] [error] [client 20.231.9.199:0] [client 20.231.9.199] ModSecurity: Access denied with code 403 (phase 2). String match "/.git/config" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430058"] [msg "Malware.Expert - request_uri: .git config"] [hostname "cpanel.ampsstudio.com"] [uri "/.git/config"] [unique_id "YxUrOvlZ5nfQ7StWNuqdIQAAAAc"] ampsstudio.com [Mon Sep 05 00:58:06 2022] [error] [client 20.248.198.120:0] [client 20.248.198.120] ModSecurity: Access denied with code 403 (phase 2). String match "/.git/config" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430058"] [msg "Malware.Expert - request_uri: .git config"] [hostname "ampsstudio.com"] [uri "/.git/config"] [unique_id "YxU7jjNgwn3YcKPc6OEgHgAAAAM"] webdisk.ampsstudio.com [Mon Sep 05 01:23:09 2022] [error] [client 20.231.9.199:0] [client 20.231.9.199] ModSecurity: Access denied with code 403 (phase 2). String match "/.git/config" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430058"] [msg "Malware.Expert - request_uri: .git config"] [hostname "webdisk.ampsstudio.com"] [uri "/.git/config"] [unique_id "YxVBbbCSRJWJFv7Ezw8h4gAAAAA"] ampsstudio.com [Mon Sep 05 01:40:20 2022] [error] [client 20.231.9.199:0] [client 20.231.9.199] ModSecurity: Access denied with code 403 (phase 2). String match "/.git/config" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430058"] [msg "Malware.Expert - request_uri: .git config"] [hostname "ampsstudio.com"] [uri "/.git/config"] [unique_id "YxVFdMnF7OQHtThUNvdboAAAAAI"] www.ampsstudio.com [Mon Sep 05 01:41:23 2022] [error] [client 185.107.80.192:0] AH01071: Got error 'PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179' www.ampsstudio.com [Mon Sep 05 01:41:23 2022] [error] [client 185.107.80.192:0] AH01071: Got error 'PHP message: PHP Warning: Cannot modify header information - headers already sent by (output started at /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-includes/functions.php:5275) in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/includes/sonaar-music/css/theme/custom-style.php on line 2' ampsstudio.com [Mon Sep 05 02:33:20 2022] [error] [client 20.111.8.10:0] AH01276: Cannot serve directory /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-admin/css/: No matching DirectoryIndex (index.php,index.html,index.htm) found, and server-generated directory index forbidden by Options directive ampsstudio.com [Mon Sep 05 07:38:32 2022] [error] [client 20.74.83.20:0] [client 20.74.83.20] ModSecurity: Access denied with code 403 (phase 2). Match of "contains index.php" against "REQUEST_URI" required. [file "remote server"] [line "-1"] [id "570076"] [msg "Malware.Expert - Malware"] [hostname "ampsstudio.com"] [uri "/wp-content/themes/seotheme/mar.php"] [unique_id "YxWZaCKoTw6mnP9_bl8ofQAAAAY"] ampsstudio.com [Mon Sep 05 09:07:49 2022] [error] [client 20.248.198.120:0] [client 20.248.198.120] ModSecurity: Access denied with code 403 (phase 2). String match "/.git/config" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430058"] [msg "Malware.Expert - request_uri: .git config"] [hostname "ampsstudio.com"] [uri "/.git/config"] [unique_id "YxWuVaEdUUXMkI_8TxclWAAAAAA"] ampsstudio.com [Mon Sep 05 20:26:11 2022] [error] [client 91.191.209.74:0] [client 91.191.209.74] ModSecurity: Access denied with connection close (phase 2). Pattern match "^wp_is_mobile$" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "420038"] [msg "Malware.Expert - user-agent: Webshell user-agent"] [hostname "ampsstudio.com"] [uri "/wp-load.php"] [unique_id "YxZNUykZJXEpjW8w2mKy0wAAAAM"] ampsstudio.com [Mon Sep 05 20:26:11 2022] [error] [client 91.191.209.74:0] [client 91.191.209.74] ModSecurity: Access denied with connection close (phase 2). Pattern match "^wp_is_mobile$" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "420038"] [msg "Malware.Expert - user-agent: Webshell user-agent"] [hostname "ampsstudio.com"] [uri "/wp-load.php"] [unique_id "YxZNU9Cb-PVHg7SaG8HqnAAAAAk"] ampsstudio.com [Mon Sep 05 20:26:16 2022] [error] [client 91.191.209.74:0] [client 91.191.209.74] ModSecurity: Access denied with connection close (phase 2). Pattern match "^wp_is_mobile$" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "420038"] [msg "Malware.Expert - user-agent: Webshell user-agent"] [hostname "ampsstudio.com"] [uri "/style.php"] [unique_id "YxZNWBdcCTt2234-hjDL3wAAAAE"] ampsstudio.com [Mon Sep 05 20:26:17 2022] [error] [client 91.191.209.74:0] [client 91.191.209.74] ModSecurity: Access denied with connection close (phase 2). Pattern match "^wp_is_mobile$" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "420038"] [msg "Malware.Expert - user-agent: Webshell user-agent"] [hostname "ampsstudio.com"] [uri "/wp-admin/style.php"] [unique_id "YxZNWUQvA8lt6KKT_wp7LwAAAAc"] ampsstudio.com [Mon Sep 05 20:26:19 2022] [error] [client 91.191.209.74:0] [client 91.191.209.74] ModSecurity: Access denied with connection close (phase 2). Pattern match "^wp_is_mobile$" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "420038"] [msg "Malware.Expert - user-agent: Webshell user-agent"] [hostname "ampsstudio.com"] [uri "/s_e.php"] [unique_id "YxZNW9LEBWkuu3AW2Fw4DwAAAAQ"] ampsstudio.com [Mon Sep 05 20:26:22 2022] [error] [client 91.191.209.74:0] [client 91.191.209.74] ModSecurity: Access denied with connection close (phase 2). Pattern match "^wp_is_mobile$" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "420038"] [msg "Malware.Expert - user-agent: Webshell user-agent"] [hostname "ampsstudio.com"] [uri "/s_ne.php"] [unique_id "YxZNXj5fEXwsPj3_Kt1eoQAAAAY"] ampsstudio.com [Mon Sep 05 20:29:41 2022] [error] [client 91.191.209.74:0] [client 91.191.209.74] ModSecurity: Access denied with connection close (phase 2). Pattern match "^wp_is_mobile$" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "420038"] [msg "Malware.Expert - user-agent: Webshell user-agent"] [hostname "ampsstudio.com"] [uri "/radio.php"] [unique_id "YxZOJUQvA8lt6KKT_wp7MQAAAAc"] ampsstudio.com [Mon Sep 05 20:29:45 2022] [error] [client 91.191.209.74:0] [client 91.191.209.74] ModSecurity: Access denied with connection close (phase 2). Pattern match "^wp_is_mobile$" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "420038"] [msg "Malware.Expert - user-agent: Webshell user-agent"] [hostname "ampsstudio.com"] [uri "/lock360.php"] [unique_id "YxZOKUfA6AJ4-oC72M_O1QAAAAs"] ampsstudio.com [Mon Sep 05 20:29:46 2022] [error] [client 91.191.209.74:0] [client 91.191.209.74] ModSecurity: Access denied with connection close (phase 2). Pattern match "^wp_is_mobile$" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "420038"] [msg "Malware.Expert - user-agent: Webshell user-agent"] [hostname "ampsstudio.com"] [uri "/wp-load.php"] [unique_id "YxZOKj5fEXwsPj3_Kt1eowAAAAY"] ampsstudio.com [Mon Sep 05 20:29:49 2022] [error] [client 91.191.209.74:0] [client 91.191.209.74] ModSecurity: Access denied with connection close (phase 2). Pattern match "^wp_is_mobile$" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "420038"] [msg "Malware.Expert - user-agent: Webshell user-agent"] [hostname "ampsstudio.com"] [uri "/old-index.php"] [unique_id "YxZOLdLEBWkuu3AW2Fw4EQAAAAQ"] ampsstudio.com [Mon Sep 05 20:29:56 2022] [error] [client 91.191.209.74:0] [client 91.191.209.74] ModSecurity: Access denied with connection close (phase 2). Pattern match "^wp_is_mobile$" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "420038"] [msg "Malware.Expert - user-agent: Webshell user-agent"] [hostname "ampsstudio.com"] [uri "/xmrlpc.php"] [unique_id "YxZONPlvSR7lncA8HC9qBQAAAAw"] ampsstudio.com [Mon Sep 05 20:29:59 2022] [error] [client 91.191.209.74:0] [client 91.191.209.74] ModSecurity: Access denied with connection close (phase 2). Pattern match "^wp_is_mobile$" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "420038"] [msg "Malware.Expert - user-agent: Webshell user-agent"] [hostname "ampsstudio.com"] [uri "/xmlrpcs.php"] [unique_id "YxZON2TthKVKliacAHgPUQAAAAA"] ampsstudio.com [Mon Sep 05 20:30:12 2022] [error] [client 91.191.209.74:0] [client 91.191.209.74] ModSecurity: Access denied with connection close (phase 2). Pattern match "^wp_is_mobile$" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "420038"] [msg "Malware.Expert - user-agent: Webshell user-agent"] [hostname "ampsstudio.com"] [uri "/wp-admin.php"] [unique_id "YxZORNCb-PVHg7SaG8HqnwAAAAk"] ampsstudio.com [Mon Sep 05 20:30:18 2022] [error] [client 91.191.209.74:0] [client 91.191.209.74] ModSecurity: Access denied with connection close (phase 2). Pattern match "^wp_is_mobile$" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "420038"] [msg "Malware.Expert - user-agent: Webshell user-agent"] [hostname "ampsstudio.com"] [uri "/qindex.php"] [unique_id "YxZOStLEBWkuu3AW2Fw4EgAAAAQ"] ampsstudio.com [Mon Sep 05 20:30:21 2022] [error] [client 91.191.209.74:0] [client 91.191.209.74] ModSecurity: Access denied with connection close (phase 2). Pattern match "^wp_is_mobile$" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "420038"] [msg "Malware.Expert - user-agent: Webshell user-agent"] [hostname "ampsstudio.com"] [uri "/doc.php"] [unique_id "YxZOTe0zrSecgJecTW-sfAAAAAo"] ampsstudio.com [Mon Sep 05 20:30:29 2022] [error] [client 91.191.209.74:0] [client 91.191.209.74] ModSecurity: Access denied with code 403 (phase 2). Match of "contains index.php" against "REQUEST_URI" required. [file "remote server"] [line "-1"] [id "570075"] [msg "Malware.Expert - Malware"] [hostname "ampsstudio.com"] [uri "/wp_wrong_datlib.php"] [unique_id "YxZOVflvSR7lncA8HC9qBgAAAAw"] ampsstudio.com [Mon Sep 05 20:30:33 2022] [error] [client 91.191.209.74:0] [client 91.191.209.74] ModSecurity: Access denied with code 403 (phase 2). Match of "contains index.php" against "REQUEST_URI" required. [file "remote server"] [line "-1"] [id "570075"] [msg "Malware.Expert - Malware"] [hostname "ampsstudio.com"] [uri "/beence.php"] [unique_id "YxZOWSkZJXEpjW8w2mKy1wAAAAM"] ampsstudio.com [Mon Sep 05 20:30:39 2022] [error] [client 91.191.209.74:0] [client 91.191.209.74] ModSecurity: Access denied with connection close (phase 2). Pattern match "^wp_is_mobile$" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "420038"] [msg "Malware.Expert - user-agent: Webshell user-agent"] [hostname "ampsstudio.com"] [uri "/ups.php"] [unique_id "YxZOX2TthKVKliacAHgPUgAAAAA"] ampsstudio.com [Mon Sep 05 20:30:43 2022] [error] [client 91.191.209.74:0] [client 91.191.209.74] ModSecurity: Access denied with connection close (phase 2). Pattern match "^wp_is_mobile$" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "420038"] [msg "Malware.Expert - user-agent: Webshell user-agent"] [hostname "ampsstudio.com"] [uri "/wp-signin.php"] [unique_id "YxZOYxdcCTt2234-hjDL4wAAAAE"] ampsstudio.com [Mon Sep 05 20:30:47 2022] [error] [client 91.191.209.74:0] [client 91.191.209.74] ModSecurity: Access denied with connection close (phase 2). Pattern match "^wp_is_mobile$" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "420038"] [msg "Malware.Expert - user-agent: Webshell user-agent"] [hostname "ampsstudio.com"] [uri "/media-admin.php"] [unique_id "YxZOZ9Cb-PVHg7SaG8HqoAAAAAk"] ampsstudio.com [Mon Sep 05 20:30:52 2022] [error] [client 91.191.209.74:0] [client 91.191.209.74] ModSecurity: Access denied with code 403 (phase 2). Match of "contains index.php" against "REQUEST_URI" required. [file "remote server"] [line "-1"] [id "570075"] [msg "Malware.Expert - Malware"] [hostname "ampsstudio.com"] [uri "/export.php"] [unique_id "YxZObEfA6AJ4-oC72M_O1wAAAAs"] ampsstudio.com [Mon Sep 05 20:30:54 2022] [error] [client 91.191.209.74:0] [client 91.191.209.74] ModSecurity: Access denied with code 403 (phase 2). Match of "contains index.php" against "REQUEST_URI" required. [file "remote server"] [line "-1"] [id "570075"] [msg "Malware.Expert - Malware"] [hostname "ampsstudio.com"] [uri "/wp-content/export.php"] [unique_id "YxZObkQvA8lt6KKT_wp7MwAAAAc"] ampsstudio.com [Mon Sep 05 20:31:06 2022] [error] [client 91.191.209.74:0] [client 91.191.209.74] ModSecurity: Access denied with connection close (phase 2). Pattern match "^wp_is_mobile$" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "420038"] [msg "Malware.Expert - user-agent: Webshell user-agent"] [hostname "ampsstudio.com"] [uri "/wp-includes/wp-class.php"] [unique_id "YxZOej5fEXwsPj3_Kt1epQAAAAY"] ampsstudio.com [Mon Sep 05 20:31:08 2022] [error] [client 91.191.209.74:0] [client 91.191.209.74] ModSecurity: Access denied with code 403 (phase 2). Match of "contains index.php" against "REQUEST_URI" required. [file "remote server"] [line "-1"] [id "570075"] [msg "Malware.Expert - Malware"] [hostname "ampsstudio.com"] [uri "/wp-includes/wp-atom.php"] [unique_id "YxZOfNLEBWkuu3AW2Fw4EwAAAAQ"] ampsstudio.com [Mon Sep 05 20:31:21 2022] [error] [client 91.191.209.74:0] [client 91.191.209.74] ModSecurity: Access denied with code 403 (phase 2). Pattern match "/wp-includes/images/.*\\\\.php" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430032"] [msg "Malware.Expert - request_uri: Wordpress - prevent PHP files from executing"] [hostname "ampsstudio.com"] [uri "/wp-includes/images/css.php"] [unique_id "YxZOie0zrSecgJecTW-sfQAAAAo"] ampsstudio.com [Mon Sep 05 20:31:23 2022] [error] [client 91.191.209.74:0] [client 91.191.209.74] ModSecurity: Access denied with code 403 (phase 2). Pattern match "/wp-includes/css/.*\\\\.php" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430035"] [msg "Malware.Expert - request_uri: Wordpress - prevent PHP files from executing"] [hostname "ampsstudio.com"] [uri "/wp-includes/css/css.php"] [unique_id "YxZOi_lvSR7lncA8HC9qBwAAAAw"] ampsstudio.com [Mon Sep 05 20:31:41 2022] [error] [client 91.191.209.74:0] [client 91.191.209.74] ModSecurity: Access denied with code 403 (phase 2). Match of "contains index.php" against "REQUEST_URI" required. [file "remote server"] [line "-1"] [id "570075"] [msg "Malware.Expert - Malware"] [hostname "ampsstudio.com"] [uri "/defau1t.php"] [unique_id "YxZOndCb-PVHg7SaG8HqpAAAAAk"] ampsstudio.com [Mon Sep 05 20:31:44 2022] [error] [client 91.191.209.74:0] [client 91.191.209.74] ModSecurity: Access denied with connection close (phase 2). Pattern match "^wp_is_mobile$" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "420038"] [msg "Malware.Expert - user-agent: Webshell user-agent"] [hostname "ampsstudio.com"] [uri "/css.php"] [unique_id "YxZOoCkZJXEpjW8w2mKy2QAAAAM"] ampsstudio.com [Mon Sep 05 20:31:53 2022] [error] [client 91.191.209.74:0] [client 91.191.209.74] ModSecurity: Access denied with code 403 (phase 2). Match of "contains index.php" against "REQUEST_URI" required. [file "remote server"] [line "-1"] [id "570075"] [msg "Malware.Expert - Malware"] [hostname "ampsstudio.com"] [uri "/moduless.php"] [unique_id "YxZOqT5fEXwsPj3_Kt1eqgAAAAY"] ampsstudio.com [Mon Sep 05 20:31:59 2022] [error] [client 91.191.209.74:0] [client 91.191.209.74] ModSecurity: Access denied with connection close (phase 2). Pattern match "^wp_is_mobile$" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "420038"] [msg "Malware.Expert - user-agent: Webshell user-agent"] [hostname "ampsstudio.com"] [uri "/wp-booking.php"] [unique_id "YxZOr9LEBWkuu3AW2Fw4GAAAAAQ"] ampsstudio.com [Mon Sep 05 20:32:01 2022] [error] [client 91.191.209.74:0] [client 91.191.209.74] ModSecurity: Access denied with connection close (phase 2). Pattern match "^wp_is_mobile$" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "420038"] [msg "Malware.Expert - user-agent: Webshell user-agent"] [hostname "ampsstudio.com"] [uri "/wp-content/plugins/backup_index.php"] [unique_id "YxZOsUQvA8lt6KKT_wp7OAAAAAc"] ampsstudio.com [Mon Sep 05 20:32:05 2022] [error] [client 91.191.209.74:0] [client 91.191.209.74] ModSecurity: Access denied with connection close (phase 2). Pattern match "^wp_is_mobile$" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "420038"] [msg "Malware.Expert - user-agent: Webshell user-agent"] [hostname "ampsstudio.com"] [uri "/wp-content/mu-plugins/db-safe-mode.php"] [unique_id "YxZOte0zrSecgJecTW-sggAAAAo"] ampsstudio.com [Mon Sep 05 20:32:06 2022] [error] [client 91.191.209.74:0] [client 91.191.209.74] ModSecurity: Access denied with connection close (phase 2). Pattern match "^wp_is_mobile$" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "420038"] [msg "Malware.Expert - user-agent: Webshell user-agent"] [hostname "ampsstudio.com"] [uri "/wp-includes/css/wp-config.php"] [unique_id "YxZOtvlvSR7lncA8HC9qDAAAAAw"] ampsstudio.com [Mon Sep 05 20:32:07 2022] [error] [client 91.191.209.74:0] [client 91.191.209.74] ModSecurity: Access denied with connection close (phase 2). Pattern match "^wp_is_mobile$" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "420038"] [msg "Malware.Expert - user-agent: Webshell user-agent"] [hostname "ampsstudio.com"] [uri "/config.bak.php"] [unique_id "YxZOt2TthKVKliacAHgPWAAAAAA"] ampsstudio.com [Mon Sep 05 20:32:08 2022] [error] [client 91.191.209.74:0] [client 91.191.209.74] ModSecurity: Access denied with connection close (phase 2). Pattern match "^wp_is_mobile$" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "420038"] [msg "Malware.Expert - user-agent: Webshell user-agent"] [hostname "ampsstudio.com"] [uri "/wp-content/themes/config.bak.php"] [unique_id "YxZOuEfA6AJ4-oC72M_O3QAAAAs"] ampsstudio.com [Mon Sep 05 20:32:40 2022] [error] [client 91.191.209.74:0] [client 91.191.209.74] ModSecurity: Access denied with connection close (phase 2). Pattern match "^wp_is_mobile$" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "420038"] [msg "Malware.Expert - user-agent: Webshell user-agent"] [hostname "ampsstudio.com"] [uri "/legion.php"] [unique_id "YxZO2BdcCTt2234-hjDL5wAAAAE"] ampsstudio.com [Mon Sep 05 20:34:08 2022] [error] [client 91.191.209.74:0] [client 91.191.209.74] ModSecurity: Access denied with connection close (phase 2). Pattern match "^wp_is_mobile$" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "420038"] [msg "Malware.Expert - user-agent: Webshell user-agent"] [hostname "ampsstudio.com"] [uri "/wp-plugins.php"] [unique_id "YxZPMEQvA8lt6KKT_wp7OgAAAAc"] ampsstudio.com [Mon Sep 05 20:34:09 2022] [error] [client 91.191.209.74:0] [client 91.191.209.74] ModSecurity: Access denied with connection close (phase 2). Pattern match "^wp_is_mobile$" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "420038"] [msg "Malware.Expert - user-agent: Webshell user-agent"] [hostname "ampsstudio.com"] [uri "/gank.php.PhP"] [unique_id "YxZPMflvSR7lncA8HC9qDgAAAAw"] ampsstudio.com [Mon Sep 05 20:34:10 2022] [error] [client 91.191.209.74:0] [client 91.191.209.74] ModSecurity: Access denied with connection close (phase 2). Pattern match "^wp_is_mobile$" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "420038"] [msg "Malware.Expert - user-agent: Webshell user-agent"] [hostname "ampsstudio.com"] [uri "/wp-content/db-cache.php"] [unique_id "YxZPMtCb-PVHg7SaG8HqqAAAAAk"] ampsstudio.com [Mon Sep 05 20:34:11 2022] [error] [client 91.191.209.74:0] [client 91.191.209.74] ModSecurity: Access denied with code 403 (phase 2). Match of "contains index.php" against "REQUEST_URI" required. [file "remote server"] [line "-1"] [id "570075"] [msg "Malware.Expert - Malware"] [hostname "ampsstudio.com"] [uri "/archives.php"] [unique_id "YxZPMz5fEXwsPj3_Kt1erQAAAAY"] ampsstudio.com [Mon Sep 05 20:34:12 2022] [error] [client 91.191.209.74:0] [client 91.191.209.74] ModSecurity: Access denied with connection close (phase 2). Pattern match "^wp_is_mobile$" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "420038"] [msg "Malware.Expert - user-agent: Webshell user-agent"] [hostname "ampsstudio.com"] [uri "/xindex.php"] [unique_id "YxZPNO0zrSecgJecTW-shQAAAAo"] ampsstudio.com [Mon Sep 05 20:34:13 2022] [error] [client 91.191.209.74:0] [client 91.191.209.74] ModSecurity: Access denied with code 403 (phase 2). Match of "contains index.php" against "REQUEST_URI" required. [file "remote server"] [line "-1"] [id "570075"] [msg "Malware.Expert - Malware"] [hostname "ampsstudio.com"] [uri "/defau11.php"] [unique_id "YxZPNUfA6AJ4-oC72M_O4AAAAAs"] ampsstudio.com [Mon Sep 05 20:34:15 2022] [error] [client 91.191.209.74:0] [client 91.191.209.74] ModSecurity: Access denied with connection close (phase 2). Pattern match "^wp_is_mobile$" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "420038"] [msg "Malware.Expert - user-agent: Webshell user-agent"] [hostname "ampsstudio.com"] [uri "/wp-content/outcms.php"] [unique_id "YxZPN9LEBWkuu3AW2Fw4GwAAAAQ"] ampsstudio.com [Mon Sep 05 20:34:42 2022] [error] [client 91.191.209.74:0] [client 91.191.209.74] ModSecurity: Access denied with connection close (phase 2). Pattern match "^wp_is_mobile$" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "420038"] [msg "Malware.Expert - user-agent: Webshell user-agent"] [hostname "ampsstudio.com"] [uri "/system_log.php"] [unique_id "YxZPUmTthKVKliacAHgPWwAAAAA"] ampsstudio.com [Mon Sep 05 20:35:12 2022] [error] [client 91.191.209.74:0] [client 91.191.209.74] ModSecurity: Access denied with connection close (phase 2). Pattern match "^wp_is_mobile$" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "420038"] [msg "Malware.Expert - user-agent: Webshell user-agent"] [hostname "ampsstudio.com"] [uri "/wp-backup-sql-302.php"] [unique_id "YxZPcEQvA8lt6KKT_wp7OwAAAAc"] ampsstudio.com [Mon Sep 05 20:35:14 2022] [error] [client 91.191.209.74:0] [client 91.191.209.74] ModSecurity: Access denied with connection close (phase 2). Pattern match "^wp_is_mobile$" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "420038"] [msg "Malware.Expert - user-agent: Webshell user-agent"] [hostname "ampsstudio.com"] [uri "/error.php"] [unique_id "YxZPcvlvSR7lncA8HC9qDwAAAAw"] ampsstudio.com [Mon Sep 05 20:35:15 2022] [error] [client 91.191.209.74:0] [client 91.191.209.74] ModSecurity: Access denied with connection close (phase 2). Pattern match "^wp_is_mobile$" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "420038"] [msg "Malware.Expert - user-agent: Webshell user-agent"] [hostname "ampsstudio.com"] [uri "/ALFA_DATA"] [unique_id "YxZPc9Cb-PVHg7SaG8HqqQAAAAk"] ampsstudio.com [Mon Sep 05 20:35:16 2022] [error] [client 91.191.209.74:0] [client 91.191.209.74] ModSecurity: Access denied with connection close (phase 2). Pattern match "^wp_is_mobile$" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "420038"] [msg "Malware.Expert - user-agent: Webshell user-agent"] [hostname "ampsstudio.com"] [uri "/alfacgiapi"] [unique_id "YxZPdD5fEXwsPj3_Kt1ergAAAAY"] ampsstudio.com [Mon Sep 05 20:35:49 2022] [crit] [client 91.191.209.74:0] AH00529: /home/virtual/vps-aa3942/a/aede5353c4/public_html/.well-known/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/virtual/vps-aa3942/a/aede5353c4/public_html/.well-known/' is executable ampsstudio.com [Mon Sep 05 20:36:18 2022] [crit] [client 91.191.209.74:0] AH00529: /home/virtual/vps-aa3942/a/aede5353c4/public_html/.well-known/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/virtual/vps-aa3942/a/aede5353c4/public_html/.well-known/' is executable ampsstudio.com [Mon Sep 05 20:36:19 2022] [crit] [client 91.191.209.74:0] AH00529: /home/virtual/vps-aa3942/a/aede5353c4/public_html/.well-known/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/virtual/vps-aa3942/a/aede5353c4/public_html/.well-known/' is executable ampsstudio.com [Mon Sep 05 20:36:20 2022] [error] [client 91.191.209.74:0] [client 91.191.209.74] ModSecurity: Access denied with connection close (phase 2). Pattern match "^wp_is_mobile$" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "420038"] [msg "Malware.Expert - user-agent: Webshell user-agent"] [hostname "ampsstudio.com"] [uri "/wp-content/uploads/ALFA_DATA"] [unique_id "YxZPtGTthKVKliacAHgPXQAAAAA"] ampsstudio.com [Mon Sep 05 20:36:21 2022] [error] [client 91.191.209.74:0] [client 91.191.209.74] ModSecurity: Access denied with connection close (phase 2). Pattern match "^wp_is_mobile$" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "420038"] [msg "Malware.Expert - user-agent: Webshell user-agent"] [hostname "ampsstudio.com"] [uri "/wp-content/uploads/alfacgiapi"] [unique_id "YxZPtUQvA8lt6KKT_wp7PQAAAAc"] ampsstudio.com [Mon Sep 05 20:36:46 2022] [error] [client 91.191.209.74:0] [client 91.191.209.74] ModSecurity: Access denied with connection close (phase 2). Pattern match "^wp_is_mobile$" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "420038"] [msg "Malware.Expert - user-agent: Webshell user-agent"] [hostname "ampsstudio.com"] [uri "/wp-content/uploads/cgialfa"] [unique_id "YxZPztCb-PVHg7SaG8HqqwAAAAk"] ampsstudio.com [Mon Sep 05 20:37:22 2022] [error] [client 91.191.209.74:0] [client 91.191.209.74] ModSecurity: Access denied with connection close (phase 2). Pattern match "^wp_is_mobile$" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "420038"] [msg "Malware.Expert - user-agent: Webshell user-agent"] [hostname "ampsstudio.com"] [uri "/wp-includes/alfacgiapi"] [unique_id "YxZP8kQvA8lt6KKT_wp7PgAAAAc"] ampsstudio.com [Mon Sep 05 20:38:39 2022] [error] [client 91.191.209.74:0] [client 91.191.209.74] ModSecurity: Access denied with connection close (phase 2). Pattern match "^wp_is_mobile$" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "420038"] [msg "Malware.Expert - user-agent: Webshell user-agent"] [hostname "ampsstudio.com"] [uri "/wp-includes/cgialfa"] [unique_id "YxZQP0fA6AJ4-oC72M_O4wAAAAs"] ampsstudio.com [Mon Sep 05 20:39:12 2022] [error] [client 91.191.209.74:0] [client 91.191.209.74] ModSecurity: Access denied with connection close (phase 2). Pattern match "^wp_is_mobile$" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "420038"] [msg "Malware.Expert - user-agent: Webshell user-agent"] [hostname "ampsstudio.com"] [uri "/wp-admin/ALFA_DATA"] [unique_id "YxZQYCkZJXEpjW8w2mKy4gAAAAM"] ampsstudio.com [Mon Sep 05 20:39:14 2022] [error] [client 91.191.209.74:0] [client 91.191.209.74] ModSecurity: Access denied with connection close (phase 2). Pattern match "^wp_is_mobile$" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "420038"] [msg "Malware.Expert - user-agent: Webshell user-agent"] [hostname "ampsstudio.com"] [uri "/wp-admin/alfacgiapi"] [unique_id "YxZQYvlvSR7lncA8HC9qEwAAAAw"] ampsstudio.com [Mon Sep 05 20:39:15 2022] [error] [client 91.191.209.74:0] [client 91.191.209.74] ModSecurity: Access denied with connection close (phase 2). Pattern match "^wp_is_mobile$" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "420038"] [msg "Malware.Expert - user-agent: Webshell user-agent"] [hostname "ampsstudio.com"] [uri "/wp-admin/cgialfa"] [unique_id "YxZQYxdcCTt2234-hjDL7gAAAAE"] ampsstudio.com [Mon Sep 05 20:39:16 2022] [error] [client 91.191.209.74:0] [client 91.191.209.74] ModSecurity: Access denied with connection close (phase 2). Pattern match "^wp_is_mobile$" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "420038"] [msg "Malware.Expert - user-agent: Webshell user-agent"] [hostname "ampsstudio.com"] [uri "/wp-content/ALFA_DATA"] [unique_id "YxZQZFHZZuhp8eXI3IT_-AAAAAI"] ampsstudio.com [Mon Sep 05 20:39:17 2022] [error] [client 91.191.209.74:0] [client 91.191.209.74] ModSecurity: Access denied with connection close (phase 2). Pattern match "^wp_is_mobile$" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "420038"] [msg "Malware.Expert - user-agent: Webshell user-agent"] [hostname "ampsstudio.com"] [uri "/wp-content/alfacgiapi"] [unique_id "YxZQZWTthKVKliacAHgPXwAAAAA"] ampsstudio.com [Mon Sep 05 20:39:18 2022] [error] [client 91.191.209.74:0] [client 91.191.209.74] ModSecurity: Access denied with connection close (phase 2). Pattern match "^wp_is_mobile$" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "420038"] [msg "Malware.Expert - user-agent: Webshell user-agent"] [hostname "ampsstudio.com"] [uri "/wp-content/cgialfa"] [unique_id "YxZQZkQvA8lt6KKT_wp7PwAAAAc"] ampsstudio.com [Mon Sep 05 20:39:19 2022] [error] [client 91.191.209.74:0] [client 91.191.209.74] ModSecurity: Access denied with connection close (phase 2). Pattern match "^wp_is_mobile$" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "420038"] [msg "Malware.Expert - user-agent: Webshell user-agent"] [hostname "ampsstudio.com"] [uri "/templates/beez3/ALFA_DATA"] [unique_id "YxZQZ9Cb-PVHg7SaG8HqrQAAAAk"] ampsstudio.com [Mon Sep 05 20:39:19 2022] [error] [client 91.191.209.74:0] [client 91.191.209.74] ModSecurity: Access denied with connection close (phase 2). Pattern match "^wp_is_mobile$" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "420038"] [msg "Malware.Expert - user-agent: Webshell user-agent"] [hostname "ampsstudio.com"] [uri "/templates/beez3/alfacgiapi"] [unique_id "YxZQZ0fA6AJ4-oC72M_O5AAAAAs"] ampsstudio.com [Mon Sep 05 20:39:20 2022] [error] [client 91.191.209.74:0] [client 91.191.209.74] ModSecurity: Access denied with connection close (phase 2). Pattern match "^wp_is_mobile$" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "420038"] [msg "Malware.Expert - user-agent: Webshell user-agent"] [hostname "ampsstudio.com"] [uri "/templates/beez3/cgialfa"] [unique_id "YxZQaD5fEXwsPj3_Kt1esgAAAAY"] ampsstudio.com [Mon Sep 05 20:39:58 2022] [error] [client 91.191.209.74:0] [client 91.191.209.74] ModSecurity: Access denied with connection close (phase 2). Pattern match "^wp_is_mobile$" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "420038"] [msg "Malware.Expert - user-agent: Webshell user-agent"] [hostname "ampsstudio.com"] [uri "/sites/default/files/alfacgiapi"] [unique_id "YxZQjvlvSR7lncA8HC9qFAAAAAw"] ampsstudio.com [Mon Sep 05 20:39:59 2022] [error] [client 91.191.209.74:0] [client 91.191.209.74] ModSecurity: Access denied with connection close (phase 2). Pattern match "^wp_is_mobile$" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "420038"] [msg "Malware.Expert - user-agent: Webshell user-agent"] [hostname "ampsstudio.com"] [uri "/sites/default/files/cgialfa"] [unique_id "YxZQjxdcCTt2234-hjDL7wAAAAE"] ampsstudio.com [Mon Sep 05 20:40:00 2022] [error] [client 91.191.209.74:0] [client 91.191.209.74] ModSecurity: Access denied with connection close (phase 2). Pattern match "^wp_is_mobile$" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "420038"] [msg "Malware.Expert - user-agent: Webshell user-agent"] [hostname "ampsstudio.com"] [uri "/admin/controller/extension/extension/ALFA_DATA"] [unique_id "YxZQkFHZZuhp8eXI3IT_-QAAAAI"] ampsstudio.com [Mon Sep 05 20:40:01 2022] [error] [client 91.191.209.74:0] [client 91.191.209.74] ModSecurity: Access denied with connection close (phase 2). Pattern match "^wp_is_mobile$" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "420038"] [msg "Malware.Expert - user-agent: Webshell user-agent"] [hostname "ampsstudio.com"] [uri "/admin/controller/extension/extension/alfacgiapi"] [unique_id "YxZQkWTthKVKliacAHgPYAAAAAA"] ampsstudio.com [Mon Sep 05 20:40:03 2022] [error] [client 91.191.209.74:0] [client 91.191.209.74] ModSecurity: Access denied with connection close (phase 2). Pattern match "^wp_is_mobile$" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "420038"] [msg "Malware.Expert - user-agent: Webshell user-agent"] [hostname "ampsstudio.com"] [uri "/admin/controller/extension/extension/cgialfa"] [unique_id "YxZQk0QvA8lt6KKT_wp7QAAAAAc"] ampsstudio.com [Mon Sep 05 20:40:04 2022] [error] [client 91.191.209.74:0] [client 91.191.209.74] ModSecurity: Access denied with connection close (phase 2). Pattern match "^wp_is_mobile$" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "420038"] [msg "Malware.Expert - user-agent: Webshell user-agent"] [hostname "ampsstudio.com"] [uri "/wp-content/plugins/ubh/up.php"] [unique_id "YxZQlNCb-PVHg7SaG8HqrgAAAAk"] ampsstudio.com [Mon Sep 05 20:40:05 2022] [error] [client 91.191.209.74:0] [client 91.191.209.74] ModSecurity: Access denied with connection close (phase 2). Pattern match "^wp_is_mobile$" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "420038"] [msg "Malware.Expert - user-agent: Webshell user-agent"] [hostname "ampsstudio.com"] [uri "/index.php"] [unique_id "YxZQlUfA6AJ4-oC72M_O5QAAAAs"] ampsstudio.com [Mon Sep 05 20:40:05 2022] [error] [client 91.191.209.74:0] [client 91.191.209.74] ModSecurity: Access denied with connection close (phase 2). Pattern match "^wp_is_mobile$" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "420038"] [msg "Malware.Expert - user-agent: Webshell user-agent"] [hostname "ampsstudio.com"] [uri "/about.php"] [unique_id "YxZQlT5fEXwsPj3_Kt1eswAAAAY"] ampsstudio.com [Mon Sep 05 20:40:05 2022] [error] [client 91.191.209.74:0] [client 91.191.209.74] ModSecurity: Access denied with connection close (phase 2). Pattern match "^wp_is_mobile$" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "420038"] [msg "Malware.Expert - user-agent: Webshell user-agent"] [hostname "ampsstudio.com"] [uri "/shells.php"] [unique_id "YxZQle0zrSecgJecTW-siwAAAAo"] ampsstudio.com [Mon Sep 05 20:40:05 2022] [error] [client 91.191.209.74:0] [client 91.191.209.74] ModSecurity: Access denied with connection close (phase 2). Pattern match "^wp_is_mobile$" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "420038"] [msg "Malware.Expert - user-agent: Webshell user-agent"] [hostname "ampsstudio.com"] [uri "/olux.php"] [unique_id "YxZQlSkZJXEpjW8w2mKy5AAAAAM"] ampsstudio.com [Mon Sep 05 20:40:05 2022] [error] [client 91.191.209.74:0] [client 91.191.209.74] ModSecurity: Access denied with connection close (phase 2). Pattern match "^wp_is_mobile$" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "420038"] [msg "Malware.Expert - user-agent: Webshell user-agent"] [hostname "ampsstudio.com"] [uri "/xleet.php"] [unique_id "YxZQlflvSR7lncA8HC9qFQAAAAw"] ampsstudio.com [Mon Sep 05 20:40:06 2022] [error] [client 91.191.209.74:0] [client 91.191.209.74] ModSecurity: Access denied with connection close (phase 2). Pattern match "^wp_is_mobile$" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "420038"] [msg "Malware.Expert - user-agent: Webshell user-agent"] [hostname "ampsstudio.com"] [uri "/wso.php"] [unique_id "YxZQlhdcCTt2234-hjDL8AAAAAE"] ampsstudio.com [Mon Sep 05 20:40:06 2022] [error] [client 91.191.209.74:0] [client 91.191.209.74] ModSecurity: Access denied with connection close (phase 2). Pattern match "^wp_is_mobile$" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "420038"] [msg "Malware.Expert - user-agent: Webshell user-agent"] [hostname "ampsstudio.com"] [uri "/shell.php"] [unique_id "YxZQllHZZuhp8eXI3IT_-gAAAAI"] ampsstudio.com [Mon Sep 05 20:40:06 2022] [error] [client 91.191.209.74:0] [client 91.191.209.74] ModSecurity: Access denied with connection close (phase 2). Pattern match "^wp_is_mobile$" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "420038"] [msg "Malware.Expert - user-agent: Webshell user-agent"] [hostname "ampsstudio.com"] [uri "/up.php"] [unique_id "YxZQlmTthKVKliacAHgPYQAAAAA"] ampsstudio.com [Mon Sep 05 20:40:06 2022] [error] [client 91.191.209.74:0] [client 91.191.209.74] ModSecurity: Access denied with connection close (phase 2). Pattern match "^wp_is_mobile$" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "420038"] [msg "Malware.Expert - user-agent: Webshell user-agent"] [hostname "ampsstudio.com"] [uri "/upload.php"] [unique_id "YxZQlkQvA8lt6KKT_wp7QQAAAAc"] ampsstudio.com [Mon Sep 05 20:40:06 2022] [error] [client 91.191.209.74:0] [client 91.191.209.74] ModSecurity: Access denied with connection close (phase 2). Pattern match "^wp_is_mobile$" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "420038"] [msg "Malware.Expert - user-agent: Webshell user-agent"] [hostname "ampsstudio.com"] [uri "/1.php"] [unique_id "YxZQltCb-PVHg7SaG8HqrwAAAAk"] ampsstudio.com [Mon Sep 05 20:40:06 2022] [error] [client 91.191.209.74:0] [client 91.191.209.74] ModSecurity: Access denied with connection close (phase 2). Pattern match "^wp_is_mobile$" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "420038"] [msg "Malware.Expert - user-agent: Webshell user-agent"] [hostname "ampsstudio.com"] [uri "/x.php"] [unique_id "YxZQlkfA6AJ4-oC72M_O5gAAAAs"] ampsstudio.com [Mon Sep 05 20:40:07 2022] [error] [client 91.191.209.74:0] [client 91.191.209.74] ModSecurity: Access denied with connection close (phase 2). Pattern match "^wp_is_mobile$" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "420038"] [msg "Malware.Expert - user-agent: Webshell user-agent"] [hostname "ampsstudio.com"] [uri "/z.php"] [unique_id "YxZQlz5fEXwsPj3_Kt1etAAAAAY"] ampsstudio.com [Mon Sep 05 20:40:07 2022] [error] [client 91.191.209.74:0] [client 91.191.209.74] ModSecurity: Access denied with connection close (phase 2). Pattern match "^wp_is_mobile$" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "420038"] [msg "Malware.Expert - user-agent: Webshell user-agent"] [hostname "ampsstudio.com"] [uri "/a.php"] [unique_id "YxZQl-0zrSecgJecTW-sjAAAAAo"] ampsstudio.com [Mon Sep 05 20:40:07 2022] [error] [client 91.191.209.74:0] [client 91.191.209.74] ModSecurity: Access denied with connection close (phase 2). Pattern match "^wp_is_mobile$" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "420038"] [msg "Malware.Expert - user-agent: Webshell user-agent"] [hostname "ampsstudio.com"] [uri "/test.php"] [unique_id "YxZQlykZJXEpjW8w2mKy5QAAAAM"] ampsstudio.com [Mon Sep 05 20:40:08 2022] [error] [client 91.191.209.74:0] [client 91.191.209.74] ModSecurity: Access denied with connection close (phase 2). Pattern match "^wp_is_mobile$" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "420038"] [msg "Malware.Expert - user-agent: Webshell user-agent"] [hostname "ampsstudio.com"] [uri "/wp.php"] [unique_id "YxZQmPlvSR7lncA8HC9qFgAAAAw"] ampsstudio.com [Mon Sep 05 20:40:08 2022] [error] [client 91.191.209.74:0] [client 91.191.209.74] ModSecurity: Access denied with connection close (phase 2). Pattern match "^wp_is_mobile$" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "420038"] [msg "Malware.Expert - user-agent: Webshell user-agent"] [hostname "ampsstudio.com"] [uri "/alfa.php"] [unique_id "YxZQmBdcCTt2234-hjDL8QAAAAE"] ampsstudio.com [Mon Sep 05 20:40:08 2022] [error] [client 91.191.209.74:0] [client 91.191.209.74] ModSecurity: Access denied with connection close (phase 2). Pattern match "^wp_is_mobile$" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "420038"] [msg "Malware.Expert - user-agent: Webshell user-agent"] [hostname "ampsstudio.com"] [uri "/config.php"] [unique_id "YxZQmFHZZuhp8eXI3IT_-wAAAAI"] ampsstudio.com [Mon Sep 05 20:40:08 2022] [error] [client 91.191.209.74:0] [client 91.191.209.74] ModSecurity: Access denied with connection close (phase 2). Pattern match "^wp_is_mobile$" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "420038"] [msg "Malware.Expert - user-agent: Webshell user-agent"] [hostname "ampsstudio.com"] [uri "/templates/beez3/index.php"] [unique_id "YxZQmGTthKVKliacAHgPYgAAAAA"] www.ampsstudio.com [Mon Sep 05 23:32:10 2022] [error] [client 216.24.212.38:0] AH01071: Got error 'PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179' www.ampsstudio.com [Mon Sep 05 23:32:10 2022] [error] [client 216.24.212.38:0] AH01071: Got error 'PHP message: PHP Warning: Cannot modify header information - headers already sent by (output started at /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-includes/functions.php:5275) in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/includes/sonaar-music/css/theme/custom-style.php on line 2' www.ampsstudio.com [Tue Sep 06 00:19:20 2022] [error] [client 113.30.152.156:0] AH01071: Got error 'PHP message: PHP Warning: Cannot modify header information - headers already sent by (output started at /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-includes/functions.php:5275) in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/includes/sonaar-music/css/theme/custom-style.php on line 2' webmail.ampsstudio.com [Tue Sep 06 00:22:50 2022] [error] [client 20.118.171.111:0] AH01276: Cannot serve directory /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-admin/css/: No matching DirectoryIndex (index.php,index.html,index.htm) found, and server-generated directory index forbidden by Options directive ampsstudio.com [Tue Sep 06 00:26:12 2022] [error] [client 20.118.171.111:0] AH01276: Cannot serve directory /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-admin/css/: No matching DirectoryIndex (index.php,index.html,index.htm) found, and server-generated directory index forbidden by Options directive www.ampsstudio.com [Tue Sep 06 00:34:06 2022] [error] [client 178.168.222.75:0] AH01071: Got error 'PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179' www.ampsstudio.com [Tue Sep 06 00:34:06 2022] [error] [client 178.168.222.75:0] AH01071: Got error 'PHP message: PHP Warning: Cannot modify header information - headers already sent by (output started at /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-includes/functions.php:5275) in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/includes/sonaar-music/css/theme/custom-style.php on line 2' www.ampsstudio.com [Tue Sep 06 02:22:01 2022] [error] [client 193.189.100.197:0] AH01071: Got error 'PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179' www.ampsstudio.com [Tue Sep 06 02:22:01 2022] [error] [client 193.189.100.197:0] AH01071: Got error 'PHP message: PHP Warning: Cannot modify header information - headers already sent by (output started at /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-includes/functions.php:5275) in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/includes/sonaar-music/css/theme/custom-style.php on line 2' cpanel.ampsstudio.com [Tue Sep 06 03:00:28 2022] [error] [client 107.180.104.134:0] [client 107.180.104.134] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "cpanel.ampsstudio.com"] [uri "/.env"] [unique_id "YxapvA_7dOgMCitZN5h2LAAAAAI"] ampsstudio.com [Tue Sep 06 03:03:59 2022] [error] [client 107.180.104.134:0] [client 107.180.104.134] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "ampsstudio.com"] [uri "/.env"] [unique_id "Yxaqj_lvSR7lncA8HC9qwQAAAAw"] webdisk.ampsstudio.com [Tue Sep 06 03:15:28 2022] [error] [client 107.180.104.134:0] [client 107.180.104.134] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "webdisk.ampsstudio.com"] [uri "/.env"] [unique_id "YxatQPlvSR7lncA8HC9qxgAAAAw"] ampsstudio.com [Tue Sep 06 03:54:18 2022] [error] [client 20.74.83.20:0] [client 20.74.83.20] ModSecurity: Access denied with code 403 (phase 2). Match of "contains index.php" against "REQUEST_URI" required. [file "remote server"] [line "-1"] [id "570076"] [msg "Malware.Expert - Malware"] [hostname "ampsstudio.com"] [uri "/wp-content/themes/seotheme/mar.php"] [unique_id "Yxa2WvSKCO0I20SIIix9NQAAAAs"] ampsstudio.com [Tue Sep 06 03:54:20 2022] [error] [client 20.74.83.20:0] [client 20.74.83.20] ModSecurity: Access denied with code 403 (phase 2). Match of "contains index.php" against "REQUEST_URI" required. [file "remote server"] [line "-1"] [id "570076"] [msg "Malware.Expert - Malware"] [hostname "ampsstudio.com"] [uri "/wp-content/themes/seotheme/mar.php"] [unique_id "Yxa2XJXMuK9IfIbvP39LugAAAAA"] ampsstudio.com [Tue Sep 06 04:40:26 2022] [error] [client 37.115.119.38:0] [client 37.115.119.38] ModSecurity: Access denied with code 403 (phase 2). Pattern match "/wp-config\\\\.php" at QUERY_STRING. [file "remote server"] [line "-1"] [id "410018"] [msg "Malware.Expert - query_string: unwanted wordpress config access"] [hostname "ampsstudio.com"] [uri "/wp-admin/post.php"] [unique_id "YxbBKpXMuK9IfIbvP39L2wAAAAA"] ampsstudio.com [Tue Sep 06 04:40:28 2022] [error] [client 37.115.119.38:0] [client 37.115.119.38] ModSecurity: Access denied with code 403 (phase 1). Pattern match "\\\\.\\\\./\\\\.\\\\." at REQUEST_URI. [file "remote server"] [line "-1"] [id "430064"] [msg "Malware.Expert - request_uri: directory travel"] [hostname "ampsstudio.com"] [uri "/wp-content/plugins/mac-photo-gallery/macdownload.php"] [unique_id "YxbBLCYxJxJCm8VUskf8XQAAAAY"] ampsstudio.com [Tue Sep 06 04:40:29 2022] [error] [client 37.115.119.38:0] [client 37.115.119.38] ModSecurity: Access denied with code 403 (phase 1). Pattern match "\\\\.\\\\./\\\\.\\\\." at REQUEST_URI. [file "remote server"] [line "-1"] [id "430064"] [msg "Malware.Expert - request_uri: directory travel"] [hostname "ampsstudio.com"] [uri "/wp-content/plugins/admin-word-count-column/download-csv.php"] [unique_id "YxbBLdjU-BtAGFW2qt6AZAAAAAQ"] ampsstudio.com [Tue Sep 06 04:40:31 2022] [error] [client 37.115.119.38:0] [client 37.115.119.38] ModSecurity: Access denied with code 403 (phase 1). Pattern match "\\\\.\\\\./\\\\.\\\\." at REQUEST_URI. [file "remote server"] [line "-1"] [id "430064"] [msg "Malware.Expert - request_uri: directory travel"] [hostname "ampsstudio.com"] [uri "/wp-content/plugins/cab-fare-calculator/tblight.php"] [unique_id "YxbBL4LAKPxHI0hoXCK7MgAAAAc"] ampsstudio.com [Tue Sep 06 04:40:33 2022] [error] [client 37.115.119.38:0] [client 37.115.119.38] ModSecurity: Access denied with code 403 (phase 1). Pattern match "\\\\.\\\\./\\\\.\\\\." at REQUEST_URI. [file "remote server"] [line "-1"] [id "430064"] [msg "Malware.Expert - request_uri: directory travel"] [hostname "ampsstudio.com"] [uri "/wp-content/plugins/delightful-downloads/assets/vendor/jqueryFileTree/connectors/jqueryFileTree.php"] [unique_id "YxbBMRJQT77-Bskq-DQIpgAAAAM"] ampsstudio.com [Tue Sep 06 04:40:36 2022] [error] [client 37.115.119.38:0] [client 37.115.119.38] ModSecurity: Access denied with code 403 (phase 1). Pattern match "\\\\.\\\\./\\\\.\\\\." at REQUEST_URI. [file "remote server"] [line "-1"] [id "430064"] [msg "Malware.Expert - request_uri: directory travel"] [hostname "ampsstudio.com"] [uri "/wp-content/plugins/dzs-zoomsounds/savepng.php"] [unique_id "YxbBNAzr90rxKlpQ3WZSMAAAAAI"] ampsstudio.com [Tue Sep 06 04:40:40 2022] [error] [client 37.115.119.38:0] [client 37.115.119.38] ModSecurity: Access denied with code 403 (phase 1). Pattern match "\\\\.\\\\./\\\\.\\\\." at REQUEST_URI. [file "remote server"] [line "-1"] [id "430064"] [msg "Malware.Expert - request_uri: directory travel"] [hostname "ampsstudio.com"] [uri "/wp-content/plugins/video-synchro-pdf/reglages/Menu_Plugins/tout.php"] [unique_id "YxbBOHfCvr72pgy5tZds_QAAAAE"] ampsstudio.com [Tue Sep 06 04:40:47 2022] [error] [client 37.115.119.38:0] [client 37.115.119.38] ModSecurity: Access denied with code 403 (phase 1). Pattern match "\\\\.\\\\./\\\\.\\\\." at REQUEST_URI. [file "remote server"] [line "-1"] [id "430064"] [msg "Malware.Expert - request_uri: directory travel"] [hostname "ampsstudio.com"] [uri "/wp-admin/admin-post.php"] [unique_id "YxbBP0lQ6FrXhY7SVgCR_gAAAAw"] ampsstudio.com [Tue Sep 06 04:40:53 2022] [error] [client 37.115.119.38:0] [client 37.115.119.38] ModSecurity: Access denied with code 403 (phase 2). Pattern match "/wp-config\\\\.php" at QUERY_STRING. [file "remote server"] [line "-1"] [id "410018"] [msg "Malware.Expert - query_string: unwanted wordpress config access"] [hostname "ampsstudio.com"] [uri "/wp-admin/admin-post.php"] [unique_id "YxbBRU67hjxhaAxt11A6MQAAAAk"] ampsstudio.com [Tue Sep 06 04:40:59 2022] [error] [client 37.115.119.38:0] [client 37.115.119.38] ModSecurity: Access denied with code 403 (phase 2). Pattern match "/wp-config\\\\.php" at QUERY_STRING. [file "remote server"] [line "-1"] [id "410018"] [msg "Malware.Expert - query_string: unwanted wordpress config access"] [hostname "ampsstudio.com"] [uri "/wp-admin/admin.php"] [unique_id "YxbBS7xP-wo7tmtlZGxY3QAAAAU"] ampsstudio.com [Tue Sep 06 04:41:03 2022] [error] [client 37.115.119.38:0] [client 37.115.119.38] ModSecurity: Access denied with code 403 (phase 2). Pattern match "/wp-config\\\\.php" at QUERY_STRING. [file "remote server"] [line "-1"] [id "410018"] [msg "Malware.Expert - query_string: unwanted wordpress config access"] [hostname "ampsstudio.com"] [uri "/wp-admin/admin.php"] [unique_id "YxbBTyYxJxJCm8VUskf8XgAAAAY"] ampsstudio.com [Tue Sep 06 04:41:10 2022] [error] [client 37.115.119.38:0] [client 37.115.119.38] ModSecurity: Access denied with code 403 (phase 2). Pattern match "/wp-config\\\\.php" at QUERY_STRING. [file "remote server"] [line "-1"] [id "410018"] [msg "Malware.Expert - query_string: unwanted wordpress config access"] [hostname "ampsstudio.com"] [uri "/wp-admin/admin.php"] [unique_id "YxbBVpXMuK9IfIbvP39L3AAAAAA"] ampsstudio.com [Tue Sep 06 04:41:15 2022] [error] [client 37.115.119.38:0] [client 37.115.119.38] ModSecurity: Access denied with code 403 (phase 2). Pattern match "/wp-config\\\\.php" at QUERY_STRING. [file "remote server"] [line "-1"] [id "410018"] [msg "Malware.Expert - query_string: unwanted wordpress config access"] [hostname "ampsstudio.com"] [uri "/wp-admin/admin.php"] [unique_id "YxbBW9jU-BtAGFW2qt6AZQAAAAQ"] ampsstudio.com [Tue Sep 06 04:41:21 2022] [error] [client 37.115.119.38:0] [client 37.115.119.38] ModSecurity: Access denied with code 403 (phase 2). Pattern match "/wp-config\\\\.php" at QUERY_STRING. [file "remote server"] [line "-1"] [id "410018"] [msg "Malware.Expert - query_string: unwanted wordpress config access"] [hostname "ampsstudio.com"] [uri "/wp-admin/admin.php"] [unique_id "YxbBYYLAKPxHI0hoXCK7MwAAAAc"] ampsstudio.com [Tue Sep 06 04:41:26 2022] [error] [client 37.115.119.38:0] [client 37.115.119.38] ModSecurity: Access denied with code 403 (phase 2). Pattern match ".+wp-config\\\\..*" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430005"] [msg "Malware.Expert - request_uri: read wordpress configuration file"] [hostname "ampsstudio.com"] [uri "/wp-admin/admin.php"] [unique_id "YxbBZhJQT77-Bskq-DQIpwAAAAM"] ampsstudio.com [Tue Sep 06 04:41:32 2022] [error] [client 37.115.119.38:0] [client 37.115.119.38] ModSecurity: Access denied with code 403 (phase 2). Pattern match "/wp-config\\\\.php" at QUERY_STRING. [file "remote server"] [line "-1"] [id "410018"] [msg "Malware.Expert - query_string: unwanted wordpress config access"] [hostname "ampsstudio.com"] [uri "/wp-admin/admin.php"] [unique_id "YxbBbAzr90rxKlpQ3WZSMQAAAAI"] ampsstudio.com [Tue Sep 06 04:41:37 2022] [error] [client 37.115.119.38:0] [client 37.115.119.38] ModSecurity: Access denied with code 403 (phase 2). Pattern match "/wp-config\\\\.php" at QUERY_STRING. [file "remote server"] [line "-1"] [id "410018"] [msg "Malware.Expert - query_string: unwanted wordpress config access"] [hostname "ampsstudio.com"] [uri "/wp-admin/admin.php"] [unique_id "YxbBcXfCvr72pgy5tZds_gAAAAE"] ampsstudio.com [Tue Sep 06 04:41:43 2022] [error] [client 37.115.119.38:0] [client 37.115.119.38] ModSecurity: Access denied with code 403 (phase 2). Pattern match "/wp-config\\\\.php" at QUERY_STRING. [file "remote server"] [line "-1"] [id "410018"] [msg "Malware.Expert - query_string: unwanted wordpress config access"] [hostname "ampsstudio.com"] [uri "/wp-admin/admin.php"] [unique_id "YxbBd067hjxhaAxt11A6MgAAAAk"] ampsstudio.com [Tue Sep 06 04:41:48 2022] [error] [client 37.115.119.38:0] [client 37.115.119.38] ModSecurity: Access denied with code 403 (phase 2). Pattern match "/wp-config\\\\.php" at QUERY_STRING. [file "remote server"] [line "-1"] [id "410018"] [msg "Malware.Expert - query_string: unwanted wordpress config access"] [hostname "ampsstudio.com"] [uri "/wp-admin/edit.php"] [unique_id "YxbBfLxP-wo7tmtlZGxY3gAAAAU"] ampsstudio.com [Tue Sep 06 05:16:27 2022] [error] [client 37.44.193.204:0] [client 37.44.193.204] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "ampsstudio.com"] [uri "/.env"] [unique_id "YxbJm7xP-wo7tmtlZGxY6gAAAAU"] cpanel.ampsstudio.com [Tue Sep 06 05:18:14 2022] [error] [client 176.118.32.106:0] [client 176.118.32.106] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "cpanel.ampsstudio.com"] [uri "/.env"] [unique_id "YxbKBrxP-wo7tmtlZGxY6wAAAAU"] mail.ampsstudio.com [Tue Sep 06 05:23:00 2022] [error] [client 37.44.193.14:0] [client 37.44.193.14] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "mail.ampsstudio.com"] [uri "/.env"] [unique_id "YxbLJILAKPxHI0hoXCK7RAAAAAc"] webdisk.ampsstudio.com [Tue Sep 06 05:27:49 2022] [error] [client 37.44.193.70:0] [client 37.44.193.70] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "webdisk.ampsstudio.com"] [uri "/.env"] [unique_id "YxbMRSYxJxJCm8VUskf8cwAAAAY"] webmail.ampsstudio.com [Tue Sep 06 05:28:43 2022] [error] [client 37.44.192.110:0] [client 37.44.192.110] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "webmail.ampsstudio.com"] [uri "/.env"] [unique_id "YxbMe0lQ6FrXhY7SVgCSEwAAAAw"] www.ampsstudio.com [Tue Sep 06 05:41:24 2022] [error] [client 95.84.4.89:0] AH01071: Got error 'PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179' www.ampsstudio.com [Tue Sep 06 05:41:24 2022] [error] [client 95.84.4.89:0] AH01071: Got error 'PHP message: PHP Warning: Cannot modify header information - headers already sent by (output started at /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-includes/functions.php:5275) in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/includes/sonaar-music/css/theme/custom-style.php on line 2' www.ampsstudio.com [Tue Sep 06 06:19:37 2022] [crit] [client 74.125.151.152:0] AH00529: /home/virtual/vps-aa3942/a/aede5353c4/public_html/.well-known/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/virtual/vps-aa3942/a/aede5353c4/public_html/.well-known/' is executable www.ampsstudio.com [Tue Sep 06 10:32:43 2022] [error] [client 89.234.157.254:0] AH01071: Got error 'PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179' www.ampsstudio.com [Tue Sep 06 10:32:43 2022] [error] [client 89.234.157.254:0] AH01071: Got error 'PHP message: PHP Warning: Cannot modify header information - headers already sent by (output started at /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-includes/functions.php:5275) in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/includes/sonaar-music/css/theme/custom-style.php on line 2' www.ampsstudio.com [Tue Sep 06 11:00:10 2022] [error] [client 188.68.56.27:0] AH01071: Got error 'PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179' www.ampsstudio.com [Tue Sep 06 11:00:10 2022] [error] [client 188.68.56.27:0] AH01071: Got error 'PHP message: PHP Warning: Cannot modify header information - headers already sent by (output started at /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-includes/functions.php:5275) in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/includes/sonaar-music/css/theme/custom-style.php on line 2' ampsstudio.com [Tue Sep 06 12:02:31 2022] [error] [client 185.83.144.103:0] [client 185.83.144.103] ModSecurity: Access denied with code 403 (phase 2). Pattern match "/\\\\..+\\\\.php" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430015"] [msg "Malware.Expert - request_uri: hidden .php execute"] [hostname "ampsstudio.com"] [uri "/.aws/.credentials.php"] [unique_id "Yxcox-rzx2keVi4RvoEjKwAAAAo"] mail.ampsstudio.com [Tue Sep 06 12:32:34 2022] [error] [client 20.118.171.111:0] AH01276: Cannot serve directory /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-admin/css/: No matching DirectoryIndex (index.php,index.html,index.htm) found, and server-generated directory index forbidden by Options directive ampsstudio.com [Tue Sep 06 14:24:45 2022] [error] [client 195.178.120.89:0] [client 195.178.120.89] ModSecurity: Access denied with code 403 (phase 1). Pattern match "\\\\.\\\\./\\\\.\\\\." at REQUEST_URI. [file "remote server"] [line "-1"] [id "430064"] [msg "Malware.Expert - request_uri: directory travel"] [hostname "ampsstudio.com"] [uri "/wp-admin/admin-post.php"] [unique_id "YxdKHRJQT77-Bskq-DQKWAAAAAM"] ampsstudio.com [Tue Sep 06 14:42:01 2022] [error] [client 20.169.22.178:0] [client 20.169.22.178] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "ampsstudio.com"] [uri "/.env"] [unique_id "YxdOKSYxJxJCm8VUskf-LQAAAAY"] www.ampsstudio.com [Tue Sep 06 15:11:32 2022] [crit] [client 66.249.93.16:0] AH00529: /home/virtual/vps-aa3942/a/aede5353c4/public_html/.well-known/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/virtual/vps-aa3942/a/aede5353c4/public_html/.well-known/' is executable www.ampsstudio.com [Tue Sep 06 16:30:20 2022] [error] [client 207.46.13.124:0] AH01071: Got error 'PHP message: PHP Warning: Attempt to read property "ID" on null in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/archive-event.php on line 15PHP message: PHP Warning: Undefined array key 0 in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/includes/classes/iron_sonaar.class.php on line 212PHP message: PHP Warning: Trying to access array offset on value of type null in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/includes/classes/iron_sonaar.class.php on line 212PHP message: PHP Warning: Undefined array key 0 in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/includes/classes/iron_sonaar.class.php on line 214PHP message: PHP Warning: Trying to access array offset on value of type null in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/includes/classes/iron_sonaar.class.php on line 214' www.ampsstudio.com [Tue Sep 06 16:50:04 2022] [crit] [client 66.249.93.16:0] AH00529: /home/virtual/vps-aa3942/a/aede5353c4/public_html/.well-known/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/virtual/vps-aa3942/a/aede5353c4/public_html/.well-known/' is executable cpanel.ampsstudio.com [Tue Sep 06 17:13:29 2022] [error] [client 107.180.104.134:0] [client 107.180.104.134] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "cpanel.ampsstudio.com"] [uri "/.env"] [unique_id "YxdxqQ4sEUP8RHMj7heLTgAAAAU"] ampsstudio.com [Tue Sep 06 20:26:31 2022] [error] [client 20.169.43.167:0] AH01276: Cannot serve directory /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-admin/css/: No matching DirectoryIndex (index.php,index.html,index.htm) found, and server-generated directory index forbidden by Options directive ampsstudio.com [Tue Sep 06 20:51:21 2022] [error] [client 195.178.120.44:0] [client 195.178.120.44] ModSecurity: Access denied with code 403 (phase 2). Match of "contains index.php" against "REQUEST_URI" required. [file "remote server"] [line "-1"] [id "570076"] [msg "Malware.Expert - Malware"] [hostname "ampsstudio.com"] [uri "/wp-content/themes/seotheme/mar.php"] [unique_id "YxekuQ2Qht57eQDW8DLtWAAAAAg"] ampsstudio.com [Tue Sep 06 20:51:35 2022] [error] [client 195.178.120.44:0] [client 195.178.120.44] ModSecurity: Access denied with code 403 (phase 2). Match of "contains index.php" against "REQUEST_URI" required. [file "remote server"] [line "-1"] [id "570076"] [msg "Malware.Expert - Malware"] [hostname "ampsstudio.com"] [uri "/wp-content/themes/seotheme/mar.php"] [unique_id "Yxekx_pVGzpG-bo-1CColQAAAAY"] www.ampsstudio.com [Tue Sep 06 22:16:11 2022] [error] [client 104.244.76.127:0] AH01071: Got error 'PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179' www.ampsstudio.com [Tue Sep 06 22:16:11 2022] [error] [client 104.244.76.127:0] AH01071: Got error 'PHP message: PHP Warning: Cannot modify header information - headers already sent by (output started at /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-includes/functions.php:5275) in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/includes/sonaar-music/css/theme/custom-style.php on line 2' www.ampsstudio.com [Tue Sep 06 23:56:52 2022] [error] [client 185.220.101.35:0] AH01071: Got error 'PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179' www.ampsstudio.com [Tue Sep 06 23:56:52 2022] [error] [client 185.220.101.35:0] AH01071: Got error 'PHP message: PHP Warning: Cannot modify header information - headers already sent by (output started at /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-includes/functions.php:5275) in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/includes/sonaar-music/css/theme/custom-style.php on line 2' ampsstudio.com [Wed Sep 07 00:20:01 2022] [error] [client 44.203.196.99:0] [client 44.203.196.99] ModSecurity: Access denied with code 403 (phase 2). String match "/.git/config" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430058"] [msg "Malware.Expert - request_uri: .git config"] [hostname "ampsstudio.com"] [uri "/.git/config"] [unique_id "YxfVodjU-BtAGFW2qt6DvQAAAAQ"] ampsstudio.com [Wed Sep 07 02:36:13 2022] [error] [client 152.89.196.13:0] [client 152.89.196.13] ModSecurity: Access denied with code 403 (phase 2). Pattern match "/assets/images/.*\\\\.php" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430023"] [msg "Malware.Expert - request_uri: ModX - prevent PHP files from executing"] [hostname "ampsstudio.com"] [uri "/assets/images/1.php"] [unique_id "Yxf1jamFtzC-5IoVXKvuNgAAAAU"] www.ampsstudio.com [Wed Sep 07 06:59:17 2022] [error] [client 191.101.217.15:0] AH01071: Got error 'PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179' www.ampsstudio.com [Wed Sep 07 06:59:17 2022] [error] [client 191.101.217.15:0] AH01071: Got error 'PHP message: PHP Warning: Cannot modify header information - headers already sent by (output started at /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-includes/functions.php:5275) in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/includes/sonaar-music/css/theme/custom-style.php on line 2' ampsstudio.com [Wed Sep 07 08:45:08 2022] [error] [client 152.89.196.13:0] [client 152.89.196.13] ModSecurity: Access denied with code 403 (phase 2). Pattern match "/\\\\..+\\\\.php" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430015"] [msg "Malware.Expert - request_uri: hidden .php execute"] [hostname "ampsstudio.com"] [uri "/wp-content/uploads/.0badb.php"] [unique_id "YxhMBDMvOslO7cTHLoWVOgAAAAg"] ampsstudio.com [Wed Sep 07 08:54:03 2022] [error] [client 152.89.196.13:0] AH01630: client denied by server configuration: /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/akismet/index.php ampsstudio.com [Wed Sep 07 08:54:14 2022] [error] [client 152.89.196.13:0] [client 152.89.196.13] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES. [file "remote server"] [line "-1"] [id "580000"] [msg "Malware.Expert - Wordpress - Referer missing"] [hostname "ampsstudio.com"] [uri "/wp-admin/network/site-users-stream.php"] [unique_id "YxhOJhtcFWT9g52sM-T2ZQAAAAA"] ampsstudio.com [Wed Sep 07 08:59:10 2022] [error] [client 152.89.196.13:0] [client 152.89.196.13] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES. [file "remote server"] [line "-1"] [id "580000"] [msg "Malware.Expert - Wordpress - Referer missing"] [hostname "ampsstudio.com"] [uri "/wp-admin/update-core-cron.php"] [unique_id "YxhPTkKIj2nzDq2pCghbQgAAAAU"] ampsstudio.com [Wed Sep 07 08:59:10 2022] [error] [client 152.89.196.13:0] [client 152.89.196.13] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES. [file "remote server"] [line "-1"] [id "580000"] [msg "Malware.Expert - Wordpress - Referer missing"] [hostname "ampsstudio.com"] [uri "/wp-admin/user/credits-wp.php"] [unique_id "YxhPToDJwfHYdBSe_OjYnwAAAAY"] ampsstudio.com [Wed Sep 07 09:10:39 2022] [error] [client 152.89.196.13:0] [client 152.89.196.13] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES. [file "remote server"] [line "-1"] [id "580000"] [msg "Malware.Expert - Wordpress - Referer missing"] [hostname "ampsstudio.com"] [uri "/wp-admin/comment-stream.php"] [unique_id "YxhR_ytMurKQWzS0GL8q6QAAAAw"] ampsstudio.com [Wed Sep 07 09:19:57 2022] [error] [client 152.89.196.13:0] [client 152.89.196.13] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES. [file "remote server"] [line "-1"] [id "580000"] [msg "Malware.Expert - Wordpress - Referer missing"] [hostname "ampsstudio.com"] [uri "/wp-admin/theme-install-private.php"] [unique_id "YxhULYWwYABbSwG5BTXg2QAAAAc"] ampsstudio.com [Wed Sep 07 09:25:24 2022] [error] [client 152.89.196.13:0] [client 152.89.196.13] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES. [file "remote server"] [line "-1"] [id "580000"] [msg "Malware.Expert - Wordpress - Referer missing"] [hostname "ampsstudio.com"] [uri "/wp-admin/theme-install-meta.php"] [unique_id "YxhVdA4h6ByVD7EgFrAv2AAAAAE"] ampsstudio.com [Wed Sep 07 09:25:32 2022] [error] [client 152.89.196.13:0] AH01630: client denied by server configuration: /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/akismet/index.php ampsstudio.com [Wed Sep 07 09:26:46 2022] [error] [client 152.89.196.13:0] [client 152.89.196.13] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES. [file "remote server"] [line "-1"] [id "580000"] [msg "Malware.Expert - Wordpress - Referer missing"] [hostname "ampsstudio.com"] [uri "/wp-admin/widgets-cron.php"] [unique_id "YxhVxkKIj2nzDq2pCghbWQAAAAU"] ampsstudio.com [Wed Sep 07 09:32:05 2022] [error] [client 152.89.196.13:0] [client 152.89.196.13] ModSecurity: Access denied with connection close (phase 2). String match "bot" at ARGS_NAMES:bot. [file "remote server"] [line "-1"] [id "570011"] [msg "Malware.Expert - Wordpress - Malware"] [hostname "ampsstudio.com"] [uri "/wp-content/plugins/index.php"] [unique_id "YxhXBQ4h6ByVD7EgFrAv2wAAAAE"] ampsstudio.com [Wed Sep 07 11:08:28 2022] [error] [client 152.89.196.13:0] [client 152.89.196.13] ModSecurity: Access denied with code 403 (phase 2). Pattern match "eval\\\\(" at QUERY_STRING. [file "remote server"] [line "-1"] [id "410023"] [msg "Malware.Expert - query_string: php remote execute"] [hostname "ampsstudio.com"] [uri "/tol.php"] [unique_id "YxhtnHqCuHqf70J9mBzpSwAAAAk"] www.ampsstudio.com [Wed Sep 07 11:32:39 2022] [error] [client 47.74.152.79:0] AH01071: Got error 'PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179' www.ampsstudio.com [Wed Sep 07 11:32:39 2022] [error] [client 47.74.152.79:0] AH01071: Got error 'PHP message: PHP Warning: Cannot modify header information - headers already sent by (output started at /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-includes/functions.php:5275) in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/includes/sonaar-music/css/theme/custom-style.php on line 2' ampsstudio.com [Wed Sep 07 11:39:57 2022] [error] [client 152.89.196.13:0] [client 152.89.196.13] ModSecurity: Access denied with code 403 (phase 2). String match "wp-tmp.php" at REQUEST_URI. [file "remote server"] [line "-1"] [id "570029"] [msg "Malware.Expert - wp-tmp.php - Malware"] [hostname "ampsstudio.com"] [uri "/wp-tmp.php"] [unique_id "Yxh0_YmdEEePc_0omM634AAAAAI"] www.ampsstudio.com [Wed Sep 07 12:03:20 2022] [error] [client 154.6.18.4:0] AH01071: Got error 'PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179' www.ampsstudio.com [Wed Sep 07 12:03:20 2022] [error] [client 154.6.18.4:0] AH01071: Got error 'PHP message: PHP Warning: Cannot modify header information - headers already sent by (output started at /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-includes/functions.php:5275) in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/includes/sonaar-music/css/theme/custom-style.php on line 2' ampsstudio.com [Wed Sep 07 12:05:02 2022] [error] [client 202.52.48.206:0] [client 202.52.48.206] ModSecurity: Access denied with code 403 (phase 2). String match "/Util/PHP/eval-stdin.php" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430046"] [msg "Malware.Expert - request_uri: CVE-2017-9841"] [hostname "ampsstudio.com"] [uri "/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php"] [unique_id "Yxh63jjG9gVk89q3fuSEOgAAAAQ"] ampsstudio.com [Wed Sep 07 15:56:22 2022] [error] [client 37.252.13.203:0] [client 37.252.13.203] ModSecurity: Access denied with code 403 (phase 2). Pattern match "/wp-content/uploads/.*\\\\.php" at REQUEST_FILENAME. [file "remote server"] [line "-1"] [id "430017"] [msg "Malware.Expert - request_uri: Wordpress - prevent PHP files from executing"] [hostname "ampsstudio.com"] [uri "/wp-content/uploads/wp-dba.php"] [unique_id "YxixFjjG9gVk89q3fuSFDQAAAAQ"] www.ampsstudio.com [Wed Sep 07 17:10:25 2022] [error] [client 136.243.104.103:0] AH01071: Got error 'PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179' www.ampsstudio.com [Wed Sep 07 17:10:25 2022] [error] [client 136.243.104.103:0] AH01071: Got error 'PHP message: PHP Warning: Cannot modify header information - headers already sent by (output started at /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-includes/functions.php:5275) in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/includes/sonaar-music/css/theme/custom-style.php on line 2' www.ampsstudio.com [Wed Sep 07 17:33:53 2022] [error] [client 51.11.6.150:0] AH01071: Got error 'PHP message: PHP Warning: Undefined array key "HTTP_USER_AGENT" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/bookly-responsive-appointment-booking-tool/frontend/modules/booking/ShortCode.php on line 66' ampsstudio.com [Wed Sep 07 17:51:22 2022] [error] [client 20.199.16.11:0] [client 20.199.16.11] ModSecurity: Access denied with code 403 (phase 2). Match of "contains index.php" against "REQUEST_URI" required. [file "remote server"] [line "-1"] [id "570076"] [msg "Malware.Expert - Malware"] [hostname "ampsstudio.com"] [uri "/wp-content/plugins/dzs-zoomsounds/savepng.php"] [unique_id "YxjMCp36BF_AYEKgqHEKgAAAAAU"] ampsstudio.com [Wed Sep 07 17:51:23 2022] [error] [client 20.199.16.11:0] [client 20.199.16.11] ModSecurity: Access denied with code 403 (phase 2). Match of "contains index.php" against "REQUEST_URI" required. [file "remote server"] [line "-1"] [id "570076"] [msg "Malware.Expert - Malware"] [hostname "ampsstudio.com"] [uri "/wp-content/plugins/dzs-zoomsounds/a57bze8931.php"] [unique_id "YxjMCyVxJgqVm_38mfk5xAAAAAM"] ampsstudio.com [Wed Sep 07 17:51:25 2022] [error] [client 20.199.16.11:0] [client 20.199.16.11] ModSecurity: Access denied with code 403 (phase 2). Match of "contains index.php" against "REQUEST_URI" required. [file "remote server"] [line "-1"] [id "570076"] [msg "Malware.Expert - Malware"] [hostname "ampsstudio.com"] [uri "/wp-content/plugins/ioptimizations/a57bze8931.php"] [unique_id "YxjMDTMvOslO7cTHLoWXMQAAAAg"] ampsstudio.com [Wed Sep 07 17:51:25 2022] [error] [client 20.199.16.11:0] [client 20.199.16.11] ModSecurity: Access denied with code 403 (phase 2). Pattern match "/ioptimization/.*\\\\.php\\\\?rchk" at REQUEST_URI. [file "remote server"] [line "-1"] [id "570039"] [msg "Malware.Expert - Wordpress malware plugin - ioptimization"] [hostname "ampsstudio.com"] [uri "/wp-content/plugins/ioptimization/IOptimize.php"] [unique_id "YxjMDXqCuHqf70J9mBzqrAAAAAk"] ampsstudio.com [Wed Sep 07 17:51:25 2022] [error] [client 20.199.16.11:0] [client 20.199.16.11] ModSecurity: Access denied with code 403 (phase 2). Match of "contains index.php" against "REQUEST_URI" required. [file "remote server"] [line "-1"] [id "570076"] [msg "Malware.Expert - Malware"] [hostname "ampsstudio.com"] [uri "/wp-content/plugins/ioptimization/a57bze8931.php"] [unique_id "YxjMDTjG9gVk89q3fuSFfAAAAAQ"] ampsstudio.com [Wed Sep 07 17:51:25 2022] [error] [client 20.199.16.11:0] [client 20.199.16.11] ModSecurity: Access denied with code 403 (phase 2). Match of "contains index.php" against "REQUEST_URI" required. [file "remote server"] [line "-1"] [id "570076"] [msg "Malware.Expert - Malware"] [hostname "ampsstudio.com"] [uri "/wp-content/plugins/wp-engine-module/wp-engine.php"] [unique_id "YxjMDStMurKQWzS0GL8szgAAAAw"] ampsstudio.com [Wed Sep 07 17:51:25 2022] [error] [client 20.199.16.11:0] [client 20.199.16.11] ModSecurity: Access denied with code 403 (phase 2). Match of "contains index.php" against "REQUEST_URI" required. [file "remote server"] [line "-1"] [id "570076"] [msg "Malware.Expert - Malware"] [hostname "ampsstudio.com"] [uri "/wp-content/plugins/wp-engine-module/a57bze8931.php"] [unique_id "YxjMDQ4h6ByVD7EgFrAxswAAAAE"] ampsstudio.com [Wed Sep 07 17:51:26 2022] [error] [client 20.199.16.11:0] [client 20.199.16.11] ModSecurity: Access denied with code 403 (phase 2). Pattern match "/\\\\..+\\\\.php" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430015"] [msg "Malware.Expert - request_uri: hidden .php execute"] [hostname "ampsstudio.com"] [uri "/wp-content/uploads/kaswara/fonts_icon/a57bze8931/.__a57bze8931.php"] [unique_id "YxjMDiVxJgqVm_38mfk5xQAAAAM"] ampsstudio.com [Wed Sep 07 17:51:27 2022] [error] [client 20.199.16.11:0] [client 20.199.16.11] ModSecurity: Access denied with code 403 (phase 2). Match of "contains index.php" against "REQUEST_URI" required. [file "remote server"] [line "-1"] [id "570076"] [msg "Malware.Expert - Malware"] [hostname "ampsstudio.com"] [uri "/wp-content/plugins/apikey/apikey.php"] [unique_id "YxjMD4WwYABbSwG5BTXiuQAAAAc"] ampsstudio.com [Wed Sep 07 17:51:27 2022] [error] [client 20.199.16.11:0] [client 20.199.16.11] ModSecurity: Access denied with code 403 (phase 2). Match of "contains index.php" against "REQUEST_URI" required. [file "remote server"] [line "-1"] [id "570076"] [msg "Malware.Expert - Malware"] [hostname "ampsstudio.com"] [uri "/wp-content/plugins/apikey/a57bze8931.php"] [unique_id "YxjMDzMvOslO7cTHLoWXMgAAAAg"] ampsstudio.com [Wed Sep 07 17:51:27 2022] [error] [client 20.199.16.11:0] [client 20.199.16.11] ModSecurity: Access denied with code 403 (phase 2). Match of "contains /wp-content/plugins/dopwgg/libraries/php/upload.php" against "REQUEST_URI" required. [file "remote server"] [line "-1"] [id "430073"] [msg "Malware.Expert - request_uri: Wordpress - prevent PHP files from executing"] [hostname "ampsstudio.com"] [uri "/wp-content/plugins/cherry-plugin/admin/import-export/upload.php"] [unique_id "YxjMD3qCuHqf70J9mBzqrQAAAAk"] ampsstudio.com [Wed Sep 07 17:51:27 2022] [error] [client 20.199.16.11:0] [client 20.199.16.11] ModSecurity: Access denied with code 403 (phase 2). Match of "contains index.php" against "REQUEST_URI" required. [file "remote server"] [line "-1"] [id "570076"] [msg "Malware.Expert - Malware"] [hostname "ampsstudio.com"] [uri "/wp-content/plugins/cherry-plugin/admin/import-export/a57bze8931.php"] [unique_id "YxjMDzjG9gVk89q3fuSFfQAAAAQ"] ampsstudio.com [Wed Sep 07 17:51:29 2022] [error] [client 20.199.16.11:0] [client 20.199.16.11] ModSecurity: Access denied with code 403 (phase 2). Match of "contains index.php" against "REQUEST_URI" required. [file "remote server"] [line "-1"] [id "570076"] [msg "Malware.Expert - Malware"] [hostname "ampsstudio.com"] [uri "/wp-content/plugins/formcraft/file-upload/server/php/files/a57bze8931.php"] [unique_id "YxjMEYmdEEePc_0omM65MQAAAAI"] ampsstudio.com [Wed Sep 07 17:51:29 2022] [error] [client 20.199.16.11:0] [client 20.199.16.11] ModSecurity: Access denied with code 403 (phase 2). Match of "contains index.php" against "REQUEST_URI" required. [file "remote server"] [line "-1"] [id "570076"] [msg "Malware.Expert - Malware"] [hostname "ampsstudio.com"] [uri "/wp-admin/admin-ajax.php"] [unique_id "YxjMEYDJwfHYdBSe_OjaiwAAAAY"] ampsstudio.com [Wed Sep 07 17:51:30 2022] [error] [client 20.199.16.11:0] [client 20.199.16.11] ModSecurity: Access denied with code 403 (phase 2). Pattern match "/\\\\..+\\\\.php" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430015"] [msg "Malware.Expert - request_uri: hidden .php execute"] [hostname "ampsstudio.com"] [uri "/wp-content/uploads/typehub/custom/a57bze8931/.__a57bze8931.php"] [unique_id "YxjMEp36BF_AYEKgqHEKggAAAAU"] ampsstudio.com [Wed Sep 07 17:51:31 2022] [error] [client 20.199.16.11:0] [client 20.199.16.11] ModSecurity: Access denied with code 403 (phase 1). Pattern match "\\\\.\\\\./\\\\.\\\\." at REQUEST_URI. [file "remote server"] [line "-1"] [id "430064"] [msg "Malware.Expert - request_uri: directory travel"] [hostname "ampsstudio.com"] [uri "/wp-content/plugins/wpcargo/includes/barcode.php"] [unique_id "YxjMEzMvOslO7cTHLoWXMwAAAAg"] ampsstudio.com [Wed Sep 07 17:51:33 2022] [error] [client 20.199.16.11:0] [client 20.199.16.11] ModSecurity: Access denied with code 403 (phase 2). Match of "contains index.php" against "REQUEST_URI" required. [file "remote server"] [line "-1"] [id "570076"] [msg "Malware.Expert - Malware"] [hostname "ampsstudio.com"] [uri "/wp-content/king.php"] [unique_id "YxjMFQ4h6ByVD7EgFrAxtQAAAAE"] ampsstudio.com [Wed Sep 07 17:51:33 2022] [error] [client 20.199.16.11:0] [client 20.199.16.11] ModSecurity: Access denied with code 403 (phase 2). String match "connector.minimal.php" at REQUEST_URI. [file "remote server"] [line "-1"] [id "500083"] [msg "Malware.Expert - request_uri: 0-Day - Wordpress filemanager plugin"] [hostname "ampsstudio.com"] [uri "/wp-content/plugins/wp-file-manager/lib/php/connector.minimal.php"] [unique_id "YxjMFYmdEEePc_0omM65MgAAAAI"] ampsstudio.com [Wed Sep 07 17:51:33 2022] [error] [client 20.199.16.11:0] [client 20.199.16.11] ModSecurity: Access denied with code 403 (phase 2). String match "connector.minimal.php" at REQUEST_URI. [file "remote server"] [line "-1"] [id "500083"] [msg "Malware.Expert - request_uri: 0-Day - Wordpress filemanager plugin"] [hostname "ampsstudio.com"] [uri "/wp-content/plugins/wp-file-manager-pro/lib/php/connector.minimal.php"] [unique_id "YxjMFYDJwfHYdBSe_OjajAAAAAY"] ampsstudio.com [Wed Sep 07 17:51:33 2022] [error] [client 20.199.16.11:0] [client 20.199.16.11] ModSecurity: Access denied with code 403 (phase 2). Match of "contains index.php" against "REQUEST_URI" required. [file "remote server"] [line "-1"] [id "570076"] [msg "Malware.Expert - Malware"] [hostname "ampsstudio.com"] [uri "/wp-content/plugins/gatewayapi/inc/css_js.php"] [unique_id "YxjMFXqCuHqf70J9mBzqrgAAAAk"] ampsstudio.com [Wed Sep 07 17:51:33 2022] [error] [client 20.199.16.11:0] [client 20.199.16.11] ModSecurity: Access denied with code 403 (phase 2). Match of "contains index.php" against "REQUEST_URI" required. [file "remote server"] [line "-1"] [id "570076"] [msg "Malware.Expert - Malware"] [hostname "ampsstudio.com"] [uri "/wp-content/plugins/gatewayapi/inc/a57bze8931.php"] [unique_id "YxjMFSVxJgqVm_38mfk5xwAAAAM"] ampsstudio.com [Wed Sep 07 17:51:34 2022] [error] [client 20.199.16.11:0] [client 20.199.16.11] ModSecurity: Access denied with code 403 (phase 2). Match of "contains /wp-content/plugins/dopwgg/libraries/php/upload.php" against "REQUEST_URI" required. [file "remote server"] [line "-1"] [id "430073"] [msg "Malware.Expert - request_uri: Wordpress - prevent PHP files from executing"] [hostname "ampsstudio.com"] [uri "/wp-content/plugins/divi-contact-extended/includes/upload.php"] [unique_id "YxjMFp36BF_AYEKgqHEKgwAAAAU"] ampsstudio.com [Thu Sep 08 00:02:54 2022] [error] [client 20.171.8.36:0] [client 20.171.8.36] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "ampsstudio.com"] [uri "/.env"] [unique_id "YxkjHv1U9e1BowqP-0ao2QAAAAs"] ampsstudio.com [Thu Sep 08 00:29:52 2022] [error] [client 13.38.60.78:0] [client 13.38.60.78] ModSecurity: Access denied with code 403 (phase 2). String match "/.git/config" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430058"] [msg "Malware.Expert - request_uri: .git config"] [hostname "ampsstudio.com"] [uri "/.git/config"] [unique_id "YxkpcKMj2_HRacs10VYcnQAAAA4"] www.ampsstudio.com [Thu Sep 08 02:08:26 2022] [error] [client 69.55.35.30:0] [client 69.55.35.30] ModSecurity: Access denied with code 403 (phase 2). Pattern match "/fonts/.*\\\\.php" at REQUEST_URI. [file "remote server"] [line "-1"] [id "468000"] [msg "Malware.Expert - request_uri: Fonts folder - prevent PHP files from executing"] [hostname "www.ampsstudio.com"] [uri "/wp-includes/fonts/font.php"] [unique_id "YxlAijuXsAu2cbUGy9arwwAAAAM"] www.ampsstudio.com [Thu Sep 08 02:08:27 2022] [error] [client 69.55.35.30:0] [client 69.55.35.30] ModSecurity: Access denied with code 403 (phase 2). Pattern match "/wp-content/uploads/.*\\\\.php" at REQUEST_FILENAME. [file "remote server"] [line "-1"] [id "430017"] [msg "Malware.Expert - request_uri: Wordpress - prevent PHP files from executing"] [hostname "www.ampsstudio.com"] [uri "/wp-content/uploads/uploads.php"] [unique_id "YxlAi7mXGYbMBTy9mFSHBAAAAAY"] www.ampsstudio.com [Thu Sep 08 02:08:29 2022] [error] [client 69.55.35.30:0] [client 69.55.35.30] ModSecurity: Access denied with code 403 (phase 2). Pattern match ".+wp-config\\\\..*" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430005"] [msg "Malware.Expert - request_uri: read wordpress configuration file"] [hostname "www.ampsstudio.com"] [uri "/wp-admin/admin-post.php"] [unique_id "YxlAjStMurKQWzS0GL8uDQAAAAw"] www.ampsstudio.com [Thu Sep 08 02:08:29 2022] [error] [client 69.55.35.30:0] [client 69.55.35.30] ModSecurity: Access denied with code 403 (phase 2). Pattern match ".+wp-config\\\\..*" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430005"] [msg "Malware.Expert - request_uri: read wordpress configuration file"] [hostname "www.ampsstudio.com"] [uri "/wp-admin/admin-ajax.php"] [unique_id "YxlAjfGy8Ku0hBTVEdFNWAAAAAU"] www.ampsstudio.com [Thu Sep 08 02:08:29 2022] [error] [client 69.55.35.30:0] [client 69.55.35.30] ModSecurity: Access denied with code 403 (phase 2). Pattern match ".+wp-config\\\\..*" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430005"] [msg "Malware.Expert - request_uri: read wordpress configuration file"] [hostname "www.ampsstudio.com"] [uri "/wp-config.php~"] [unique_id "YxlAjf1U9e1BowqP-0apTQAAAAs"] www.ampsstudio.com [Thu Sep 08 02:08:30 2022] [error] [client 69.55.35.30:0] [client 69.55.35.30] ModSecurity: Access denied with code 403 (phase 2). Pattern match "/\\\\..+\\\\.php" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430015"] [msg "Malware.Expert - request_uri: hidden .php execute"] [hostname "www.ampsstudio.com"] [uri "/wp-admin/admin-ajax.php"] [unique_id "YxlAjqMj2_HRacs10VYc7wAAAA4"] www.ampsstudio.com [Thu Sep 08 02:08:30 2022] [error] [client 69.55.35.30:0] [client 69.55.35.30] ModSecurity: Access denied with code 403 (phase 2). Pattern match ".+wp-config\\\\..*" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430005"] [msg "Malware.Expert - request_uri: read wordpress configuration file"] [hostname "www.ampsstudio.com"] [uri "/wp-config.php"] [unique_id "YxlAjhaKuUX1zM4-HR9B_gAAAAg"] www.ampsstudio.com [Thu Sep 08 02:08:31 2022] [error] [client 69.55.35.30:0] [client 69.55.35.30] ModSecurity: Access denied with code 403 (phase 2). Pattern match ".+wp-config\\\\..*" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430005"] [msg "Malware.Expert - request_uri: read wordpress configuration file"] [hostname "www.ampsstudio.com"] [uri "/wp-config.php.old"] [unique_id "YxlAj5jhoDif7eFUEu2WXQAAAA8"] www.ampsstudio.com [Thu Sep 08 02:08:31 2022] [error] [client 69.55.35.30:0] [client 69.55.35.30] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES. [file "remote server"] [line "-1"] [id "580000"] [msg "Malware.Expert - Wordpress - Referer missing"] [hostname "www.ampsstudio.com"] [uri "/wp-admin/admin-ajax.php"] [unique_id "YxlAj8UmkmKA8WPiADJjqQAAAAc"] www.ampsstudio.com [Thu Sep 08 02:08:32 2022] [error] [client 69.55.35.30:0] [client 69.55.35.30] ModSecurity: Access denied with code 403 (phase 2). Pattern match ".+wp-config\\\\..*" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430005"] [msg "Malware.Expert - request_uri: read wordpress configuration file"] [hostname "www.ampsstudio.com"] [uri "/"] [unique_id "YxlAkDuXsAu2cbUGy9arxAAAAAM"] www.ampsstudio.com [Thu Sep 08 04:04:19 2022] [error] [client 109.70.100.29:0] AH01071: Got error 'PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179' www.ampsstudio.com [Thu Sep 08 04:04:19 2022] [error] [client 109.70.100.29:0] AH01071: Got error 'PHP message: PHP Warning: Cannot modify header information - headers already sent by (output started at /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-includes/functions.php:5275) in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/includes/sonaar-music/css/theme/custom-style.php on line 2' ampsstudio.com [Thu Sep 08 05:04:20 2022] [error] [client 152.89.196.13:0] [client 152.89.196.13] ModSecurity: Access denied with connection close (phase 2). String match "bot" at ARGS_NAMES:bot. [file "remote server"] [line "-1"] [id "570011"] [msg "Malware.Expert - Wordpress - Malware"] [hostname "ampsstudio.com"] [uri "/wp-content/index.php"] [unique_id "YxlpxLmhWKb3u_41jKCy8QAAAAA"] ampsstudio.com [Thu Sep 08 05:22:32 2022] [error] [client 152.89.196.13:0] [client 152.89.196.13] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_HEADERS_NAMES. [file "remote server"] [line "-1"] [id "580001"] [msg "Malware.Expert - Wordpress - Referer missing"] [hostname "ampsstudio.com"] [uri "/wp-content/plugins/login_wall_evv/comments.php"] [unique_id "YxluCEaBosYxn1jOefa2ZQAAAA4"] ampsstudio.com [Thu Sep 08 05:27:29 2022] [error] [client 152.89.196.13:0] [client 152.89.196.13] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES. [file "remote server"] [line "-1"] [id "580000"] [msg "Malware.Expert - Wordpress - Referer missing"] [hostname "ampsstudio.com"] [uri "/wp-admin/67930613.php"] [unique_id "YxlvMZM35AQAiHTexCZe_AAAAAE"] ampsstudio.com [Thu Sep 08 05:32:56 2022] [error] [client 152.89.196.13:0] [client 152.89.196.13] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_HEADERS_NAMES. [file "remote server"] [line "-1"] [id "580001"] [msg "Malware.Expert - Wordpress - Referer missing"] [hostname "ampsstudio.com"] [uri "/wp-content/plugins/Login-wall-INmrj/temp.php"] [unique_id "YxlweMvkLDAUiS3pEZjsTQAAAA8"] ampsstudio.com [Thu Sep 08 05:52:18 2022] [error] [client 152.89.196.13:0] [client 152.89.196.13] ModSecurity: Access denied with code 403 (phase 2). Pattern match "/wp-content/uploads/.*\\\\.php" at REQUEST_FILENAME. [file "remote server"] [line "-1"] [id "430017"] [msg "Malware.Expert - request_uri: Wordpress - prevent PHP files from executing"] [hostname "ampsstudio.com"] [uri "/wp-content/uploads/wp-require.php"] [unique_id "Yxl1Ak_7uTs0fLNhi5IRzgAAAAU"] ampsstudio.com [Thu Sep 08 07:41:26 2022] [error] [client 152.89.196.13:0] [client 152.89.196.13] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_HEADERS_NAMES. [file "remote server"] [line "-1"] [id "580001"] [msg "Malware.Expert - Wordpress - Referer missing"] [hostname "ampsstudio.com"] [uri "/wp-content/themes/pinboard/kon.php"] [unique_id "YxmOlongO3UUDe6_SnvFgwAAAAA"] www.ampsstudio.com [Thu Sep 08 09:02:15 2022] [error] [client 185.191.171.34:0] AH01071: Got error 'PHP message: PHP Warning: Attempt to read property "ID" on null in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/archive-event.php on line 15PHP message: PHP Warning: Undefined array key 0 in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/includes/classes/iron_sonaar.class.php on line 212PHP message: PHP Warning: Trying to access array offset on value of type null in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/includes/classes/iron_sonaar.class.php on line 212PHP message: PHP Warning: Undefined array key 0 in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/includes/classes/iron_sonaar.class.php on line 214PHP message: PHP Warning: Trying to access array offset on value of type null in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/includes/classes/iron_sonaar.class.php on line 214' ampsstudio.com [Thu Sep 08 09:54:22 2022] [error] [client 152.89.196.13:0] [client 152.89.196.13] ModSecurity: Access denied with code 403 (phase 2). Pattern match "/images/.*\\\\.php" at REQUEST_URI. [file "remote server"] [line "-1"] [id "470000"] [msg "Malware.Expert - request_uri: Images folder - prevent PHP files from executing"] [hostname "ampsstudio.com"] [uri "/images/robots.txt.php"] [unique_id "YxmtvpM35AQAiHTexCZf5gAAAAE"] www.ampsstudio.com [Thu Sep 08 10:00:13 2022] [error] [client 84.17.47.94:0] AH01071: Got error 'PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179' www.ampsstudio.com [Thu Sep 08 10:00:13 2022] [error] [client 84.17.47.94:0] AH01071: Got error 'PHP message: PHP Warning: Cannot modify header information - headers already sent by (output started at /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-includes/functions.php:5275) in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/includes/sonaar-music/css/theme/custom-style.php on line 2' www.ampsstudio.com [Thu Sep 08 10:05:02 2022] [error] [client 202.78.236.43:0] AH01071: Got error 'PHP message: PHP Warning: Cannot modify header information - headers already sent by (output started at /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-includes/functions.php:5275) in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/includes/sonaar-music/css/theme/custom-style.php on line 2' www.ampsstudio.com [Thu Sep 08 16:12:08 2022] [error] [client 191.101.31.116:0] AH01071: Got error 'PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179' www.ampsstudio.com [Thu Sep 08 16:12:08 2022] [error] [client 191.101.31.116:0] AH01071: Got error 'PHP message: PHP Warning: Cannot modify header information - headers already sent by (output started at /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-includes/functions.php:5275) in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/includes/sonaar-music/css/theme/custom-style.php on line 2' www.ampsstudio.com [Thu Sep 08 18:24:54 2022] [crit] [client 66.249.93.14:0] AH00529: /home/virtual/vps-aa3942/a/aede5353c4/public_html/.well-known/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/virtual/vps-aa3942/a/aede5353c4/public_html/.well-known/' is executable www.ampsstudio.com [Thu Sep 08 19:07:08 2022] [error] [client 37.139.53.44:0] AH01071: Got error 'PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179' www.ampsstudio.com [Thu Sep 08 19:07:08 2022] [error] [client 37.139.53.44:0] AH01071: Got error 'PHP message: PHP Warning: Cannot modify header information - headers already sent by (output started at /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-includes/functions.php:5275) in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/includes/sonaar-music/css/theme/custom-style.php on line 2' www.ampsstudio.com [Thu Sep 08 20:04:48 2022] [crit] [client 66.249.93.16:0] AH00529: /home/virtual/vps-aa3942/a/aede5353c4/public_html/.well-known/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/virtual/vps-aa3942/a/aede5353c4/public_html/.well-known/' is executable mail.ampsstudio.com [Thu Sep 08 20:45:24 2022] [error] [client 154.6.17.42:0] [client 154.6.17.42] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "mail.ampsstudio.com"] [uri "/.env"] [unique_id "YxpGVMvkLDAUiS3pEZju7AAAAA8"] www.ampsstudio.com [Fri Sep 09 00:36:22 2022] [error] [client 107.189.10.154:0] AH01071: Got error 'PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179' www.ampsstudio.com [Fri Sep 09 00:36:22 2022] [error] [client 107.189.10.154:0] AH01071: Got error 'PHP message: PHP Warning: Cannot modify header information - headers already sent by (output started at /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-includes/functions.php:5275) in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/includes/sonaar-music/css/theme/custom-style.php on line 2' ampsstudio.com [Fri Sep 09 01:36:03 2022] [error] [client 152.89.196.13:0] [client 152.89.196.13] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_HEADERS_NAMES. [file "remote server"] [line "-1"] [id "580001"] [msg "Malware.Expert - Wordpress - Referer missing"] [hostname "ampsstudio.com"] [uri "/wp-content/db-cache.php"] [unique_id "YxqKcxV51mGD8W27-mN1LwAAAAU"] www.ampsstudio.com [Fri Sep 09 02:12:43 2022] [error] [client 46.3.197.7:0] AH01071: Got error 'PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179' www.ampsstudio.com [Fri Sep 09 02:12:43 2022] [error] [client 46.3.197.7:0] AH01071: Got error 'PHP message: PHP Warning: Cannot modify header information - headers already sent by (output started at /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-includes/functions.php:5275) in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/includes/sonaar-music/css/theme/custom-style.php on line 2' www.ampsstudio.com [Fri Sep 09 03:33:47 2022] [error] [client 2400:6180:100:d0::a5e:b001:0] [client 2400:6180:100:d0::a5e:b001] ModSecurity: Access denied with code 403 (phase 2). Pattern match "/fonts/.*\\\\.php" at REQUEST_URI. [file "remote server"] [line "-1"] [id "468000"] [msg "Malware.Expert - request_uri: Fonts folder - prevent PHP files from executing"] [hostname "www.ampsstudio.com"] [uri "/wp-includes/fonts/font.php"] [unique_id "YxqmC3My6H6aCy2AqmV4-gAAAAc"] www.ampsstudio.com [Fri Sep 09 03:33:49 2022] [error] [client 2400:6180:100:d0::a5e:b001:0] [client 2400:6180:100:d0::a5e:b001] ModSecurity: Access denied with code 403 (phase 2). Pattern match "/wp-content/uploads/.*\\\\.php" at REQUEST_FILENAME. [file "remote server"] [line "-1"] [id "430017"] [msg "Malware.Expert - request_uri: Wordpress - prevent PHP files from executing"] [hostname "www.ampsstudio.com"] [uri "/wp-content/uploads/uploads.php"] [unique_id "YxqmDcvlzCfo_o1SNrVCnQAAAAE"] www.ampsstudio.com [Fri Sep 09 03:33:52 2022] [error] [client 2400:6180:100:d0::a5e:b001:0] [client 2400:6180:100:d0::a5e:b001] ModSecurity: Access denied with code 403 (phase 2). Pattern match ".+wp-config\\\\..*" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430005"] [msg "Malware.Expert - request_uri: read wordpress configuration file"] [hostname "www.ampsstudio.com"] [uri "/wp-admin/admin-post.php"] [unique_id "YxqmEJyzh3any1r0NQU_dQAAAAU"] www.ampsstudio.com [Fri Sep 09 03:33:54 2022] [error] [client 2400:6180:100:d0::a5e:b001:0] [client 2400:6180:100:d0::a5e:b001] ModSecurity: Access denied with code 403 (phase 2). Pattern match ".+wp-config\\\\..*" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430005"] [msg "Malware.Expert - request_uri: read wordpress configuration file"] [hostname "www.ampsstudio.com"] [uri "/wp-admin/admin-ajax.php"] [unique_id "YxqmEj9KHeC5ZaBhGAq_3AAAAAI"] www.ampsstudio.com [Fri Sep 09 03:33:55 2022] [error] [client 2400:6180:100:d0::a5e:b001:0] [client 2400:6180:100:d0::a5e:b001] ModSecurity: Access denied with code 403 (phase 2). Pattern match ".+wp-config\\\\..*" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430005"] [msg "Malware.Expert - request_uri: read wordpress configuration file"] [hostname "www.ampsstudio.com"] [uri "/wp-config.php~"] [unique_id "YxqmE3My6H6aCy2AqmV4-wAAAAc"] www.ampsstudio.com [Fri Sep 09 03:33:56 2022] [error] [client 2400:6180:100:d0::a5e:b001:0] [client 2400:6180:100:d0::a5e:b001] ModSecurity: Access denied with code 403 (phase 2). Pattern match "/\\\\..+\\\\.php" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430015"] [msg "Malware.Expert - request_uri: hidden .php execute"] [hostname "www.ampsstudio.com"] [uri "/wp-admin/admin-ajax.php"] [unique_id "YxqmFMvlzCfo_o1SNrVCngAAAAE"] www.ampsstudio.com [Fri Sep 09 03:33:57 2022] [error] [client 2400:6180:100:d0::a5e:b001:0] [client 2400:6180:100:d0::a5e:b001] ModSecurity: Access denied with code 403 (phase 2). Pattern match ".+wp-config\\\\..*" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430005"] [msg "Malware.Expert - request_uri: read wordpress configuration file"] [hostname "www.ampsstudio.com"] [uri "/wp-config.php"] [unique_id "YxqmFdWjgKdBibxFhDX-9QAAAAQ"] www.ampsstudio.com [Fri Sep 09 03:33:59 2022] [error] [client 2400:6180:100:d0::a5e:b001:0] [client 2400:6180:100:d0::a5e:b001] ModSecurity: Access denied with code 403 (phase 2). Pattern match ".+wp-config\\\\..*" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430005"] [msg "Malware.Expert - request_uri: read wordpress configuration file"] [hostname "www.ampsstudio.com"] [uri "/wp-config.php.old"] [unique_id "YxqmFwBDI4M_PvfvCjckAgAAAAM"] www.ampsstudio.com [Fri Sep 09 03:34:00 2022] [error] [client 2400:6180:100:d0::a5e:b001:0] [client 2400:6180:100:d0::a5e:b001] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES. [file "remote server"] [line "-1"] [id "580000"] [msg "Malware.Expert - Wordpress - Referer missing"] [hostname "www.ampsstudio.com"] [uri "/wp-admin/admin-ajax.php"] [unique_id "YxqmGJyzh3any1r0NQU_dgAAAAU"] www.ampsstudio.com [Fri Sep 09 03:34:01 2022] [error] [client 2400:6180:100:d0::a5e:b001:0] [client 2400:6180:100:d0::a5e:b001] ModSecurity: Access denied with code 403 (phase 2). Pattern match ".+wp-config\\\\..*" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430005"] [msg "Malware.Expert - request_uri: read wordpress configuration file"] [hostname "www.ampsstudio.com"] [uri "/"] [unique_id "YxqmGaV8vNcNMp-zEUr0lgAAAAA"] www.ampsstudio.com [Fri Sep 09 03:56:56 2022] [error] [client 88.147.152.99:0] AH01071: Got error 'PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179' www.ampsstudio.com [Fri Sep 09 03:56:56 2022] [error] [client 88.147.152.99:0] AH01071: Got error 'PHP message: PHP Warning: Cannot modify header information - headers already sent by (output started at /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-includes/functions.php:5275) in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/includes/sonaar-music/css/theme/custom-style.php on line 2' ampsstudio.com [Fri Sep 09 04:38:26 2022] [error] [client 152.89.196.13:0] [client 152.89.196.13] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_HEADERS_NAMES. [file "remote server"] [line "-1"] [id "580001"] [msg "Malware.Expert - Wordpress - Referer missing"] [hostname "ampsstudio.com"] [uri "/wp-content/themes/astra/inc/builder/type/header/header.php"] [unique_id "Yxq1MqV8vNcNMp-zEUr0uAAAAAA"] www.ampsstudio.com [Fri Sep 09 05:35:21 2022] [error] [client 191.101.31.13:0] AH01071: Got error 'PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179' www.ampsstudio.com [Fri Sep 09 05:35:21 2022] [error] [client 191.101.31.13:0] AH01071: Got error 'PHP message: PHP Warning: Cannot modify header information - headers already sent by (output started at /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-includes/functions.php:5275) in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/includes/sonaar-music/css/theme/custom-style.php on line 2' ampsstudio.com [Fri Sep 09 05:38:02 2022] [error] [client 152.89.196.13:0] [client 152.89.196.13] ModSecurity: Access denied with code 403 (phase 2). Pattern match "=http://" at REQUEST_URI. [file "remote server"] [line "-1"] [id "405001"] [msg "Malware.Expert - request_uri: remote php file include"] [hostname "ampsstudio.com"] [uri "/wp-content/themes/busify/bindex.php"] [unique_id "YxrDKsvlzCfo_o1SNrVC3AAAAAE"] ampsstudio.com [Fri Sep 09 06:34:38 2022] [error] [client 152.89.196.13:0] [client 152.89.196.13] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_HEADERS_NAMES. [file "remote server"] [line "-1"] [id "580001"] [msg "Malware.Expert - Wordpress - Referer missing"] [hostname "ampsstudio.com"] [uri "/wp-content/plugins/so-widgets-bundle/widgets/widgets.php"] [unique_id "YxrQbZyzh3any1r0NQU_4AAAAAU"] ampsstudio.com [Fri Sep 09 07:13:57 2022] [error] [client 20.169.22.178:0] [client 20.169.22.178] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "ampsstudio.com"] [uri "/.env"] [unique_id "YxrZpZyzh3any1r0NQU_6QAAAAU"] ampsstudio.com [Fri Sep 09 08:19:18 2022] [error] [client 51.142.241.69:0] [client 51.142.241.69] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "ampsstudio.com"] [uri "/.env"] [unique_id "Yxro9qV8vNcNMp-zEUr1JgAAAAA"] ampsstudio.com [Fri Sep 09 09:05:54 2022] [error] [client 152.89.196.13:0] [client 152.89.196.13] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_HEADERS_NAMES. [file "remote server"] [line "-1"] [id "580001"] [msg "Malware.Expert - Wordpress - Referer missing"] [hostname "ampsstudio.com"] [uri "/wp-content/themes/classic/inc/index.php"] [unique_id "Yxrz4rnXHPAddzZcICpWIAAAAAY"] www.ampsstudio.com [Fri Sep 09 15:15:34 2022] [error] [client 66.249.66.75:0] AH01071: Got error 'PHP message: PHP Warning: Undefined array key "block" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/includes/classes/iron_sonaar.class.php on line 212PHP message: PHP Warning: Trying to access array offset on value of type null in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/includes/classes/iron_sonaar.class.php on line 212PHP message: PHP Warning: Undefined array key "block" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/includes/classes/iron_sonaar.class.php on line 214PHP message: PHP Warning: Trying to access array offset on value of type null in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/includes/classes/iron_sonaar.class.php on line 214' ampsstudio.com [Fri Sep 09 20:15:21 2022] [error] [client 20.114.149.128:0] [client 20.114.149.128] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "ampsstudio.com"] [uri "/.env"] [unique_id "YxuQyT9KHeC5ZaBhGArCFgAAAAI"] cpanel.ampsstudio.com [Fri Sep 09 20:39:31 2022] [error] [client 20.114.149.128:0] [client 20.114.149.128] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "cpanel.ampsstudio.com"] [uri "/.env"] [unique_id "YxuWc4kyLOk83M3HveMRMQAAAAE"] ampsstudio.com [Fri Sep 09 20:56:11 2022] [error] [client 51.142.181.246:0] AH01276: Cannot serve directory /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-admin/css/: No matching DirectoryIndex (index.php,index.html,index.htm) found, and server-generated directory index forbidden by Options directive mail.ampsstudio.com [Fri Sep 09 21:41:37 2022] [error] [client 20.114.149.128:0] [client 20.114.149.128] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "mail.ampsstudio.com"] [uri "/.env"] [unique_id "YxulAWEfgTVNahCoewGYOgAAAA0"] webdisk.ampsstudio.com [Fri Sep 09 22:46:30 2022] [error] [client 20.114.149.128:0] [client 20.114.149.128] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "webdisk.ampsstudio.com"] [uri "/.env"] [unique_id "Yxu0Nj3qaUjnLLzkcS4sKwAAAAk"] webmail.ampsstudio.com [Fri Sep 09 22:56:29 2022] [error] [client 20.114.149.128:0] [client 20.114.149.128] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "webmail.ampsstudio.com"] [uri "/.env"] [unique_id "Yxu2jd5QmhZnjzt61uTKmwAAAAg"] www.ampsstudio.com [Sat Sep 10 00:46:19 2022] [error] [client 193.188.21.9:0] AH01071: Got error 'PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179' www.ampsstudio.com [Sat Sep 10 00:46:19 2022] [error] [client 193.188.21.9:0] AH01071: Got error 'PHP message: PHP Warning: Cannot modify header information - headers already sent by (output started at /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-includes/functions.php:5275) in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/includes/sonaar-music/css/theme/custom-style.php on line 2' ampsstudio.com [Sat Sep 10 01:04:51 2022] [error] [client 217.138.216.246:0] [client 217.138.216.246] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "ampsstudio.com"] [uri "/.env"] [unique_id "YxvUoz3qaUjnLLzkcS4sVgAAAAk"] www.ampsstudio.com [Sat Sep 10 01:34:05 2022] [error] [client 193.188.21.9:0] AH01071: Got error 'PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179' www.ampsstudio.com [Sat Sep 10 01:34:05 2022] [error] [client 193.188.21.9:0] AH01071: Got error 'PHP message: PHP Warning: Cannot modify header information - headers already sent by (output started at /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-includes/functions.php:5275) in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/includes/sonaar-music/css/theme/custom-style.php on line 2' ampsstudio.com [Sat Sep 10 04:27:12 2022] [error] [client 152.89.196.13:0] [client 152.89.196.13] ModSecurity: Access denied with connection close (phase 2). Operator EQ matched 1 at ARGS_NAMES. [file "remote server"] [line "-1"] [id "570046"] [msg "Malware.Expert - Malware"] [hostname "ampsstudio.com"] [uri "/myk.php"] [unique_id "YxwEEFJ6j-3NHCuXiilapgAAAAQ"] www.ampsstudio.com [Sat Sep 10 07:05:42 2022] [error] [client 161.117.10.233:0] AH01071: Got error 'PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179' www.ampsstudio.com [Sat Sep 10 07:05:42 2022] [error] [client 161.117.10.233:0] AH01071: Got error 'PHP message: PHP Warning: Cannot modify header information - headers already sent by (output started at /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-includes/functions.php:5275) in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/includes/sonaar-music/css/theme/custom-style.php on line 2' ampsstudio.com [Sat Sep 10 10:04:22 2022] [error] [client 41.216.188.45:0] [client 41.216.188.45] ModSecurity: Access denied with code 403 (phase 1). Pattern match "\\\\.\\\\./\\\\.\\\\." at REQUEST_URI. [file "remote server"] [line "-1"] [id "430064"] [msg "Malware.Expert - request_uri: directory travel"] [hostname "ampsstudio.com"] [uri "/wp-admin/admin-post.php"] [unique_id "YxxTFkZvFQ2oiZhg0aMhQQAAAAM"] www.ampsstudio.com [Sat Sep 10 12:31:44 2022] [error] [client 176.109.189.183:0] AH01071: Got error 'PHP message: PHP Warning: Undefined array key "HTTP_USER_AGENT" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/bookly-responsive-appointment-booking-tool/frontend/modules/booking/ShortCode.php on line 66' www.ampsstudio.com [Sat Sep 10 13:14:58 2022] [error] [client 46.148.206.226:0] AH01071: Got error 'PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179' www.ampsstudio.com [Sat Sep 10 13:14:58 2022] [error] [client 46.148.206.226:0] AH01071: Got error 'PHP message: PHP Warning: Cannot modify header information - headers already sent by (output started at /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-includes/functions.php:5275) in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/includes/sonaar-music/css/theme/custom-style.php on line 2' ampsstudio.com [Sat Sep 10 15:25:39 2022] [error] [client 54.162.174.189:0] [client 54.162.174.189] ModSecurity: Access denied with code 403 (phase 2). String match "/.git/config" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430058"] [msg "Malware.Expert - request_uri: .git config"] [hostname "ampsstudio.com"] [uri "/.git/config"] [unique_id "YxyeY0ZvFQ2oiZhg0aMh4QAAAAM"] www.ampsstudio.com [Sat Sep 10 15:26:55 2022] [crit] [client 66.249.92.24:0] AH00529: /home/virtual/vps-aa3942/a/aede5353c4/public_html/.well-known/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/virtual/vps-aa3942/a/aede5353c4/public_html/.well-known/' is executable www.ampsstudio.com [Sat Sep 10 15:45:20 2022] [error] [client 141.98.9.47:0] AH01071: Got error 'PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179' www.ampsstudio.com [Sat Sep 10 15:45:20 2022] [error] [client 141.98.9.47:0] AH01071: Got error 'PHP message: PHP Warning: Cannot modify header information - headers already sent by (output started at /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-includes/functions.php:5275) in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/includes/sonaar-music/css/theme/custom-style.php on line 2' www.ampsstudio.com [Sat Sep 10 16:01:34 2022] [error] [client 185.191.171.37:0] AH01071: Got error 'PHP message: PHP Warning: Attempt to read property "ID" on null in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/archive-event.php on line 15PHP message: PHP Warning: Undefined array key 0 in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/includes/classes/iron_sonaar.class.php on line 212PHP message: PHP Warning: Trying to access array offset on value of type null in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/includes/classes/iron_sonaar.class.php on line 212PHP message: PHP Warning: Undefined array key 0 in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/includes/classes/iron_sonaar.class.php on line 214PHP message: PHP Warning: Trying to access array offset on value of type null in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/includes/classes/iron_sonaar.class.php on line 214' ampsstudio.com [Sat Sep 10 16:53:04 2022] [error] [client 20.86.80.131:0] [client 20.86.80.131] ModSecurity: Access denied with code 403 (phase 2). String match "/.git/config" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430058"] [msg "Malware.Expert - request_uri: .git config"] [hostname "ampsstudio.com"] [uri "/.git/config"] [unique_id "Yxyy4JoKUAKACSB3iXyWUQAAAAI"] ampsstudio.com [Sat Sep 10 17:00:30 2022] [error] [client 20.86.80.131:0] [client 20.86.80.131] ModSecurity: Access denied with code 403 (phase 2). String match "/.git/config" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430058"] [msg "Malware.Expert - request_uri: .git config"] [hostname "ampsstudio.com"] [uri "/.git/config"] [unique_id "Yxy0nucOGXUpD6mm8J5PoAAAAAU"] ampsstudio.com [Sat Sep 10 17:36:10 2022] [error] [client 20.86.80.131:0] [client 20.86.80.131] ModSecurity: Access denied with code 403 (phase 2). String match "/.git/config" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430058"] [msg "Malware.Expert - request_uri: .git config"] [hostname "ampsstudio.com"] [uri "/.git/config"] [unique_id "Yxy8-jYotlmYuJT8cQuGPwAAAAk"] www.ampsstudio.com [Sat Sep 10 17:37:46 2022] [error] [client 176.109.189.183:0] AH01071: Got error 'PHP message: PHP Warning: Undefined array key "HTTP_USER_AGENT" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/bookly-responsive-appointment-booking-tool/frontend/modules/booking/ShortCode.php on line 66' ampsstudio.com [Sat Sep 10 18:14:28 2022] [error] [client 20.214.202.181:0] [client 20.214.202.181] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "ampsstudio.com"] [uri "/.env.bak"] [unique_id "YxzF9BBzURtBg16z6l2kwQAAAAc"] ampsstudio.com [Sat Sep 10 18:14:33 2022] [error] [client 20.214.202.181:0] [client 20.214.202.181] ModSecurity: Access denied with code 403 (phase 2). String match ".aws/credentials" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430069"] [msg "Malware.Expert - request_uri: AWS Credentials"] [hostname "ampsstudio.com"] [uri "/.aws/credentials"] [unique_id "YxzF-TYotlmYuJT8cQuGSwAAAAk"] ampsstudio.com [Sat Sep 10 20:18:07 2022] [error] [client 20.169.43.167:0] AH01276: Cannot serve directory /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-admin/css/: No matching DirectoryIndex (index.php,index.html,index.htm) found, and server-generated directory index forbidden by Options directive www.ampsstudio.com [Sat Sep 10 22:07:13 2022] [error] [client 34.76.85.149:0] AH01071: Got error 'PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179' www.ampsstudio.com [Sat Sep 10 22:07:13 2022] [error] [client 34.76.85.149:0] AH01071: Got error 'PHP message: PHP Warning: Cannot modify header information - headers already sent by (output started at /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-includes/functions.php:5275) in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/includes/sonaar-music/css/theme/custom-style.php on line 2' ampsstudio.com [Sat Sep 10 23:33:20 2022] [error] [client 20.86.80.131:0] [client 20.86.80.131] ModSecurity: Access denied with code 403 (phase 2). String match "/.git/config" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430058"] [msg "Malware.Expert - request_uri: .git config"] [hostname "ampsstudio.com"] [uri "/.git/config"] [unique_id "Yx0QsDYotlmYuJT8cQuGuAAAAAk"] cpanel.ampsstudio.com [Sun Sep 11 00:17:22 2022] [error] [client 20.214.202.181:0] [client 20.214.202.181] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "cpanel.ampsstudio.com"] [uri "/.env.bak"] [unique_id "Yx0bAlJ6j-3NHCuXiilclwAAAAQ"] cpanel.ampsstudio.com [Sun Sep 11 00:17:27 2022] [error] [client 20.214.202.181:0] [client 20.214.202.181] ModSecurity: Access denied with code 403 (phase 2). String match ".aws/credentials" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430069"] [msg "Malware.Expert - request_uri: AWS Credentials"] [hostname "cpanel.ampsstudio.com"] [uri "/.aws/credentials"] [unique_id "Yx0bB0ZvFQ2oiZhg0aMiqwAAAAM"] www.ampsstudio.com [Sun Sep 11 01:11:07 2022] [error] [client 185.191.171.38:0] AH01071: Got error 'PHP message: PHP Warning: Attempt to read property "post_content" on null in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/wordpress-seo/src/memoizers/meta-tags-context-memoizer.php on line 140PHP message: PHP Warning: Attempt to read property "post_modified_gmt" on null in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/wordpress-seo/src/presentations/indexable-post-type-presentation.php on line 289PHP message: PHP Warning: Attempt to read property "post_date_gmt" on null in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/wordpress-seo/src/presentations/indexable-post-type-presentation.php on line 289PHP message: PHP Warning: Attempt to read property "post_author" on null in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/wordpress-seo/src/presenters/slack/enhanced-data-presenter.php on line 46PHP message: PHP Warning: Attempt to read property "post_date_gmt" on null in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/wordpress-seo/src/generators/schema/webpage.php on line 51PHP message: PHP Warning: Attempt to read property "post_modified_gmt" on null in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/wordpress-seo/src/generators/schema/webpage.php on line 52PHP message: PHP Warning: Undefined array key 0 in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/includes/classes/iron_sonaar.class.php on line 212PHP message: PHP Warning: Trying to access array offset on value of type null in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/includes/classes/iron_sonaar.class.php on line 212PHP message: PHP Warning: Undefined array key 0 in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/includes/classes/iron_sonaar.class.php on line 214PHP message: PHP Warning: Trying to access array offset on value of type null in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/includes/classes/iron_sonaar.class.php on line 214' www.ampsstudio.com [Sun Sep 11 02:22:44 2022] [error] [client 111.240.207.166:0] AH01071: Got error 'PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179' www.ampsstudio.com [Sun Sep 11 02:22:44 2022] [error] [client 111.240.207.166:0] AH01071: Got error 'PHP message: PHP Warning: Cannot modify header information - headers already sent by (output started at /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-includes/functions.php:5275) in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/includes/sonaar-music/css/theme/custom-style.php on line 2' www.ampsstudio.com [Sun Sep 11 02:30:19 2022] [error] [client 94.142.244.16:0] AH01071: Got error 'PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179' www.ampsstudio.com [Sun Sep 11 02:30:19 2022] [error] [client 94.142.244.16:0] AH01071: Got error 'PHP message: PHP Warning: Cannot modify header information - headers already sent by (output started at /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-includes/functions.php:5275) in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/includes/sonaar-music/css/theme/custom-style.php on line 2' webmail.ampsstudio.com [Sun Sep 11 02:33:32 2022] [error] [client 18.212.160.219:0] [client 18.212.160.219] ModSecurity: Access denied with code 403 (phase 2). String match "/.git/config" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430058"] [msg "Malware.Expert - request_uri: .git config"] [hostname "webmail.ampsstudio.com"] [uri "/.git/config"] [unique_id "Yx067OJv3GjoZk9ei5VUIQAAAAE"] www.ampsstudio.com [Sun Sep 11 04:44:10 2022] [error] [client 83.130.53.139:0] AH01071: Got error 'PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179' www.ampsstudio.com [Sun Sep 11 04:44:10 2022] [error] [client 83.130.53.139:0] AH01071: Got error 'PHP message: PHP Warning: Cannot modify header information - headers already sent by (output started at /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-includes/functions.php:5275) in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/includes/sonaar-music/css/theme/custom-style.php on line 2' ampsstudio.com [Sun Sep 11 04:44:29 2022] [error] [client 147.78.47.249:0] [client 147.78.47.249] ModSecurity: Access denied with code 403 (phase 2). String match "connector.minimal.php" at REQUEST_URI. [file "remote server"] [line "-1"] [id "500083"] [msg "Malware.Expert - request_uri: 0-Day - Wordpress filemanager plugin"] [hostname "ampsstudio.com"] [uri "/wp-content/plugins/wp-file-manager/lib/php/connector.minimal.php"] [unique_id "Yx1ZnYpbgltmbTGPLafFwAAAAAg"] www.ampsstudio.com [Sun Sep 11 07:09:43 2022] [error] [client 185.244.175.181:0] [client 185.244.175.181] ModSecurity: Access denied with code 403 (phase 2). String match "connector.minimal.php" at REQUEST_URI. [file "remote server"] [line "-1"] [id "500083"] [msg "Malware.Expert - request_uri: 0-Day - Wordpress filemanager plugin"] [hostname "www.ampsstudio.com"] [uri "/wp-content/plugins/wp-file-manager/lib/php/connector.minimal.php"] [unique_id "Yx17pzvDWh-w_SEtqf781wAAAAU"] www.ampsstudio.com [Sun Sep 11 11:03:43 2022] [error] [client 104.168.82.44:0] AH01071: Got error 'PHP message: PHP Warning: Cannot modify header information - headers already sent by (output started at /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-includes/functions.php:5275) in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/includes/sonaar-music/css/theme/custom-style.php on line 2' www.ampsstudio.com [Sun Sep 11 11:11:14 2022] [error] [client 185.182.11.127:0] AH01071: Got error 'PHP message: PHP Warning: Cannot modify header information - headers already sent by (output started at /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-includes/functions.php:5275) in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/includes/sonaar-music/css/theme/custom-style.php on line 2' ampsstudio.com [Sun Sep 11 12:17:06 2022] [error] [client 51.15.16.119:0] [client 51.15.16.119] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "ampsstudio.com"] [uri "/.env"] [unique_id "Yx3DsvoChTjfDxsgiRFjmAAAAAI"] ampsstudio.com [Sun Sep 11 13:07:35 2022] [error] [client 54.162.174.189:0] [client 54.162.174.189] ModSecurity: Access denied with code 403 (phase 2). String match "/.git/config" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430058"] [msg "Malware.Expert - request_uri: .git config"] [hostname "ampsstudio.com"] [uri "/.git/config"] [unique_id "Yx3Ph9xRKqczvl1QBQXP6QAAAAk"] mail.ampsstudio.com [Sun Sep 11 15:13:12 2022] [error] [client 18.212.160.219:0] [client 18.212.160.219] ModSecurity: Access denied with code 403 (phase 2). String match "/.git/config" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430058"] [msg "Malware.Expert - request_uri: .git config"] [hostname "mail.ampsstudio.com"] [uri "/.git/config"] [unique_id "Yx3s-JX81YwrdqU9UUlpAAAAAAA"] mail.ampsstudio.com [Sun Sep 11 15:27:59 2022] [error] [client 20.214.202.181:0] [client 20.214.202.181] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "mail.ampsstudio.com"] [uri "/.env.bak"] [unique_id "Yx3wb_Al6MJWglAKCs4z7wAAAAc"] mail.ampsstudio.com [Sun Sep 11 15:28:04 2022] [error] [client 20.214.202.181:0] [client 20.214.202.181] ModSecurity: Access denied with code 403 (phase 2). String match ".aws/credentials" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430069"] [msg "Malware.Expert - request_uri: AWS Credentials"] [hostname "mail.ampsstudio.com"] [uri "/.aws/credentials"] [unique_id "Yx3wdC7Kxx8SrYUoNKXPrAAAAAo"] www.ampsstudio.com [Sun Sep 11 15:51:56 2022] [error] [client 3.224.109.39:0] AH01071: Got error 'PHP message: PHP Warning: Undefined array key "HTTP_USER_AGENT" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/bookly-responsive-appointment-booking-tool/frontend/modules/booking/ShortCode.php on line 66' www.ampsstudio.com [Sun Sep 11 16:24:31 2022] [crit] [client 64.233.173.96:0] AH00529: /home/virtual/vps-aa3942/a/aede5353c4/public_html/.well-known/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/virtual/vps-aa3942/a/aede5353c4/public_html/.well-known/' is executable www.ampsstudio.com [Sun Sep 11 17:22:32 2022] [error] [client 3.224.109.39:0] AH01071: Got error 'PHP message: PHP Warning: Undefined array key "HTTP_USER_AGENT" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/bookly-responsive-appointment-booking-tool/frontend/modules/booking/ShortCode.php on line 66' www.ampsstudio.com [Sun Sep 11 18:53:20 2022] [error] [client 3.224.109.39:0] AH01071: Got error 'PHP message: PHP Warning: Undefined array key "HTTP_USER_AGENT" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/bookly-responsive-appointment-booking-tool/frontend/modules/booking/ShortCode.php on line 66' www.ampsstudio.com [Sun Sep 11 21:09:48 2022] [error] [client 109.70.100.20:0] AH01071: Got error 'PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179' www.ampsstudio.com [Sun Sep 11 21:09:48 2022] [error] [client 109.70.100.20:0] AH01071: Got error 'PHP message: PHP Warning: Cannot modify header information - headers already sent by (output started at /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-includes/functions.php:5275) in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/includes/sonaar-music/css/theme/custom-style.php on line 2' www.ampsstudio.com [Sun Sep 11 21:13:20 2022] [error] [client 185.220.101.22:0] AH01071: Got error 'PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179' www.ampsstudio.com [Sun Sep 11 21:13:20 2022] [error] [client 185.220.101.22:0] AH01071: Got error 'PHP message: PHP Warning: Cannot modify header information - headers already sent by (output started at /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-includes/functions.php:5275) in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/includes/sonaar-music/css/theme/custom-style.php on line 2' ampsstudio.com [Sun Sep 11 21:34:50 2022] [error] [client 91.191.209.74:0] [client 91.191.209.74] ModSecurity: Access denied with connection close (phase 2). Pattern match "^wp_is_mobile$" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "420038"] [msg "Malware.Expert - user-agent: Webshell user-agent"] [hostname "ampsstudio.com"] [uri "/wp-load.php"] [unique_id "Yx5GatxRKqczvl1QBQXQzwAAAAk"] ampsstudio.com [Sun Sep 11 21:34:51 2022] [error] [client 91.191.209.74:0] [client 91.191.209.74] ModSecurity: Access denied with connection close (phase 2). Pattern match "^wp_is_mobile$" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "420038"] [msg "Malware.Expert - user-agent: Webshell user-agent"] [hostname "ampsstudio.com"] [uri "/wp-load.php"] [unique_id "Yx5Ga4pbgltmbTGPLafHbAAAAAg"] ampsstudio.com [Sun Sep 11 21:35:03 2022] [error] [client 91.191.209.74:0] [client 91.191.209.74] ModSecurity: Access denied with connection close (phase 2). Pattern match "^wp_is_mobile$" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "420038"] [msg "Malware.Expert - user-agent: Webshell user-agent"] [hostname "ampsstudio.com"] [uri "/s_e.php"] [unique_id "Yx5Gd6sToRpKfCjh7gztzwAAAAE"] ampsstudio.com [Sun Sep 11 21:36:19 2022] [error] [client 91.191.209.74:0] [client 91.191.209.74] ModSecurity: Access denied with connection close (phase 2). Pattern match "^wp_is_mobile$" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "420038"] [msg "Malware.Expert - user-agent: Webshell user-agent"] [hostname "ampsstudio.com"] [uri "/s_ne.php"] [unique_id "Yx5Gw_Al6MJWglAKCs40kwAAAAc"] ampsstudio.com [Sun Sep 11 21:39:55 2022] [error] [client 91.191.209.74:0] [client 91.191.209.74] ModSecurity: Access denied with connection close (phase 2). Pattern match "^wp_is_mobile$" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "420038"] [msg "Malware.Expert - user-agent: Webshell user-agent"] [hostname "ampsstudio.com"] [uri "/radio.php"] [unique_id "Yx5Hm8M8hQJstMZDuzpg9wAAAAY"] ampsstudio.com [Sun Sep 11 21:40:01 2022] [error] [client 91.191.209.74:0] [client 91.191.209.74] ModSecurity: Access denied with connection close (phase 2). Pattern match "^wp_is_mobile$" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "420038"] [msg "Malware.Expert - user-agent: Webshell user-agent"] [hostname "ampsstudio.com"] [uri "/lock360.php"] [unique_id "Yx5HoZX81YwrdqU9UUlpswAAAAA"] ampsstudio.com [Sun Sep 11 21:40:09 2022] [error] [client 91.191.209.74:0] [client 91.191.209.74] ModSecurity: Access denied with connection close (phase 2). Pattern match "^wp_is_mobile$" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "420038"] [msg "Malware.Expert - user-agent: Webshell user-agent"] [hostname "ampsstudio.com"] [uri "/wp-load.php"] [unique_id "Yx5HqTvDWh-w_SEtqf7-XAAAAAU"] ampsstudio.com [Sun Sep 11 21:41:02 2022] [error] [client 91.191.209.74:0] [client 91.191.209.74] ModSecurity: Access denied with connection close (phase 2). Pattern match "^wp_is_mobile$" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "420038"] [msg "Malware.Expert - user-agent: Webshell user-agent"] [hostname "ampsstudio.com"] [uri "/xmrlpc.php"] [unique_id "Yx5H3txRKqczvl1QBQXQ0wAAAAk"] ampsstudio.com [Sun Sep 11 21:41:12 2022] [error] [client 91.191.209.74:0] [client 91.191.209.74] ModSecurity: Access denied with connection close (phase 2). Pattern match "^wp_is_mobile$" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "420038"] [msg "Malware.Expert - user-agent: Webshell user-agent"] [hostname "ampsstudio.com"] [uri "/xmlrpcs.php"] [unique_id "Yx5H6IpbgltmbTGPLafHcAAAAAg"] ampsstudio.com [Sun Sep 11 21:41:14 2022] [error] [client 91.191.209.74:0] [client 91.191.209.74] ModSecurity: Access denied with connection close (phase 2). Pattern match "^wp_is_mobile$" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "420038"] [msg "Malware.Expert - user-agent: Webshell user-agent"] [hostname "ampsstudio.com"] [uri "/wp-admin.php"] [unique_id "Yx5H6qsToRpKfCjh7gzt0wAAAAE"] ampsstudio.com [Sun Sep 11 21:41:21 2022] [error] [client 91.191.209.74:0] [client 91.191.209.74] ModSecurity: Access denied with connection close (phase 2). Pattern match "^wp_is_mobile$" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "420038"] [msg "Malware.Expert - user-agent: Webshell user-agent"] [hostname "ampsstudio.com"] [uri "/qindex.php"] [unique_id "Yx5H8cM8hQJstMZDuzpg-AAAAAY"] ampsstudio.com [Sun Sep 11 21:41:30 2022] [error] [client 91.191.209.74:0] [client 91.191.209.74] ModSecurity: Access denied with connection close (phase 2). Pattern match "^wp_is_mobile$" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "420038"] [msg "Malware.Expert - user-agent: Webshell user-agent"] [hostname "ampsstudio.com"] [uri "/doc.php"] [unique_id "Yx5H-txRKqczvl1QBQXQ1AAAAAk"] ampsstudio.com [Sun Sep 11 21:41:34 2022] [error] [client 91.191.209.74:0] [client 91.191.209.74] ModSecurity: Access denied with code 403 (phase 2). Match of "contains index.php" against "REQUEST_URI" required. [file "remote server"] [line "-1"] [id "570075"] [msg "Malware.Expert - Malware"] [hostname "ampsstudio.com"] [uri "/wp_wrong_datlib.php"] [unique_id "Yx5H_pX81YwrdqU9UUlptQAAAAA"] ampsstudio.com [Sun Sep 11 21:41:35 2022] [error] [client 91.191.209.74:0] [client 91.191.209.74] ModSecurity: Access denied with code 403 (phase 2). Match of "contains index.php" against "REQUEST_URI" required. [file "remote server"] [line "-1"] [id "570075"] [msg "Malware.Expert - Malware"] [hostname "ampsstudio.com"] [uri "/beence.php"] [unique_id "Yx5H_zvDWh-w_SEtqf7-XgAAAAU"] ampsstudio.com [Sun Sep 11 21:41:39 2022] [error] [client 91.191.209.74:0] [client 91.191.209.74] ModSecurity: Access denied with connection close (phase 2). Pattern match "^wp_is_mobile$" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "420038"] [msg "Malware.Expert - user-agent: Webshell user-agent"] [hostname "ampsstudio.com"] [uri "/ups.php"] [unique_id "Yx5IA9xRKqczvl1QBQXQ1QAAAAk"] ampsstudio.com [Sun Sep 11 21:41:48 2022] [error] [client 91.191.209.74:0] [client 91.191.209.74] ModSecurity: Access denied with connection close (phase 2). Pattern match "^wp_is_mobile$" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "420038"] [msg "Malware.Expert - user-agent: Webshell user-agent"] [hostname "ampsstudio.com"] [uri "/wp-signin.php"] [unique_id "Yx5IDLxMWIwxnpzyrrYbMwAAAAs"] ampsstudio.com [Sun Sep 11 21:41:49 2022] [error] [client 91.191.209.74:0] [client 91.191.209.74] ModSecurity: Access denied with connection close (phase 2). Pattern match "^wp_is_mobile$" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "420038"] [msg "Malware.Expert - user-agent: Webshell user-agent"] [hostname "ampsstudio.com"] [uri "/media-admin.php"] [unique_id "Yx5IDdxRKqczvl1QBQXQ1gAAAAk"] ampsstudio.com [Sun Sep 11 21:41:57 2022] [error] [client 91.191.209.74:0] [client 91.191.209.74] ModSecurity: Access denied with code 403 (phase 2). Match of "contains index.php" against "REQUEST_URI" required. [file "remote server"] [line "-1"] [id "570075"] [msg "Malware.Expert - Malware"] [hostname "ampsstudio.com"] [uri "/export.php"] [unique_id "Yx5IFcOOLqCNFzC4QZ58dwAAAAQ"] ampsstudio.com [Sun Sep 11 21:41:57 2022] [error] [client 91.191.209.74:0] [client 91.191.209.74] ModSecurity: Access denied with code 403 (phase 2). Match of "contains index.php" against "REQUEST_URI" required. [file "remote server"] [line "-1"] [id "570075"] [msg "Malware.Expert - Malware"] [hostname "ampsstudio.com"] [uri "/wp-content/export.php"] [unique_id "Yx5IFbxMWIwxnpzyrrYbNAAAAAs"] ampsstudio.com [Sun Sep 11 21:42:04 2022] [error] [client 91.191.209.74:0] [client 91.191.209.74] ModSecurity: Access denied with connection close (phase 2). Pattern match "^wp_is_mobile$" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "420038"] [msg "Malware.Expert - user-agent: Webshell user-agent"] [hostname "ampsstudio.com"] [uri "/wp-includes/wp-class.php"] [unique_id "Yx5IHPAl6MJWglAKCs40mgAAAAc"] ampsstudio.com [Sun Sep 11 21:42:06 2022] [error] [client 91.191.209.74:0] [client 91.191.209.74] ModSecurity: Access denied with code 403 (phase 2). Match of "contains index.php" against "REQUEST_URI" required. [file "remote server"] [line "-1"] [id "570075"] [msg "Malware.Expert - Malware"] [hostname "ampsstudio.com"] [uri "/wp-includes/wp-atom.php"] [unique_id "Yx5IHsM8hQJstMZDuzpg_AAAAAY"] ampsstudio.com [Sun Sep 11 21:42:09 2022] [error] [client 91.191.209.74:0] [client 91.191.209.74] ModSecurity: Access denied with code 403 (phase 2). Pattern match "/wp-includes/images/.*\\\\.php" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430032"] [msg "Malware.Expert - request_uri: Wordpress - prevent PHP files from executing"] [hostname "ampsstudio.com"] [uri "/wp-includes/images/css.php"] [unique_id "Yx5IIbxMWIwxnpzyrrYbNQAAAAs"] ampsstudio.com [Sun Sep 11 21:42:09 2022] [error] [client 91.191.209.74:0] [client 91.191.209.74] ModSecurity: Access denied with code 403 (phase 2). Pattern match "/wp-includes/css/.*\\\\.php" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430035"] [msg "Malware.Expert - request_uri: Wordpress - prevent PHP files from executing"] [hostname "ampsstudio.com"] [uri "/wp-includes/css/css.php"] [unique_id "Yx5IIdxRKqczvl1QBQXQ2AAAAAk"] ampsstudio.com [Sun Sep 11 21:42:28 2022] [error] [client 91.191.209.74:0] [client 91.191.209.74] ModSecurity: Access denied with code 403 (phase 2). Match of "contains index.php" against "REQUEST_URI" required. [file "remote server"] [line "-1"] [id "570075"] [msg "Malware.Expert - Malware"] [hostname "ampsstudio.com"] [uri "/defau1t.php"] [unique_id "Yx5INKsToRpKfCjh7gzt2QAAAAE"] ampsstudio.com [Sun Sep 11 21:42:28 2022] [error] [client 91.191.209.74:0] [client 91.191.209.74] ModSecurity: Access denied with connection close (phase 2). Pattern match "^wp_is_mobile$" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "420038"] [msg "Malware.Expert - user-agent: Webshell user-agent"] [hostname "ampsstudio.com"] [uri "/css.php"] [unique_id "Yx5INIpbgltmbTGPLafHdgAAAAg"] ampsstudio.com [Sun Sep 11 21:42:35 2022] [error] [client 91.191.209.74:0] [client 91.191.209.74] ModSecurity: Access denied with code 403 (phase 2). Match of "contains index.php" against "REQUEST_URI" required. [file "remote server"] [line "-1"] [id "570075"] [msg "Malware.Expert - Malware"] [hostname "ampsstudio.com"] [uri "/moduless.php"] [unique_id "Yx5IO5X81YwrdqU9UUlpugAAAAA"] ampsstudio.com [Sun Sep 11 21:42:42 2022] [error] [client 91.191.209.74:0] [client 91.191.209.74] ModSecurity: Access denied with connection close (phase 2). Pattern match "^wp_is_mobile$" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "420038"] [msg "Malware.Expert - user-agent: Webshell user-agent"] [hostname "ampsstudio.com"] [uri "/wp-booking.php"] [unique_id "Yx5IQsOOLqCNFzC4QZ58egAAAAQ"] ampsstudio.com [Sun Sep 11 21:43:03 2022] [error] [client 91.191.209.74:0] [client 91.191.209.74] ModSecurity: Access denied with connection close (phase 2). Pattern match "^wp_is_mobile$" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "420038"] [msg "Malware.Expert - user-agent: Webshell user-agent"] [hostname "ampsstudio.com"] [uri "/wp-content/plugins/backup_index.php"] [unique_id "Yx5IV8M8hQJstMZDuzphAAAAAAY"] ampsstudio.com [Sun Sep 11 21:43:22 2022] [error] [client 91.191.209.74:0] [client 91.191.209.74] ModSecurity: Access denied with connection close (phase 2). Pattern match "^wp_is_mobile$" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "420038"] [msg "Malware.Expert - user-agent: Webshell user-agent"] [hostname "ampsstudio.com"] [uri "/wp-content/mu-plugins/db-safe-mode.php"] [unique_id "Yx5IatxRKqczvl1QBQXQ3AAAAAk"] ampsstudio.com [Sun Sep 11 21:43:24 2022] [error] [client 91.191.209.74:0] [client 91.191.209.74] ModSecurity: Access denied with connection close (phase 2). Pattern match "^wp_is_mobile$" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "420038"] [msg "Malware.Expert - user-agent: Webshell user-agent"] [hostname "ampsstudio.com"] [uri "/wp-includes/css/wp-config.php"] [unique_id "Yx5IbPAl6MJWglAKCs40nwAAAAc"] ampsstudio.com [Sun Sep 11 21:43:41 2022] [error] [client 91.191.209.74:0] [client 91.191.209.74] ModSecurity: Access denied with connection close (phase 2). Pattern match "^wp_is_mobile$" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "420038"] [msg "Malware.Expert - user-agent: Webshell user-agent"] [hostname "ampsstudio.com"] [uri "/config.bak.php"] [unique_id "Yx5IfZX81YwrdqU9UUlpvQAAAAA"] ampsstudio.com [Sun Sep 11 21:43:41 2022] [error] [client 91.191.209.74:0] [client 91.191.209.74] ModSecurity: Access denied with connection close (phase 2). Pattern match "^wp_is_mobile$" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "420038"] [msg "Malware.Expert - user-agent: Webshell user-agent"] [hostname "ampsstudio.com"] [uri "/wp-content/themes/config.bak.php"] [unique_id "Yx5IfTvDWh-w_SEtqf7-ZgAAAAU"] ampsstudio.com [Sun Sep 11 21:43:53 2022] [error] [client 91.191.209.74:0] [client 91.191.209.74] ModSecurity: Access denied with connection close (phase 2). Pattern match "^wp_is_mobile$" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "420038"] [msg "Malware.Expert - user-agent: Webshell user-agent"] [hostname "ampsstudio.com"] [uri "/legion.php"] [unique_id "Yx5IicOOLqCNFzC4QZ58fQAAAAQ"] ampsstudio.com [Sun Sep 11 21:44:09 2022] [error] [client 91.191.209.74:0] [client 91.191.209.74] ModSecurity: Access denied with connection close (phase 2). Pattern match "^wp_is_mobile$" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "420038"] [msg "Malware.Expert - user-agent: Webshell user-agent"] [hostname "ampsstudio.com"] [uri "/wp-plugins.php"] [unique_id "Yx5ImfoChTjfDxsgiRFkqgAAAAI"] ampsstudio.com [Sun Sep 11 21:44:18 2022] [error] [client 91.191.209.74:0] [client 91.191.209.74] ModSecurity: Access denied with connection close (phase 2). Pattern match "^wp_is_mobile$" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "420038"] [msg "Malware.Expert - user-agent: Webshell user-agent"] [hostname "ampsstudio.com"] [uri "/gank.php.PhP"] [unique_id "Yx5IosM8hQJstMZDuzphAgAAAAY"] ampsstudio.com [Sun Sep 11 21:44:20 2022] [error] [client 91.191.209.74:0] [client 91.191.209.74] ModSecurity: Access denied with connection close (phase 2). Pattern match "^wp_is_mobile$" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "420038"] [msg "Malware.Expert - user-agent: Webshell user-agent"] [hostname "ampsstudio.com"] [uri "/wp-content/db-cache.php"] [unique_id "Yx5IpIpbgltmbTGPLafHegAAAAg"] ampsstudio.com [Sun Sep 11 21:44:24 2022] [error] [client 91.191.209.74:0] [client 91.191.209.74] ModSecurity: Access denied with code 403 (phase 2). Match of "contains index.php" against "REQUEST_URI" required. [file "remote server"] [line "-1"] [id "570075"] [msg "Malware.Expert - Malware"] [hostname "ampsstudio.com"] [uri "/archives.php"] [unique_id "Yx5IqJX81YwrdqU9UUlpvgAAAAA"] ampsstudio.com [Sun Sep 11 21:44:25 2022] [error] [client 91.191.209.74:0] [client 91.191.209.74] ModSecurity: Access denied with connection close (phase 2). Pattern match "^wp_is_mobile$" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "420038"] [msg "Malware.Expert - user-agent: Webshell user-agent"] [hostname "ampsstudio.com"] [uri "/xindex.php"] [unique_id "Yx5IqTvDWh-w_SEtqf7-ZwAAAAU"] ampsstudio.com [Sun Sep 11 21:44:51 2022] [error] [client 91.191.209.74:0] [client 91.191.209.74] ModSecurity: Access denied with connection close (phase 2). Pattern match "^wp_is_mobile$" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "420038"] [msg "Malware.Expert - user-agent: Webshell user-agent"] [hostname "ampsstudio.com"] [uri "/wp-content/outcms.php"] [unique_id "Yx5Iw6sToRpKfCjh7gzt3gAAAAE"] ampsstudio.com [Sun Sep 11 21:44:54 2022] [error] [client 91.191.209.74:0] [client 91.191.209.74] ModSecurity: Access denied with connection close (phase 2). Pattern match "^wp_is_mobile$" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "420038"] [msg "Malware.Expert - user-agent: Webshell user-agent"] [hostname "ampsstudio.com"] [uri "/system_log.php"] [unique_id "Yx5IxvoChTjfDxsgiRFkqwAAAAI"] ampsstudio.com [Sun Sep 11 21:44:57 2022] [error] [client 91.191.209.74:0] [client 91.191.209.74] ModSecurity: Access denied with connection close (phase 2). Pattern match "^wp_is_mobile$" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "420038"] [msg "Malware.Expert - user-agent: Webshell user-agent"] [hostname "ampsstudio.com"] [uri "/wp-backup-sql-302.php"] [unique_id "Yx5IyYpbgltmbTGPLafHewAAAAg"] ampsstudio.com [Sun Sep 11 21:44:57 2022] [error] [client 91.191.209.74:0] [client 91.191.209.74] ModSecurity: Access denied with connection close (phase 2). Pattern match "^wp_is_mobile$" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "420038"] [msg "Malware.Expert - user-agent: Webshell user-agent"] [hostname "ampsstudio.com"] [uri "/error.php"] [unique_id "Yx5IyZX81YwrdqU9UUlpvwAAAAA"] ampsstudio.com [Sun Sep 11 21:44:59 2022] [error] [client 91.191.209.74:0] [client 91.191.209.74] ModSecurity: Access denied with connection close (phase 2). Pattern match "^wp_is_mobile$" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "420038"] [msg "Malware.Expert - user-agent: Webshell user-agent"] [hostname "ampsstudio.com"] [uri "/ALFA_DATA"] [unique_id "Yx5IyzvDWh-w_SEtqf7-aAAAAAU"] ampsstudio.com [Sun Sep 11 21:44:59 2022] [error] [client 91.191.209.74:0] [client 91.191.209.74] ModSecurity: Access denied with connection close (phase 2). Pattern match "^wp_is_mobile$" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "420038"] [msg "Malware.Expert - user-agent: Webshell user-agent"] [hostname "ampsstudio.com"] [uri "/alfacgiapi"] [unique_id "Yx5Iy8OOLqCNFzC4QZ58fwAAAAQ"] ampsstudio.com [Sun Sep 11 21:45:01 2022] [crit] [client 91.191.209.74:0] AH00529: /home/virtual/vps-aa3942/a/aede5353c4/public_html/.well-known/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/virtual/vps-aa3942/a/aede5353c4/public_html/.well-known/' is executable ampsstudio.com [Sun Sep 11 21:45:02 2022] [crit] [client 91.191.209.74:0] AH00529: /home/virtual/vps-aa3942/a/aede5353c4/public_html/.well-known/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/virtual/vps-aa3942/a/aede5353c4/public_html/.well-known/' is executable ampsstudio.com [Sun Sep 11 21:45:03 2022] [error] [client 91.191.209.74:0] [client 91.191.209.74] ModSecurity: Access denied with connection close (phase 2). Pattern match "^wp_is_mobile$" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "420038"] [msg "Malware.Expert - user-agent: Webshell user-agent"] [hostname "ampsstudio.com"] [uri "/wp-admin/alfacgiapi"] [unique_id "Yx5Iz6sToRpKfCjh7gzt3wAAAAE"] ampsstudio.com [Sun Sep 11 21:45:03 2022] [error] [client 91.191.209.74:0] [client 91.191.209.74] ModSecurity: Access denied with connection close (phase 2). Pattern match "^wp_is_mobile$" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "420038"] [msg "Malware.Expert - user-agent: Webshell user-agent"] [hostname "ampsstudio.com"] [uri "/wp-admin/cgialfa"] [unique_id "Yx5Iz9xRKqczvl1QBQXQ3wAAAAk"] ampsstudio.com [Sun Sep 11 21:45:03 2022] [error] [client 91.191.209.74:0] [client 91.191.209.74] ModSecurity: Access denied with connection close (phase 2). Pattern match "^wp_is_mobile$" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "420038"] [msg "Malware.Expert - user-agent: Webshell user-agent"] [hostname "ampsstudio.com"] [uri "/wp-content/ALFA_DATA"] [unique_id "Yx5Iz_oChTjfDxsgiRFkrAAAAAI"] ampsstudio.com [Sun Sep 11 21:45:04 2022] [error] [client 91.191.209.74:0] [client 91.191.209.74] ModSecurity: Access denied with connection close (phase 2). Pattern match "^wp_is_mobile$" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "420038"] [msg "Malware.Expert - user-agent: Webshell user-agent"] [hostname "ampsstudio.com"] [uri "/wp-content/alfacgiapi"] [unique_id "Yx5I0IpbgltmbTGPLafHfAAAAAg"] ampsstudio.com [Sun Sep 11 21:45:04 2022] [error] [client 91.191.209.74:0] [client 91.191.209.74] ModSecurity: Access denied with connection close (phase 2). Pattern match "^wp_is_mobile$" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "420038"] [msg "Malware.Expert - user-agent: Webshell user-agent"] [hostname "ampsstudio.com"] [uri "/wp-content/cgialfa"] [unique_id "Yx5I0JX81YwrdqU9UUlpwAAAAAA"] ampsstudio.com [Sun Sep 11 21:45:04 2022] [error] [client 91.191.209.74:0] [client 91.191.209.74] ModSecurity: Access denied with connection close (phase 2). Pattern match "^wp_is_mobile$" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "420038"] [msg "Malware.Expert - user-agent: Webshell user-agent"] [hostname "ampsstudio.com"] [uri "/templates/beez3/ALFA_DATA"] [unique_id "Yx5I0MM8hQJstMZDuzphBAAAAAY"] ampsstudio.com [Sun Sep 11 21:45:05 2022] [error] [client 91.191.209.74:0] [client 91.191.209.74] ModSecurity: Access denied with connection close (phase 2). Pattern match "^wp_is_mobile$" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "420038"] [msg "Malware.Expert - user-agent: Webshell user-agent"] [hostname "ampsstudio.com"] [uri "/templates/beez3/alfacgiapi"] [unique_id "Yx5I0TvDWh-w_SEtqf7-aQAAAAU"] ampsstudio.com [Sun Sep 11 21:45:05 2022] [error] [client 91.191.209.74:0] [client 91.191.209.74] ModSecurity: Access denied with connection close (phase 2). Pattern match "^wp_is_mobile$" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "420038"] [msg "Malware.Expert - user-agent: Webshell user-agent"] [hostname "ampsstudio.com"] [uri "/templates/beez3/cgialfa"] [unique_id "Yx5I0cOOLqCNFzC4QZ58gAAAAAQ"] ampsstudio.com [Sun Sep 11 21:45:05 2022] [error] [client 91.191.209.74:0] [client 91.191.209.74] ModSecurity: Access denied with connection close (phase 2). Pattern match "^wp_is_mobile$" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "420038"] [msg "Malware.Expert - user-agent: Webshell user-agent"] [hostname "ampsstudio.com"] [uri "/sites/default/files/ALFA_DATA"] [unique_id "Yx5I0bxMWIwxnpzyrrYbPQAAAAs"] ampsstudio.com [Sun Sep 11 21:45:17 2022] [error] [client 91.191.209.74:0] [client 91.191.209.74] ModSecurity: Access denied with connection close (phase 2). Pattern match "^wp_is_mobile$" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "420038"] [msg "Malware.Expert - user-agent: Webshell user-agent"] [hostname "ampsstudio.com"] [uri "/wp-content/plugins/ubh/up.php"] [unique_id "Yx5I3bxMWIwxnpzyrrYbQAAAAAs"] ampsstudio.com [Sun Sep 11 21:45:18 2022] [error] [client 91.191.209.74:0] [client 91.191.209.74] ModSecurity: Access denied with connection close (phase 2). Pattern match "^wp_is_mobile$" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "420038"] [msg "Malware.Expert - user-agent: Webshell user-agent"] [hostname "ampsstudio.com"] [uri "/index.php"] [unique_id "Yx5I3sOOLqCNFzC4QZ58gwAAAAQ"] ampsstudio.com [Sun Sep 11 21:45:18 2022] [error] [client 91.191.209.74:0] [client 91.191.209.74] ModSecurity: Access denied with connection close (phase 2). Pattern match "^wp_is_mobile$" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "420038"] [msg "Malware.Expert - user-agent: Webshell user-agent"] [hostname "ampsstudio.com"] [uri "/about.php"] [unique_id "Yx5I3vAl6MJWglAKCs40pQAAAAc"] ampsstudio.com [Sun Sep 11 21:45:18 2022] [error] [client 91.191.209.74:0] [client 91.191.209.74] ModSecurity: Access denied with connection close (phase 2). Pattern match "^wp_is_mobile$" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "420038"] [msg "Malware.Expert - user-agent: Webshell user-agent"] [hostname "ampsstudio.com"] [uri "/shells.php"] [unique_id "Yx5I3sM8hQJstMZDuzphCAAAAAY"] ampsstudio.com [Sun Sep 11 21:45:18 2022] [error] [client 91.191.209.74:0] [client 91.191.209.74] ModSecurity: Access denied with connection close (phase 2). Pattern match "^wp_is_mobile$" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "420038"] [msg "Malware.Expert - user-agent: Webshell user-agent"] [hostname "ampsstudio.com"] [uri "/olux.php"] [unique_id "Yx5I3jvDWh-w_SEtqf7-bQAAAAU"] ampsstudio.com [Sun Sep 11 21:45:18 2022] [error] [client 91.191.209.74:0] [client 91.191.209.74] ModSecurity: Access denied with connection close (phase 2). Pattern match "^wp_is_mobile$" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "420038"] [msg "Malware.Expert - user-agent: Webshell user-agent"] [hostname "ampsstudio.com"] [uri "/xleet.php"] [unique_id "Yx5I3pX81YwrdqU9UUlpxAAAAAA"] ampsstudio.com [Sun Sep 11 21:45:18 2022] [error] [client 91.191.209.74:0] [client 91.191.209.74] ModSecurity: Access denied with connection close (phase 2). Pattern match "^wp_is_mobile$" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "420038"] [msg "Malware.Expert - user-agent: Webshell user-agent"] [hostname "ampsstudio.com"] [uri "/wso.php"] [unique_id "Yx5I3rxMWIwxnpzyrrYbQQAAAAs"] ampsstudio.com [Sun Sep 11 21:45:18 2022] [error] [client 91.191.209.74:0] [client 91.191.209.74] ModSecurity: Access denied with connection close (phase 2). Pattern match "^wp_is_mobile$" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "420038"] [msg "Malware.Expert - user-agent: Webshell user-agent"] [hostname "ampsstudio.com"] [uri "/shell.php"] [unique_id "Yx5I3sOOLqCNFzC4QZ58hAAAAAQ"] ampsstudio.com [Sun Sep 11 21:45:18 2022] [error] [client 91.191.209.74:0] [client 91.191.209.74] ModSecurity: Access denied with connection close (phase 2). Pattern match "^wp_is_mobile$" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "420038"] [msg "Malware.Expert - user-agent: Webshell user-agent"] [hostname "ampsstudio.com"] [uri "/up.php"] [unique_id "Yx5I3vAl6MJWglAKCs40pgAAAAc"] ampsstudio.com [Sun Sep 11 21:45:19 2022] [error] [client 91.191.209.74:0] [client 91.191.209.74] ModSecurity: Access denied with connection close (phase 2). Pattern match "^wp_is_mobile$" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "420038"] [msg "Malware.Expert - user-agent: Webshell user-agent"] [hostname "ampsstudio.com"] [uri "/upload.php"] [unique_id "Yx5I38M8hQJstMZDuzphCQAAAAY"] ampsstudio.com [Sun Sep 11 21:45:19 2022] [error] [client 91.191.209.74:0] [client 91.191.209.74] ModSecurity: Access denied with connection close (phase 2). Pattern match "^wp_is_mobile$" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "420038"] [msg "Malware.Expert - user-agent: Webshell user-agent"] [hostname "ampsstudio.com"] [uri "/1.php"] [unique_id "Yx5I3zvDWh-w_SEtqf7-bgAAAAU"] ampsstudio.com [Sun Sep 11 21:45:19 2022] [error] [client 91.191.209.74:0] [client 91.191.209.74] ModSecurity: Access denied with connection close (phase 2). Pattern match "^wp_is_mobile$" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "420038"] [msg "Malware.Expert - user-agent: Webshell user-agent"] [hostname "ampsstudio.com"] [uri "/x.php"] [unique_id "Yx5I35X81YwrdqU9UUlpxQAAAAA"] ampsstudio.com [Sun Sep 11 21:45:19 2022] [error] [client 91.191.209.74:0] [client 91.191.209.74] ModSecurity: Access denied with connection close (phase 2). Pattern match "^wp_is_mobile$" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "420038"] [msg "Malware.Expert - user-agent: Webshell user-agent"] [hostname "ampsstudio.com"] [uri "/z.php"] [unique_id "Yx5I37xMWIwxnpzyrrYbQgAAAAs"] ampsstudio.com [Sun Sep 11 21:45:19 2022] [error] [client 91.191.209.74:0] [client 91.191.209.74] ModSecurity: Access denied with connection close (phase 2). Pattern match "^wp_is_mobile$" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "420038"] [msg "Malware.Expert - user-agent: Webshell user-agent"] [hostname "ampsstudio.com"] [uri "/a.php"] [unique_id "Yx5I38OOLqCNFzC4QZ58hQAAAAQ"] ampsstudio.com [Sun Sep 11 21:45:20 2022] [error] [client 91.191.209.74:0] [client 91.191.209.74] ModSecurity: Access denied with connection close (phase 2). Pattern match "^wp_is_mobile$" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "420038"] [msg "Malware.Expert - user-agent: Webshell user-agent"] [hostname "ampsstudio.com"] [uri "/test.php"] [unique_id "Yx5I4PAl6MJWglAKCs40pwAAAAc"] ampsstudio.com [Sun Sep 11 21:45:20 2022] [error] [client 91.191.209.74:0] [client 91.191.209.74] ModSecurity: Access denied with connection close (phase 2). Pattern match "^wp_is_mobile$" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "420038"] [msg "Malware.Expert - user-agent: Webshell user-agent"] [hostname "ampsstudio.com"] [uri "/wp.php"] [unique_id "Yx5I4MM8hQJstMZDuzphCgAAAAY"] ampsstudio.com [Sun Sep 11 21:45:20 2022] [error] [client 91.191.209.74:0] [client 91.191.209.74] ModSecurity: Access denied with connection close (phase 2). Pattern match "^wp_is_mobile$" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "420038"] [msg "Malware.Expert - user-agent: Webshell user-agent"] [hostname "ampsstudio.com"] [uri "/alfa.php"] [unique_id "Yx5I4DvDWh-w_SEtqf7-bwAAAAU"] ampsstudio.com [Sun Sep 11 21:45:20 2022] [error] [client 91.191.209.74:0] [client 91.191.209.74] ModSecurity: Access denied with connection close (phase 2). Pattern match "^wp_is_mobile$" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "420038"] [msg "Malware.Expert - user-agent: Webshell user-agent"] [hostname "ampsstudio.com"] [uri "/config.php"] [unique_id "Yx5I4JX81YwrdqU9UUlpxgAAAAA"] ampsstudio.com [Sun Sep 11 21:45:20 2022] [error] [client 91.191.209.74:0] [client 91.191.209.74] ModSecurity: Access denied with connection close (phase 2). Pattern match "^wp_is_mobile$" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "420038"] [msg "Malware.Expert - user-agent: Webshell user-agent"] [hostname "ampsstudio.com"] [uri "/templates/beez3/index.php"] [unique_id "Yx5I4KsToRpKfCjh7gzt4wAAAAE"] www.ampsstudio.com [Sun Sep 11 22:33:46 2022] [error] [client 185.7.33.146:0] AH01071: Got error 'PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179' www.ampsstudio.com [Sun Sep 11 22:33:46 2022] [error] [client 185.7.33.146:0] AH01071: Got error 'PHP message: PHP Warning: Cannot modify header information - headers already sent by (output started at /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-includes/functions.php:5275) in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/includes/sonaar-music/css/theme/custom-style.php on line 2' www.ampsstudio.com [Mon Sep 12 00:57:59 2022] [error] [client 165.227.60.12:0] [client 165.227.60.12] ModSecurity: Access denied with code 403 (phase 2). Pattern match "/\\\\..+\\\\.php" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430015"] [msg "Malware.Expert - request_uri: hidden .php execute"] [hostname "www.ampsstudio.com"] [uri "/wp-content/uploads/typehub/custom/wi/.wi.phpp"] [unique_id "Yx52B6sToRpKfCjh7gzuKQAAAAE"] ampsstudio.com [Mon Sep 12 01:00:11 2022] [error] [client 20.168.18.106:0] AH01276: Cannot serve directory /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-admin/css/: No matching DirectoryIndex (index.php,index.html,index.htm) found, and server-generated directory index forbidden by Options directive webmail.ampsstudio.com [Mon Sep 12 01:27:13 2022] [error] [client 51.142.241.69:0] [client 51.142.241.69] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "webmail.ampsstudio.com"] [uri "/.env"] [unique_id "Yx584fAl6MJWglAKCs40-QAAAAc"] ampsstudio.com [Mon Sep 12 01:33:16 2022] [error] [client 88.214.43.118:0] [client 88.214.43.118] ModSecurity: Access denied with code 403 (phase 2). Pattern match "/\\\\..+\\\\.php" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430015"] [msg "Malware.Expert - request_uri: hidden .php execute"] [hostname "ampsstudio.com"] [uri "/.aws/credentials.php"] [unique_id "Yx5-TIpbgltmbTGPLafH1QAAAAg"] ampsstudio.com [Mon Sep 12 01:44:46 2022] [error] [client 152.89.196.13:0] [client 152.89.196.13] ModSecurity: Access denied with code 403 (phase 2). String match "/accesson.php" at REQUEST_URI. [file "remote server"] [line "-1"] [id "570042"] [msg "Malware.Expert - Malware"] [hostname "ampsstudio.com"] [uri "/accesson.php"] [unique_id "Yx6A_jvDWh-w_SEtqf7-yAAAAAU"] www.ampsstudio.com [Mon Sep 12 03:37:11 2022] [error] [client 172.94.53.5:0] AH01071: Got error 'PHP message: PHP Warning: Cannot modify header information - headers already sent by (output started at /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-includes/functions.php:5275) in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/includes/sonaar-music/css/theme/custom-style.php on line 2' webmail.ampsstudio.com [Mon Sep 12 04:08:31 2022] [error] [client 20.214.202.181:0] [client 20.214.202.181] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "webmail.ampsstudio.com"] [uri "/.env.bak"] [unique_id "Yx6ir_eroaELnxj9ePv6pQAAAAI"] www.ampsstudio.com [Mon Sep 12 04:17:13 2022] [error] [client 168.90.196.207:0] AH01071: Got error 'PHP message: PHP Warning: Cannot modify header information - headers already sent by (output started at /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-includes/functions.php:5275) in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/includes/sonaar-music/css/theme/custom-style.php on line 2' www.ampsstudio.com [Mon Sep 12 04:27:21 2022] [crit] [client 66.249.82.68:0] AH00529: /home/virtual/vps-aa3942/a/aede5353c4/public_html/.well-known/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/virtual/vps-aa3942/a/aede5353c4/public_html/.well-known/' is executable ampsstudio.com [Mon Sep 12 05:31:41 2022] [error] [client 20.254.169.192:0] [client 20.254.169.192] ModSecurity: Access denied with code 403 (phase 1). Pattern match "\\\\.\\\\./\\\\.\\\\." at REQUEST_URI. [file "remote server"] [line "-1"] [id "430064"] [msg "Malware.Expert - request_uri: directory travel"] [hostname "ampsstudio.com"] [uri "/wp-admin/admin-post.php"] [unique_id "Yx62LWS-OEe0Qr8NSb1f2AAAAAM"] ampsstudio.com [Mon Sep 12 06:17:23 2022] [error] [client 20.163.12.139:0] AH01276: Cannot serve directory /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-admin/css/: No matching DirectoryIndex (index.php,index.html,index.htm) found, and server-generated directory index forbidden by Options directive www.ampsstudio.com [Mon Sep 12 06:18:19 2022] [error] [client 51.120.242.51:0] [client 51.120.242.51] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "www.ampsstudio.com"] [uri "/.env"] [unique_id "Yx7BG6wWcgobLR-cY7S7-AAAAAE"] www.ampsstudio.com [Mon Sep 12 06:30:34 2022] [error] [client 51.120.242.51:0] [client 51.120.242.51] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "www.ampsstudio.com"] [uri "/.env"] [unique_id "Yx7D-jCnhtqLm4zLWXfuVgAAAAk"] www.ampsstudio.com [Mon Sep 12 06:55:12 2022] [error] [client 51.120.242.51:0] [client 51.120.242.51] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "www.ampsstudio.com"] [uri "/.env"] [unique_id "Yx7JwHoOgbU98bHZ8dVcFAAAAAY"] www.ampsstudio.com [Mon Sep 12 07:05:14 2022] [error] [client 161.117.5.252:0] AH01071: Got error 'PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179' www.ampsstudio.com [Mon Sep 12 07:05:14 2022] [error] [client 161.117.5.252:0] AH01071: Got error 'PHP message: PHP Warning: Cannot modify header information - headers already sent by (output started at /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-includes/functions.php:5275) in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/includes/sonaar-music/css/theme/custom-style.php on line 2' www.ampsstudio.com [Mon Sep 12 07:05:14 2022] [error] [client 161.117.10.46:0] AH01071: Got error 'PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179' www.ampsstudio.com [Mon Sep 12 07:05:14 2022] [error] [client 161.117.10.46:0] AH01071: Got error 'PHP message: PHP Warning: Cannot modify header information - headers already sent by (output started at /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-includes/functions.php:5275) in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/includes/sonaar-music/css/theme/custom-style.php on line 2' www.ampsstudio.com [Mon Sep 12 07:26:30 2022] [error] [client 51.120.242.51:0] [client 51.120.242.51] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "www.ampsstudio.com"] [uri "/.env"] [unique_id "Yx7RFmS-OEe0Qr8NSb1gDAAAAAM"] www.ampsstudio.com [Mon Sep 12 07:31:51 2022] [error] [client 51.120.242.51:0] [client 51.120.242.51] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "www.ampsstudio.com"] [uri "/.env"] [unique_id "Yx7SV0Xji9ppfIykPIl1jQAAAAA"] www.ampsstudio.com [Mon Sep 12 07:56:47 2022] [error] [client 85.215.100.33:0] AH01276: Cannot serve directory /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-admin/css/: No matching DirectoryIndex (index.php,index.html,index.htm) found, and server-generated directory index forbidden by Options directive www.ampsstudio.com [Mon Sep 12 09:44:15 2022] [crit] [client 64.233.173.124:0] AH00529: /home/virtual/vps-aa3942/a/aede5353c4/public_html/.well-known/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/virtual/vps-aa3942/a/aede5353c4/public_html/.well-known/' is executable www.ampsstudio.com [Mon Sep 12 12:54:50 2022] [crit] [client 66.249.93.16:0] AH00529: /home/virtual/vps-aa3942/a/aede5353c4/public_html/.well-known/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/virtual/vps-aa3942/a/aede5353c4/public_html/.well-known/' is executable www.ampsstudio.com [Mon Sep 12 13:50:28 2022] [error] [client 185.220.100.250:0] AH01071: Got error 'PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179' www.ampsstudio.com [Mon Sep 12 13:50:28 2022] [error] [client 185.220.100.250:0] AH01071: Got error 'PHP message: PHP Warning: Cannot modify header information - headers already sent by (output started at /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-includes/functions.php:5275) in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/includes/sonaar-music/css/theme/custom-style.php on line 2' www.ampsstudio.com [Mon Sep 12 14:13:02 2022] [error] [client 185.191.171.35:0] AH01071: Got error 'PHP message: PHP Warning: Attempt to read property "ID" on null in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/includes/classes/iron_sonaar_archive.class.php on line 59PHP message: PHP Warning: Undefined array key 0 in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/includes/classes/iron_sonaar.class.php on line 212PHP message: PHP Warning: Trying to access array offset on value of type null in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/includes/classes/iron_sonaar.class.php on line 212PHP message: PHP Warning: Undefined array key 0 in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/includes/classes/iron_sonaar.class.php on line 214PHP message: PHP Warning: Trying to access array offset on value of type null in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/includes/classes/iron_sonaar.class.php on line 214PHP message: PHP Warning: Attempt to read property "ID" on null in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/includes/classes/iron_sonaar_archive.class.php on line 166PHP message: PHP Warning: Undefined variable $my_post_array in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/archive-podcast.php on line 94PHP message: PHP Fatal error: Uncaught TypeError: implode(): Argument #1 ($pieces) must be of type array, string given in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/archive-podcast.php:94\nStack trace:\n#0 /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/archive-podcast.php(94): implode(',', NULL)\n#1 /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-includes/template-loader.php(106): include('/home/virtual/v...')\n#2 /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-blog-header.php(19): require_once('/home/virtual/v...')\n#3 /home/virtual/vps-aa3942/a/aede5353c4/public_html/index.php(17): require('/home/virtual/v...')\n#4 {main}\n thrown in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/archive-podcast.php on line 94' www.ampsstudio.com [Mon Sep 12 14:25:38 2022] [error] [client 93.124.108.9:0] AH01071: Got error 'PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179' www.ampsstudio.com [Mon Sep 12 14:25:38 2022] [error] [client 93.124.108.9:0] AH01071: Got error 'PHP message: PHP Warning: Cannot modify header information - headers already sent by (output started at /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-includes/functions.php:5275) in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/includes/sonaar-music/css/theme/custom-style.php on line 2' www.ampsstudio.com [Mon Sep 12 14:35:59 2022] [error] [client 141.98.9.47:0] AH01071: Got error 'PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179' www.ampsstudio.com [Mon Sep 12 14:35:59 2022] [error] [client 141.98.9.47:0] AH01071: Got error 'PHP message: PHP Warning: Cannot modify header information - headers already sent by (output started at /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-includes/functions.php:5275) in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/includes/sonaar-music/css/theme/custom-style.php on line 2' www.ampsstudio.com [Mon Sep 12 15:44:55 2022] [error] [client 95.214.52.156:0] AH01071: Got error 'PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179' www.ampsstudio.com [Mon Sep 12 15:44:55 2022] [error] [client 95.214.52.156:0] AH01071: Got error 'PHP message: PHP Warning: Cannot modify header information - headers already sent by (output started at /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-includes/functions.php:5275) in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/includes/sonaar-music/css/theme/custom-style.php on line 2' www.ampsstudio.com [Mon Sep 12 16:00:35 2022] [error] [client 185.220.101.64:0] AH01071: Got error 'PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179' www.ampsstudio.com [Mon Sep 12 16:00:35 2022] [error] [client 185.220.101.64:0] AH01071: Got error 'PHP message: PHP Warning: Cannot modify header information - headers already sent by (output started at /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-includes/functions.php:5275) in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/includes/sonaar-music/css/theme/custom-style.php on line 2' cpanel.ampsstudio.com [Mon Sep 12 17:03:01 2022] [error] [client 51.142.241.69:0] [client 51.142.241.69] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "cpanel.ampsstudio.com"] [uri "/.env"] [unique_id "Yx9YNSjiigZmhQa4_14jNAAAAAg"] www.ampsstudio.com [Mon Sep 12 17:55:11 2022] [error] [client 78.36.78.208:0] AH01071: Got error 'PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179' www.ampsstudio.com [Mon Sep 12 17:55:11 2022] [error] [client 78.36.78.208:0] AH01071: Got error 'PHP message: PHP Warning: Cannot modify header information - headers already sent by (output started at /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-includes/functions.php:5275) in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/includes/sonaar-music/css/theme/custom-style.php on line 2' www.ampsstudio.com [Mon Sep 12 18:59:19 2022] [crit] [client 66.249.93.42:0] AH00529: /home/virtual/vps-aa3942/a/aede5353c4/public_html/.well-known/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/virtual/vps-aa3942/a/aede5353c4/public_html/.well-known/' is executable webmail.ampsstudio.com [Tue Sep 13 00:16:22 2022] [error] [client 20.220.12.4:0] [client 20.220.12.4] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "webmail.ampsstudio.com"] [uri "/.env"] [unique_id "Yx-9xjCnhtqLm4zLWXfwsAAAAAk"] www.ampsstudio.com [Tue Sep 13 01:23:02 2022] [error] [client 199.249.230.144:0] AH01071: Got error 'PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179' www.ampsstudio.com [Tue Sep 13 01:23:02 2022] [error] [client 199.249.230.144:0] AH01071: Got error 'PHP message: PHP Warning: Cannot modify header information - headers already sent by (output started at /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-includes/functions.php:5275) in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/includes/sonaar-music/css/theme/custom-style.php on line 2' www.ampsstudio.com [Tue Sep 13 02:20:33 2022] [error] [client 185.191.171.33:0] AH01071: Got error 'PHP message: PHP Warning: Undefined array key "block" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/includes/classes/iron_sonaar.class.php on line 212PHP message: PHP Warning: Trying to access array offset on value of type null in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/includes/classes/iron_sonaar.class.php on line 212PHP message: PHP Warning: Undefined array key "block" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/includes/classes/iron_sonaar.class.php on line 214PHP message: PHP Warning: Trying to access array offset on value of type null in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/includes/classes/iron_sonaar.class.php on line 214' www.ampsstudio.com [Tue Sep 13 06:11:34 2022] [error] [client 185.243.218.78:0] AH01071: Got error 'PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179' www.ampsstudio.com [Tue Sep 13 06:11:34 2022] [error] [client 185.243.218.78:0] AH01071: Got error 'PHP message: PHP Warning: Cannot modify header information - headers already sent by (output started at /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-includes/functions.php:5275) in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/includes/sonaar-music/css/theme/custom-style.php on line 2' cpanel.ampsstudio.com [Tue Sep 13 12:09:03 2022] [error] [client 79.110.62.65:0] [client 79.110.62.65] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "cpanel.ampsstudio.com"] [uri "/.env"] [unique_id "YyBkz58574MLBRE61B1AxgAAAAk"] ampsstudio.com [Tue Sep 13 14:29:43 2022] [error] [client 18.221.17.249:0] [client 18.221.17.249] ModSecurity: Access denied with code 403 (phase 2). String match "/.git/config" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430058"] [msg "Malware.Expert - request_uri: .git config"] [hostname "ampsstudio.com"] [uri "/.git/config"] [unique_id "YyCFx_gQaT9dFYHA_FyldAAAAAc"] www.ampsstudio.com [Tue Sep 13 16:04:38 2022] [error] [client 217.146.2.41:0] AH01071: Got error 'PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179' www.ampsstudio.com [Tue Sep 13 16:04:38 2022] [error] [client 217.146.2.41:0] AH01071: Got error 'PHP message: PHP Warning: Cannot modify header information - headers already sent by (output started at /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-includes/functions.php:5275) in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/includes/sonaar-music/css/theme/custom-style.php on line 2' www.ampsstudio.com [Tue Sep 13 19:47:51 2022] [error] [client 154.6.18.7:0] AH01071: Got error 'PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179' www.ampsstudio.com [Tue Sep 13 19:47:51 2022] [error] [client 154.6.18.7:0] AH01071: Got error 'PHP message: PHP Warning: Cannot modify header information - headers already sent by (output started at /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-includes/functions.php:5275) in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/includes/sonaar-music/css/theme/custom-style.php on line 2' www.ampsstudio.com [Tue Sep 13 19:59:49 2022] [crit] [client 66.249.93.44:0] AH00529: /home/virtual/vps-aa3942/a/aede5353c4/public_html/.well-known/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/virtual/vps-aa3942/a/aede5353c4/public_html/.well-known/' is executable www.ampsstudio.com [Tue Sep 13 21:12:42 2022] [error] [client 107.158.92.227:0] AH01071: Got error 'PHP message: PHP Warning: Cannot modify header information - headers already sent by (output started at /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-includes/functions.php:5275) in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/includes/sonaar-music/css/theme/custom-style.php on line 2' www.ampsstudio.com [Tue Sep 13 21:45:46 2022] [crit] [client 66.249.93.40:0] AH00529: /home/virtual/vps-aa3942/a/aede5353c4/public_html/.well-known/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/virtual/vps-aa3942/a/aede5353c4/public_html/.well-known/' is executable www.ampsstudio.com [Tue Sep 13 23:14:06 2022] [crit] [client 66.249.93.42:0] AH00529: /home/virtual/vps-aa3942/a/aede5353c4/public_html/.well-known/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/virtual/vps-aa3942/a/aede5353c4/public_html/.well-known/' is executable ampsstudio.com [Wed Sep 14 02:05:21 2022] [error] [client 152.89.196.13:0] [client 152.89.196.13] ModSecurity: Access denied with code 403 (phase 2). String match "/wp-content/plugins/core-engine/" at REQUEST_URI. [file "remote server"] [line "-1"] [id "570064"] [msg "Malware.Expert - Wordpress Malware"] [hostname "ampsstudio.com"] [uri "/wp-content/plugins/core-engine/index.php"] [unique_id "YyEo0aKZmJ-8Oe7q2vDMTgAAAAY"] webdisk.ampsstudio.com [Wed Sep 14 05:54:33 2022] [error] [client 194.26.229.150:0] [client 194.26.229.150] ModSecurity: Access denied with code 403 (phase 2). String match "/.git/config" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430058"] [msg "Malware.Expert - request_uri: .git config"] [hostname "webdisk.ampsstudio.com"] [uri "/.git/config"] [unique_id "YyFeiZSdcHgGERc_tNwAbQAAAAg"] ampsstudio.com [Wed Sep 14 06:00:16 2022] [error] [client 20.168.85.25:0] [client 20.168.85.25] ModSecurity: Access denied with code 403 (phase 2). Match of "contains index.php" against "REQUEST_URI" required. [file "remote server"] [line "-1"] [id "570076"] [msg "Malware.Expert - Malware"] [hostname "ampsstudio.com"] [uri "/wp-plain.php"] [unique_id "YyFf4NI9uLE9guGE2ieTFQAAAAU"] www.ampsstudio.com [Wed Sep 14 06:00:21 2022] [error] [client 20.168.85.25:0] [client 20.168.85.25] ModSecurity: Access denied with code 403 (phase 2). String match "php.suspected" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430059"] [msg "Malware.Expert - request_uri: .PHP suspected files"] [hostname "www.ampsstudio.com"] [uri "/wp-content/plugins/apikey/apikey.php.suspected"] [unique_id "YyFf5ZSdcHgGERc_tNwAcgAAAAg"] www.ampsstudio.com [Wed Sep 14 06:00:22 2022] [error] [client 20.168.85.25:0] [client 20.168.85.25] ModSecurity: Access denied with code 403 (phase 2). String match "php.suspected" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430059"] [msg "Malware.Expert - request_uri: .PHP suspected files"] [hostname "www.ampsstudio.com"] [uri "/plugins/content/apismtp/apismtp.php.suspected"] [unique_id "YyFf5ltieGmKk7moRzzGUgAAAAo"] webmail.ampsstudio.com [Wed Sep 14 06:33:51 2022] [error] [client 194.26.229.150:0] [client 194.26.229.150] ModSecurity: Access denied with code 403 (phase 2). String match "/.git/config" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430058"] [msg "Malware.Expert - request_uri: .git config"] [hostname "webmail.ampsstudio.com"] [uri "/.git/config"] [unique_id "YyFnv6Yy4a8U04MWYz7DjwAAAAY"] mail.ampsstudio.com [Wed Sep 14 06:57:10 2022] [error] [client 194.26.229.150:0] [client 194.26.229.150] ModSecurity: Access denied with code 403 (phase 2). String match "/.git/config" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430058"] [msg "Malware.Expert - request_uri: .git config"] [hostname "mail.ampsstudio.com"] [uri "/.git/config"] [unique_id "YyFtNjvKLHHLpbVisfOKbwAAAAM"] cpanel.ampsstudio.com [Wed Sep 14 07:40:30 2022] [error] [client 194.26.229.150:0] [client 194.26.229.150] ModSecurity: Access denied with code 403 (phase 2). String match "/.git/config" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430058"] [msg "Malware.Expert - request_uri: .git config"] [hostname "cpanel.ampsstudio.com"] [uri "/.git/config"] [unique_id "YyF3Xv0Yl05SIxcbitGdhQAAAAU"] ampsstudio.com [Wed Sep 14 07:55:11 2022] [error] [client 194.26.229.150:0] [client 194.26.229.150] ModSecurity: Access denied with code 403 (phase 2). String match "/.git/config" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430058"] [msg "Malware.Expert - request_uri: .git config"] [hostname "ampsstudio.com"] [uri "/.git/config"] [unique_id "YyF6z_0Yl05SIxcbitGdlgAAAAU"] www.ampsstudio.com [Wed Sep 14 08:24:10 2022] [crit] [client 66.249.92.136:0] AH00529: /home/virtual/vps-aa3942/a/aede5353c4/public_html/.well-known/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/virtual/vps-aa3942/a/aede5353c4/public_html/.well-known/' is executable ampsstudio.com [Wed Sep 14 10:36:57 2022] [error] [client 20.9.72.249:0] [client 20.9.72.249] ModSecurity: Access denied with connection close (phase 2). Pattern match "^wp_is_mobile$" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "420038"] [msg "Malware.Expert - user-agent: Webshell user-agent"] [hostname "ampsstudio.com"] [uri "/wp-load.php"] [unique_id "YyGguf0Yl05SIxcbitGeJAAAAAU"] ampsstudio.com [Wed Sep 14 10:36:57 2022] [error] [client 20.9.72.249:0] [client 20.9.72.249] ModSecurity: Access denied with connection close (phase 2). Pattern match "^wp_is_mobile$" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "420038"] [msg "Malware.Expert - user-agent: Webshell user-agent"] [hostname "ampsstudio.com"] [uri "/wp-load.php"] [unique_id "YyGgudB-Mur_0qbhYSZ75QAAAAM"] ampsstudio.com [Wed Sep 14 10:37:20 2022] [error] [client 20.9.72.249:0] [client 20.9.72.249] ModSecurity: Access denied with connection close (phase 2). Pattern match "^wp_is_mobile$" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "420038"] [msg "Malware.Expert - user-agent: Webshell user-agent"] [hostname "ampsstudio.com"] [uri "/style.php"] [unique_id "YyGg0NB-Mur_0qbhYSZ75gAAAAM"] ampsstudio.com [Wed Sep 14 10:37:21 2022] [error] [client 20.9.72.249:0] [client 20.9.72.249] ModSecurity: Access denied with connection close (phase 2). Pattern match "^wp_is_mobile$" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "420038"] [msg "Malware.Expert - user-agent: Webshell user-agent"] [hostname "ampsstudio.com"] [uri "/wp-admin/style.php"] [unique_id "YyGg0VnziCybcL12U2obiQAAAAo"] ampsstudio.com [Wed Sep 14 10:37:42 2022] [error] [client 20.9.72.249:0] [client 20.9.72.249] ModSecurity: Access denied with connection close (phase 2). Pattern match "^wp_is_mobile$" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "420038"] [msg "Malware.Expert - user-agent: Webshell user-agent"] [hostname "ampsstudio.com"] [uri "/s_e.php"] [unique_id "YyGg5jkZL6_HUoVxWvYp5gAAAAc"] ampsstudio.com [Wed Sep 14 10:37:54 2022] [error] [client 20.9.72.249:0] [client 20.9.72.249] ModSecurity: Access denied with connection close (phase 2). Pattern match "^wp_is_mobile$" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "420038"] [msg "Malware.Expert - user-agent: Webshell user-agent"] [hostname "ampsstudio.com"] [uri "/s_ne.php"] [unique_id "YyGg8lLtbt6c8T4EfMvtFAAAAAI"] ampsstudio.com [Wed Sep 14 10:38:36 2022] [error] [client 20.9.72.249:0] [client 20.9.72.249] ModSecurity: Access denied with connection close (phase 2). Pattern match "^wp_is_mobile$" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "420038"] [msg "Malware.Expert - user-agent: Webshell user-agent"] [hostname "ampsstudio.com"] [uri "/radio.php"] [unique_id "YyGhHFnziCybcL12U2obkwAAAAo"] ampsstudio.com [Wed Sep 14 10:38:52 2022] [error] [client 20.9.72.249:0] [client 20.9.72.249] ModSecurity: Access denied with connection close (phase 2). Pattern match "^wp_is_mobile$" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "420038"] [msg "Malware.Expert - user-agent: Webshell user-agent"] [hostname "ampsstudio.com"] [uri "/doc.php"] [unique_id "YyGhLAzt9fAbp6RbHrkvcQAAAAg"] ampsstudio.com [Wed Sep 14 10:39:08 2022] [error] [client 20.9.72.249:0] [client 20.9.72.249] ModSecurity: Access denied with code 403 (phase 2). Match of "contains index.php" against "REQUEST_URI" required. [file "remote server"] [line "-1"] [id "570075"] [msg "Malware.Expert - Malware"] [hostname "ampsstudio.com"] [uri "/wp_wrong_datlib.php"] [unique_id "YyGhPKTm-VQJfenoQFmsRgAAAAQ"] ampsstudio.com [Wed Sep 14 10:39:49 2022] [error] [client 20.9.72.249:0] [client 20.9.72.249] ModSecurity: Access denied with code 403 (phase 2). Match of "contains index.php" against "REQUEST_URI" required. [file "remote server"] [line "-1"] [id "570075"] [msg "Malware.Expert - Malware"] [hostname "ampsstudio.com"] [uri "/beence.php"] [unique_id "YyGhZTkZL6_HUoVxWvYp7AAAAAc"] ampsstudio.com [Wed Sep 14 10:40:17 2022] [error] [client 20.9.72.249:0] [client 20.9.72.249] ModSecurity: Access denied with connection close (phase 2). Pattern match "^wp_is_mobile$" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "420038"] [msg "Malware.Expert - user-agent: Webshell user-agent"] [hostname "ampsstudio.com"] [uri "/ups.php"] [unique_id "YyGhgTbjRGfmtzK27FwlgwAAAAA"] ampsstudio.com [Wed Sep 14 10:40:39 2022] [error] [client 20.9.72.249:0] [client 20.9.72.249] ModSecurity: Access denied with connection close (phase 2). Pattern match "^wp_is_mobile$" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "420038"] [msg "Malware.Expert - user-agent: Webshell user-agent"] [hostname "ampsstudio.com"] [uri "/wp-signin.php"] [unique_id "YyGhl_0Yl05SIxcbitGeMgAAAAU"] ampsstudio.com [Wed Sep 14 10:40:48 2022] [error] [client 20.9.72.249:0] [client 20.9.72.249] ModSecurity: Access denied with connection close (phase 2). Pattern match "^wp_is_mobile$" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "420038"] [msg "Malware.Expert - user-agent: Webshell user-agent"] [hostname "ampsstudio.com"] [uri "/media-admin.php"] [unique_id "YyGhoFnziCybcL12U2oblQAAAAo"] ampsstudio.com [Wed Sep 14 10:41:04 2022] [error] [client 20.9.72.249:0] [client 20.9.72.249] ModSecurity: Access denied with code 403 (phase 2). Match of "contains index.php" against "REQUEST_URI" required. [file "remote server"] [line "-1"] [id "570075"] [msg "Malware.Expert - Malware"] [hostname "ampsstudio.com"] [uri "/export.php"] [unique_id "YyGhsNB-Mur_0qbhYSZ79AAAAAM"] ampsstudio.com [Wed Sep 14 10:41:05 2022] [error] [client 20.9.72.249:0] [client 20.9.72.249] ModSecurity: Access denied with code 403 (phase 2). Match of "contains index.php" against "REQUEST_URI" required. [file "remote server"] [line "-1"] [id "570075"] [msg "Malware.Expert - Malware"] [hostname "ampsstudio.com"] [uri "/wp-content/export.php"] [unique_id "YyGhsaTm-VQJfenoQFmsSAAAAAQ"] ampsstudio.com [Wed Sep 14 10:41:19 2022] [error] [client 20.9.72.249:0] [client 20.9.72.249] ModSecurity: Access denied with connection close (phase 2). Pattern match "^wp_is_mobile$" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "420038"] [msg "Malware.Expert - user-agent: Webshell user-agent"] [hostname "ampsstudio.com"] [uri "/wp-includes/wp-class.php"] [unique_id "YyGhvzkZL6_HUoVxWvYp7gAAAAc"] ampsstudio.com [Wed Sep 14 10:41:35 2022] [error] [client 20.9.72.249:0] [client 20.9.72.249] ModSecurity: Access denied with code 403 (phase 2). Match of "contains index.php" against "REQUEST_URI" required. [file "remote server"] [line "-1"] [id "570075"] [msg "Malware.Expert - Malware"] [hostname "ampsstudio.com"] [uri "/wp-includes/wp-atom.php"] [unique_id "YyGhz1Ltbt6c8T4EfMvtGQAAAAI"] ampsstudio.com [Wed Sep 14 10:41:43 2022] [error] [client 20.9.72.249:0] [client 20.9.72.249] ModSecurity: Access denied with code 403 (phase 2). Pattern match "/wp-includes/images/.*\\\\.php" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430032"] [msg "Malware.Expert - request_uri: Wordpress - prevent PHP files from executing"] [hostname "ampsstudio.com"] [uri "/wp-includes/images/css.php"] [unique_id "YyGh1zbjRGfmtzK27FwlhAAAAAA"] ampsstudio.com [Wed Sep 14 10:41:44 2022] [error] [client 20.9.72.249:0] [client 20.9.72.249] ModSecurity: Access denied with code 403 (phase 2). Pattern match "/wp-includes/css/.*\\\\.php" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430035"] [msg "Malware.Expert - request_uri: Wordpress - prevent PHP files from executing"] [hostname "ampsstudio.com"] [uri "/wp-includes/css/css.php"] [unique_id "YyGh2NFR07CpZfHDZS35IwAAAAE"] ampsstudio.com [Wed Sep 14 10:41:48 2022] [error] [client 20.9.72.249:0] [client 20.9.72.249] ModSecurity: Access denied with code 403 (phase 2). Match of "contains index.php" against "REQUEST_URI" required. [file "remote server"] [line "-1"] [id "570075"] [msg "Malware.Expert - Malware"] [hostname "ampsstudio.com"] [uri "/defau1t.php"] [unique_id "YyGh3P0Yl05SIxcbitGeMwAAAAU"] ampsstudio.com [Wed Sep 14 10:42:00 2022] [error] [client 20.9.72.249:0] [client 20.9.72.249] ModSecurity: Access denied with code 403 (phase 2). Match of "contains index.php" against "REQUEST_URI" required. [file "remote server"] [line "-1"] [id "570075"] [msg "Malware.Expert - Malware"] [hostname "ampsstudio.com"] [uri "/moduless.php"] [unique_id "YyGh6Azt9fAbp6RbHrkvdAAAAAg"] ampsstudio.com [Wed Sep 14 10:42:04 2022] [error] [client 20.9.72.249:0] [client 20.9.72.249] ModSecurity: Access denied with connection close (phase 2). Pattern match "^wp_is_mobile$" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "420038"] [msg "Malware.Expert - user-agent: Webshell user-agent"] [hostname "ampsstudio.com"] [uri "/wp-booking.php"] [unique_id "YyGh7KTm-VQJfenoQFmsSQAAAAQ"] ampsstudio.com [Wed Sep 14 10:42:07 2022] [error] [client 20.9.72.249:0] [client 20.9.72.249] ModSecurity: Access denied with connection close (phase 2). Pattern match "^wp_is_mobile$" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "420038"] [msg "Malware.Expert - user-agent: Webshell user-agent"] [hostname "ampsstudio.com"] [uri "/wp-content/plugins/backup_index.php"] [unique_id "YyGh79B-Mur_0qbhYSZ79QAAAAM"] ampsstudio.com [Wed Sep 14 10:42:16 2022] [error] [client 20.9.72.249:0] [client 20.9.72.249] ModSecurity: Access denied with connection close (phase 2). Pattern match "^wp_is_mobile$" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "420038"] [msg "Malware.Expert - user-agent: Webshell user-agent"] [hostname "ampsstudio.com"] [uri "/wp-content/mu-plugins/db-safe-mode.php"] [unique_id "YyGh-DkZL6_HUoVxWvYp7wAAAAc"] ampsstudio.com [Wed Sep 14 10:42:37 2022] [error] [client 20.9.72.249:0] [client 20.9.72.249] ModSecurity: Access denied with connection close (phase 2). Pattern match "^wp_is_mobile$" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "420038"] [msg "Malware.Expert - user-agent: Webshell user-agent"] [hostname "ampsstudio.com"] [uri "/wp-includes/css/wp-config.php"] [unique_id "YyGiDf0Yl05SIxcbitGeNAAAAAU"] ampsstudio.com [Wed Sep 14 10:42:46 2022] [error] [client 20.9.72.249:0] [client 20.9.72.249] ModSecurity: Access denied with connection close (phase 2). Pattern match "^wp_is_mobile$" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "420038"] [msg "Malware.Expert - user-agent: Webshell user-agent"] [hostname "ampsstudio.com"] [uri "/config.bak.php"] [unique_id "YyGiFlnziCybcL12U2oblwAAAAo"] ampsstudio.com [Wed Sep 14 10:42:47 2022] [error] [client 20.9.72.249:0] [client 20.9.72.249] ModSecurity: Access denied with connection close (phase 2). Pattern match "^wp_is_mobile$" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "420038"] [msg "Malware.Expert - user-agent: Webshell user-agent"] [hostname "ampsstudio.com"] [uri "/wp-content/themes/config.bak.php"] [unique_id "YyGiF17eY5Iemv96hZFvLQAAAAY"] ampsstudio.com [Wed Sep 14 10:42:53 2022] [error] [client 20.9.72.249:0] [client 20.9.72.249] ModSecurity: Access denied with connection close (phase 2). Pattern match "^wp_is_mobile$" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "420038"] [msg "Malware.Expert - user-agent: Webshell user-agent"] [hostname "ampsstudio.com"] [uri "/legion.php"] [unique_id "YyGiHdB-Mur_0qbhYSZ79gAAAAM"] ampsstudio.com [Wed Sep 14 10:43:18 2022] [error] [client 20.9.72.249:0] [client 20.9.72.249] ModSecurity: Access denied with connection close (phase 2). Pattern match "^wp_is_mobile$" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "420038"] [msg "Malware.Expert - user-agent: Webshell user-agent"] [hostname "ampsstudio.com"] [uri "/wp-plugins.php"] [unique_id "YyGiNlnziCybcL12U2oboAAAAAo"] ampsstudio.com [Wed Sep 14 10:43:19 2022] [error] [client 20.9.72.249:0] [client 20.9.72.249] ModSecurity: Access denied with connection close (phase 2). Pattern match "^wp_is_mobile$" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "420038"] [msg "Malware.Expert - user-agent: Webshell user-agent"] [hostname "ampsstudio.com"] [uri "/gank.php.PhP"] [unique_id "YyGiN9B-Mur_0qbhYSZ7_gAAAAM"] ampsstudio.com [Wed Sep 14 10:43:29 2022] [error] [client 20.9.72.249:0] [client 20.9.72.249] ModSecurity: Access denied with connection close (phase 2). Pattern match "^wp_is_mobile$" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "420038"] [msg "Malware.Expert - user-agent: Webshell user-agent"] [hostname "ampsstudio.com"] [uri "/wp-content/db-cache.php"] [unique_id "YyGiQf0Yl05SIxcbitGePgAAAAU"] ampsstudio.com [Wed Sep 14 10:43:45 2022] [error] [client 20.9.72.249:0] [client 20.9.72.249] ModSecurity: Access denied with code 403 (phase 2). Match of "contains index.php" against "REQUEST_URI" required. [file "remote server"] [line "-1"] [id "570075"] [msg "Malware.Expert - Malware"] [hostname "ampsstudio.com"] [uri "/archives.php"] [unique_id "YyGiUaTm-VQJfenoQFmsVAAAAAQ"] ampsstudio.com [Wed Sep 14 10:43:53 2022] [error] [client 20.9.72.249:0] [client 20.9.72.249] ModSecurity: Access denied with code 403 (phase 2). Match of "contains index.php" against "REQUEST_URI" required. [file "remote server"] [line "-1"] [id "570075"] [msg "Malware.Expert - Malware"] [hostname "ampsstudio.com"] [uri "/defau11.php"] [unique_id "YyGiWQzt9fAbp6RbHrkvfwAAAAg"] ampsstudio.com [Wed Sep 14 10:44:07 2022] [error] [client 20.9.72.249:0] [client 20.9.72.249] ModSecurity: Access denied with connection close (phase 2). Pattern match "^wp_is_mobile$" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "420038"] [msg "Malware.Expert - user-agent: Webshell user-agent"] [hostname "ampsstudio.com"] [uri "/wp-content/outcms.php"] [unique_id "YyGiZ9B-Mur_0qbhYSZ7_wAAAAM"] ampsstudio.com [Wed Sep 14 10:44:10 2022] [error] [client 20.9.72.249:0] [client 20.9.72.249] ModSecurity: Access denied with connection close (phase 2). Pattern match "^wp_is_mobile$" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "420038"] [msg "Malware.Expert - user-agent: Webshell user-agent"] [hostname "ampsstudio.com"] [uri "/system_log.php"] [unique_id "YyGiajbjRGfmtzK27FwliAAAAAA"] ampsstudio.com [Wed Sep 14 10:44:23 2022] [error] [client 20.9.72.249:0] [client 20.9.72.249] ModSecurity: Access denied with connection close (phase 2). Pattern match "^wp_is_mobile$" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "420038"] [msg "Malware.Expert - user-agent: Webshell user-agent"] [hostname "ampsstudio.com"] [uri "/wp-backup-sql-302.php"] [unique_id "YyGidzkZL6_HUoVxWvYp8wAAAAc"] ampsstudio.com [Wed Sep 14 10:44:48 2022] [error] [client 20.9.72.249:0] [client 20.9.72.249] ModSecurity: Access denied with connection close (phase 2). Pattern match "^wp_is_mobile$" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "420038"] [msg "Malware.Expert - user-agent: Webshell user-agent"] [hostname "ampsstudio.com"] [uri "/error.php"] [unique_id "YyGikKTm-VQJfenoQFmsVQAAAAQ"] ampsstudio.com [Wed Sep 14 10:45:13 2022] [error] [client 20.9.72.249:0] [client 20.9.72.249] ModSecurity: Access denied with connection close (phase 2). Pattern match "^wp_is_mobile$" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "420038"] [msg "Malware.Expert - user-agent: Webshell user-agent"] [hostname "ampsstudio.com"] [uri "/ALFA_DATA"] [unique_id "YyGiqdB-Mur_0qbhYSZ8AAAAAAM"] ampsstudio.com [Wed Sep 14 10:45:14 2022] [error] [client 20.9.72.249:0] [client 20.9.72.249] ModSecurity: Access denied with connection close (phase 2). Pattern match "^wp_is_mobile$" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "420038"] [msg "Malware.Expert - user-agent: Webshell user-agent"] [hostname "ampsstudio.com"] [uri "/alfacgiapi"] [unique_id "YyGiqjbjRGfmtzK27FwliQAAAAA"] ampsstudio.com [Wed Sep 14 10:45:15 2022] [error] [client 20.9.72.249:0] [client 20.9.72.249] ModSecurity: Access denied with connection close (phase 2). Pattern match "^wp_is_mobile$" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "420038"] [msg "Malware.Expert - user-agent: Webshell user-agent"] [hostname "ampsstudio.com"] [uri "/cgialfa"] [unique_id "YyGiqzkZL6_HUoVxWvYp9AAAAAc"] ampsstudio.com [Wed Sep 14 10:45:16 2022] [crit] [client 20.9.72.249:0] AH00529: /home/virtual/vps-aa3942/a/aede5353c4/public_html/.well-known/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/virtual/vps-aa3942/a/aede5353c4/public_html/.well-known/' is executable ampsstudio.com [Wed Sep 14 10:45:17 2022] [crit] [client 20.9.72.249:0] AH00529: /home/virtual/vps-aa3942/a/aede5353c4/public_html/.well-known/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/virtual/vps-aa3942/a/aede5353c4/public_html/.well-known/' is executable ampsstudio.com [Wed Sep 14 10:45:17 2022] [crit] [client 20.9.72.249:0] AH00529: /home/virtual/vps-aa3942/a/aede5353c4/public_html/.well-known/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/virtual/vps-aa3942/a/aede5353c4/public_html/.well-known/' is executable ampsstudio.com [Wed Sep 14 10:45:20 2022] [error] [client 20.9.72.249:0] [client 20.9.72.249] ModSecurity: Access denied with connection close (phase 2). Pattern match "^wp_is_mobile$" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "420038"] [msg "Malware.Expert - user-agent: Webshell user-agent"] [hostname "ampsstudio.com"] [uri "/wp-content/uploads/ALFA_DATA"] [unique_id "YyGisKTm-VQJfenoQFmsVgAAAAQ"] ampsstudio.com [Wed Sep 14 10:45:21 2022] [error] [client 20.9.72.249:0] [client 20.9.72.249] ModSecurity: Access denied with connection close (phase 2). Pattern match "^wp_is_mobile$" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "420038"] [msg "Malware.Expert - user-agent: Webshell user-agent"] [hostname "ampsstudio.com"] [uri "/wp-content/uploads/alfacgiapi"] [unique_id "YyGisQzt9fAbp6RbHrkvgQAAAAg"] ampsstudio.com [Wed Sep 14 10:45:22 2022] [error] [client 20.9.72.249:0] [client 20.9.72.249] ModSecurity: Access denied with connection close (phase 2). Pattern match "^wp_is_mobile$" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "420038"] [msg "Malware.Expert - user-agent: Webshell user-agent"] [hostname "ampsstudio.com"] [uri "/wp-content/uploads/cgialfa"] [unique_id "YyGislnziCybcL12U2obowAAAAo"] ampsstudio.com [Wed Sep 14 10:45:23 2022] [error] [client 20.9.72.249:0] [client 20.9.72.249] ModSecurity: Access denied with connection close (phase 2). Pattern match "^wp_is_mobile$" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "420038"] [msg "Malware.Expert - user-agent: Webshell user-agent"] [hostname "ampsstudio.com"] [uri "/wp-includes/ALFA_DATA"] [unique_id "YyGis17eY5Iemv96hZFvOAAAAAY"] ampsstudio.com [Wed Sep 14 10:45:24 2022] [error] [client 20.9.72.249:0] [client 20.9.72.249] ModSecurity: Access denied with connection close (phase 2). Pattern match "^wp_is_mobile$" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "420038"] [msg "Malware.Expert - user-agent: Webshell user-agent"] [hostname "ampsstudio.com"] [uri "/wp-includes/alfacgiapi"] [unique_id "YyGitNB-Mur_0qbhYSZ8AQAAAAM"] ampsstudio.com [Wed Sep 14 10:45:25 2022] [error] [client 20.9.72.249:0] [client 20.9.72.249] ModSecurity: Access denied with connection close (phase 2). Pattern match "^wp_is_mobile$" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "420038"] [msg "Malware.Expert - user-agent: Webshell user-agent"] [hostname "ampsstudio.com"] [uri "/wp-includes/cgialfa"] [unique_id "YyGitTbjRGfmtzK27FwligAAAAA"] ampsstudio.com [Wed Sep 14 10:45:26 2022] [error] [client 20.9.72.249:0] [client 20.9.72.249] ModSecurity: Access denied with connection close (phase 2). Pattern match "^wp_is_mobile$" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "420038"] [msg "Malware.Expert - user-agent: Webshell user-agent"] [hostname "ampsstudio.com"] [uri "/wp-admin/ALFA_DATA"] [unique_id "YyGitjkZL6_HUoVxWvYp9QAAAAc"] ampsstudio.com [Wed Sep 14 10:45:27 2022] [error] [client 20.9.72.249:0] [client 20.9.72.249] ModSecurity: Access denied with connection close (phase 2). Pattern match "^wp_is_mobile$" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "420038"] [msg "Malware.Expert - user-agent: Webshell user-agent"] [hostname "ampsstudio.com"] [uri "/wp-admin/alfacgiapi"] [unique_id "YyGit1Ltbt6c8T4EfMvtIAAAAAI"] ampsstudio.com [Wed Sep 14 10:45:28 2022] [error] [client 20.9.72.249:0] [client 20.9.72.249] ModSecurity: Access denied with connection close (phase 2). Pattern match "^wp_is_mobile$" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "420038"] [msg "Malware.Expert - user-agent: Webshell user-agent"] [hostname "ampsstudio.com"] [uri "/wp-admin/cgialfa"] [unique_id "YyGiuNFR07CpZfHDZS35KgAAAAE"] ampsstudio.com [Wed Sep 14 10:45:29 2022] [error] [client 20.9.72.249:0] [client 20.9.72.249] ModSecurity: Access denied with connection close (phase 2). Pattern match "^wp_is_mobile$" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "420038"] [msg "Malware.Expert - user-agent: Webshell user-agent"] [hostname "ampsstudio.com"] [uri "/wp-content/ALFA_DATA"] [unique_id "YyGiuf0Yl05SIxcbitGeQQAAAAU"] ampsstudio.com [Wed Sep 14 10:45:29 2022] [error] [client 20.9.72.249:0] [client 20.9.72.249] ModSecurity: Access denied with connection close (phase 2). Pattern match "^wp_is_mobile$" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "420038"] [msg "Malware.Expert - user-agent: Webshell user-agent"] [hostname "ampsstudio.com"] [uri "/wp-content/alfacgiapi"] [unique_id "YyGiuaTm-VQJfenoQFmsVwAAAAQ"] ampsstudio.com [Wed Sep 14 10:45:30 2022] [error] [client 20.9.72.249:0] [client 20.9.72.249] ModSecurity: Access denied with connection close (phase 2). Pattern match "^wp_is_mobile$" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "420038"] [msg "Malware.Expert - user-agent: Webshell user-agent"] [hostname "ampsstudio.com"] [uri "/wp-content/cgialfa"] [unique_id "YyGiugzt9fAbp6RbHrkvggAAAAg"] ampsstudio.com [Wed Sep 14 10:45:31 2022] [error] [client 20.9.72.249:0] [client 20.9.72.249] ModSecurity: Access denied with connection close (phase 2). Pattern match "^wp_is_mobile$" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "420038"] [msg "Malware.Expert - user-agent: Webshell user-agent"] [hostname "ampsstudio.com"] [uri "/templates/beez3/ALFA_DATA"] [unique_id "YyGiu1nziCybcL12U2obpAAAAAo"] ampsstudio.com [Wed Sep 14 10:45:32 2022] [error] [client 20.9.72.249:0] [client 20.9.72.249] ModSecurity: Access denied with connection close (phase 2). Pattern match "^wp_is_mobile$" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "420038"] [msg "Malware.Expert - user-agent: Webshell user-agent"] [hostname "ampsstudio.com"] [uri "/templates/beez3/alfacgiapi"] [unique_id "YyGivF7eY5Iemv96hZFvOQAAAAY"] ampsstudio.com [Wed Sep 14 10:45:33 2022] [error] [client 20.9.72.249:0] [client 20.9.72.249] ModSecurity: Access denied with connection close (phase 2). Pattern match "^wp_is_mobile$" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "420038"] [msg "Malware.Expert - user-agent: Webshell user-agent"] [hostname "ampsstudio.com"] [uri "/templates/beez3/cgialfa"] [unique_id "YyGivdB-Mur_0qbhYSZ8AgAAAAM"] ampsstudio.com [Wed Sep 14 10:45:34 2022] [error] [client 20.9.72.249:0] [client 20.9.72.249] ModSecurity: Access denied with connection close (phase 2). Pattern match "^wp_is_mobile$" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "420038"] [msg "Malware.Expert - user-agent: Webshell user-agent"] [hostname "ampsstudio.com"] [uri "/sites/default/files/ALFA_DATA"] [unique_id "YyGivjbjRGfmtzK27FwliwAAAAA"] ampsstudio.com [Wed Sep 14 10:45:35 2022] [error] [client 20.9.72.249:0] [client 20.9.72.249] ModSecurity: Access denied with connection close (phase 2). Pattern match "^wp_is_mobile$" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "420038"] [msg "Malware.Expert - user-agent: Webshell user-agent"] [hostname "ampsstudio.com"] [uri "/sites/default/files/alfacgiapi"] [unique_id "YyGivzkZL6_HUoVxWvYp9gAAAAc"] ampsstudio.com [Wed Sep 14 10:45:36 2022] [error] [client 20.9.72.249:0] [client 20.9.72.249] ModSecurity: Access denied with connection close (phase 2). Pattern match "^wp_is_mobile$" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "420038"] [msg "Malware.Expert - user-agent: Webshell user-agent"] [hostname "ampsstudio.com"] [uri "/sites/default/files/cgialfa"] [unique_id "YyGiwFLtbt6c8T4EfMvtIQAAAAI"] ampsstudio.com [Wed Sep 14 10:45:37 2022] [error] [client 20.9.72.249:0] [client 20.9.72.249] ModSecurity: Access denied with connection close (phase 2). Pattern match "^wp_is_mobile$" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "420038"] [msg "Malware.Expert - user-agent: Webshell user-agent"] [hostname "ampsstudio.com"] [uri "/admin/controller/extension/extension/ALFA_DATA"] [unique_id "YyGiwdFR07CpZfHDZS35KwAAAAE"] ampsstudio.com [Wed Sep 14 10:45:37 2022] [error] [client 20.9.72.249:0] [client 20.9.72.249] ModSecurity: Access denied with connection close (phase 2). Pattern match "^wp_is_mobile$" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "420038"] [msg "Malware.Expert - user-agent: Webshell user-agent"] [hostname "ampsstudio.com"] [uri "/admin/controller/extension/extension/alfacgiapi"] [unique_id "YyGiwf0Yl05SIxcbitGeQgAAAAU"] ampsstudio.com [Wed Sep 14 10:45:38 2022] [error] [client 20.9.72.249:0] [client 20.9.72.249] ModSecurity: Access denied with connection close (phase 2). Pattern match "^wp_is_mobile$" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "420038"] [msg "Malware.Expert - user-agent: Webshell user-agent"] [hostname "ampsstudio.com"] [uri "/admin/controller/extension/extension/cgialfa"] [unique_id "YyGiwqTm-VQJfenoQFmsWAAAAAQ"] ampsstudio.com [Wed Sep 14 10:46:01 2022] [error] [client 20.9.72.249:0] [client 20.9.72.249] ModSecurity: Access denied with connection close (phase 2). Pattern match "^wp_is_mobile$" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "420038"] [msg "Malware.Expert - user-agent: Webshell user-agent"] [hostname "ampsstudio.com"] [uri "/wp-content/plugins/ubh/up.php"] [unique_id "YyGi2V7eY5Iemv96hZFvOgAAAAY"] ampsstudio.com [Wed Sep 14 10:46:02 2022] [error] [client 20.9.72.249:0] [client 20.9.72.249] ModSecurity: Access denied with connection close (phase 2). Pattern match "^wp_is_mobile$" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "420038"] [msg "Malware.Expert - user-agent: Webshell user-agent"] [hostname "ampsstudio.com"] [uri "/index.php"] [unique_id "YyGi2tB-Mur_0qbhYSZ8AwAAAAM"] ampsstudio.com [Wed Sep 14 10:46:03 2022] [error] [client 20.9.72.249:0] [client 20.9.72.249] ModSecurity: Access denied with connection close (phase 2). Pattern match "^wp_is_mobile$" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "420038"] [msg "Malware.Expert - user-agent: Webshell user-agent"] [hostname "ampsstudio.com"] [uri "/olux.php"] [unique_id "YyGi2zbjRGfmtzK27FwljAAAAAA"] ampsstudio.com [Wed Sep 14 10:46:04 2022] [error] [client 20.9.72.249:0] [client 20.9.72.249] ModSecurity: Access denied with connection close (phase 2). Pattern match "^wp_is_mobile$" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "420038"] [msg "Malware.Expert - user-agent: Webshell user-agent"] [hostname "ampsstudio.com"] [uri "/xleet.php"] [unique_id "YyGi3DkZL6_HUoVxWvYp9wAAAAc"] ampsstudio.com [Wed Sep 14 10:46:05 2022] [error] [client 20.9.72.249:0] [client 20.9.72.249] ModSecurity: Access denied with connection close (phase 2). Pattern match "^wp_is_mobile$" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "420038"] [msg "Malware.Expert - user-agent: Webshell user-agent"] [hostname "ampsstudio.com"] [uri "/wso.php"] [unique_id "YyGi3VLtbt6c8T4EfMvtIgAAAAI"] ampsstudio.com [Wed Sep 14 10:46:05 2022] [error] [client 20.9.72.249:0] [client 20.9.72.249] ModSecurity: Access denied with connection close (phase 2). Pattern match "^wp_is_mobile$" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "420038"] [msg "Malware.Expert - user-agent: Webshell user-agent"] [hostname "ampsstudio.com"] [uri "/shell.php"] [unique_id "YyGi3dFR07CpZfHDZS35LAAAAAE"] ampsstudio.com [Wed Sep 14 10:46:06 2022] [error] [client 20.9.72.249:0] [client 20.9.72.249] ModSecurity: Access denied with connection close (phase 2). Pattern match "^wp_is_mobile$" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "420038"] [msg "Malware.Expert - user-agent: Webshell user-agent"] [hostname "ampsstudio.com"] [uri "/up.php"] [unique_id "YyGi3v0Yl05SIxcbitGeQwAAAAU"] ampsstudio.com [Wed Sep 14 10:46:07 2022] [error] [client 20.9.72.249:0] [client 20.9.72.249] ModSecurity: Access denied with connection close (phase 2). Pattern match "^wp_is_mobile$" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "420038"] [msg "Malware.Expert - user-agent: Webshell user-agent"] [hostname "ampsstudio.com"] [uri "/upload.php"] [unique_id "YyGi36Tm-VQJfenoQFmsWQAAAAQ"] ampsstudio.com [Wed Sep 14 10:46:08 2022] [error] [client 20.9.72.249:0] [client 20.9.72.249] ModSecurity: Access denied with connection close (phase 2). Pattern match "^wp_is_mobile$" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "420038"] [msg "Malware.Expert - user-agent: Webshell user-agent"] [hostname "ampsstudio.com"] [uri "/1.php"] [unique_id "YyGi4Azt9fAbp6RbHrkvhAAAAAg"] ampsstudio.com [Wed Sep 14 10:46:09 2022] [error] [client 20.9.72.249:0] [client 20.9.72.249] ModSecurity: Access denied with connection close (phase 2). Pattern match "^wp_is_mobile$" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "420038"] [msg "Malware.Expert - user-agent: Webshell user-agent"] [hostname "ampsstudio.com"] [uri "/x.php"] [unique_id "YyGi4VnziCybcL12U2obpgAAAAo"] ampsstudio.com [Wed Sep 14 10:46:10 2022] [error] [client 20.9.72.249:0] [client 20.9.72.249] ModSecurity: Access denied with connection close (phase 2). Pattern match "^wp_is_mobile$" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "420038"] [msg "Malware.Expert - user-agent: Webshell user-agent"] [hostname "ampsstudio.com"] [uri "/z.php"] [unique_id "YyGi4l7eY5Iemv96hZFvOwAAAAY"] ampsstudio.com [Wed Sep 14 10:46:10 2022] [error] [client 20.9.72.249:0] [client 20.9.72.249] ModSecurity: Access denied with connection close (phase 2). Pattern match "^wp_is_mobile$" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "420038"] [msg "Malware.Expert - user-agent: Webshell user-agent"] [hostname "ampsstudio.com"] [uri "/a.php"] [unique_id "YyGi4tB-Mur_0qbhYSZ8BAAAAAM"] ampsstudio.com [Wed Sep 14 10:46:11 2022] [error] [client 20.9.72.249:0] [client 20.9.72.249] ModSecurity: Access denied with connection close (phase 2). Pattern match "^wp_is_mobile$" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "420038"] [msg "Malware.Expert - user-agent: Webshell user-agent"] [hostname "ampsstudio.com"] [uri "/test.php"] [unique_id "YyGi4zbjRGfmtzK27FwljQAAAAA"] ampsstudio.com [Wed Sep 14 10:46:12 2022] [error] [client 20.9.72.249:0] [client 20.9.72.249] ModSecurity: Access denied with connection close (phase 2). Pattern match "^wp_is_mobile$" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "420038"] [msg "Malware.Expert - user-agent: Webshell user-agent"] [hostname "ampsstudio.com"] [uri "/wp.php"] [unique_id "YyGi5DkZL6_HUoVxWvYp-AAAAAc"] ampsstudio.com [Wed Sep 14 10:46:13 2022] [error] [client 20.9.72.249:0] [client 20.9.72.249] ModSecurity: Access denied with connection close (phase 2). Pattern match "^wp_is_mobile$" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "420038"] [msg "Malware.Expert - user-agent: Webshell user-agent"] [hostname "ampsstudio.com"] [uri "/alfa.php"] [unique_id "YyGi5VLtbt6c8T4EfMvtIwAAAAI"] ampsstudio.com [Wed Sep 14 10:46:14 2022] [error] [client 20.9.72.249:0] [client 20.9.72.249] ModSecurity: Access denied with connection close (phase 2). Pattern match "^wp_is_mobile$" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "420038"] [msg "Malware.Expert - user-agent: Webshell user-agent"] [hostname "ampsstudio.com"] [uri "/config.php"] [unique_id "YyGi5tFR07CpZfHDZS35LQAAAAE"] ampsstudio.com [Wed Sep 14 10:46:15 2022] [error] [client 20.9.72.249:0] [client 20.9.72.249] ModSecurity: Access denied with connection close (phase 2). Pattern match "^wp_is_mobile$" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "420038"] [msg "Malware.Expert - user-agent: Webshell user-agent"] [hostname "ampsstudio.com"] [uri "/templates/beez3/index.php"] [unique_id "YyGi5_0Yl05SIxcbitGeRAAAAAU"] ampsstudio.com [Wed Sep 14 10:46:16 2022] [error] [client 20.9.72.249:0] [client 20.9.72.249] ModSecurity: Access denied with connection close (phase 2). Pattern match "^wp_is_mobile$" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "420038"] [msg "Malware.Expert - user-agent: Webshell user-agent"] [hostname "ampsstudio.com"] [uri "/about.php"] [unique_id "YyGi6KTm-VQJfenoQFmsWgAAAAQ"] ampsstudio.com [Wed Sep 14 10:46:16 2022] [error] [client 20.9.72.249:0] [client 20.9.72.249] ModSecurity: Access denied with connection close (phase 2). Pattern match "^wp_is_mobile$" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "420038"] [msg "Malware.Expert - user-agent: Webshell user-agent"] [hostname "ampsstudio.com"] [uri "/shells.php"] [unique_id "YyGi6Azt9fAbp6RbHrkvhQAAAAg"] ampsstudio.com [Wed Sep 14 11:47:04 2022] [error] [client 185.83.144.103:0] [client 185.83.144.103] ModSecurity: Access denied with code 403 (phase 2). Pattern match "/\\\\..+\\\\.php" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430015"] [msg "Malware.Expert - request_uri: hidden .php execute"] [hostname "ampsstudio.com"] [uri "/.aws/config.php"] [unique_id "YyGxKNFR07CpZfHDZS35TgAAAAE"] www.ampsstudio.com [Wed Sep 14 13:46:27 2022] [error] [client 51.120.114.250:0] [client 51.120.114.250] ModSecurity: Access denied with code 403 (phase 2). Pattern match "/wp-config\\\\.php" at QUERY_STRING. [file "remote server"] [line "-1"] [id "410018"] [msg "Malware.Expert - query_string: unwanted wordpress config access"] [hostname "www.ampsstudio.com"] [uri "/wp-admin/admin-ajax.php"] [unique_id "YyHNIyXQMB5XxMEHpjRQ9gAAAAk"] www.ampsstudio.com [Wed Sep 14 13:46:27 2022] [error] [client 51.120.114.250:0] [client 51.120.114.250] ModSecurity: Access denied with code 403 (phase 1). Pattern match "\\\\.\\\\./\\\\.\\\\." at REQUEST_URI. [file "remote server"] [line "-1"] [id "430064"] [msg "Malware.Expert - request_uri: directory travel"] [hostname "www.ampsstudio.com"] [uri "/wp-content/plugins/post-pdf-export/dompdf/dompdf.php"] [unique_id "YyHNIzbjRGfmtzK27FwmHgAAAAA"] www.ampsstudio.com [Wed Sep 14 13:46:27 2022] [error] [client 51.120.114.250:0] [client 51.120.114.250] ModSecurity: Access denied with code 403 (phase 1). Pattern match "\\\\.\\\\./\\\\.\\\\." at REQUEST_URI. [file "remote server"] [line "-1"] [id "430064"] [msg "Malware.Expert - request_uri: directory travel"] [hostname "www.ampsstudio.com"] [uri "/wp-admin/admin-ajax.php"] [unique_id "YyHNI6Tm-VQJfenoQFms7wAAAAQ"] www.ampsstudio.com [Wed Sep 14 13:46:27 2022] [error] [client 51.120.114.250:0] [client 51.120.114.250] ModSecurity: Access denied with code 403 (phase 1). Pattern match "\\\\.\\\\./\\\\.\\\\." at REQUEST_URI. [file "remote server"] [line "-1"] [id "430064"] [msg "Malware.Expert - request_uri: directory travel"] [hostname "www.ampsstudio.com"] [uri "/wp-content/plugins/wp-ecommerce-shop-styling/includes/download.php"] [unique_id "YyHNI1Ltbt6c8T4EfMvtsgAAAAI"] www.ampsstudio.com [Wed Sep 14 13:46:27 2022] [error] [client 51.120.114.250:0] [client 51.120.114.250] ModSecurity: Access denied with code 403 (phase 1). Pattern match "\\\\.\\\\./\\\\.\\\\." at REQUEST_URI. [file "remote server"] [line "-1"] [id "430064"] [msg "Malware.Expert - request_uri: directory travel"] [hostname "www.ampsstudio.com"] [uri "/wp-content/plugins/web-portal-lite-client-portal-secure-file-sharing-private-messaging/includes/libs/pdf/dompdf.php"] [unique_id "YyHNI1nziCybcL12U2ocNwAAAAo"] www.ampsstudio.com [Wed Sep 14 13:46:34 2022] [error] [client 51.120.114.250:0] [client 51.120.114.250] ModSecurity: Access denied with code 403 (phase 2). Pattern match "/wp-config\\\\.php" at QUERY_STRING. [file "remote server"] [line "-1"] [id "410018"] [msg "Malware.Expert - query_string: unwanted wordpress config access"] [hostname "www.ampsstudio.com"] [uri "/wp-content/plugins/mapsvg/gm_download.php"] [unique_id "YyHNKqTm-VQJfenoQFms8AAAAAQ"] www.ampsstudio.com [Wed Sep 14 16:19:42 2022] [error] [client 178.168.197.133:0] AH01071: Got error 'PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179' www.ampsstudio.com [Wed Sep 14 16:19:42 2022] [error] [client 178.168.197.133:0] AH01071: Got error 'PHP message: PHP Warning: Cannot modify header information - headers already sent by (output started at /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-includes/functions.php:5275) in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/includes/sonaar-music/css/theme/custom-style.php on line 2' ampsstudio.com [Wed Sep 14 20:11:40 2022] [error] [client 79.110.62.65:0] [client 79.110.62.65] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "ampsstudio.com"] [uri "/.env"] [unique_id "YyInbF7eY5Iemv96hZFwyAAAAAY"] ampsstudio.com [Wed Sep 14 20:48:57 2022] [error] [client 52.142.48.216:0] [client 52.142.48.216] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "ampsstudio.com"] [uri "/.env"] [unique_id "YyIwKSXQMB5XxMEHpjRSBQAAAAk"] ampsstudio.com [Wed Sep 14 20:48:58 2022] [error] [client 52.142.48.216:0] [client 52.142.48.216] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "ampsstudio.com"] [uri "/.env.bak"] [unique_id "YyIwKtB-Mur_0qbhYSZ9nQAAAAM"] ampsstudio.com [Wed Sep 14 20:49:02 2022] [error] [client 52.142.48.216:0] [client 52.142.48.216] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "ampsstudio.com"] [uri "/laravel/.env"] [unique_id "YyIwLlLtbt6c8T4EfMvuygAAAAI"] ampsstudio.com [Wed Sep 14 20:49:04 2022] [error] [client 52.142.48.216:0] [client 52.142.48.216] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "ampsstudio.com"] [uri "/local/.env"] [unique_id "YyIwMFnziCybcL12U2odQAAAAAo"] ampsstudio.com [Wed Sep 14 20:49:05 2022] [error] [client 52.142.48.216:0] [client 52.142.48.216] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "ampsstudio.com"] [uri "/cgi-bin/.env"] [unique_id "YyIwMQzt9fAbp6RbHrkxGAAAAAg"] ampsstudio.com [Wed Sep 14 20:49:06 2022] [error] [client 52.142.48.216:0] [client 52.142.48.216] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "ampsstudio.com"] [uri "/backend/.env"] [unique_id "YyIwMtFR07CpZfHDZS36xAAAAAE"] ampsstudio.com [Wed Sep 14 20:49:14 2022] [error] [client 52.142.48.216:0] [client 52.142.48.216] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "ampsstudio.com"] [uri "/protected/.env"] [unique_id "YyIwOlnziCybcL12U2odQQAAAAo"] ampsstudio.com [Wed Sep 14 20:49:15 2022] [error] [client 52.142.48.216:0] [client 52.142.48.216] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "ampsstudio.com"] [uri "/database/.env"] [unique_id "YyIwO17eY5Iemv96hZFw1AAAAAY"] ampsstudio.com [Wed Sep 14 20:49:28 2022] [error] [client 52.142.48.216:0] [client 52.142.48.216] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "ampsstudio.com"] [uri "/public/.env"] [unique_id "YyIwSAzt9fAbp6RbHrkxGQAAAAg"] ampsstudio.com [Wed Sep 14 20:49:29 2022] [error] [client 52.142.48.216:0] [client 52.142.48.216] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "ampsstudio.com"] [uri "/app/config/.env"] [unique_id "YyIwSdFR07CpZfHDZS36xQAAAAE"] ampsstudio.com [Wed Sep 14 20:49:30 2022] [error] [client 52.142.48.216:0] [client 52.142.48.216] ModSecurity: Access denied with code 403 (phase 2). String match ".aws/credentials" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430069"] [msg "Malware.Expert - request_uri: AWS Credentials"] [hostname "ampsstudio.com"] [uri "/.aws/credentials"] [unique_id "YyIwSiXQMB5XxMEHpjRSBwAAAAk"] webdisk.ampsstudio.com [Wed Sep 14 21:02:31 2022] [error] [client 52.255.182.165:0] [client 52.255.182.165] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "webdisk.ampsstudio.com"] [uri "/.env"] [unique_id "YyIzV_0Yl05SIxcbitGf6AAAAAU"] www.ampsstudio.com [Wed Sep 14 21:29:44 2022] [crit] [client 66.249.93.40:0] AH00529: /home/virtual/vps-aa3942/a/aede5353c4/public_html/.well-known/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/virtual/vps-aa3942/a/aede5353c4/public_html/.well-known/' is executable www.ampsstudio.com [Wed Sep 14 21:52:06 2022] [error] [client 17.121.115.112:0] AH01071: Got error 'PHP message: PHP Warning: Attempt to read property "ID" on null in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/archive-event.php on line 15PHP message: PHP Warning: Undefined array key 0 in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/includes/classes/iron_sonaar.class.php on line 212PHP message: PHP Warning: Trying to access array offset on value of type null in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/includes/classes/iron_sonaar.class.php on line 212PHP message: PHP Warning: Undefined array key 0 in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/includes/classes/iron_sonaar.class.php on line 214PHP message: PHP Warning: Trying to access array offset on value of type null in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/includes/classes/iron_sonaar.class.php on line 214' mail.ampsstudio.com [Wed Sep 14 23:20:21 2022] [error] [client 52.142.48.216:0] [client 52.142.48.216] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "mail.ampsstudio.com"] [uri "/.env"] [unique_id "YyJTpSXQMB5XxMEHpjRSSAAAAAk"] mail.ampsstudio.com [Wed Sep 14 23:20:22 2022] [error] [client 52.142.48.216:0] [client 52.142.48.216] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "mail.ampsstudio.com"] [uri "/.env.bak"] [unique_id "YyJTpuZiAv2X7TKCNdYMkAAAAAc"] mail.ampsstudio.com [Wed Sep 14 23:20:25 2022] [error] [client 52.142.48.216:0] [client 52.142.48.216] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "mail.ampsstudio.com"] [uri "/laravel/.env"] [unique_id "YyJTqdFR07CpZfHDZS37CQAAAAE"] mail.ampsstudio.com [Wed Sep 14 23:20:26 2022] [error] [client 52.142.48.216:0] [client 52.142.48.216] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "mail.ampsstudio.com"] [uri "/local/.env"] [unique_id "YyJTqgzt9fAbp6RbHrkxXgAAAAg"] mail.ampsstudio.com [Wed Sep 14 23:20:27 2022] [error] [client 52.142.48.216:0] [client 52.142.48.216] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "mail.ampsstudio.com"] [uri "/cgi-bin/.env"] [unique_id "YyJTq_0Yl05SIxcbitGgJwAAAAU"] mail.ampsstudio.com [Wed Sep 14 23:20:28 2022] [error] [client 52.142.48.216:0] [client 52.142.48.216] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "mail.ampsstudio.com"] [uri "/backend/.env"] [unique_id "YyJTrFnziCybcL12U2odgQAAAAo"] mail.ampsstudio.com [Wed Sep 14 23:20:33 2022] [error] [client 52.142.48.216:0] [client 52.142.48.216] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "mail.ampsstudio.com"] [uri "/protected/.env"] [unique_id "YyJTsV7eY5Iemv96hZFxGQAAAAY"] mail.ampsstudio.com [Wed Sep 14 23:20:35 2022] [error] [client 52.142.48.216:0] [client 52.142.48.216] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "mail.ampsstudio.com"] [uri "/database/.env"] [unique_id "YyJTsyXQMB5XxMEHpjRSSQAAAAk"] mail.ampsstudio.com [Wed Sep 14 23:20:35 2022] [error] [client 52.142.48.216:0] [client 52.142.48.216] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "mail.ampsstudio.com"] [uri "/public/.env"] [unique_id "YyJTs-ZiAv2X7TKCNdYMkQAAAAc"] mail.ampsstudio.com [Wed Sep 14 23:20:37 2022] [error] [client 52.142.48.216:0] [client 52.142.48.216] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "mail.ampsstudio.com"] [uri "/app/config/.env"] [unique_id "YyJTtaTm-VQJfenoQFmuQgAAAAQ"] mail.ampsstudio.com [Wed Sep 14 23:20:38 2022] [error] [client 52.142.48.216:0] [client 52.142.48.216] ModSecurity: Access denied with code 403 (phase 2). String match ".aws/credentials" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430069"] [msg "Malware.Expert - request_uri: AWS Credentials"] [hostname "mail.ampsstudio.com"] [uri "/.aws/credentials"] [unique_id "YyJTttFR07CpZfHDZS37CgAAAAE"] www.ampsstudio.com [Wed Sep 14 23:26:58 2022] [error] [client 17.121.113.90:0] AH01071: Got error 'PHP message: PHP Warning: Attempt to read property "ID" on null in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/archive-event.php on line 15PHP message: PHP Warning: Undefined array key 0 in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/includes/classes/iron_sonaar.class.php on line 212PHP message: PHP Warning: Trying to access array offset on value of type null in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/includes/classes/iron_sonaar.class.php on line 212PHP message: PHP Warning: Undefined array key 0 in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/includes/classes/iron_sonaar.class.php on line 214PHP message: PHP Warning: Trying to access array offset on value of type null in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/includes/classes/iron_sonaar.class.php on line 214' ampsstudio.com [Thu Sep 15 02:29:36 2022] [error] [client 159.89.33.85:0] [client 159.89.33.85] ModSecurity: Access denied with code 403 (phase 2). Match of "contains index.php" against "REQUEST_URI" required. [file "remote server"] [line "-1"] [id "570076"] [msg "Malware.Expert - Malware"] [hostname "ampsstudio.com"] [uri "/wp-plain.php"] [unique_id "YyKAAF7eY5Iemv96hZFxYgAAAAY"] www.ampsstudio.com [Thu Sep 15 02:29:41 2022] [error] [client 159.89.33.85:0] [client 159.89.33.85] ModSecurity: Access denied with code 403 (phase 2). String match "php.suspected" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430059"] [msg "Malware.Expert - request_uri: .PHP suspected files"] [hostname "www.ampsstudio.com"] [uri "/wp-content/plugins/apikey/apikey.php.suspected"] [unique_id "YyKABSXQMB5XxMEHpjRSkQAAAAk"] www.ampsstudio.com [Thu Sep 15 02:29:42 2022] [error] [client 159.89.33.85:0] [client 159.89.33.85] ModSecurity: Access denied with code 403 (phase 2). String match "php.suspected" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430059"] [msg "Malware.Expert - request_uri: .PHP suspected files"] [hostname "www.ampsstudio.com"] [uri "/plugins/content/apismtp/apismtp.php.suspected"] [unique_id "YyKABv0Yl05SIxcbitGgcQAAAAU"] www.ampsstudio.com [Thu Sep 15 02:41:12 2022] [error] [client 51.120.122.58:0] [client 51.120.122.58] ModSecurity: Access denied with code 403 (phase 2). Pattern match "/wp-config\\\\.php" at QUERY_STRING. [file "remote server"] [line "-1"] [id "410018"] [msg "Malware.Expert - query_string: unwanted wordpress config access"] [hostname "www.ampsstudio.com"] [uri "/wp-content/plugins/mapsvg/gm_download.php"] [unique_id "YyKCuAzt9fAbp6RbHrkxsAAAAAg"] www.ampsstudio.com [Thu Sep 15 02:41:13 2022] [error] [client 51.120.122.58:0] [client 51.120.122.58] ModSecurity: Access denied with code 403 (phase 2). Pattern match "/wp-config\\\\.php" at QUERY_STRING. [file "remote server"] [line "-1"] [id "410018"] [msg "Malware.Expert - query_string: unwanted wordpress config access"] [hostname "www.ampsstudio.com"] [uri "/wp-admin/admin-ajax.php"] [unique_id "YyKCuf0Yl05SIxcbitGgdwAAAAU"] www.ampsstudio.com [Thu Sep 15 02:41:13 2022] [error] [client 51.120.122.58:0] [client 51.120.122.58] ModSecurity: Access denied with code 403 (phase 2). Pattern match "/wp-config\\\\.php" at QUERY_STRING. [file "remote server"] [line "-1"] [id "410018"] [msg "Malware.Expert - query_string: unwanted wordpress config access"] [hostname "www.ampsstudio.com"] [uri "/wp-content/plugins/mapsvg-lite-interactive-vector-maps/gm_download.php"] [unique_id "YyKCuVLtbt6c8T4EfMvvYgAAAAI"] www.ampsstudio.com [Thu Sep 15 02:41:13 2022] [error] [client 51.120.122.58:0] [client 51.120.122.58] ModSecurity: Access denied with code 403 (phase 1). Pattern match "\\\\.\\\\./\\\\.\\\\." at REQUEST_URI. [file "remote server"] [line "-1"] [id "430064"] [msg "Malware.Expert - request_uri: directory travel"] [hostname "www.ampsstudio.com"] [uri "/wp-content/plugins/web-portal-lite-client-portal-secure-file-sharing-private-messaging/includes/libs/pdf/dompdf.php"] [unique_id "YyKCudFR07CpZfHDZS37WwAAAAE"] www.ampsstudio.com [Thu Sep 15 02:41:16 2022] [error] [client 51.120.122.58:0] [client 51.120.122.58] ModSecurity: Access denied with code 403 (phase 1). Pattern match "\\\\.\\\\./\\\\.\\\\." at REQUEST_URI. [file "remote server"] [line "-1"] [id "430064"] [msg "Malware.Expert - request_uri: directory travel"] [hostname "www.ampsstudio.com"] [uri "/wp-content/plugins/post-pdf-export/dompdf/dompdf.php"] [unique_id "YyKCvKTm-VQJfenoQFmukQAAAAQ"] www.ampsstudio.com [Thu Sep 15 02:41:19 2022] [error] [client 51.120.122.58:0] [client 51.120.122.58] ModSecurity: Access denied with code 403 (phase 1). Pattern match "\\\\.\\\\./\\\\.\\\\." at REQUEST_URI. [file "remote server"] [line "-1"] [id "430064"] [msg "Malware.Expert - request_uri: directory travel"] [hostname "www.ampsstudio.com"] [uri "/wp-admin/admin-ajax.php"] [unique_id "YyKCvyXQMB5XxMEHpjRSlwAAAAk"] www.ampsstudio.com [Thu Sep 15 02:41:20 2022] [error] [client 51.120.122.58:0] [client 51.120.122.58] ModSecurity: Access denied with code 403 (phase 1). Pattern match "\\\\.\\\\./\\\\.\\\\." at REQUEST_URI. [file "remote server"] [line "-1"] [id "430064"] [msg "Malware.Expert - request_uri: directory travel"] [hostname "www.ampsstudio.com"] [uri "/wp-content/plugins/cherry-plugin/admin/import-export/download-content.php"] [unique_id "YyKCwDbjRGfmtzK27FwnuAAAAAA"] www.ampsstudio.com [Thu Sep 15 02:41:21 2022] [error] [client 51.120.122.58:0] [client 51.120.122.58] ModSecurity: Access denied with code 403 (phase 1). Pattern match "\\\\.\\\\./\\\\.\\\\." at REQUEST_URI. [file "remote server"] [line "-1"] [id "430064"] [msg "Malware.Expert - request_uri: directory travel"] [hostname "www.ampsstudio.com"] [uri "/wp-content/plugins/wp-ecommerce-shop-styling/includes/download.php"] [unique_id "YyKCwQzt9fAbp6RbHrkxsQAAAAg"] www.ampsstudio.com [Thu Sep 15 02:41:34 2022] [error] [client 51.120.122.58:0] [client 51.120.122.58] ModSecurity: Access denied with code 403 (phase 2). Pattern match "/wp-config\\\\.php" at QUERY_STRING. [file "remote server"] [line "-1"] [id "410018"] [msg "Malware.Expert - query_string: unwanted wordpress config access"] [hostname "www.ampsstudio.com"] [uri "/wp-admin/admin-ajax.php"] [unique_id "YyKCzqTm-VQJfenoQFmukwAAAAQ"] webmail.ampsstudio.com [Thu Sep 15 03:33:47 2022] [error] [client 52.142.48.216:0] [client 52.142.48.216] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "webmail.ampsstudio.com"] [uri "/.env"] [unique_id "YyKPC1nziCybcL12U2oeHwAAAAo"] webmail.ampsstudio.com [Thu Sep 15 03:33:48 2022] [error] [client 52.142.48.216:0] [client 52.142.48.216] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "webmail.ampsstudio.com"] [uri "/.env.bak"] [unique_id "YyKPDDQf0PjKmSgs_GyTEwAAAA8"] webmail.ampsstudio.com [Thu Sep 15 03:33:52 2022] [error] [client 52.142.48.216:0] [client 52.142.48.216] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "webmail.ampsstudio.com"] [uri "/laravel/.env"] [unique_id "YyKPEF7eY5Iemv96hZFxvQAAAAY"] webmail.ampsstudio.com [Thu Sep 15 03:33:54 2022] [error] [client 52.142.48.216:0] [client 52.142.48.216] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "webmail.ampsstudio.com"] [uri "/local/.env"] [unique_id "YyKPEh_v6bssC5Y0iEALNwAAAAM"] webmail.ampsstudio.com [Thu Sep 15 03:33:55 2022] [error] [client 52.142.48.216:0] [client 52.142.48.216] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "webmail.ampsstudio.com"] [uri "/cgi-bin/.env"] [unique_id "YyKPE6Tm-VQJfenoQFmu4AAAAAQ"] webmail.ampsstudio.com [Thu Sep 15 03:33:57 2022] [error] [client 52.142.48.216:0] [client 52.142.48.216] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "webmail.ampsstudio.com"] [uri "/backend/.env"] [unique_id "YyKPFWp9jPlRlTkjiBv1sAAAAAw"] webmail.ampsstudio.com [Thu Sep 15 03:34:02 2022] [error] [client 52.142.48.216:0] [client 52.142.48.216] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "webmail.ampsstudio.com"] [uri "/protected/.env"] [unique_id "YyKPGlnziCybcL12U2oeIAAAAAo"] webmail.ampsstudio.com [Thu Sep 15 03:34:03 2022] [error] [client 52.142.48.216:0] [client 52.142.48.216] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "webmail.ampsstudio.com"] [uri "/database/.env"] [unique_id "YyKPGzQf0PjKmSgs_GyTFAAAAA8"] webmail.ampsstudio.com [Thu Sep 15 03:34:04 2022] [error] [client 52.142.48.216:0] [client 52.142.48.216] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "webmail.ampsstudio.com"] [uri "/public/.env"] [unique_id "YyKPHAzt9fAbp6RbHrkyAgAAAAg"] webmail.ampsstudio.com [Thu Sep 15 03:34:05 2022] [error] [client 52.142.48.216:0] [client 52.142.48.216] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "webmail.ampsstudio.com"] [uri "/app/config/.env"] [unique_id "YyKPHV7eY5Iemv96hZFxvgAAAAY"] webmail.ampsstudio.com [Thu Sep 15 03:34:06 2022] [error] [client 52.142.48.216:0] [client 52.142.48.216] ModSecurity: Access denied with code 403 (phase 2). String match ".aws/credentials" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430069"] [msg "Malware.Expert - request_uri: AWS Credentials"] [hostname "webmail.ampsstudio.com"] [uri "/.aws/credentials"] [unique_id "YyKPHuZiAv2X7TKCNdYNMwAAAAc"] ampsstudio.com [Thu Sep 15 04:00:00 2022] [error] [client 40.113.168.126:0] [client 40.113.168.126] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "ampsstudio.com"] [uri "/.env"] [unique_id "YyKVMNmoreNEH996BpwMUgAAAAQ"] www.ampsstudio.com [Thu Sep 15 04:23:06 2022] [error] [client 5.62.57.26:0] AH01071: Got error 'PHP message: PHP Warning: Cannot modify header information - headers already sent by (output started at /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-includes/functions.php:5275) in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/includes/sonaar-music/css/theme/custom-style.php on line 2' webdisk.ampsstudio.com [Thu Sep 15 04:42:27 2022] [error] [client 52.142.48.216:0] [client 52.142.48.216] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "webdisk.ampsstudio.com"] [uri "/.env"] [unique_id "YyKfIx2rqyqMA4XLgTXfCQAAAAI"] webdisk.ampsstudio.com [Thu Sep 15 04:42:36 2022] [error] [client 52.142.48.216:0] [client 52.142.48.216] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "webdisk.ampsstudio.com"] [uri "/.env.bak"] [unique_id "YyKfLMrIIe04So1MAMZPEwAAAAA"] webdisk.ampsstudio.com [Thu Sep 15 04:42:38 2022] [error] [client 52.142.48.216:0] [client 52.142.48.216] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "webdisk.ampsstudio.com"] [uri "/laravel/.env"] [unique_id "YyKfLkykxBNpMU3Mtuo7tgAAAAo"] webdisk.ampsstudio.com [Thu Sep 15 04:42:39 2022] [error] [client 52.142.48.216:0] [client 52.142.48.216] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "webdisk.ampsstudio.com"] [uri "/local/.env"] [unique_id "YyKfL6BMsuGcLPbU3ML8kQAAAAg"] webdisk.ampsstudio.com [Thu Sep 15 04:42:41 2022] [error] [client 52.142.48.216:0] [client 52.142.48.216] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "webdisk.ampsstudio.com"] [uri "/cgi-bin/.env"] [unique_id "YyKfMUAbY2YCkzQTmK1d8QAAAAY"] webdisk.ampsstudio.com [Thu Sep 15 04:42:41 2022] [error] [client 52.142.48.216:0] [client 52.142.48.216] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "webdisk.ampsstudio.com"] [uri "/backend/.env"] [unique_id "YyKfMd4ns1rGIsiTvoeGSwAAAAE"] webdisk.ampsstudio.com [Thu Sep 15 04:42:46 2022] [error] [client 52.142.48.216:0] [client 52.142.48.216] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "webdisk.ampsstudio.com"] [uri "/protected/.env"] [unique_id "YyKfNsrIIe04So1MAMZPFAAAAAA"] webdisk.ampsstudio.com [Thu Sep 15 04:42:47 2022] [error] [client 52.142.48.216:0] [client 52.142.48.216] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "webdisk.ampsstudio.com"] [uri "/database/.env"] [unique_id "YyKfN2F54RrAJ3oaXDEOHwAAAAc"] webdisk.ampsstudio.com [Thu Sep 15 04:42:47 2022] [error] [client 52.142.48.216:0] [client 52.142.48.216] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "webdisk.ampsstudio.com"] [uri "/public/.env"] [unique_id "YyKfN0ykxBNpMU3Mtuo7twAAAAo"] webdisk.ampsstudio.com [Thu Sep 15 04:42:48 2022] [error] [client 52.142.48.216:0] [client 52.142.48.216] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "webdisk.ampsstudio.com"] [uri "/app/config/.env"] [unique_id "YyKfOKBMsuGcLPbU3ML8kgAAAAg"] webdisk.ampsstudio.com [Thu Sep 15 04:42:49 2022] [error] [client 52.142.48.216:0] [client 52.142.48.216] ModSecurity: Access denied with code 403 (phase 2). String match ".aws/credentials" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430069"] [msg "Malware.Expert - request_uri: AWS Credentials"] [hostname "webdisk.ampsstudio.com"] [uri "/.aws/credentials"] [unique_id "YyKfOUAbY2YCkzQTmK1d8gAAAAY"] ampsstudio.com [Thu Sep 15 04:49:14 2022] [error] [client 152.89.196.13:0] [client 152.89.196.13] ModSecurity: Access denied with code 403 (phase 2). Pattern match "/wp-content/plugins/.*/up\\\\.php" at REQUEST_URI. [file "remote server"] [line "-1"] [id "570052"] [msg "Malware.Expert - Malware"] [hostname "ampsstudio.com"] [uri "/wp-content/plugins/wordpresss3cll-1/up.php"] [unique_id "YyKguh2rqyqMA4XLgTXfDgAAAAI"] ampsstudio.com [Thu Sep 15 05:27:01 2022] [error] [client 152.89.196.13:0] [client 152.89.196.13] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_HEADERS_NAMES. [file "remote server"] [line "-1"] [id "580001"] [msg "Malware.Expert - Wordpress - Referer missing"] [hostname "ampsstudio.com"] [uri "/wp-content/plugins/about.php"] [unique_id "YyKplUAbY2YCkzQTmK1eDwAAAAY"] ampsstudio.com [Thu Sep 15 05:31:24 2022] [error] [client 152.89.196.13:0] [client 152.89.196.13] ModSecurity: Access denied with code 403 (phase 2). Pattern match "/wp-content/uploads/.*\\\\.php" at REQUEST_FILENAME. [file "remote server"] [line "-1"] [id "430017"] [msg "Malware.Expert - request_uri: Wordpress - prevent PHP files from executing"] [hostname "ampsstudio.com"] [uri "/wp-content/uploads/wp-blockup.php"] [unique_id "YyKqnKBMsuGcLPbU3ML8rgAAAAg"] ampsstudio.com [Thu Sep 15 05:31:24 2022] [error] [client 152.89.196.13:0] [client 152.89.196.13] ModSecurity: Access denied with code 403 (phase 2). Match of "contains /wp-content/plugins/dopwgg/libraries/php/upload.php" against "REQUEST_URI" required. [file "remote server"] [line "-1"] [id "430073"] [msg "Malware.Expert - request_uri: Wordpress - prevent PHP files from executing"] [hostname "ampsstudio.com"] [uri "/wp-content/plugins/cherry-plugin/admin/import-export/upload.php"] [unique_id "YyKqnB2rqyqMA4XLgTXfIwAAAAI"] ampsstudio.com [Thu Sep 15 05:55:12 2022] [error] [client 152.89.196.13:0] [client 152.89.196.13] ModSecurity: Access denied with connection close (phase 2). String match "bot" at ARGS_NAMES:bot. [file "remote server"] [line "-1"] [id "570011"] [msg "Malware.Expert - Wordpress - Malware"] [hostname "ampsstudio.com"] [uri "/wp-includes/pomo/index.php"] [unique_id "YyKwMD4JPgc9jXn2c2HPLQAAAAk"] ampsstudio.com [Thu Sep 15 05:55:13 2022] [error] [client 152.89.196.13:0] [client 152.89.196.13] ModSecurity: Access denied with code 403 (phase 2). Pattern match "/wp-content/uploads/.*\\\\.php" at REQUEST_FILENAME. [file "remote server"] [line "-1"] [id "430017"] [msg "Malware.Expert - request_uri: Wordpress - prevent PHP files from executing"] [hostname "ampsstudio.com"] [uri "/wp-content/uploads/2020/04/s_noeval.php"] [unique_id "YyKwMd4ns1rGIsiTvoeGdQAAAAE"] ampsstudio.com [Thu Sep 15 06:02:14 2022] [error] [client 152.89.196.13:0] [client 152.89.196.13] ModSecurity: Access denied with code 403 (phase 2). Pattern match "/wp-content/uploads/.*\\\\.php" at REQUEST_FILENAME. [file "remote server"] [line "-1"] [id "430017"] [msg "Malware.Expert - request_uri: Wordpress - prevent PHP files from executing"] [hostname "ampsstudio.com"] [uri "/wp-content/uploads/2020/11/ups.php"] [unique_id "YyKx1kAbY2YCkzQTmK1eGgAAAAY"] ampsstudio.com [Thu Sep 15 06:22:28 2022] [error] [client 152.89.196.13:0] [client 152.89.196.13] ModSecurity: Access denied with code 403 (phase 2). Pattern match "/wp-content/uploads/.*\\\\.php" at REQUEST_FILENAME. [file "remote server"] [line "-1"] [id "430017"] [msg "Malware.Expert - request_uri: Wordpress - prevent PHP files from executing"] [hostname "ampsstudio.com"] [uri "/wp-content/uploads/accesson.php"] [unique_id "YyK2lNmoreNEH996BpwMmAAAAAQ"] www.ampsstudio.com [Thu Sep 15 06:33:00 2022] [error] [client 91.230.196.182:0] AH01071: Got error 'PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179' www.ampsstudio.com [Thu Sep 15 06:33:00 2022] [error] [client 91.230.196.182:0] AH01071: Got error 'PHP message: PHP Warning: Cannot modify header information - headers already sent by (output started at /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-includes/functions.php:5275) in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/includes/sonaar-music/css/theme/custom-style.php on line 2' ampsstudio.com [Thu Sep 15 06:42:53 2022] [error] [client 51.142.143.115:0] AH01276: Cannot serve directory /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-admin/css/: No matching DirectoryIndex (index.php,index.html,index.htm) found, and server-generated directory index forbidden by Options directive ampsstudio.com [Thu Sep 15 06:45:52 2022] [error] [client 152.89.196.13:0] [client 152.89.196.13] ModSecurity: Access denied with code 403 (phase 2). Pattern match "/wp-content/plugins/.*/up\\\\.php" at REQUEST_URI. [file "remote server"] [line "-1"] [id "570052"] [msg "Malware.Expert - Malware"] [hostname "ampsstudio.com"] [uri "/wp-content/plugins/askim/cache/up.php"] [unique_id "YyK8EBoXQy8WkXJ28DDnyAAAAAU"] ampsstudio.com [Thu Sep 15 06:56:32 2022] [error] [client 152.89.196.13:0] [client 152.89.196.13] ModSecurity: Access denied with code 403 (phase 2). Pattern match "/wp-content/uploads/.*\\\\.php" at REQUEST_FILENAME. [file "remote server"] [line "-1"] [id "430017"] [msg "Malware.Expert - request_uri: Wordpress - prevent PHP files from executing"] [hostname "ampsstudio.com"] [uri "/wp-content/uploads/2022/02/ups.php"] [unique_id "YyK-kNmoreNEH996BpwMoQAAAAQ"] www.ampsstudio.com [Thu Sep 15 07:05:08 2022] [error] [client 51.11.6.150:0] AH01071: Got error 'PHP message: PHP Warning: Undefined array key "HTTP_USER_AGENT" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/bookly-responsive-appointment-booking-tool/frontend/modules/booking/ShortCode.php on line 66' www.ampsstudio.com [Thu Sep 15 07:29:31 2022] [crit] [client 64.233.173.120:0] AH00529: /home/virtual/vps-aa3942/a/aede5353c4/public_html/.well-known/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/virtual/vps-aa3942/a/aede5353c4/public_html/.well-known/' is executable ampsstudio.com [Thu Sep 15 07:36:59 2022] [error] [client 152.89.196.13:0] [client 152.89.196.13] ModSecurity: Access denied with code 403 (phase 2). Pattern match "/wp-content/plugins/.*/up\\\\.php" at REQUEST_URI. [file "remote server"] [line "-1"] [id "570052"] [msg "Malware.Expert - Malware"] [hostname "ampsstudio.com"] [uri "/wp-content/plugins/wordpresss3cll/up.php"] [unique_id "YyLIC0AbY2YCkzQTmK1eMQAAAAY"] ampsstudio.com [Thu Sep 15 07:54:19 2022] [error] [client 152.89.196.13:0] [client 152.89.196.13] ModSecurity: Access denied with code 403 (phase 2). Pattern match "/wp-content/uploads/.*\\\\.php" at REQUEST_FILENAME. [file "remote server"] [line "-1"] [id "430017"] [msg "Malware.Expert - request_uri: Wordpress - prevent PHP files from executing"] [hostname "ampsstudio.com"] [uri "/wp-content/uploads/2020/12/ups.php"] [unique_id "YyLMG1wkKT6O38R1kC6wBwAAAAM"] ampsstudio.com [Thu Sep 15 07:57:16 2022] [error] [client 152.89.196.13:0] [client 152.89.196.13] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_HEADERS_NAMES. [file "remote server"] [line "-1"] [id "580001"] [msg "Malware.Expert - Wordpress - Referer missing"] [hostname "ampsstudio.com"] [uri "/wp-content/wp-echo.php"] [unique_id "YyLMzB2rqyqMA4XLgTXfSgAAAAI"] ampsstudio.com [Thu Sep 15 10:04:49 2022] [error] [client 152.89.196.13:0] [client 152.89.196.13] ModSecurity: Access denied with code 403 (phase 2). String match "/ups.php" at REQUEST_URI. [file "remote server"] [line "-1"] [id "570041"] [msg "Malware.Expert - Malware"] [hostname "ampsstudio.com"] [uri "/cache/ups.php"] [unique_id "YyLqsaBMsuGcLPbU3ML9BAAAAAg"] ampsstudio.com [Thu Sep 15 10:31:30 2022] [error] [client 152.89.196.13:0] [client 152.89.196.13] ModSecurity: Access denied with code 403 (phase 2). Pattern match "=http://" at REQUEST_URI. [file "remote server"] [line "-1"] [id "405001"] [msg "Malware.Expert - request_uri: remote php file include"] [hostname "ampsstudio.com"] [uri "/kontol/index.php"] [unique_id "YyLw8j4JPgc9jXn2c2HPjgAAAAk"] www.ampsstudio.com [Thu Sep 15 11:04:14 2022] [error] [client 81.109.217.157:0] AH01071: Got error 'PHP message: PHP Warning: Cannot modify header information - headers already sent by (output started at /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-includes/functions.php:5275) in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/includes/sonaar-music/css/theme/custom-style.php on line 2' ampsstudio.com [Thu Sep 15 11:09:21 2022] [error] [client 152.89.196.13:0] [client 152.89.196.13] ModSecurity: Access denied with code 403 (phase 2). Pattern match "/wp-content/uploads/.*\\\\.php" at REQUEST_FILENAME. [file "remote server"] [line "-1"] [id "430017"] [msg "Malware.Expert - request_uri: Wordpress - prevent PHP files from executing"] [hostname "ampsstudio.com"] [uri "/wp-content/uploads/nin.php"] [unique_id "YyL50VwkKT6O38R1kC6wqQAAAAM"] ampsstudio.com [Thu Sep 15 11:20:32 2022] [error] [client 152.89.196.13:0] [client 152.89.196.13] ModSecurity: Access denied with code 403 (phase 2). String match "/accesson.php" at REQUEST_URI. [file "remote server"] [line "-1"] [id "570042"] [msg "Malware.Expert - Malware"] [hostname "ampsstudio.com"] [uri "/wp-admin/accesson.php"] [unique_id "YyL8cL9VoisCgBSzw71bRwAAABA"] www.ampsstudio.com [Thu Sep 15 12:56:08 2022] [crit] [client 66.249.93.44:0] AH00529: /home/virtual/vps-aa3942/a/aede5353c4/public_html/.well-known/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/virtual/vps-aa3942/a/aede5353c4/public_html/.well-known/' is executable mail.ampsstudio.com [Thu Sep 15 14:12:57 2022] [error] [client 79.110.62.65:0] [client 79.110.62.65] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "mail.ampsstudio.com"] [uri "/.env"] [unique_id "YyMk2XFvpHDFd6QwY6oF4wAAAAc"] www.ampsstudio.com [Thu Sep 15 14:25:26 2022] [error] [client 94.140.134.34:0] AH01071: Got error 'PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179' www.ampsstudio.com [Thu Sep 15 14:25:26 2022] [error] [client 94.140.134.34:0] AH01071: Got error 'PHP message: PHP Warning: Cannot modify header information - headers already sent by (output started at /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-includes/functions.php:5275) in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/includes/sonaar-music/css/theme/custom-style.php on line 2' ampsstudio.com [Thu Sep 15 15:57:15 2022] [error] [client 147.78.47.249:0] [client 147.78.47.249] ModSecurity: Access denied with code 403 (phase 2). String match "connector.minimal.php" at REQUEST_URI. [file "remote server"] [line "-1"] [id "500083"] [msg "Malware.Expert - request_uri: 0-Day - Wordpress filemanager plugin"] [hostname "ampsstudio.com"] [uri "/wp-content/plugins/wp-file-manager/lib/php/connector.minimal.php"] [unique_id "YyM9S0k5cdAHa3azN4Fp6QAAAAY"] www.ampsstudio.com [Thu Sep 15 16:03:48 2022] [error] [client 20.169.113.116:0] [client 20.169.113.116] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "www.ampsstudio.com"] [uri "/.env"] [unique_id "YyM-1MJ8T_9ZfwyaaA6IfgAAAAU"] www.ampsstudio.com [Thu Sep 15 16:03:52 2022] [error] [client 20.169.113.116:0] [client 20.169.113.116] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "www.ampsstudio.com"] [uri "/.env.example"] [unique_id "YyM-2Ek5cdAHa3azN4Fp7QAAAAY"] www.ampsstudio.com [Thu Sep 15 16:03:54 2022] [error] [client 20.169.113.116:0] [client 20.169.113.116] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "www.ampsstudio.com"] [uri "/laravel/.env"] [unique_id "YyM-2r9VoisCgBSzw71cdwAAABA"] www.ampsstudio.com [Thu Sep 15 17:13:56 2022] [error] [client 109.70.100.89:0] AH01071: Got error 'PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179' www.ampsstudio.com [Thu Sep 15 17:13:56 2022] [error] [client 109.70.100.89:0] AH01071: Got error 'PHP message: PHP Warning: Cannot modify header information - headers already sent by (output started at /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-includes/functions.php:5275) in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/includes/sonaar-music/css/theme/custom-style.php on line 2' www.ampsstudio.com [Thu Sep 15 17:54:49 2022] [error] [client 148.252.128.195:0] AH01071: Got error 'PHP message: PHP Warning: Cannot modify header information - headers already sent by (output started at /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-includes/functions.php:5275) in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/includes/sonaar-music/css/theme/custom-style.php on line 2' www.ampsstudio.com [Thu Sep 15 19:35:55 2022] [error] [client 46.35.252.130:0] AH01071: Got error 'PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179' www.ampsstudio.com [Thu Sep 15 19:35:55 2022] [error] [client 46.35.252.130:0] AH01071: Got error 'PHP message: PHP Warning: Cannot modify header information - headers already sent by (output started at /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-includes/functions.php:5275) in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/includes/sonaar-music/css/theme/custom-style.php on line 2' www.ampsstudio.com [Thu Sep 15 20:11:51 2022] [error] [client 81.103.60.184:0] AH01071: Got error 'PHP message: PHP Warning: Cannot modify header information - headers already sent by (output started at /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-includes/functions.php:5275) in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/includes/sonaar-music/css/theme/custom-style.php on line 2' www.ampsstudio.com [Thu Sep 15 20:42:38 2022] [error] [client 46.35.252.130:0] AH01071: Got error 'PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179' www.ampsstudio.com [Thu Sep 15 20:42:38 2022] [error] [client 46.35.252.130:0] AH01071: Got error 'PHP message: PHP Warning: Cannot modify header information - headers already sent by (output started at /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-includes/functions.php:5275) in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/includes/sonaar-music/css/theme/custom-style.php on line 2' ampsstudio.com [Thu Sep 15 21:14:38 2022] [error] [client 20.0.84.50:0] [client 20.0.84.50] ModSecurity: Access denied with code 403 (phase 2). Match of "contains index.php" against "REQUEST_URI" required. [file "remote server"] [line "-1"] [id "570076"] [msg "Malware.Expert - Malware"] [hostname "ampsstudio.com"] [uri "/wp-plain.php"] [unique_id "YyOHrjLObnvzG9ulPmkqVgAAAA8"] www.ampsstudio.com [Thu Sep 15 21:14:41 2022] [error] [client 20.0.84.50:0] [client 20.0.84.50] ModSecurity: Access denied with code 403 (phase 2). String match "php.suspected" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430059"] [msg "Malware.Expert - request_uri: .PHP suspected files"] [hostname "www.ampsstudio.com"] [uri "/wp-content/plugins/apikey/apikey.php.suspected"] [unique_id "YyOHsdwXXuNZpJplBW_s8gAAAAQ"] www.ampsstudio.com [Thu Sep 15 21:14:41 2022] [error] [client 20.0.84.50:0] [client 20.0.84.50] ModSecurity: Access denied with code 403 (phase 2). String match "php.suspected" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430059"] [msg "Malware.Expert - request_uri: .PHP suspected files"] [hostname "www.ampsstudio.com"] [uri "/plugins/content/apismtp/apismtp.php.suspected"] [unique_id "YyOHsbW500wk-t5M9HP6CgAAAAk"] www.ampsstudio.com [Thu Sep 15 21:40:40 2022] [error] [client 103.14.26.88:0] AH01071: Got error 'PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179' www.ampsstudio.com [Thu Sep 15 21:40:40 2022] [error] [client 103.14.26.88:0] AH01071: Got error 'PHP message: PHP Warning: Cannot modify header information - headers already sent by (output started at /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-includes/functions.php:5275) in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/includes/sonaar-music/css/theme/custom-style.php on line 2' www.ampsstudio.com [Thu Sep 15 22:11:31 2022] [error] [client 185.100.87.174:0] AH01071: Got error 'PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179' www.ampsstudio.com [Thu Sep 15 22:11:31 2022] [error] [client 185.100.87.174:0] AH01071: Got error 'PHP message: PHP Warning: Cannot modify header information - headers already sent by (output started at /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-includes/functions.php:5275) in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/includes/sonaar-music/css/theme/custom-style.php on line 2' www.ampsstudio.com [Thu Sep 15 23:34:49 2022] [error] [client 51.11.6.150:0] AH01071: Got error 'PHP message: PHP Warning: Undefined array key "HTTP_USER_AGENT" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/bookly-responsive-appointment-booking-tool/frontend/modules/booking/ShortCode.php on line 66' ampsstudio.com [Fri Sep 16 01:15:45 2022] [error] [client 20.171.16.111:0] [client 20.171.16.111] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "ampsstudio.com"] [uri "/.env"] [unique_id "YyPAMbrXmtt3ds-6EMf4HQAAAAM"] www.ampsstudio.com [Fri Sep 16 03:02:46 2022] [error] [client 156.146.63.147:0] AH01071: Got error 'PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179' www.ampsstudio.com [Fri Sep 16 03:02:46 2022] [error] [client 156.146.63.147:0] AH01071: Got error 'PHP message: PHP Warning: Cannot modify header information - headers already sent by (output started at /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-includes/functions.php:5275) in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/includes/sonaar-music/css/theme/custom-style.php on line 2' ampsstudio.com [Fri Sep 16 07:19:32 2022] [error] [client 185.83.146.154:0] [client 185.83.146.154] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "ampsstudio.com"] [uri "/.env"] [unique_id "YyQVdIM-bO56G4tD7MsMHQAAAAc"] www.ampsstudio.com [Fri Sep 16 12:12:26 2022] [error] [client 66.249.76.153:0] AH01071: Got error 'PHP message: PHP Warning: Attempt to read property "ID" on null in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/archive-event.php on line 15PHP message: PHP Warning: Undefined array key 0 in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/includes/classes/iron_sonaar.class.php on line 212PHP message: PHP Warning: Trying to access array offset on value of type null in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/includes/classes/iron_sonaar.class.php on line 212PHP message: PHP Warning: Undefined array key 0 in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/includes/classes/iron_sonaar.class.php on line 214PHP message: PHP Warning: Trying to access array offset on value of type null in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/includes/classes/iron_sonaar.class.php on line 214' www.ampsstudio.com [Fri Sep 16 14:10:07 2022] [error] [client 51.103.108.155:0] AH01071: Got error 'PHP message: PHP Warning: Undefined array key "HTTP_USER_AGENT" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/bookly-responsive-appointment-booking-tool/frontend/modules/booking/ShortCode.php on line 66' www.ampsstudio.com [Fri Sep 16 14:10:09 2022] [error] [client 51.103.108.155:0] AH01071: Got error 'PHP message: PHP Warning: Undefined array key "HTTP_USER_AGENT" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/bookly-responsive-appointment-booking-tool/frontend/modules/booking/ShortCode.php on line 66' www.ampsstudio.com [Fri Sep 16 14:10:10 2022] [error] [client 51.103.108.155:0] AH01071: Got error 'PHP message: PHP Warning: Undefined array key "HTTP_USER_AGENT" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/bookly-responsive-appointment-booking-tool/frontend/modules/booking/ShortCode.php on line 66' www.ampsstudio.com [Fri Sep 16 14:10:11 2022] [error] [client 51.103.108.155:0] AH01071: Got error 'PHP message: PHP Warning: Undefined array key "HTTP_USER_AGENT" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/bookly-responsive-appointment-booking-tool/frontend/modules/booking/ShortCode.php on line 66' www.ampsstudio.com [Fri Sep 16 14:10:13 2022] [error] [client 51.103.108.155:0] AH01071: Got error 'PHP message: PHP Warning: Undefined array key "HTTP_USER_AGENT" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/bookly-responsive-appointment-booking-tool/frontend/modules/booking/ShortCode.php on line 66' ampsstudio.com [Fri Sep 16 14:10:13 2022] [error] [client 51.103.108.155:0] AH01276: Cannot serve directory /home/virtual/vps-aa3942/a/aede5353c4/public_html/test/: No matching DirectoryIndex (index.php,index.html,index.htm) found, and server-generated directory index forbidden by Options directive www.ampsstudio.com [Fri Sep 16 14:10:15 2022] [error] [client 51.103.108.155:0] AH01071: Got error 'PHP message: PHP Warning: Undefined array key "HTTP_USER_AGENT" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/bookly-responsive-appointment-booking-tool/frontend/modules/booking/ShortCode.php on line 66' www.ampsstudio.com [Fri Sep 16 14:10:16 2022] [error] [client 51.103.108.155:0] AH01071: Got error 'PHP message: PHP Warning: Undefined array key "HTTP_USER_AGENT" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/bookly-responsive-appointment-booking-tool/frontend/modules/booking/ShortCode.php on line 66' www.ampsstudio.com [Fri Sep 16 14:10:17 2022] [error] [client 51.103.108.155:0] AH01071: Got error 'PHP message: PHP Warning: Undefined array key "HTTP_USER_AGENT" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/bookly-responsive-appointment-booking-tool/frontend/modules/booking/ShortCode.php on line 66' www.ampsstudio.com [Fri Sep 16 14:20:31 2022] [error] [client 20.206.162.255:0] [client 20.206.162.255] ModSecurity: Access denied with code 403 (phase 1). Pattern match "\\\\.\\\\./\\\\.\\\\." at REQUEST_URI. [file "remote server"] [line "-1"] [id "430064"] [msg "Malware.Expert - request_uri: directory travel"] [hostname "www.ampsstudio.com"] [uri "/wp-content/plugins/cherry-plugin/admin/import-export/download-content.php"] [unique_id "YyR4Hxnqr6_M3IZULsQb6AAAABY"] www.ampsstudio.com [Fri Sep 16 14:20:31 2022] [error] [client 20.206.162.255:0] [client 20.206.162.255] ModSecurity: Access denied with code 403 (phase 2). Pattern match "/wp-config\\\\.php" at QUERY_STRING. [file "remote server"] [line "-1"] [id "410018"] [msg "Malware.Expert - query_string: unwanted wordpress config access"] [hostname "www.ampsstudio.com"] [uri "/wp-admin/admin-ajax.php"] [unique_id "YyR4H9ZvrRKd5g4oSb_-kAAAAAE"] www.ampsstudio.com [Fri Sep 16 14:20:31 2022] [error] [client 20.206.162.255:0] [client 20.206.162.255] ModSecurity: Access denied with code 403 (phase 1). Pattern match "\\\\.\\\\./\\\\.\\\\." at REQUEST_URI. [file "remote server"] [line "-1"] [id "430064"] [msg "Malware.Expert - request_uri: directory travel"] [hostname "www.ampsstudio.com"] [uri "/wp-content/plugins/wp-ecommerce-shop-styling/includes/download.php"] [unique_id "YyR4H2x78MZsqwlcUDYbDAAAAAY"] www.ampsstudio.com [Fri Sep 16 14:20:32 2022] [error] [client 20.206.162.255:0] [client 20.206.162.255] ModSecurity: Access denied with code 403 (phase 2). Pattern match "/wp-config\\\\.php" at QUERY_STRING. [file "remote server"] [line "-1"] [id "410018"] [msg "Malware.Expert - query_string: unwanted wordpress config access"] [hostname "www.ampsstudio.com"] [uri "/wp-content/plugins/mapsvg-lite-interactive-vector-maps/gm_download.php"] [unique_id "YyR4IIM-bO56G4tD7MsNbAAAAAc"] www.ampsstudio.com [Fri Sep 16 14:20:33 2022] [error] [client 20.206.162.255:0] [client 20.206.162.255] ModSecurity: Access denied with code 403 (phase 1). Pattern match "\\\\.\\\\./\\\\.\\\\." at REQUEST_URI. [file "remote server"] [line "-1"] [id "430064"] [msg "Malware.Expert - request_uri: directory travel"] [hostname "www.ampsstudio.com"] [uri "/wp-content/plugins/web-portal-lite-client-portal-secure-file-sharing-private-messaging/includes/libs/pdf/dompdf.php"] [unique_id "YyR4Ifs-aGXGRd7Yjw2oNgAAAAk"] www.ampsstudio.com [Fri Sep 16 14:20:35 2022] [error] [client 20.206.162.255:0] [client 20.206.162.255] ModSecurity: Access denied with code 403 (phase 1). Pattern match "\\\\.\\\\./\\\\.\\\\." at REQUEST_URI. [file "remote server"] [line "-1"] [id "430064"] [msg "Malware.Expert - request_uri: directory travel"] [hostname "www.ampsstudio.com"] [uri "/wp-content/plugins/post-pdf-export/dompdf/dompdf.php"] [unique_id "YyR4I5FmhcE_qCQTp97qywAAAAQ"] www.ampsstudio.com [Fri Sep 16 15:56:14 2022] [error] [client 5.227.24.116:0] AH01071: Got error 'PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179' www.ampsstudio.com [Fri Sep 16 15:56:14 2022] [error] [client 5.227.24.116:0] AH01071: Got error 'PHP message: PHP Warning: Cannot modify header information - headers already sent by (output started at /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-includes/functions.php:5275) in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/includes/sonaar-music/css/theme/custom-style.php on line 2' ampsstudio.com [Fri Sep 16 17:18:13 2022] [error] [client 20.119.96.169:0] [client 20.119.96.169] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "ampsstudio.com"] [uri "/.env"] [unique_id "YyShxRrLoSYdNe-Jth4c9wAAAAg"] www.ampsstudio.com [Fri Sep 16 21:49:07 2022] [crit] [client 66.249.93.40:0] AH00529: /home/virtual/vps-aa3942/a/aede5353c4/public_html/.well-known/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/virtual/vps-aa3942/a/aede5353c4/public_html/.well-known/' is executable ampsstudio.com [Fri Sep 16 22:59:24 2022] [error] [client 185.81.128.102:0] [client 185.81.128.102] ModSecurity: Access denied with code 403 (phase 2). Pattern match "/etc/passwd" at QUERY_STRING. [file "remote server"] [line "-1"] [id "410011"] [msg "Malware.Expert - query_string: unwanted shell access"] [hostname "ampsstudio.com"] [uri "/wp-admin/admin-post.php"] [unique_id "YyTxvIKeNU0pAVr0k3C5yQAAABU"] www.ampsstudio.com [Sat Sep 17 00:03:57 2022] [error] [client 213.202.223.95:0] AH01071: Got error 'PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179' www.ampsstudio.com [Sat Sep 17 00:03:57 2022] [error] [client 213.202.223.95:0] AH01071: Got error 'PHP message: PHP Warning: Cannot modify header information - headers already sent by (output started at /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-includes/functions.php:5275) in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/includes/sonaar-music/css/theme/custom-style.php on line 2' www.ampsstudio.com [Sat Sep 17 01:24:21 2022] [error] [client 20.192.13.247:0] [client 20.192.13.247] ModSecurity: Access denied with code 403 (phase 2). Pattern match "/wp-config\\\\.php" at QUERY_STRING. [file "remote server"] [line "-1"] [id "410018"] [msg "Malware.Expert - query_string: unwanted wordpress config access"] [hostname "www.ampsstudio.com"] [uri "/wp-content/plugins/mapsvg-lite-interactive-vector-maps/gm_download.php"] [unique_id "YyUTtdZvrRKd5g4oSb__xQAAAAE"] www.ampsstudio.com [Sat Sep 17 01:24:21 2022] [error] [client 20.192.13.247:0] [client 20.192.13.247] ModSecurity: Access denied with code 403 (phase 2). Pattern match "/wp-config\\\\.php" at QUERY_STRING. [file "remote server"] [line "-1"] [id "410018"] [msg "Malware.Expert - query_string: unwanted wordpress config access"] [hostname "www.ampsstudio.com"] [uri "/wp-admin/admin-ajax.php"] [unique_id "YyUTtYM-bO56G4tD7MsOnQAAAAc"] www.ampsstudio.com [Sat Sep 17 01:24:21 2022] [error] [client 20.192.13.247:0] [client 20.192.13.247] ModSecurity: Access denied with code 403 (phase 2). Pattern match "/wp-config\\\\.php" at QUERY_STRING. [file "remote server"] [line "-1"] [id "410018"] [msg "Malware.Expert - query_string: unwanted wordpress config access"] [hostname "www.ampsstudio.com"] [uri "/wp-admin/admin-ajax.php"] [unique_id "YyUTtYKeNU0pAVr0k3C6AgAAABU"] www.ampsstudio.com [Sat Sep 17 01:24:23 2022] [error] [client 20.192.13.247:0] [client 20.192.13.247] ModSecurity: Access denied with code 403 (phase 1). Pattern match "\\\\.\\\\./\\\\.\\\\." at REQUEST_URI. [file "remote server"] [line "-1"] [id "430064"] [msg "Malware.Expert - request_uri: directory travel"] [hostname "www.ampsstudio.com"] [uri "/wp-content/plugins/cherry-plugin/admin/import-export/download-content.php"] [unique_id "YyUTt1jzbT-_6_8Ga5rKvgAAAAU"] www.ampsstudio.com [Sat Sep 17 01:24:24 2022] [error] [client 20.192.13.247:0] [client 20.192.13.247] ModSecurity: Access denied with code 403 (phase 1). Pattern match "\\\\.\\\\./\\\\.\\\\." at REQUEST_URI. [file "remote server"] [line "-1"] [id "430064"] [msg "Malware.Expert - request_uri: directory travel"] [hostname "www.ampsstudio.com"] [uri "/wp-admin/admin-ajax.php"] [unique_id "YyUTuJFmhcE_qCQTp97r-AAAAAQ"] www.ampsstudio.com [Sat Sep 17 01:24:24 2022] [error] [client 20.192.13.247:0] [client 20.192.13.247] ModSecurity: Access denied with code 403 (phase 1). Pattern match "\\\\.\\\\./\\\\.\\\\." at REQUEST_URI. [file "remote server"] [line "-1"] [id "430064"] [msg "Malware.Expert - request_uri: directory travel"] [hostname "www.ampsstudio.com"] [uri "/wp-content/plugins/wp-ecommerce-shop-styling/includes/download.php"] [unique_id "YyUTuPs-aGXGRd7Yjw2pagAAAAk"] www.ampsstudio.com [Sat Sep 17 01:24:32 2022] [error] [client 20.192.13.247:0] [client 20.192.13.247] ModSecurity: Access denied with code 403 (phase 1). Pattern match "\\\\.\\\\./\\\\.\\\\." at REQUEST_URI. [file "remote server"] [line "-1"] [id "430064"] [msg "Malware.Expert - request_uri: directory travel"] [hostname "www.ampsstudio.com"] [uri "/wp-content/plugins/post-pdf-export/dompdf/dompdf.php"] [unique_id "YyUTwFjzbT-_6_8Ga5rKvwAAAAU"] www.ampsstudio.com [Sat Sep 17 01:24:32 2022] [error] [client 20.192.13.247:0] [client 20.192.13.247] ModSecurity: Access denied with code 403 (phase 1). Pattern match "\\\\.\\\\./\\\\.\\\\." at REQUEST_URI. [file "remote server"] [line "-1"] [id "430064"] [msg "Malware.Expert - request_uri: directory travel"] [hostname "www.ampsstudio.com"] [uri "/wp-content/plugins/web-portal-lite-client-portal-secure-file-sharing-private-messaging/includes/libs/pdf/dompdf.php"] [unique_id "YyUTwJFmhcE_qCQTp97r-QAAAAQ"] www.ampsstudio.com [Sat Sep 17 01:40:36 2022] [error] [client 141.98.9.47:0] AH01071: Got error 'PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179' www.ampsstudio.com [Sat Sep 17 01:40:36 2022] [error] [client 141.98.9.47:0] AH01071: Got error 'PHP message: PHP Warning: Cannot modify header information - headers already sent by (output started at /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-includes/functions.php:5275) in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/includes/sonaar-music/css/theme/custom-style.php on line 2' ampsstudio.com [Sat Sep 17 01:50:44 2022] [error] [client 51.103.108.155:0] [client 51.103.108.155] ModSecurity: Access denied with code 403 (phase 2). Match of "contains index.php" against "REQUEST_URI" required. [file "remote server"] [line "-1"] [id "570076"] [msg "Malware.Expert - Malware"] [hostname "ampsstudio.com"] [uri "/wp-plain.php"] [unique_id "YyUZ5FjzbT-_6_8Ga5rKzgAAAAU"] www.ampsstudio.com [Sat Sep 17 01:50:48 2022] [error] [client 51.103.108.155:0] [client 51.103.108.155] ModSecurity: Access denied with code 403 (phase 2). String match "php.suspected" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430059"] [msg "Malware.Expert - request_uri: .PHP suspected files"] [hostname "www.ampsstudio.com"] [uri "/wp-content/plugins/apikey/apikey.php.suspected"] [unique_id "YyUZ6IKeNU0pAVr0k3C6EgAAABU"] www.ampsstudio.com [Sat Sep 17 01:50:48 2022] [error] [client 51.103.108.155:0] [client 51.103.108.155] ModSecurity: Access denied with code 403 (phase 2). String match "php.suspected" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430059"] [msg "Malware.Expert - request_uri: .PHP suspected files"] [hostname "www.ampsstudio.com"] [uri "/plugins/content/apismtp/apismtp.php.suspected"] [unique_id "YyUZ6FjzbT-_6_8Ga5rKzwAAAAU"] www.ampsstudio.com [Sat Sep 17 02:56:07 2022] [error] [client 176.192.233.69:0] AH01071: Got error 'PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179' www.ampsstudio.com [Sat Sep 17 02:56:07 2022] [error] [client 176.192.233.69:0] AH01071: Got error 'PHP message: PHP Warning: Cannot modify header information - headers already sent by (output started at /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-includes/functions.php:5275) in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/includes/sonaar-music/css/theme/custom-style.php on line 2' ampsstudio.com [Sat Sep 17 03:07:44 2022] [error] [client 159.89.33.85:0] [client 159.89.33.85] ModSecurity: Access denied with code 403 (phase 2). Match of "contains index.php" against "REQUEST_URI" required. [file "remote server"] [line "-1"] [id "570076"] [msg "Malware.Expert - Malware"] [hostname "ampsstudio.com"] [uri "/wp-plain.php"] [unique_id "YyUr8JFmhcE_qCQTp97sLgAAAAQ"] www.ampsstudio.com [Sat Sep 17 03:07:49 2022] [error] [client 159.89.33.85:0] [client 159.89.33.85] ModSecurity: Access denied with code 403 (phase 2). String match "php.suspected" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430059"] [msg "Malware.Expert - request_uri: .PHP suspected files"] [hostname "www.ampsstudio.com"] [uri "/wp-content/plugins/apikey/apikey.php.suspected"] [unique_id "YyUr9fZvGG3LQReCas6-4wAAAAw"] www.ampsstudio.com [Sat Sep 17 03:07:49 2022] [error] [client 159.89.33.85:0] [client 159.89.33.85] ModSecurity: Access denied with code 403 (phase 2). String match "php.suspected" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430059"] [msg "Malware.Expert - request_uri: .PHP suspected files"] [hostname "www.ampsstudio.com"] [uri "/plugins/content/apismtp/apismtp.php.suspected"] [unique_id "YyUr9YM-bO56G4tD7MsO1QAAAAc"] www.ampsstudio.com [Sat Sep 17 06:10:54 2022] [error] [client 35.203.78.161:0] AH01071: Got error 'PHP message: PHP Warning: Undefined array key "HTTP_USER_AGENT" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/bookly-responsive-appointment-booking-tool/frontend/modules/booking/ShortCode.php on line 66' www.ampsstudio.com [Sat Sep 17 08:50:56 2022] [error] [client 46.148.206.226:0] AH01071: Got error 'PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179' www.ampsstudio.com [Sat Sep 17 08:50:56 2022] [error] [client 46.148.206.226:0] AH01071: Got error 'PHP message: PHP Warning: Cannot modify header information - headers already sent by (output started at /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-includes/functions.php:5275) in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/includes/sonaar-music/css/theme/custom-style.php on line 2' www.ampsstudio.com [Sat Sep 17 08:56:11 2022] [error] [client 51.11.6.150:0] AH01071: Got error 'PHP message: PHP Warning: Undefined array key "HTTP_USER_AGENT" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/bookly-responsive-appointment-booking-tool/frontend/modules/booking/ShortCode.php on line 66' www.ampsstudio.com [Sat Sep 17 08:56:39 2022] [error] [client 51.11.6.150:0] AH01071: Got error 'PHP message: PHP Warning: Undefined array key "HTTP_USER_AGENT" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/bookly-responsive-appointment-booking-tool/frontend/modules/booking/ShortCode.php on line 66' www.ampsstudio.com [Sat Sep 17 09:54:17 2022] [error] [client 156.146.63.151:0] AH01071: Got error 'PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179' www.ampsstudio.com [Sat Sep 17 09:54:17 2022] [error] [client 156.146.63.151:0] AH01071: Got error 'PHP message: PHP Warning: Cannot modify header information - headers already sent by (output started at /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-includes/functions.php:5275) in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/includes/sonaar-music/css/theme/custom-style.php on line 2' www.ampsstudio.com [Sat Sep 17 10:25:25 2022] [error] [client 176.31.115.13:0] AH01071: Got error 'PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179' www.ampsstudio.com [Sat Sep 17 10:25:25 2022] [error] [client 176.31.115.13:0] AH01071: Got error 'PHP message: PHP Warning: Cannot modify header information - headers already sent by (output started at /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-includes/functions.php:5275) in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/includes/sonaar-music/css/theme/custom-style.php on line 2' www.ampsstudio.com [Sat Sep 17 13:36:41 2022] [crit] [client 66.249.93.40:0] AH00529: /home/virtual/vps-aa3942/a/aede5353c4/public_html/.well-known/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/virtual/vps-aa3942/a/aede5353c4/public_html/.well-known/' is executable www.ampsstudio.com [Sat Sep 17 16:14:07 2022] [error] [client 156.146.63.152:0] AH01071: Got error 'PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179' www.ampsstudio.com [Sat Sep 17 16:14:07 2022] [error] [client 156.146.63.152:0] AH01071: Got error 'PHP message: PHP Warning: Cannot modify header information - headers already sent by (output started at /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-includes/functions.php:5275) in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/includes/sonaar-music/css/theme/custom-style.php on line 2' ampsstudio.com [Sat Sep 17 16:40:42 2022] [error] [client 3.236.226.217:0] [client 3.236.226.217] ModSecurity: Access denied with code 403 (phase 2). String match "/.git/config" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430058"] [msg "Malware.Expert - request_uri: .git config"] [hostname "ampsstudio.com"] [uri "/.git/config"] [unique_id "YyXqetp1OapvdtMwJZ4StQAAAAQ"] www.ampsstudio.com [Sat Sep 17 17:56:56 2022] [error] [client 46.3.197.7:0] AH01071: Got error 'PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179' www.ampsstudio.com [Sat Sep 17 17:56:56 2022] [error] [client 46.3.197.7:0] AH01071: Got error 'PHP message: PHP Warning: Cannot modify header information - headers already sent by (output started at /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-includes/functions.php:5275) in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/includes/sonaar-music/css/theme/custom-style.php on line 2' ampsstudio.com [Sat Sep 17 18:21:19 2022] [error] [client 57.128.45.42:0] [client 57.128.45.42] ModSecurity: Access denied with code 403 (phase 2). Match of "contains index.php" against "REQUEST_URI" required. [file "remote server"] [line "-1"] [id "570076"] [msg "Malware.Expert - Malware"] [hostname "ampsstudio.com"] [uri "/wp-content/themes/seotheme/mar.php"] [unique_id "YyYCD9kLdLJjg8KDmq7LiQAAAAY"] ampsstudio.com [Sat Sep 17 18:21:28 2022] [error] [client 57.128.45.42:0] [client 57.128.45.42] ModSecurity: Access denied with code 403 (phase 2). Match of "contains index.php" against "REQUEST_URI" required. [file "remote server"] [line "-1"] [id "570076"] [msg "Malware.Expert - Malware"] [hostname "ampsstudio.com"] [uri "/wp-content/themes/seotheme/mar.php"] [unique_id "YyYCGF6VXFUBnUobMjN2mQAAAAU"] www.ampsstudio.com [Sat Sep 17 19:38:59 2022] [error] [client 154.6.18.35:0] AH01071: Got error 'PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179' www.ampsstudio.com [Sat Sep 17 19:38:59 2022] [error] [client 154.6.18.35:0] AH01071: Got error 'PHP message: PHP Warning: Cannot modify header information - headers already sent by (output started at /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-includes/functions.php:5275) in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/includes/sonaar-music/css/theme/custom-style.php on line 2' www.ampsstudio.com [Sat Sep 17 22:31:19 2022] [error] [client 168.90.197.44:0] AH01071: Got error 'PHP message: PHP Warning: Cannot modify header information - headers already sent by (output started at /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-includes/functions.php:5275) in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/includes/sonaar-music/css/theme/custom-style.php on line 2' www.ampsstudio.com [Sun Sep 18 01:41:33 2022] [error] [client 51.11.6.150:0] AH01071: Got error 'PHP message: PHP Warning: Undefined array key "HTTP_USER_AGENT" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/bookly-responsive-appointment-booking-tool/frontend/modules/booking/ShortCode.php on line 66' www.ampsstudio.com [Sun Sep 18 04:20:30 2022] [error] [client 178.140.205.27:0] AH01071: Got error 'PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179' www.ampsstudio.com [Sun Sep 18 04:20:30 2022] [error] [client 178.140.205.27:0] AH01071: Got error 'PHP message: PHP Warning: Cannot modify header information - headers already sent by (output started at /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-includes/functions.php:5275) in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/includes/sonaar-music/css/theme/custom-style.php on line 2' webmail.ampsstudio.com [Sun Sep 18 04:42:56 2022] [error] [client 52.255.182.165:0] [client 52.255.182.165] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "webmail.ampsstudio.com"] [uri "/.env"] [unique_id "YyaTwEUI_E4jJnt81W5iAQAAAAc"] ampsstudio.com [Sun Sep 18 04:58:51 2022] [error] [client 185.197.160.14:0] [client 185.197.160.14] ModSecurity: Access denied with code 403 (phase 2). String match "/.git/config" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430058"] [msg "Malware.Expert - request_uri: .git config"] [hostname "ampsstudio.com"] [uri "/.git/config"] [unique_id "YyaXe0UI_E4jJnt81W5iCQAAAAc"] ampsstudio.com [Sun Sep 18 06:25:10 2022] [error] [client 159.89.33.85:0] [client 159.89.33.85] ModSecurity: Access denied with code 403 (phase 2). Match of "contains index.php" against "REQUEST_URI" required. [file "remote server"] [line "-1"] [id "570076"] [msg "Malware.Expert - Malware"] [hostname "ampsstudio.com"] [uri "/wp-plain.php"] [unique_id "YyartsUCxTs8Y2sFDtxjlgAAAAI"] www.ampsstudio.com [Sun Sep 18 06:25:15 2022] [error] [client 159.89.33.85:0] [client 159.89.33.85] ModSecurity: Access denied with code 403 (phase 2). String match "php.suspected" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430059"] [msg "Malware.Expert - request_uri: .PHP suspected files"] [hostname "www.ampsstudio.com"] [uri "/wp-content/plugins/apikey/apikey.php.suspected"] [unique_id "YyaruyN0Q0UGr1QJy1KooAAAAAo"] www.ampsstudio.com [Sun Sep 18 06:25:15 2022] [error] [client 159.89.33.85:0] [client 159.89.33.85] ModSecurity: Access denied with code 403 (phase 2). String match "php.suspected" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430059"] [msg "Malware.Expert - request_uri: .PHP suspected files"] [hostname "www.ampsstudio.com"] [uri "/plugins/content/apismtp/apismtp.php.suspected"] [unique_id "Yyaru0UI_E4jJnt81W5iPQAAAAc"] www.ampsstudio.com [Sun Sep 18 07:44:09 2022] [crit] [client 66.249.92.138:0] AH00529: /home/virtual/vps-aa3942/a/aede5353c4/public_html/.well-known/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/virtual/vps-aa3942/a/aede5353c4/public_html/.well-known/' is executable www.ampsstudio.com [Sun Sep 18 10:29:20 2022] [error] [client 20.51.218.81:0] [client 20.51.218.81] ModSecurity: Access denied with code 403 (phase 2). Match of "contains index.php" against "REQUEST_URI" required. [file "remote server"] [line "-1"] [id "570076"] [msg "Malware.Expert - Malware"] [hostname "www.ampsstudio.com"] [uri "/wp-plain.php"] [unique_id "Yybk8GfP0RPm66E4jKkKJwAAAAU"] www.ampsstudio.com [Sun Sep 18 10:29:25 2022] [error] [client 20.51.218.81:0] [client 20.51.218.81] ModSecurity: Access denied with code 403 (phase 2). String match "php.suspected" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430059"] [msg "Malware.Expert - request_uri: .PHP suspected files"] [hostname "www.ampsstudio.com"] [uri "/wp-content/plugins/apikey/apikey.php.suspected"] [unique_id "Yybk9UUI_E4jJnt81W5inQAAAAc"] www.ampsstudio.com [Sun Sep 18 10:29:25 2022] [error] [client 20.51.218.81:0] [client 20.51.218.81] ModSecurity: Access denied with code 403 (phase 2). String match "php.suspected" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430059"] [msg "Malware.Expert - request_uri: .PHP suspected files"] [hostname "www.ampsstudio.com"] [uri "/plugins/content/apismtp/apismtp.php.suspected"] [unique_id "Yybk9SZ62Q9mNkzp3AudTQAAAAA"] ampsstudio.com [Sun Sep 18 12:01:55 2022] [error] [client 20.204.147.105:0] [client 20.204.147.105] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "ampsstudio.com"] [uri "/.env"] [unique_id "Yyb6oyN0Q0UGr1QJy1KpGAAAAAo"] www.ampsstudio.com [Sun Sep 18 14:03:50 2022] [error] [client 95.79.135.99:0] AH01071: Got error 'PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179' www.ampsstudio.com [Sun Sep 18 14:03:50 2022] [error] [client 95.79.135.99:0] AH01071: Got error 'PHP message: PHP Warning: Cannot modify header information - headers already sent by (output started at /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-includes/functions.php:5275) in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/includes/sonaar-music/css/theme/custom-style.php on line 2' www.ampsstudio.com [Sun Sep 18 14:34:04 2022] [error] [client 95.79.135.99:0] AH01071: Got error 'PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179' www.ampsstudio.com [Sun Sep 18 14:34:04 2022] [error] [client 95.79.135.99:0] AH01071: Got error 'PHP message: PHP Warning: Cannot modify header information - headers already sent by (output started at /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-includes/functions.php:5275) in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/includes/sonaar-music/css/theme/custom-style.php on line 2' www.ampsstudio.com [Sun Sep 18 15:21:40 2022] [error] [client 23.81.62.178:0] AH01071: Got error 'PHP message: PHP Warning: Cannot modify header information - headers already sent by (output started at /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-includes/functions.php:5275) in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/includes/sonaar-music/css/theme/custom-style.php on line 2' ampsstudio.com [Sun Sep 18 21:48:22 2022] [error] [client 57.128.45.42:0] [client 57.128.45.42] ModSecurity: Access denied with code 403 (phase 2). Match of "contains index.php" against "REQUEST_URI" required. [file "remote server"] [line "-1"] [id "570076"] [msg "Malware.Expert - Malware"] [hostname "ampsstudio.com"] [uri "/wp-content/themes/seotheme/mar.php"] [unique_id "YyeEFk-6wjb3eLWUj6OzbgAAAAg"] www.ampsstudio.com [Mon Sep 19 01:45:12 2022] [error] [client 5.157.56.233:0] AH01071: Got error 'PHP message: PHP Warning: Cannot modify header information - headers already sent by (output started at /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-includes/functions.php:5275) in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/includes/sonaar-music/css/theme/custom-style.php on line 2' www.ampsstudio.com [Mon Sep 19 07:26:20 2022] [error] [client 202.78.236.229:0] AH01071: Got error 'PHP message: PHP Warning: Cannot modify header information - headers already sent by (output started at /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-includes/functions.php:5275) in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/includes/sonaar-music/css/theme/custom-style.php on line 2' www.ampsstudio.com [Mon Sep 19 07:33:30 2022] [error] [client 109.248.175.127:0] [client 109.248.175.127] ModSecurity: Access denied with code 403 (phase 2). Pattern match "/wp-content/uploads/.*\\\\.php" at REQUEST_FILENAME. [file "remote server"] [line "-1"] [id "430017"] [msg "Malware.Expert - request_uri: Wordpress - prevent PHP files from executing"] [hostname "www.ampsstudio.com"] [uri "/wp-content/uploads/2022/09/wp-class.php"] [unique_id "YygNOrBa6QGVvs8NBBjwDgAAAAM"] www.ampsstudio.com [Mon Sep 19 12:22:11 2022] [error] [client 109.248.175.127:0] [client 109.248.175.127] ModSecurity: Access denied with code 403 (phase 2). Pattern match "/wp-content/uploads/.*\\\\.php" at REQUEST_FILENAME. [file "remote server"] [line "-1"] [id "430017"] [msg "Malware.Expert - request_uri: Wordpress - prevent PHP files from executing"] [hostname "www.ampsstudio.com"] [uri "/wp-content/uploads/2022/08/wp-class.php"] [unique_id "YyhQ4wxXglL12BCsSUprXAAAAAo"] ampsstudio.com [Mon Sep 19 14:25:37 2022] [error] [client 54.207.36.58:0] [client 54.207.36.58] ModSecurity: Access denied with code 403 (phase 2). Pattern match "/\\\\..+\\\\.php" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430015"] [msg "Malware.Expert - request_uri: hidden .php execute"] [hostname "ampsstudio.com"] [uri "/wp-admin/includes/.ftp.php"] [unique_id "Yyht0XTh_z3Fy4_W4xk0bAAAAAk"] www.ampsstudio.com [Mon Sep 19 14:45:12 2022] [error] [client 185.14.97.176:0] AH01071: Got error 'PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179' www.ampsstudio.com [Mon Sep 19 14:45:12 2022] [error] [client 185.14.97.176:0] AH01071: Got error 'PHP message: PHP Warning: Cannot modify header information - headers already sent by (output started at /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-includes/functions.php:5275) in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/includes/sonaar-music/css/theme/custom-style.php on line 2' www.ampsstudio.com [Mon Sep 19 15:08:09 2022] [error] [client 185.181.61.23:0] AH01071: Got error 'PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179' www.ampsstudio.com [Mon Sep 19 15:08:09 2022] [error] [client 185.181.61.23:0] AH01071: Got error 'PHP message: PHP Warning: Cannot modify header information - headers already sent by (output started at /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-includes/functions.php:5275) in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/includes/sonaar-music/css/theme/custom-style.php on line 2' www.ampsstudio.com [Mon Sep 19 15:25:38 2022] [crit] [client 66.249.93.52:0] AH00529: /home/virtual/vps-aa3942/a/aede5353c4/public_html/.well-known/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/virtual/vps-aa3942/a/aede5353c4/public_html/.well-known/' is executable www.ampsstudio.com [Mon Sep 19 16:11:38 2022] [error] [client 146.70.125.34:0] AH01071: Got error 'PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179' www.ampsstudio.com [Mon Sep 19 16:11:38 2022] [error] [client 146.70.125.34:0] AH01071: Got error 'PHP message: PHP Warning: Cannot modify header information - headers already sent by (output started at /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-includes/functions.php:5275) in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/includes/sonaar-music/css/theme/custom-style.php on line 2' ampsstudio.com [Mon Sep 19 17:11:11 2022] [error] [client 104.43.196.70:0] [client 104.43.196.70] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "ampsstudio.com"] [uri "/.env"] [unique_id "YyiUn5OElhWuqpeq9Px5hAAAAAg"] ampsstudio.com [Mon Sep 19 17:11:12 2022] [error] [client 104.43.196.70:0] [client 104.43.196.70] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "ampsstudio.com"] [uri "/.env.bak"] [unique_id "YyiUoID4lGL9YVlMlGmnYgAAAAE"] ampsstudio.com [Mon Sep 19 17:11:18 2022] [error] [client 104.43.196.70:0] [client 104.43.196.70] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "ampsstudio.com"] [uri "/laravel/.env"] [unique_id "YyiUpnTh_z3Fy4_W4xk0uwAAAAk"] ampsstudio.com [Mon Sep 19 17:11:19 2022] [error] [client 104.43.196.70:0] [client 104.43.196.70] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "ampsstudio.com"] [uri "/local/.env"] [unique_id "YyiUp0Ec_CyS0GXrd4x4IQAAAAA"] ampsstudio.com [Mon Sep 19 17:11:21 2022] [error] [client 104.43.196.70:0] [client 104.43.196.70] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "ampsstudio.com"] [uri "/cgi-bin/.env"] [unique_id "YyiUqR_QEvv3HoM60v5ilAAAAAM"] ampsstudio.com [Mon Sep 19 17:11:23 2022] [error] [client 104.43.196.70:0] [client 104.43.196.70] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "ampsstudio.com"] [uri "/backend/.env"] [unique_id "YyiUq11lRYK85zucxANC2gAAAAU"] ampsstudio.com [Mon Sep 19 17:11:32 2022] [error] [client 104.43.196.70:0] [client 104.43.196.70] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "ampsstudio.com"] [uri "/protected/.env"] [unique_id "YyiUtAxXglL12BCsSUpr2QAAAAo"] ampsstudio.com [Mon Sep 19 17:11:34 2022] [error] [client 104.43.196.70:0] [client 104.43.196.70] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "ampsstudio.com"] [uri "/database/.env"] [unique_id "YyiUtsHWScyJMI49YCT9XgAAAAQ"] ampsstudio.com [Mon Sep 19 17:11:35 2022] [error] [client 104.43.196.70:0] [client 104.43.196.70] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "ampsstudio.com"] [uri "/public/.env"] [unique_id "YyiUt3Th_z3Fy4_W4xk0vAAAAAk"] ampsstudio.com [Mon Sep 19 17:11:36 2022] [error] [client 104.43.196.70:0] [client 104.43.196.70] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "ampsstudio.com"] [uri "/app/config/.env"] [unique_id "YyiUuEEc_CyS0GXrd4x4IgAAAAA"] ampsstudio.com [Mon Sep 19 17:11:38 2022] [error] [client 104.43.196.70:0] [client 104.43.196.70] ModSecurity: Access denied with code 403 (phase 2). String match ".aws/credentials" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430069"] [msg "Malware.Expert - request_uri: AWS Credentials"] [hostname "ampsstudio.com"] [uri "/.aws/credentials"] [unique_id "YyiUuh_QEvv3HoM60v5ilQAAAAM"] ampsstudio.com [Mon Sep 19 17:36:12 2022] [error] [client 20.216.171.198:0] AH01276: Cannot serve directory /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-admin/includes/: No matching DirectoryIndex (index.php,index.html,index.htm) found, and server-generated directory index forbidden by Options directive ampsstudio.com [Mon Sep 19 17:36:18 2022] [error] [client 20.216.171.198:0] AH01276: Cannot serve directory /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-includes/SimplePie/: No matching DirectoryIndex (index.php,index.html,index.htm) found, and server-generated directory index forbidden by Options directive ampsstudio.com [Mon Sep 19 17:36:25 2022] [error] [client 20.216.171.198:0] AH01276: Cannot serve directory /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-includes/customize/: No matching DirectoryIndex (index.php,index.html,index.htm) found, and server-generated directory index forbidden by Options directive ampsstudio.com [Mon Sep 19 17:36:33 2022] [error] [client 20.216.171.198:0] AH01276: Cannot serve directory /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-includes/Requests/: No matching DirectoryIndex (index.php,index.html,index.htm) found, and server-generated directory index forbidden by Options directive ampsstudio.com [Mon Sep 19 17:36:42 2022] [error] [client 20.216.171.198:0] AH01276: Cannot serve directory /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-includes/IXR/: No matching DirectoryIndex (index.php,index.html,index.htm) found, and server-generated directory index forbidden by Options directive ampsstudio.com [Mon Sep 19 17:36:48 2022] [error] [client 20.216.171.198:0] AH01276: Cannot serve directory /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-includes/ID3/: No matching DirectoryIndex (index.php,index.html,index.htm) found, and server-generated directory index forbidden by Options directive ampsstudio.com [Mon Sep 19 17:36:57 2022] [error] [client 20.216.171.198:0] AH01071: Got error 'PHP message: PHP Fatal error: Uncaught Error: Undefined constant "ABSPATH" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-includes/blocks/index.php:9\nStack trace:\n#0 {main}\n thrown in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-includes/blocks/index.php on line 9' ampsstudio.com [Mon Sep 19 17:37:03 2022] [error] [client 20.216.171.198:0] AH01276: Cannot serve directory /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-includes/rest-api/: No matching DirectoryIndex (index.php,index.html,index.htm) found, and server-generated directory index forbidden by Options directive ampsstudio.com [Mon Sep 19 17:37:12 2022] [error] [client 20.216.171.198:0] AH01276: Cannot serve directory /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-includes/images/: No matching DirectoryIndex (index.php,index.html,index.htm) found, and server-generated directory index forbidden by Options directive ampsstudio.com [Mon Sep 19 17:37:21 2022] [error] [client 20.216.171.198:0] AH01276: Cannot serve directory /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-includes/pomo/: No matching DirectoryIndex (index.php,index.html,index.htm) found, and server-generated directory index forbidden by Options directive www.ampsstudio.com [Tue Sep 20 00:24:40 2022] [error] [client 195.144.21.219:0] AH01071: Got error 'PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179' www.ampsstudio.com [Tue Sep 20 00:24:40 2022] [error] [client 195.144.21.219:0] AH01071: Got error 'PHP message: PHP Warning: Cannot modify header information - headers already sent by (output started at /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-includes/functions.php:5275) in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/includes/sonaar-music/css/theme/custom-style.php on line 2' www.ampsstudio.com [Tue Sep 20 01:57:04 2022] [error] [client 178.70.86.118:0] AH01071: Got error 'PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179' www.ampsstudio.com [Tue Sep 20 01:57:04 2022] [error] [client 178.70.86.118:0] AH01071: Got error 'PHP message: PHP Warning: Cannot modify header information - headers already sent by (output started at /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-includes/functions.php:5275) in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/includes/sonaar-music/css/theme/custom-style.php on line 2' www.ampsstudio.com [Tue Sep 20 02:25:34 2022] [error] [client 5.44.174.110:0] AH01071: Got error 'PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179' www.ampsstudio.com [Tue Sep 20 02:25:34 2022] [error] [client 5.44.174.110:0] AH01071: Got error 'PHP message: PHP Warning: Cannot modify header information - headers already sent by (output started at /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-includes/functions.php:5275) in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/includes/sonaar-music/css/theme/custom-style.php on line 2' www.ampsstudio.com [Tue Sep 20 03:08:47 2022] [error] [client 107.172.150.37:0] AH01071: Got error 'PHP message: PHP Warning: Cannot modify header information - headers already sent by (output started at /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-includes/functions.php:5275) in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/includes/sonaar-music/css/theme/custom-style.php on line 2' www.ampsstudio.com [Tue Sep 20 04:27:25 2022] [error] [client 151.40.126.234:0] AH01071: Got error 'PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179' www.ampsstudio.com [Tue Sep 20 04:27:25 2022] [error] [client 151.40.126.234:0] AH01071: Got error 'PHP message: PHP Warning: Cannot modify header information - headers already sent by (output started at /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-includes/functions.php:5275) in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/includes/sonaar-music/css/theme/custom-style.php on line 2' ampsstudio.com [Tue Sep 20 04:52:46 2022] [error] [client 152.89.196.13:0] [client 152.89.196.13] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_HEADERS_NAMES. [file "remote server"] [line "-1"] [id "431000"] [msg "Malware.Expert - request_uri: CSS - prevent PHP files from executing"] [hostname "ampsstudio.com"] [uri "/css/contents.php"] [unique_id "Yyk5DiC5i_SFzIUM_0vc_QAAAAg"] ampsstudio.com [Tue Sep 20 06:02:48 2022] [error] [client 147.78.47.249:0] [client 147.78.47.249] ModSecurity: Access denied with code 403 (phase 2). String match "connector.minimal.php" at REQUEST_URI. [file "remote server"] [line "-1"] [id "500083"] [msg "Malware.Expert - request_uri: 0-Day - Wordpress filemanager plugin"] [hostname "ampsstudio.com"] [uri "/wp-content/plugins/wp-file-manager/lib/php/connector.minimal.php"] [unique_id "YylJeOeeKn7sG80Zc_tCzgAAAAY"] ampsstudio.com [Tue Sep 20 06:37:28 2022] [error] [client 104.43.196.70:0] [client 104.43.196.70] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "ampsstudio.com"] [uri "/.env"] [unique_id "YylRmEi3JpJTAwlWOM12swAAAAc"] ampsstudio.com [Tue Sep 20 06:37:28 2022] [error] [client 104.43.196.70:0] [client 104.43.196.70] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "ampsstudio.com"] [uri "/.env.bak"] [unique_id "YylRmDYZEFfig6Q0ER77_wAAAAQ"] ampsstudio.com [Tue Sep 20 06:37:37 2022] [error] [client 104.43.196.70:0] [client 104.43.196.70] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "ampsstudio.com"] [uri "/laravel/.env"] [unique_id "YylRoeeeKn7sG80Zc_tC2gAAAAY"] ampsstudio.com [Tue Sep 20 06:37:37 2022] [error] [client 104.43.196.70:0] [client 104.43.196.70] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "ampsstudio.com"] [uri "/local/.env"] [unique_id "YylRoVnebIVo2pikclZtLQAAAAU"] ampsstudio.com [Tue Sep 20 06:37:38 2022] [error] [client 104.43.196.70:0] [client 104.43.196.70] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "ampsstudio.com"] [uri "/cgi-bin/.env"] [unique_id "YylRohFVYfiM9rVpve-MVAAAAAE"] ampsstudio.com [Tue Sep 20 06:37:39 2022] [error] [client 104.43.196.70:0] [client 104.43.196.70] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "ampsstudio.com"] [uri "/backend/.env"] [unique_id "YylRo3PAVdkmvRbm6s81PAAAAAo"] ampsstudio.com [Tue Sep 20 06:37:45 2022] [error] [client 104.43.196.70:0] [client 104.43.196.70] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "ampsstudio.com"] [uri "/protected/.env"] [unique_id "YylRqUFL9GQVcNK9T5l5bAAAAAA"] ampsstudio.com [Tue Sep 20 06:37:46 2022] [error] [client 104.43.196.70:0] [client 104.43.196.70] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "ampsstudio.com"] [uri "/database/.env"] [unique_id "YylRqiC5i_SFzIUM_0vdGgAAAAg"] ampsstudio.com [Tue Sep 20 06:37:47 2022] [error] [client 104.43.196.70:0] [client 104.43.196.70] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "ampsstudio.com"] [uri "/public/.env"] [unique_id "YylRq-eeKn7sG80Zc_tC2wAAAAY"] ampsstudio.com [Tue Sep 20 06:37:47 2022] [error] [client 104.43.196.70:0] [client 104.43.196.70] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "ampsstudio.com"] [uri "/app/config/.env"] [unique_id "YylRq1nebIVo2pikclZtLgAAAAU"] ampsstudio.com [Tue Sep 20 06:37:48 2022] [error] [client 104.43.196.70:0] [client 104.43.196.70] ModSecurity: Access denied with code 403 (phase 2). String match ".aws/credentials" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430069"] [msg "Malware.Expert - request_uri: AWS Credentials"] [hostname "ampsstudio.com"] [uri "/.aws/credentials"] [unique_id "YylRrBFVYfiM9rVpve-MVQAAAAE"] ampsstudio.com [Tue Sep 20 07:12:17 2022] [error] [client 104.43.196.70:0] [client 104.43.196.70] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "ampsstudio.com"] [uri "/.env"] [unique_id "YylZwW3yqRbKJwlO7RLPEwAAAAI"] ampsstudio.com [Tue Sep 20 07:12:18 2022] [error] [client 104.43.196.70:0] [client 104.43.196.70] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "ampsstudio.com"] [uri "/.env.bak"] [unique_id "YylZwiC5i_SFzIUM_0vdJQAAAAg"] ampsstudio.com [Tue Sep 20 07:12:21 2022] [error] [client 104.43.196.70:0] [client 104.43.196.70] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "ampsstudio.com"] [uri "/laravel/.env"] [unique_id "YylZxUFL9GQVcNK9T5l5dwAAAAA"] ampsstudio.com [Tue Sep 20 07:12:22 2022] [error] [client 104.43.196.70:0] [client 104.43.196.70] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "ampsstudio.com"] [uri "/local/.env"] [unique_id "YylZxki3JpJTAwlWOM12wAAAAAc"] ampsstudio.com [Tue Sep 20 07:12:23 2022] [error] [client 104.43.196.70:0] [client 104.43.196.70] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "ampsstudio.com"] [uri "/cgi-bin/.env"] [unique_id "YylZxzYZEFfig6Q0ER78DAAAAAQ"] ampsstudio.com [Tue Sep 20 07:12:24 2022] [error] [client 104.43.196.70:0] [client 104.43.196.70] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "ampsstudio.com"] [uri "/backend/.env"] [unique_id "YylZyBFVYfiM9rVpve-MYAAAAAE"] ampsstudio.com [Tue Sep 20 07:12:32 2022] [error] [client 104.43.196.70:0] [client 104.43.196.70] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "ampsstudio.com"] [uri "/protected/.env"] [unique_id "YylZ0MwjmnWQWi-6RBtzRAAAAAM"] ampsstudio.com [Tue Sep 20 07:12:33 2022] [error] [client 104.43.196.70:0] [client 104.43.196.70] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "ampsstudio.com"] [uri "/database/.env"] [unique_id "YylZ0eeeKn7sG80Zc_tC5wAAAAY"] ampsstudio.com [Tue Sep 20 07:12:34 2022] [error] [client 104.43.196.70:0] [client 104.43.196.70] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "ampsstudio.com"] [uri "/public/.env"] [unique_id "YylZ0kFL9GQVcNK9T5l5eAAAAAA"] ampsstudio.com [Tue Sep 20 07:12:35 2022] [error] [client 104.43.196.70:0] [client 104.43.196.70] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "ampsstudio.com"] [uri "/app/config/.env"] [unique_id "YylZ00i3JpJTAwlWOM12wQAAAAc"] ampsstudio.com [Tue Sep 20 07:12:36 2022] [error] [client 104.43.196.70:0] [client 104.43.196.70] ModSecurity: Access denied with code 403 (phase 2). String match ".aws/credentials" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430069"] [msg "Malware.Expert - request_uri: AWS Credentials"] [hostname "ampsstudio.com"] [uri "/.aws/credentials"] [unique_id "YylZ1DYZEFfig6Q0ER78DQAAAAQ"] ampsstudio.com [Tue Sep 20 07:47:21 2022] [error] [client 104.43.196.70:0] [client 104.43.196.70] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "ampsstudio.com"] [uri "/.env"] [unique_id "Yylh-XPAVdkmvRbm6s81XgAAAAo"] ampsstudio.com [Tue Sep 20 07:47:21 2022] [error] [client 104.43.196.70:0] [client 104.43.196.70] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "ampsstudio.com"] [uri "/.env.bak"] [unique_id "Yylh-Ui3JpJTAwlWOM121gAAAAc"] ampsstudio.com [Tue Sep 20 07:47:25 2022] [error] [client 104.43.196.70:0] [client 104.43.196.70] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "ampsstudio.com"] [uri "/laravel/.env"] [unique_id "Yylh_eeeKn7sG80Zc_tC-wAAAAY"] ampsstudio.com [Tue Sep 20 07:47:26 2022] [error] [client 104.43.196.70:0] [client 104.43.196.70] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "ampsstudio.com"] [uri "/local/.env"] [unique_id "Yylh_kFL9GQVcNK9T5l5iwAAAAA"] ampsstudio.com [Tue Sep 20 07:47:55 2022] [error] [client 104.43.196.70:0] [client 104.43.196.70] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "ampsstudio.com"] [uri "/cgi-bin/.env"] [unique_id "YyliG0i3JpJTAwlWOM121wAAAAc"] ampsstudio.com [Tue Sep 20 07:48:07 2022] [error] [client 104.43.196.70:0] [client 104.43.196.70] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "ampsstudio.com"] [uri "/backend/.env"] [unique_id "YyliJyC5i_SFzIUM_0vdPQAAAAg"] ampsstudio.com [Tue Sep 20 07:48:17 2022] [error] [client 104.43.196.70:0] [client 104.43.196.70] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "ampsstudio.com"] [uri "/protected/.env"] [unique_id "YyliMRFVYfiM9rVpve-MeQAAAAE"] ampsstudio.com [Tue Sep 20 07:48:21 2022] [error] [client 104.43.196.70:0] [client 104.43.196.70] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "ampsstudio.com"] [uri "/database/.env"] [unique_id "YyliNVnebIVo2pikclZtUAAAAAU"] ampsstudio.com [Tue Sep 20 07:48:22 2022] [error] [client 104.43.196.70:0] [client 104.43.196.70] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "ampsstudio.com"] [uri "/public/.env"] [unique_id "YyliNnPAVdkmvRbm6s81YAAAAAo"] ampsstudio.com [Tue Sep 20 07:48:23 2022] [error] [client 104.43.196.70:0] [client 104.43.196.70] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "ampsstudio.com"] [uri "/app/config/.env"] [unique_id "YyliN0i3JpJTAwlWOM122AAAAAc"] ampsstudio.com [Tue Sep 20 07:48:24 2022] [error] [client 104.43.196.70:0] [client 104.43.196.70] ModSecurity: Access denied with code 403 (phase 2). String match ".aws/credentials" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430069"] [msg "Malware.Expert - request_uri: AWS Credentials"] [hostname "ampsstudio.com"] [uri "/.aws/credentials"] [unique_id "YyliOCC5i_SFzIUM_0vdPgAAAAg"] ampsstudio.com [Tue Sep 20 07:57:36 2022] [error] [client 52.91.167.229:0] [client 52.91.167.229] ModSecurity: Access denied with code 403 (phase 2). Pattern match "/etc/passwd" at QUERY_STRING. [file "remote server"] [line "-1"] [id "410011"] [msg "Malware.Expert - query_string: unwanted shell access"] [hostname "ampsstudio.com"] [uri "/wp-admin/admin-post.php"] [unique_id "YylkYDYZEFfig6Q0ER78KAAAAAQ"] www.ampsstudio.com [Tue Sep 20 08:05:30 2022] [error] [client 81.4.194.112:0] AH01071: Got error 'PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179' www.ampsstudio.com [Tue Sep 20 08:05:30 2022] [error] [client 81.4.194.112:0] AH01071: Got error 'PHP message: PHP Warning: Cannot modify header information - headers already sent by (output started at /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-includes/functions.php:5275) in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/includes/sonaar-music/css/theme/custom-style.php on line 2' www.ampsstudio.com [Tue Sep 20 08:34:45 2022] [error] [client 93.73.179.112:0] AH01071: Got error 'PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179' www.ampsstudio.com [Tue Sep 20 08:34:45 2022] [error] [client 93.73.179.112:0] AH01071: Got error 'PHP message: PHP Warning: Cannot modify header information - headers already sent by (output started at /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-includes/functions.php:5275) in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/includes/sonaar-music/css/theme/custom-style.php on line 2' ampsstudio.com [Tue Sep 20 11:08:48 2022] [error] [client 163.172.34.205:0] [client 163.172.34.205] ModSecurity: Access denied with code 403 (phase 2). String match "/.git/config" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430058"] [msg "Malware.Expert - request_uri: .git config"] [hostname "ampsstudio.com"] [uri "/.git/config"] [unique_id "YymRMEFL9GQVcNK9T5l6IQAAAAA"] ampsstudio.com [Tue Sep 20 12:42:58 2022] [error] [client 20.68.156.66:0] [client 20.68.156.66] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "ampsstudio.com"] [uri "/.env"] [unique_id "YymnQnk3jh8GzbVBQanZVwAAAAk"] www.ampsstudio.com [Tue Sep 20 15:05:18 2022] [error] [client 45.134.212.208:0] AH01071: Got error 'PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179' www.ampsstudio.com [Tue Sep 20 15:05:18 2022] [error] [client 45.134.212.208:0] AH01071: Got error 'PHP message: PHP Warning: Cannot modify header information - headers already sent by (output started at /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-includes/functions.php:5275) in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/includes/sonaar-music/css/theme/custom-style.php on line 2' ampsstudio.com [Tue Sep 20 18:20:13 2022] [error] [client 57.128.45.42:0] [client 57.128.45.42] ModSecurity: Access denied with code 403 (phase 2). Match of "contains index.php" against "REQUEST_URI" required. [file "remote server"] [line "-1"] [id "570076"] [msg "Malware.Expert - Malware"] [hostname "ampsstudio.com"] [uri "/wp-includes/shell20211028.php"] [unique_id "Yyn2TZq-D7J-uXPeXR5tNAAAAAc"] ampsstudio.com [Tue Sep 20 18:20:23 2022] [error] [client 57.128.45.42:0] [client 57.128.45.42] ModSecurity: Access denied with code 403 (phase 2). Match of "contains index.php" against "REQUEST_URI" required. [file "remote server"] [line "-1"] [id "570076"] [msg "Malware.Expert - Malware"] [hostname "ampsstudio.com"] [uri "/wp-includes/shell20211028.php"] [unique_id "Yyn2VxFVYfiM9rVpve-O7AAAAAE"] www.ampsstudio.com [Tue Sep 20 19:25:29 2022] [error] [client 185.191.171.40:0] AH01071: Got error 'PHP message: PHP Warning: Attempt to read property "ID" on null in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/archive-event.php on line 15PHP message: PHP Warning: Undefined array key 0 in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/includes/classes/iron_sonaar.class.php on line 212PHP message: PHP Warning: Trying to access array offset on value of type null in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/includes/classes/iron_sonaar.class.php on line 212PHP message: PHP Warning: Undefined array key 0 in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/includes/classes/iron_sonaar.class.php on line 214PHP message: PHP Warning: Trying to access array offset on value of type null in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/includes/classes/iron_sonaar.class.php on line 214' www.ampsstudio.com [Tue Sep 20 20:36:57 2022] [error] [client 107.158.92.123:0] AH01071: Got error 'PHP message: PHP Warning: Cannot modify header information - headers already sent by (output started at /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-includes/functions.php:5275) in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/includes/sonaar-music/css/theme/custom-style.php on line 2' www.ampsstudio.com [Tue Sep 20 21:19:13 2022] [error] [client 185.246.188.60:0] AH01071: Got error 'PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179' www.ampsstudio.com [Tue Sep 20 21:19:13 2022] [error] [client 185.246.188.60:0] AH01071: Got error 'PHP message: PHP Warning: Cannot modify header information - headers already sent by (output started at /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-includes/functions.php:5275) in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/includes/sonaar-music/css/theme/custom-style.php on line 2' www.ampsstudio.com [Tue Sep 20 21:32:37 2022] [error] [client 20.73.58.174:0] AH01276: Cannot serve directory /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-admin/css/: No matching DirectoryIndex (index.php,index.html,index.htm) found, and server-generated directory index forbidden by Options directive cpanel.ampsstudio.com [Wed Sep 21 01:19:11 2022] [error] [client 52.91.167.229:0] [client 52.91.167.229] ModSecurity: Access denied with code 403 (phase 2). Pattern match "/etc/passwd" at QUERY_STRING. [file "remote server"] [line "-1"] [id "410011"] [msg "Malware.Expert - query_string: unwanted shell access"] [hostname "cpanel.ampsstudio.com"] [uri "/wp-admin/admin-post.php"] [unique_id "YypYf-HfyCGVvn02DLxsCAAAAAI"] www.ampsstudio.com [Wed Sep 21 03:28:11 2022] [error] [client 45.144.0.52:0] AH01071: Got error 'PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179' www.ampsstudio.com [Wed Sep 21 03:28:11 2022] [error] [client 45.144.0.52:0] AH01071: Got error 'PHP message: PHP Warning: Cannot modify header information - headers already sent by (output started at /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-includes/functions.php:5275) in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/includes/sonaar-music/css/theme/custom-style.php on line 2' webdisk.ampsstudio.com [Wed Sep 21 04:26:49 2022] [error] [client 41.216.188.45:0] AH01276: Cannot serve directory /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-admin/css/: No matching DirectoryIndex (index.php,index.html,index.htm) found, and server-generated directory index forbidden by Options directive ampsstudio.com [Wed Sep 21 07:55:55 2022] [error] [client 176.109.189.170:0] [client 176.109.189.170] ModSecurity: Access denied with code 403 (phase 2). String match "/shell.php" at REQUEST_URI. [file "remote server"] [line "-1"] [id "570072"] [msg "Malware.Expert - PHP Command Shell"] [hostname "ampsstudio.com"] [uri "/shell.php"] [unique_id "Yyq1ewLTklWWl8VSFYnEqgAAAAc"] ampsstudio.com [Wed Sep 21 08:30:19 2022] [error] [client 5.188.62.134:0] [client 5.188.62.134] ModSecurity: Access denied with code 403 (phase 1). Pattern match "\\\\.\\\\./\\\\.\\\\." at REQUEST_URI. [file "remote server"] [line "-1"] [id "430064"] [msg "Malware.Expert - request_uri: directory travel"] [hostname "ampsstudio.com"] [uri "/wp-content/plugins/ad-widget/views/modal/"] [unique_id "Yyq9i3hdcNabLxb0INxSkgAAAAQ"] www.ampsstudio.com [Wed Sep 21 09:15:39 2022] [error] [client 212.227.115.239:0] AH01071: Got error 'PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179' www.ampsstudio.com [Wed Sep 21 09:15:39 2022] [error] [client 212.227.115.239:0] AH01071: Got error 'PHP message: PHP Warning: Cannot modify header information - headers already sent by (output started at /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-includes/functions.php:5275) in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/includes/sonaar-music/css/theme/custom-style.php on line 2' www.ampsstudio.com [Wed Sep 21 09:49:43 2022] [error] [client 66.249.66.73:0] AH01071: Got error 'PHP message: PHP Warning: Undefined array key "block" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/includes/classes/iron_sonaar.class.php on line 212PHP message: PHP Warning: Trying to access array offset on value of type null in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/includes/classes/iron_sonaar.class.php on line 212PHP message: PHP Warning: Undefined array key "block" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/includes/classes/iron_sonaar.class.php on line 214PHP message: PHP Warning: Trying to access array offset on value of type null in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/includes/classes/iron_sonaar.class.php on line 214' webmail.ampsstudio.com [Wed Sep 21 17:18:37 2022] [error] [client 41.216.188.45:0] AH01276: Cannot serve directory /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-admin/css/: No matching DirectoryIndex (index.php,index.html,index.htm) found, and server-generated directory index forbidden by Options directive www.ampsstudio.com [Wed Sep 21 17:38:26 2022] [error] [client 154.6.18.48:0] AH01071: Got error 'PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179' www.ampsstudio.com [Wed Sep 21 17:38:26 2022] [error] [client 154.6.18.48:0] AH01071: Got error 'PHP message: PHP Warning: Cannot modify header information - headers already sent by (output started at /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-includes/functions.php:5275) in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/includes/sonaar-music/css/theme/custom-style.php on line 2' www.ampsstudio.com [Wed Sep 21 17:44:17 2022] [crit] [client 66.249.93.44:0] AH00529: /home/virtual/vps-aa3942/a/aede5353c4/public_html/.well-known/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/virtual/vps-aa3942/a/aede5353c4/public_html/.well-known/' is executable ampsstudio.com [Wed Sep 21 22:46:45 2022] [error] [client 13.49.175.131:0] [client 13.49.175.131] ModSecurity: Access denied with code 403 (phase 2). String match "/.git/config" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430058"] [msg "Malware.Expert - request_uri: .git config"] [hostname "ampsstudio.com"] [uri "/.git/config"] [unique_id "YyuGRZGGZtGL5um18AvWKwAAAAA"] ampsstudio.com [Wed Sep 21 23:26:36 2022] [error] [client 57.128.45.42:0] AH01276: Cannot serve directory /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-admin/includes/: No matching DirectoryIndex (index.php,index.html,index.htm) found, and server-generated directory index forbidden by Options directive www.ampsstudio.com [Thu Sep 22 01:14:03 2022] [error] [client 107.174.151.93:0] AH01071: Got error 'PHP message: PHP Warning: Cannot modify header information - headers already sent by (output started at /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-includes/functions.php:5275) in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/includes/sonaar-music/css/theme/custom-style.php on line 2' www.ampsstudio.com [Thu Sep 22 03:43:15 2022] [error] [client 161.117.9.99:0] AH01071: Got error 'PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179' www.ampsstudio.com [Thu Sep 22 03:43:15 2022] [error] [client 161.117.9.99:0] AH01071: Got error 'PHP message: PHP Warning: Cannot modify header information - headers already sent by (output started at /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-includes/functions.php:5275) in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/includes/sonaar-music/css/theme/custom-style.php on line 2' www.ampsstudio.com [Thu Sep 22 04:56:59 2022] [error] [client 157.55.39.27:0] AH01071: Got error 'PHP message: PHP Warning: Attempt to read property "ID" on null in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/archive-event.php on line 15PHP message: PHP Warning: Undefined array key 0 in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/includes/classes/iron_sonaar.class.php on line 212PHP message: PHP Warning: Trying to access array offset on value of type null in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/includes/classes/iron_sonaar.class.php on line 212PHP message: PHP Warning: Undefined array key 0 in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/includes/classes/iron_sonaar.class.php on line 214PHP message: PHP Warning: Trying to access array offset on value of type null in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/includes/classes/iron_sonaar.class.php on line 214' ampsstudio.com [Thu Sep 22 06:52:02 2022] [error] [client 5.188.62.134:0] [client 5.188.62.134] ModSecurity: Access denied with code 403 (phase 2). Pattern match ".+wp-config\\\\..*" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430005"] [msg "Malware.Expert - request_uri: read wordpress configuration file"] [hostname "ampsstudio.com"] [uri "/"] [unique_id "Yyv4AoocgCH_f9_RUCjsfwAAAAI"] www.ampsstudio.com [Thu Sep 22 07:01:07 2022] [error] [client 5.227.27.161:0] AH01071: Got error 'PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179' www.ampsstudio.com [Thu Sep 22 07:01:07 2022] [error] [client 5.227.27.161:0] AH01071: Got error 'PHP message: PHP Warning: Cannot modify header information - headers already sent by (output started at /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-includes/functions.php:5275) in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/includes/sonaar-music/css/theme/custom-style.php on line 2' www.ampsstudio.com [Thu Sep 22 07:40:24 2022] [error] [client 159.223.36.12:0] [client 159.223.36.12] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "www.ampsstudio.com"] [uri "/.env"] [unique_id "YywDWHoDEV1mnRN3XVPX5QAAAAU"] www.ampsstudio.com [Thu Sep 22 07:41:26 2022] [error] [client 185.191.171.18:0] AH01071: Got error 'PHP message: PHP Warning: Attempt to read property "ID" on null in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/archive-event.php on line 15PHP message: PHP Warning: Undefined array key 0 in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/includes/classes/iron_sonaar.class.php on line 212PHP message: PHP Warning: Trying to access array offset on value of type null in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/includes/classes/iron_sonaar.class.php on line 212PHP message: PHP Warning: Undefined array key 0 in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/includes/classes/iron_sonaar.class.php on line 214PHP message: PHP Warning: Trying to access array offset on value of type null in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/includes/classes/iron_sonaar.class.php on line 214' www.ampsstudio.com [Thu Sep 22 08:53:27 2022] [error] [client 161.117.10.233:0] AH01071: Got error 'PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179' www.ampsstudio.com [Thu Sep 22 08:53:27 2022] [error] [client 161.117.10.233:0] AH01071: Got error 'PHP message: PHP Warning: Cannot modify header information - headers already sent by (output started at /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-includes/functions.php:5275) in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/includes/sonaar-music/css/theme/custom-style.php on line 2' www.ampsstudio.com [Thu Sep 22 12:51:58 2022] [crit] [client 66.249.93.40:0] AH00529: /home/virtual/vps-aa3942/a/aede5353c4/public_html/.well-known/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/virtual/vps-aa3942/a/aede5353c4/public_html/.well-known/' is executable www.ampsstudio.com [Thu Sep 22 13:38:01 2022] [error] [client 185.220.100.251:0] AH01071: Got error 'PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179' www.ampsstudio.com [Thu Sep 22 13:38:01 2022] [error] [client 185.220.100.251:0] AH01071: Got error 'PHP message: PHP Warning: Cannot modify header information - headers already sent by (output started at /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-includes/functions.php:5275) in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/includes/sonaar-music/css/theme/custom-style.php on line 2' www.ampsstudio.com [Thu Sep 22 15:47:19 2022] [error] [client 23.137.249.227:0] AH01071: Got error 'PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179' www.ampsstudio.com [Thu Sep 22 15:47:19 2022] [error] [client 23.137.249.227:0] AH01071: Got error 'PHP message: PHP Warning: Cannot modify header information - headers already sent by (output started at /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-includes/functions.php:5275) in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/includes/sonaar-music/css/theme/custom-style.php on line 2' ampsstudio.com [Thu Sep 22 16:09:19 2022] [error] [client 41.216.188.45:0] AH01276: Cannot serve directory /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-admin/css/: No matching DirectoryIndex (index.php,index.html,index.htm) found, and server-generated directory index forbidden by Options directive ampsstudio.com [Thu Sep 22 18:33:13 2022] [error] [client 13.90.194.70:0] [client 13.90.194.70] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "ampsstudio.com"] [uri "/.env"] [unique_id "YyycWV8Eq4sJy6ecrlFTPAAAAAg"] ampsstudio.com [Thu Sep 22 18:33:21 2022] [error] [client 13.90.194.70:0] [client 13.90.194.70] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "ampsstudio.com"] [uri "/.env"] [unique_id "YyycYRoeFN_RfNbcbUlewQAAAAM"] ampsstudio.com [Thu Sep 22 18:33:38 2022] [error] [client 13.90.194.70:0] [client 13.90.194.70] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "ampsstudio.com"] [uri "/.env"] [unique_id "YyycchPi3nLkuWf0cOb_RwAAAAo"] ampsstudio.com [Thu Sep 22 18:33:46 2022] [error] [client 13.90.194.70:0] [client 13.90.194.70] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "ampsstudio.com"] [uri "/.env"] [unique_id "Yyycet0hqPhwetel0QMXoQAAAAA"] www.ampsstudio.com [Thu Sep 22 18:39:12 2022] [crit] [client 66.249.93.44:0] AH00529: /home/virtual/vps-aa3942/a/aede5353c4/public_html/.well-known/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/virtual/vps-aa3942/a/aede5353c4/public_html/.well-known/' is executable www.ampsstudio.com [Thu Sep 22 19:32:13 2022] [error] [client 185.191.171.5:0] AH01071: Got error 'PHP message: PHP Warning: Attempt to read property "post_content" on null in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/wordpress-seo/src/memoizers/meta-tags-context-memoizer.php on line 140PHP message: PHP Warning: Attempt to read property "post_modified_gmt" on null in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/wordpress-seo/src/presentations/indexable-post-type-presentation.php on line 289PHP message: PHP Warning: Attempt to read property "post_date_gmt" on null in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/wordpress-seo/src/presentations/indexable-post-type-presentation.php on line 289PHP message: PHP Warning: Attempt to read property "post_author" on null in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/wordpress-seo/src/presenters/slack/enhanced-data-presenter.php on line 46PHP message: PHP Warning: Attempt to read property "post_date_gmt" on null in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/wordpress-seo/src/generators/schema/webpage.php on line 51PHP message: PHP Warning: Attempt to read property "post_modified_gmt" on null in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/wordpress-seo/src/generators/schema/webpage.php on line 52PHP message: PHP Warning: Undefined array key 0 in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/includes/classes/iron_sonaar.class.php on line 212PHP message: PHP Warning: Trying to access array offset on value of type null in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/includes/classes/iron_sonaar.class.php on line 212PHP message: PHP Warning: Undefined array key 0 in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/includes/classes/iron_sonaar.class.php on line 214PHP message: PHP Warning: Trying to access array offset on value of type null in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/includes/classes/iron_sonaar.class.php on line 214' ampsstudio.com [Thu Sep 22 19:32:39 2022] [error] [client 20.123.80.100:0] [client 20.123.80.100] ModSecurity: Access denied with code 403 (phase 2). Pattern match "/wp-content/uploads/.*\\\\.php" at REQUEST_FILENAME. [file "remote server"] [line "-1"] [id "430017"] [msg "Malware.Expert - request_uri: Wordpress - prevent PHP files from executing"] [hostname "ampsstudio.com"] [uri "/wp-content/uploads/2021/12/up.php"] [unique_id "YyyqR18Eq4sJy6ecrlFTYAAAAAg"] ampsstudio.com [Thu Sep 22 19:32:43 2022] [error] [client 20.123.80.100:0] [client 20.123.80.100] ModSecurity: Access denied with code 403 (phase 2). String match "python" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "580102"] [msg "Malware.Expert - Wordpress - unknown python request"] [hostname "ampsstudio.com"] [uri "/wp-admin/alfa.php"] [unique_id "YyyqS18Eq4sJy6ecrlFTYQAAAAg"] ampsstudio.com [Thu Sep 22 19:32:45 2022] [error] [client 20.123.80.100:0] [client 20.123.80.100] ModSecurity: Access denied with code 403 (phase 2). String match "python" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "580100"] [msg "Malware.Expert - Wordpress - unknown python request"] [hostname "ampsstudio.com"] [uri "/wp-includes/fw.php"] [unique_id "YyyqTRoeFN_RfNbcbUle5QAAAAM"] ampsstudio.com [Thu Sep 22 19:32:45 2022] [error] [client 20.123.80.100:0] [client 20.123.80.100] ModSecurity: Access denied with code 403 (phase 2). String match "python" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "580101"] [msg "Malware.Expert - Wordpress - unknown python request"] [hostname "ampsstudio.com"] [uri "/wp-content/fw.php"] [unique_id "YyyqTRPi3nLkuWf0cOb_awAAAAo"] ampsstudio.com [Thu Sep 22 19:32:45 2022] [error] [client 20.123.80.100:0] [client 20.123.80.100] ModSecurity: Access denied with code 403 (phase 2). String match "python" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "580102"] [msg "Malware.Expert - Wordpress - unknown python request"] [hostname "ampsstudio.com"] [uri "/wp-admin/fw.php"] [unique_id "YyyqTa_G3O75mPQwFM8uuQAAABA"] ampsstudio.com [Thu Sep 22 19:32:45 2022] [error] [client 20.123.80.100:0] [client 20.123.80.100] ModSecurity: Access denied with code 403 (phase 2). Pattern match "/wp-content/uploads/.*\\\\.php" at REQUEST_FILENAME. [file "remote server"] [line "-1"] [id "430017"] [msg "Malware.Expert - request_uri: Wordpress - prevent PHP files from executing"] [hostname "ampsstudio.com"] [uri "/wp-content/uploads/2021/12/fw.php"] [unique_id "YyyqTeg9b1eSvnrScDsCfgAAAAI"] ampsstudio.com [Thu Sep 22 19:32:45 2022] [error] [client 20.123.80.100:0] [client 20.123.80.100] ModSecurity: Access denied with code 403 (phase 2). String match "/wso.php" at REQUEST_URI. [file "remote server"] [line "-1"] [id "570066"] [msg "Malware.Expert - PHP Command Shell (WSO)"] [hostname "ampsstudio.com"] [uri "/wp-includes/wso.php"] [unique_id "YyyqTfDGGvvjRNhcjilx2gAAAAE"] ampsstudio.com [Thu Sep 22 19:32:46 2022] [error] [client 20.123.80.100:0] [client 20.123.80.100] ModSecurity: Access denied with code 403 (phase 2). String match "/wso.php" at REQUEST_URI. [file "remote server"] [line "-1"] [id "570066"] [msg "Malware.Expert - PHP Command Shell (WSO)"] [hostname "ampsstudio.com"] [uri "/wp-content/wso.php"] [unique_id "YyyqTj9yLw4D8JYiPCRCNQAAAAw"] ampsstudio.com [Thu Sep 22 19:32:46 2022] [error] [client 20.123.80.100:0] [client 20.123.80.100] ModSecurity: Access denied with code 403 (phase 2). String match "/wso.php" at REQUEST_URI. [file "remote server"] [line "-1"] [id "570066"] [msg "Malware.Expert - PHP Command Shell (WSO)"] [hostname "ampsstudio.com"] [uri "/wp-admin/wso.php"] [unique_id "YyyqTl8Eq4sJy6ecrlFTYgAAAAg"] ampsstudio.com [Thu Sep 22 19:32:50 2022] [error] [client 20.123.80.100:0] [client 20.123.80.100] ModSecurity: Access denied with code 403 (phase 2). String match "/shell.php" at REQUEST_URI. [file "remote server"] [line "-1"] [id "570072"] [msg "Malware.Expert - PHP Command Shell"] [hostname "ampsstudio.com"] [uri "/shell.php"] [unique_id "YyyqUj9yLw4D8JYiPCRCNgAAAAw"] ampsstudio.com [Thu Sep 22 19:32:50 2022] [error] [client 20.123.80.100:0] [client 20.123.80.100] ModSecurity: Access denied with code 403 (phase 2). String match "connector.minimal.php" at REQUEST_URI. [file "remote server"] [line "-1"] [id "500083"] [msg "Malware.Expert - request_uri: 0-Day - Wordpress filemanager plugin"] [hostname "ampsstudio.com"] [uri "/wp-content/plugins/wp-file-manager/lib/php/connector.minimal.php"] [unique_id "YyyqUl8Eq4sJy6ecrlFTYwAAAAg"] ampsstudio.com [Thu Sep 22 19:43:01 2022] [error] [client 20.123.80.100:0] [client 20.123.80.100] ModSecurity: Access denied with code 403 (phase 2). Pattern match "/wp-content/uploads/.*\\\\.php" at REQUEST_FILENAME. [file "remote server"] [line "-1"] [id "430017"] [msg "Malware.Expert - request_uri: Wordpress - prevent PHP files from executing"] [hostname "ampsstudio.com"] [uri "/wp-content/uploads/2021/12/up.php"] [unique_id "YyystV8Eq4sJy6ecrlFTZwAAAAg"] ampsstudio.com [Thu Sep 22 19:43:07 2022] [error] [client 20.123.80.100:0] [client 20.123.80.100] ModSecurity: Access denied with code 403 (phase 2). String match "python" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "580102"] [msg "Malware.Expert - Wordpress - unknown python request"] [hostname "ampsstudio.com"] [uri "/wp-admin/alfa.php"] [unique_id "Yyysu8EhR02e3dJFfnms9gAAAAk"] ampsstudio.com [Thu Sep 22 19:43:08 2022] [error] [client 20.123.80.100:0] [client 20.123.80.100] ModSecurity: Access denied with code 403 (phase 2). String match "python" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "580100"] [msg "Malware.Expert - Wordpress - unknown python request"] [hostname "ampsstudio.com"] [uri "/wp-includes/fw.php"] [unique_id "YyysvBoeFN_RfNbcbUle7AAAAAM"] ampsstudio.com [Thu Sep 22 19:43:08 2022] [error] [client 20.123.80.100:0] [client 20.123.80.100] ModSecurity: Access denied with code 403 (phase 2). String match "python" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "580101"] [msg "Malware.Expert - Wordpress - unknown python request"] [hostname "ampsstudio.com"] [uri "/wp-content/fw.php"] [unique_id "YyysvBPi3nLkuWf0cOb_cQAAAAo"] ampsstudio.com [Thu Sep 22 19:43:08 2022] [error] [client 20.123.80.100:0] [client 20.123.80.100] ModSecurity: Access denied with code 403 (phase 2). String match "python" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "580102"] [msg "Malware.Expert - Wordpress - unknown python request"] [hostname "ampsstudio.com"] [uri "/wp-admin/fw.php"] [unique_id "YyysvK_G3O75mPQwFM8uwAAAABA"] ampsstudio.com [Thu Sep 22 19:43:08 2022] [error] [client 20.123.80.100:0] [client 20.123.80.100] ModSecurity: Access denied with code 403 (phase 2). Pattern match "/wp-content/uploads/.*\\\\.php" at REQUEST_FILENAME. [file "remote server"] [line "-1"] [id "430017"] [msg "Malware.Expert - request_uri: Wordpress - prevent PHP files from executing"] [hostname "ampsstudio.com"] [uri "/wp-content/uploads/2021/12/fw.php"] [unique_id "YyysvN0hqPhwetel0QMXzAAAAAA"] ampsstudio.com [Thu Sep 22 19:43:09 2022] [error] [client 20.123.80.100:0] [client 20.123.80.100] ModSecurity: Access denied with code 403 (phase 2). String match "/wso.php" at REQUEST_URI. [file "remote server"] [line "-1"] [id "570066"] [msg "Malware.Expert - PHP Command Shell (WSO)"] [hostname "ampsstudio.com"] [uri "/wp-includes/wso.php"] [unique_id "Yyysveg9b1eSvnrScDsChQAAAAI"] ampsstudio.com [Thu Sep 22 19:43:09 2022] [error] [client 20.123.80.100:0] [client 20.123.80.100] ModSecurity: Access denied with code 403 (phase 2). String match "/wso.php" at REQUEST_URI. [file "remote server"] [line "-1"] [id "570066"] [msg "Malware.Expert - PHP Command Shell (WSO)"] [hostname "ampsstudio.com"] [uri "/wp-content/wso.php"] [unique_id "YyysvV8Eq4sJy6ecrlFTaQAAAAg"] ampsstudio.com [Thu Sep 22 19:43:09 2022] [error] [client 20.123.80.100:0] [client 20.123.80.100] ModSecurity: Access denied with code 403 (phase 2). String match "/wso.php" at REQUEST_URI. [file "remote server"] [line "-1"] [id "570066"] [msg "Malware.Expert - PHP Command Shell (WSO)"] [hostname "ampsstudio.com"] [uri "/wp-admin/wso.php"] [unique_id "YyysvfDGGvvjRNhcjilx4AAAAAE"] ampsstudio.com [Thu Sep 22 19:43:13 2022] [error] [client 20.123.80.100:0] [client 20.123.80.100] ModSecurity: Access denied with code 403 (phase 2). String match "/shell.php" at REQUEST_URI. [file "remote server"] [line "-1"] [id "570072"] [msg "Malware.Expert - PHP Command Shell"] [hostname "ampsstudio.com"] [uri "/shell.php"] [unique_id "Yyysweg9b1eSvnrScDsChgAAAAI"] ampsstudio.com [Thu Sep 22 19:43:13 2022] [error] [client 20.123.80.100:0] [client 20.123.80.100] ModSecurity: Access denied with code 403 (phase 2). String match "connector.minimal.php" at REQUEST_URI. [file "remote server"] [line "-1"] [id "500083"] [msg "Malware.Expert - request_uri: 0-Day - Wordpress filemanager plugin"] [hostname "ampsstudio.com"] [uri "/wp-content/plugins/wp-file-manager/lib/php/connector.minimal.php"] [unique_id "YyyswV8Eq4sJy6ecrlFTagAAAAg"] ampsstudio.com [Thu Sep 22 21:40:20 2022] [error] [client 20.123.80.100:0] [client 20.123.80.100] ModSecurity: Access denied with code 403 (phase 2). Pattern match "/wp-content/uploads/.*\\\\.php" at REQUEST_FILENAME. [file "remote server"] [line "-1"] [id "430017"] [msg "Malware.Expert - request_uri: Wordpress - prevent PHP files from executing"] [hostname "ampsstudio.com"] [uri "/wp-content/uploads/2021/12/up.php"] [unique_id "YyzINK_G3O75mPQwFM8u6AAAABA"] ampsstudio.com [Thu Sep 22 21:40:25 2022] [error] [client 20.123.80.100:0] [client 20.123.80.100] ModSecurity: Access denied with code 403 (phase 2). String match "python" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "580102"] [msg "Malware.Expert - Wordpress - unknown python request"] [hostname "ampsstudio.com"] [uri "/wp-admin/alfa.php"] [unique_id "YyzIOa_G3O75mPQwFM8u6QAAABA"] ampsstudio.com [Thu Sep 22 21:40:27 2022] [error] [client 20.123.80.100:0] [client 20.123.80.100] ModSecurity: Access denied with code 403 (phase 2). String match "python" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "580100"] [msg "Malware.Expert - Wordpress - unknown python request"] [hostname "ampsstudio.com"] [uri "/wp-includes/fw.php"] [unique_id "YyzIOxoeFN_RfNbcbUlfFQAAAAM"] ampsstudio.com [Thu Sep 22 21:40:27 2022] [error] [client 20.123.80.100:0] [client 20.123.80.100] ModSecurity: Access denied with code 403 (phase 2). String match "python" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "580101"] [msg "Malware.Expert - Wordpress - unknown python request"] [hostname "ampsstudio.com"] [uri "/wp-content/fw.php"] [unique_id "YyzIO8EhR02e3dJFfnmtIAAAAAk"] ampsstudio.com [Thu Sep 22 21:40:27 2022] [error] [client 20.123.80.100:0] [client 20.123.80.100] ModSecurity: Access denied with code 403 (phase 2). String match "python" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "580102"] [msg "Malware.Expert - Wordpress - unknown python request"] [hostname "ampsstudio.com"] [uri "/wp-admin/fw.php"] [unique_id "YyzIOz9yLw4D8JYiPCRCZgAAAAw"] ampsstudio.com [Thu Sep 22 21:40:27 2022] [error] [client 20.123.80.100:0] [client 20.123.80.100] ModSecurity: Access denied with code 403 (phase 2). Pattern match "/wp-content/uploads/.*\\\\.php" at REQUEST_FILENAME. [file "remote server"] [line "-1"] [id "430017"] [msg "Malware.Expert - request_uri: Wordpress - prevent PHP files from executing"] [hostname "ampsstudio.com"] [uri "/wp-content/uploads/2021/12/fw.php"] [unique_id "YyzIO18Eq4sJy6ecrlFTkgAAAAg"] ampsstudio.com [Thu Sep 22 21:40:28 2022] [error] [client 20.123.80.100:0] [client 20.123.80.100] ModSecurity: Access denied with code 403 (phase 2). String match "/wso.php" at REQUEST_URI. [file "remote server"] [line "-1"] [id "570066"] [msg "Malware.Expert - PHP Command Shell (WSO)"] [hostname "ampsstudio.com"] [uri "/wp-includes/wso.php"] [unique_id "YyzIPN0hqPhwetel0QMX9QAAAAA"] ampsstudio.com [Thu Sep 22 21:40:28 2022] [error] [client 20.123.80.100:0] [client 20.123.80.100] ModSecurity: Access denied with code 403 (phase 2). String match "/wso.php" at REQUEST_URI. [file "remote server"] [line "-1"] [id "570066"] [msg "Malware.Expert - PHP Command Shell (WSO)"] [hostname "ampsstudio.com"] [uri "/wp-content/wso.php"] [unique_id "YyzIPBPi3nLkuWf0cOb_mgAAAAo"] ampsstudio.com [Thu Sep 22 21:40:28 2022] [error] [client 20.123.80.100:0] [client 20.123.80.100] ModSecurity: Access denied with code 403 (phase 2). String match "/wso.php" at REQUEST_URI. [file "remote server"] [line "-1"] [id "570066"] [msg "Malware.Expert - PHP Command Shell (WSO)"] [hostname "ampsstudio.com"] [uri "/wp-admin/wso.php"] [unique_id "YyzIPA6HpSKk11JugPaTIAAAAAQ"] ampsstudio.com [Thu Sep 22 21:40:32 2022] [error] [client 20.123.80.100:0] [client 20.123.80.100] ModSecurity: Access denied with code 403 (phase 2). String match "/shell.php" at REQUEST_URI. [file "remote server"] [line "-1"] [id "570072"] [msg "Malware.Expert - PHP Command Shell"] [hostname "ampsstudio.com"] [uri "/shell.php"] [unique_id "YyzIQF8Eq4sJy6ecrlFTkwAAAAg"] ampsstudio.com [Thu Sep 22 21:40:32 2022] [error] [client 20.123.80.100:0] [client 20.123.80.100] ModSecurity: Access denied with code 403 (phase 2). String match "connector.minimal.php" at REQUEST_URI. [file "remote server"] [line "-1"] [id "500083"] [msg "Malware.Expert - request_uri: 0-Day - Wordpress filemanager plugin"] [hostname "ampsstudio.com"] [uri "/wp-content/plugins/wp-file-manager/lib/php/connector.minimal.php"] [unique_id "YyzIQN0hqPhwetel0QMX9gAAAAA"] ampsstudio.com [Fri Sep 23 00:33:47 2022] [error] [client 20.123.80.100:0] [client 20.123.80.100] ModSecurity: Access denied with code 403 (phase 2). Pattern match "/wp-content/uploads/.*\\\\.php" at REQUEST_FILENAME. [file "remote server"] [line "-1"] [id "430017"] [msg "Malware.Expert - request_uri: Wordpress - prevent PHP files from executing"] [hostname "ampsstudio.com"] [uri "/wp-content/uploads/2021/12/up.php"] [unique_id "Yyzw2xPi3nLkuWf0cOb_1wAAAAo"] ampsstudio.com [Fri Sep 23 00:33:51 2022] [error] [client 20.123.80.100:0] [client 20.123.80.100] ModSecurity: Access denied with code 403 (phase 2). String match "python" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "580102"] [msg "Malware.Expert - Wordpress - unknown python request"] [hostname "ampsstudio.com"] [uri "/wp-admin/alfa.php"] [unique_id "Yyzw38EhR02e3dJFfnmtYQAAAAk"] ampsstudio.com [Fri Sep 23 00:33:53 2022] [error] [client 20.123.80.100:0] [client 20.123.80.100] ModSecurity: Access denied with code 403 (phase 2). String match "python" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "580100"] [msg "Malware.Expert - Wordpress - unknown python request"] [hostname "ampsstudio.com"] [uri "/wp-includes/fw.php"] [unique_id "Yyzw4RoeFN_RfNbcbUlfVgAAAAM"] ampsstudio.com [Fri Sep 23 00:33:53 2022] [error] [client 20.123.80.100:0] [client 20.123.80.100] ModSecurity: Access denied with code 403 (phase 2). String match "python" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "580101"] [msg "Malware.Expert - Wordpress - unknown python request"] [hostname "ampsstudio.com"] [uri "/wp-content/fw.php"] [unique_id "Yyzw4fDGGvvjRNhcjilySQAAAAE"] ampsstudio.com [Fri Sep 23 00:33:53 2022] [error] [client 20.123.80.100:0] [client 20.123.80.100] ModSecurity: Access denied with code 403 (phase 2). String match "python" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "580102"] [msg "Malware.Expert - Wordpress - unknown python request"] [hostname "ampsstudio.com"] [uri "/wp-admin/fw.php"] [unique_id "Yyzw4V8Eq4sJy6ecrlFT0gAAAAg"] ampsstudio.com [Fri Sep 23 00:33:53 2022] [error] [client 20.123.80.100:0] [client 20.123.80.100] ModSecurity: Access denied with code 403 (phase 2). Pattern match "/wp-content/uploads/.*\\\\.php" at REQUEST_FILENAME. [file "remote server"] [line "-1"] [id "430017"] [msg "Malware.Expert - request_uri: Wordpress - prevent PHP files from executing"] [hostname "ampsstudio.com"] [uri "/wp-content/uploads/2021/12/fw.php"] [unique_id "Yyzw4T9yLw4D8JYiPCRCpwAAAAw"] www.ampsstudio.com [Fri Sep 23 01:12:04 2022] [error] [client 206.217.136.211:0] AH01071: Got error 'PHP message: PHP Warning: Cannot modify header information - headers already sent by (output started at /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-includes/functions.php:5275) in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/includes/sonaar-music/css/theme/custom-style.php on line 2' ampsstudio.com [Fri Sep 23 01:44:28 2022] [error] [client 20.123.80.100:0] [client 20.123.80.100] ModSecurity: Access denied with code 403 (phase 2). Pattern match "/wp-content/uploads/.*\\\\.php" at REQUEST_FILENAME. [file "remote server"] [line "-1"] [id "430017"] [msg "Malware.Expert - request_uri: Wordpress - prevent PHP files from executing"] [hostname "ampsstudio.com"] [uri "/wp-content/uploads/2021/12/up.php"] [unique_id "Yy0BbAC-T5FoX2lzaCjWBwAAAAs"] ampsstudio.com [Fri Sep 23 01:44:33 2022] [error] [client 20.123.80.100:0] [client 20.123.80.100] ModSecurity: Access denied with code 403 (phase 2). String match "python" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "580102"] [msg "Malware.Expert - Wordpress - unknown python request"] [hostname "ampsstudio.com"] [uri "/wp-admin/alfa.php"] [unique_id "Yy0BcQP2ZbIKIHH4SlSVUQAAAAc"] ampsstudio.com [Fri Sep 23 01:44:35 2022] [error] [client 20.123.80.100:0] [client 20.123.80.100] ModSecurity: Access denied with code 403 (phase 2). String match "python" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "580100"] [msg "Malware.Expert - Wordpress - unknown python request"] [hostname "ampsstudio.com"] [uri "/wp-includes/fw.php"] [unique_id "Yy0Bc2tvUhTI1i3rfMBTiQAAAA0"] ampsstudio.com [Fri Sep 23 01:44:35 2022] [error] [client 20.123.80.100:0] [client 20.123.80.100] ModSecurity: Access denied with code 403 (phase 2). String match "python" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "580101"] [msg "Malware.Expert - Wordpress - unknown python request"] [hostname "ampsstudio.com"] [uri "/wp-content/fw.php"] [unique_id "Yy0Bc-g9b1eSvnrScDsDCAAAAAI"] ampsstudio.com [Fri Sep 23 01:44:35 2022] [error] [client 20.123.80.100:0] [client 20.123.80.100] ModSecurity: Access denied with code 403 (phase 2). String match "python" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "580102"] [msg "Malware.Expert - Wordpress - unknown python request"] [hostname "ampsstudio.com"] [uri "/wp-admin/fw.php"] [unique_id "Yy0Bc6_G3O75mPQwFM8vQgAAABA"] ampsstudio.com [Fri Sep 23 01:44:35 2022] [error] [client 20.123.80.100:0] [client 20.123.80.100] ModSecurity: Access denied with code 403 (phase 2). Pattern match "/wp-content/uploads/.*\\\\.php" at REQUEST_FILENAME. [file "remote server"] [line "-1"] [id "430017"] [msg "Malware.Expert - request_uri: Wordpress - prevent PHP files from executing"] [hostname "ampsstudio.com"] [uri "/wp-content/uploads/2021/12/fw.php"] [unique_id "Yy0Bcz9yLw4D8JYiPCRCwgAAAAw"] ampsstudio.com [Fri Sep 23 01:44:35 2022] [error] [client 20.123.80.100:0] [client 20.123.80.100] ModSecurity: Access denied with code 403 (phase 2). String match "/wso.php" at REQUEST_URI. [file "remote server"] [line "-1"] [id "570066"] [msg "Malware.Expert - PHP Command Shell (WSO)"] [hostname "ampsstudio.com"] [uri "/wp-includes/wso.php"] [unique_id "Yy0Bc18Eq4sJy6ecrlFT7AAAAAg"] ampsstudio.com [Fri Sep 23 01:44:35 2022] [error] [client 20.123.80.100:0] [client 20.123.80.100] ModSecurity: Access denied with code 403 (phase 2). String match "/wso.php" at REQUEST_URI. [file "remote server"] [line "-1"] [id "570066"] [msg "Malware.Expert - PHP Command Shell (WSO)"] [hostname "ampsstudio.com"] [uri "/wp-content/wso.php"] [unique_id "Yy0BcwP2ZbIKIHH4SlSVUgAAAAc"] ampsstudio.com [Fri Sep 23 01:44:35 2022] [error] [client 20.123.80.100:0] [client 20.123.80.100] ModSecurity: Access denied with code 403 (phase 2). String match "/wso.php" at REQUEST_URI. [file "remote server"] [line "-1"] [id "570066"] [msg "Malware.Expert - PHP Command Shell (WSO)"] [hostname "ampsstudio.com"] [uri "/wp-admin/wso.php"] [unique_id "Yy0BcwC-T5FoX2lzaCjWCQAAAAs"] ampsstudio.com [Fri Sep 23 01:44:39 2022] [error] [client 20.123.80.100:0] [client 20.123.80.100] ModSecurity: Access denied with code 403 (phase 2). String match "/shell.php" at REQUEST_URI. [file "remote server"] [line "-1"] [id "570072"] [msg "Malware.Expert - PHP Command Shell"] [hostname "ampsstudio.com"] [uri "/shell.php"] [unique_id "Yy0Bdz9yLw4D8JYiPCRCwwAAAAw"] ampsstudio.com [Fri Sep 23 01:44:39 2022] [error] [client 20.123.80.100:0] [client 20.123.80.100] ModSecurity: Access denied with code 403 (phase 2). String match "connector.minimal.php" at REQUEST_URI. [file "remote server"] [line "-1"] [id "500083"] [msg "Malware.Expert - request_uri: 0-Day - Wordpress filemanager plugin"] [hostname "ampsstudio.com"] [uri "/wp-content/plugins/wp-file-manager/lib/php/connector.minimal.php"] [unique_id "Yy0BdwP2ZbIKIHH4SlSVUwAAAAc"] www.ampsstudio.com [Fri Sep 23 01:59:55 2022] [error] [client 51.142.151.125:0] [client 51.142.151.125] ModSecurity: Access denied with code 403 (phase 1). Pattern match "\\\\.\\\\./\\\\.\\\\." at REQUEST_URI. [file "remote server"] [line "-1"] [id "430064"] [msg "Malware.Expert - request_uri: directory travel"] [hostname "www.ampsstudio.com"] [uri "/wp-admin/admin-post.php"] [unique_id "Yy0FC0tSPjMxzbD9U1mzuwAAAAU"] www.ampsstudio.com [Fri Sep 23 03:01:28 2022] [error] [client 185.243.218.46:0] AH01071: Got error 'PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179' www.ampsstudio.com [Fri Sep 23 03:01:28 2022] [error] [client 185.243.218.46:0] AH01071: Got error 'PHP message: PHP Warning: Cannot modify header information - headers already sent by (output started at /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-includes/functions.php:5275) in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/includes/sonaar-music/css/theme/custom-style.php on line 2' cpanel.ampsstudio.com [Fri Sep 23 05:22:54 2022] [error] [client 15.206.190.166:0] [client 15.206.190.166] ModSecurity: Access denied with code 403 (phase 2). String match "/.git/config" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430058"] [msg "Malware.Expert - request_uri: .git config"] [hostname "cpanel.ampsstudio.com"] [uri "/.git/config"] [unique_id "Yy00nkhNsMQjOg6QoS5R9QAAAAE"] ampsstudio.com [Fri Sep 23 05:39:45 2022] [error] [client 51.142.143.115:0] AH01276: Cannot serve directory /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-admin/css/: No matching DirectoryIndex (index.php,index.html,index.htm) found, and server-generated directory index forbidden by Options directive webdisk.ampsstudio.com [Fri Sep 23 05:43:33 2022] [error] [client 80.76.51.54:0] [client 80.76.51.54] ModSecurity: Access denied with code 403 (phase 2). String match "/.git/config" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430058"] [msg "Malware.Expert - request_uri: .git config"] [hostname "webdisk.ampsstudio.com"] [uri "/.git/config"] [unique_id "Yy05dUhNsMQjOg6QoS5R-gAAAAE"] www.ampsstudio.com [Fri Sep 23 06:50:26 2022] [error] [client 192.145.39.128:0] AH01071: Got error 'PHP message: PHP Warning: Cannot modify header information - headers already sent by (output started at /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-includes/functions.php:5275) in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/includes/sonaar-music/css/theme/custom-style.php on line 2' www.ampsstudio.com [Fri Sep 23 09:59:39 2022] [error] [client 191.101.31.45:0] AH01071: Got error 'PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179' www.ampsstudio.com [Fri Sep 23 09:59:39 2022] [error] [client 191.101.31.45:0] AH01071: Got error 'PHP message: PHP Warning: Cannot modify header information - headers already sent by (output started at /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-includes/functions.php:5275) in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/includes/sonaar-music/css/theme/custom-style.php on line 2' ampsstudio.com [Fri Sep 23 11:04:47 2022] [error] [client 5.188.62.134:0] [client 5.188.62.134] ModSecurity: Access denied with code 403 (phase 1). Pattern match "\\\\.\\\\./\\\\.\\\\." at REQUEST_URI. [file "remote server"] [line "-1"] [id "430064"] [msg "Malware.Expert - request_uri: directory travel"] [hostname "ampsstudio.com"] [uri "/wp-content/plugins/amministrazione-aperta/wpgov/dispatcher.php"] [unique_id "Yy2Ev80DJJvcZDfaVIOauAAAAAI"] www.ampsstudio.com [Fri Sep 23 11:15:06 2022] [error] [client 88.147.152.49:0] AH01071: Got error 'PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179' www.ampsstudio.com [Fri Sep 23 11:15:06 2022] [error] [client 88.147.152.49:0] AH01071: Got error 'PHP message: PHP Warning: Cannot modify header information - headers already sent by (output started at /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-includes/functions.php:5275) in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/includes/sonaar-music/css/theme/custom-style.php on line 2' ampsstudio.com [Fri Sep 23 11:43:14 2022] [error] [client 51.142.151.125:0] [client 51.142.151.125] ModSecurity: Access denied with code 403 (phase 1). Pattern match "\\\\.\\\\./\\\\.\\\\." at REQUEST_URI. [file "remote server"] [line "-1"] [id "430064"] [msg "Malware.Expert - request_uri: directory travel"] [hostname "ampsstudio.com"] [uri "/wp-admin/admin-post.php"] [unique_id "Yy2NwvXES5uv--Qi0Pt8tQAAAAQ"] cpanel.ampsstudio.com [Fri Sep 23 12:37:01 2022] [error] [client 41.216.188.45:0] AH01276: Cannot serve directory /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-admin/css/: No matching DirectoryIndex (index.php,index.html,index.htm) found, and server-generated directory index forbidden by Options directive ampsstudio.com [Fri Sep 23 14:28:09 2022] [error] [client 51.142.151.125:0] [client 51.142.151.125] ModSecurity: Access denied with code 403 (phase 1). Pattern match "\\\\.\\\\./\\\\.\\\\." at REQUEST_URI. [file "remote server"] [line "-1"] [id "430064"] [msg "Malware.Expert - request_uri: directory travel"] [hostname "ampsstudio.com"] [uri "/wp-admin/admin-post.php"] [unique_id "Yy20aWxMqO03SPJszju3dwAAAAU"] ampsstudio.com [Fri Sep 23 15:04:00 2022] [error] [client 212.16.164.132:0] [client 212.16.164.132] ModSecurity: Access denied with code 403 (phase 2). String match "xmlrpcs.php" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430050"] [msg "Malware.Expert - request_uri: PHP Fake wordpress xmlrpcs.php"] [hostname "ampsstudio.com"] [uri "/wp-includes/ID3/xmlrpcs.php"] [unique_id "Yy280DRR115FPaUat322DAAAAAY"] www.ampsstudio.com [Fri Sep 23 16:27:23 2022] [error] [client 5.227.27.161:0] AH01071: Got error 'PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179' www.ampsstudio.com [Fri Sep 23 16:27:23 2022] [error] [client 5.227.27.161:0] AH01071: Got error 'PHP message: PHP Warning: Cannot modify header information - headers already sent by (output started at /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-includes/functions.php:5275) in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/includes/sonaar-music/css/theme/custom-style.php on line 2' www.ampsstudio.com [Fri Sep 23 17:08:18 2022] [error] [client 51.11.6.150:0] AH01071: Got error 'PHP message: PHP Warning: Undefined array key "HTTP_USER_AGENT" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/bookly-responsive-appointment-booking-tool/frontend/modules/booking/ShortCode.php on line 66' www.ampsstudio.com [Fri Sep 23 19:53:49 2022] [error] [client 17.121.115.185:0] AH01071: Got error 'PHP message: PHP Warning: Undefined array key "block" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/includes/classes/iron_sonaar.class.php on line 212PHP message: PHP Warning: Trying to access array offset on value of type null in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/includes/classes/iron_sonaar.class.php on line 212PHP message: PHP Warning: Undefined array key "block" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/includes/classes/iron_sonaar.class.php on line 214PHP message: PHP Warning: Trying to access array offset on value of type null in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/includes/classes/iron_sonaar.class.php on line 214' ampsstudio.com [Fri Sep 23 20:44:15 2022] [error] [client 173.212.218.124:0] [client 173.212.218.124] ModSecurity: Access denied with code 403 (phase 2). String match "/Util/PHP/eval-stdin.php" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430046"] [msg "Malware.Expert - request_uri: CVE-2017-9841"] [hostname "ampsstudio.com"] [uri "/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php"] [unique_id "Yy4Mj7ujmVu2MzOp95gIeAAAAAI"] www.ampsstudio.com [Fri Sep 23 22:18:45 2022] [error] [client 173.254.29.83:0] AH01071: Got error 'PHP message: PHP Warning: Undefined array key "HTTP_USER_AGENT" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/bookly-responsive-appointment-booking-tool/frontend/modules/booking/ShortCode.php on line 66' webmail.ampsstudio.com [Fri Sep 23 23:19:02 2022] [error] [client 15.206.190.166:0] [client 15.206.190.166] ModSecurity: Access denied with code 403 (phase 2). String match "/.git/config" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430058"] [msg "Malware.Expert - request_uri: .git config"] [hostname "webmail.ampsstudio.com"] [uri "/.git/config"] [unique_id "Yy4w1tWI3sZRl7eiFQ6tQwAAAAc"] ampsstudio.com [Fri Sep 23 23:20:10 2022] [error] [client 20.224.155.196:0] [client 20.224.155.196] ModSecurity: Access denied with code 403 (phase 2). String match "/.git/config" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430058"] [msg "Malware.Expert - request_uri: .git config"] [hostname "ampsstudio.com"] [uri "/.git/config"] [unique_id "Yy4xGmcoB6aQAMgyMYKRyQAAAAo"] ampsstudio.com [Fri Sep 23 23:53:32 2022] [error] [client 13.90.194.70:0] [client 13.90.194.70] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "ampsstudio.com"] [uri "/.env"] [unique_id "Yy447KRaEXVx6A90bT7B6QAAAAg"] ampsstudio.com [Sat Sep 24 00:01:10 2022] [error] [client 13.90.194.70:0] [client 13.90.194.70] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "ampsstudio.com"] [uri "/.env"] [unique_id "Yy46tjv6p2n2X9Y7fIYHrAAAAAk"] ampsstudio.com [Sat Sep 24 00:08:46 2022] [error] [client 13.90.194.70:0] [client 13.90.194.70] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "ampsstudio.com"] [uri "/.env"] [unique_id "Yy48fvVsCMZGfUG_r8c0AwAAAAQ"] www.ampsstudio.com [Sat Sep 24 00:11:00 2022] [error] [client 15.206.190.166:0] [client 15.206.190.166] ModSecurity: Access denied with code 403 (phase 2). String match "/.git/config" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430058"] [msg "Malware.Expert - request_uri: .git config"] [hostname "www.ampsstudio.com"] [uri "/.git/config"] [unique_id "Yy49BNWI3sZRl7eiFQ6tWQAAAAc"] ampsstudio.com [Sat Sep 24 00:14:43 2022] [error] [client 13.90.194.70:0] [client 13.90.194.70] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "ampsstudio.com"] [uri "/.env"] [unique_id "Yy4942coB6aQAMgyMYKR3wAAAAo"] ampsstudio.com [Sat Sep 24 00:22:19 2022] [error] [client 13.90.194.70:0] [client 13.90.194.70] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "ampsstudio.com"] [uri "/.env"] [unique_id "Yy4_q9WI3sZRl7eiFQ6tXQAAAAc"] www.ampsstudio.com [Sat Sep 24 05:02:25 2022] [error] [client 109.70.100.87:0] AH01071: Got error 'PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179' www.ampsstudio.com [Sat Sep 24 05:02:25 2022] [error] [client 109.70.100.87:0] AH01071: Got error 'PHP message: PHP Warning: Cannot modify header information - headers already sent by (output started at /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-includes/functions.php:5275) in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/includes/sonaar-music/css/theme/custom-style.php on line 2' ampsstudio.com [Sat Sep 24 05:39:07 2022] [error] [client 20.235.107.103:0] AH01276: Cannot serve directory /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-admin/css/: No matching DirectoryIndex (index.php,index.html,index.htm) found, and server-generated directory index forbidden by Options directive www.ampsstudio.com [Sat Sep 24 08:32:36 2022] [error] [client 156.146.63.153:0] AH01071: Got error 'PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179' www.ampsstudio.com [Sat Sep 24 08:32:36 2022] [error] [client 156.146.63.153:0] AH01071: Got error 'PHP message: PHP Warning: Cannot modify header information - headers already sent by (output started at /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-includes/functions.php:5275) in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/includes/sonaar-music/css/theme/custom-style.php on line 2' www.ampsstudio.com [Sat Sep 24 10:42:32 2022] [error] [client 51.142.151.125:0] AH01276: Cannot serve directory /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-admin/css/: No matching DirectoryIndex (index.php,index.html,index.htm) found, and server-generated directory index forbidden by Options directive www.ampsstudio.com [Sat Sep 24 11:01:01 2022] [error] [client 51.11.6.150:0] AH01071: Got error 'PHP message: PHP Warning: Undefined array key "HTTP_USER_AGENT" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/bookly-responsive-appointment-booking-tool/frontend/modules/booking/ShortCode.php on line 66' www.ampsstudio.com [Sat Sep 24 11:14:37 2022] [error] [client 89.22.237.107:0] AH01071: Got error 'PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179' www.ampsstudio.com [Sat Sep 24 11:14:37 2022] [error] [client 89.22.237.107:0] AH01071: Got error 'PHP message: PHP Warning: Cannot modify header information - headers already sent by (output started at /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-includes/functions.php:5275) in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/includes/sonaar-music/css/theme/custom-style.php on line 2' webdisk.ampsstudio.com [Sat Sep 24 11:49:20 2022] [error] [client 51.142.158.91:0] AH01276: Cannot serve directory /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-admin/css/: No matching DirectoryIndex (index.php,index.html,index.htm) found, and server-generated directory index forbidden by Options directive ampsstudio.com [Sat Sep 24 12:15:36 2022] [error] [client 51.142.151.125:0] AH01276: Cannot serve directory /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-admin/css/: No matching DirectoryIndex (index.php,index.html,index.htm) found, and server-generated directory index forbidden by Options directive www.ampsstudio.com [Sat Sep 24 14:21:13 2022] [error] [client 41.216.188.218:0] [client 41.216.188.218] ModSecurity: Access denied with code 403 (phase 1). Pattern match "\\\\.\\\\./\\\\.\\\\." at REQUEST_URI. [file "remote server"] [line "-1"] [id "430064"] [msg "Malware.Expert - request_uri: directory travel"] [hostname "www.ampsstudio.com"] [uri "/wp-admin/admin-post.php"] [unique_id "Yy8EScO77mN_DzsJZ6rZLAAAAAI"] webmail.ampsstudio.com [Sat Sep 24 15:04:11 2022] [error] [client 51.142.158.91:0] AH01276: Cannot serve directory /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-admin/css/: No matching DirectoryIndex (index.php,index.html,index.htm) found, and server-generated directory index forbidden by Options directive ampsstudio.com [Sat Sep 24 16:46:17 2022] [error] [client 173.212.218.124:0] [client 173.212.218.124] ModSecurity: Access denied with code 403 (phase 2). String match "/Util/PHP/eval-stdin.php" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430046"] [msg "Malware.Expert - request_uri: CVE-2017-9841"] [hostname "ampsstudio.com"] [uri "/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php"] [unique_id "Yy8mSZn94_uOCeeaD3D3sQAAAAk"] ampsstudio.com [Sat Sep 24 17:29:35 2022] [error] [client 147.78.47.249:0] [client 147.78.47.249] ModSecurity: Access denied with code 403 (phase 2). String match "connector.minimal.php" at REQUEST_URI. [file "remote server"] [line "-1"] [id "500083"] [msg "Malware.Expert - request_uri: 0-Day - Wordpress filemanager plugin"] [hostname "ampsstudio.com"] [uri "/wp-content/plugins/wp-file-manager/lib/php/connector.minimal.php"] [unique_id "Yy8wb2_z0UtWoNSei0xKWgAAAAg"] ampsstudio.com [Sat Sep 24 17:53:54 2022] [error] [client 5.188.62.134:0] [client 5.188.62.134] ModSecurity: Access denied with code 403 (phase 1). Pattern match "\\\\.\\\\./\\\\.\\\\." at REQUEST_URI. [file "remote server"] [line "-1"] [id "430064"] [msg "Malware.Expert - request_uri: directory travel"] [hostname "ampsstudio.com"] [uri "/wp-content/plugins/aspose-cloud-ebook-generator/aspose_posts_exporter_download.php"] [unique_id "Yy82IjA1ESsEIcMT9oijNQAAAAo"] ampsstudio.com [Sat Sep 24 20:23:33 2022] [error] [client 51.142.158.91:0] AH01276: Cannot serve directory /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-admin/css/: No matching DirectoryIndex (index.php,index.html,index.htm) found, and server-generated directory index forbidden by Options directive ampsstudio.com [Sat Sep 24 20:27:45 2022] [error] [client 41.216.188.218:0] [client 41.216.188.218] ModSecurity: Access denied with code 403 (phase 1). Pattern match "\\\\.\\\\./\\\\.\\\\." at REQUEST_URI. [file "remote server"] [line "-1"] [id "430064"] [msg "Malware.Expert - request_uri: directory travel"] [hostname "ampsstudio.com"] [uri "/wp-admin/admin-post.php"] [unique_id "Yy9aMcO77mN_DzsJZ6rZywAAAAI"] www.ampsstudio.com [Sat Sep 24 22:34:13 2022] [error] [client 109.248.175.66:0] [client 109.248.175.66] ModSecurity: Access denied with code 403 (phase 2). Pattern match "/wp-config\\\\.php" at QUERY_STRING. [file "remote server"] [line "-1"] [id "410018"] [msg "Malware.Expert - query_string: unwanted wordpress config access"] [hostname "www.ampsstudio.com"] [uri "/wp-admin/admin-ajax.php"] [unique_id "Yy931UwnavDPC6eQJAWcngAAAAE"] ampsstudio.com [Sat Sep 24 22:47:22 2022] [error] [client 41.216.188.218:0] [client 41.216.188.218] ModSecurity: Access denied with code 403 (phase 1). Pattern match "\\\\.\\\\./\\\\.\\\\." at REQUEST_URI. [file "remote server"] [line "-1"] [id "430064"] [msg "Malware.Expert - request_uri: directory travel"] [hostname "ampsstudio.com"] [uri "/wp-admin/admin-post.php"] [unique_id "Yy966kwnavDPC6eQJAWcogAAAAE"] www.ampsstudio.com [Sun Sep 25 00:12:16 2022] [error] [client 5.44.174.110:0] AH01071: Got error 'PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179' www.ampsstudio.com [Sun Sep 25 00:12:16 2022] [error] [client 5.44.174.110:0] AH01071: Got error 'PHP message: PHP Warning: Cannot modify header information - headers already sent by (output started at /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-includes/functions.php:5275) in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/includes/sonaar-music/css/theme/custom-style.php on line 2' ampsstudio.com [Sun Sep 25 02:05:30 2022] [error] [client 157.230.180.72:0] [client 157.230.180.72] ModSecurity: Access denied with code 403 (phase 2). String match "/wp-admin/install.php" at REQUEST_URI. [file "remote server"] [line "-1"] [id "570074"] [msg "Malware.Expert - Malware"] [hostname "ampsstudio.com"] [uri "/wp-admin/install.php"] [unique_id "Yy-pWodmPC3lXpbwOEe6fgAAABI"] ampsstudio.com [Sun Sep 25 02:05:30 2022] [error] [client 157.230.180.72:0] [client 157.230.180.72] ModSecurity: Access denied with code 403 (phase 2). String match "/wp-admin/install.php" at REQUEST_URI. [file "remote server"] [line "-1"] [id "570074"] [msg "Malware.Expert - Malware"] [hostname "ampsstudio.com"] [uri "/wp/wp-admin/install.php"] [unique_id "Yy-pWkwnavDPC6eQJAWc_gAAAAE"] ampsstudio.com [Sun Sep 25 02:05:31 2022] [error] [client 157.230.180.72:0] [client 157.230.180.72] ModSecurity: Access denied with code 403 (phase 2). String match "/wp-admin/install.php" at REQUEST_URI. [file "remote server"] [line "-1"] [id "570074"] [msg "Malware.Expert - Malware"] [hostname "ampsstudio.com"] [uri "/new/wp-admin/install.php"] [unique_id "Yy-pW5n94_uOCeeaD3D4yQAAAAk"] ampsstudio.com [Sun Sep 25 02:05:31 2022] [error] [client 157.230.180.72:0] [client 157.230.180.72] ModSecurity: Access denied with code 403 (phase 2). String match "/wp-admin/install.php" at REQUEST_URI. [file "remote server"] [line "-1"] [id "570074"] [msg "Malware.Expert - Malware"] [hostname "ampsstudio.com"] [uri "/old/wp-admin/install.php"] [unique_id "Yy-pWx73-I4cPSXJ40M1bAAAAAA"] ampsstudio.com [Sun Sep 25 02:05:32 2022] [error] [client 157.230.180.72:0] [client 157.230.180.72] ModSecurity: Access denied with code 403 (phase 2). String match "/wp-admin/install.php" at REQUEST_URI. [file "remote server"] [line "-1"] [id "570074"] [msg "Malware.Expert - Malware"] [hostname "ampsstudio.com"] [uri "/wordpress/wp-admin/install.php"] [unique_id "Yy-pXALwL80o-2_2QT9hfwAAAAw"] ampsstudio.com [Sun Sep 25 02:05:33 2022] [error] [client 157.230.180.72:0] [client 157.230.180.72] ModSecurity: Access denied with code 403 (phase 2). String match "/wp-admin/install.php" at REQUEST_URI. [file "remote server"] [line "-1"] [id "570074"] [msg "Malware.Expert - Malware"] [hostname "ampsstudio.com"] [uri "/test/wp-admin/install.php"] [unique_id "Yy-pXUE5xKTm8mntxjevvgAAABA"] ampsstudio.com [Sun Sep 25 02:05:33 2022] [error] [client 157.230.180.72:0] [client 157.230.180.72] ModSecurity: Access denied with code 403 (phase 2). String match "/wp-admin/install.php" at REQUEST_URI. [file "remote server"] [line "-1"] [id "570074"] [msg "Malware.Expert - Malware"] [hostname "ampsstudio.com"] [uri "/blog/wp-admin/install.php"] [unique_id "Yy-pXaoxGokkrhpoSa9wwAAAAA0"] ampsstudio.com [Sun Sep 25 02:05:34 2022] [error] [client 157.230.180.72:0] [client 157.230.180.72] ModSecurity: Access denied with code 403 (phase 2). String match "/wp-admin/install.php" at REQUEST_URI. [file "remote server"] [line "-1"] [id "570074"] [msg "Malware.Expert - Malware"] [hostname "ampsstudio.com"] [uri "/cms/wp-admin/install.php"] [unique_id "Yy-pXm_CZg9J4EzQl3tNowAAAAQ"] ampsstudio.com [Sun Sep 25 02:05:34 2022] [error] [client 157.230.180.72:0] [client 157.230.180.72] ModSecurity: Access denied with code 403 (phase 2). String match "/wp-admin/install.php" at REQUEST_URI. [file "remote server"] [line "-1"] [id "570074"] [msg "Malware.Expert - Malware"] [hostname "ampsstudio.com"] [uri "/web/wp-admin/install.php"] [unique_id "Yy-pXm_z0UtWoNSei0xLTwAAAAg"] ampsstudio.com [Sun Sep 25 02:05:35 2022] [error] [client 157.230.180.72:0] [client 157.230.180.72] ModSecurity: Access denied with code 403 (phase 2). String match "/wp-admin/install.php" at REQUEST_URI. [file "remote server"] [line "-1"] [id "570074"] [msg "Malware.Expert - Malware"] [hostname "ampsstudio.com"] [uri "/backup/wp-admin/install.php"] [unique_id "Yy-pX8O77mN_DzsJZ6radgAAAAI"] ampsstudio.com [Sun Sep 25 02:05:36 2022] [error] [client 157.230.180.72:0] [client 157.230.180.72] ModSecurity: Access denied with code 403 (phase 2). String match "/wp-admin/install.php" at REQUEST_URI. [file "remote server"] [line "-1"] [id "570074"] [msg "Malware.Expert - Malware"] [hostname "ampsstudio.com"] [uri "/site/wp-admin/install.php"] [unique_id "Yy-pYIdmPC3lXpbwOEe6fwAAABI"] ampsstudio.com [Sun Sep 25 02:05:36 2022] [error] [client 157.230.180.72:0] [client 157.230.180.72] ModSecurity: Access denied with code 403 (phase 2). String match "/wp-admin/install.php" at REQUEST_URI. [file "remote server"] [line "-1"] [id "570074"] [msg "Malware.Expert - Malware"] [hostname "ampsstudio.com"] [uri "/oldsite/wp-admin/install.php"] [unique_id "Yy-pYEwnavDPC6eQJAWc_wAAAAE"] cpanel.ampsstudio.com [Sun Sep 25 02:19:02 2022] [error] [client 51.142.158.91:0] AH01276: Cannot serve directory /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-admin/css/: No matching DirectoryIndex (index.php,index.html,index.htm) found, and server-generated directory index forbidden by Options directive www.ampsstudio.com [Sun Sep 25 02:20:20 2022] [error] [client 185.220.101.60:0] AH01071: Got error 'PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179' www.ampsstudio.com [Sun Sep 25 02:20:20 2022] [error] [client 185.220.101.60:0] AH01071: Got error 'PHP message: PHP Warning: Cannot modify header information - headers already sent by (output started at /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-includes/functions.php:5275) in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/includes/sonaar-music/css/theme/custom-style.php on line 2' www.ampsstudio.com [Sun Sep 25 04:55:36 2022] [error] [client 91.232.158.75:0] AH01071: Got error 'PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179' www.ampsstudio.com [Sun Sep 25 04:55:36 2022] [error] [client 91.232.158.75:0] AH01071: Got error 'PHP message: PHP Warning: Cannot modify header information - headers already sent by (output started at /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-includes/functions.php:5275) in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/includes/sonaar-music/css/theme/custom-style.php on line 2' www.ampsstudio.com [Sun Sep 25 05:18:26 2022] [error] [client 178.168.193.25:0] AH01071: Got error 'PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179' www.ampsstudio.com [Sun Sep 25 05:18:26 2022] [error] [client 178.168.193.25:0] AH01071: Got error 'PHP message: PHP Warning: Cannot modify header information - headers already sent by (output started at /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-includes/functions.php:5275) in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/includes/sonaar-music/css/theme/custom-style.php on line 2' www.ampsstudio.com [Sun Sep 25 05:22:21 2022] [error] [client 172.94.13.223:0] AH01071: Got error 'PHP message: PHP Warning: Cannot modify header information - headers already sent by (output started at /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-includes/functions.php:5275) in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/includes/sonaar-music/css/theme/custom-style.php on line 2' ampsstudio.com [Sun Sep 25 08:34:36 2022] [error] [client 41.216.188.218:0] [client 41.216.188.218] ModSecurity: Access denied with code 403 (phase 1). Pattern match "\\\\.\\\\./\\\\.\\\\." at REQUEST_URI. [file "remote server"] [line "-1"] [id "430064"] [msg "Malware.Expert - request_uri: directory travel"] [hostname "ampsstudio.com"] [uri "/wp-admin/admin-post.php"] [unique_id "YzAEjN1_acEveTA3AumbBwAAAAk"] ampsstudio.com [Sun Sep 25 11:31:48 2022] [error] [client 104.209.217.119:0] [client 104.209.217.119] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "ampsstudio.com"] [uri "/.env"] [unique_id "YzAuFK6GPaAQxd8HLtEoJwAAAAM"] www.ampsstudio.com [Sun Sep 25 14:25:12 2022] [error] [client 139.59.238.249:0] AH01071: Got error 'PHP message: PHP Warning: Undefined array key "HTTP_USER_AGENT" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/bookly-responsive-appointment-booking-tool/frontend/modules/booking/ShortCode.php on line 66' mail.ampsstudio.com [Sun Sep 25 15:21:36 2022] [error] [client 194.26.229.150:0] [client 194.26.229.150] ModSecurity: Access denied with code 403 (phase 2). String match "/.git/config" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430058"] [msg "Malware.Expert - request_uri: .git config"] [hostname "mail.ampsstudio.com"] [uri "/.git/config"] [unique_id "YzBj7-zGsZ6PzeC7DwTDBwAAAAg"] ampsstudio.com [Sun Sep 25 19:41:56 2022] [error] [client 80.76.51.29:0] [client 80.76.51.29] ModSecurity: Access denied with code 403 (phase 2). Match of "contains index.php" against "REQUEST_URI" required. [file "remote server"] [line "-1"] [id "570076"] [msg "Malware.Expert - Malware"] [hostname "ampsstudio.com"] [uri "/wp-includes/shell20211028.php"] [unique_id "YzCg8yyz3itUK9Hu6kKiEwAAAAo"] ampsstudio.com [Sun Sep 25 19:42:04 2022] [error] [client 80.76.51.29:0] [client 80.76.51.29] ModSecurity: Access denied with code 403 (phase 2). Match of "contains index.php" against "REQUEST_URI" required. [file "remote server"] [line "-1"] [id "570076"] [msg "Malware.Expert - Malware"] [hostname "ampsstudio.com"] [uri "/wp-includes/shell20211028.php"] [unique_id "YzCg_OzGsZ6PzeC7DwTDYQAAAAg"] www.ampsstudio.com [Sun Sep 25 20:19:44 2022] [error] [client 185.231.244.195:0] AH01071: Got error 'PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179' www.ampsstudio.com [Sun Sep 25 20:19:44 2022] [error] [client 185.231.244.195:0] AH01071: Got error 'PHP message: PHP Warning: Cannot modify header information - headers already sent by (output started at /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-includes/functions.php:5275) in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/includes/sonaar-music/css/theme/custom-style.php on line 2' ampsstudio.com [Sun Sep 25 22:22:48 2022] [error] [client 13.80.175.19:0] [client 13.80.175.19] ModSecurity: Access denied with code 403 (phase 2). String match "/.git/config" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430058"] [msg "Malware.Expert - request_uri: .git config"] [hostname "ampsstudio.com"] [uri "/.git/config"] [unique_id "YzDGqDCrK8kT_6Dv21LVsAAAAAI"] ampsstudio.com [Sun Sep 25 22:23:40 2022] [error] [client 5.188.62.134:0] [client 5.188.62.134] ModSecurity: Access denied with code 403 (phase 1). Pattern match "\\\\.\\\\./\\\\.\\\\." at REQUEST_URI. [file "remote server"] [line "-1"] [id "430064"] [msg "Malware.Expert - request_uri: directory travel"] [hostname "ampsstudio.com"] [uri "/wp-content/plugins/aspose-importer-exporter/aspose_import_export_download"] [unique_id "YzDG3AWbHN3_RkWc8eEbcAAAAAU"] ampsstudio.com [Sun Sep 25 23:05:08 2022] [error] [client 41.216.188.218:0] [client 41.216.188.218] ModSecurity: Access denied with code 403 (phase 1). Pattern match "\\\\.\\\\./\\\\.\\\\." at REQUEST_URI. [file "remote server"] [line "-1"] [id "430064"] [msg "Malware.Expert - request_uri: directory travel"] [hostname "ampsstudio.com"] [uri "/wp-admin/admin-post.php"] [unique_id "YzDQlIRbvCqjs_FYuohBwgAAAAE"] www.ampsstudio.com [Mon Sep 26 01:48:56 2022] [error] [client 23.105.145.23:0] AH01071: Got error 'PHP message: PHP Warning: Cannot modify header information - headers already sent by (output started at /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-includes/functions.php:5275) in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/includes/sonaar-music/css/theme/custom-style.php on line 2' www.ampsstudio.com [Mon Sep 26 02:02:05 2022] [error] [client 20.199.113.4:0] [client 20.199.113.4] ModSecurity: Access denied with code 403 (phase 2). String match "/Util/PHP/eval-stdin.php" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430046"] [msg "Malware.Expert - request_uri: CVE-2017-9841"] [hostname "www.ampsstudio.com"] [uri "/wp-content/plugins/indeed-membership-pro/classes/PaymentGateways/mollie/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php"] [unique_id "YzD6DfwQPtsSuQxqQLPgrQAAAAQ"] www.ampsstudio.com [Mon Sep 26 03:04:45 2022] [error] [client 20.24.21.64:0] AH01276: Cannot serve directory /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-admin/css/: No matching DirectoryIndex (index.php,index.html,index.htm) found, and server-generated directory index forbidden by Options directive www.ampsstudio.com [Mon Sep 26 05:28:34 2022] [error] [client 5.228.32.101:0] AH01071: Got error 'PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179' www.ampsstudio.com [Mon Sep 26 05:28:34 2022] [error] [client 5.228.32.101:0] AH01071: Got error 'PHP message: PHP Warning: Cannot modify header information - headers already sent by (output started at /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-includes/functions.php:5275) in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/includes/sonaar-music/css/theme/custom-style.php on line 2' www.ampsstudio.com [Mon Sep 26 06:03:09 2022] [error] [client 161.117.10.46:0] AH01071: Got error 'PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179' www.ampsstudio.com [Mon Sep 26 06:03:09 2022] [error] [client 161.117.10.46:0] AH01071: Got error 'PHP message: PHP Warning: Cannot modify header information - headers already sent by (output started at /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-includes/functions.php:5275) in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/includes/sonaar-music/css/theme/custom-style.php on line 2' www.ampsstudio.com [Mon Sep 26 08:04:38 2022] [error] [client 91.218.219.246:0] AH01071: Got error 'PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179' www.ampsstudio.com [Mon Sep 26 08:04:38 2022] [error] [client 91.218.219.246:0] AH01071: Got error 'PHP message: PHP Warning: Cannot modify header information - headers already sent by (output started at /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-includes/functions.php:5275) in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/includes/sonaar-music/css/theme/custom-style.php on line 2' www.ampsstudio.com [Mon Sep 26 14:31:15 2022] [error] [client 195.176.3.24:0] AH01071: Got error 'PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179' www.ampsstudio.com [Mon Sep 26 14:31:15 2022] [error] [client 195.176.3.24:0] AH01071: Got error 'PHP message: PHP Warning: Cannot modify header information - headers already sent by (output started at /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-includes/functions.php:5275) in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/includes/sonaar-music/css/theme/custom-style.php on line 2' ampsstudio.com [Mon Sep 26 15:03:55 2022] [error] [client 80.76.51.29:0] [client 80.76.51.29] ModSecurity: Access denied with code 403 (phase 2). Match of "contains index.php" against "REQUEST_URI" required. [file "remote server"] [line "-1"] [id "570076"] [msg "Malware.Expert - Malware"] [hostname "ampsstudio.com"] [uri "/wp-content/themes/seotheme/mar.php"] [unique_id "YzGxSyDLUQ00UhZhcnIMSwAAAAg"] www.ampsstudio.com [Mon Sep 26 16:04:56 2022] [error] [client 91.232.110.40:0] AH01071: Got error 'PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179' www.ampsstudio.com [Mon Sep 26 16:04:56 2022] [error] [client 91.232.110.40:0] AH01071: Got error 'PHP message: PHP Warning: Cannot modify header information - headers already sent by (output started at /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-includes/functions.php:5275) in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/includes/sonaar-music/css/theme/custom-style.php on line 2' www.ampsstudio.com [Mon Sep 26 16:17:06 2022] [error] [client 217.146.2.41:0] AH01071: Got error 'PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179' www.ampsstudio.com [Mon Sep 26 16:17:06 2022] [error] [client 217.146.2.41:0] AH01071: Got error 'PHP message: PHP Warning: Cannot modify header information - headers already sent by (output started at /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-includes/functions.php:5275) in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/includes/sonaar-music/css/theme/custom-style.php on line 2' www.ampsstudio.com [Mon Sep 26 17:07:51 2022] [error] [client 178.159.37.4:0] AH01071: Got error 'PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179' www.ampsstudio.com [Mon Sep 26 17:07:51 2022] [error] [client 178.159.37.4:0] AH01071: Got error 'PHP message: PHP Warning: Cannot modify header information - headers already sent by (output started at /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-includes/functions.php:5275) in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/includes/sonaar-music/css/theme/custom-style.php on line 2' www.ampsstudio.com [Mon Sep 26 18:06:26 2022] [error] [client 51.83.131.42:0] AH01071: Got error 'PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179' www.ampsstudio.com [Mon Sep 26 18:06:26 2022] [error] [client 51.83.131.42:0] AH01071: Got error 'PHP message: PHP Warning: Cannot modify header information - headers already sent by (output started at /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-includes/functions.php:5275) in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/includes/sonaar-music/css/theme/custom-style.php on line 2' ampsstudio.com [Mon Sep 26 19:26:59 2022] [error] [client 18.157.74.190:0] [client 18.157.74.190] ModSecurity: Access denied with code 403 (phase 2). String match "/.git/config" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430058"] [msg "Malware.Expert - request_uri: .git config"] [hostname "ampsstudio.com"] [uri "/.git/config"] [unique_id "YzHu80M3Sbrv1lFWee61_wAAABE"] www.ampsstudio.com [Mon Sep 26 23:11:11 2022] [error] [client 46.148.206.226:0] AH01071: Got error 'PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179' www.ampsstudio.com [Mon Sep 26 23:11:11 2022] [error] [client 46.148.206.226:0] AH01071: Got error 'PHP message: PHP Warning: Cannot modify header information - headers already sent by (output started at /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-includes/functions.php:5275) in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/includes/sonaar-music/css/theme/custom-style.php on line 2' www.ampsstudio.com [Tue Sep 27 01:10:17 2022] [error] [client 54.176.208.90:0] [client 54.176.208.90] ModSecurity: Access denied with code 403 (phase 2). String match "/.git/config" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430058"] [msg "Malware.Expert - request_uri: .git config"] [hostname "www.ampsstudio.com"] [uri "/.git/config"] [unique_id "YzI_aXFC12v47PWKeNIN_QAAAAs"] webmail.ampsstudio.com [Tue Sep 27 02:38:38 2022] [error] [client 54.176.208.90:0] [client 54.176.208.90] ModSecurity: Access denied with code 403 (phase 2). String match "/.git/config" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430058"] [msg "Malware.Expert - request_uri: .git config"] [hostname "webmail.ampsstudio.com"] [uri "/.git/config"] [unique_id "YzJUHsiP3cYrrDDvJHzUWQAAAAM"] www.ampsstudio.com [Tue Sep 27 03:01:20 2022] [error] [client 213.202.223.95:0] AH01071: Got error 'PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179' www.ampsstudio.com [Tue Sep 27 03:01:20 2022] [error] [client 213.202.223.95:0] AH01071: Got error 'PHP message: PHP Warning: Cannot modify header information - headers already sent by (output started at /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-includes/functions.php:5275) in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/includes/sonaar-music/css/theme/custom-style.php on line 2' ampsstudio.com [Tue Sep 27 03:06:53 2022] [error] [client 5.188.62.134:0] [client 5.188.62.134] ModSecurity: Access denied with code 403 (phase 1). Pattern match "\\\\.\\\\./\\\\.\\\\." at REQUEST_URI. [file "remote server"] [line "-1"] [id "430064"] [msg "Malware.Expert - request_uri: directory travel"] [hostname "ampsstudio.com"] [uri "/wp-content/plugins/Wordpress/Aaspose-pdf-exporter/aspose_pdf_exporter_download.php"] [unique_id "YzJavffnmGWvh9U_Llej1wAAAAQ"] webdisk.ampsstudio.com [Tue Sep 27 03:14:10 2022] [error] [client 35.87.186.223:0] [client 35.87.186.223] ModSecurity: Access denied with code 403 (phase 2). String match "/.git/config" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430058"] [msg "Malware.Expert - request_uri: .git config"] [hostname "webdisk.ampsstudio.com"] [uri "/.git/config"] [unique_id "YzJccnFC12v47PWKeNIOQwAAAAs"] webdisk.ampsstudio.com [Tue Sep 27 03:14:35 2022] [error] [client 35.87.186.223:0] [client 35.87.186.223] ModSecurity: Access denied with code 403 (phase 2). String match "/.git/config" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430058"] [msg "Malware.Expert - request_uri: .git config"] [hostname "webdisk.ampsstudio.com"] [uri "/.git/config"] [unique_id "YzJci_fnmGWvh9U_Llej2gAAAAQ"] www.ampsstudio.com [Tue Sep 27 03:50:44 2022] [error] [client 66.249.66.55:0] AH01071: Got error 'PHP message: PHP Warning: Undefined array key "block" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/includes/classes/iron_sonaar.class.php on line 212PHP message: PHP Warning: Trying to access array offset on value of type null in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/includes/classes/iron_sonaar.class.php on line 212PHP message: PHP Warning: Undefined array key "block" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/includes/classes/iron_sonaar.class.php on line 214PHP message: PHP Warning: Trying to access array offset on value of type null in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/includes/classes/iron_sonaar.class.php on line 214' mail.ampsstudio.com [Tue Sep 27 05:13:21 2022] [error] [client 54.176.208.90:0] [client 54.176.208.90] ModSecurity: Access denied with code 403 (phase 2). String match "/.git/config" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430058"] [msg "Malware.Expert - request_uri: .git config"] [hostname "mail.ampsstudio.com"] [uri "/.git/config"] [unique_id "YzJ4YeJhc0Tb44NayviCigAAAAA"] ampsstudio.com [Tue Sep 27 06:31:08 2022] [error] [client 80.76.51.29:0] [client 80.76.51.29] ModSecurity: Access denied with code 403 (phase 2). Match of "contains index.php" against "REQUEST_URI" required. [file "remote server"] [line "-1"] [id "570076"] [msg "Malware.Expert - Malware"] [hostname "ampsstudio.com"] [uri "/wp-content/themes/seotheme/mar.php"] [unique_id "YzKKnOqvTpKJ1nP5-48ZMQAAAAQ"] ampsstudio.com [Tue Sep 27 06:31:14 2022] [error] [client 80.76.51.29:0] [client 80.76.51.29] ModSecurity: Access denied with code 403 (phase 2). Match of "contains index.php" against "REQUEST_URI" required. [file "remote server"] [line "-1"] [id "570076"] [msg "Malware.Expert - Malware"] [hostname "ampsstudio.com"] [uri "/wp-content/themes/seotheme/mar.php"] [unique_id "YzKKouJhc0Tb44NayviCrwAAAAA"] ampsstudio.com [Tue Sep 27 06:31:27 2022] [error] [client 80.76.51.29:0] [client 80.76.51.29] ModSecurity: Access denied with code 403 (phase 2). Match of "contains index.php" against "REQUEST_URI" required. [file "remote server"] [line "-1"] [id "570076"] [msg "Malware.Expert - Malware"] [hostname "ampsstudio.com"] [uri "/wp-includes/shell20211028.php"] [unique_id "YzKKr7m_uYM3DY8daH2XQAAAAAg"] ampsstudio.com [Tue Sep 27 06:31:35 2022] [error] [client 80.76.51.29:0] [client 80.76.51.29] ModSecurity: Access denied with code 403 (phase 2). Match of "contains index.php" against "REQUEST_URI" required. [file "remote server"] [line "-1"] [id "570076"] [msg "Malware.Expert - Malware"] [hostname "ampsstudio.com"] [uri "/wp-includes/shell20211028.php"] [unique_id "YzKKt53Kc2Ox6UJnyuzfLwAAAAI"] www.ampsstudio.com [Tue Sep 27 07:18:59 2022] [error] [client 185.207.107.216:0] AH01071: Got error 'PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179' www.ampsstudio.com [Tue Sep 27 07:18:59 2022] [error] [client 185.207.107.216:0] AH01071: Got error 'PHP message: PHP Warning: Cannot modify header information - headers already sent by (output started at /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-includes/functions.php:5275) in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/includes/sonaar-music/css/theme/custom-style.php on line 2' www.ampsstudio.com [Tue Sep 27 08:54:12 2022] [error] [client 176.124.220.43:0] AH01071: Got error 'PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179' www.ampsstudio.com [Tue Sep 27 08:54:12 2022] [error] [client 176.124.220.43:0] AH01071: Got error 'PHP message: PHP Warning: Cannot modify header information - headers already sent by (output started at /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-includes/functions.php:5275) in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/includes/sonaar-music/css/theme/custom-style.php on line 2' www.ampsstudio.com [Tue Sep 27 09:47:17 2022] [error] [client 44.234.144.185:0] AH01071: Got error 'PHP message: PHP Warning: Attempt to read property "post_content" on null in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/wordpress-seo/src/memoizers/meta-tags-context-memoizer.php on line 140' www.ampsstudio.com [Tue Sep 27 10:39:37 2022] [error] [client 154.6.18.177:0] AH01071: Got error 'PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179' www.ampsstudio.com [Tue Sep 27 10:39:37 2022] [error] [client 154.6.18.177:0] AH01071: Got error 'PHP message: PHP Warning: Cannot modify header information - headers already sent by (output started at /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-includes/functions.php:5275) in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/includes/sonaar-music/css/theme/custom-style.php on line 2' www.ampsstudio.com [Tue Sep 27 11:10:53 2022] [error] [client 216.24.213.22:0] AH01071: Got error 'PHP message: PHP Warning: Cannot modify header information - headers already sent by (output started at /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-includes/functions.php:5275) in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/includes/sonaar-music/css/theme/custom-style.php on line 2' ampsstudio.com [Tue Sep 27 12:20:17 2022] [error] [client 41.216.188.48:0] AH01276: Cannot serve directory /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-admin/css/: No matching DirectoryIndex (index.php,index.html,index.htm) found, and server-generated directory index forbidden by Options directive www.ampsstudio.com [Tue Sep 27 13:54:38 2022] [error] [client 185.244.175.172:0] [client 185.244.175.172] ModSecurity: Access denied with code 403 (phase 2). Pattern match ".+wp-config\\\\..*" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430005"] [msg "Malware.Expert - request_uri: read wordpress configuration file"] [hostname "www.ampsstudio.com"] [uri "/wp-admin/admin-post.php"] [unique_id "YzLyjuvpsrOndYzfoACpAQAAAA4"] ampsstudio.com [Tue Sep 27 15:01:55 2022] [crit] [client 2604:a880:2:d0::978:7001:0] AH00529: /home/virtual/vps-aa3942/a/aede5353c4/public_html/.well-known/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/virtual/vps-aa3942/a/aede5353c4/public_html/.well-known/' is executable ampsstudio.com [Tue Sep 27 17:40:28 2022] [error] [client 80.76.51.29:0] [client 80.76.51.29] ModSecurity: Access denied with code 403 (phase 2). Match of "contains index.php" against "REQUEST_URI" required. [file "remote server"] [line "-1"] [id "570076"] [msg "Malware.Expert - Malware"] [hostname "ampsstudio.com"] [uri "/wp-commentin.php"] [unique_id "YzMnfCXeP71lLunGAtwhwwAAAAc"] ampsstudio.com [Tue Sep 27 17:40:33 2022] [error] [client 80.76.51.29:0] [client 80.76.51.29] ModSecurity: Access denied with code 403 (phase 2). Match of "contains index.php" against "REQUEST_URI" required. [file "remote server"] [line "-1"] [id "570076"] [msg "Malware.Expert - Malware"] [hostname "ampsstudio.com"] [uri "/wp-commentin.php"] [unique_id "YzMngdtkSNT_xjd7xLnmgAAAAAM"] www.ampsstudio.com [Tue Sep 27 18:11:56 2022] [error] [client 23.106.30.228:0] AH01071: Got error 'PHP message: PHP Warning: Cannot modify header information - headers already sent by (output started at /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-includes/functions.php:5275) in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/includes/sonaar-music/css/theme/custom-style.php on line 2' ampsstudio.com [Tue Sep 27 18:38:04 2022] [error] [client 185.174.211.50:0] [client 185.174.211.50] ModSecurity: Access denied with code 403 (phase 2). Pattern match "/wp-content/uploads/.*\\\\.php" at REQUEST_FILENAME. [file "remote server"] [line "-1"] [id "430017"] [msg "Malware.Expert - request_uri: Wordpress - prevent PHP files from executing"] [hostname "ampsstudio.com"] [uri "/wp-content/uploads/2022/09/up.php"] [unique_id "YzM0_FURM1PzOJu8JzVa0gAAAAI"] ampsstudio.com [Tue Sep 27 18:38:14 2022] [error] [client 185.174.211.50:0] [client 185.174.211.50] ModSecurity: Access denied with code 403 (phase 2). String match "connector.minimal.php" at REQUEST_URI. [file "remote server"] [line "-1"] [id "500083"] [msg "Malware.Expert - request_uri: 0-Day - Wordpress filemanager plugin"] [hostname "ampsstudio.com"] [uri "/wp-content/plugins/wp-file-manager/lib/php/connector.minimal.php"] [unique_id "YzM1BtiX6DwJ1d-7JmtIewAAAAU"] ampsstudio.com [Tue Sep 27 18:38:39 2022] [error] [client 185.174.211.50:0] [client 185.174.211.50] ModSecurity: Access denied with code 403 (phase 2). String match "load_options" at ARGS:swp_debug. [file "remote server"] [line "-1"] [id "500072"] [msg "Malware.Expert - Wordpress: 0-Day - Social Warfare"] [hostname "ampsstudio.com"] [uri "/wp-admin/admin-post.php"] [unique_id "YzM1H-vpsrOndYzfoACp6gAAAA4"] ampsstudio.com [Tue Sep 27 18:39:04 2022] [error] [client 185.174.211.50:0] [client 185.174.211.50] ModSecurity: Access denied with code 403 (phase 2). Match of "contains /wp-content/plugins/dopwgg/libraries/php/upload.php" against "REQUEST_URI" required. [file "remote server"] [line "-1"] [id "430073"] [msg "Malware.Expert - request_uri: Wordpress - prevent PHP files from executing"] [hostname "ampsstudio.com"] [uri "/wp-content/plugins/cherry-plugin/admin/import-export/upload.php"] [unique_id "YzM1OJMEpGBd9swxzwGvBgAAAAA"] ampsstudio.com [Tue Sep 27 18:39:59 2022] [error] [client 185.174.211.50:0] [client 185.174.211.50] ModSecurity: Access denied with code 403 (phase 2). Pattern match "/wp-config\\\\.php" at QUERY_STRING. [file "remote server"] [line "-1"] [id "410018"] [msg "Malware.Expert - query_string: unwanted wordpress config access"] [hostname "ampsstudio.com"] [uri "/wp-admin/admin-ajax.php"] [unique_id "YzM1b1cZ9nmdv_Jrcco-ogAAABA"] ampsstudio.com [Tue Sep 27 18:40:00 2022] [error] [client 185.174.211.50:0] [client 185.174.211.50] ModSecurity: Access denied with code 403 (phase 2). Pattern match "/wp-config\\\\.php" at QUERY_STRING. [file "remote server"] [line "-1"] [id "410018"] [msg "Malware.Expert - query_string: unwanted wordpress config access"] [hostname "ampsstudio.com"] [uri "/wp-admin/admin-ajax.php"] [unique_id "YzM1cNtkSNT_xjd7xLnmrgAAAAM"] ampsstudio.com [Tue Sep 27 18:40:01 2022] [error] [client 185.174.211.50:0] [client 185.174.211.50] ModSecurity: Access denied with code 403 (phase 1). Pattern match "\\\\.\\\\./\\\\.\\\\." at REQUEST_URI. [file "remote server"] [line "-1"] [id "430064"] [msg "Malware.Expert - request_uri: directory travel"] [hostname "ampsstudio.com"] [uri "/wp-admin/admin-ajax.php"] [unique_id "YzM1cevpsrOndYzfoACp7AAAAA4"] ampsstudio.com [Tue Sep 27 18:40:01 2022] [error] [client 185.174.211.50:0] [client 185.174.211.50] ModSecurity: Access denied with code 403 (phase 2). Pattern match "/wp-config\\\\.php" at QUERY_STRING. [file "remote server"] [line "-1"] [id "410018"] [msg "Malware.Expert - query_string: unwanted wordpress config access"] [hostname "ampsstudio.com"] [uri "/wp-admin/admin-ajax.php"] [unique_id "YzM1cdjy730VbSNS3uhxSwAAAAo"] ampsstudio.com [Tue Sep 27 18:40:01 2022] [error] [client 185.174.211.50:0] [client 185.174.211.50] ModSecurity: Access denied with code 403 (phase 2). Pattern match "/wp-config\\\\.php" at QUERY_STRING. [file "remote server"] [line "-1"] [id "410018"] [msg "Malware.Expert - query_string: unwanted wordpress config access"] [hostname "ampsstudio.com"] [uri "/wp-admin/admin-ajax.php"] [unique_id "YzM1cdddx2mTDegUK656WQAAAAE"] ampsstudio.com [Tue Sep 27 18:40:03 2022] [error] [client 185.174.211.50:0] [client 185.174.211.50] ModSecurity: Access denied with code 403 (phase 2). Pattern match ".+wp-config\\\\..*" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430005"] [msg "Malware.Expert - request_uri: read wordpress configuration file"] [hostname "ampsstudio.com"] [uri "/wp-admin/admin.php"] [unique_id "YzM1c1URM1PzOJu8JzVa1QAAAAI"] ampsstudio.com [Tue Sep 27 18:40:03 2022] [error] [client 185.174.211.50:0] [client 185.174.211.50] ModSecurity: Access denied with code 403 (phase 1). Pattern match "\\\\.\\\\./\\\\.\\\\." at REQUEST_URI. [file "remote server"] [line "-1"] [id "430064"] [msg "Malware.Expert - request_uri: directory travel"] [hostname "ampsstudio.com"] [uri "/wp-admin/admin.php"] [unique_id "YzM1c9iX6DwJ1d-7JmtIfgAAAAU"] ampsstudio.com [Tue Sep 27 18:40:03 2022] [error] [client 185.174.211.50:0] [client 185.174.211.50] ModSecurity: Access denied with code 403 (phase 1). Pattern match "\\\\.\\\\./\\\\.\\\\." at REQUEST_URI. [file "remote server"] [line "-1"] [id "430064"] [msg "Malware.Expert - request_uri: directory travel"] [hostname "ampsstudio.com"] [uri "/wp-content/plugins/cherry-plugin/admin/import-export/download-content.php"] [unique_id "YzM1c5MEpGBd9swxzwGvCAAAAAA"] ampsstudio.com [Tue Sep 27 18:40:04 2022] [error] [client 185.174.211.50:0] [client 185.174.211.50] ModSecurity: Access denied with code 403 (phase 2). Pattern match "/wp-config\\\\.php" at QUERY_STRING. [file "remote server"] [line "-1"] [id "410018"] [msg "Malware.Expert - query_string: unwanted wordpress config access"] [hostname "ampsstudio.com"] [uri "/wp-content/force-download.php"] [unique_id "YzM1dNdMN4t15ENqjvFBQwAAAAk"] ampsstudio.com [Tue Sep 27 18:40:04 2022] [error] [client 185.174.211.50:0] [client 185.174.211.50] ModSecurity: Access denied with code 403 (phase 2). Pattern match ".+wp-config\\\\..*" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430005"] [msg "Malware.Expert - request_uri: read wordpress configuration file"] [hostname "ampsstudio.com"] [uri "/force-download.php"] [unique_id "YzM1dCXeP71lLunGAtwh8AAAAAc"] ampsstudio.com [Tue Sep 27 18:40:04 2022] [error] [client 185.174.211.50:0] [client 185.174.211.50] ModSecurity: Access denied with code 403 (phase 1). Pattern match "\\\\.\\\\./\\\\.\\\\." at REQUEST_URI. [file "remote server"] [line "-1"] [id "430064"] [msg "Malware.Expert - request_uri: directory travel"] [hostname "ampsstudio.com"] [uri "/wp-content/plugins/google-document-embedder/libs/pdf.php"] [unique_id "YzM1dNtkSNT_xjd7xLnmrwAAAAM"] ampsstudio.com [Tue Sep 27 18:40:08 2022] [error] [client 185.174.211.50:0] [client 185.174.211.50] ModSecurity: Access denied with code 403 (phase 1). Pattern match "\\\\.\\\\./\\\\.\\\\." at REQUEST_URI. [file "remote server"] [line "-1"] [id "430064"] [msg "Malware.Expert - request_uri: directory travel"] [hostname "ampsstudio.com"] [uri "/wp-content/plugins/google-mp3-audio-player/direct_download.php"] [unique_id "YzM1eFcZ9nmdv_Jrcco-owAAABA"] ampsstudio.com [Tue Sep 27 18:40:11 2022] [error] [client 185.174.211.50:0] [client 185.174.211.50] ModSecurity: Access denied with code 403 (phase 1). Pattern match "\\\\.\\\\./\\\\.\\\\." at REQUEST_URI. [file "remote server"] [line "-1"] [id "430064"] [msg "Malware.Expert - request_uri: directory travel"] [hostname "ampsstudio.com"] [uri "/wp-content/plugins/recent-backups/download-file.php"] [unique_id "YzM1e-vpsrOndYzfoACp7QAAAA4"] ampsstudio.com [Tue Sep 27 18:40:11 2022] [error] [client 185.174.211.50:0] [client 185.174.211.50] ModSecurity: Access denied with code 403 (phase 1). Pattern match "\\\\.\\\\./\\\\.\\\\." at REQUEST_URI. [file "remote server"] [line "-1"] [id "430064"] [msg "Malware.Expert - request_uri: directory travel"] [hostname "ampsstudio.com"] [uri "/wp-content/plugins/mini-mail-dashboard-widgetwp-mini-mail.php"] [unique_id "YzM1e9jy730VbSNS3uhxTAAAAAo"] ampsstudio.com [Tue Sep 27 18:40:11 2022] [error] [client 185.174.211.50:0] [client 185.174.211.50] ModSecurity: Access denied with code 403 (phase 1). Pattern match "\\\\.\\\\./\\\\.\\\\." at REQUEST_URI. [file "remote server"] [line "-1"] [id "430064"] [msg "Malware.Expert - request_uri: directory travel"] [hostname "ampsstudio.com"] [uri "/wp-content/plugins/simple-image-manipulator/controller/download.php"] [unique_id "YzM1e9ddx2mTDegUK656WgAAAAE"] ampsstudio.com [Tue Sep 27 18:40:12 2022] [error] [client 185.174.211.50:0] [client 185.174.211.50] ModSecurity: Access denied with code 403 (phase 1). Pattern match "\\\\.\\\\./\\\\.\\\\." at REQUEST_URI. [file "remote server"] [line "-1"] [id "430064"] [msg "Malware.Expert - request_uri: directory travel"] [hostname "ampsstudio.com"] [uri "/wp-content/plugins/tera-charts/charts/treemap.php"] [unique_id "YzM1fFURM1PzOJu8JzVa1gAAAAI"] ampsstudio.com [Tue Sep 27 18:40:12 2022] [error] [client 185.174.211.50:0] [client 185.174.211.50] ModSecurity: Access denied with code 403 (phase 1). Pattern match "\\\\.\\\\./\\\\.\\\\." at REQUEST_URI. [file "remote server"] [line "-1"] [id "430064"] [msg "Malware.Expert - request_uri: directory travel"] [hostname "ampsstudio.com"] [uri "/wp-content/plugins/sniplets/modules/syntax_highlight.php"] [unique_id "YzM1fNiX6DwJ1d-7JmtIfwAAAAU"] ampsstudio.com [Tue Sep 27 18:40:12 2022] [error] [client 185.174.211.50:0] [client 185.174.211.50] ModSecurity: Access denied with code 403 (phase 1). Pattern match "\\\\.\\\\./\\\\.\\\\." at REQUEST_URI. [file "remote server"] [line "-1"] [id "430064"] [msg "Malware.Expert - request_uri: directory travel"] [hostname "ampsstudio.com"] [uri "/wp-content/plugins/mygallery/myfunctions/mygallerybrowser.php"] [unique_id "YzM1fJMEpGBd9swxzwGvCQAAAAA"] ampsstudio.com [Tue Sep 27 18:40:21 2022] [error] [client 185.174.211.50:0] [client 185.174.211.50] ModSecurity: Access denied with code 403 (phase 1). Pattern match "\\\\.\\\\./\\\\.\\\\." at REQUEST_URI. [file "remote server"] [line "-1"] [id "430064"] [msg "Malware.Expert - request_uri: directory travel"] [hostname "ampsstudio.com"] [uri "/wp-content/plugins/ungallery/source_vuln.php"] [unique_id "YzM1hdtkSNT_xjd7xLnmsAAAAAM"] ampsstudio.com [Tue Sep 27 18:40:21 2022] [error] [client 185.174.211.50:0] [client 185.174.211.50] ModSecurity: Access denied with code 403 (phase 1). Pattern match "\\\\.\\\\./\\\\.\\\\." at REQUEST_URI. [file "remote server"] [line "-1"] [id "430064"] [msg "Malware.Expert - request_uri: directory travel"] [hostname "ampsstudio.com"] [uri "/wp-content/themes/churchope/lib/downloadlink.php"] [unique_id "YzM1hddMN4t15ENqjvFBRAAAAAk"] ampsstudio.com [Tue Sep 27 18:40:21 2022] [error] [client 185.174.211.50:0] [client 185.174.211.50] ModSecurity: Access denied with code 403 (phase 1). Pattern match "\\\\.\\\\./\\\\.\\\\." at REQUEST_URI. [file "remote server"] [line "-1"] [id "430064"] [msg "Malware.Expert - request_uri: directory travel"] [hostname "ampsstudio.com"] [uri "/wp-content/themes/NativeChurch/download/download.php"] [unique_id "YzM1hSXeP71lLunGAtwh8QAAAAc"] ampsstudio.com [Tue Sep 27 18:40:21 2022] [error] [client 185.174.211.50:0] [client 185.174.211.50] ModSecurity: Access denied with code 403 (phase 1). Pattern match "\\\\.\\\\./\\\\.\\\\." at REQUEST_URI. [file "remote server"] [line "-1"] [id "430064"] [msg "Malware.Expert - request_uri: directory travel"] [hostname "ampsstudio.com"] [uri "/wp-content/plugins/wp-support-plus-responsive-ticket-system/includes/admin/downloadAttachment.php"] [unique_id "YzM1hVcZ9nmdv_Jrcco-pAAAABA"] ampsstudio.com [Tue Sep 27 18:40:25 2022] [error] [client 185.174.211.50:0] [client 185.174.211.50] ModSecurity: Access denied with code 403 (phase 1). Pattern match "\\\\.\\\\./\\\\.\\\\." at REQUEST_URI. [file "remote server"] [line "-1"] [id "430064"] [msg "Malware.Expert - request_uri: directory travel"] [hostname "ampsstudio.com"] [uri "/wp-content/themes/mTheme-Unus/css/css.php"] [unique_id "YzM1ievpsrOndYzfoACp7gAAAA4"] ampsstudio.com [Tue Sep 27 18:40:26 2022] [error] [client 185.174.211.50:0] [client 185.174.211.50] ModSecurity: Access denied with code 403 (phase 1). Pattern match "\\\\.\\\\./\\\\.\\\\." at REQUEST_URI. [file "remote server"] [line "-1"] [id "430064"] [msg "Malware.Expert - request_uri: directory travel"] [hostname "ampsstudio.com"] [uri "/wp-content/plugins/aspose-doc-exporter/aspose_doc_exporter_download.php"] [unique_id "YzM1itjy730VbSNS3uhxTQAAAAo"] ampsstudio.com [Tue Sep 27 18:40:26 2022] [error] [client 185.174.211.50:0] [client 185.174.211.50] ModSecurity: Access denied with code 403 (phase 1). Pattern match "\\\\.\\\\./\\\\.\\\\." at REQUEST_URI. [file "remote server"] [line "-1"] [id "430064"] [msg "Malware.Expert - request_uri: directory travel"] [hostname "ampsstudio.com"] [uri "/wp-content/plugins/mac-dock-gallery/macdownload.php"] [unique_id "YzM1itddx2mTDegUK656WwAAAAE"] ampsstudio.com [Tue Sep 27 18:40:26 2022] [error] [client 185.174.211.50:0] [client 185.174.211.50] ModSecurity: Access denied with code 403 (phase 1). Pattern match "\\\\.\\\\./\\\\.\\\\." at REQUEST_URI. [file "remote server"] [line "-1"] [id "430064"] [msg "Malware.Expert - request_uri: directory travel"] [hostname "ampsstudio.com"] [uri "/wp-content/plugins/db-backup/download.php"] [unique_id "YzM1ilURM1PzOJu8JzVa1wAAAAI"] ampsstudio.com [Tue Sep 27 18:40:39 2022] [error] [client 185.174.211.50:0] [client 185.174.211.50] ModSecurity: Access denied with code 403 (phase 2). Pattern match "/wp-content/uploads/.*\\\\.php" at REQUEST_FILENAME. [file "remote server"] [line "-1"] [id "430017"] [msg "Malware.Expert - request_uri: Wordpress - prevent PHP files from executing"] [hostname "ampsstudio.com"] [uri "/wp-content/uploads/adminer.php"] [unique_id "YzM1l9dMN4t15ENqjvFBRwAAAAk"] ampsstudio.com [Tue Sep 27 18:41:08 2022] [error] [client 185.174.211.50:0] [client 185.174.211.50] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\?gf_page=upload" at REQUEST_URI. [file "remote server"] [line "-1"] [id "500001"] [msg "Malware.Expert - request_uri: 0-Day - Gravity Forms"] [hostname "ampsstudio.com"] [uri "/"] [unique_id "YzM1tNiX6DwJ1d-7JmtIhgAAAAU"] ampsstudio.com [Tue Sep 27 18:41:18 2022] [error] [client 185.174.211.50:0] [client 185.174.211.50] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\?gf_page=upload" at REQUEST_URI. [file "remote server"] [line "-1"] [id "500001"] [msg "Malware.Expert - request_uri: 0-Day - Gravity Forms"] [hostname "ampsstudio.com"] [uri "/"] [unique_id "YzM1vtdMN4t15ENqjvFBSwAAAAk"] ampsstudio.com [Tue Sep 27 18:41:48 2022] [error] [client 185.174.211.50:0] [client 185.174.211.50] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\?gf_page=upload" at REQUEST_URI. [file "remote server"] [line "-1"] [id "500001"] [msg "Malware.Expert - request_uri: 0-Day - Gravity Forms"] [hostname "ampsstudio.com"] [uri "/"] [unique_id "YzM13NtkSNT_xjd7xLnmtwAAAAM"] ampsstudio.com [Tue Sep 27 18:42:44 2022] [error] [client 185.174.211.50:0] [client 185.174.211.50] ModSecurity: Access denied with code 403 (phase 2). Match of "contains /wp-content/plugins/dopwgg/libraries/php/upload.php" against "REQUEST_URI" required. [file "remote server"] [line "-1"] [id "430073"] [msg "Malware.Expert - request_uri: Wordpress - prevent PHP files from executing"] [hostname "ampsstudio.com"] [uri "/wp-content/plugins/formcraft/file-upload/server/content/upload.php"] [unique_id "YzM2FJMEpGBd9swxzwGvEQAAAAA"] ampsstudio.com [Tue Sep 27 18:44:49 2022] [error] [client 185.174.211.50:0] [client 185.174.211.50] ModSecurity: Access denied with code 403 (phase 2). Pattern match "/wp-content/uploads/.*\\\\.php" at REQUEST_FILENAME. [file "remote server"] [line "-1"] [id "430017"] [msg "Malware.Expert - request_uri: Wordpress - prevent PHP files from executing"] [hostname "ampsstudio.com"] [uri "/wp-content/uploads/2022/09/settings_auto.php"] [unique_id "YzM2kdddx2mTDegUK656ZQAAAAE"] ampsstudio.com [Tue Sep 27 18:45:35 2022] [error] [client 20.92.87.77:0] [client 20.92.87.77] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\?gf_page=upload" at REQUEST_URI. [file "remote server"] [line "-1"] [id "500001"] [msg "Malware.Expert - request_uri: 0-Day - Gravity Forms"] [hostname "ampsstudio.com"] [uri "/"] [unique_id "YzM2v9jy730VbSNS3uhxWgAAAAo"] ampsstudio.com [Tue Sep 27 18:45:51 2022] [error] [client 20.92.87.77:0] [client 20.92.87.77] ModSecurity: Access denied with code 403 (phase 2). Pattern match "/wp-content/uploads/.*\\\\.php" at REQUEST_FILENAME. [file "remote server"] [line "-1"] [id "430017"] [msg "Malware.Expert - request_uri: Wordpress - prevent PHP files from executing"] [hostname "ampsstudio.com"] [uri "/wp-content/uploads/assignments/vuuzybzdr.php."] [unique_id "YzM2z5MEpGBd9swxzwGvFwAAAAA"] ampsstudio.com [Tue Sep 27 18:45:57 2022] [error] [client 20.92.87.77:0] [client 20.92.87.77] ModSecurity: Access denied with code 403 (phase 2). Match of "contains /wp-content/plugins/dopwgg/libraries/php/upload.php" against "REQUEST_URI" required. [file "remote server"] [line "-1"] [id "430073"] [msg "Malware.Expert - request_uri: Wordpress - prevent PHP files from executing"] [hostname "ampsstudio.com"] [uri "/wp-content/plugins/cherry-plugin/admin/import-export/upload.php"] [unique_id "YzM21diX6DwJ1d-7JmtIjgAAAAU"] ampsstudio.com [Tue Sep 27 18:48:24 2022] [error] [client 185.174.211.50:0] [client 185.174.211.50] ModSecurity: Access denied with code 403 (phase 2). String match "python-requests" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "430075"] [msg "Malware.Expert - request_uri: Wordpress - Python request"] [hostname "ampsstudio.com"] [uri "/wp-admin/setup-config.php"] [unique_id "YzM3aNddx2mTDegUK656bQAAAAE"] ampsstudio.com [Tue Sep 27 18:48:32 2022] [error] [client 185.174.211.50:0] [client 185.174.211.50] ModSecurity: Access denied with code 403 (phase 2). String match "python-requests" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "430075"] [msg "Malware.Expert - request_uri: Wordpress - Python request"] [hostname "ampsstudio.com"] [uri "/wordpress/wp-admin/setup-config.php"] [unique_id "YzM3cFURM1PzOJu8JzVa6AAAAAI"] ampsstudio.com [Tue Sep 27 18:48:47 2022] [error] [client 185.174.211.50:0] [client 185.174.211.50] ModSecurity: Access denied with code 403 (phase 2). String match "python-requests" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "430075"] [msg "Malware.Expert - request_uri: Wordpress - Python request"] [hostname "ampsstudio.com"] [uri "/wp/wp-admin/setup-config.php"] [unique_id "YzM3f9jy730VbSNS3uhxYAAAAAo"] ampsstudio.com [Tue Sep 27 18:48:52 2022] [error] [client 185.174.211.50:0] [client 185.174.211.50] ModSecurity: Access denied with code 403 (phase 2). String match "python-requests" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "430075"] [msg "Malware.Expert - request_uri: Wordpress - Python request"] [hostname "ampsstudio.com"] [uri "/blog/wp-admin/setup-config.php"] [unique_id "YzM3hJMEpGBd9swxzwGvHAAAAAA"] ampsstudio.com [Tue Sep 27 18:48:57 2022] [error] [client 185.174.211.50:0] [client 185.174.211.50] ModSecurity: Access denied with code 403 (phase 2). String match "python-requests" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "430075"] [msg "Malware.Expert - request_uri: Wordpress - Python request"] [hostname "ampsstudio.com"] [uri "/test/wp-admin/setup-config.php"] [unique_id "YzM3iSXeP71lLunGAtwiBAAAAAc"] ampsstudio.com [Tue Sep 27 18:49:04 2022] [error] [client 185.174.211.50:0] [client 185.174.211.50] ModSecurity: Access denied with code 403 (phase 2). String match "python-requests" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "430075"] [msg "Malware.Expert - request_uri: Wordpress - Python request"] [hostname "ampsstudio.com"] [uri "/site/wp-admin/setup-config.php"] [unique_id "YzM3kNtkSNT_xjd7xLnmwwAAAAM"] ampsstudio.com [Tue Sep 27 18:50:51 2022] [error] [client 185.174.211.50:0] [client 185.174.211.50] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "ampsstudio.com"] [uri "/.env"] [unique_id "YzM3-1cZ9nmdv_Jrcco-vAAAABA"] ampsstudio.com [Tue Sep 27 18:51:06 2022] [error] [client 185.174.211.50:0] [client 185.174.211.50] ModSecurity: Access denied with code 403 (phase 2). String match "python" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "580100"] [msg "Malware.Expert - Wordpress - unknown python request"] [hostname "ampsstudio.com"] [uri "/wp-includes/ID3/module.audio.ac3.php"] [unique_id "YzM4CttkSNT_xjd7xLnmygAAAAM"] www.ampsstudio.com [Tue Sep 27 19:10:30 2022] [error] [client 212.192.24.22:0] AH01276: Cannot serve directory /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-includes/SimplePie/: No matching DirectoryIndex (index.php,index.html,index.htm) found, and server-generated directory index forbidden by Options directive www.ampsstudio.com [Tue Sep 27 19:10:32 2022] [error] [client 212.192.24.22:0] [client 212.192.24.22] ModSecurity: Access denied with code 403 (phase 2). String match "/wp-content/plugins/core-engine/" at REQUEST_URI. [file "remote server"] [line "-1"] [id "570064"] [msg "Malware.Expert - Wordpress Malware"] [hostname "www.ampsstudio.com"] [uri "/wp-content/plugins/core-engine/admin.php"] [unique_id "YzM8mFURM1PzOJu8JzVa9gAAAAI"] www.ampsstudio.com [Wed Sep 28 00:45:11 2022] [error] [client 109.70.100.86:0] AH01071: Got error 'PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179' www.ampsstudio.com [Wed Sep 28 00:45:11 2022] [error] [client 109.70.100.86:0] AH01071: Got error 'PHP message: PHP Warning: Cannot modify header information - headers already sent by (output started at /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-includes/functions.php:5275) in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/includes/sonaar-music/css/theme/custom-style.php on line 2' ampsstudio.com [Wed Sep 28 01:48:01 2022] [error] [client 152.89.196.13:0] [client 152.89.196.13] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_HEADERS_NAMES. [file "remote server"] [line "-1"] [id "580001"] [msg "Malware.Expert - Wordpress - Referer missing"] [hostname "ampsstudio.com"] [uri "/wp-content/wp-files-conficg.php"] [unique_id "YzOZwVcZ9nmdv_Jrcco_fAAAABA"] ampsstudio.com [Wed Sep 28 02:06:45 2022] [error] [client 52.188.192.242:0] [client 52.188.192.242] ModSecurity: Access denied with code 403 (phase 2). Pattern match "/wp-content/uploads/.*\\\\.php" at REQUEST_FILENAME. [file "remote server"] [line "-1"] [id "430017"] [msg "Malware.Expert - request_uri: Wordpress - prevent PHP files from executing"] [hostname "ampsstudio.com"] [uri "/wp-content/uploads/2021/12/up.php"] [unique_id "YzOeJdtkSNT_xjd7xLnniQAAAAM"] ampsstudio.com [Wed Sep 28 02:06:55 2022] [error] [client 52.188.192.242:0] [client 52.188.192.242] ModSecurity: Access denied with code 403 (phase 2). String match "python" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "580102"] [msg "Malware.Expert - Wordpress - unknown python request"] [hostname "ampsstudio.com"] [uri "/wp-admin/alfa.php"] [unique_id "YzOeL9iX6DwJ1d-7JmtJYAAAAAU"] ampsstudio.com [Wed Sep 28 02:06:58 2022] [error] [client 52.188.192.242:0] [client 52.188.192.242] ModSecurity: Access denied with code 403 (phase 2). String match "python" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "580100"] [msg "Malware.Expert - Wordpress - unknown python request"] [hostname "ampsstudio.com"] [uri "/wp-includes/fw.php"] [unique_id "YzOeMlcZ9nmdv_Jrcco_ggAAABA"] ampsstudio.com [Wed Sep 28 02:06:59 2022] [error] [client 52.188.192.242:0] [client 52.188.192.242] ModSecurity: Access denied with code 403 (phase 2). String match "python" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "580101"] [msg "Malware.Expert - Wordpress - unknown python request"] [hostname "ampsstudio.com"] [uri "/wp-content/fw.php"] [unique_id "YzOeM-vpsrOndYzfoACqzwAAAA4"] ampsstudio.com [Wed Sep 28 02:06:59 2022] [error] [client 52.188.192.242:0] [client 52.188.192.242] ModSecurity: Access denied with code 403 (phase 2). String match "python" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "580102"] [msg "Malware.Expert - Wordpress - unknown python request"] [hostname "ampsstudio.com"] [uri "/wp-admin/fw.php"] [unique_id "YzOeM9dMN4t15ENqjvFCIgAAAAk"] ampsstudio.com [Wed Sep 28 02:07:00 2022] [error] [client 52.188.192.242:0] [client 52.188.192.242] ModSecurity: Access denied with code 403 (phase 2). Pattern match "/wp-content/uploads/.*\\\\.php" at REQUEST_FILENAME. [file "remote server"] [line "-1"] [id "430017"] [msg "Malware.Expert - request_uri: Wordpress - prevent PHP files from executing"] [hostname "ampsstudio.com"] [uri "/wp-content/uploads/2021/12/fw.php"] [unique_id "YzOeNNddx2mTDegUK657NgAAAAE"] ampsstudio.com [Wed Sep 28 02:07:01 2022] [error] [client 52.188.192.242:0] [client 52.188.192.242] ModSecurity: Access denied with code 403 (phase 2). String match "/wso.php" at REQUEST_URI. [file "remote server"] [line "-1"] [id "570066"] [msg "Malware.Expert - PHP Command Shell (WSO)"] [hostname "ampsstudio.com"] [uri "/wp-includes/wso.php"] [unique_id "YzOeNSXeP71lLunGAtwizwAAAAc"] ampsstudio.com [Wed Sep 28 02:07:01 2022] [error] [client 52.188.192.242:0] [client 52.188.192.242] ModSecurity: Access denied with code 403 (phase 2). String match "/wso.php" at REQUEST_URI. [file "remote server"] [line "-1"] [id "570066"] [msg "Malware.Expert - PHP Command Shell (WSO)"] [hostname "ampsstudio.com"] [uri "/wp-content/wso.php"] [unique_id "YzOeNZMEpGBd9swxzwGv5gAAAAA"] ampsstudio.com [Wed Sep 28 02:07:02 2022] [error] [client 52.188.192.242:0] [client 52.188.192.242] ModSecurity: Access denied with code 403 (phase 2). String match "/wso.php" at REQUEST_URI. [file "remote server"] [line "-1"] [id "570066"] [msg "Malware.Expert - PHP Command Shell (WSO)"] [hostname "ampsstudio.com"] [uri "/wp-admin/wso.php"] [unique_id "YzOeNtjy730VbSNS3uhyLgAAAAo"] ampsstudio.com [Wed Sep 28 02:07:10 2022] [error] [client 52.188.192.242:0] [client 52.188.192.242] ModSecurity: Access denied with code 403 (phase 2). String match "/shell.php" at REQUEST_URI. [file "remote server"] [line "-1"] [id "570072"] [msg "Malware.Expert - PHP Command Shell"] [hostname "ampsstudio.com"] [uri "/shell.php"] [unique_id "YzOePpMEpGBd9swxzwGv5wAAAAA"] ampsstudio.com [Wed Sep 28 02:07:10 2022] [error] [client 52.188.192.242:0] [client 52.188.192.242] ModSecurity: Access denied with code 403 (phase 2). String match "connector.minimal.php" at REQUEST_URI. [file "remote server"] [line "-1"] [id "500083"] [msg "Malware.Expert - request_uri: 0-Day - Wordpress filemanager plugin"] [hostname "ampsstudio.com"] [uri "/wp-content/plugins/wp-file-manager/lib/php/connector.minimal.php"] [unique_id "YzOePtdMN4t15ENqjvFCIwAAAAk"] ampsstudio.com [Wed Sep 28 02:31:29 2022] [error] [client 152.89.196.13:0] [client 152.89.196.13] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_HEADERS_NAMES. [file "remote server"] [line "-1"] [id "580001"] [msg "Malware.Expert - Wordpress - Referer missing"] [hostname "ampsstudio.com"] [uri "/wp-content/wordpress-index-keyword.php"] [unique_id "YzOj8ddMN4t15ENqjvFCLQAAAAk"] www.ampsstudio.com [Wed Sep 28 04:21:26 2022] [error] [client 46.38.254.246:0] AH01071: Got error 'PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179' www.ampsstudio.com [Wed Sep 28 04:21:26 2022] [error] [client 46.38.254.246:0] AH01071: Got error 'PHP message: PHP Warning: Cannot modify header information - headers already sent by (output started at /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-includes/functions.php:5275) in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/includes/sonaar-music/css/theme/custom-style.php on line 2' ampsstudio.com [Wed Sep 28 07:50:29 2022] [error] [client 20.127.196.24:0] AH01276: Cannot serve directory /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-admin/css/: No matching DirectoryIndex (index.php,index.html,index.htm) found, and server-generated directory index forbidden by Options directive ampsstudio.com [Wed Sep 28 08:15:12 2022] [error] [client 5.188.62.134:0] [client 5.188.62.134] ModSecurity: Access denied with code 403 (phase 1). Pattern match "\\\\.\\\\./\\\\.\\\\." at REQUEST_URI. [file "remote server"] [line "-1"] [id "430064"] [msg "Malware.Expert - request_uri: directory travel"] [hostname "ampsstudio.com"] [uri "/wp-content/plugins/aspose-doc-exporter/aspose_doc_exporter_download.php"] [unique_id "YzP0gGDEHxpS2ASSMyW1ZAAAAAM"] www.ampsstudio.com [Wed Sep 28 09:27:56 2022] [error] [client 156.146.63.158:0] AH01071: Got error 'PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179' www.ampsstudio.com [Wed Sep 28 09:27:56 2022] [error] [client 156.146.63.158:0] AH01071: Got error 'PHP message: PHP Warning: Cannot modify header information - headers already sent by (output started at /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-includes/functions.php:5275) in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/includes/sonaar-music/css/theme/custom-style.php on line 2' ampsstudio.com [Wed Sep 28 10:05:35 2022] [error] [client 152.89.196.13:0] [client 152.89.196.13] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_HEADERS_NAMES. [file "remote server"] [line "-1"] [id "580001"] [msg "Malware.Expert - Wordpress - Referer missing"] [hostname "ampsstudio.com"] [uri "/wp-content/class-index-wordpress.php"] [unique_id "YzQOX2DEHxpS2ASSMyW1ngAAAAM"] ampsstudio.com [Wed Sep 28 10:07:56 2022] [error] [client 152.89.196.13:0] [client 152.89.196.13] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_HEADERS_NAMES. [file "remote server"] [line "-1"] [id "580001"] [msg "Malware.Expert - Wordpress - Referer missing"] [hostname "ampsstudio.com"] [uri "/wp-content/plugins/wp-members-master/widget-tag.php"] [unique_id "YzQO7CoCE5hoxy6chffONAAAAAE"] ampsstudio.com [Wed Sep 28 10:08:57 2022] [error] [client 152.89.196.13:0] [client 152.89.196.13] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_HEADERS_NAMES. [file "remote server"] [line "-1"] [id "580001"] [msg "Malware.Expert - Wordpress - Referer missing"] [hostname "ampsstudio.com"] [uri "/wp-content/themes/hestia/inc/core/class-core-hestia.php"] [unique_id "YzQPKWU9ncuVEs5uJf-ogwAAAAI"] ampsstudio.com [Wed Sep 28 11:55:39 2022] [error] [client 20.210.103.210:0] [client 20.210.103.210] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "ampsstudio.com"] [uri "/.env"] [unique_id "YzQoK4K93FU4FDuPx_1uOwAAAAA"] ampsstudio.com [Wed Sep 28 11:55:40 2022] [error] [client 20.210.103.210:0] [client 20.210.103.210] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "ampsstudio.com"] [uri "/.env.example"] [unique_id "YzQoLEmtysoonrvIVYbm7QAAAAs"] ampsstudio.com [Wed Sep 28 11:55:42 2022] [error] [client 20.210.103.210:0] [client 20.210.103.210] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "ampsstudio.com"] [uri "/.env.old"] [unique_id "YzQoLq_iZc4Rf4J9Mz_8hwAAAAU"] ampsstudio.com [Wed Sep 28 11:55:44 2022] [error] [client 20.210.103.210:0] [client 20.210.103.210] ModSecurity: Access denied with code 403 (phase 2). String match ".aws/credentials" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430069"] [msg "Malware.Expert - request_uri: AWS Credentials"] [hostname "ampsstudio.com"] [uri "/.aws/credentials"] [unique_id "YzQoMHDPiQijiHesggPCnwAAAAI"] ampsstudio.com [Wed Sep 28 11:56:24 2022] [error] [client 20.210.103.210:0] [client 20.210.103.210] ModSecurity: Access denied with code 403 (phase 2). Pattern match ".+wp-config\\\\..*" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430005"] [msg "Malware.Expert - request_uri: read wordpress configuration file"] [hostname "ampsstudio.com"] [uri "/wp-config.php.bak"] [unique_id "YzQoWBvEO4Czygsn1nyPzQAAAAo"] ampsstudio.com [Wed Sep 28 11:56:26 2022] [error] [client 20.210.103.210:0] [client 20.210.103.210] ModSecurity: Access denied with code 403 (phase 2). String match ".php.bak" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430068"] [msg "Malware.Expert - request_uri: .PHP backup files"] [hostname "ampsstudio.com"] [uri "/settings.php.bak"] [unique_id "YzQoWh7fhpb9iZqfHx_C0AAAAAE"] ampsstudio.com [Wed Sep 28 11:56:42 2022] [error] [client 20.210.103.210:0] [client 20.210.103.210] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "ampsstudio.com"] [uri "/.env.bak"] [unique_id "YzQoakeeorq-TE-276k0RQAAAAg"] ampsstudio.com [Wed Sep 28 11:57:00 2022] [error] [client 20.210.103.210:0] [client 20.210.103.210] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "ampsstudio.com"] [uri "/.env.dev.local"] [unique_id "YzQofEeeorq-TE-276k0RgAAAAg"] ampsstudio.com [Wed Sep 28 11:57:15 2022] [error] [client 20.210.103.210:0] [client 20.210.103.210] ModSecurity: Access denied with code 403 (phase 2). String match "/.git/config" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430058"] [msg "Malware.Expert - request_uri: .git config"] [hostname "ampsstudio.com"] [uri "/.git/config"] [unique_id "YzQoi0eeorq-TE-276k0RwAAAAg"] ampsstudio.com [Wed Sep 28 13:02:24 2022] [error] [client 147.78.47.249:0] [client 147.78.47.249] ModSecurity: Access denied with code 403 (phase 2). String match "connector.minimal.php" at REQUEST_URI. [file "remote server"] [line "-1"] [id "500083"] [msg "Malware.Expert - request_uri: 0-Day - Wordpress filemanager plugin"] [hostname "ampsstudio.com"] [uri "/wp-content/plugins/wp-file-manager/lib/php/connector.minimal.php"] [unique_id "YzQ30K_iZc4Rf4J9Mz_8vwAAAAU"] ampsstudio.com [Wed Sep 28 13:18:04 2022] [error] [client 85.215.100.33:0] AH01276: Cannot serve directory /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-admin/css/: No matching DirectoryIndex (index.php,index.html,index.htm) found, and server-generated directory index forbidden by Options directive www.ampsstudio.com [Wed Sep 28 15:36:10 2022] [crit] [client 66.249.93.44:0] AH00529: /home/virtual/vps-aa3942/a/aede5353c4/public_html/.well-known/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/virtual/vps-aa3942/a/aede5353c4/public_html/.well-known/' is executable www.ampsstudio.com [Wed Sep 28 17:31:53 2022] [error] [client 192.210.188.171:0] AH01071: Got error 'PHP message: PHP Warning: Cannot modify header information - headers already sent by (output started at /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-includes/functions.php:5275) in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/includes/sonaar-music/css/theme/custom-style.php on line 2' ampsstudio.com [Wed Sep 28 18:16:47 2022] [error] [client 64.225.27.66:0] [client 64.225.27.66] ModSecurity: Access denied with code 403 (phase 2). Match of "contains index.php" against "REQUEST_URI" required. [file "remote server"] [line "-1"] [id "570076"] [msg "Malware.Expert - Malware"] [hostname "ampsstudio.com"] [uri "/wp-plain.php"] [unique_id "YzSBf-DubVLsQtoPGKecegAAAAo"] www.ampsstudio.com [Wed Sep 28 18:16:53 2022] [error] [client 64.225.27.66:0] [client 64.225.27.66] ModSecurity: Access denied with code 403 (phase 2). String match "php.suspected" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430059"] [msg "Malware.Expert - request_uri: .PHP suspected files"] [hostname "www.ampsstudio.com"] [uri "/wp-content/plugins/apikey/apikey.php.suspected"] [unique_id "YzSBha2MF-U5m-T-RY0CQgAAAAA"] www.ampsstudio.com [Wed Sep 28 18:16:53 2022] [error] [client 64.225.27.66:0] [client 64.225.27.66] ModSecurity: Access denied with code 403 (phase 2). String match "php.suspected" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430059"] [msg "Malware.Expert - request_uri: .PHP suspected files"] [hostname "www.ampsstudio.com"] [uri "/plugins/content/apismtp/apismtp.php.suspected"] [unique_id "YzSBhXDPiQijiHesggPDqwAAAAI"] www.ampsstudio.com [Wed Sep 28 21:11:48 2022] [error] [client 66.249.66.195:0] AH01071: Got error 'PHP message: PHP Warning: Attempt to read property "post_content" on null in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/wordpress-seo/src/memoizers/meta-tags-context-memoizer.php on line 140PHP message: PHP Warning: Attempt to read property "post_modified_gmt" on null in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/wordpress-seo/src/presentations/indexable-post-type-presentation.php on line 289PHP message: PHP Warning: Attempt to read property "post_date_gmt" on null in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/wordpress-seo/src/presentations/indexable-post-type-presentation.php on line 289PHP message: PHP Warning: Attempt to read property "post_author" on null in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/wordpress-seo/src/presenters/slack/enhanced-data-presenter.php on line 46PHP message: PHP Warning: Attempt to read property "post_date_gmt" on null in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/wordpress-seo/src/generators/schema/webpage.php on line 51PHP message: PHP Warning: Attempt to read property "post_modified_gmt" on null in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/wordpress-seo/src/generators/schema/webpage.php on line 52PHP message: PHP Warning: Undefined array key 0 in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/includes/classes/iron_sonaar.class.php on line 212PHP message: PHP Warning: Trying to access array offset on value of type null in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/includes/classes/iron_sonaar.class.php on line 212PHP message: PHP Warning: Undefined array key 0 in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/includes/classes/iron_sonaar.class.php on line 214PHP message: PHP Warning: Trying to access array offset on value of type null in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/includes/classes/iron_sonaar.class.php on line 214' www.ampsstudio.com [Wed Sep 28 23:55:46 2022] [error] [client 161.117.9.99:0] AH01071: Got error 'PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179' www.ampsstudio.com [Wed Sep 28 23:55:46 2022] [error] [client 161.117.9.99:0] AH01071: Got error 'PHP message: PHP Warning: Cannot modify header information - headers already sent by (output started at /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-includes/functions.php:5275) in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/includes/sonaar-music/css/theme/custom-style.php on line 2' ampsstudio.com [Thu Sep 29 00:41:30 2022] [error] [client 54.153.116.89:0] [client 54.153.116.89] ModSecurity: Access denied with code 403 (phase 2). String match "/.git/config" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430058"] [msg "Malware.Expert - request_uri: .git config"] [hostname "ampsstudio.com"] [uri "/.git/config"] [unique_id "YzTbqjVu3FMnKV90gpILkAAAAAQ"] webdisk.ampsstudio.com [Thu Sep 29 00:46:53 2022] [error] [client 54.87.150.176:0] [client 54.87.150.176] ModSecurity: Access denied with code 403 (phase 2). String match "/.git/config" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430058"] [msg "Malware.Expert - request_uri: .git config"] [hostname "webdisk.ampsstudio.com"] [uri "/.git/config"] [unique_id "YzTc7cJZnzWS_-ojA5ieZAAAAAM"] cpanel.ampsstudio.com [Thu Sep 29 03:05:22 2022] [error] [client 52.89.199.51:0] [client 52.89.199.51] ModSecurity: Access denied with code 403 (phase 2). String match "/.git/config" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430058"] [msg "Malware.Expert - request_uri: .git config"] [hostname "cpanel.ampsstudio.com"] [uri "/.git/config"] [unique_id "YzT9YiOoyCVMfQPCjBsPTgAAAAg"] cpanel.ampsstudio.com [Thu Sep 29 03:05:23 2022] [error] [client 52.89.199.51:0] [client 52.89.199.51] ModSecurity: Access denied with code 403 (phase 2). String match "/.git/config" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430058"] [msg "Malware.Expert - request_uri: .git config"] [hostname "cpanel.ampsstudio.com"] [uri "/.git/config"] [unique_id "YzT9Y8JZnzWS_-ojA5iejgAAAAM"] mail.ampsstudio.com [Thu Sep 29 03:13:08 2022] [error] [client 18.207.94.125:0] [client 18.207.94.125] ModSecurity: Access denied with code 403 (phase 2). String match "/.git/config" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430058"] [msg "Malware.Expert - request_uri: .git config"] [hostname "mail.ampsstudio.com"] [uri "/.git/config"] [unique_id "YzT_NMJZnzWS_-ojA5iekAAAAAM"] mail.ampsstudio.com [Thu Sep 29 03:13:09 2022] [error] [client 18.207.94.125:0] [client 18.207.94.125] ModSecurity: Access denied with code 403 (phase 2). String match "/.git/config" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430058"] [msg "Malware.Expert - request_uri: .git config"] [hostname "mail.ampsstudio.com"] [uri "/.git/config"] [unique_id "YzT_NdMrqtV8yNuqrHfuKQAAAAI"] cpanel.ampsstudio.com [Thu Sep 29 03:41:41 2022] [error] [client 13.41.64.135:0] [client 13.41.64.135] ModSecurity: Access denied with code 403 (phase 2). String match "/.git/config" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430058"] [msg "Malware.Expert - request_uri: .git config"] [hostname "cpanel.ampsstudio.com"] [uri "/.git/config"] [unique_id "YzUF5bT10eRXUyNgjHotlQAAAAg"] cpanel.ampsstudio.com [Thu Sep 29 03:41:41 2022] [error] [client 13.41.64.135:0] [client 13.41.64.135] ModSecurity: Access denied with code 403 (phase 2). String match "/.git/config" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430058"] [msg "Malware.Expert - request_uri: .git config"] [hostname "cpanel.ampsstudio.com"] [uri "/.git/config"] [unique_id "YzUF5W8ZZJgUlLeb59vtnQAAAAA"] cpanel.ampsstudio.com [Thu Sep 29 03:41:41 2022] [error] [client 13.41.64.135:0] [client 13.41.64.135] ModSecurity: Access denied with code 403 (phase 2). String match "/.git/config" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430058"] [msg "Malware.Expert - request_uri: .git config"] [hostname "cpanel.ampsstudio.com"] [uri "/.git/config"] [unique_id "YzUF5dL209y5USGbcZSqNQAAAAI"] cpanel.ampsstudio.com [Thu Sep 29 03:41:41 2022] [error] [client 13.41.64.135:0] [client 13.41.64.135] ModSecurity: Access denied with code 403 (phase 2). String match "/.git/config" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430058"] [msg "Malware.Expert - request_uri: .git config"] [hostname "cpanel.ampsstudio.com"] [uri "/.git/config"] [unique_id "YzUF5XtVs_fEIAcD4z-SMAAAAAE"] www.ampsstudio.com [Thu Sep 29 04:06:01 2022] [error] [client 185.191.171.23:0] AH01071: Got error 'PHP message: PHP Warning: Attempt to read property "ID" on null in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/includes/classes/iron_sonaar_archive.class.php on line 59PHP message: PHP Warning: Undefined array key 0 in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/includes/classes/iron_sonaar.class.php on line 212PHP message: PHP Warning: Trying to access array offset on value of type null in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/includes/classes/iron_sonaar.class.php on line 212PHP message: PHP Warning: Undefined array key 0 in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/includes/classes/iron_sonaar.class.php on line 214PHP message: PHP Warning: Trying to access array offset on value of type null in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/includes/classes/iron_sonaar.class.php on line 214PHP message: PHP Warning: Attempt to read property "ID" on null in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/includes/classes/iron_sonaar_archive.class.php on line 166PHP message: PHP Warning: Undefined variable $my_post_array in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/archive-podcast.php on line 94PHP message: PHP Fatal error: Uncaught TypeError: implode(): Argument #1 ($pieces) must be of type array, string given in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/archive-podcast.php:94\nStack trace:\n#0 /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/archive-podcast.php(94): implode(',', NULL)\n#1 /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-includes/template-loader.php(106): include('/home/virtual/v...')\n#2 /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-blog-header.php(19): require_once('/home/virtual/v...')\n#3 /home/virtual/vps-aa3942/a/aede5353c4/public_html/index.php(17): require('/home/virtual/v...')\n#4 {main}\n thrown in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/archive-podcast.php on line 94' www.ampsstudio.com [Thu Sep 29 05:02:06 2022] [error] [client 64.225.27.66:0] [client 64.225.27.66] ModSecurity: Access denied with code 403 (phase 2). Match of "contains index.php" against "REQUEST_URI" required. [file "remote server"] [line "-1"] [id "570076"] [msg "Malware.Expert - Malware"] [hostname "www.ampsstudio.com"] [uri "/wp-plain.php"] [unique_id "YzUYvu3l116fBbXK12moQwAAAAQ"] www.ampsstudio.com [Thu Sep 29 05:02:11 2022] [error] [client 64.225.27.66:0] [client 64.225.27.66] ModSecurity: Access denied with code 403 (phase 2). String match "php.suspected" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430059"] [msg "Malware.Expert - request_uri: .PHP suspected files"] [hostname "www.ampsstudio.com"] [uri "/wp-content/plugins/apikey/apikey.php.suspected"] [unique_id "YzUYwxARsRVGBFOfMTkbQAAAAAU"] www.ampsstudio.com [Thu Sep 29 05:02:12 2022] [error] [client 64.225.27.66:0] [client 64.225.27.66] ModSecurity: Access denied with code 403 (phase 2). String match "php.suspected" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430059"] [msg "Malware.Expert - request_uri: .PHP suspected files"] [hostname "www.ampsstudio.com"] [uri "/plugins/content/apismtp/apismtp.php.suspected"] [unique_id "YzUYxPfp8-th-BkDuFybFgAAAAM"] www.ampsstudio.com [Thu Sep 29 06:05:24 2022] [error] [client 192.186.160.182:0] AH01071: Got error 'PHP message: PHP Warning: Cannot modify header information - headers already sent by (output started at /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-includes/functions.php:5275) in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/includes/sonaar-music/css/theme/custom-style.php on line 2' ampsstudio.com [Thu Sep 29 06:29:52 2022] [error] [client 20.212.30.178:0] [client 20.212.30.178] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "ampsstudio.com"] [uri "/.env"] [unique_id "YzUtUBdFmx_FX5EmEBwPHwAAAAk"] www.ampsstudio.com [Thu Sep 29 06:48:14 2022] [error] [client 20.97.210.105:0] AH01071: Got error 'PHP message: PHP Warning: Undefined array key "HTTP_USER_AGENT" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/bookly-responsive-appointment-booking-tool/frontend/modules/booking/ShortCode.php on line 66' www.ampsstudio.com [Thu Sep 29 07:01:25 2022] [error] [client 199.195.254.254:0] AH01071: Got error 'PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179' www.ampsstudio.com [Thu Sep 29 07:01:25 2022] [error] [client 199.195.254.254:0] AH01071: Got error 'PHP message: PHP Warning: Cannot modify header information - headers already sent by (output started at /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-includes/functions.php:5275) in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/includes/sonaar-music/css/theme/custom-style.php on line 2' www.ampsstudio.com [Thu Sep 29 08:43:40 2022] [error] [client 47.74.152.79:0] AH01071: Got error 'PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179' www.ampsstudio.com [Thu Sep 29 08:43:40 2022] [error] [client 47.74.152.79:0] AH01071: Got error 'PHP message: PHP Warning: Cannot modify header information - headers already sent by (output started at /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-includes/functions.php:5275) in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/includes/sonaar-music/css/theme/custom-style.php on line 2' ampsstudio.com [Thu Sep 29 08:47:32 2022] [error] [client 51.103.218.161:0] [client 51.103.218.161] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "ampsstudio.com"] [uri "/.env"] [unique_id "YzVNlFAA78kJXBihybhvlQAAAAY"] ampsstudio.com [Thu Sep 29 13:20:56 2022] [error] [client 5.188.62.134:0] [client 5.188.62.134] ModSecurity: Access denied with code 403 (phase 1). Pattern match "\\\\.\\\\./\\\\.\\\\." at REQUEST_URI. [file "remote server"] [line "-1"] [id "430064"] [msg "Malware.Expert - request_uri: directory travel"] [hostname "ampsstudio.com"] [uri "/wp-content/plugins/brandfolder/callback.php"] [unique_id "YzWNqNc1ol3x2S8i3DuCfwAAAAs"] www.ampsstudio.com [Thu Sep 29 14:10:21 2022] [error] [client 172.94.53.5:0] AH01071: Got error 'PHP message: PHP Warning: Cannot modify header information - headers already sent by (output started at /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-includes/functions.php:5275) in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/includes/sonaar-music/css/theme/custom-style.php on line 2' ampsstudio.com [Thu Sep 29 14:27:38 2022] [error] [client 20.163.59.149:0] [client 20.163.59.149] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "ampsstudio.com"] [uri "/.env"] [unique_id "YzWdStc1ol3x2S8i3DuCoQAAAAs"] ampsstudio.com [Thu Sep 29 18:24:10 2022] [error] [client 20.163.59.149:0] [client 20.163.59.149] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "ampsstudio.com"] [uri "/.env"] [unique_id "YzXUuo3Sxpi4i8lqpYZsegAAAAo"] www.ampsstudio.com [Thu Sep 29 18:41:53 2022] [error] [client 66.249.66.143:0] AH01071: Got error 'PHP message: PHP Warning: Attempt to read property "ID" on null in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/archive-event.php on line 15PHP message: PHP Warning: Undefined array key 0 in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/includes/classes/iron_sonaar.class.php on line 212PHP message: PHP Warning: Trying to access array offset on value of type null in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/includes/classes/iron_sonaar.class.php on line 212PHP message: PHP Warning: Undefined array key 0 in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/includes/classes/iron_sonaar.class.php on line 214PHP message: PHP Warning: Trying to access array offset on value of type null in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/includes/classes/iron_sonaar.class.php on line 214' www.ampsstudio.com [Thu Sep 29 18:58:30 2022] [error] [client 20.97.210.105:0] AH01071: Got error 'PHP message: PHP Warning: Undefined array key "HTTP_USER_AGENT" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/bookly-responsive-appointment-booking-tool/frontend/modules/booking/ShortCode.php on line 66' www.ampsstudio.com [Thu Sep 29 19:35:07 2022] [error] [client 86.13.252.29:0] AH01071: Got error 'PHP message: PHP Warning: Cannot modify header information - headers already sent by (output started at /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-includes/functions.php:5275) in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/includes/sonaar-music/css/theme/custom-style.php on line 2' www.ampsstudio.com [Thu Sep 29 19:37:32 2022] [error] [client 86.13.252.29:0] AH01071: Got error 'PHP message: PHP Warning: Cannot modify header information - headers already sent by (output started at /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-includes/functions.php:5275) in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/includes/sonaar-music/css/theme/custom-style.php on line 2' ampsstudio.com [Thu Sep 29 20:51:35 2022] [error] [client 212.162.149.161:0] [client 212.162.149.161] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "ampsstudio.com"] [uri "/.env"] [unique_id "YzX3RxdFmx_FX5EmEBwRBAAAAAk"] ampsstudio.com [Thu Sep 29 20:56:13 2022] [error] [client 40.114.148.8:0] AH01276: Cannot serve directory /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-admin/includes/: No matching DirectoryIndex (index.php,index.html,index.htm) found, and server-generated directory index forbidden by Options directive www.ampsstudio.com [Thu Sep 29 22:22:45 2022] [error] [client 78.29.92.51:0] AH01071: Got error 'PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179' www.ampsstudio.com [Thu Sep 29 22:22:45 2022] [error] [client 78.29.92.51:0] AH01071: Got error 'PHP message: PHP Warning: Cannot modify header information - headers already sent by (output started at /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-includes/functions.php:5275) in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/includes/sonaar-music/css/theme/custom-style.php on line 2' www.ampsstudio.com [Fri Sep 30 01:35:13 2022] [crit] [client 66.249.93.40:0] AH00529: /home/virtual/vps-aa3942/a/aede5353c4/public_html/.well-known/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/virtual/vps-aa3942/a/aede5353c4/public_html/.well-known/' is executable ampsstudio.com [Fri Sep 30 03:52:32 2022] [error] [client 51.142.143.115:0] AH01276: Cannot serve directory /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-admin/css/: No matching DirectoryIndex (index.php,index.html,index.htm) found, and server-generated directory index forbidden by Options directive ampsstudio.com [Fri Sep 30 04:17:49 2022] [error] [client 20.163.59.149:0] [client 20.163.59.149] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "ampsstudio.com"] [uri "/.env"] [unique_id "YzZf3Q-UDWnPe8lITOoWzgAAAAE"] webdisk.ampsstudio.com [Fri Sep 30 04:46:52 2022] [error] [client 109.206.241.214:0] [client 109.206.241.214] ModSecurity: Access denied with code 403 (phase 2). Match of "contains index.php" against "REQUEST_URI" required. [file "remote server"] [line "-1"] [id "570076"] [msg "Malware.Expert - Malware"] [hostname "webdisk.ampsstudio.com"] [uri "/wp-includes/class-wordpress-license.php"] [unique_id "YzZmrJqQqFO9Es-EZKULkwAAAAM"] webdisk.ampsstudio.com [Fri Sep 30 04:47:00 2022] [error] [client 109.206.241.214:0] [client 109.206.241.214] ModSecurity: Access denied with code 403 (phase 2). Match of "contains index.php" against "REQUEST_URI" required. [file "remote server"] [line "-1"] [id "570076"] [msg "Malware.Expert - Malware"] [hostname "webdisk.ampsstudio.com"] [uri "/wp-includes/class-wordpress-license.php"] [unique_id "YzZmtOVkG3PznBH57bRVigAAAAs"] webdisk.ampsstudio.com [Fri Sep 30 04:47:19 2022] [error] [client 109.206.241.214:0] [client 109.206.241.214] ModSecurity: Access denied with code 403 (phase 2). Match of "contains index.php" against "REQUEST_URI" required. [file "remote server"] [line "-1"] [id "570076"] [msg "Malware.Expert - Malware"] [hostname "webdisk.ampsstudio.com"] [uri "/wp-includes/class-index-wordpress.php"] [unique_id "YzZmx-7YCydYr1iKpi65AwAAAAc"] webdisk.ampsstudio.com [Fri Sep 30 04:47:26 2022] [error] [client 109.206.241.214:0] [client 109.206.241.214] ModSecurity: Access denied with code 403 (phase 2). Match of "contains index.php" against "REQUEST_URI" required. [file "remote server"] [line "-1"] [id "570076"] [msg "Malware.Expert - Malware"] [hostname "webdisk.ampsstudio.com"] [uri "/wp-includes/class-index-wordpress.php"] [unique_id "YzZmzuS5EhwD9v39PBiWHwAAAAY"] www.ampsstudio.com [Fri Sep 30 05:03:45 2022] [error] [client 109.248.175.91:0] [client 109.248.175.91] ModSecurity: Access denied with code 403 (phase 2). Pattern match "/wp-content/uploads/.*\\\\.php" at REQUEST_FILENAME. [file "remote server"] [line "-1"] [id "430017"] [msg "Malware.Expert - request_uri: Wordpress - prevent PHP files from executing"] [hostname "www.ampsstudio.com"] [uri "/wp-content/uploads/2022/09/mar.php"] [unique_id "YzZqoeVkG3PznBH57bRVkAAAAAs"] ampsstudio.com [Fri Sep 30 06:36:02 2022] [error] [client 20.163.59.149:0] [client 20.163.59.149] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "ampsstudio.com"] [uri "/.env"] [unique_id "YzaAQr91UYHJo9Qs--3_2gAAAAg"] www.ampsstudio.com [Fri Sep 30 10:19:33 2022] [error] [client 156.146.63.142:0] AH01071: Got error 'PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179' www.ampsstudio.com [Fri Sep 30 10:19:33 2022] [error] [client 156.146.63.142:0] AH01071: Got error 'PHP message: PHP Warning: Cannot modify header information - headers already sent by (output started at /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-includes/functions.php:5275) in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/includes/sonaar-music/css/theme/custom-style.php on line 2' ampsstudio.com [Fri Sep 30 10:20:29 2022] [error] [client 20.97.210.105:0] [client 20.97.210.105] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "ampsstudio.com"] [uri "/.env"] [unique_id "Yza03bFrt8taMGUetK6DygAAAAE"] www.ampsstudio.com [Fri Sep 30 10:25:21 2022] [error] [client 41.216.188.48:0] AH01276: Cannot serve directory /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-admin/css/: No matching DirectoryIndex (index.php,index.html,index.htm) found, and server-generated directory index forbidden by Options directive ampsstudio.com [Fri Sep 30 11:29:33 2022] [error] [client 41.216.188.48:0] AH01276: Cannot serve directory /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-admin/css/: No matching DirectoryIndex (index.php,index.html,index.htm) found, and server-generated directory index forbidden by Options directive www.ampsstudio.com [Fri Sep 30 13:15:37 2022] [crit] [client 66.249.93.44:0] AH00529: /home/virtual/vps-aa3942/a/aede5353c4/public_html/.well-known/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/virtual/vps-aa3942/a/aede5353c4/public_html/.well-known/' is executable cpanel.ampsstudio.com [Fri Sep 30 13:43:59 2022] [error] [client 109.206.241.214:0] [client 109.206.241.214] ModSecurity: Access denied with code 403 (phase 2). Match of "contains index.php" against "REQUEST_URI" required. [file "remote server"] [line "-1"] [id "570076"] [msg "Malware.Expert - Malware"] [hostname "cpanel.ampsstudio.com"] [uri "/wp-includes/class-wordpress-license.php"] [unique_id "Yzbkj2fzsL3eXJtz0oMxlQAAAAA"] cpanel.ampsstudio.com [Fri Sep 30 13:44:08 2022] [error] [client 109.206.241.214:0] [client 109.206.241.214] ModSecurity: Access denied with code 403 (phase 2). Match of "contains index.php" against "REQUEST_URI" required. [file "remote server"] [line "-1"] [id "570076"] [msg "Malware.Expert - Malware"] [hostname "cpanel.ampsstudio.com"] [uri "/wp-includes/class-wordpress-license.php"] [unique_id "YzbkmAs8h9KCfrLQ26x8igAAAAQ"] cpanel.ampsstudio.com [Fri Sep 30 13:44:30 2022] [error] [client 109.206.241.214:0] [client 109.206.241.214] ModSecurity: Access denied with code 403 (phase 2). Match of "contains index.php" against "REQUEST_URI" required. [file "remote server"] [line "-1"] [id "570076"] [msg "Malware.Expert - Malware"] [hostname "cpanel.ampsstudio.com"] [uri "/wp-includes/class-index-wordpress.php"] [unique_id "YzbkruLcEuIaANIw_ZEChQAAAAg"] cpanel.ampsstudio.com [Fri Sep 30 13:44:44 2022] [error] [client 109.206.241.214:0] [client 109.206.241.214] ModSecurity: Access denied with code 403 (phase 2). Match of "contains index.php" against "REQUEST_URI" required. [file "remote server"] [line "-1"] [id "570076"] [msg "Malware.Expert - Malware"] [hostname "cpanel.ampsstudio.com"] [uri "/wp-includes/class-index-wordpress.php"] [unique_id "YzbkvPU4fnbHp2OuKtdH2QAAAAU"] ampsstudio.com [Fri Sep 30 18:01:53 2022] [error] [client 5.188.62.134:0] [client 5.188.62.134] ModSecurity: Access denied with code 403 (phase 1). Pattern match "\\\\.\\\\./\\\\.\\\\." at REQUEST_URI. [file "remote server"] [line "-1"] [id "430064"] [msg "Malware.Expert - request_uri: directory travel"] [hostname "ampsstudio.com"] [uri "/wp-content/plugins/cherry-plugin/admin/import-export/download-content.php"] [unique_id "YzchAUV_PE0895tQPeUnuwAAAAY"] www.ampsstudio.com [Fri Sep 30 18:30:27 2022] [error] [client 2406:da1c:15d:b400:7451:f7e5:9e7e:ba8f:0] AH01071: Got error 'PHP message: PHP Warning: Undefined array key "HTTP_USER_AGENT" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/bookly-responsive-appointment-booking-tool/frontend/modules/booking/ShortCode.php on line 66' ampsstudio.com [Fri Sep 30 22:14:45 2022] [error] [client 85.31.46.140:0] AH01276: Cannot serve directory /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-admin/css/: No matching DirectoryIndex (index.php,index.html,index.htm) found, and server-generated directory index forbidden by Options directive www.ampsstudio.com [Sat Oct 01 02:22:54 2022] [error] [client 40.77.167.68:0] AH01071: Got error 'PHP message: PHP Warning: Attempt to read property "ID" on null in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/includes/classes/iron_sonaar_archive.class.php on line 59PHP message: PHP Warning: Undefined array key 0 in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/includes/classes/iron_sonaar.class.php on line 212PHP message: PHP Warning: Trying to access array offset on value of type null in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/includes/classes/iron_sonaar.class.php on line 212PHP message: PHP Warning: Undefined array key 0 in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/includes/classes/iron_sonaar.class.php on line 214PHP message: PHP Warning: Trying to access array offset on value of type null in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/includes/classes/iron_sonaar.class.php on line 214PHP message: PHP Warning: Attempt to read property "ID" on null in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/includes/classes/iron_sonaar_archive.class.php on line 166PHP message: PHP Warning: Attempt to read property "post_title" on null in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/includes/classes/iron_sonaar_archive.class.php on line 302PHP message: PHP Warning: Attempt to read property "post_title" on null in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/includes/classes/iron_sonaar_archive.class.php on line 302' ampsstudio.com [Sat Oct 01 03:05:33 2022] [error] [client 20.39.251.46:0] [client 20.39.251.46] ModSecurity: Access denied with code 403 (phase 2). Pattern match "/wp-admin/includes/.*\\\\.php" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430034"] [msg "Malware.Expert - request_uri: Wordpress - prevent PHP files from executing"] [hostname "ampsstudio.com"] [uri "/wp-admin/includes/class-wp-media-list-data.php"] [unique_id "YzegbfDg4kILNtuYbDTbVQAAAAs"] ampsstudio.com [Sat Oct 01 03:05:34 2022] [error] [client 20.39.251.46:0] [client 20.39.251.46] ModSecurity: Access denied with code 403 (phase 2). Pattern match "/wp-admin/includes/.*\\\\.php" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430034"] [msg "Malware.Expert - request_uri: Wordpress - prevent PHP files from executing"] [hostname "ampsstudio.com"] [uri "/wp-admin/includes/class-wp-tommunicy-events.php"] [unique_id "YzegbhxGUhnQwpSGDp8_sgAAAA0"] ampsstudio.com [Sat Oct 01 03:36:32 2022] [error] [client 51.142.158.91:0] AH01276: Cannot serve directory /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-admin/css/: No matching DirectoryIndex (index.php,index.html,index.htm) found, and server-generated directory index forbidden by Options directive webmail.ampsstudio.com [Sat Oct 01 03:51:11 2022] [error] [client 92.205.56.212:0] AH01276: Cannot serve directory /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-admin/css/: No matching DirectoryIndex (index.php,index.html,index.htm) found, and server-generated directory index forbidden by Options directive ampsstudio.com [Sat Oct 01 04:15:24 2022] [error] [client 20.163.59.149:0] [client 20.163.59.149] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "ampsstudio.com"] [uri "/.env"] [unique_id "YzewzH4nmXbdfhfPBL6yIgAAAAM"] www.ampsstudio.com [Sat Oct 01 05:58:56 2022] [error] [client 212.227.115.239:0] AH01071: Got error 'PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179' www.ampsstudio.com [Sat Oct 01 05:58:56 2022] [error] [client 212.227.115.239:0] AH01071: Got error 'PHP message: PHP Warning: Cannot modify header information - headers already sent by (output started at /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-includes/functions.php:5275) in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/includes/sonaar-music/css/theme/custom-style.php on line 2' www.ampsstudio.com [Sat Oct 01 05:59:20 2022] [error] [client 181.214.218.43:0] AH01071: Got error 'PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179' www.ampsstudio.com [Sat Oct 01 05:59:20 2022] [error] [client 181.214.218.43:0] AH01071: Got error 'PHP message: PHP Warning: Cannot modify header information - headers already sent by (output started at /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-includes/functions.php:5275) in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/includes/sonaar-music/css/theme/custom-style.php on line 2' www.ampsstudio.com [Sat Oct 01 06:02:19 2022] [error] [client 23.81.60.67:0] AH01071: Got error 'PHP message: PHP Warning: Cannot modify header information - headers already sent by (output started at /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-includes/functions.php:5275) in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/includes/sonaar-music/css/theme/custom-style.php on line 2' mail.ampsstudio.com [Sat Oct 01 10:45:13 2022] [error] [client 109.206.241.214:0] [client 109.206.241.214] ModSecurity: Access denied with code 403 (phase 2). Match of "contains index.php" against "REQUEST_URI" required. [file "remote server"] [line "-1"] [id "570076"] [msg "Malware.Expert - Malware"] [hostname "mail.ampsstudio.com"] [uri "/wp-includes/class-wordpress-license.php"] [unique_id "YzgMKebxUmNRhdUn_e1tmwAAAAA"] mail.ampsstudio.com [Sat Oct 01 10:45:19 2022] [error] [client 109.206.241.214:0] [client 109.206.241.214] ModSecurity: Access denied with code 403 (phase 2). Match of "contains index.php" against "REQUEST_URI" required. [file "remote server"] [line "-1"] [id "570076"] [msg "Malware.Expert - Malware"] [hostname "mail.ampsstudio.com"] [uri "/wp-includes/class-wordpress-license.php"] [unique_id "YzgMLxFnW4_zKYBZahudNwAAAAQ"] mail.ampsstudio.com [Sat Oct 01 10:45:24 2022] [error] [client 109.206.241.214:0] [client 109.206.241.214] ModSecurity: Access denied with code 403 (phase 2). Match of "contains index.php" against "REQUEST_URI" required. [file "remote server"] [line "-1"] [id "570076"] [msg "Malware.Expert - Malware"] [hostname "mail.ampsstudio.com"] [uri "/wp-includes/class-index-wordpress.php"] [unique_id "YzgMNMayrMYLwVMceYAUwgAAAAE"] mail.ampsstudio.com [Sat Oct 01 10:45:34 2022] [error] [client 109.206.241.214:0] [client 109.206.241.214] ModSecurity: Access denied with code 403 (phase 2). Match of "contains index.php" against "REQUEST_URI" required. [file "remote server"] [line "-1"] [id "570076"] [msg "Malware.Expert - Malware"] [hostname "mail.ampsstudio.com"] [uri "/wp-includes/class-index-wordpress.php"] [unique_id "YzgMPuKlhSOsVky3IzTcrwAAAAU"] cpanel.ampsstudio.com [Sat Oct 01 13:09:58 2022] [error] [client 51.142.158.91:0] AH01276: Cannot serve directory /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-admin/css/: No matching DirectoryIndex (index.php,index.html,index.htm) found, and server-generated directory index forbidden by Options directive ampsstudio.com [Sat Oct 01 16:04:30 2022] [error] [client 41.216.188.45:0] [client 41.216.188.45] ModSecurity: Access denied with code 403 (phase 2). Match of "contains index.php" against "REQUEST_URI" required. [file "remote server"] [line "-1"] [id "570076"] [msg "Malware.Expert - Malware"] [hostname "ampsstudio.com"] [uri "/wp-includes/class-wordpress-license.php"] [unique_id "YzhW_ubxUmNRhdUn_e1uGQAAAAA"] ampsstudio.com [Sat Oct 01 16:04:32 2022] [error] [client 41.216.188.45:0] [client 41.216.188.45] ModSecurity: Access denied with code 403 (phase 2). Match of "contains index.php" against "REQUEST_URI" required. [file "remote server"] [line "-1"] [id "570076"] [msg "Malware.Expert - Malware"] [hostname "ampsstudio.com"] [uri "/wp-includes/class-wordpress-license.php"] [unique_id "YzhXAGfGYKNJ5H-j-pADbAAAAAo"] ampsstudio.com [Sat Oct 01 16:04:35 2022] [error] [client 41.216.188.45:0] [client 41.216.188.45] ModSecurity: Access denied with code 403 (phase 2). Match of "contains index.php" against "REQUEST_URI" required. [file "remote server"] [line "-1"] [id "570076"] [msg "Malware.Expert - Malware"] [hostname "ampsstudio.com"] [uri "/wp-includes/class-index-wordpress.php"] [unique_id "YzhXA8ayrMYLwVMceYAVNgAAAAE"] ampsstudio.com [Sat Oct 01 16:04:36 2022] [error] [client 41.216.188.45:0] [client 41.216.188.45] ModSecurity: Access denied with code 403 (phase 2). Match of "contains index.php" against "REQUEST_URI" required. [file "remote server"] [line "-1"] [id "570076"] [msg "Malware.Expert - Malware"] [hostname "ampsstudio.com"] [uri "/wp-includes/class-index-wordpress.php"] [unique_id "YzhXBOKlhSOsVky3IzTdJQAAAAU"] ampsstudio.com [Sat Oct 01 16:15:32 2022] [error] [client 118.97.27.100:0] [client 118.97.27.100] ModSecurity: Access denied with code 403 (phase 2). Pattern match "/wp-admin/js/.*\\\\.php" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430031"] [msg "Malware.Expert - request_uri: Wordpress - prevent PHP files from executing"] [hostname "ampsstudio.com"] [uri "/wp-admin/js/widgets/about.php"] [unique_id "YzhZlGfGYKNJ5H-j-pADcwAAAAo"] www.ampsstudio.com [Sat Oct 01 16:15:33 2022] [error] [client 162.213.252.92:0] AH01276: Cannot serve directory /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-includes/SimplePie/Cache/: No matching DirectoryIndex (index.php,index.html,index.htm) found, and server-generated directory index forbidden by Options directive www.ampsstudio.com [Sat Oct 01 16:15:40 2022] [error] [client 162.213.252.92:0] AH01276: Cannot serve directory /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-includes/rest-api/endpoints/: No matching DirectoryIndex (index.php,index.html,index.htm) found, and server-generated directory index forbidden by Options directive ampsstudio.com [Sat Oct 01 16:15:44 2022] [error] [client 162.213.252.92:0] [client 162.213.252.92] ModSecurity: Access denied with code 403 (phase 2). Pattern match "/wp-content/uploads/.*\\\\.php" at REQUEST_FILENAME. [file "remote server"] [line "-1"] [id "430017"] [msg "Malware.Expert - request_uri: Wordpress - prevent PHP files from executing"] [hostname "ampsstudio.com"] [uri "/wp-content/uploads/about.php"] [unique_id "YzhZoJ9BXPUhMNfNkye_SgAAABE"] ampsstudio.com [Sat Oct 01 16:15:49 2022] [error] [client 50.116.74.176:0] [client 50.116.74.176] ModSecurity: Access denied with code 403 (phase 2). Pattern match "/wp-admin/css/.*\\\\.php" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430027"] [msg "Malware.Expert - request_uri: Wordpress - prevent PHP files from executing"] [hostname "ampsstudio.com"] [uri "/wp-admin/css/colors/ectoplasm/index.php"] [unique_id "YzhZpbN_topVHwWbXQp2RQAAAAY"] ampsstudio.com [Sat Oct 01 16:15:55 2022] [error] [client 162.213.252.92:0] [client 162.213.252.92] ModSecurity: Access denied with code 403 (phase 2). Pattern match "/wp-includes/theme-compat/.*\\\\.php" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430037"] [msg "Malware.Expert - request_uri: Wordpress - prevent PHP files from executing"] [hostname "ampsstudio.com"] [uri "/wp-includes/theme-compat/about.php"] [unique_id "YzhZq2fGYKNJ5H-j-pADdAAAAAo"] www.ampsstudio.com [Sat Oct 01 16:17:16 2022] [error] [client 162.213.252.92:0] AH01276: Cannot serve directory /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-includes/pomo/: No matching DirectoryIndex (index.php,index.html,index.htm) found, and server-generated directory index forbidden by Options directive ampsstudio.com [Sat Oct 01 16:17:20 2022] [error] [client 50.116.74.176:0] [client 50.116.74.176] ModSecurity: Access denied with code 403 (phase 2). Match of "contains /wp-includes/js/tinymce/wp-tinymce.php" against "REQUEST_URI" required. [file "remote server"] [line "-1"] [id "430036"] [msg "Malware.Expert - request_uri: Wordpress - prevent PHP files from executing"] [hostname "ampsstudio.com"] [uri "/wp-includes/js/dist/development/index.php"] [unique_id "YzhaABFnW4_zKYBZahuduQAAAAQ"] ampsstudio.com [Sat Oct 01 16:17:47 2022] [error] [client 162.213.252.92:0] [client 162.213.252.92] ModSecurity: Access denied with code 403 (phase 2). Pattern match "/wp-includes/images/.*\\\\.php" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430032"] [msg "Malware.Expert - request_uri: Wordpress - prevent PHP files from executing"] [hostname "ampsstudio.com"] [uri "/wp-includes/images/smilies/index.php"] [unique_id "YzhaG59BXPUhMNfNkye_TAAAABE"] ampsstudio.com [Sat Oct 01 16:17:57 2022] [error] [client 116.92.222.106:0] [client 116.92.222.106] ModSecurity: Access denied with code 403 (phase 2). Pattern match "/wp-includes/css/.*\\\\.php" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430035"] [msg "Malware.Expert - request_uri: Wordpress - prevent PHP files from executing"] [hostname "ampsstudio.com"] [uri "/wp-includes/css/dist/editor/load.php"] [unique_id "YzhaJQ8ojFfCliy9PomtogAAAAM"] ampsstudio.com [Sat Oct 01 16:18:09 2022] [error] [client 50.116.74.176:0] [client 50.116.74.176] ModSecurity: Access denied with code 403 (phase 2). Match of "contains /wp-includes/js/tinymce/wp-tinymce.php" against "REQUEST_URI" required. [file "remote server"] [line "-1"] [id "430036"] [msg "Malware.Expert - request_uri: Wordpress - prevent PHP files from executing"] [hostname "ampsstudio.com"] [uri "/ramaniauto.com/wp-includes/js/jcrop/Decode/index.php"] [unique_id "YzhaMRFnW4_zKYBZahudugAAAAQ"] ampsstudio.com [Sat Oct 01 16:18:24 2022] [error] [client 200.4.142.32:0] [client 200.4.142.32] ModSecurity: Access denied with code 403 (phase 2). Pattern match "/images/.*\\\\.php" at REQUEST_URI. [file "remote server"] [line "-1"] [id "470000"] [msg "Malware.Expert - request_uri: Images folder - prevent PHP files from executing"] [hostname "ampsstudio.com"] [uri "/images/language/jp.php"] [unique_id "YzhaQGfGYKNJ5H-j-pADdgAAAAo"] www.ampsstudio.com [Sat Oct 01 16:18:42 2022] [error] [client 50.116.74.176:0] AH01276: Cannot serve directory /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-includes/Requests/Exception/Transport/: No matching DirectoryIndex (index.php,index.html,index.htm) found, and server-generated directory index forbidden by Options directive www.ampsstudio.com [Sat Oct 01 16:19:59 2022] [error] [client 50.116.74.176:0] AH01276: Cannot serve directory /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-includes/Text/Diff/Engine/: No matching DirectoryIndex (index.php,index.html,index.htm) found, and server-generated directory index forbidden by Options directive ampsstudio.com [Sat Oct 01 16:20:52 2022] [error] [client 200.4.142.32:0] [client 200.4.142.32] ModSecurity: Access denied with code 403 (phase 2). Pattern match "/wp-includes/css/.*\\\\.php" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430035"] [msg "Malware.Expert - request_uri: Wordpress - prevent PHP files from executing"] [hostname "ampsstudio.com"] [uri "/wp-includes/css/wp-embed-template-ie.min.php"] [unique_id "Yzha1OKlhSOsVky3IzTdNAAAAAU"] www.ampsstudio.com [Sat Oct 01 16:21:11 2022] [error] [client 162.213.252.92:0] AH01276: Cannot serve directory /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-includes/blocks/categories/: No matching DirectoryIndex (index.php,index.html,index.htm) found, and server-generated directory index forbidden by Options directive ampsstudio.com [Sat Oct 01 16:21:38 2022] [error] [client 162.213.252.92:0] [client 162.213.252.92] ModSecurity: Access denied with code 403 (phase 2). Pattern match "/wp-content/uploads/.*\\\\.php" at REQUEST_FILENAME. [file "remote server"] [line "-1"] [id "430017"] [msg "Malware.Expert - request_uri: Wordpress - prevent PHP files from executing"] [hostname "ampsstudio.com"] [uri "/wp-content/uploads/2016/index.php"] [unique_id "YzhbAmfGYKNJ5H-j-pADewAAAAo"] ampsstudio.com [Sat Oct 01 16:22:08 2022] [error] [client 118.97.27.100:0] [client 118.97.27.100] ModSecurity: Access denied with code 403 (phase 2). Match of "contains /wp-includes/js/tinymce/wp-tinymce.php" against "REQUEST_URI" required. [file "remote server"] [line "-1"] [id "430036"] [msg "Malware.Expert - request_uri: Wordpress - prevent PHP files from executing"] [hostname "ampsstudio.com"] [uri "/wp-includes/js/imgareaselect/about.php"] [unique_id "YzhbIA8ojFfCliy9PomtqQAAAAM"] ampsstudio.com [Sat Oct 01 16:22:18 2022] [error] [client 116.92.222.106:0] [client 116.92.222.106] ModSecurity: Access denied with code 403 (phase 2). Match of "contains /wp-includes/js/tinymce/wp-tinymce.php" against "REQUEST_URI" required. [file "remote server"] [line "-1"] [id "430036"] [msg "Malware.Expert - request_uri: Wordpress - prevent PHP files from executing"] [hostname "ampsstudio.com"] [uri "/wp-includes/js/swfupload/plugins/load.php"] [unique_id "YzhbKhFnW4_zKYBZahudwQAAAAQ"] www.ampsstudio.com [Sat Oct 01 16:22:41 2022] [error] [client 162.213.252.92:0] AH01276: Cannot serve directory /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-includes/blocks/social-link/: No matching DirectoryIndex (index.php,index.html,index.htm) found, and server-generated directory index forbidden by Options directive ampsstudio.com [Sat Oct 01 16:23:23 2022] [error] [client 50.116.74.176:0] [client 50.116.74.176] ModSecurity: Access denied with code 403 (phase 2). Match of "contains /wp-includes/js/tinymce/wp-tinymce.php" against "REQUEST_URI" required. [file "remote server"] [line "-1"] [id "430036"] [msg "Malware.Expert - request_uri: Wordpress - prevent PHP files from executing"] [hostname "ampsstudio.com"] [uri "/wp-includes/js/dist/vendor/index.php"] [unique_id "Yzhba-KlhSOsVky3IzTdOQAAAAU"] ampsstudio.com [Sat Oct 01 16:25:46 2022] [error] [client 116.92.222.106:0] [client 116.92.222.106] ModSecurity: Access denied with code 403 (phase 2). Pattern match "/images/.*\\\\.php" at REQUEST_URI. [file "remote server"] [line "-1"] [id "470000"] [msg "Malware.Expert - request_uri: Images folder - prevent PHP files from executing"] [hostname "ampsstudio.com"] [uri "/wp-content/themes/twentyeleven/inc/images/load.php"] [unique_id "Yzhb-g8ojFfCliy9PomtrgAAAAM"] ampsstudio.com [Sat Oct 01 16:25:51 2022] [error] [client 200.4.142.32:0] [client 200.4.142.32] ModSecurity: Access denied with code 403 (phase 2). Pattern match "/wp-admin/js/.*\\\\.php" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430031"] [msg "Malware.Expert - request_uri: Wordpress - prevent PHP files from executing"] [hostname "ampsstudio.com"] [uri "/wp-admin/js/privacy-tools.min.php"] [unique_id "Yzhb_0CEopNpWNKriXVJuAAAAAg"] ampsstudio.com [Sat Oct 01 16:27:20 2022] [error] [client 118.97.27.100:0] [client 118.97.27.100] ModSecurity: Access denied with code 403 (phase 2). Pattern match "/wp-admin/images/.*\\\\.php" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430030"] [msg "Malware.Expert - request_uri: Wordpress - prevent PHP files from executing"] [hostname "ampsstudio.com"] [uri "/wp-admin/images/about.php"] [unique_id "YzhcWA8ojFfCliy9PomtrwAAAAM"] www.ampsstudio.com [Sat Oct 01 16:28:37 2022] [error] [client 118.97.27.100:0] AH01276: Cannot serve directory /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/languages/plugins/: No matching DirectoryIndex (index.php,index.html,index.htm) found, and server-generated directory index forbidden by Options directive www.ampsstudio.com [Sat Oct 01 16:31:03 2022] [error] [client 118.97.27.100:0] AH01276: Cannot serve directory /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-includes/blocks/verse/: No matching DirectoryIndex (index.php,index.html,index.htm) found, and server-generated directory index forbidden by Options directive bitbucket.ampsstudio.com [Sat Oct 01 16:44:12 2022] [error] [client 104.200.146.41:0] AH01071: Got error 'PHP message: PHP Warning: Undefined array key "HTTP_USER_AGENT" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/bookly-responsive-appointment-booking-tool/frontend/modules/booking/ShortCode.php on line 66' www.ampsstudio.com [Sat Oct 01 17:17:31 2022] [error] [client 124.121.138.192:0] AH01071: Got error 'PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179' www.ampsstudio.com [Sat Oct 01 17:17:31 2022] [error] [client 124.121.138.192:0] AH01071: Got error 'PHP message: PHP Warning: Cannot modify header information - headers already sent by (output started at /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-includes/functions.php:5275) in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/includes/sonaar-music/css/theme/custom-style.php on line 2' ampsstudio.com [Sat Oct 01 17:49:27 2022] [error] [client 65.108.247.96:0] [client 65.108.247.96] ModSecurity: Access denied with code 403 (phase 2). String match "anonymousfox" at REQUEST_HEADERS:referer. [file "remote server"] [line "-1"] [id "425001"] [msg "Malware.Expert - Referer: anonymousfox.co"] [hostname "ampsstudio.com"] [uri "/wp-content/plugins/wpdiscuz/themes/default/style-rtl.css"] [unique_id "Yzhvl0CEopNpWNKriXVJ9AAAAAg"] www.ampsstudio.com [Sat Oct 01 18:49:08 2022] [error] [client 165.231.182.139:0] AH01071: Got error 'PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179' www.ampsstudio.com [Sat Oct 01 18:49:08 2022] [error] [client 165.231.182.139:0] AH01071: Got error 'PHP message: PHP Warning: Cannot modify header information - headers already sent by (output started at /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-includes/functions.php:5275) in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/includes/sonaar-music/css/theme/custom-style.php on line 2' ampsstudio.com [Sat Oct 01 20:05:20 2022] [error] [client 41.216.188.48:0] AH01276: Cannot serve directory /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-admin/css/: No matching DirectoryIndex (index.php,index.html,index.htm) found, and server-generated directory index forbidden by Options directive www.ampsstudio.com [Sat Oct 01 21:38:39 2022] [crit] [client 66.249.93.40:0] AH00529: /home/virtual/vps-aa3942/a/aede5353c4/public_html/.well-known/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/virtual/vps-aa3942/a/aede5353c4/public_html/.well-known/' is executable ampsstudio.com [Sat Oct 01 22:44:45 2022] [error] [client 20.234.237.183:0] [client 20.234.237.183] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "ampsstudio.com"] [uri "/.env"] [unique_id "Yzi0zUCEopNpWNKriXVKagAAAAg"] ampsstudio.com [Sat Oct 01 22:50:17 2022] [error] [client 5.188.62.134:0] [client 5.188.62.134] ModSecurity: Access denied with code 403 (phase 1). Pattern match "\\\\.\\\\./\\\\.\\\\." at REQUEST_URI. [file "remote server"] [line "-1"] [id "430064"] [msg "Malware.Expert - request_uri: directory travel"] [hostname "ampsstudio.com"] [uri "/wp-content/plugins/cherry-plugin/admin/import-export/download-content.php"] [unique_id "Yzi2GZ9BXPUhMNfNkyfAEQAAABE"] webdisk.ampsstudio.com [Sat Oct 01 23:48:15 2022] [error] [client 171.22.30.34:0] [client 171.22.30.34] ModSecurity: Access denied with code 403 (phase 2). String match "/.git/config" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430058"] [msg "Malware.Expert - request_uri: .git config"] [hostname "webdisk.ampsstudio.com"] [uri "/.git/config"] [unique_id "YzjDrz1HI_avUFhdPLQ45QAAAAA"] www.ampsstudio.com [Sun Oct 02 00:33:13 2022] [error] [client 5.227.27.161:0] AH01071: Got error 'PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179' www.ampsstudio.com [Sun Oct 02 00:33:13 2022] [error] [client 5.227.27.161:0] AH01071: Got error 'PHP message: PHP Warning: Cannot modify header information - headers already sent by (output started at /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-includes/functions.php:5275) in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/includes/sonaar-music/css/theme/custom-style.php on line 2' www.ampsstudio.com [Sun Oct 02 02:29:51 2022] [error] [client 156.146.63.142:0] AH01071: Got error 'PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179' www.ampsstudio.com [Sun Oct 02 02:29:51 2022] [error] [client 156.146.63.142:0] AH01071: Got error 'PHP message: PHP Warning: Cannot modify header information - headers already sent by (output started at /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-includes/functions.php:5275) in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/includes/sonaar-music/css/theme/custom-style.php on line 2' www.ampsstudio.com [Sun Oct 02 05:44:44 2022] [error] [client 139.59.230.191:0] AH01071: Got error 'PHP message: PHP Warning: Undefined array key "HTTP_USER_AGENT" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/bookly-responsive-appointment-booking-tool/frontend/modules/booking/ShortCode.php on line 66' ampsstudio.com [Sun Oct 02 06:09:01 2022] [error] [client 20.40.248.132:0] [client 20.40.248.132] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "ampsstudio.com"] [uri "/admin/.env"] [unique_id "Yzkc7Wi79ICkoR2-vrQeQQAAAAo"] ampsstudio.com [Sun Oct 02 06:09:02 2022] [error] [client 20.40.248.132:0] [client 20.40.248.132] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "ampsstudio.com"] [uri "/core/.env"] [unique_id "Yzkc7u7gHcGe7-kUbXB_ywAAAAI"] ampsstudio.com [Sun Oct 02 06:09:03 2022] [error] [client 20.40.248.132:0] [client 20.40.248.132] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "ampsstudio.com"] [uri "/API/.env"] [unique_id "Yzkc7zlMT42tvlDKFhfhqgAAAAE"] ampsstudio.com [Sun Oct 02 06:09:04 2022] [error] [client 20.40.248.132:0] [client 20.40.248.132] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "ampsstudio.com"] [uri "/APP/.env"] [unique_id "Yzkc8FEsmRjLJvgNMJ9JtAAAAAU"] ampsstudio.com [Sun Oct 02 06:09:05 2022] [error] [client 20.40.248.132:0] [client 20.40.248.132] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "ampsstudio.com"] [uri "/app/.env"] [unique_id "Yzkc8XdBhoPqDq8jDMURmwAAAAA"] ampsstudio.com [Sun Oct 02 06:09:06 2022] [error] [client 20.40.248.132:0] [client 20.40.248.132] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "ampsstudio.com"] [uri "/api/.env"] [unique_id "Yzkc8qvLyBJUhwFFzSAU6QAAAAQ"] ampsstudio.com [Sun Oct 02 06:09:07 2022] [error] [client 20.40.248.132:0] [client 20.40.248.132] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "ampsstudio.com"] [uri "/blog/.env"] [unique_id "Yzkc806ieoMvae4ArGOgzAAAAAM"] ampsstudio.com [Sun Oct 02 06:09:08 2022] [error] [client 20.40.248.132:0] [client 20.40.248.132] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "ampsstudio.com"] [uri "/admin/.env.save"] [unique_id "Yzkc9BDKyMqJW7sbpRUiAwAAABE"] ampsstudio.com [Sun Oct 02 06:09:09 2022] [error] [client 20.40.248.132:0] [client 20.40.248.132] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "ampsstudio.com"] [uri "/core/.env.save"] [unique_id "Yzkc9e7gHcGe7-kUbXB_zAAAAAI"] ampsstudio.com [Sun Oct 02 06:09:10 2022] [error] [client 20.40.248.132:0] [client 20.40.248.132] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "ampsstudio.com"] [uri "/API/.env.save"] [unique_id "Yzkc9jlMT42tvlDKFhfhqwAAAAE"] ampsstudio.com [Sun Oct 02 06:09:11 2022] [error] [client 20.40.248.132:0] [client 20.40.248.132] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "ampsstudio.com"] [uri "/APP/.env.save"] [unique_id "Yzkc91EsmRjLJvgNMJ9JtQAAAAU"] ampsstudio.com [Sun Oct 02 06:09:12 2022] [error] [client 20.40.248.132:0] [client 20.40.248.132] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "ampsstudio.com"] [uri "/app/.env.save"] [unique_id "Yzkc-Gi79ICkoR2-vrQeQgAAAAo"] ampsstudio.com [Sun Oct 02 06:09:13 2022] [error] [client 20.40.248.132:0] [client 20.40.248.132] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "ampsstudio.com"] [uri "/api/.env.save"] [unique_id "Yzkc-XdBhoPqDq8jDMURnAAAAAA"] ampsstudio.com [Sun Oct 02 06:09:14 2022] [error] [client 20.40.248.132:0] [client 20.40.248.132] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "ampsstudio.com"] [uri "/blog/.env.save"] [unique_id "Yzkc-qvLyBJUhwFFzSAU6gAAAAQ"] ampsstudio.com [Sun Oct 02 06:09:15 2022] [error] [client 20.40.248.132:0] [client 20.40.248.132] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "ampsstudio.com"] [uri "/admin/.env.local"] [unique_id "Yzkc-06ieoMvae4ArGOgzQAAAAM"] ampsstudio.com [Sun Oct 02 06:09:15 2022] [error] [client 20.40.248.132:0] [client 20.40.248.132] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "ampsstudio.com"] [uri "/core/.env.local"] [unique_id "Yzkc-xDKyMqJW7sbpRUiBAAAABE"] ampsstudio.com [Sun Oct 02 06:09:16 2022] [error] [client 20.40.248.132:0] [client 20.40.248.132] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "ampsstudio.com"] [uri "/API/.env.local"] [unique_id "Yzkc_O7gHcGe7-kUbXB_zQAAAAI"] ampsstudio.com [Sun Oct 02 06:09:17 2022] [error] [client 20.40.248.132:0] [client 20.40.248.132] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "ampsstudio.com"] [uri "/APP/.env.local"] [unique_id "Yzkc_TlMT42tvlDKFhfhrAAAAAE"] ampsstudio.com [Sun Oct 02 06:09:18 2022] [error] [client 20.40.248.132:0] [client 20.40.248.132] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "ampsstudio.com"] [uri "/app/.env.local"] [unique_id "Yzkc_lEsmRjLJvgNMJ9JtgAAAAU"] ampsstudio.com [Sun Oct 02 06:09:19 2022] [error] [client 20.40.248.132:0] [client 20.40.248.132] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "ampsstudio.com"] [uri "/api/.env.local"] [unique_id "Yzkc_2i79ICkoR2-vrQeQwAAAAo"] ampsstudio.com [Sun Oct 02 06:09:20 2022] [error] [client 20.40.248.132:0] [client 20.40.248.132] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "ampsstudio.com"] [uri "/blog/.env.local"] [unique_id "YzkdAHdBhoPqDq8jDMURnQAAAAA"] ampsstudio.com [Sun Oct 02 06:09:21 2022] [error] [client 20.40.248.132:0] [client 20.40.248.132] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "ampsstudio.com"] [uri "/admin/.env.backup"] [unique_id "YzkdAavLyBJUhwFFzSAU6wAAAAQ"] ampsstudio.com [Sun Oct 02 06:09:23 2022] [error] [client 20.40.248.132:0] [client 20.40.248.132] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "ampsstudio.com"] [uri "/core/.env.backup"] [unique_id "YzkdA06ieoMvae4ArGOgzgAAAAM"] ampsstudio.com [Sun Oct 02 06:09:24 2022] [error] [client 20.40.248.132:0] [client 20.40.248.132] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "ampsstudio.com"] [uri "/API/.env.backup"] [unique_id "YzkdBBDKyMqJW7sbpRUiBQAAABE"] ampsstudio.com [Sun Oct 02 06:09:25 2022] [error] [client 20.40.248.132:0] [client 20.40.248.132] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "ampsstudio.com"] [uri "/APP/.env.backup"] [unique_id "YzkdBe7gHcGe7-kUbXB_zgAAAAI"] ampsstudio.com [Sun Oct 02 06:09:26 2022] [error] [client 20.40.248.132:0] [client 20.40.248.132] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "ampsstudio.com"] [uri "/app/.env.backup"] [unique_id "YzkdBjlMT42tvlDKFhfhrQAAAAE"] ampsstudio.com [Sun Oct 02 06:09:27 2022] [error] [client 20.40.248.132:0] [client 20.40.248.132] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "ampsstudio.com"] [uri "/api/.env.backup"] [unique_id "YzkdB1EsmRjLJvgNMJ9JtwAAAAU"] ampsstudio.com [Sun Oct 02 06:09:28 2022] [error] [client 20.40.248.132:0] [client 20.40.248.132] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "ampsstudio.com"] [uri "/blog/.env.backup"] [unique_id "YzkdCGi79ICkoR2-vrQeRAAAAAo"] ampsstudio.com [Sun Oct 02 06:09:29 2022] [error] [client 20.40.248.132:0] [client 20.40.248.132] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "ampsstudio.com"] [uri "/laravel/.env"] [unique_id "YzkdCXdBhoPqDq8jDMURngAAAAA"] ampsstudio.com [Sun Oct 02 06:09:30 2022] [error] [client 20.40.248.132:0] [client 20.40.248.132] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "ampsstudio.com"] [uri "/laravel/.env.backup"] [unique_id "YzkdCqvLyBJUhwFFzSAU7AAAAAQ"] ampsstudio.com [Sun Oct 02 06:09:31 2022] [error] [client 20.40.248.132:0] [client 20.40.248.132] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "ampsstudio.com"] [uri "/laravel/.env.local"] [unique_id "YzkdC06ieoMvae4ArGOgzwAAAAM"] ampsstudio.com [Sun Oct 02 06:09:32 2022] [error] [client 20.40.248.132:0] [client 20.40.248.132] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "ampsstudio.com"] [uri "/laravel/.env.save"] [unique_id "YzkdDBDKyMqJW7sbpRUiBgAAABE"] ampsstudio.com [Sun Oct 02 06:09:32 2022] [error] [client 20.40.248.132:0] [client 20.40.248.132] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "ampsstudio.com"] [uri "/lv/.env"] [unique_id "YzkdDO7gHcGe7-kUbXB_zwAAAAI"] ampsstudio.com [Sun Oct 02 06:09:34 2022] [error] [client 20.40.248.132:0] [client 20.40.248.132] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "ampsstudio.com"] [uri "/lv/.env.backup"] [unique_id "YzkdDjlMT42tvlDKFhfhrgAAAAE"] ampsstudio.com [Sun Oct 02 06:09:35 2022] [error] [client 20.40.248.132:0] [client 20.40.248.132] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "ampsstudio.com"] [uri "/lv/.env.local"] [unique_id "YzkdD1EsmRjLJvgNMJ9JuAAAAAU"] ampsstudio.com [Sun Oct 02 06:09:36 2022] [error] [client 20.40.248.132:0] [client 20.40.248.132] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "ampsstudio.com"] [uri "/lv/.env.save"] [unique_id "YzkdEGi79ICkoR2-vrQeRQAAAAo"] ampsstudio.com [Sun Oct 02 06:09:36 2022] [error] [client 20.40.248.132:0] [client 20.40.248.132] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "ampsstudio.com"] [uri "/.env"] [unique_id "YzkdEHdBhoPqDq8jDMURnwAAAAA"] www.ampsstudio.com [Sun Oct 02 06:12:55 2022] [error] [client 185.197.75.208:0] AH01071: Got error 'PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179' www.ampsstudio.com [Sun Oct 02 06:12:55 2022] [error] [client 185.197.75.208:0] AH01071: Got error 'PHP message: PHP Warning: Cannot modify header information - headers already sent by (output started at /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-includes/functions.php:5275) in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/includes/sonaar-music/css/theme/custom-style.php on line 2' ampsstudio.com [Sun Oct 02 06:16:36 2022] [error] [client 20.40.248.132:0] [client 20.40.248.132] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "ampsstudio.com"] [uri "/admin/.env"] [unique_id "YzketKvLyBJUhwFFzSAU7wAAAAQ"] ampsstudio.com [Sun Oct 02 06:16:37 2022] [error] [client 20.40.248.132:0] [client 20.40.248.132] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "ampsstudio.com"] [uri "/core/.env"] [unique_id "Yzkete7gHcGe7-kUbXB_0gAAAAI"] ampsstudio.com [Sun Oct 02 06:16:38 2022] [error] [client 20.40.248.132:0] [client 20.40.248.132] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "ampsstudio.com"] [uri "/API/.env"] [unique_id "Yzketk6ieoMvae4ArGOg0gAAAAM"] ampsstudio.com [Sun Oct 02 06:16:39 2022] [error] [client 20.40.248.132:0] [client 20.40.248.132] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "ampsstudio.com"] [uri "/APP/.env"] [unique_id "YzketzlMT42tvlDKFhfhsQAAAAE"] ampsstudio.com [Sun Oct 02 06:16:39 2022] [error] [client 20.40.248.132:0] [client 20.40.248.132] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "ampsstudio.com"] [uri "/app/.env"] [unique_id "Yzket2i79ICkoR2-vrQeSAAAAAo"] ampsstudio.com [Sun Oct 02 06:16:40 2022] [error] [client 20.40.248.132:0] [client 20.40.248.132] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "ampsstudio.com"] [uri "/api/.env"] [unique_id "YzkeuFEsmRjLJvgNMJ9JuwAAAAU"] ampsstudio.com [Sun Oct 02 06:16:41 2022] [error] [client 20.40.248.132:0] [client 20.40.248.132] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "ampsstudio.com"] [uri "/blog/.env"] [unique_id "YzkeuXdBhoPqDq8jDMURogAAAAA"] ampsstudio.com [Sun Oct 02 06:16:42 2022] [error] [client 20.40.248.132:0] [client 20.40.248.132] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "ampsstudio.com"] [uri "/admin/.env.save"] [unique_id "YzkeuhDKyMqJW7sbpRUiCgAAABE"] ampsstudio.com [Sun Oct 02 06:16:43 2022] [error] [client 20.40.248.132:0] [client 20.40.248.132] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "ampsstudio.com"] [uri "/core/.env.save"] [unique_id "Yzkeu6vLyBJUhwFFzSAU8AAAAAQ"] ampsstudio.com [Sun Oct 02 06:16:44 2022] [error] [client 20.40.248.132:0] [client 20.40.248.132] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "ampsstudio.com"] [uri "/API/.env.save"] [unique_id "YzkevO7gHcGe7-kUbXB_0wAAAAI"] ampsstudio.com [Sun Oct 02 06:16:46 2022] [error] [client 20.40.248.132:0] [client 20.40.248.132] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "ampsstudio.com"] [uri "/APP/.env.save"] [unique_id "Yzkevk6ieoMvae4ArGOg0wAAAAM"] ampsstudio.com [Sun Oct 02 06:16:47 2022] [error] [client 20.40.248.132:0] [client 20.40.248.132] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "ampsstudio.com"] [uri "/app/.env.save"] [unique_id "YzkevzlMT42tvlDKFhfhsgAAAAE"] ampsstudio.com [Sun Oct 02 06:16:47 2022] [error] [client 20.40.248.132:0] [client 20.40.248.132] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "ampsstudio.com"] [uri "/api/.env.save"] [unique_id "Yzkev1EsmRjLJvgNMJ9JvAAAAAU"] ampsstudio.com [Sun Oct 02 06:16:48 2022] [error] [client 20.40.248.132:0] [client 20.40.248.132] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "ampsstudio.com"] [uri "/blog/.env.save"] [unique_id "YzkewHdBhoPqDq8jDMURowAAAAA"] ampsstudio.com [Sun Oct 02 06:16:49 2022] [error] [client 20.40.248.132:0] [client 20.40.248.132] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "ampsstudio.com"] [uri "/admin/.env.local"] [unique_id "YzkewRDKyMqJW7sbpRUiCwAAABE"] ampsstudio.com [Sun Oct 02 06:16:50 2022] [error] [client 20.40.248.132:0] [client 20.40.248.132] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "ampsstudio.com"] [uri "/core/.env.local"] [unique_id "Yzkewmi79ICkoR2-vrQeSQAAAAo"] ampsstudio.com [Sun Oct 02 06:16:51 2022] [error] [client 20.40.248.132:0] [client 20.40.248.132] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "ampsstudio.com"] [uri "/API/.env.local"] [unique_id "Yzkew6vLyBJUhwFFzSAU8QAAAAQ"] ampsstudio.com [Sun Oct 02 06:16:52 2022] [error] [client 20.40.248.132:0] [client 20.40.248.132] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "ampsstudio.com"] [uri "/APP/.env.local"] [unique_id "YzkexO7gHcGe7-kUbXB_1AAAAAI"] ampsstudio.com [Sun Oct 02 06:16:53 2022] [error] [client 20.40.248.132:0] [client 20.40.248.132] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "ampsstudio.com"] [uri "/app/.env.local"] [unique_id "YzkexTlMT42tvlDKFhfhswAAAAE"] ampsstudio.com [Sun Oct 02 06:16:54 2022] [error] [client 20.40.248.132:0] [client 20.40.248.132] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "ampsstudio.com"] [uri "/api/.env.local"] [unique_id "YzkexlEsmRjLJvgNMJ9JvQAAAAU"] ampsstudio.com [Sun Oct 02 06:16:55 2022] [error] [client 20.40.248.132:0] [client 20.40.248.132] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "ampsstudio.com"] [uri "/blog/.env.local"] [unique_id "Yzkex3dBhoPqDq8jDMURpAAAAAA"] ampsstudio.com [Sun Oct 02 06:16:56 2022] [error] [client 20.40.248.132:0] [client 20.40.248.132] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "ampsstudio.com"] [uri "/admin/.env.backup"] [unique_id "YzkeyE6ieoMvae4ArGOg1AAAAAM"] ampsstudio.com [Sun Oct 02 06:16:57 2022] [error] [client 20.40.248.132:0] [client 20.40.248.132] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "ampsstudio.com"] [uri "/core/.env.backup"] [unique_id "YzkeyRDKyMqJW7sbpRUiDAAAABE"] ampsstudio.com [Sun Oct 02 06:16:58 2022] [error] [client 20.40.248.132:0] [client 20.40.248.132] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "ampsstudio.com"] [uri "/API/.env.backup"] [unique_id "Yzkeymi79ICkoR2-vrQeSgAAAAo"] ampsstudio.com [Sun Oct 02 06:16:59 2022] [error] [client 20.40.248.132:0] [client 20.40.248.132] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "ampsstudio.com"] [uri "/APP/.env.backup"] [unique_id "Yzkey-7gHcGe7-kUbXB_1QAAAAI"] ampsstudio.com [Sun Oct 02 06:17:00 2022] [error] [client 20.40.248.132:0] [client 20.40.248.132] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "ampsstudio.com"] [uri "/app/.env.backup"] [unique_id "YzkezDlMT42tvlDKFhfhtAAAAAE"] ampsstudio.com [Sun Oct 02 06:17:01 2022] [error] [client 20.40.248.132:0] [client 20.40.248.132] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "ampsstudio.com"] [uri "/api/.env.backup"] [unique_id "YzkezVEsmRjLJvgNMJ9JvgAAAAU"] ampsstudio.com [Sun Oct 02 06:17:02 2022] [error] [client 20.40.248.132:0] [client 20.40.248.132] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "ampsstudio.com"] [uri "/blog/.env.backup"] [unique_id "YzkezqvLyBJUhwFFzSAU8gAAAAQ"] ampsstudio.com [Sun Oct 02 06:17:03 2022] [error] [client 20.40.248.132:0] [client 20.40.248.132] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "ampsstudio.com"] [uri "/laravel/.env"] [unique_id "Yzkez3dBhoPqDq8jDMURpQAAAAA"] ampsstudio.com [Sun Oct 02 06:17:04 2022] [error] [client 20.40.248.132:0] [client 20.40.248.132] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "ampsstudio.com"] [uri "/laravel/.env.backup"] [unique_id "Yzke0E6ieoMvae4ArGOg1QAAAAM"] ampsstudio.com [Sun Oct 02 06:17:04 2022] [error] [client 20.40.248.132:0] [client 20.40.248.132] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "ampsstudio.com"] [uri "/laravel/.env.local"] [unique_id "Yzke0BDKyMqJW7sbpRUiDQAAABE"] ampsstudio.com [Sun Oct 02 06:17:05 2022] [error] [client 20.40.248.132:0] [client 20.40.248.132] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "ampsstudio.com"] [uri "/laravel/.env.save"] [unique_id "Yzke0Wi79ICkoR2-vrQeSwAAAAo"] ampsstudio.com [Sun Oct 02 06:17:06 2022] [error] [client 20.40.248.132:0] [client 20.40.248.132] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "ampsstudio.com"] [uri "/lv/.env"] [unique_id "Yzke0u7gHcGe7-kUbXB_1gAAAAI"] ampsstudio.com [Sun Oct 02 06:17:07 2022] [error] [client 20.40.248.132:0] [client 20.40.248.132] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "ampsstudio.com"] [uri "/lv/.env.backup"] [unique_id "Yzke0zlMT42tvlDKFhfhtQAAAAE"] ampsstudio.com [Sun Oct 02 06:17:07 2022] [error] [client 20.40.248.132:0] [client 20.40.248.132] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "ampsstudio.com"] [uri "/lv/.env.local"] [unique_id "Yzke01EsmRjLJvgNMJ9JvwAAAAU"] ampsstudio.com [Sun Oct 02 06:17:08 2022] [error] [client 20.40.248.132:0] [client 20.40.248.132] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "ampsstudio.com"] [uri "/lv/.env.save"] [unique_id "Yzke1KvLyBJUhwFFzSAU8wAAAAQ"] ampsstudio.com [Sun Oct 02 06:17:09 2022] [error] [client 20.40.248.132:0] [client 20.40.248.132] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "ampsstudio.com"] [uri "/.env"] [unique_id "Yzke1XdBhoPqDq8jDMURpgAAAAA"] ampsstudio.com [Sun Oct 02 06:17:10 2022] [error] [client 20.40.248.132:0] [client 20.40.248.132] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "ampsstudio.com"] [uri "/.env.backup"] [unique_id "Yzke1k6ieoMvae4ArGOg1gAAAAM"] ampsstudio.com [Sun Oct 02 06:17:11 2022] [error] [client 20.40.248.132:0] [client 20.40.248.132] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "ampsstudio.com"] [uri "/.env.local"] [unique_id "Yzke1xDKyMqJW7sbpRUiDgAAABE"] ampsstudio.com [Sun Oct 02 06:17:12 2022] [error] [client 20.40.248.132:0] [client 20.40.248.132] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "ampsstudio.com"] [uri "/.env.save"] [unique_id "Yzke2Gi79ICkoR2-vrQeTAAAAAo"] ampsstudio.com [Sun Oct 02 06:17:13 2022] [error] [client 20.40.248.132:0] [client 20.40.248.132] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "ampsstudio.com"] [uri "/test/.env"] [unique_id "Yzke2TlMT42tvlDKFhfhtgAAAAE"] ampsstudio.com [Sun Oct 02 06:17:14 2022] [error] [client 20.40.248.132:0] [client 20.40.248.132] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "ampsstudio.com"] [uri "/test/.env.backup"] [unique_id "Yzke2lEsmRjLJvgNMJ9JwAAAAAU"] ampsstudio.com [Sun Oct 02 06:17:15 2022] [error] [client 20.40.248.132:0] [client 20.40.248.132] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "ampsstudio.com"] [uri "/test/.env.local"] [unique_id "Yzke26vLyBJUhwFFzSAU9AAAAAQ"] ampsstudio.com [Sun Oct 02 06:17:16 2022] [error] [client 20.40.248.132:0] [client 20.40.248.132] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "ampsstudio.com"] [uri "/test/.env.save"] [unique_id "Yzke3O7gHcGe7-kUbXB_1wAAAAI"] ampsstudio.com [Sun Oct 02 06:17:17 2022] [error] [client 20.40.248.132:0] [client 20.40.248.132] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "ampsstudio.com"] [uri "/dev/.env"] [unique_id "Yzke3U6ieoMvae4ArGOg1wAAAAM"] ampsstudio.com [Sun Oct 02 06:17:17 2022] [error] [client 20.40.248.132:0] [client 20.40.248.132] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "ampsstudio.com"] [uri "/dev/.env.backup"] [unique_id "Yzke3RDKyMqJW7sbpRUiDwAAABE"] ampsstudio.com [Sun Oct 02 06:17:18 2022] [error] [client 20.40.248.132:0] [client 20.40.248.132] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "ampsstudio.com"] [uri "/dev/.env.local"] [unique_id "Yzke3ndBhoPqDq8jDMURpwAAAAA"] ampsstudio.com [Sun Oct 02 06:17:19 2022] [error] [client 20.40.248.132:0] [client 20.40.248.132] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "ampsstudio.com"] [uri "/dev/.env.save"] [unique_id "Yzke3zlMT42tvlDKFhfhtwAAAAE"] mail.ampsstudio.com [Sun Oct 02 08:30:40 2022] [error] [client 51.142.158.91:0] AH01276: Cannot serve directory /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-admin/css/: No matching DirectoryIndex (index.php,index.html,index.htm) found, and server-generated directory index forbidden by Options directive www.ampsstudio.com [Sun Oct 02 08:31:46 2022] [error] [client 1.169.134.231:0] AH01071: Got error 'PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179' www.ampsstudio.com [Sun Oct 02 08:31:46 2022] [error] [client 1.169.134.231:0] AH01071: Got error 'PHP message: PHP Warning: Cannot modify header information - headers already sent by (output started at /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-includes/functions.php:5275) in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/includes/sonaar-music/css/theme/custom-style.php on line 2' www.ampsstudio.com [Sun Oct 02 10:32:11 2022] [error] [client 185.100.85.24:0] AH01071: Got error 'PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179' www.ampsstudio.com [Sun Oct 02 10:32:11 2022] [error] [client 185.100.85.24:0] AH01071: Got error 'PHP message: PHP Warning: Cannot modify header information - headers already sent by (output started at /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-includes/functions.php:5275) in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/includes/sonaar-music/css/theme/custom-style.php on line 2' ampsstudio.com [Sun Oct 02 14:11:05 2022] [error] [client 142.93.48.245:0] [client 142.93.48.245] ModSecurity: Access denied with code 403 (phase 2). Pattern match "/images/.*\\\\.php" at REQUEST_URI. [file "remote server"] [line "-1"] [id "470000"] [msg "Malware.Expert - request_uri: Images folder - prevent PHP files from executing"] [hostname "ampsstudio.com"] [uri "/images/global.php"] [unique_id "YzmN6Wi79ICkoR2-vrQfFwAAAAo"] www.ampsstudio.com [Sun Oct 02 14:11:19 2022] [error] [client 200.4.142.32:0] AH01276: Cannot serve directory /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-includes/SimplePie/Cache/: No matching DirectoryIndex (index.php,index.html,index.htm) found, and server-generated directory index forbidden by Options directive ampsstudio.com [Sun Oct 02 14:11:39 2022] [error] [client 62.210.215.74:0] [client 62.210.215.74] ModSecurity: Access denied with code 403 (phase 2). Match of "contains /wp-includes/js/tinymce/wp-tinymce.php" against "REQUEST_URI" required. [file "remote server"] [line "-1"] [id "430036"] [msg "Malware.Expert - request_uri: Wordpress - prevent PHP files from executing"] [hostname "ampsstudio.com"] [uri "/wp-includes/js/dist/vendor/index.php"] [unique_id "YzmOC3dBhoPqDq8jDMUSfQAAAAA"] www.ampsstudio.com [Sun Oct 02 14:11:40 2022] [error] [client 200.4.142.32:0] AH01276: Cannot serve directory /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-includes/blocks/social-link/: No matching DirectoryIndex (index.php,index.html,index.htm) found, and server-generated directory index forbidden by Options directive ampsstudio.com [Sun Oct 02 14:12:36 2022] [error] [client 200.4.142.32:0] [client 200.4.142.32] ModSecurity: Access denied with code 403 (phase 2). Pattern match "/wp-includes/theme-compat/.*\\\\.php" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430037"] [msg "Malware.Expert - request_uri: Wordpress - prevent PHP files from executing"] [hostname "ampsstudio.com"] [uri "/wp-includes/theme-compat/about.php"] [unique_id "YzmORObCp2GC7VYzjfTrVQAAAAc"] ampsstudio.com [Sun Oct 02 14:13:32 2022] [error] [client 62.210.215.74:0] [client 62.210.215.74] ModSecurity: Access denied with code 403 (phase 2). Match of "contains /wp-includes/js/tinymce/wp-tinymce.php" against "REQUEST_URI" required. [file "remote server"] [line "-1"] [id "430036"] [msg "Malware.Expert - request_uri: Wordpress - prevent PHP files from executing"] [hostname "ampsstudio.com"] [uri "/wp-includes/js/dist/development/index.php"] [unique_id "YzmOfE6ieoMvae4ArGOhsgAAAAM"] www.ampsstudio.com [Sun Oct 02 14:13:50 2022] [error] [client 200.4.142.32:0] AH01276: Cannot serve directory /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-includes/blocks/categories/: No matching DirectoryIndex (index.php,index.html,index.htm) found, and server-generated directory index forbidden by Options directive ampsstudio.com [Sun Oct 02 14:14:20 2022] [error] [client 200.4.142.32:0] [client 200.4.142.32] ModSecurity: Access denied with code 403 (phase 2). Pattern match "/wp-includes/images/.*\\\\.php" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430032"] [msg "Malware.Expert - request_uri: Wordpress - prevent PHP files from executing"] [hostname "ampsstudio.com"] [uri "/wp-includes/images/smilies/index.php"] [unique_id "YzmOrDlMT42tvlDKFhfilAAAAAE"] ampsstudio.com [Sun Oct 02 14:14:32 2022] [error] [client 200.4.142.32:0] [client 200.4.142.32] ModSecurity: Access denied with code 403 (phase 2). Pattern match "/wp-content/uploads/.*\\\\.php" at REQUEST_FILENAME. [file "remote server"] [line "-1"] [id "430017"] [msg "Malware.Expert - request_uri: Wordpress - prevent PHP files from executing"] [hostname "ampsstudio.com"] [uri "/wp-content/uploads/2016/index.php"] [unique_id "YzmOuI2z3ljNG8-Cy1ka9wAAAAY"] ampsstudio.com [Sun Oct 02 14:17:51 2022] [error] [client 142.93.48.245:0] [client 142.93.48.245] ModSecurity: Access denied with code 403 (phase 2). Pattern match "/wp-admin/includes/.*\\\\.php" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430034"] [msg "Malware.Expert - request_uri: Wordpress - prevent PHP files from executing"] [hostname "ampsstudio.com"] [uri "/wp-admin/includes/about.php"] [unique_id "YzmPfxDKyMqJW7sbpRUi6AAAABE"] ampsstudio.com [Sun Oct 02 14:18:38 2022] [error] [client 200.4.142.32:0] [client 200.4.142.32] ModSecurity: Access denied with code 403 (phase 2). Pattern match "/wp-content/uploads/.*\\\\.php" at REQUEST_FILENAME. [file "remote server"] [line "-1"] [id "430017"] [msg "Malware.Expert - request_uri: Wordpress - prevent PHP files from executing"] [hostname "ampsstudio.com"] [uri "/wp-content/uploads/about.php"] [unique_id "YzmPrmi79ICkoR2-vrQfIAAAAAo"] www.ampsstudio.com [Sun Oct 02 14:19:53 2022] [error] [client 200.4.142.32:0] AH01276: Cannot serve directory /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-includes/pomo/: No matching DirectoryIndex (index.php,index.html,index.htm) found, and server-generated directory index forbidden by Options directive www.ampsstudio.com [Sun Oct 02 14:20:07 2022] [error] [client 200.4.142.32:0] AH01276: Cannot serve directory /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-includes/rest-api/endpoints/: No matching DirectoryIndex (index.php,index.html,index.htm) found, and server-generated directory index forbidden by Options directive ampsstudio.com [Sun Oct 02 14:21:41 2022] [error] [client 142.93.48.245:0] [client 142.93.48.245] ModSecurity: Access denied with code 403 (phase 2). Pattern match "/wp-admin/js/.*\\\\.php" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430031"] [msg "Malware.Expert - request_uri: Wordpress - prevent PHP files from executing"] [hostname "ampsstudio.com"] [uri "/wp-admin/js/widgets/admin/index.php"] [unique_id "YzmQZXdBhoPqDq8jDMUShwAAAAA"] ampsstudio.com [Sun Oct 02 14:22:24 2022] [error] [client 133.242.58.20:0] [client 133.242.58.20] ModSecurity: Access denied with code 403 (phase 2). Pattern match "/wp-admin/js/.*\\\\.php" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430031"] [msg "Malware.Expert - request_uri: Wordpress - prevent PHP files from executing"] [hostname "ampsstudio.com"] [uri "/wp-admin/js/widgets/load.php"] [unique_id "YzmQkFEsmRjLJvgNMJ9KnwAAAAU"] ampsstudio.com [Sun Oct 02 14:24:36 2022] [error] [client 133.242.58.20:0] [client 133.242.58.20] ModSecurity: Access denied with code 403 (phase 2). Pattern match "/images/.*\\\\.php" at REQUEST_URI. [file "remote server"] [line "-1"] [id "470000"] [msg "Malware.Expert - request_uri: Images folder - prevent PHP files from executing"] [hostname "ampsstudio.com"] [uri "/images/language/jp.php"] [unique_id "YzmRFI2z3ljNG8-Cy1kbAQAAAAY"] ampsstudio.com [Sun Oct 02 14:25:41 2022] [error] [client 62.210.215.74:0] [client 62.210.215.74] ModSecurity: Access denied with code 403 (phase 2). Pattern match "/wp-admin/css/.*\\\\.php" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430027"] [msg "Malware.Expert - request_uri: Wordpress - prevent PHP files from executing"] [hostname "ampsstudio.com"] [uri "/wp-admin/css/colors/ectoplasm/index.php"] [unique_id "YzmRVTlMT42tvlDKFhfinwAAAAE"] www.ampsstudio.com [Sun Oct 02 14:25:58 2022] [error] [client 62.210.215.74:0] AH01276: Cannot serve directory /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-includes/Text/Diff/Engine/: No matching DirectoryIndex (index.php,index.html,index.htm) found, and server-generated directory index forbidden by Options directive www.ampsstudio.com [Sun Oct 02 14:33:23 2022] [error] [client 62.210.215.74:0] AH01276: Cannot serve directory /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-includes/Requests/Exception/Transport/: No matching DirectoryIndex (index.php,index.html,index.htm) found, and server-generated directory index forbidden by Options directive ampsstudio.com [Sun Oct 02 14:40:12 2022] [error] [client 62.210.215.74:0] [client 62.210.215.74] ModSecurity: Access denied with code 403 (phase 2). Match of "contains /wp-includes/js/tinymce/wp-tinymce.php" against "REQUEST_URI" required. [file "remote server"] [line "-1"] [id "430036"] [msg "Malware.Expert - request_uri: Wordpress - prevent PHP files from executing"] [hostname "ampsstudio.com"] [uri "/ramaniauto.com/wp-includes/js/jcrop/Decode/index.php"] [unique_id "YzmUvBDKyMqJW7sbpRUi8wAAABE"] ampsstudio.com [Sun Oct 02 15:59:59 2022] [error] [client 20.40.248.132:0] [client 20.40.248.132] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "ampsstudio.com"] [uri "/admin/.env"] [unique_id "Yzmnb-bCp2GC7VYzjfTrhwAAAAc"] ampsstudio.com [Sun Oct 02 16:00:00 2022] [error] [client 20.40.248.132:0] [client 20.40.248.132] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "ampsstudio.com"] [uri "/core/.env"] [unique_id "YzmncFOqYKIYgML5dWR9cgAAAAg"] ampsstudio.com [Sun Oct 02 16:00:01 2022] [error] [client 20.40.248.132:0] [client 20.40.248.132] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "ampsstudio.com"] [uri "/API/.env"] [unique_id "YzmncTlMT42tvlDKFhfiyQAAAAE"] ampsstudio.com [Sun Oct 02 16:00:02 2022] [error] [client 20.40.248.132:0] [client 20.40.248.132] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "ampsstudio.com"] [uri "/APP/.env"] [unique_id "Yzmnco2z3ljNG8-Cy1kbKAAAAAY"] ampsstudio.com [Sun Oct 02 16:00:03 2022] [error] [client 20.40.248.132:0] [client 20.40.248.132] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "ampsstudio.com"] [uri "/app/.env"] [unique_id "YzmncxDKyMqJW7sbpRUjFAAAABE"] ampsstudio.com [Sun Oct 02 16:00:04 2022] [error] [client 20.40.248.132:0] [client 20.40.248.132] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "ampsstudio.com"] [uri "/api/.env"] [unique_id "YzmndGi79ICkoR2-vrQfSgAAAAo"] ampsstudio.com [Sun Oct 02 16:00:05 2022] [error] [client 20.40.248.132:0] [client 20.40.248.132] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "ampsstudio.com"] [uri "/blog/.env"] [unique_id "YzmndXdBhoPqDq8jDMUSrwAAAAA"] ampsstudio.com [Sun Oct 02 16:00:06 2022] [error] [client 20.40.248.132:0] [client 20.40.248.132] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "ampsstudio.com"] [uri "/admin/.env.save"] [unique_id "YzmndlEsmRjLJvgNMJ9KywAAAAU"] ampsstudio.com [Sun Oct 02 16:00:07 2022] [error] [client 20.40.248.132:0] [client 20.40.248.132] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "ampsstudio.com"] [uri "/core/.env.save"] [unique_id "Yzmnd06ieoMvae4ArGOh5gAAAAM"] ampsstudio.com [Sun Oct 02 16:00:07 2022] [error] [client 20.40.248.132:0] [client 20.40.248.132] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "ampsstudio.com"] [uri "/API/.env.save"] [unique_id "YzmndzRCfyBoz4HWUt_y4AAAAAI"] ampsstudio.com [Sun Oct 02 16:00:08 2022] [error] [client 20.40.248.132:0] [client 20.40.248.132] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "ampsstudio.com"] [uri "/APP/.env.save"] [unique_id "YzmneObCp2GC7VYzjfTriAAAAAc"] ampsstudio.com [Sun Oct 02 16:00:09 2022] [error] [client 20.40.248.132:0] [client 20.40.248.132] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "ampsstudio.com"] [uri "/app/.env.save"] [unique_id "YzmneVOqYKIYgML5dWR9cwAAAAg"] ampsstudio.com [Sun Oct 02 16:00:10 2022] [error] [client 20.40.248.132:0] [client 20.40.248.132] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "ampsstudio.com"] [uri "/api/.env.save"] [unique_id "YzmnejlMT42tvlDKFhfiygAAAAE"] ampsstudio.com [Sun Oct 02 16:00:11 2022] [error] [client 20.40.248.132:0] [client 20.40.248.132] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "ampsstudio.com"] [uri "/blog/.env.save"] [unique_id "Yzmne42z3ljNG8-Cy1kbKQAAAAY"] ampsstudio.com [Sun Oct 02 16:00:12 2022] [error] [client 20.40.248.132:0] [client 20.40.248.132] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "ampsstudio.com"] [uri "/admin/.env.local"] [unique_id "YzmnfBDKyMqJW7sbpRUjFQAAABE"] ampsstudio.com [Sun Oct 02 16:00:14 2022] [error] [client 20.40.248.132:0] [client 20.40.248.132] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "ampsstudio.com"] [uri "/core/.env.local"] [unique_id "Yzmnfmi79ICkoR2-vrQfSwAAAAo"] ampsstudio.com [Sun Oct 02 16:00:15 2022] [error] [client 20.40.248.132:0] [client 20.40.248.132] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "ampsstudio.com"] [uri "/API/.env.local"] [unique_id "Yzmnf3dBhoPqDq8jDMUSsAAAAAA"] ampsstudio.com [Sun Oct 02 16:00:16 2022] [error] [client 20.40.248.132:0] [client 20.40.248.132] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "ampsstudio.com"] [uri "/APP/.env.local"] [unique_id "YzmngFEsmRjLJvgNMJ9KzAAAAAU"] ampsstudio.com [Sun Oct 02 16:00:17 2022] [error] [client 20.40.248.132:0] [client 20.40.248.132] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "ampsstudio.com"] [uri "/app/.env.local"] [unique_id "YzmngTRCfyBoz4HWUt_y4QAAAAI"] ampsstudio.com [Sun Oct 02 16:00:18 2022] [error] [client 20.40.248.132:0] [client 20.40.248.132] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "ampsstudio.com"] [uri "/api/.env.local"] [unique_id "YzmngubCp2GC7VYzjfTriQAAAAc"] ampsstudio.com [Sun Oct 02 16:00:19 2022] [error] [client 20.40.248.132:0] [client 20.40.248.132] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "ampsstudio.com"] [uri "/blog/.env.local"] [unique_id "Yzmng1OqYKIYgML5dWR9dAAAAAg"] ampsstudio.com [Sun Oct 02 16:00:20 2022] [error] [client 20.40.248.132:0] [client 20.40.248.132] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "ampsstudio.com"] [uri "/admin/.env.backup"] [unique_id "YzmnhE6ieoMvae4ArGOh5wAAAAM"] ampsstudio.com [Sun Oct 02 16:00:22 2022] [error] [client 20.40.248.132:0] [client 20.40.248.132] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "ampsstudio.com"] [uri "/core/.env.backup"] [unique_id "YzmnhjlMT42tvlDKFhfiywAAAAE"] ampsstudio.com [Sun Oct 02 16:00:23 2022] [error] [client 20.40.248.132:0] [client 20.40.248.132] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "ampsstudio.com"] [uri "/API/.env.backup"] [unique_id "YzmnhxDKyMqJW7sbpRUjFgAAABE"] ampsstudio.com [Sun Oct 02 16:00:24 2022] [error] [client 20.40.248.132:0] [client 20.40.248.132] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "ampsstudio.com"] [uri "/APP/.env.backup"] [unique_id "YzmniI2z3ljNG8-Cy1kbKgAAAAY"] ampsstudio.com [Sun Oct 02 16:00:25 2022] [error] [client 20.40.248.132:0] [client 20.40.248.132] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "ampsstudio.com"] [uri "/app/.env.backup"] [unique_id "YzmniXdBhoPqDq8jDMUSsQAAAAA"] ampsstudio.com [Sun Oct 02 16:00:26 2022] [error] [client 20.40.248.132:0] [client 20.40.248.132] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "ampsstudio.com"] [uri "/api/.env.backup"] [unique_id "YzmnilEsmRjLJvgNMJ9KzQAAAAU"] ampsstudio.com [Sun Oct 02 16:00:27 2022] [error] [client 20.40.248.132:0] [client 20.40.248.132] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "ampsstudio.com"] [uri "/blog/.env.backup"] [unique_id "YzmnizRCfyBoz4HWUt_y4gAAAAI"] ampsstudio.com [Sun Oct 02 16:00:27 2022] [error] [client 20.40.248.132:0] [client 20.40.248.132] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "ampsstudio.com"] [uri "/laravel/.env"] [unique_id "Yzmni2i79ICkoR2-vrQfTAAAAAo"] ampsstudio.com [Sun Oct 02 16:00:29 2022] [error] [client 20.40.248.132:0] [client 20.40.248.132] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "ampsstudio.com"] [uri "/laravel/.env.backup"] [unique_id "YzmnjebCp2GC7VYzjfTrigAAAAc"] ampsstudio.com [Sun Oct 02 16:00:29 2022] [error] [client 20.40.248.132:0] [client 20.40.248.132] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "ampsstudio.com"] [uri "/laravel/.env.local"] [unique_id "YzmnjVOqYKIYgML5dWR9dQAAAAg"] ampsstudio.com [Sun Oct 02 16:00:30 2022] [error] [client 20.40.248.132:0] [client 20.40.248.132] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "ampsstudio.com"] [uri "/laravel/.env.save"] [unique_id "YzmnjjlMT42tvlDKFhfizAAAAAE"] ampsstudio.com [Sun Oct 02 16:00:31 2022] [error] [client 20.40.248.132:0] [client 20.40.248.132] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "ampsstudio.com"] [uri "/lv/.env"] [unique_id "YzmnjxDKyMqJW7sbpRUjFwAAABE"] ampsstudio.com [Sun Oct 02 16:00:32 2022] [error] [client 20.40.248.132:0] [client 20.40.248.132] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "ampsstudio.com"] [uri "/lv/.env.backup"] [unique_id "YzmnkE6ieoMvae4ArGOh6AAAAAM"] ampsstudio.com [Sun Oct 02 16:00:33 2022] [error] [client 20.40.248.132:0] [client 20.40.248.132] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "ampsstudio.com"] [uri "/lv/.env.local"] [unique_id "YzmnkXdBhoPqDq8jDMUSsgAAAAA"] ampsstudio.com [Sun Oct 02 16:00:33 2022] [error] [client 20.40.248.132:0] [client 20.40.248.132] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "ampsstudio.com"] [uri "/lv/.env.save"] [unique_id "YzmnkVEsmRjLJvgNMJ9KzgAAAAU"] ampsstudio.com [Sun Oct 02 16:00:34 2022] [error] [client 20.40.248.132:0] [client 20.40.248.132] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "ampsstudio.com"] [uri "/.env"] [unique_id "Yzmnko2z3ljNG8-Cy1kbKwAAAAY"] ampsstudio.com [Sun Oct 02 16:00:35 2022] [error] [client 20.40.248.132:0] [client 20.40.248.132] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "ampsstudio.com"] [uri "/.env.backup"] [unique_id "YzmnkzRCfyBoz4HWUt_y4wAAAAI"] ampsstudio.com [Sun Oct 02 16:00:36 2022] [error] [client 20.40.248.132:0] [client 20.40.248.132] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "ampsstudio.com"] [uri "/.env.local"] [unique_id "YzmnlGi79ICkoR2-vrQfTQAAAAo"] ampsstudio.com [Sun Oct 02 16:00:37 2022] [error] [client 20.40.248.132:0] [client 20.40.248.132] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "ampsstudio.com"] [uri "/.env.save"] [unique_id "YzmnlebCp2GC7VYzjfTriwAAAAc"] ampsstudio.com [Sun Oct 02 16:00:38 2022] [error] [client 20.40.248.132:0] [client 20.40.248.132] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "ampsstudio.com"] [uri "/test/.env"] [unique_id "YzmnllOqYKIYgML5dWR9dgAAAAg"] ampsstudio.com [Sun Oct 02 16:00:39 2022] [error] [client 20.40.248.132:0] [client 20.40.248.132] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "ampsstudio.com"] [uri "/test/.env.backup"] [unique_id "YzmnlzlMT42tvlDKFhfizQAAAAE"] ampsstudio.com [Sun Oct 02 16:00:40 2022] [error] [client 20.40.248.132:0] [client 20.40.248.132] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "ampsstudio.com"] [uri "/test/.env.local"] [unique_id "YzmnmBDKyMqJW7sbpRUjGAAAABE"] ampsstudio.com [Sun Oct 02 16:00:41 2022] [error] [client 20.40.248.132:0] [client 20.40.248.132] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "ampsstudio.com"] [uri "/test/.env.save"] [unique_id "YzmnmU6ieoMvae4ArGOh6QAAAAM"] ampsstudio.com [Sun Oct 02 16:00:42 2022] [error] [client 20.40.248.132:0] [client 20.40.248.132] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "ampsstudio.com"] [uri "/dev/.env"] [unique_id "YzmnmndBhoPqDq8jDMUSswAAAAA"] ampsstudio.com [Sun Oct 02 16:00:43 2022] [error] [client 20.40.248.132:0] [client 20.40.248.132] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "ampsstudio.com"] [uri "/dev/.env.backup"] [unique_id "Yzmnm1EsmRjLJvgNMJ9KzwAAAAU"] ampsstudio.com [Sun Oct 02 16:00:44 2022] [error] [client 20.40.248.132:0] [client 20.40.248.132] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "ampsstudio.com"] [uri "/dev/.env.local"] [unique_id "YzmnnDRCfyBoz4HWUt_y5AAAAAI"] ampsstudio.com [Sun Oct 02 16:00:44 2022] [error] [client 20.40.248.132:0] [client 20.40.248.132] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "ampsstudio.com"] [uri "/dev/.env.save"] [unique_id "YzmnnGi79ICkoR2-vrQfTgAAAAo"] ampsstudio.com [Sun Oct 02 16:00:45 2022] [error] [client 20.40.248.132:0] [client 20.40.248.132] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "ampsstudio.com"] [uri "/public/.env"] [unique_id "YzmnnebCp2GC7VYzjfTrjAAAAAc"] webdisk.ampsstudio.com [Sun Oct 02 19:01:39 2022] [error] [client 194.26.229.150:0] [client 194.26.229.150] ModSecurity: Access denied with code 403 (phase 2). String match "/.git/config" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430058"] [msg "Malware.Expert - request_uri: .git config"] [hostname "webdisk.ampsstudio.com"] [uri "/.git/config"] [unique_id "YznSA3dBhoPqDq8jDMUS_QAAAAA"] ampsstudio.com [Sun Oct 02 20:03:29 2022] [error] [client 194.26.229.150:0] [client 194.26.229.150] ModSecurity: Access denied with code 403 (phase 2). String match "/.git/config" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430058"] [msg "Malware.Expert - request_uri: .git config"] [hostname "ampsstudio.com"] [uri "/.git/config"] [unique_id "YznggU6ieoMvae4ArGOiSwAAAAM"] ampsstudio.com [Mon Oct 03 04:15:10 2022] [error] [client 5.188.62.134:0] [client 5.188.62.134] ModSecurity: Access denied with code 403 (phase 1). Pattern match "\\\\.\\\\./\\\\.\\\\." at REQUEST_URI. [file "remote server"] [line "-1"] [id "430064"] [msg "Malware.Expert - request_uri: directory travel"] [hostname "ampsstudio.com"] [uri "/wp-content/themes/churchope/lib/downloadlink.php"] [unique_id "YzpTvtI4WDZCR7BNW-4lGQAAAAE"] ampsstudio.com [Mon Oct 03 04:31:19 2022] [error] [client 5.62.20.37:0] [client 5.62.20.37] ModSecurity: Access denied with code 403 (phase 2). String match "anonymousfox" at REQUEST_HEADERS:referer. [file "remote server"] [line "-1"] [id "425001"] [msg "Malware.Expert - Referer: anonymousfox.co"] [hostname "ampsstudio.com"] [uri "/style.php"] [unique_id "YzpXhwv66HYiqSQVMd6edQAAAAM"] ampsstudio.com [Mon Oct 03 04:31:21 2022] [error] [client 5.62.20.37:0] [client 5.62.20.37] ModSecurity: Access denied with code 403 (phase 2). String match "anonymousfox" at REQUEST_HEADERS:referer. [file "remote server"] [line "-1"] [id "425001"] [msg "Malware.Expert - Referer: anonymousfox.co"] [hostname "ampsstudio.com"] [uri "/moduless.php"] [unique_id "YzpXidI4WDZCR7BNW-4lHgAAAAE"] ampsstudio.com [Mon Oct 03 04:31:22 2022] [error] [client 5.62.20.37:0] [client 5.62.20.37] ModSecurity: Access denied with code 403 (phase 2). String match "anonymousfox" at REQUEST_HEADERS:referer. [file "remote server"] [line "-1"] [id "425001"] [msg "Malware.Expert - Referer: anonymousfox.co"] [hostname "ampsstudio.com"] [uri "/wp-content/plugins/t_file_wp/t_file_wp.php"] [unique_id "YzpXisF0RagQjQ6hkJAxxAAAAAU"] ampsstudio.com [Mon Oct 03 04:31:23 2022] [error] [client 5.62.20.37:0] [client 5.62.20.37] ModSecurity: Access denied with code 403 (phase 2). String match "anonymousfox" at REQUEST_HEADERS:referer. [file "remote server"] [line "-1"] [id "425001"] [msg "Malware.Expert - Referer: anonymousfox.co"] [hostname "ampsstudio.com"] [uri "/admin.php"] [unique_id "YzpXi4ZGyEwgNV2hdbmEMgAAABE"] ampsstudio.com [Mon Oct 03 04:31:24 2022] [error] [client 5.62.20.37:0] [client 5.62.20.37] ModSecurity: Access denied with code 403 (phase 2). String match "anonymousfox" at REQUEST_HEADERS:referer. [file "remote server"] [line "-1"] [id "425001"] [msg "Malware.Expert - Referer: anonymousfox.co"] [hostname "ampsstudio.com"] [uri "/index.php"] [unique_id "YzpXjLHnD0iGNtQSzpMOWAAAAAQ"] ampsstudio.com [Mon Oct 03 04:31:25 2022] [error] [client 5.62.20.37:0] [client 5.62.20.37] ModSecurity: Access denied with code 403 (phase 2). String match "anonymousfox" at REQUEST_HEADERS:referer. [file "remote server"] [line "-1"] [id "425001"] [msg "Malware.Expert - Referer: anonymousfox.co"] [hostname "ampsstudio.com"] [uri "/boom.php"] [unique_id "YzpXjf0hfYOkinZI4f63FgAAAAI"] ampsstudio.com [Mon Oct 03 04:31:25 2022] [error] [client 5.62.20.37:0] [client 5.62.20.37] ModSecurity: Access denied with code 403 (phase 2). String match "anonymousfox" at REQUEST_HEADERS:referer. [file "remote server"] [line "-1"] [id "425001"] [msg "Malware.Expert - Referer: anonymousfox.co"] [hostname "ampsstudio.com"] [uri "/wp-content/plugins/backup_index.php"] [unique_id "YzpXjYS1E2Sx756odqseewAAAAA"] ampsstudio.com [Mon Oct 03 04:31:26 2022] [error] [client 5.62.20.37:0] [client 5.62.20.37] ModSecurity: Access denied with code 403 (phase 2). String match "anonymousfox" at REQUEST_HEADERS:referer. [file "remote server"] [line "-1"] [id "425001"] [msg "Malware.Expert - Referer: anonymousfox.co"] [hostname "ampsstudio.com"] [uri "/wp-content/db_cache.php"] [unique_id "YzpXjmBq9FFM3nspa3pXnAAAAAo"] ampsstudio.com [Mon Oct 03 04:31:27 2022] [error] [client 5.62.20.37:0] [client 5.62.20.37] ModSecurity: Access denied with code 403 (phase 2). String match "anonymousfox" at REQUEST_HEADERS:referer. [file "remote server"] [line "-1"] [id "425001"] [msg "Malware.Expert - Referer: anonymousfox.co"] [hostname "ampsstudio.com"] [uri "/wp-content/plugins/ioptimization/IOptimize.php"] [unique_id "YzpXjwv66HYiqSQVMd6edgAAAAM"] ampsstudio.com [Mon Oct 03 04:31:28 2022] [error] [client 5.62.20.37:0] [client 5.62.20.37] ModSecurity: Access denied with code 403 (phase 2). String match "anonymousfox" at REQUEST_HEADERS:referer. [file "remote server"] [line "-1"] [id "425001"] [msg "Malware.Expert - Referer: anonymousfox.co"] [hostname "ampsstudio.com"] [uri "/xmlrp.php"] [unique_id "YzpXkMF0RagQjQ6hkJAxxQAAAAU"] ampsstudio.com [Mon Oct 03 04:31:30 2022] [error] [client 5.62.20.37:0] [client 5.62.20.37] ModSecurity: Access denied with code 403 (phase 2). String match "anonymousfox" at REQUEST_HEADERS:referer. [file "remote server"] [line "-1"] [id "425001"] [msg "Malware.Expert - Referer: anonymousfox.co"] [hostname "ampsstudio.com"] [uri "/wpindex.php"] [unique_id "YzpXkoZGyEwgNV2hdbmEMwAAABE"] ampsstudio.com [Mon Oct 03 04:31:31 2022] [error] [client 5.62.20.37:0] [client 5.62.20.37] ModSecurity: Access denied with code 403 (phase 2). String match "anonymousfox" at REQUEST_HEADERS:referer. [file "remote server"] [line "-1"] [id "425001"] [msg "Malware.Expert - Referer: anonymousfox.co"] [hostname "ampsstudio.com"] [uri "/larva.php"] [unique_id "YzpXk9I4WDZCR7BNW-4lHwAAAAE"] ampsstudio.com [Mon Oct 03 04:31:32 2022] [error] [client 5.62.20.37:0] [client 5.62.20.37] ModSecurity: Access denied with code 403 (phase 2). String match "anonymousfox" at REQUEST_HEADERS:referer. [file "remote server"] [line "-1"] [id "425001"] [msg "Malware.Expert - Referer: anonymousfox.co"] [hostname "ampsstudio.com"] [uri "/th3_err0r.php"] [unique_id "YzpXlLHnD0iGNtQSzpMOWQAAAAQ"] ampsstudio.com [Mon Oct 03 04:31:33 2022] [error] [client 5.62.20.37:0] [client 5.62.20.37] ModSecurity: Access denied with code 403 (phase 2). String match "anonymousfox" at REQUEST_HEADERS:referer. [file "remote server"] [line "-1"] [id "425001"] [msg "Malware.Expert - Referer: anonymousfox.co"] [hostname "ampsstudio.com"] [uri "/alfindex.php"] [unique_id "YzpXlYS1E2Sx756odqsefAAAAAA"] ampsstudio.com [Mon Oct 03 04:31:34 2022] [error] [client 5.62.20.37:0] [client 5.62.20.37] ModSecurity: Access denied with code 403 (phase 2). String match "anonymousfox" at REQUEST_HEADERS:referer. [file "remote server"] [line "-1"] [id "425001"] [msg "Malware.Expert - Referer: anonymousfox.co"] [hostname "ampsstudio.com"] [uri "/alfa.php"] [unique_id "YzpXlmBq9FFM3nspa3pXnQAAAAo"] ampsstudio.com [Mon Oct 03 04:31:35 2022] [error] [client 5.62.20.37:0] [client 5.62.20.37] ModSecurity: Access denied with code 403 (phase 2). String match "anonymousfox" at REQUEST_HEADERS:referer. [file "remote server"] [line "-1"] [id "425001"] [msg "Malware.Expert - Referer: anonymousfox.co"] [hostname "ampsstudio.com"] [uri "/wp-booking.php"] [unique_id "YzpXl_0hfYOkinZI4f63FwAAAAI"] ampsstudio.com [Mon Oct 03 04:31:36 2022] [error] [client 5.62.20.37:0] [client 5.62.20.37] ModSecurity: Access denied with code 403 (phase 2). String match "anonymousfox" at REQUEST_HEADERS:referer. [file "remote server"] [line "-1"] [id "425001"] [msg "Malware.Expert - Referer: anonymousfox.co"] [hostname "ampsstudio.com"] [uri "/cindex.php"] [unique_id "YzpXmAv66HYiqSQVMd6edwAAAAM"] ampsstudio.com [Mon Oct 03 04:31:37 2022] [error] [client 5.62.20.37:0] [client 5.62.20.37] ModSecurity: Access denied with code 403 (phase 2). String match "anonymousfox" at REQUEST_HEADERS:referer. [file "remote server"] [line "-1"] [id "425001"] [msg "Malware.Expert - Referer: anonymousfox.co"] [hostname "ampsstudio.com"] [uri "/wp-content/wp-1ogin_bak.php"] [unique_id "YzpXmYZGyEwgNV2hdbmENAAAABE"] ampsstudio.com [Mon Oct 03 04:31:38 2022] [error] [client 5.62.20.37:0] [client 5.62.20.37] ModSecurity: Access denied with code 403 (phase 2). String match "anonymousfox" at REQUEST_HEADERS:referer. [file "remote server"] [line "-1"] [id "425001"] [msg "Malware.Expert - Referer: anonymousfox.co"] [hostname "ampsstudio.com"] [uri "/wp-1ogin_bak.php"] [unique_id "YzpXmtI4WDZCR7BNW-4lIAAAAAE"] ampsstudio.com [Mon Oct 03 04:31:39 2022] [error] [client 5.62.20.37:0] [client 5.62.20.37] ModSecurity: Access denied with code 403 (phase 2). String match "anonymousfox" at REQUEST_HEADERS:referer. [file "remote server"] [line "-1"] [id "425001"] [msg "Malware.Expert - Referer: anonymousfox.co"] [hostname "ampsstudio.com"] [uri "/wp-includes/fonts/css.php"] [unique_id "YzpXm8F0RagQjQ6hkJAxxgAAAAU"] ampsstudio.com [Mon Oct 03 04:31:40 2022] [error] [client 5.62.20.37:0] [client 5.62.20.37] ModSecurity: Access denied with code 403 (phase 2). String match "anonymousfox" at REQUEST_HEADERS:referer. [file "remote server"] [line "-1"] [id "425001"] [msg "Malware.Expert - Referer: anonymousfox.co"] [hostname "ampsstudio.com"] [uri "/wp-includes/css/css.php"] [unique_id "YzpXnIS1E2Sx756odqsefQAAAAA"] ampsstudio.com [Mon Oct 03 04:31:42 2022] [error] [client 5.62.20.37:0] [client 5.62.20.37] ModSecurity: Access denied with code 403 (phase 2). String match "anonymousfox" at REQUEST_HEADERS:referer. [file "remote server"] [line "-1"] [id "425001"] [msg "Malware.Expert - Referer: anonymousfox.co"] [hostname "ampsstudio.com"] [uri "/old-index.php"] [unique_id "YzpXnmBq9FFM3nspa3pXngAAAAo"] ampsstudio.com [Mon Oct 03 04:31:43 2022] [error] [client 5.62.20.37:0] [client 5.62.20.37] ModSecurity: Access denied with code 403 (phase 2). String match "anonymousfox" at REQUEST_HEADERS:referer. [file "remote server"] [line "-1"] [id "425001"] [msg "Malware.Expert - Referer: anonymousfox.co"] [hostname "ampsstudio.com"] [uri "/config.bak.php"] [unique_id "YzpXn7HnD0iGNtQSzpMOWgAAAAQ"] ampsstudio.com [Mon Oct 03 04:31:44 2022] [error] [client 5.62.20.37:0] [client 5.62.20.37] ModSecurity: Access denied with code 403 (phase 2). String match "anonymousfox" at REQUEST_HEADERS:referer. [file "remote server"] [line "-1"] [id "425001"] [msg "Malware.Expert - Referer: anonymousfox.co"] [hostname "ampsstudio.com"] [uri "/wp-admin/config.bak.php"] [unique_id "YzpXoP0hfYOkinZI4f63GAAAAAI"] ampsstudio.com [Mon Oct 03 04:31:45 2022] [error] [client 5.62.20.37:0] [client 5.62.20.37] ModSecurity: Access denied with code 403 (phase 2). String match "anonymousfox" at REQUEST_HEADERS:referer. [file "remote server"] [line "-1"] [id "425001"] [msg "Malware.Expert - Referer: anonymousfox.co"] [hostname "ampsstudio.com"] [uri "/wp-content/config.bak.php"] [unique_id "YzpXoQv66HYiqSQVMd6eeAAAAAM"] ampsstudio.com [Mon Oct 03 04:31:46 2022] [error] [client 5.62.20.37:0] [client 5.62.20.37] ModSecurity: Access denied with code 403 (phase 2). String match "anonymousfox" at REQUEST_HEADERS:referer. [file "remote server"] [line "-1"] [id "425001"] [msg "Malware.Expert - Referer: anonymousfox.co"] [hostname "ampsstudio.com"] [uri "/wp-includes/config.bak.php"] [unique_id "YzpXooZGyEwgNV2hdbmENQAAABE"] ampsstudio.com [Mon Oct 03 04:31:47 2022] [error] [client 5.62.20.37:0] [client 5.62.20.37] ModSecurity: Access denied with code 403 (phase 2). String match "anonymousfox" at REQUEST_HEADERS:referer. [file "remote server"] [line "-1"] [id "425001"] [msg "Malware.Expert - Referer: anonymousfox.co"] [hostname "ampsstudio.com"] [uri "/wp-content/themes/config.bak.php"] [unique_id "YzpXo9I4WDZCR7BNW-4lIQAAAAE"] ampsstudio.com [Mon Oct 03 04:31:48 2022] [error] [client 5.62.20.37:0] [client 5.62.20.37] ModSecurity: Access denied with code 403 (phase 2). String match "anonymousfox" at REQUEST_HEADERS:referer. [file "remote server"] [line "-1"] [id "425001"] [msg "Malware.Expert - Referer: anonymousfox.co"] [hostname "ampsstudio.com"] [uri "/wp-content/plugins/config.bak.php"] [unique_id "YzpXpMF0RagQjQ6hkJAxxwAAAAU"] ampsstudio.com [Mon Oct 03 04:31:49 2022] [error] [client 5.62.20.37:0] [client 5.62.20.37] ModSecurity: Access denied with code 403 (phase 2). String match "anonymousfox" at REQUEST_HEADERS:referer. [file "remote server"] [line "-1"] [id "425001"] [msg "Malware.Expert - Referer: anonymousfox.co"] [hostname "ampsstudio.com"] [uri "/wp-includes/css/wp-config.php"] [unique_id "YzpXpYS1E2Sx756odqsefgAAAAA"] ampsstudio.com [Mon Oct 03 04:31:50 2022] [error] [client 5.62.20.37:0] [client 5.62.20.37] ModSecurity: Access denied with code 403 (phase 2). String match "anonymousfox" at REQUEST_HEADERS:referer. [file "remote server"] [line "-1"] [id "425001"] [msg "Malware.Expert - Referer: anonymousfox.co"] [hostname "ampsstudio.com"] [uri "/wp-content/plugins/ubh/up.php"] [unique_id "YzpXpmBq9FFM3nspa3pXnwAAAAo"] ampsstudio.com [Mon Oct 03 04:31:51 2022] [error] [client 5.62.20.37:0] [client 5.62.20.37] ModSecurity: Access denied with code 403 (phase 2). String match "anonymousfox" at REQUEST_HEADERS:referer. [file "remote server"] [line "-1"] [id "425001"] [msg "Malware.Expert - Referer: anonymousfox.co"] [hostname "ampsstudio.com"] [uri "/wp-includes/wpconfig.bak.php"] [unique_id "YzpXp7HnD0iGNtQSzpMOWwAAAAQ"] ampsstudio.com [Mon Oct 03 04:31:52 2022] [error] [client 5.62.20.37:0] [client 5.62.20.37] ModSecurity: Access denied with code 403 (phase 2). String match "anonymousfox" at REQUEST_HEADERS:referer. [file "remote server"] [line "-1"] [id "425001"] [msg "Malware.Expert - Referer: anonymousfox.co"] [hostname "ampsstudio.com"] [uri "/wp-content/plugins/wpconfig.bak.php"] [unique_id "YzpXqIZGyEwgNV2hdbmENgAAABE"] ampsstudio.com [Mon Oct 03 04:31:53 2022] [error] [client 5.62.20.37:0] [client 5.62.20.37] ModSecurity: Access denied with code 403 (phase 2). String match "anonymousfox" at REQUEST_HEADERS:referer. [file "remote server"] [line "-1"] [id "425001"] [msg "Malware.Expert - Referer: anonymousfox.co"] [hostname "ampsstudio.com"] [uri "/haders.php"] [unique_id "YzpXqcF0RagQjQ6hkJAxyAAAAAU"] ampsstudio.com [Mon Oct 03 04:31:55 2022] [error] [client 5.62.20.37:0] [client 5.62.20.37] ModSecurity: Access denied with code 403 (phase 2). String match "anonymousfox" at REQUEST_HEADERS:referer. [file "remote server"] [line "-1"] [id "425001"] [msg "Malware.Expert - Referer: anonymousfox.co"] [hostname "ampsstudio.com"] [uri "/wp-content/wp-old-index.php"] [unique_id "YzpXq2Bq9FFM3nspa3pXoAAAAAo"] ampsstudio.com [Mon Oct 03 04:31:57 2022] [error] [client 5.62.20.37:0] [client 5.62.20.37] ModSecurity: Access denied with code 403 (phase 2). String match "anonymousfox" at REQUEST_HEADERS:referer. [file "remote server"] [line "-1"] [id "425001"] [msg "Malware.Expert - Referer: anonymousfox.co"] [hostname "ampsstudio.com"] [uri "/legion.php"] [unique_id "YzpXrbHnD0iGNtQSzpMOXAAAAAQ"] ampsstudio.com [Mon Oct 03 04:31:58 2022] [error] [client 5.62.20.37:0] [client 5.62.20.37] ModSecurity: Access denied with code 403 (phase 2). String match "anonymousfox" at REQUEST_HEADERS:referer. [file "remote server"] [line "-1"] [id "425001"] [msg "Malware.Expert - Referer: anonymousfox.co"] [hostname "ampsstudio.com"] [uri "/wp-content/mu-plugins/db-safe-mode.php"] [unique_id "YzpXrv0hfYOkinZI4f63GgAAAAI"] ampsstudio.com [Mon Oct 03 04:31:59 2022] [error] [client 5.62.20.37:0] [client 5.62.20.37] ModSecurity: Access denied with code 403 (phase 2). String match "anonymousfox" at REQUEST_HEADERS:referer. [file "remote server"] [line "-1"] [id "425001"] [msg "Malware.Expert - Referer: anonymousfox.co"] [hostname "ampsstudio.com"] [uri "/wp-includes/lfx.php"] [unique_id "YzpXr9I4WDZCR7BNW-4lIwAAAAE"] ampsstudio.com [Mon Oct 03 04:32:00 2022] [error] [client 5.62.20.37:0] [client 5.62.20.37] ModSecurity: Access denied with code 403 (phase 2). String match "anonymousfox" at REQUEST_HEADERS:referer. [file "remote server"] [line "-1"] [id "425001"] [msg "Malware.Expert - Referer: anonymousfox.co"] [hostname "ampsstudio.com"] [uri "/wp-includes/small.php"] [unique_id "YzpXsMF0RagQjQ6hkJAxyQAAAAU"] ampsstudio.com [Mon Oct 03 04:32:01 2022] [error] [client 5.62.20.37:0] [client 5.62.20.37] ModSecurity: Access denied with code 403 (phase 2). String match "anonymousfox" at REQUEST_HEADERS:referer. [file "remote server"] [line "-1"] [id "425001"] [msg "Malware.Expert - Referer: anonymousfox.co"] [hostname "ampsstudio.com"] [uri "/up.php"] [unique_id "YzpXsYS1E2Sx756odqsegAAAAAA"] ampsstudio.com [Mon Oct 03 04:32:02 2022] [error] [client 5.62.20.37:0] [client 5.62.20.37] ModSecurity: Access denied with code 403 (phase 2). String match "anonymousfox" at REQUEST_HEADERS:referer. [file "remote server"] [line "-1"] [id "425001"] [msg "Malware.Expert - Referer: anonymousfox.co"] [hostname "ampsstudio.com"] [uri "/upload.php"] [unique_id "YzpXsmBq9FFM3nspa3pXoQAAAAo"] ampsstudio.com [Mon Oct 03 04:32:03 2022] [error] [client 5.62.20.37:0] [client 5.62.20.37] ModSecurity: Access denied with code 403 (phase 2). String match "anonymousfox" at REQUEST_HEADERS:referer. [file "remote server"] [line "-1"] [id "425001"] [msg "Malware.Expert - Referer: anonymousfox.co"] [hostname "ampsstudio.com"] [uri "/config.php"] [unique_id "YzpXswv66HYiqSQVMd6eegAAAAM"] ampsstudio.com [Mon Oct 03 04:32:04 2022] [error] [client 5.62.20.37:0] [client 5.62.20.37] ModSecurity: Access denied with code 403 (phase 2). String match "anonymousfox" at REQUEST_HEADERS:referer. [file "remote server"] [line "-1"] [id "425001"] [msg "Malware.Expert - Referer: anonymousfox.co"] [hostname "ampsstudio.com"] [uri "/test.php"] [unique_id "YzpXtIZGyEwgNV2hdbmENwAAABE"] ampsstudio.com [Mon Oct 03 04:32:05 2022] [error] [client 5.62.20.37:0] [client 5.62.20.37] ModSecurity: Access denied with code 403 (phase 2). String match "anonymousfox" at REQUEST_HEADERS:referer. [file "remote server"] [line "-1"] [id "425001"] [msg "Malware.Expert - Referer: anonymousfox.co"] [hostname "ampsstudio.com"] [uri "/wp-content/langar.php"] [unique_id "YzpXtbHnD0iGNtQSzpMOXQAAAAQ"] ampsstudio.com [Mon Oct 03 04:32:06 2022] [error] [client 5.62.20.37:0] [client 5.62.20.37] ModSecurity: Access denied with code 403 (phase 2). String match "anonymousfox" at REQUEST_HEADERS:referer. [file "remote server"] [line "-1"] [id "425001"] [msg "Malware.Expert - Referer: anonymousfox.co"] [hostname "ampsstudio.com"] [uri "/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php"] [unique_id "YzpXtv0hfYOkinZI4f63GwAAAAI"] ampsstudio.com [Mon Oct 03 04:32:07 2022] [error] [client 5.62.20.37:0] [client 5.62.20.37] ModSecurity: Access denied with code 403 (phase 2). String match "anonymousfox" at REQUEST_HEADERS:referer. [file "remote server"] [line "-1"] [id "425001"] [msg "Malware.Expert - Referer: anonymousfox.co"] [hostname "ampsstudio.com"] [uri "/wp-content/plugins/fancy-product-designer/inc/custom-image-handler.php"] [unique_id "YzpXt9I4WDZCR7BNW-4lJAAAAAE"] ampsstudio.com [Mon Oct 03 04:32:10 2022] [error] [client 5.62.20.37:0] [client 5.62.20.37] ModSecurity: Access denied with code 403 (phase 2). String match "anonymousfox" at REQUEST_HEADERS:referer. [file "remote server"] [line "-1"] [id "425001"] [msg "Malware.Expert - Referer: anonymousfox.co"] [hostname "ampsstudio.com"] [uri "/wp-content/plugins/wpdiscuz/themes/default/style-rtl.css"] [unique_id "YzpXusF0RagQjQ6hkJAxygAAAAU"] ampsstudio.com [Mon Oct 03 07:12:20 2022] [error] [client 41.216.188.48:0] AH01276: Cannot serve directory /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-admin/css/: No matching DirectoryIndex (index.php,index.html,index.htm) found, and server-generated directory index forbidden by Options directive ampsstudio.com [Mon Oct 03 07:40:11 2022] [error] [client 20.234.237.183:0] [client 20.234.237.183] ModSecurity: Access denied with code 403 (phase 2). String match "/wso.php" at REQUEST_URI. [file "remote server"] [line "-1"] [id "570066"] [msg "Malware.Expert - PHP Command Shell (WSO)"] [hostname "ampsstudio.com"] [uri "/wso.php"] [unique_id "YzqDy56f3gZ7Z_MJ7ZR7ggAAAAc"] ampsstudio.com [Mon Oct 03 07:40:28 2022] [error] [client 20.234.237.183:0] [client 20.234.237.183] ModSecurity: Access denied with code 403 (phase 2). Pattern match "/images/.*\\\\.php" at REQUEST_URI. [file "remote server"] [line "-1"] [id "470000"] [msg "Malware.Expert - request_uri: Images folder - prevent PHP files from executing"] [hostname "ampsstudio.com"] [uri "/images/vuln.php"] [unique_id "YzqD3P0hfYOkinZI4f63cwAAAAI"] ampsstudio.com [Mon Oct 03 07:41:08 2022] [error] [client 20.234.237.183:0] [client 20.234.237.183] ModSecurity: Access denied with code 403 (phase 2). String match "/ups.php" at REQUEST_URI. [file "remote server"] [line "-1"] [id "570041"] [msg "Malware.Expert - Malware"] [hostname "ampsstudio.com"] [uri "/ups.php"] [unique_id "YzqEBJ6f3gZ7Z_MJ7ZR7iQAAAAc"] ampsstudio.com [Mon Oct 03 07:41:44 2022] [error] [client 20.234.237.183:0] [client 20.234.237.183] ModSecurity: Access denied with code 403 (phase 2). Pattern match "/\\\\..+\\\\.php" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430015"] [msg "Malware.Expert - request_uri: hidden .php execute"] [hostname "ampsstudio.com"] [uri "/.fk.php"] [unique_id "YzqEKH1K0ly8WR7s21MdpwAAAAY"] ampsstudio.com [Mon Oct 03 07:42:28 2022] [error] [client 20.234.237.183:0] [client 20.234.237.183] ModSecurity: Access denied with code 403 (phase 2). String match "/shell.php" at REQUEST_URI. [file "remote server"] [line "-1"] [id "570072"] [msg "Malware.Expert - PHP Command Shell"] [hostname "ampsstudio.com"] [uri "/shell.php"] [unique_id "YzqEVJ6f3gZ7Z_MJ7ZR7kAAAAAc"] www.ampsstudio.com [Mon Oct 03 07:57:49 2022] [error] [client 20.226.248.159:0] [client 20.226.248.159] ModSecurity: Access denied with code 403 (phase 2). String match "/ups.php" at REQUEST_URI. [file "remote server"] [line "-1"] [id "570041"] [msg "Malware.Expert - Malware"] [hostname "www.ampsstudio.com"] [uri "/ups.php"] [unique_id "YzqH7R-8dRMiwAtS9XEMVgAAAAQ"] www.ampsstudio.com [Mon Oct 03 07:58:12 2022] [error] [client 20.226.248.159:0] [client 20.226.248.159] ModSecurity: Access denied with code 403 (phase 2). String match "/shell.php" at REQUEST_URI. [file "remote server"] [line "-1"] [id "570072"] [msg "Malware.Expert - PHP Command Shell"] [hostname "www.ampsstudio.com"] [uri "/shell.php"] [unique_id "YzqIBMF0RagQjQ6hkJAyNwAAAAU"] www.ampsstudio.com [Mon Oct 03 07:58:19 2022] [error] [client 20.226.248.159:0] [client 20.226.248.159] ModSecurity: Access denied with code 403 (phase 2). String match "/wso.php" at REQUEST_URI. [file "remote server"] [line "-1"] [id "570066"] [msg "Malware.Expert - PHP Command Shell (WSO)"] [hostname "www.ampsstudio.com"] [uri "/wso.php"] [unique_id "YzqIC31K0ly8WR7s21MdtAAAAAY"] ampsstudio.com [Mon Oct 03 09:52:09 2022] [error] [client 41.216.188.218:0] [client 41.216.188.218] ModSecurity: Access denied with code 403 (phase 1). Pattern match "\\\\.\\\\./\\\\.\\\\." at REQUEST_URI. [file "remote server"] [line "-1"] [id "430064"] [msg "Malware.Expert - request_uri: directory travel"] [hostname "ampsstudio.com"] [uri "/wp-admin/admin-post.php"] [unique_id "YzqiuSkTIOhBr4QeUlLl2gAAAAA"] ampsstudio.com [Mon Oct 03 11:58:33 2022] [error] [client 20.172.41.155:0] [client 20.172.41.155] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "ampsstudio.com"] [uri "/.env"] [unique_id "YzrAWX1K0ly8WR7s21MeWQAAAAY"] ampsstudio.com [Mon Oct 03 12:10:10 2022] [error] [client 41.216.188.218:0] [client 41.216.188.218] ModSecurity: Access denied with code 403 (phase 1). Pattern match "\\\\.\\\\./\\\\.\\\\." at REQUEST_URI. [file "remote server"] [line "-1"] [id "430064"] [msg "Malware.Expert - request_uri: directory travel"] [hostname "ampsstudio.com"] [uri "/wp-admin/admin-post.php"] [unique_id "YzrDEmLm_q55RDRdDMg-igAAAAI"] ampsstudio.com [Mon Oct 03 12:25:49 2022] [error] [client 20.199.113.4:0] [client 20.199.113.4] ModSecurity: Access denied with code 403 (phase 2). Pattern match "/wp-content/uploads/$" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430061"] [msg "Malware.Expert - Wordpress - Protect uploads diretory listing files"] [hostname "ampsstudio.com"] [uri "/wp-content/uploads/"] [unique_id "YzrGvR-8dRMiwAtS9XENBQAAAAQ"] ampsstudio.com [Mon Oct 03 12:25:58 2022] [error] [client 20.199.113.4:0] AH01276: Cannot serve directory /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-includes/: No matching DirectoryIndex (index.php,index.html,index.htm) found, and server-generated directory index forbidden by Options directive ampsstudio.com [Mon Oct 03 12:26:07 2022] [error] [client 20.199.113.4:0] AH01276: Cannot serve directory /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-includes/css/: No matching DirectoryIndex (index.php,index.html,index.htm) found, and server-generated directory index forbidden by Options directive ampsstudio.com [Mon Oct 03 12:26:16 2022] [crit] [client 20.199.113.4:0] AH00529: /home/virtual/vps-aa3942/a/aede5353c4/public_html/.well-known/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/virtual/vps-aa3942/a/aede5353c4/public_html/.well-known/' is executable ampsstudio.com [Mon Oct 03 12:27:00 2022] [crit] [client 20.199.113.4:0] AH00529: /home/virtual/vps-aa3942/a/aede5353c4/public_html/.well-known/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/virtual/vps-aa3942/a/aede5353c4/public_html/.well-known/' is executable ampsstudio.com [Mon Oct 03 12:27:10 2022] [error] [client 20.199.113.4:0] AH01276: Cannot serve directory /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-admin/css/: No matching DirectoryIndex (index.php,index.html,index.htm) found, and server-generated directory index forbidden by Options directive ampsstudio.com [Mon Oct 03 12:28:04 2022] [error] [client 20.199.113.4:0] AH01276: Cannot serve directory /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-admin/includes/: No matching DirectoryIndex (index.php,index.html,index.htm) found, and server-generated directory index forbidden by Options directive ampsstudio.com [Mon Oct 03 12:41:17 2022] [error] [client 85.215.100.33:0] AH01276: Cannot serve directory /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-admin/css/: No matching DirectoryIndex (index.php,index.html,index.htm) found, and server-generated directory index forbidden by Options directive www.ampsstudio.com [Mon Oct 03 14:24:45 2022] [error] [client 194.15.113.22:0] AH01071: Got error 'PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179' www.ampsstudio.com [Mon Oct 03 14:24:45 2022] [error] [client 194.15.113.22:0] AH01071: Got error 'PHP message: PHP Warning: Cannot modify header information - headers already sent by (output started at /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-includes/functions.php:5275) in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/includes/sonaar-music/css/theme/custom-style.php on line 2' webdisk.ampsstudio.com [Mon Oct 03 14:36:02 2022] [error] [client 51.142.158.91:0] AH01276: Cannot serve directory /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-admin/css/: No matching DirectoryIndex (index.php,index.html,index.htm) found, and server-generated directory index forbidden by Options directive ampsstudio.com [Mon Oct 03 15:00:38 2022] [error] [client 147.78.47.249:0] [client 147.78.47.249] ModSecurity: Access denied with code 403 (phase 2). String match "connector.minimal.php" at REQUEST_URI. [file "remote server"] [line "-1"] [id "500083"] [msg "Malware.Expert - request_uri: 0-Day - Wordpress filemanager plugin"] [hostname "ampsstudio.com"] [uri "/wp-content/plugins/wp-file-manager/lib/php/connector.minimal.php"] [unique_id "YzrrBrxfzG5Pp_U-rP09SwAAAAc"] www.ampsstudio.com [Mon Oct 03 15:47:38 2022] [error] [client 185.197.75.208:0] AH01071: Got error 'PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179' www.ampsstudio.com [Mon Oct 03 15:47:38 2022] [error] [client 185.197.75.208:0] AH01071: Got error 'PHP message: PHP Warning: Cannot modify header information - headers already sent by (output started at /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-includes/functions.php:5275) in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/includes/sonaar-music/css/theme/custom-style.php on line 2' ampsstudio.com [Mon Oct 03 17:07:01 2022] [error] [client 51.142.136.99:0] [client 51.142.136.99] ModSecurity: Access denied with code 403 (phase 2). String match "/wp-includes/wp-class.php" at REQUEST_URI. [file "remote server"] [line "-1"] [id "570084"] [msg "Malware.Expert - Wordpress - Malware"] [hostname "ampsstudio.com"] [uri "/wp-includes/wp-class.php"] [unique_id "YzsIpSKvPA8_5UxzlN0cdgAAAAU"] ampsstudio.com [Mon Oct 03 17:07:31 2022] [error] [client 51.142.136.99:0] [client 51.142.136.99] ModSecurity: Access denied with code 403 (phase 2). String match "/ups.php" at REQUEST_URI. [file "remote server"] [line "-1"] [id "570041"] [msg "Malware.Expert - Malware"] [hostname "ampsstudio.com"] [uri "/ups.php"] [unique_id "YzsIw8k0N0EynbOPcf106AAAAA8"] ampsstudio.com [Mon Oct 03 17:07:43 2022] [error] [client 51.142.136.99:0] [client 51.142.136.99] ModSecurity: Access denied with code 403 (phase 2). String match "/alwso.php" at REQUEST_URI. [file "remote server"] [line "-1"] [id "570069"] [msg "Malware.Expert - PHP Command Shell (WSO)"] [hostname "ampsstudio.com"] [uri "/alwso.php"] [unique_id "YzsIz-WFFUJYG_z6q6vNdAAAAA4"] www.ampsstudio.com [Mon Oct 03 17:10:16 2022] [error] [client 20.86.140.94:0] AH01071: Got error 'PHP message: PHP Warning: Undefined array key "HTTP_USER_AGENT" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/bookly-responsive-appointment-booking-tool/frontend/modules/booking/ShortCode.php on line 66' www.ampsstudio.com [Mon Oct 03 17:10:18 2022] [error] [client 20.86.140.94:0] AH01071: Got error 'PHP message: PHP Warning: Undefined array key "HTTP_USER_AGENT" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/bookly-responsive-appointment-booking-tool/frontend/modules/booking/ShortCode.php on line 66' www.ampsstudio.com [Mon Oct 03 17:10:20 2022] [error] [client 20.86.140.94:0] AH01071: Got error 'PHP message: PHP Warning: Undefined array key "HTTP_USER_AGENT" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/bookly-responsive-appointment-booking-tool/frontend/modules/booking/ShortCode.php on line 66' www.ampsstudio.com [Mon Oct 03 17:10:21 2022] [error] [client 20.86.140.94:0] AH01071: Got error 'PHP message: PHP Warning: Undefined array key "HTTP_USER_AGENT" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/bookly-responsive-appointment-booking-tool/frontend/modules/booking/ShortCode.php on line 66' www.ampsstudio.com [Mon Oct 03 17:10:23 2022] [error] [client 20.86.140.94:0] AH01071: Got error 'PHP message: PHP Warning: Undefined array key "HTTP_USER_AGENT" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/bookly-responsive-appointment-booking-tool/frontend/modules/booking/ShortCode.php on line 66' ampsstudio.com [Mon Oct 03 17:10:24 2022] [error] [client 20.86.140.94:0] AH01276: Cannot serve directory /home/virtual/vps-aa3942/a/aede5353c4/public_html/test/: No matching DirectoryIndex (index.php,index.html,index.htm) found, and server-generated directory index forbidden by Options directive www.ampsstudio.com [Mon Oct 03 17:10:26 2022] [error] [client 20.86.140.94:0] AH01071: Got error 'PHP message: PHP Warning: Undefined array key "HTTP_USER_AGENT" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/bookly-responsive-appointment-booking-tool/frontend/modules/booking/ShortCode.php on line 66' www.ampsstudio.com [Mon Oct 03 17:10:27 2022] [error] [client 20.86.140.94:0] AH01071: Got error 'PHP message: PHP Warning: Undefined array key "HTTP_USER_AGENT" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/bookly-responsive-appointment-booking-tool/frontend/modules/booking/ShortCode.php on line 66' www.ampsstudio.com [Mon Oct 03 17:10:29 2022] [error] [client 20.86.140.94:0] AH01071: Got error 'PHP message: PHP Warning: Undefined array key "HTTP_USER_AGENT" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/bookly-responsive-appointment-booking-tool/frontend/modules/booking/ShortCode.php on line 66' www.ampsstudio.com [Mon Oct 03 18:31:27 2022] [error] [client 1.169.134.231:0] AH01071: Got error 'PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179' www.ampsstudio.com [Mon Oct 03 18:31:27 2022] [error] [client 1.169.134.231:0] AH01071: Got error 'PHP message: PHP Warning: Cannot modify header information - headers already sent by (output started at /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-includes/functions.php:5275) in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/includes/sonaar-music/css/theme/custom-style.php on line 2' webmail.ampsstudio.com [Mon Oct 03 18:53:03 2022] [error] [client 51.142.158.91:0] AH01276: Cannot serve directory /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-admin/css/: No matching DirectoryIndex (index.php,index.html,index.htm) found, and server-generated directory index forbidden by Options directive ampsstudio.com [Mon Oct 03 18:55:35 2022] [error] [client 20.86.140.94:0] [client 20.86.140.94] ModSecurity: Access denied with code 403 (phase 2). Match of "contains index.php" against "REQUEST_URI" required. [file "remote server"] [line "-1"] [id "570076"] [msg "Malware.Expert - Malware"] [hostname "ampsstudio.com"] [uri "/wp-plain.php"] [unique_id "YzsiF2Lm_q55RDRdDMg_jQAAAAI"] www.ampsstudio.com [Mon Oct 03 18:55:36 2022] [error] [client 20.86.140.94:0] [client 20.86.140.94] ModSecurity: Access denied with code 403 (phase 2). String match "php.suspected" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430059"] [msg "Malware.Expert - request_uri: .PHP suspected files"] [hostname "www.ampsstudio.com"] [uri "/wp-content/plugins/apikey/apikey.php.suspected"] [unique_id "YzsiGLxfzG5Pp_U-rP09vgAAAAc"] www.ampsstudio.com [Mon Oct 03 18:55:36 2022] [error] [client 20.86.140.94:0] [client 20.86.140.94] ModSecurity: Access denied with code 403 (phase 2). String match "php.suspected" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430059"] [msg "Malware.Expert - request_uri: .PHP suspected files"] [hostname "www.ampsstudio.com"] [uri "/plugins/content/apismtp/apismtp.php.suspected"] [unique_id "YzsiGOWFFUJYG_z6q6vNogAAAA4"] www.ampsstudio.com [Mon Oct 03 19:31:50 2022] [error] [client 46.148.206.226:0] AH01071: Got error 'PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179' www.ampsstudio.com [Mon Oct 03 19:31:50 2022] [error] [client 46.148.206.226:0] AH01071: Got error 'PHP message: PHP Warning: Cannot modify header information - headers already sent by (output started at /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-includes/functions.php:5275) in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/includes/sonaar-music/css/theme/custom-style.php on line 2' ampsstudio.com [Mon Oct 03 22:29:56 2022] [error] [client 41.216.188.218:0] [client 41.216.188.218] ModSecurity: Access denied with code 403 (phase 1). Pattern match "\\\\.\\\\./\\\\.\\\\." at REQUEST_URI. [file "remote server"] [line "-1"] [id "430064"] [msg "Malware.Expert - request_uri: directory travel"] [hostname "ampsstudio.com"] [uri "/wp-admin/admin-post.php"] [unique_id "YztUVOWFFUJYG_z6q6vN6wAAAA4"] www.ampsstudio.com [Mon Oct 03 22:51:40 2022] [error] [client 20.24.21.64:0] AH01276: Cannot serve directory /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-admin/css/: No matching DirectoryIndex (index.php,index.html,index.htm) found, and server-generated directory index forbidden by Options directive www.ampsstudio.com [Mon Oct 03 23:40:29 2022] [error] [client 185.191.171.8:0] AH01071: Got error 'PHP message: PHP Warning: Attempt to read property "ID" on null in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/archive-event.php on line 15PHP message: PHP Warning: Undefined array key 0 in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/includes/classes/iron_sonaar.class.php on line 212PHP message: PHP Warning: Trying to access array offset on value of type null in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/includes/classes/iron_sonaar.class.php on line 212PHP message: PHP Warning: Undefined array key 0 in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/includes/classes/iron_sonaar.class.php on line 214PHP message: PHP Warning: Trying to access array offset on value of type null in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/includes/classes/iron_sonaar.class.php on line 214' ampsstudio.com [Tue Oct 04 00:08:55 2022] [error] [client 20.40.248.132:0] [client 20.40.248.132] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "ampsstudio.com"] [uri "/admin/.env"] [unique_id "Yztrh7x_c_txjvOMollNCwAAAAg"] ampsstudio.com [Tue Oct 04 00:08:56 2022] [error] [client 20.40.248.132:0] [client 20.40.248.132] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "ampsstudio.com"] [uri "/core/.env"] [unique_id "YztriKvhEHZvXNaATvx_kwAAAAM"] ampsstudio.com [Tue Oct 04 00:08:57 2022] [error] [client 20.40.248.132:0] [client 20.40.248.132] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "ampsstudio.com"] [uri "/API/.env"] [unique_id "YztrieWFFUJYG_z6q6vOCAAAAA4"] ampsstudio.com [Tue Oct 04 00:08:58 2022] [error] [client 20.40.248.132:0] [client 20.40.248.132] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "ampsstudio.com"] [uri "/APP/.env"] [unique_id "YztrinV8-yBenF7B-EXrvgAAAA0"] ampsstudio.com [Tue Oct 04 00:08:58 2022] [error] [client 20.40.248.132:0] [client 20.40.248.132] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "ampsstudio.com"] [uri "/app/.env"] [unique_id "YztrimLm_q55RDRdDMg__gAAAAI"] ampsstudio.com [Tue Oct 04 00:08:59 2022] [error] [client 20.40.248.132:0] [client 20.40.248.132] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "ampsstudio.com"] [uri "/api/.env"] [unique_id "Yztri-Xba1IJ3gekH-BXfAAAAAE"] ampsstudio.com [Tue Oct 04 00:09:00 2022] [error] [client 20.40.248.132:0] [client 20.40.248.132] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "ampsstudio.com"] [uri "/blog/.env"] [unique_id "YztrjGBq9FFM3nspa3paIgAAAAo"] ampsstudio.com [Tue Oct 04 00:09:01 2022] [error] [client 20.40.248.132:0] [client 20.40.248.132] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "ampsstudio.com"] [uri "/admin/.env.save"] [unique_id "YztrjR-8dRMiwAtS9XEOcwAAAAQ"] ampsstudio.com [Tue Oct 04 00:09:02 2022] [error] [client 20.40.248.132:0] [client 20.40.248.132] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "ampsstudio.com"] [uri "/core/.env.save"] [unique_id "Yztrjrx_c_txjvOMollNDAAAAAg"] ampsstudio.com [Tue Oct 04 00:09:03 2022] [error] [client 20.40.248.132:0] [client 20.40.248.132] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "ampsstudio.com"] [uri "/API/.env.save"] [unique_id "Yztrj6vhEHZvXNaATvx_lAAAAAM"] ampsstudio.com [Tue Oct 04 00:09:04 2022] [error] [client 20.40.248.132:0] [client 20.40.248.132] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "ampsstudio.com"] [uri "/APP/.env.save"] [unique_id "YztrkOWFFUJYG_z6q6vOCQAAAA4"] ampsstudio.com [Tue Oct 04 00:09:05 2022] [error] [client 20.40.248.132:0] [client 20.40.248.132] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "ampsstudio.com"] [uri "/app/.env.save"] [unique_id "YztrkXV8-yBenF7B-EXrvwAAAA0"] ampsstudio.com [Tue Oct 04 00:09:06 2022] [error] [client 20.40.248.132:0] [client 20.40.248.132] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "ampsstudio.com"] [uri "/api/.env.save"] [unique_id "YztrkmLm_q55RDRdDMg__wAAAAI"] ampsstudio.com [Tue Oct 04 00:09:07 2022] [error] [client 20.40.248.132:0] [client 20.40.248.132] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "ampsstudio.com"] [uri "/blog/.env.save"] [unique_id "Yztrk8b4LZM_itpP26r-hAAAAAA"] ampsstudio.com [Tue Oct 04 00:09:08 2022] [error] [client 20.40.248.132:0] [client 20.40.248.132] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "ampsstudio.com"] [uri "/admin/.env.local"] [unique_id "YztrlOXba1IJ3gekH-BXfQAAAAE"] ampsstudio.com [Tue Oct 04 00:09:09 2022] [error] [client 20.40.248.132:0] [client 20.40.248.132] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "ampsstudio.com"] [uri "/core/.env.local"] [unique_id "YztrlbxfzG5Pp_U-rP0-KwAAAAc"] ampsstudio.com [Tue Oct 04 00:09:10 2022] [error] [client 20.40.248.132:0] [client 20.40.248.132] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "ampsstudio.com"] [uri "/API/.env.local"] [unique_id "YztrlmBq9FFM3nspa3paIwAAAAo"] ampsstudio.com [Tue Oct 04 00:09:11 2022] [error] [client 20.40.248.132:0] [client 20.40.248.132] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "ampsstudio.com"] [uri "/APP/.env.local"] [unique_id "Yztrlx-8dRMiwAtS9XEOdAAAAAQ"] ampsstudio.com [Tue Oct 04 00:09:12 2022] [error] [client 20.40.248.132:0] [client 20.40.248.132] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "ampsstudio.com"] [uri "/app/.env.local"] [unique_id "YztrmLx_c_txjvOMollNDQAAAAg"] ampsstudio.com [Tue Oct 04 00:09:13 2022] [error] [client 20.40.248.132:0] [client 20.40.248.132] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "ampsstudio.com"] [uri "/api/.env.local"] [unique_id "YztrmavhEHZvXNaATvx_lQAAAAM"] ampsstudio.com [Tue Oct 04 00:09:13 2022] [error] [client 20.40.248.132:0] [client 20.40.248.132] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "ampsstudio.com"] [uri "/blog/.env.local"] [unique_id "YztrmeWFFUJYG_z6q6vOCgAAAA4"] ampsstudio.com [Tue Oct 04 00:09:14 2022] [error] [client 20.40.248.132:0] [client 20.40.248.132] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "ampsstudio.com"] [uri "/admin/.env.backup"] [unique_id "YztrmnV8-yBenF7B-EXrwAAAAA0"] ampsstudio.com [Tue Oct 04 00:09:15 2022] [error] [client 20.40.248.132:0] [client 20.40.248.132] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "ampsstudio.com"] [uri "/core/.env.backup"] [unique_id "Yztrm2Lm_q55RDRdDMhAAAAAAAI"] ampsstudio.com [Tue Oct 04 00:09:16 2022] [error] [client 20.40.248.132:0] [client 20.40.248.132] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "ampsstudio.com"] [uri "/API/.env.backup"] [unique_id "YztrnMb4LZM_itpP26r-hQAAAAA"] ampsstudio.com [Tue Oct 04 00:09:17 2022] [error] [client 20.40.248.132:0] [client 20.40.248.132] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "ampsstudio.com"] [uri "/APP/.env.backup"] [unique_id "YztrneXba1IJ3gekH-BXfgAAAAE"] ampsstudio.com [Tue Oct 04 00:09:18 2022] [error] [client 20.40.248.132:0] [client 20.40.248.132] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "ampsstudio.com"] [uri "/app/.env.backup"] [unique_id "YztrnrxfzG5Pp_U-rP0-LAAAAAc"] ampsstudio.com [Tue Oct 04 00:09:19 2022] [error] [client 20.40.248.132:0] [client 20.40.248.132] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "ampsstudio.com"] [uri "/api/.env.backup"] [unique_id "Yztrn2Bq9FFM3nspa3paJAAAAAo"] ampsstudio.com [Tue Oct 04 00:09:20 2022] [error] [client 20.40.248.132:0] [client 20.40.248.132] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "ampsstudio.com"] [uri "/blog/.env.backup"] [unique_id "YztroLx_c_txjvOMollNDgAAAAg"] ampsstudio.com [Tue Oct 04 00:09:21 2022] [error] [client 20.40.248.132:0] [client 20.40.248.132] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "ampsstudio.com"] [uri "/laravel/.env"] [unique_id "YztroavhEHZvXNaATvx_lgAAAAM"] ampsstudio.com [Tue Oct 04 00:09:22 2022] [error] [client 20.40.248.132:0] [client 20.40.248.132] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "ampsstudio.com"] [uri "/laravel/.env.backup"] [unique_id "YztrouWFFUJYG_z6q6vOCwAAAA4"] ampsstudio.com [Tue Oct 04 00:09:23 2022] [error] [client 20.40.248.132:0] [client 20.40.248.132] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "ampsstudio.com"] [uri "/laravel/.env.local"] [unique_id "Yztrox-8dRMiwAtS9XEOdQAAAAQ"] ampsstudio.com [Tue Oct 04 00:09:24 2022] [error] [client 20.40.248.132:0] [client 20.40.248.132] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "ampsstudio.com"] [uri "/laravel/.env.save"] [unique_id "YztrpHV8-yBenF7B-EXrwQAAAA0"] ampsstudio.com [Tue Oct 04 00:09:25 2022] [error] [client 20.40.248.132:0] [client 20.40.248.132] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "ampsstudio.com"] [uri "/lv/.env"] [unique_id "YztrpWLm_q55RDRdDMhAAQAAAAI"] ampsstudio.com [Tue Oct 04 00:09:26 2022] [error] [client 20.40.248.132:0] [client 20.40.248.132] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "ampsstudio.com"] [uri "/lv/.env.backup"] [unique_id "Yztrpsb4LZM_itpP26r-hgAAAAA"] ampsstudio.com [Tue Oct 04 00:09:27 2022] [error] [client 20.40.248.132:0] [client 20.40.248.132] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "ampsstudio.com"] [uri "/lv/.env.local"] [unique_id "Yztrp-Xba1IJ3gekH-BXfwAAAAE"] ampsstudio.com [Tue Oct 04 00:09:28 2022] [error] [client 20.40.248.132:0] [client 20.40.248.132] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "ampsstudio.com"] [uri "/lv/.env.save"] [unique_id "YztrqLxfzG5Pp_U-rP0-LQAAAAc"] ampsstudio.com [Tue Oct 04 00:09:29 2022] [error] [client 20.40.248.132:0] [client 20.40.248.132] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "ampsstudio.com"] [uri "/.env"] [unique_id "YztrqWBq9FFM3nspa3paJQAAAAo"] ampsstudio.com [Tue Oct 04 00:09:30 2022] [error] [client 20.40.248.132:0] [client 20.40.248.132] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "ampsstudio.com"] [uri "/.env.backup"] [unique_id "Yztrqrx_c_txjvOMollNDwAAAAg"] ampsstudio.com [Tue Oct 04 00:09:30 2022] [error] [client 20.40.248.132:0] [client 20.40.248.132] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "ampsstudio.com"] [uri "/.env.local"] [unique_id "YztrqqvhEHZvXNaATvx_lwAAAAM"] ampsstudio.com [Tue Oct 04 00:09:31 2022] [error] [client 20.40.248.132:0] [client 20.40.248.132] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "ampsstudio.com"] [uri "/.env.save"] [unique_id "Yztrq-WFFUJYG_z6q6vODAAAAA4"] ampsstudio.com [Tue Oct 04 00:09:32 2022] [error] [client 20.40.248.132:0] [client 20.40.248.132] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "ampsstudio.com"] [uri "/test/.env"] [unique_id "YztrrB-8dRMiwAtS9XEOdgAAAAQ"] ampsstudio.com [Tue Oct 04 00:09:33 2022] [error] [client 20.40.248.132:0] [client 20.40.248.132] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "ampsstudio.com"] [uri "/test/.env.backup"] [unique_id "YztrrWLm_q55RDRdDMhAAgAAAAI"] ampsstudio.com [Tue Oct 04 00:09:34 2022] [error] [client 20.40.248.132:0] [client 20.40.248.132] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "ampsstudio.com"] [uri "/test/.env.local"] [unique_id "YztrruXba1IJ3gekH-BXgAAAAAE"] ampsstudio.com [Tue Oct 04 00:09:35 2022] [error] [client 20.40.248.132:0] [client 20.40.248.132] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "ampsstudio.com"] [uri "/test/.env.save"] [unique_id "Yztrr3V8-yBenF7B-EXrwgAAAA0"] ampsstudio.com [Tue Oct 04 00:09:36 2022] [error] [client 20.40.248.132:0] [client 20.40.248.132] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "ampsstudio.com"] [uri "/dev/.env"] [unique_id "YztrsLxfzG5Pp_U-rP0-LgAAAAc"] ampsstudio.com [Tue Oct 04 00:09:37 2022] [error] [client 20.40.248.132:0] [client 20.40.248.132] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "ampsstudio.com"] [uri "/dev/.env.backup"] [unique_id "Yztrscb4LZM_itpP26r-hwAAAAA"] ampsstudio.com [Tue Oct 04 00:09:38 2022] [error] [client 20.40.248.132:0] [client 20.40.248.132] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "ampsstudio.com"] [uri "/dev/.env.local"] [unique_id "YztrsmBq9FFM3nspa3paJgAAAAo"] ampsstudio.com [Tue Oct 04 00:09:39 2022] [error] [client 20.40.248.132:0] [client 20.40.248.132] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "ampsstudio.com"] [uri "/dev/.env.save"] [unique_id "Yztrs7x_c_txjvOMollNEAAAAAg"] ampsstudio.com [Tue Oct 04 00:09:40 2022] [error] [client 20.40.248.132:0] [client 20.40.248.132] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "ampsstudio.com"] [uri "/public/.env"] [unique_id "YztrtKvhEHZvXNaATvx_mAAAAAM"] ampsstudio.com [Tue Oct 04 00:09:40 2022] [error] [client 20.40.248.132:0] [client 20.40.248.132] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "ampsstudio.com"] [uri "/public/.env.backup"] [unique_id "YztrtOWFFUJYG_z6q6vODQAAAA4"] ampsstudio.com [Tue Oct 04 00:09:41 2022] [error] [client 20.40.248.132:0] [client 20.40.248.132] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "ampsstudio.com"] [uri "/public/.env.local"] [unique_id "YztrtR-8dRMiwAtS9XEOdwAAAAQ"] ampsstudio.com [Tue Oct 04 00:09:42 2022] [error] [client 20.40.248.132:0] [client 20.40.248.132] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "ampsstudio.com"] [uri "/public/.env.save"] [unique_id "YztrtmLm_q55RDRdDMhAAwAAAAI"] ampsstudio.com [Tue Oct 04 00:09:43 2022] [error] [client 20.40.248.132:0] [client 20.40.248.132] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "ampsstudio.com"] [uri "/test/.env"] [unique_id "Yztrt-Xba1IJ3gekH-BXgQAAAAE"] ampsstudio.com [Tue Oct 04 00:09:44 2022] [error] [client 20.40.248.132:0] [client 20.40.248.132] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "ampsstudio.com"] [uri "/test/.env.backup"] [unique_id "YztruHV8-yBenF7B-EXrwwAAAA0"] ampsstudio.com [Tue Oct 04 00:09:44 2022] [error] [client 20.40.248.132:0] [client 20.40.248.132] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "ampsstudio.com"] [uri "/test/.env.local"] [unique_id "YztruLxfzG5Pp_U-rP0-LwAAAAc"] ampsstudio.com [Tue Oct 04 00:09:45 2022] [error] [client 20.40.248.132:0] [client 20.40.248.132] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "ampsstudio.com"] [uri "/test/.env.save"] [unique_id "Yztrucb4LZM_itpP26r-iAAAAAA"] ampsstudio.com [Tue Oct 04 00:09:46 2022] [error] [client 20.40.248.132:0] [client 20.40.248.132] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "ampsstudio.com"] [uri "/test/bedesk1.1/.env"] [unique_id "YztrumBq9FFM3nspa3paJwAAAAo"] ampsstudio.com [Tue Oct 04 00:09:47 2022] [error] [client 20.40.248.132:0] [client 20.40.248.132] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "ampsstudio.com"] [uri "/test/bedesk1.1/.env.backup"] [unique_id "Yztru7x_c_txjvOMollNEQAAAAg"] ampsstudio.com [Tue Oct 04 00:09:47 2022] [error] [client 20.40.248.132:0] [client 20.40.248.132] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "ampsstudio.com"] [uri "/test/bedesk1.1/.env.local"] [unique_id "Yztru-WFFUJYG_z6q6vODgAAAA4"] ampsstudio.com [Tue Oct 04 00:09:48 2022] [error] [client 20.40.248.132:0] [client 20.40.248.132] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "ampsstudio.com"] [uri "/test/bedesk1.1/.env.save"] [unique_id "YztrvB-8dRMiwAtS9XEOeAAAAAQ"] ampsstudio.com [Tue Oct 04 00:09:49 2022] [error] [client 20.40.248.132:0] [client 20.40.248.132] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "ampsstudio.com"] [uri "/bedesk1.1/.env"] [unique_id "YztrvWLm_q55RDRdDMhABAAAAAI"] ampsstudio.com [Tue Oct 04 00:09:50 2022] [error] [client 20.40.248.132:0] [client 20.40.248.132] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "ampsstudio.com"] [uri "/bedesk1.1/.env.backup"] [unique_id "YztrvuXba1IJ3gekH-BXggAAAAE"] ampsstudio.com [Tue Oct 04 00:09:51 2022] [error] [client 20.40.248.132:0] [client 20.40.248.132] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "ampsstudio.com"] [uri "/bedesk1.1/.env.local"] [unique_id "Yztrv3V8-yBenF7B-EXrxAAAAA0"] ampsstudio.com [Tue Oct 04 00:09:52 2022] [error] [client 20.40.248.132:0] [client 20.40.248.132] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "ampsstudio.com"] [uri "/bedesk1.1/.env.save"] [unique_id "YztrwLxfzG5Pp_U-rP0-MAAAAAc"] ampsstudio.com [Tue Oct 04 00:56:13 2022] [error] [client 20.171.59.197:0] AH01276: Cannot serve directory /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-admin/css/: No matching DirectoryIndex (index.php,index.html,index.htm) found, and server-generated directory index forbidden by Options directive www.ampsstudio.com [Tue Oct 04 01:13:03 2022] [error] [client 51.11.6.150:0] AH01071: Got error 'PHP message: PHP Warning: Undefined array key "HTTP_USER_AGENT" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/bookly-responsive-appointment-booking-tool/frontend/modules/booking/ShortCode.php on line 66' www.ampsstudio.com [Tue Oct 04 01:57:32 2022] [error] [client 212.192.246.74:0] AH01071: Got error 'PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179' www.ampsstudio.com [Tue Oct 04 01:57:32 2022] [error] [client 212.192.246.74:0] AH01071: Got error 'PHP message: PHP Warning: Cannot modify header information - headers already sent by (output started at /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-includes/functions.php:5275) in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/includes/sonaar-music/css/theme/custom-style.php on line 2' www.ampsstudio.com [Tue Oct 04 02:25:16 2022] [error] [client 31.171.154.166:0] AH01071: Got error 'PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179' www.ampsstudio.com [Tue Oct 04 02:25:16 2022] [error] [client 31.171.154.166:0] AH01071: Got error 'PHP message: PHP Warning: Cannot modify header information - headers already sent by (output started at /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-includes/functions.php:5275) in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/includes/sonaar-music/css/theme/custom-style.php on line 2' www.ampsstudio.com [Tue Oct 04 03:26:07 2022] [error] [client 104.168.84.138:0] AH01071: Got error 'PHP message: PHP Warning: Cannot modify header information - headers already sent by (output started at /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-includes/functions.php:5275) in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/includes/sonaar-music/css/theme/custom-style.php on line 2' ampsstudio.com [Tue Oct 04 05:04:30 2022] [error] [client 51.142.146.242:0] [client 51.142.146.242] ModSecurity: Access denied with code 403 (phase 2). Match of "contains index.php" against "REQUEST_URI" required. [file "remote server"] [line "-1"] [id "570076"] [msg "Malware.Expert - Malware"] [hostname "ampsstudio.com"] [uri "/wp-includes/class-wordpress-license.php"] [unique_id "YzuwzgiYQklI_2bLdfEUEgAAAAM"] ampsstudio.com [Tue Oct 04 05:04:36 2022] [error] [client 51.142.146.242:0] [client 51.142.146.242] ModSecurity: Access denied with code 403 (phase 2). Match of "contains index.php" against "REQUEST_URI" required. [file "remote server"] [line "-1"] [id "570076"] [msg "Malware.Expert - Malware"] [hostname "ampsstudio.com"] [uri "/wp-includes/class-wordpress-license.php"] [unique_id "Yzuw1HuoA4_Zr0nmjwiEugAAAAo"] ampsstudio.com [Tue Oct 04 05:04:57 2022] [error] [client 51.142.146.242:0] [client 51.142.146.242] ModSecurity: Access denied with code 403 (phase 2). Match of "contains index.php" against "REQUEST_URI" required. [file "remote server"] [line "-1"] [id "570076"] [msg "Malware.Expert - Malware"] [hostname "ampsstudio.com"] [uri "/wp-includes/class-index-wordpress.php"] [unique_id "Yzuw6R2uFMBj64frD5-f-QAAAAA"] ampsstudio.com [Tue Oct 04 05:05:01 2022] [error] [client 51.142.146.242:0] [client 51.142.146.242] ModSecurity: Access denied with code 403 (phase 2). Match of "contains index.php" against "REQUEST_URI" required. [file "remote server"] [line "-1"] [id "570076"] [msg "Malware.Expert - Malware"] [hostname "ampsstudio.com"] [uri "/wp-includes/class-index-wordpress.php"] [unique_id "Yzuw7X8_HXHi-samcKoVtQAAAAE"] ampsstudio.com [Tue Oct 04 05:15:12 2022] [error] [client 51.142.143.115:0] AH01276: Cannot serve directory /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-admin/css/: No matching DirectoryIndex (index.php,index.html,index.htm) found, and server-generated directory index forbidden by Options directive cpanel.ampsstudio.com [Tue Oct 04 06:54:18 2022] [error] [client 51.142.146.242:0] [client 51.142.146.242] ModSecurity: Access denied with code 403 (phase 2). Match of "contains index.php" against "REQUEST_URI" required. [file "remote server"] [line "-1"] [id "570076"] [msg "Malware.Expert - Malware"] [hostname "cpanel.ampsstudio.com"] [uri "/wp-includes/class-wordpress-license.php"] [unique_id "YzvKitfAmCXdmBZPBlpuqQAAAAc"] cpanel.ampsstudio.com [Tue Oct 04 06:54:34 2022] [error] [client 51.142.146.242:0] [client 51.142.146.242] ModSecurity: Access denied with code 403 (phase 2). Match of "contains index.php" against "REQUEST_URI" required. [file "remote server"] [line "-1"] [id "570076"] [msg "Malware.Expert - Malware"] [hostname "cpanel.ampsstudio.com"] [uri "/wp-includes/class-wordpress-license.php"] [unique_id "YzvKmgiYQklI_2bLdfEUQQAAAAM"] cpanel.ampsstudio.com [Tue Oct 04 06:54:51 2022] [error] [client 51.142.146.242:0] [client 51.142.146.242] ModSecurity: Access denied with code 403 (phase 2). Match of "contains index.php" against "REQUEST_URI" required. [file "remote server"] [line "-1"] [id "570076"] [msg "Malware.Expert - Malware"] [hostname "cpanel.ampsstudio.com"] [uri "/wp-includes/class-index-wordpress.php"] [unique_id "YzvKqwiYQklI_2bLdfEUQgAAAAM"] cpanel.ampsstudio.com [Tue Oct 04 06:54:57 2022] [error] [client 51.142.146.242:0] [client 51.142.146.242] ModSecurity: Access denied with code 403 (phase 2). Match of "contains index.php" against "REQUEST_URI" required. [file "remote server"] [line "-1"] [id "570076"] [msg "Malware.Expert - Malware"] [hostname "cpanel.ampsstudio.com"] [uri "/wp-includes/class-index-wordpress.php"] [unique_id "YzvKsdfAmCXdmBZPBlpuqwAAAAc"] www.ampsstudio.com [Tue Oct 04 07:11:57 2022] [error] [client 185.220.100.244:0] AH01071: Got error 'PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179' www.ampsstudio.com [Tue Oct 04 07:11:57 2022] [error] [client 185.220.100.244:0] AH01071: Got error 'PHP message: PHP Warning: Cannot modify header information - headers already sent by (output started at /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-includes/functions.php:5275) in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/includes/sonaar-music/css/theme/custom-style.php on line 2' webmail.ampsstudio.com [Tue Oct 04 08:53:33 2022] [error] [client 194.26.229.150:0] [client 194.26.229.150] ModSecurity: Access denied with code 403 (phase 2). String match "/.git/config" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430058"] [msg "Malware.Expert - request_uri: .git config"] [hostname "webmail.ampsstudio.com"] [uri "/.git/config"] [unique_id "YzvmfbHL9d-amnponyDwJgAAAAY"] webdisk.ampsstudio.com [Tue Oct 04 09:42:03 2022] [error] [client 194.26.229.150:0] [client 194.26.229.150] ModSecurity: Access denied with code 403 (phase 2). String match "/.git/config" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430058"] [msg "Malware.Expert - request_uri: .git config"] [hostname "webdisk.ampsstudio.com"] [uri "/.git/config"] [unique_id "Yzvx238_HXHi-samcKoWRAAAAAE"] www.ampsstudio.com [Tue Oct 04 09:50:09 2022] [error] [client 185.220.101.50:0] AH01071: Got error 'PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179' www.ampsstudio.com [Tue Oct 04 09:50:09 2022] [error] [client 185.220.101.50:0] AH01071: Got error 'PHP message: PHP Warning: Cannot modify header information - headers already sent by (output started at /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-includes/functions.php:5275) in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/includes/sonaar-music/css/theme/custom-style.php on line 2' mail.ampsstudio.com [Tue Oct 04 10:03:15 2022] [error] [client 194.26.229.150:0] [client 194.26.229.150] ModSecurity: Access denied with code 403 (phase 2). String match "/.git/config" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430058"] [msg "Malware.Expert - request_uri: .git config"] [hostname "mail.ampsstudio.com"] [uri "/.git/config"] [unique_id "Yzv207IY4JrKAhGQt_vCVQAAAAU"] ampsstudio.com [Tue Oct 04 10:40:00 2022] [error] [client 20.40.248.132:0] [client 20.40.248.132] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "ampsstudio.com"] [uri "/admin/.env"] [unique_id "Yzv_cLIY4JrKAhGQt_vCYQAAAAU"] ampsstudio.com [Tue Oct 04 10:40:01 2022] [error] [client 20.40.248.132:0] [client 20.40.248.132] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "ampsstudio.com"] [uri "/core/.env"] [unique_id "Yzv_cbHL9d-amnponyDwWQAAAAY"] ampsstudio.com [Tue Oct 04 10:40:02 2022] [error] [client 20.40.248.132:0] [client 20.40.248.132] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "ampsstudio.com"] [uri "/API/.env"] [unique_id "Yzv_cmRpeIhVT92DDbo2NQAAAAg"] ampsstudio.com [Tue Oct 04 10:40:02 2022] [error] [client 20.40.248.132:0] [client 20.40.248.132] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "ampsstudio.com"] [uri "/APP/.env"] [unique_id "Yzv_cssXNhf7LLzRER0SJgAAAA4"] ampsstudio.com [Tue Oct 04 10:40:04 2022] [error] [client 20.40.248.132:0] [client 20.40.248.132] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "ampsstudio.com"] [uri "/app/.env"] [unique_id "Yzv_dIlyR_pC6TmYMRcYPgAAAAI"] ampsstudio.com [Tue Oct 04 10:40:05 2022] [error] [client 20.40.248.132:0] [client 20.40.248.132] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "ampsstudio.com"] [uri "/api/.env"] [unique_id "Yzv_dR2uFMBj64frD5-gowAAAAA"] ampsstudio.com [Tue Oct 04 10:40:06 2022] [error] [client 20.40.248.132:0] [client 20.40.248.132] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "ampsstudio.com"] [uri "/blog/.env"] [unique_id "Yzv_dgiYQklI_2bLdfEUvAAAAAM"] ampsstudio.com [Tue Oct 04 10:40:07 2022] [error] [client 20.40.248.132:0] [client 20.40.248.132] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "ampsstudio.com"] [uri "/admin/.env.save"] [unique_id "Yzv_d_l5wfKW0ulSQvsyEwAAAAQ"] ampsstudio.com [Tue Oct 04 10:40:08 2022] [error] [client 20.40.248.132:0] [client 20.40.248.132] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "ampsstudio.com"] [uri "/core/.env.save"] [unique_id "Yzv_eNfAmCXdmBZPBlpvJgAAAAc"] ampsstudio.com [Tue Oct 04 10:40:09 2022] [error] [client 20.40.248.132:0] [client 20.40.248.132] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "ampsstudio.com"] [uri "/API/.env.save"] [unique_id "Yzv_ebIY4JrKAhGQt_vCYgAAAAU"] ampsstudio.com [Tue Oct 04 10:40:10 2022] [error] [client 20.40.248.132:0] [client 20.40.248.132] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "ampsstudio.com"] [uri "/APP/.env.save"] [unique_id "Yzv_en8_HXHi-samcKoWYgAAAAE"] ampsstudio.com [Tue Oct 04 10:40:10 2022] [error] [client 20.40.248.132:0] [client 20.40.248.132] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "ampsstudio.com"] [uri "/app/.env.save"] [unique_id "Yzv_erHL9d-amnponyDwWgAAAAY"] ampsstudio.com [Tue Oct 04 10:40:11 2022] [error] [client 20.40.248.132:0] [client 20.40.248.132] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "ampsstudio.com"] [uri "/api/.env.save"] [unique_id "Yzv_e2RpeIhVT92DDbo2NgAAAAg"] ampsstudio.com [Tue Oct 04 10:40:12 2022] [error] [client 20.40.248.132:0] [client 20.40.248.132] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "ampsstudio.com"] [uri "/blog/.env.save"] [unique_id "Yzv_fMsXNhf7LLzRER0SJwAAAA4"] ampsstudio.com [Tue Oct 04 10:40:13 2022] [error] [client 20.40.248.132:0] [client 20.40.248.132] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "ampsstudio.com"] [uri "/admin/.env.local"] [unique_id "Yzv_fYlyR_pC6TmYMRcYPwAAAAI"] ampsstudio.com [Tue Oct 04 10:40:14 2022] [error] [client 20.40.248.132:0] [client 20.40.248.132] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "ampsstudio.com"] [uri "/core/.env.local"] [unique_id "Yzv_fh2uFMBj64frD5-gpAAAAAA"] ampsstudio.com [Tue Oct 04 10:40:15 2022] [error] [client 20.40.248.132:0] [client 20.40.248.132] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "ampsstudio.com"] [uri "/API/.env.local"] [unique_id "Yzv_fwiYQklI_2bLdfEUvQAAAAM"] ampsstudio.com [Tue Oct 04 10:40:15 2022] [error] [client 20.40.248.132:0] [client 20.40.248.132] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "ampsstudio.com"] [uri "/APP/.env.local"] [unique_id "Yzv_f_l5wfKW0ulSQvsyFAAAAAQ"] ampsstudio.com [Tue Oct 04 10:40:17 2022] [error] [client 20.40.248.132:0] [client 20.40.248.132] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "ampsstudio.com"] [uri "/app/.env.local"] [unique_id "Yzv_gdfAmCXdmBZPBlpvJwAAAAc"] ampsstudio.com [Tue Oct 04 10:40:17 2022] [error] [client 20.40.248.132:0] [client 20.40.248.132] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "ampsstudio.com"] [uri "/api/.env.local"] [unique_id "Yzv_gX8_HXHi-samcKoWYwAAAAE"] ampsstudio.com [Tue Oct 04 10:40:18 2022] [error] [client 20.40.248.132:0] [client 20.40.248.132] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "ampsstudio.com"] [uri "/blog/.env.local"] [unique_id "Yzv_grHL9d-amnponyDwWwAAAAY"] ampsstudio.com [Tue Oct 04 10:40:19 2022] [error] [client 20.40.248.132:0] [client 20.40.248.132] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "ampsstudio.com"] [uri "/admin/.env.backup"] [unique_id "Yzv_g2RpeIhVT92DDbo2NwAAAAg"] ampsstudio.com [Tue Oct 04 10:40:20 2022] [error] [client 20.40.248.132:0] [client 20.40.248.132] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "ampsstudio.com"] [uri "/core/.env.backup"] [unique_id "Yzv_hLIY4JrKAhGQt_vCYwAAAAU"] ampsstudio.com [Tue Oct 04 10:40:21 2022] [error] [client 20.40.248.132:0] [client 20.40.248.132] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "ampsstudio.com"] [uri "/API/.env.backup"] [unique_id "Yzv_hcsXNhf7LLzRER0SKAAAAA4"] ampsstudio.com [Tue Oct 04 10:40:22 2022] [error] [client 20.40.248.132:0] [client 20.40.248.132] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "ampsstudio.com"] [uri "/APP/.env.backup"] [unique_id "Yzv_holyR_pC6TmYMRcYQAAAAAI"] ampsstudio.com [Tue Oct 04 10:40:23 2022] [error] [client 20.40.248.132:0] [client 20.40.248.132] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "ampsstudio.com"] [uri "/app/.env.backup"] [unique_id "Yzv_hx2uFMBj64frD5-gpQAAAAA"] ampsstudio.com [Tue Oct 04 10:40:24 2022] [error] [client 20.40.248.132:0] [client 20.40.248.132] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "ampsstudio.com"] [uri "/api/.env.backup"] [unique_id "Yzv_iAiYQklI_2bLdfEUvgAAAAM"] ampsstudio.com [Tue Oct 04 10:40:25 2022] [error] [client 20.40.248.132:0] [client 20.40.248.132] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "ampsstudio.com"] [uri "/blog/.env.backup"] [unique_id "Yzv_ifl5wfKW0ulSQvsyFQAAAAQ"] ampsstudio.com [Tue Oct 04 10:40:25 2022] [error] [client 20.40.248.132:0] [client 20.40.248.132] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "ampsstudio.com"] [uri "/laravel/.env"] [unique_id "Yzv_idfAmCXdmBZPBlpvKAAAAAc"] ampsstudio.com [Tue Oct 04 10:40:26 2022] [error] [client 20.40.248.132:0] [client 20.40.248.132] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "ampsstudio.com"] [uri "/laravel/.env.backup"] [unique_id "Yzv_in8_HXHi-samcKoWZAAAAAE"] ampsstudio.com [Tue Oct 04 10:40:27 2022] [error] [client 20.40.248.132:0] [client 20.40.248.132] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "ampsstudio.com"] [uri "/laravel/.env.local"] [unique_id "Yzv_i7HL9d-amnponyDwXAAAAAY"] ampsstudio.com [Tue Oct 04 10:40:28 2022] [error] [client 20.40.248.132:0] [client 20.40.248.132] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "ampsstudio.com"] [uri "/laravel/.env.save"] [unique_id "Yzv_jGRpeIhVT92DDbo2OAAAAAg"] ampsstudio.com [Tue Oct 04 10:40:33 2022] [error] [client 20.40.248.132:0] [client 20.40.248.132] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "ampsstudio.com"] [uri "/lv/.env"] [unique_id "Yzv_kbIY4JrKAhGQt_vCZAAAAAU"] ampsstudio.com [Tue Oct 04 10:40:34 2022] [error] [client 20.40.248.132:0] [client 20.40.248.132] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "ampsstudio.com"] [uri "/lv/.env.backup"] [unique_id "Yzv_kssXNhf7LLzRER0SKQAAAA4"] ampsstudio.com [Tue Oct 04 10:40:35 2022] [error] [client 20.40.248.132:0] [client 20.40.248.132] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "ampsstudio.com"] [uri "/lv/.env.local"] [unique_id "Yzv_k4lyR_pC6TmYMRcYQQAAAAI"] ampsstudio.com [Tue Oct 04 10:40:36 2022] [error] [client 20.40.248.132:0] [client 20.40.248.132] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "ampsstudio.com"] [uri "/lv/.env.save"] [unique_id "Yzv_lB2uFMBj64frD5-gpgAAAAA"] ampsstudio.com [Tue Oct 04 10:40:37 2022] [error] [client 20.40.248.132:0] [client 20.40.248.132] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "ampsstudio.com"] [uri "/.env"] [unique_id "Yzv_lQiYQklI_2bLdfEUvwAAAAM"] ampsstudio.com [Tue Oct 04 10:40:38 2022] [error] [client 20.40.248.132:0] [client 20.40.248.132] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "ampsstudio.com"] [uri "/.env.backup"] [unique_id "Yzv_lvl5wfKW0ulSQvsyFgAAAAQ"] ampsstudio.com [Tue Oct 04 10:40:39 2022] [error] [client 20.40.248.132:0] [client 20.40.248.132] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "ampsstudio.com"] [uri "/.env.local"] [unique_id "Yzv_l9fAmCXdmBZPBlpvKQAAAAc"] ampsstudio.com [Tue Oct 04 10:40:40 2022] [error] [client 20.40.248.132:0] [client 20.40.248.132] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "ampsstudio.com"] [uri "/.env.save"] [unique_id "Yzv_mH8_HXHi-samcKoWZQAAAAE"] ampsstudio.com [Tue Oct 04 10:40:41 2022] [error] [client 20.40.248.132:0] [client 20.40.248.132] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "ampsstudio.com"] [uri "/test/.env"] [unique_id "Yzv_mbHL9d-amnponyDwXQAAAAY"] ampsstudio.com [Tue Oct 04 10:40:42 2022] [error] [client 20.40.248.132:0] [client 20.40.248.132] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "ampsstudio.com"] [uri "/test/.env.backup"] [unique_id "Yzv_mmRpeIhVT92DDbo2OQAAAAg"] ampsstudio.com [Tue Oct 04 10:40:43 2022] [error] [client 20.40.248.132:0] [client 20.40.248.132] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "ampsstudio.com"] [uri "/test/.env.local"] [unique_id "Yzv_m7IY4JrKAhGQt_vCZQAAAAU"] ampsstudio.com [Tue Oct 04 10:40:44 2022] [error] [client 20.40.248.132:0] [client 20.40.248.132] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "ampsstudio.com"] [uri "/test/.env.save"] [unique_id "Yzv_nMsXNhf7LLzRER0SKgAAAA4"] ampsstudio.com [Tue Oct 04 10:40:45 2022] [error] [client 20.40.248.132:0] [client 20.40.248.132] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "ampsstudio.com"] [uri "/dev/.env"] [unique_id "Yzv_nYlyR_pC6TmYMRcYQgAAAAI"] ampsstudio.com [Tue Oct 04 10:40:46 2022] [error] [client 20.40.248.132:0] [client 20.40.248.132] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "ampsstudio.com"] [uri "/dev/.env.backup"] [unique_id "Yzv_nh2uFMBj64frD5-gpwAAAAA"] ampsstudio.com [Tue Oct 04 10:40:47 2022] [error] [client 20.40.248.132:0] [client 20.40.248.132] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "ampsstudio.com"] [uri "/dev/.env.local"] [unique_id "Yzv_nwiYQklI_2bLdfEUwAAAAAM"] ampsstudio.com [Tue Oct 04 10:40:47 2022] [error] [client 20.40.248.132:0] [client 20.40.248.132] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "ampsstudio.com"] [uri "/dev/.env.save"] [unique_id "Yzv_n_l5wfKW0ulSQvsyFwAAAAQ"] ampsstudio.com [Tue Oct 04 10:40:49 2022] [error] [client 20.40.248.132:0] [client 20.40.248.132] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "ampsstudio.com"] [uri "/public/.env"] [unique_id "Yzv_odfAmCXdmBZPBlpvKgAAAAc"] ampsstudio.com [Tue Oct 04 10:40:50 2022] [error] [client 20.40.248.132:0] [client 20.40.248.132] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "ampsstudio.com"] [uri "/public/.env.backup"] [unique_id "Yzv_on8_HXHi-samcKoWZgAAAAE"] ampsstudio.com [Tue Oct 04 10:40:51 2022] [error] [client 20.40.248.132:0] [client 20.40.248.132] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "ampsstudio.com"] [uri "/public/.env.local"] [unique_id "Yzv_o7HL9d-amnponyDwXgAAAAY"] ampsstudio.com [Tue Oct 04 10:40:52 2022] [error] [client 20.40.248.132:0] [client 20.40.248.132] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "ampsstudio.com"] [uri "/public/.env.save"] [unique_id "Yzv_pGRpeIhVT92DDbo2OgAAAAg"] ampsstudio.com [Tue Oct 04 10:40:52 2022] [error] [client 20.40.248.132:0] [client 20.40.248.132] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "ampsstudio.com"] [uri "/test/.env"] [unique_id "Yzv_pLIY4JrKAhGQt_vCZgAAAAU"] ampsstudio.com [Tue Oct 04 10:40:53 2022] [error] [client 20.40.248.132:0] [client 20.40.248.132] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "ampsstudio.com"] [uri "/test/.env.backup"] [unique_id "Yzv_pcsXNhf7LLzRER0SKwAAAA4"] ampsstudio.com [Tue Oct 04 10:40:55 2022] [error] [client 20.40.248.132:0] [client 20.40.248.132] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "ampsstudio.com"] [uri "/test/.env.local"] [unique_id "Yzv_p4lyR_pC6TmYMRcYQwAAAAI"] ampsstudio.com [Tue Oct 04 10:40:55 2022] [error] [client 20.40.248.132:0] [client 20.40.248.132] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "ampsstudio.com"] [uri "/test/.env.save"] [unique_id "Yzv_px2uFMBj64frD5-gqAAAAAA"] ampsstudio.com [Tue Oct 04 10:40:56 2022] [error] [client 20.40.248.132:0] [client 20.40.248.132] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "ampsstudio.com"] [uri "/test/bedesk1.1/.env"] [unique_id "Yzv_qAiYQklI_2bLdfEUwQAAAAM"] ampsstudio.com [Tue Oct 04 10:40:57 2022] [error] [client 20.40.248.132:0] [client 20.40.248.132] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "ampsstudio.com"] [uri "/test/bedesk1.1/.env.backup"] [unique_id "Yzv_qfl5wfKW0ulSQvsyGAAAAAQ"] ampsstudio.com [Tue Oct 04 10:40:58 2022] [error] [client 20.40.248.132:0] [client 20.40.248.132] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "ampsstudio.com"] [uri "/test/bedesk1.1/.env.local"] [unique_id "Yzv_qtfAmCXdmBZPBlpvKwAAAAc"] ampsstudio.com [Tue Oct 04 10:40:59 2022] [error] [client 20.40.248.132:0] [client 20.40.248.132] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "ampsstudio.com"] [uri "/test/bedesk1.1/.env.save"] [unique_id "Yzv_q38_HXHi-samcKoWZwAAAAE"] ampsstudio.com [Tue Oct 04 10:41:00 2022] [error] [client 20.40.248.132:0] [client 20.40.248.132] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "ampsstudio.com"] [uri "/bedesk1.1/.env"] [unique_id "Yzv_rGRpeIhVT92DDbo2OwAAAAg"] ampsstudio.com [Tue Oct 04 10:41:01 2022] [error] [client 20.40.248.132:0] [client 20.40.248.132] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "ampsstudio.com"] [uri "/bedesk1.1/.env.backup"] [unique_id "Yzv_rYlyR_pC6TmYMRcYRAAAAAI"] ampsstudio.com [Tue Oct 04 10:41:02 2022] [error] [client 20.40.248.132:0] [client 20.40.248.132] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "ampsstudio.com"] [uri "/bedesk1.1/.env.local"] [unique_id "Yzv_rh2uFMBj64frD5-gqQAAAAA"] ampsstudio.com [Tue Oct 04 10:41:03 2022] [error] [client 20.40.248.132:0] [client 20.40.248.132] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "ampsstudio.com"] [uri "/bedesk1.1/.env.save"] [unique_id "Yzv_rwiYQklI_2bLdfEUwgAAAAM"] cpanel.ampsstudio.com [Tue Oct 04 10:43:19 2022] [error] [client 194.26.229.150:0] [client 194.26.229.150] ModSecurity: Access denied with code 403 (phase 2). String match "/.git/config" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430058"] [msg "Malware.Expert - request_uri: .git config"] [hostname "cpanel.ampsstudio.com"] [uri "/.git/config"] [unique_id "YzwAN38_HXHi-samcKoWbAAAAAE"] ampsstudio.com [Tue Oct 04 10:43:36 2022] [error] [client 194.26.229.150:0] [client 194.26.229.150] ModSecurity: Access denied with code 403 (phase 2). String match "/.git/config" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430058"] [msg "Malware.Expert - request_uri: .git config"] [hostname "ampsstudio.com"] [uri "/.git/config"] [unique_id "YzwASIlyR_pC6TmYMRcYRwAAAAI"] ampsstudio.com [Tue Oct 04 12:39:28 2022] [error] [client 41.216.188.218:0] [client 41.216.188.218] ModSecurity: Access denied with code 403 (phase 1). Pattern match "\\\\.\\\\./\\\\.\\\\." at REQUEST_URI. [file "remote server"] [line "-1"] [id "430064"] [msg "Malware.Expert - request_uri: directory travel"] [hostname "ampsstudio.com"] [uri "/wp-admin/admin-post.php"] [unique_id "YzwbcH8_HXHi-samcKoWvgAAAAE"] www.ampsstudio.com [Tue Oct 04 12:58:28 2022] [error] [client 95.128.43.164:0] AH01071: Got error 'PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179' www.ampsstudio.com [Tue Oct 04 12:58:28 2022] [error] [client 95.128.43.164:0] AH01071: Got error 'PHP message: PHP Warning: Cannot modify header information - headers already sent by (output started at /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-includes/functions.php:5275) in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/includes/sonaar-music/css/theme/custom-style.php on line 2' www.ampsstudio.com [Tue Oct 04 14:55:25 2022] [error] [client 178.175.129.43:0] AH01071: Got error 'PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179' www.ampsstudio.com [Tue Oct 04 14:55:25 2022] [error] [client 178.175.129.43:0] AH01071: Got error 'PHP message: PHP Warning: Cannot modify header information - headers already sent by (output started at /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-includes/functions.php:5275) in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/includes/sonaar-music/css/theme/custom-style.php on line 2' www.ampsstudio.com [Tue Oct 04 16:07:57 2022] [error] [client 23.105.4.254:0] AH01071: Got error 'PHP message: PHP Warning: Cannot modify header information - headers already sent by (output started at /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-includes/functions.php:5275) in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/includes/sonaar-music/css/theme/custom-style.php on line 2' www.ampsstudio.com [Tue Oct 04 17:50:05 2022] [error] [client 88.206.121.137:0] AH01071: Got error 'PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179' www.ampsstudio.com [Tue Oct 04 17:50:05 2022] [error] [client 88.206.121.137:0] AH01071: Got error 'PHP message: PHP Warning: Cannot modify header information - headers already sent by (output started at /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-includes/functions.php:5275) in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/includes/sonaar-music/css/theme/custom-style.php on line 2' webdisk.ampsstudio.com [Tue Oct 04 18:25:22 2022] [error] [client 92.205.56.212:0] AH01276: Cannot serve directory /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-admin/css/: No matching DirectoryIndex (index.php,index.html,index.htm) found, and server-generated directory index forbidden by Options directive www.ampsstudio.com [Tue Oct 04 18:55:22 2022] [error] [client 198.46.234.170:0] AH01071: Got error 'PHP message: PHP Warning: Cannot modify header information - headers already sent by (output started at /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-includes/functions.php:5275) in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/includes/sonaar-music/css/theme/custom-style.php on line 2' www.ampsstudio.com [Tue Oct 04 19:18:18 2022] [error] [client 185.65.134.167:0] AH01071: Got error 'PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179' www.ampsstudio.com [Tue Oct 04 19:18:18 2022] [error] [client 185.65.134.167:0] AH01071: Got error 'PHP message: PHP Warning: Cannot modify header information - headers already sent by (output started at /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-includes/functions.php:5275) in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/includes/sonaar-music/css/theme/custom-style.php on line 2' www.ampsstudio.com [Tue Oct 04 19:36:51 2022] [error] [client 5.143.34.240:0] AH01071: Got error 'PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179' www.ampsstudio.com [Tue Oct 04 19:36:51 2022] [error] [client 5.143.34.240:0] AH01071: Got error 'PHP message: PHP Warning: Cannot modify header information - headers already sent by (output started at /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-includes/functions.php:5275) in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/includes/sonaar-music/css/theme/custom-style.php on line 2' www.ampsstudio.com [Tue Oct 04 21:20:28 2022] [error] [client 156.146.63.158:0] AH01071: Got error 'PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179' www.ampsstudio.com [Tue Oct 04 21:20:28 2022] [error] [client 156.146.63.158:0] AH01071: Got error 'PHP message: PHP Warning: Cannot modify header information - headers already sent by (output started at /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-includes/functions.php:5275) in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/includes/sonaar-music/css/theme/custom-style.php on line 2' www.ampsstudio.com [Tue Oct 04 21:50:34 2022] [error] [client 181.214.218.46:0] AH01071: Got error 'PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179' www.ampsstudio.com [Tue Oct 04 21:50:34 2022] [error] [client 181.214.218.46:0] AH01071: Got error 'PHP message: PHP Warning: Cannot modify header information - headers already sent by (output started at /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-includes/functions.php:5275) in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/includes/sonaar-music/css/theme/custom-style.php on line 2' cpanel.ampsstudio.com [Tue Oct 04 21:57:26 2022] [error] [client 51.142.158.91:0] AH01276: Cannot serve directory /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-admin/css/: No matching DirectoryIndex (index.php,index.html,index.htm) found, and server-generated directory index forbidden by Options directive webdisk.ampsstudio.com [Tue Oct 04 22:17:34 2022] [error] [client 51.142.158.91:0] AH01276: Cannot serve directory /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-admin/css/: No matching DirectoryIndex (index.php,index.html,index.htm) found, and server-generated directory index forbidden by Options directive www.ampsstudio.com [Tue Oct 04 22:18:19 2022] [error] [client 111.240.205.79:0] AH01071: Got error 'PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179' www.ampsstudio.com [Tue Oct 04 22:18:19 2022] [error] [client 111.240.205.79:0] AH01071: Got error 'PHP message: PHP Warning: Cannot modify header information - headers already sent by (output started at /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-includes/functions.php:5275) in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/includes/sonaar-music/css/theme/custom-style.php on line 2' mail.ampsstudio.com [Tue Oct 04 22:36:36 2022] [error] [client 51.142.158.91:0] AH01276: Cannot serve directory /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-admin/css/: No matching DirectoryIndex (index.php,index.html,index.htm) found, and server-generated directory index forbidden by Options directive ampsstudio.com [Tue Oct 04 23:44:08 2022] [error] [client 20.68.197.70:0] [client 20.68.197.70] ModSecurity: Access denied with code 403 (phase 2). String match "/.git/config" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430058"] [msg "Malware.Expert - request_uri: .git config"] [hostname "ampsstudio.com"] [uri "/.git/config"] [unique_id "Yzy3OLHL9d-amnponyDx5AAAAAY"] ampsstudio.com [Tue Oct 04 23:44:08 2022] [error] [client 20.68.197.70:0] [client 20.68.197.70] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "ampsstudio.com"] [uri "/.env"] [unique_id "Yzy3OH8_HXHi-samcKoX7AAAAAE"] ampsstudio.com [Tue Oct 04 23:44:09 2022] [error] [client 20.68.197.70:0] [client 20.68.197.70] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "ampsstudio.com"] [uri "/__tests__/test-become/.env"] [unique_id "Yzy3OcsXNhf7LLzRER0TqAAAAA4"] ampsstudio.com [Tue Oct 04 23:44:09 2022] [error] [client 20.68.197.70:0] [client 20.68.197.70] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "ampsstudio.com"] [uri "/.docker/.env"] [unique_id "Yzy3OeH3_Jc1DjqZJXTtlgAAAAo"] ampsstudio.com [Tue Oct 04 23:44:09 2022] [error] [client 20.68.197.70:0] [client 20.68.197.70] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "ampsstudio.com"] [uri "/.docker/laravel/app/.env"] [unique_id "Yzy3OR2uFMBj64frD5-iLwAAAAA"] ampsstudio.com [Tue Oct 04 23:44:10 2022] [error] [client 20.68.197.70:0] [client 20.68.197.70] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "ampsstudio.com"] [uri "/.env.backup"] [unique_id "Yzy3OtpbnTxnIH6JA3EkEQAAAAU"] ampsstudio.com [Tue Oct 04 23:44:10 2022] [error] [client 20.68.197.70:0] [client 20.68.197.70] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "ampsstudio.com"] [uri "/.env.dev"] [unique_id "Yzy3Os7hdXCeqFlFE6qebwAAAAQ"] ampsstudio.com [Tue Oct 04 23:44:10 2022] [error] [client 20.68.197.70:0] [client 20.68.197.70] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "ampsstudio.com"] [uri "/.env.example"] [unique_id "Yzy3OmRpeIhVT92DDbo3zAAAAAg"] ampsstudio.com [Tue Oct 04 23:44:10 2022] [error] [client 20.68.197.70:0] [client 20.68.197.70] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "ampsstudio.com"] [uri "/.env.local"] [unique_id "Yzy3OgiYQklI_2bLdfEWRgAAAAM"] ampsstudio.com [Tue Oct 04 23:44:10 2022] [error] [client 20.68.197.70:0] [client 20.68.197.70] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "ampsstudio.com"] [uri "/.env.save"] [unique_id "Yzy3OrHL9d-amnponyDx5QAAAAY"] ampsstudio.com [Tue Oct 04 23:44:10 2022] [error] [client 20.68.197.70:0] [client 20.68.197.70] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "ampsstudio.com"] [uri "/.env.test"] [unique_id "Yzy3On8_HXHi-samcKoX7QAAAAE"] ampsstudio.com [Tue Oct 04 23:44:10 2022] [error] [client 20.68.197.70:0] [client 20.68.197.70] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "ampsstudio.com"] [uri "/.env.test.local"] [unique_id "Yzy3OolyR_pC6TmYMRcZ0AAAAAI"] ampsstudio.com [Tue Oct 04 23:44:10 2022] [error] [client 20.68.197.70:0] [client 20.68.197.70] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "ampsstudio.com"] [uri "/.env~"] [unique_id "Yzy3OssXNhf7LLzRER0TqQAAAA4"] ampsstudio.com [Tue Oct 04 23:44:10 2022] [error] [client 20.68.197.70:0] [client 20.68.197.70] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "ampsstudio.com"] [uri "/web/.env"] [unique_id "Yzy3OuH3_Jc1DjqZJXTtlwAAAAo"] ampsstudio.com [Tue Oct 04 23:44:10 2022] [error] [client 20.68.197.70:0] [client 20.68.197.70] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "ampsstudio.com"] [uri "/core/.env"] [unique_id "Yzy3Oh2uFMBj64frD5-iMAAAAAA"] cpanel.ampsstudio.com [Wed Oct 05 00:22:56 2022] [error] [client 20.68.197.70:0] [client 20.68.197.70] ModSecurity: Access denied with code 403 (phase 2). String match "/.git/config" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430058"] [msg "Malware.Expert - request_uri: .git config"] [hostname "cpanel.ampsstudio.com"] [uri "/.git/config"] [unique_id "YzzAUOH3_Jc1DjqZJXTtqgAAAAo"] cpanel.ampsstudio.com [Wed Oct 05 00:22:56 2022] [error] [client 20.68.197.70:0] [client 20.68.197.70] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "cpanel.ampsstudio.com"] [uri "/.env"] [unique_id "YzzAUNpbnTxnIH6JA3EkJQAAAAU"] cpanel.ampsstudio.com [Wed Oct 05 00:22:57 2022] [error] [client 20.68.197.70:0] [client 20.68.197.70] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "cpanel.ampsstudio.com"] [uri "/__tests__/test-become/.env"] [unique_id "YzzAUbHL9d-amnponyDx-wAAAAY"] cpanel.ampsstudio.com [Wed Oct 05 00:22:57 2022] [error] [client 20.68.197.70:0] [client 20.68.197.70] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "cpanel.ampsstudio.com"] [uri "/.docker/.env"] [unique_id "YzzAUYlyR_pC6TmYMRcZ5QAAAAI"] cpanel.ampsstudio.com [Wed Oct 05 00:22:57 2022] [error] [client 20.68.197.70:0] [client 20.68.197.70] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "cpanel.ampsstudio.com"] [uri "/.docker/laravel/app/.env"] [unique_id "YzzAUR2uFMBj64frD5-iQwAAAAA"] cpanel.ampsstudio.com [Wed Oct 05 00:22:57 2022] [error] [client 20.68.197.70:0] [client 20.68.197.70] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "cpanel.ampsstudio.com"] [uri "/.env.backup"] [unique_id "YzzAUWRpeIhVT92DDbo34wAAAAg"] cpanel.ampsstudio.com [Wed Oct 05 00:22:57 2022] [error] [client 20.68.197.70:0] [client 20.68.197.70] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "cpanel.ampsstudio.com"] [uri "/.env.dev"] [unique_id "YzzAUc7hdXCeqFlFE6qegwAAAAQ"] cpanel.ampsstudio.com [Wed Oct 05 00:22:58 2022] [error] [client 20.68.197.70:0] [client 20.68.197.70] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "cpanel.ampsstudio.com"] [uri "/.env.example"] [unique_id "YzzAUn8_HXHi-samcKoYAgAAAAE"] cpanel.ampsstudio.com [Wed Oct 05 00:22:58 2022] [error] [client 20.68.197.70:0] [client 20.68.197.70] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "cpanel.ampsstudio.com"] [uri "/.env.local"] [unique_id "YzzAUssXNhf7LLzRER0TuwAAAA4"] cpanel.ampsstudio.com [Wed Oct 05 00:22:58 2022] [error] [client 20.68.197.70:0] [client 20.68.197.70] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "cpanel.ampsstudio.com"] [uri "/.env.save"] [unique_id "YzzAUuH3_Jc1DjqZJXTtqwAAAAo"] cpanel.ampsstudio.com [Wed Oct 05 00:22:58 2022] [error] [client 20.68.197.70:0] [client 20.68.197.70] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "cpanel.ampsstudio.com"] [uri "/.env.test"] [unique_id "YzzAUtpbnTxnIH6JA3EkJgAAAAU"] cpanel.ampsstudio.com [Wed Oct 05 00:22:58 2022] [error] [client 20.68.197.70:0] [client 20.68.197.70] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "cpanel.ampsstudio.com"] [uri "/.env.test.local"] [unique_id "YzzAUgiYQklI_2bLdfEWWwAAAAM"] cpanel.ampsstudio.com [Wed Oct 05 00:22:58 2022] [error] [client 20.68.197.70:0] [client 20.68.197.70] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "cpanel.ampsstudio.com"] [uri "/.env~"] [unique_id "YzzAUrHL9d-amnponyDx_AAAAAY"] cpanel.ampsstudio.com [Wed Oct 05 00:22:58 2022] [error] [client 20.68.197.70:0] [client 20.68.197.70] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "cpanel.ampsstudio.com"] [uri "/web/.env"] [unique_id "YzzAUolyR_pC6TmYMRcZ5gAAAAI"] cpanel.ampsstudio.com [Wed Oct 05 00:22:58 2022] [error] [client 20.68.197.70:0] [client 20.68.197.70] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "cpanel.ampsstudio.com"] [uri "/core/.env"] [unique_id "YzzAUh2uFMBj64frD5-iRAAAAAA"] mail.ampsstudio.com [Wed Oct 05 02:10:24 2022] [error] [client 20.68.197.70:0] [client 20.68.197.70] ModSecurity: Access denied with code 403 (phase 2). String match "/.git/config" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430058"] [msg "Malware.Expert - request_uri: .git config"] [hostname "mail.ampsstudio.com"] [uri "/.git/config"] [unique_id "YzzZgM7hdXCeqFlFE6qemwAAAAQ"] mail.ampsstudio.com [Wed Oct 05 02:10:24 2022] [error] [client 20.68.197.70:0] [client 20.68.197.70] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "mail.ampsstudio.com"] [uri "/.env"] [unique_id "YzzZgLHL9d-amnponyDyEwAAAAY"] mail.ampsstudio.com [Wed Oct 05 02:10:25 2022] [error] [client 20.68.197.70:0] [client 20.68.197.70] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "mail.ampsstudio.com"] [uri "/__tests__/test-become/.env"] [unique_id "YzzZgR2uFMBj64frD5-iXAAAAAA"] mail.ampsstudio.com [Wed Oct 05 02:10:25 2022] [error] [client 20.68.197.70:0] [client 20.68.197.70] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "mail.ampsstudio.com"] [uri "/.docker/.env"] [unique_id "YzzZgeH3_Jc1DjqZJXTtwwAAAAo"] mail.ampsstudio.com [Wed Oct 05 02:10:25 2022] [error] [client 20.68.197.70:0] [client 20.68.197.70] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "mail.ampsstudio.com"] [uri "/.docker/laravel/app/.env"] [unique_id "YzzZgYlyR_pC6TmYMRcZ_gAAAAI"] mail.ampsstudio.com [Wed Oct 05 02:10:25 2022] [error] [client 20.68.197.70:0] [client 20.68.197.70] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "mail.ampsstudio.com"] [uri "/.env.backup"] [unique_id "YzzZgdpbnTxnIH6JA3EkPwAAAAU"] mail.ampsstudio.com [Wed Oct 05 02:10:25 2022] [error] [client 20.68.197.70:0] [client 20.68.197.70] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "mail.ampsstudio.com"] [uri "/.env.dev"] [unique_id "YzzZgcsXNhf7LLzRER0T0wAAAA4"] mail.ampsstudio.com [Wed Oct 05 02:10:25 2022] [error] [client 20.68.197.70:0] [client 20.68.197.70] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "mail.ampsstudio.com"] [uri "/.env.example"] [unique_id "YzzZgQiYQklI_2bLdfEWcwAAAAM"] mail.ampsstudio.com [Wed Oct 05 02:10:26 2022] [error] [client 20.68.197.70:0] [client 20.68.197.70] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "mail.ampsstudio.com"] [uri "/.env.local"] [unique_id "YzzZgn8_HXHi-samcKoYGgAAAAE"] mail.ampsstudio.com [Wed Oct 05 02:10:26 2022] [error] [client 20.68.197.70:0] [client 20.68.197.70] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "mail.ampsstudio.com"] [uri "/.env.save"] [unique_id "YzzZgs7hdXCeqFlFE6qenAAAAAQ"] mail.ampsstudio.com [Wed Oct 05 02:10:26 2022] [error] [client 20.68.197.70:0] [client 20.68.197.70] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "mail.ampsstudio.com"] [uri "/.env.test"] [unique_id "YzzZgrHL9d-amnponyDyFAAAAAY"] mail.ampsstudio.com [Wed Oct 05 02:10:26 2022] [error] [client 20.68.197.70:0] [client 20.68.197.70] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "mail.ampsstudio.com"] [uri "/.env.test.local"] [unique_id "YzzZgmRpeIhVT92DDbo3_AAAAAg"] mail.ampsstudio.com [Wed Oct 05 02:10:26 2022] [error] [client 20.68.197.70:0] [client 20.68.197.70] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "mail.ampsstudio.com"] [uri "/.env~"] [unique_id "YzzZgh2uFMBj64frD5-iXQAAAAA"] mail.ampsstudio.com [Wed Oct 05 02:10:26 2022] [error] [client 20.68.197.70:0] [client 20.68.197.70] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "mail.ampsstudio.com"] [uri "/web/.env"] [unique_id "YzzZguH3_Jc1DjqZJXTtxAAAAAo"] mail.ampsstudio.com [Wed Oct 05 02:10:26 2022] [error] [client 20.68.197.70:0] [client 20.68.197.70] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "mail.ampsstudio.com"] [uri "/core/.env"] [unique_id "YzzZgolyR_pC6TmYMRcZ_wAAAAI"] webdisk.ampsstudio.com [Wed Oct 05 04:04:49 2022] [error] [client 20.68.197.70:0] [client 20.68.197.70] ModSecurity: Access denied with code 403 (phase 2). String match "/.git/config" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430058"] [msg "Malware.Expert - request_uri: .git config"] [hostname "webdisk.ampsstudio.com"] [uri "/.git/config"] [unique_id "Yzz0UWZqqCoN2iiqwkcrVgAAAAQ"] webdisk.ampsstudio.com [Wed Oct 05 04:04:49 2022] [error] [client 20.68.197.70:0] [client 20.68.197.70] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "webdisk.ampsstudio.com"] [uri "/.env"] [unique_id "Yzz0UcwFZNvgf7drJlAM5gAAAAU"] webdisk.ampsstudio.com [Wed Oct 05 04:04:50 2022] [error] [client 20.68.197.70:0] [client 20.68.197.70] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "webdisk.ampsstudio.com"] [uri "/__tests__/test-become/.env"] [unique_id "Yzz0UuTG10EKmV0bqhBu-wAAAAM"] webdisk.ampsstudio.com [Wed Oct 05 04:04:50 2022] [error] [client 20.68.197.70:0] [client 20.68.197.70] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "webdisk.ampsstudio.com"] [uri "/.docker/.env"] [unique_id "Yzz0Uqj8c82_D1YVBfIVpgAAAA4"] webdisk.ampsstudio.com [Wed Oct 05 04:04:50 2022] [error] [client 20.68.197.70:0] [client 20.68.197.70] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "webdisk.ampsstudio.com"] [uri "/.docker/laravel/app/.env"] [unique_id "Yzz0UnPDKgqBXPeqEfAGfQAAAAI"] webdisk.ampsstudio.com [Wed Oct 05 04:04:50 2022] [error] [client 20.68.197.70:0] [client 20.68.197.70] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "webdisk.ampsstudio.com"] [uri "/.env.backup"] [unique_id "Yzz0UmZqqCoN2iiqwkcrVwAAAAQ"] webdisk.ampsstudio.com [Wed Oct 05 04:04:50 2022] [error] [client 20.68.197.70:0] [client 20.68.197.70] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "webdisk.ampsstudio.com"] [uri "/.env.dev"] [unique_id "Yzz0UswFZNvgf7drJlAM5wAAAAU"] webdisk.ampsstudio.com [Wed Oct 05 04:04:51 2022] [error] [client 20.68.197.70:0] [client 20.68.197.70] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "webdisk.ampsstudio.com"] [uri "/.env.example"] [unique_id "Yzz0UwqSD4FheJ3QOfTp6gAAAAE"] webdisk.ampsstudio.com [Wed Oct 05 04:04:51 2022] [error] [client 20.68.197.70:0] [client 20.68.197.70] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "webdisk.ampsstudio.com"] [uri "/.env.local"] [unique_id "Yzz0U-TG10EKmV0bqhBu_AAAAAM"] webdisk.ampsstudio.com [Wed Oct 05 04:04:51 2022] [error] [client 20.68.197.70:0] [client 20.68.197.70] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "webdisk.ampsstudio.com"] [uri "/.env.save"] [unique_id "Yzz0U6j8c82_D1YVBfIVpwAAAA4"] webdisk.ampsstudio.com [Wed Oct 05 04:04:51 2022] [error] [client 20.68.197.70:0] [client 20.68.197.70] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "webdisk.ampsstudio.com"] [uri "/.env.test"] [unique_id "Yzz0U3PDKgqBXPeqEfAGfgAAAAI"] webdisk.ampsstudio.com [Wed Oct 05 04:04:51 2022] [error] [client 20.68.197.70:0] [client 20.68.197.70] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "webdisk.ampsstudio.com"] [uri "/.env.test.local"] [unique_id "Yzz0U2ZqqCoN2iiqwkcrWAAAAAQ"] webdisk.ampsstudio.com [Wed Oct 05 04:04:51 2022] [error] [client 20.68.197.70:0] [client 20.68.197.70] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "webdisk.ampsstudio.com"] [uri "/.env~"] [unique_id "Yzz0U8wFZNvgf7drJlAM6AAAAAU"] webdisk.ampsstudio.com [Wed Oct 05 04:04:51 2022] [error] [client 20.68.197.70:0] [client 20.68.197.70] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "webdisk.ampsstudio.com"] [uri "/web/.env"] [unique_id "Yzz0UwqSD4FheJ3QOfTp6wAAAAE"] webdisk.ampsstudio.com [Wed Oct 05 04:04:51 2022] [error] [client 20.68.197.70:0] [client 20.68.197.70] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "webdisk.ampsstudio.com"] [uri "/core/.env"] [unique_id "Yzz0U-TG10EKmV0bqhBu_QAAAAM"] webmail.ampsstudio.com [Wed Oct 05 04:24:58 2022] [error] [client 20.68.197.70:0] [client 20.68.197.70] ModSecurity: Access denied with code 403 (phase 2). String match "/.git/config" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430058"] [msg "Malware.Expert - request_uri: .git config"] [hostname "webmail.ampsstudio.com"] [uri "/.git/config"] [unique_id "Yzz5Cqj8c82_D1YVBfIVrgAAAA4"] webmail.ampsstudio.com [Wed Oct 05 04:24:58 2022] [error] [client 20.68.197.70:0] [client 20.68.197.70] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "webmail.ampsstudio.com"] [uri "/.env"] [unique_id "Yzz5CswFZNvgf7drJlAM7wAAAAU"] webmail.ampsstudio.com [Wed Oct 05 04:24:59 2022] [error] [client 20.68.197.70:0] [client 20.68.197.70] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "webmail.ampsstudio.com"] [uri "/__tests__/test-become/.env"] [unique_id "Yzz5C2ZqqCoN2iiqwkcrXwAAAAQ"] webmail.ampsstudio.com [Wed Oct 05 04:25:00 2022] [error] [client 20.68.197.70:0] [client 20.68.197.70] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "webmail.ampsstudio.com"] [uri "/.docker/.env"] [unique_id "Yzz5DOTG10EKmV0bqhBvBAAAAAM"] webmail.ampsstudio.com [Wed Oct 05 04:25:00 2022] [error] [client 20.68.197.70:0] [client 20.68.197.70] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "webmail.ampsstudio.com"] [uri "/.docker/laravel/app/.env"] [unique_id "Yzz5DHwQeksggHnXlZlksAAAAAA"] webmail.ampsstudio.com [Wed Oct 05 04:25:00 2022] [error] [client 20.68.197.70:0] [client 20.68.197.70] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "webmail.ampsstudio.com"] [uri "/.env.backup"] [unique_id "Yzz5DKj8c82_D1YVBfIVrwAAAA4"] webmail.ampsstudio.com [Wed Oct 05 04:25:00 2022] [error] [client 20.68.197.70:0] [client 20.68.197.70] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "webmail.ampsstudio.com"] [uri "/.env.dev"] [unique_id "Yzz5DMwFZNvgf7drJlAM8AAAAAU"] webmail.ampsstudio.com [Wed Oct 05 04:25:00 2022] [error] [client 20.68.197.70:0] [client 20.68.197.70] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "webmail.ampsstudio.com"] [uri "/.env.example"] [unique_id "Yzz5DAqSD4FheJ3QOfTp8wAAAAE"] webmail.ampsstudio.com [Wed Oct 05 04:25:00 2022] [error] [client 20.68.197.70:0] [client 20.68.197.70] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "webmail.ampsstudio.com"] [uri "/.env.local"] [unique_id "Yzz5DGZqqCoN2iiqwkcrYAAAAAQ"] webmail.ampsstudio.com [Wed Oct 05 04:25:00 2022] [error] [client 20.68.197.70:0] [client 20.68.197.70] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "webmail.ampsstudio.com"] [uri "/.env.save"] [unique_id "Yzz5DOTG10EKmV0bqhBvBQAAAAM"] webmail.ampsstudio.com [Wed Oct 05 04:25:00 2022] [error] [client 20.68.197.70:0] [client 20.68.197.70] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "webmail.ampsstudio.com"] [uri "/.env.test"] [unique_id "Yzz5DHwQeksggHnXlZlksQAAAAA"] webmail.ampsstudio.com [Wed Oct 05 04:25:00 2022] [error] [client 20.68.197.70:0] [client 20.68.197.70] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "webmail.ampsstudio.com"] [uri "/.env.test.local"] [unique_id "Yzz5DKj8c82_D1YVBfIVsAAAAA4"] webmail.ampsstudio.com [Wed Oct 05 04:25:00 2022] [error] [client 20.68.197.70:0] [client 20.68.197.70] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "webmail.ampsstudio.com"] [uri "/.env~"] [unique_id "Yzz5DMwFZNvgf7drJlAM8QAAAAU"] webmail.ampsstudio.com [Wed Oct 05 04:25:00 2022] [error] [client 20.68.197.70:0] [client 20.68.197.70] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "webmail.ampsstudio.com"] [uri "/web/.env"] [unique_id "Yzz5DAqSD4FheJ3QOfTp9AAAAAE"] webmail.ampsstudio.com [Wed Oct 05 04:25:01 2022] [error] [client 20.68.197.70:0] [client 20.68.197.70] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "webmail.ampsstudio.com"] [uri "/core/.env"] [unique_id "Yzz5DWZqqCoN2iiqwkcrYQAAAAQ"] www.ampsstudio.com [Wed Oct 05 06:29:01 2022] [error] [client 95.27.42.37:0] AH01071: Got error 'PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179' www.ampsstudio.com [Wed Oct 05 06:29:01 2022] [error] [client 95.27.42.37:0] AH01071: Got error 'PHP message: PHP Warning: Cannot modify header information - headers already sent by (output started at /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-includes/functions.php:5275) in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/includes/sonaar-music/css/theme/custom-style.php on line 2' cpanel.ampsstudio.com [Wed Oct 05 07:25:42 2022] [error] [client 15.207.105.136:0] [client 15.207.105.136] ModSecurity: Access denied with code 403 (phase 2). String match "/.git/config" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430058"] [msg "Malware.Expert - request_uri: .git config"] [hostname "cpanel.ampsstudio.com"] [uri "/.git/config"] [unique_id "Yz0jZswFZNvgf7drJlANKAAAAAU"] www.ampsstudio.com [Wed Oct 05 08:24:54 2022] [error] [client 109.70.100.88:0] AH01071: Got error 'PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179' www.ampsstudio.com [Wed Oct 05 08:24:54 2022] [error] [client 109.70.100.88:0] AH01071: Got error 'PHP message: PHP Warning: Cannot modify header information - headers already sent by (output started at /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-includes/functions.php:5275) in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/includes/sonaar-music/css/theme/custom-style.php on line 2' ampsstudio.com [Wed Oct 05 09:23:59 2022] [error] [client 44.234.24.7:0] [client 44.234.24.7] ModSecurity: Access denied with code 403 (phase 2). String match "/.git/config" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430058"] [msg "Malware.Expert - request_uri: .git config"] [hostname "ampsstudio.com"] [uri "/.git/config"] [unique_id "Yz0_H7bbnQBOntGeP1ZHdAAAAAg"] mail.ampsstudio.com [Wed Oct 05 09:33:31 2022] [error] [client 194.26.229.150:0] [client 194.26.229.150] ModSecurity: Access denied with code 403 (phase 2). String match "/.git/config" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430058"] [msg "Malware.Expert - request_uri: .git config"] [hostname "mail.ampsstudio.com"] [uri "/.git/config"] [unique_id "Yz1BWwqSD4FheJ3QOfTqcgAAAAE"] webmail.ampsstudio.com [Wed Oct 05 09:34:49 2022] [error] [client 194.26.229.150:0] [client 194.26.229.150] ModSecurity: Access denied with code 403 (phase 2). String match "/.git/config" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430058"] [msg "Malware.Expert - request_uri: .git config"] [hostname "webmail.ampsstudio.com"] [uri "/.git/config"] [unique_id "Yz1BqWZqqCoN2iiqwkcr5wAAAAQ"] cpanel.ampsstudio.com [Wed Oct 05 12:27:40 2022] [error] [client 194.26.229.150:0] [client 194.26.229.150] ModSecurity: Access denied with code 403 (phase 2). String match "/.git/config" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430058"] [msg "Malware.Expert - request_uri: .git config"] [hostname "cpanel.ampsstudio.com"] [uri "/.git/config"] [unique_id "Yz1qLAqSD4FheJ3QOfTq2QAAAAE"] ampsstudio.com [Wed Oct 05 12:50:17 2022] [error] [client 194.26.229.150:0] [client 194.26.229.150] ModSecurity: Access denied with code 403 (phase 2). String match "/.git/config" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430058"] [msg "Malware.Expert - request_uri: .git config"] [hostname "ampsstudio.com"] [uri "/.git/config"] [unique_id "Yz1veeTG10EKmV0bqhBv-QAAAAM"] ampsstudio.com [Wed Oct 05 16:34:55 2022] [error] [client 5.188.62.134:0] [client 5.188.62.134] ModSecurity: Access denied with code 403 (phase 1). Pattern match "\\\\.\\\\./\\\\.\\\\." at REQUEST_URI. [file "remote server"] [line "-1"] [id "430064"] [msg "Malware.Expert - request_uri: directory travel"] [hostname "ampsstudio.com"] [uri "/wp-content/plugins/hb-audio-gallery-lite/gallery/audio-download.php"] [unique_id "Yz2kH3PDKgqBXPeqEfAIJgAAAAI"] ampsstudio.com [Wed Oct 05 16:40:30 2022] [error] [client 154.239.169.0:0] [client 154.239.169.0] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "ampsstudio.com"] [uri "/.env"] [unique_id "Yz2lbp99QQJtPMhY6oL3wgAAAAc"] ampsstudio.com [Wed Oct 05 19:34:34 2022] [error] [client 5.62.20.37:0] [client 5.62.20.37] ModSecurity: Access denied with code 403 (phase 2). String match "anonymousfox" at REQUEST_HEADERS:referer. [file "remote server"] [line "-1"] [id "425001"] [msg "Malware.Expert - Referer: anonymousfox.co"] [hostname "ampsstudio.com"] [uri "/style.php"] [unique_id "Yz3OOnwQeksggHnXlZlmlQAAAAA"] ampsstudio.com [Wed Oct 05 19:34:35 2022] [error] [client 5.62.20.37:0] [client 5.62.20.37] ModSecurity: Access denied with code 403 (phase 2). String match "anonymousfox" at REQUEST_HEADERS:referer. [file "remote server"] [line "-1"] [id "425001"] [msg "Malware.Expert - Referer: anonymousfox.co"] [hostname "ampsstudio.com"] [uri "/moduless.php"] [unique_id "Yz3OOwqSD4FheJ3QOfTr3wAAAAE"] ampsstudio.com [Wed Oct 05 19:34:36 2022] [error] [client 5.62.20.37:0] [client 5.62.20.37] ModSecurity: Access denied with code 403 (phase 2). String match "anonymousfox" at REQUEST_HEADERS:referer. [file "remote server"] [line "-1"] [id "425001"] [msg "Malware.Expert - Referer: anonymousfox.co"] [hostname "ampsstudio.com"] [uri "/wp-content/plugins/t_file_wp/t_file_wp.php"] [unique_id "Yz3OPLs3K1aErVDkJJzcWAAAAAk"] ampsstudio.com [Wed Oct 05 19:34:40 2022] [error] [client 5.62.20.37:0] [client 5.62.20.37] ModSecurity: Access denied with code 403 (phase 2). String match "anonymousfox" at REQUEST_HEADERS:referer. [file "remote server"] [line "-1"] [id "425001"] [msg "Malware.Expert - Referer: anonymousfox.co"] [hostname "ampsstudio.com"] [uri "/admin.php"] [unique_id "Yz3OQKj8c82_D1YVBfIXoQAAAA4"] ampsstudio.com [Wed Oct 05 19:34:42 2022] [error] [client 5.62.20.37:0] [client 5.62.20.37] ModSecurity: Access denied with code 403 (phase 2). String match "anonymousfox" at REQUEST_HEADERS:referer. [file "remote server"] [line "-1"] [id "425001"] [msg "Malware.Expert - Referer: anonymousfox.co"] [hostname "ampsstudio.com"] [uri "/index.php"] [unique_id "Yz3OQnPDKgqBXPeqEfAIbwAAAAI"] ampsstudio.com [Wed Oct 05 19:34:44 2022] [error] [client 5.62.20.37:0] [client 5.62.20.37] ModSecurity: Access denied with code 403 (phase 2). String match "anonymousfox" at REQUEST_HEADERS:referer. [file "remote server"] [line "-1"] [id "425001"] [msg "Malware.Expert - Referer: anonymousfox.co"] [hostname "ampsstudio.com"] [uri "/boom.php"] [unique_id "Yz3ORMwFZNvgf7drJlAO3wAAAAU"] ampsstudio.com [Wed Oct 05 19:34:44 2022] [error] [client 5.62.20.37:0] [client 5.62.20.37] ModSecurity: Access denied with code 403 (phase 2). String match "anonymousfox" at REQUEST_HEADERS:referer. [file "remote server"] [line "-1"] [id "425001"] [msg "Malware.Expert - Referer: anonymousfox.co"] [hostname "ampsstudio.com"] [uri "/wp-content/plugins/backup_index.php"] [unique_id "Yz3ORJ99QQJtPMhY6oL4CwAAAAc"] ampsstudio.com [Wed Oct 05 19:34:47 2022] [error] [client 5.62.20.37:0] [client 5.62.20.37] ModSecurity: Access denied with code 403 (phase 2). String match "anonymousfox" at REQUEST_HEADERS:referer. [file "remote server"] [line "-1"] [id "425001"] [msg "Malware.Expert - Referer: anonymousfox.co"] [hostname "ampsstudio.com"] [uri "/wp-content/db_cache.php"] [unique_id "Yz3OR7bbnQBOntGeP1ZI1wAAAAg"] ampsstudio.com [Wed Oct 05 19:34:49 2022] [error] [client 5.62.20.37:0] [client 5.62.20.37] ModSecurity: Access denied with code 403 (phase 2). String match "anonymousfox" at REQUEST_HEADERS:referer. [file "remote server"] [line "-1"] [id "425001"] [msg "Malware.Expert - Referer: anonymousfox.co"] [hostname "ampsstudio.com"] [uri "/wp-content/plugins/ioptimization/IOptimize.php"] [unique_id "Yz3OST_r34PEVdAmHSbG_QAAAAo"] ampsstudio.com [Wed Oct 05 19:34:50 2022] [error] [client 5.62.20.37:0] [client 5.62.20.37] ModSecurity: Access denied with code 403 (phase 2). String match "anonymousfox" at REQUEST_HEADERS:referer. [file "remote server"] [line "-1"] [id "425001"] [msg "Malware.Expert - Referer: anonymousfox.co"] [hostname "ampsstudio.com"] [uri "/xmlrp.php"] [unique_id "Yz3OSuTG10EKmV0bqhBw7gAAAAM"] ampsstudio.com [Wed Oct 05 19:34:52 2022] [error] [client 5.62.20.37:0] [client 5.62.20.37] ModSecurity: Access denied with code 403 (phase 2). String match "anonymousfox" at REQUEST_HEADERS:referer. [file "remote server"] [line "-1"] [id "425001"] [msg "Malware.Expert - Referer: anonymousfox.co"] [hostname "ampsstudio.com"] [uri "/wpindex.php"] [unique_id "Yz3OTAqSD4FheJ3QOfTr4AAAAAE"] ampsstudio.com [Wed Oct 05 19:34:55 2022] [error] [client 5.62.20.37:0] [client 5.62.20.37] ModSecurity: Access denied with code 403 (phase 2). String match "anonymousfox" at REQUEST_HEADERS:referer. [file "remote server"] [line "-1"] [id "425001"] [msg "Malware.Expert - Referer: anonymousfox.co"] [hostname "ampsstudio.com"] [uri "/larva.php"] [unique_id "Yz3OT7s3K1aErVDkJJzcWQAAAAk"] ampsstudio.com [Wed Oct 05 19:34:57 2022] [error] [client 5.62.20.37:0] [client 5.62.20.37] ModSecurity: Access denied with code 403 (phase 2). String match "anonymousfox" at REQUEST_HEADERS:referer. [file "remote server"] [line "-1"] [id "425001"] [msg "Malware.Expert - Referer: anonymousfox.co"] [hostname "ampsstudio.com"] [uri "/th3_err0r.php"] [unique_id "Yz3OUXwQeksggHnXlZlmlgAAAAA"] ampsstudio.com [Wed Oct 05 19:35:01 2022] [error] [client 5.62.20.37:0] [client 5.62.20.37] ModSecurity: Access denied with code 403 (phase 2). String match "anonymousfox" at REQUEST_HEADERS:referer. [file "remote server"] [line "-1"] [id "425001"] [msg "Malware.Expert - Referer: anonymousfox.co"] [hostname "ampsstudio.com"] [uri "/alfindex.php"] [unique_id "Yz3OVaj8c82_D1YVBfIXogAAAA4"] ampsstudio.com [Wed Oct 05 19:35:03 2022] [error] [client 5.62.20.37:0] [client 5.62.20.37] ModSecurity: Access denied with code 403 (phase 2). String match "anonymousfox" at REQUEST_HEADERS:referer. [file "remote server"] [line "-1"] [id "425001"] [msg "Malware.Expert - Referer: anonymousfox.co"] [hostname "ampsstudio.com"] [uri "/alfa.php"] [unique_id "Yz3OV3PDKgqBXPeqEfAIcAAAAAI"] ampsstudio.com [Wed Oct 05 19:35:05 2022] [error] [client 5.62.20.37:0] [client 5.62.20.37] ModSecurity: Access denied with code 403 (phase 2). String match "anonymousfox" at REQUEST_HEADERS:referer. [file "remote server"] [line "-1"] [id "425001"] [msg "Malware.Expert - Referer: anonymousfox.co"] [hostname "ampsstudio.com"] [uri "/wp-booking.php"] [unique_id "Yz3OWZ99QQJtPMhY6oL4DAAAAAc"] ampsstudio.com [Wed Oct 05 19:35:06 2022] [error] [client 5.62.20.37:0] [client 5.62.20.37] ModSecurity: Access denied with code 403 (phase 2). String match "anonymousfox" at REQUEST_HEADERS:referer. [file "remote server"] [line "-1"] [id "425001"] [msg "Malware.Expert - Referer: anonymousfox.co"] [hostname "ampsstudio.com"] [uri "/cindex.php"] [unique_id "Yz3OWrbbnQBOntGeP1ZI2AAAAAg"] ampsstudio.com [Wed Oct 05 19:35:08 2022] [error] [client 5.62.20.37:0] [client 5.62.20.37] ModSecurity: Access denied with code 403 (phase 2). String match "anonymousfox" at REQUEST_HEADERS:referer. [file "remote server"] [line "-1"] [id "425001"] [msg "Malware.Expert - Referer: anonymousfox.co"] [hostname "ampsstudio.com"] [uri "/wp-content/wp-1ogin_bak.php"] [unique_id "Yz3OXMwFZNvgf7drJlAO4AAAAAU"] ampsstudio.com [Wed Oct 05 19:35:10 2022] [error] [client 5.62.20.37:0] [client 5.62.20.37] ModSecurity: Access denied with code 403 (phase 2). String match "anonymousfox" at REQUEST_HEADERS:referer. [file "remote server"] [line "-1"] [id "425001"] [msg "Malware.Expert - Referer: anonymousfox.co"] [hostname "ampsstudio.com"] [uri "/wp-1ogin_bak.php"] [unique_id "Yz3OXj_r34PEVdAmHSbG_gAAAAo"] ampsstudio.com [Wed Oct 05 19:35:11 2022] [error] [client 5.62.20.37:0] [client 5.62.20.37] ModSecurity: Access denied with code 403 (phase 2). String match "anonymousfox" at REQUEST_HEADERS:referer. [file "remote server"] [line "-1"] [id "425001"] [msg "Malware.Expert - Referer: anonymousfox.co"] [hostname "ampsstudio.com"] [uri "/wp-includes/fonts/css.php"] [unique_id "Yz3OX-TG10EKmV0bqhBw7wAAAAM"] ampsstudio.com [Wed Oct 05 19:35:13 2022] [error] [client 5.62.20.37:0] [client 5.62.20.37] ModSecurity: Access denied with code 403 (phase 2). String match "anonymousfox" at REQUEST_HEADERS:referer. [file "remote server"] [line "-1"] [id "425001"] [msg "Malware.Expert - Referer: anonymousfox.co"] [hostname "ampsstudio.com"] [uri "/wp-includes/css/css.php"] [unique_id "Yz3OYQqSD4FheJ3QOfTr4QAAAAE"] ampsstudio.com [Wed Oct 05 19:35:15 2022] [error] [client 5.62.20.37:0] [client 5.62.20.37] ModSecurity: Access denied with code 403 (phase 2). String match "anonymousfox" at REQUEST_HEADERS:referer. [file "remote server"] [line "-1"] [id "425001"] [msg "Malware.Expert - Referer: anonymousfox.co"] [hostname "ampsstudio.com"] [uri "/old-index.php"] [unique_id "Yz3OY7s3K1aErVDkJJzcWgAAAAk"] ampsstudio.com [Wed Oct 05 19:35:16 2022] [error] [client 5.62.20.37:0] [client 5.62.20.37] ModSecurity: Access denied with code 403 (phase 2). String match "anonymousfox" at REQUEST_HEADERS:referer. [file "remote server"] [line "-1"] [id "425001"] [msg "Malware.Expert - Referer: anonymousfox.co"] [hostname "ampsstudio.com"] [uri "/config.bak.php"] [unique_id "Yz3OZHwQeksggHnXlZlmlwAAAAA"] ampsstudio.com [Wed Oct 05 19:35:19 2022] [error] [client 5.62.20.37:0] [client 5.62.20.37] ModSecurity: Access denied with code 403 (phase 2). String match "anonymousfox" at REQUEST_HEADERS:referer. [file "remote server"] [line "-1"] [id "425001"] [msg "Malware.Expert - Referer: anonymousfox.co"] [hostname "ampsstudio.com"] [uri "/wp-admin/config.bak.php"] [unique_id "Yz3OZ6j8c82_D1YVBfIXowAAAA4"] ampsstudio.com [Wed Oct 05 19:35:22 2022] [error] [client 5.62.20.37:0] [client 5.62.20.37] ModSecurity: Access denied with code 403 (phase 2). String match "anonymousfox" at REQUEST_HEADERS:referer. [file "remote server"] [line "-1"] [id "425001"] [msg "Malware.Expert - Referer: anonymousfox.co"] [hostname "ampsstudio.com"] [uri "/wp-content/config.bak.php"] [unique_id "Yz3OanPDKgqBXPeqEfAIcQAAAAI"] ampsstudio.com [Wed Oct 05 19:35:25 2022] [error] [client 5.62.20.37:0] [client 5.62.20.37] ModSecurity: Access denied with code 403 (phase 2). String match "anonymousfox" at REQUEST_HEADERS:referer. [file "remote server"] [line "-1"] [id "425001"] [msg "Malware.Expert - Referer: anonymousfox.co"] [hostname "ampsstudio.com"] [uri "/wp-includes/config.bak.php"] [unique_id "Yz3ObZ99QQJtPMhY6oL4DQAAAAc"] ampsstudio.com [Wed Oct 05 19:35:26 2022] [error] [client 5.62.20.37:0] [client 5.62.20.37] ModSecurity: Access denied with code 403 (phase 2). String match "anonymousfox" at REQUEST_HEADERS:referer. [file "remote server"] [line "-1"] [id "425001"] [msg "Malware.Expert - Referer: anonymousfox.co"] [hostname "ampsstudio.com"] [uri "/wp-content/themes/config.bak.php"] [unique_id "Yz3ObrbbnQBOntGeP1ZI2QAAAAg"] ampsstudio.com [Wed Oct 05 19:35:29 2022] [error] [client 5.62.20.37:0] [client 5.62.20.37] ModSecurity: Access denied with code 403 (phase 2). String match "anonymousfox" at REQUEST_HEADERS:referer. [file "remote server"] [line "-1"] [id "425001"] [msg "Malware.Expert - Referer: anonymousfox.co"] [hostname "ampsstudio.com"] [uri "/wp-content/plugins/config.bak.php"] [unique_id "Yz3OccwFZNvgf7drJlAO4QAAAAU"] ampsstudio.com [Wed Oct 05 19:35:30 2022] [error] [client 5.62.20.37:0] [client 5.62.20.37] ModSecurity: Access denied with code 403 (phase 2). String match "anonymousfox" at REQUEST_HEADERS:referer. [file "remote server"] [line "-1"] [id "425001"] [msg "Malware.Expert - Referer: anonymousfox.co"] [hostname "ampsstudio.com"] [uri "/wp-includes/css/wp-config.php"] [unique_id "Yz3Ocj_r34PEVdAmHSbG_wAAAAo"] ampsstudio.com [Wed Oct 05 19:35:34 2022] [error] [client 5.62.20.37:0] [client 5.62.20.37] ModSecurity: Access denied with code 403 (phase 2). String match "anonymousfox" at REQUEST_HEADERS:referer. [file "remote server"] [line "-1"] [id "425001"] [msg "Malware.Expert - Referer: anonymousfox.co"] [hostname "ampsstudio.com"] [uri "/wp-content/plugins/ubh/up.php"] [unique_id "Yz3Odrs3K1aErVDkJJzcWwAAAAk"] ampsstudio.com [Wed Oct 05 19:35:36 2022] [error] [client 5.62.20.37:0] [client 5.62.20.37] ModSecurity: Access denied with code 403 (phase 2). String match "anonymousfox" at REQUEST_HEADERS:referer. [file "remote server"] [line "-1"] [id "425001"] [msg "Malware.Expert - Referer: anonymousfox.co"] [hostname "ampsstudio.com"] [uri "/wp-includes/wpconfig.bak.php"] [unique_id "Yz3OeKj8c82_D1YVBfIXpAAAAA4"] ampsstudio.com [Wed Oct 05 19:35:39 2022] [error] [client 5.62.20.37:0] [client 5.62.20.37] ModSecurity: Access denied with code 403 (phase 2). String match "anonymousfox" at REQUEST_HEADERS:referer. [file "remote server"] [line "-1"] [id "425001"] [msg "Malware.Expert - Referer: anonymousfox.co"] [hostname "ampsstudio.com"] [uri "/wp-content/plugins/wpconfig.bak.php"] [unique_id "Yz3Oe3PDKgqBXPeqEfAIcgAAAAI"] ampsstudio.com [Wed Oct 05 19:35:40 2022] [error] [client 5.62.20.37:0] [client 5.62.20.37] ModSecurity: Access denied with code 403 (phase 2). String match "anonymousfox" at REQUEST_HEADERS:referer. [file "remote server"] [line "-1"] [id "425001"] [msg "Malware.Expert - Referer: anonymousfox.co"] [hostname "ampsstudio.com"] [uri "/haders.php"] [unique_id "Yz3OfJ99QQJtPMhY6oL4DgAAAAc"] ampsstudio.com [Wed Oct 05 19:35:43 2022] [error] [client 5.62.20.37:0] [client 5.62.20.37] ModSecurity: Access denied with code 403 (phase 2). String match "anonymousfox" at REQUEST_HEADERS:referer. [file "remote server"] [line "-1"] [id "425001"] [msg "Malware.Expert - Referer: anonymousfox.co"] [hostname "ampsstudio.com"] [uri "/wp-content/wp-old-index.php"] [unique_id "Yz3Of7bbnQBOntGeP1ZI2gAAAAg"] ampsstudio.com [Wed Oct 05 19:35:45 2022] [error] [client 5.62.20.37:0] [client 5.62.20.37] ModSecurity: Access denied with code 403 (phase 2). String match "anonymousfox" at REQUEST_HEADERS:referer. [file "remote server"] [line "-1"] [id "425001"] [msg "Malware.Expert - Referer: anonymousfox.co"] [hostname "ampsstudio.com"] [uri "/legion.php"] [unique_id "Yz3OgT_r34PEVdAmHSbHAAAAAAo"] ampsstudio.com [Wed Oct 05 19:35:47 2022] [error] [client 5.62.20.37:0] [client 5.62.20.37] ModSecurity: Access denied with code 403 (phase 2). String match "anonymousfox" at REQUEST_HEADERS:referer. [file "remote server"] [line "-1"] [id "425001"] [msg "Malware.Expert - Referer: anonymousfox.co"] [hostname "ampsstudio.com"] [uri "/wp-content/mu-plugins/db-safe-mode.php"] [unique_id "Yz3OgwqSD4FheJ3QOfTr4wAAAAE"] ampsstudio.com [Wed Oct 05 19:35:49 2022] [error] [client 5.62.20.37:0] [client 5.62.20.37] ModSecurity: Access denied with code 403 (phase 2). String match "anonymousfox" at REQUEST_HEADERS:referer. [file "remote server"] [line "-1"] [id "425001"] [msg "Malware.Expert - Referer: anonymousfox.co"] [hostname "ampsstudio.com"] [uri "/wp-includes/lfx.php"] [unique_id "Yz3OheTG10EKmV0bqhBw8QAAAAM"] ampsstudio.com [Wed Oct 05 19:35:50 2022] [error] [client 5.62.20.37:0] [client 5.62.20.37] ModSecurity: Access denied with code 403 (phase 2). String match "anonymousfox" at REQUEST_HEADERS:referer. [file "remote server"] [line "-1"] [id "425001"] [msg "Malware.Expert - Referer: anonymousfox.co"] [hostname "ampsstudio.com"] [uri "/wp-includes/small.php"] [unique_id "Yz3Ohrs3K1aErVDkJJzcXAAAAAk"] ampsstudio.com [Wed Oct 05 19:35:53 2022] [error] [client 5.62.20.37:0] [client 5.62.20.37] ModSecurity: Access denied with code 403 (phase 2). String match "anonymousfox" at REQUEST_HEADERS:referer. [file "remote server"] [line "-1"] [id "425001"] [msg "Malware.Expert - Referer: anonymousfox.co"] [hostname "ampsstudio.com"] [uri "/up.php"] [unique_id "Yz3OiHwQeksggHnXlZlmmQAAAAA"] ampsstudio.com [Wed Oct 05 19:35:54 2022] [error] [client 5.62.20.37:0] [client 5.62.20.37] ModSecurity: Access denied with code 403 (phase 2). String match "anonymousfox" at REQUEST_HEADERS:referer. [file "remote server"] [line "-1"] [id "425001"] [msg "Malware.Expert - Referer: anonymousfox.co"] [hostname "ampsstudio.com"] [uri "/upload.php"] [unique_id "Yz3Oiqj8c82_D1YVBfIXpQAAAA4"] ampsstudio.com [Wed Oct 05 19:35:56 2022] [error] [client 5.62.20.37:0] [client 5.62.20.37] ModSecurity: Access denied with code 403 (phase 2). String match "anonymousfox" at REQUEST_HEADERS:referer. [file "remote server"] [line "-1"] [id "425001"] [msg "Malware.Expert - Referer: anonymousfox.co"] [hostname "ampsstudio.com"] [uri "/config.php"] [unique_id "Yz3OjHPDKgqBXPeqEfAIcwAAAAI"] ampsstudio.com [Wed Oct 05 19:35:58 2022] [error] [client 5.62.20.37:0] [client 5.62.20.37] ModSecurity: Access denied with code 403 (phase 2). String match "anonymousfox" at REQUEST_HEADERS:referer. [file "remote server"] [line "-1"] [id "425001"] [msg "Malware.Expert - Referer: anonymousfox.co"] [hostname "ampsstudio.com"] [uri "/test.php"] [unique_id "Yz3Ojp99QQJtPMhY6oL4DwAAAAc"] ampsstudio.com [Wed Oct 05 19:36:00 2022] [error] [client 5.62.20.37:0] [client 5.62.20.37] ModSecurity: Access denied with code 403 (phase 2). String match "anonymousfox" at REQUEST_HEADERS:referer. [file "remote server"] [line "-1"] [id "425001"] [msg "Malware.Expert - Referer: anonymousfox.co"] [hostname "ampsstudio.com"] [uri "/wp-content/langar.php"] [unique_id "Yz3OkLbbnQBOntGeP1ZI2wAAAAg"] ampsstudio.com [Wed Oct 05 19:36:03 2022] [error] [client 5.62.20.37:0] [client 5.62.20.37] ModSecurity: Access denied with code 403 (phase 2). String match "anonymousfox" at REQUEST_HEADERS:referer. [file "remote server"] [line "-1"] [id "425001"] [msg "Malware.Expert - Referer: anonymousfox.co"] [hostname "ampsstudio.com"] [uri "/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php"] [unique_id "Yz3Ok8wFZNvgf7drJlAO4wAAAAU"] ampsstudio.com [Wed Oct 05 19:36:06 2022] [error] [client 5.62.20.37:0] [client 5.62.20.37] ModSecurity: Access denied with code 403 (phase 2). String match "anonymousfox" at REQUEST_HEADERS:referer. [file "remote server"] [line "-1"] [id "425001"] [msg "Malware.Expert - Referer: anonymousfox.co"] [hostname "ampsstudio.com"] [uri "/wp-content/plugins/fancy-product-designer/inc/custom-image-handler.php"] [unique_id "Yz3Olj_r34PEVdAmHSbHAQAAAAo"] ampsstudio.com [Wed Oct 05 19:36:08 2022] [error] [client 5.62.20.37:0] [client 5.62.20.37] ModSecurity: Access denied with code 403 (phase 2). String match "anonymousfox" at REQUEST_HEADERS:referer. [file "remote server"] [line "-1"] [id "425001"] [msg "Malware.Expert - Referer: anonymousfox.co"] [hostname "ampsstudio.com"] [uri "/wp-content/plugins/wpdiscuz/themes/default/style-rtl.css"] [unique_id "Yz3OmOTG10EKmV0bqhBw8gAAAAM"] www.ampsstudio.com [Wed Oct 05 19:51:44 2022] [error] [client 185.191.171.34:0] AH01071: Got error 'PHP message: PHP Warning: Attempt to read property "ID" on null in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/archive-event.php on line 15PHP message: PHP Warning: Undefined array key 0 in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/includes/classes/iron_sonaar.class.php on line 212PHP message: PHP Warning: Trying to access array offset on value of type null in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/includes/classes/iron_sonaar.class.php on line 212PHP message: PHP Warning: Undefined array key 0 in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/includes/classes/iron_sonaar.class.php on line 214PHP message: PHP Warning: Trying to access array offset on value of type null in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/includes/classes/iron_sonaar.class.php on line 214' www.ampsstudio.com [Thu Oct 06 00:14:36 2022] [error] [client 84.17.49.52:0] AH01071: Got error 'PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179' www.ampsstudio.com [Thu Oct 06 00:14:36 2022] [error] [client 84.17.49.52:0] AH01071: Got error 'PHP message: PHP Warning: Cannot modify header information - headers already sent by (output started at /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-includes/functions.php:5275) in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/includes/sonaar-music/css/theme/custom-style.php on line 2' webmail.ampsstudio.com [Thu Oct 06 01:22:13 2022] [error] [client 15.207.105.136:0] [client 15.207.105.136] ModSecurity: Access denied with code 403 (phase 2). String match "/.git/config" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430058"] [msg "Malware.Expert - request_uri: .git config"] [hostname "webmail.ampsstudio.com"] [uri "/.git/config"] [unique_id "Yz4fteTG10EKmV0bqhBxegAAAAM"] www.ampsstudio.com [Thu Oct 06 02:14:11 2022] [error] [client 15.207.105.136:0] [client 15.207.105.136] ModSecurity: Access denied with code 403 (phase 2). String match "/.git/config" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430058"] [msg "Malware.Expert - request_uri: .git config"] [hostname "www.ampsstudio.com"] [uri "/.git/config"] [unique_id "Yz4r43wQeksggHnXlZlnMQAAAAA"] ampsstudio.com [Thu Oct 06 06:52:10 2022] [error] [client 51.140.203.88:0] [client 51.140.203.88] ModSecurity: Access denied with code 403 (phase 2). Match of "contains index.php" against "REQUEST_URI" required. [file "remote server"] [line "-1"] [id "570076"] [msg "Malware.Expert - Malware"] [hostname "ampsstudio.com"] [uri "/wp-commentin.php"] [unique_id "Yz5tChnaxM4YVf3dIAxIAgAAAAI"] ampsstudio.com [Thu Oct 06 06:52:14 2022] [error] [client 51.140.203.88:0] [client 51.140.203.88] ModSecurity: Access denied with code 403 (phase 2). Match of "contains index.php" against "REQUEST_URI" required. [file "remote server"] [line "-1"] [id "570076"] [msg "Malware.Expert - Malware"] [hostname "ampsstudio.com"] [uri "/wp-commentin.php"] [unique_id "Yz5tDt5MzdGaNkgsVJV9SwAAAAc"] www.ampsstudio.com [Thu Oct 06 07:40:59 2022] [error] [client 20.0.136.137:0] [client 20.0.136.137] ModSecurity: Access denied with code 403 (phase 2). Match of "contains index.php" against "REQUEST_URI" required. [file "remote server"] [line "-1"] [id "570076"] [msg "Malware.Expert - Malware"] [hostname "www.ampsstudio.com"] [uri "/wp-plain.php"] [unique_id "Yz54ehnaxM4YVf3dIAxIIAAAAAI"] www.ampsstudio.com [Thu Oct 06 07:41:02 2022] [error] [client 20.0.136.137:0] [client 20.0.136.137] ModSecurity: Access denied with code 403 (phase 2). String match "php.suspected" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430059"] [msg "Malware.Expert - request_uri: .PHP suspected files"] [hostname "www.ampsstudio.com"] [uri "/wp-content/plugins/apikey/apikey.php.suspected"] [unique_id "Yz54fkHFNd77FwpRZBhiNgAAAAc"] www.ampsstudio.com [Thu Oct 06 07:41:02 2022] [error] [client 20.0.136.137:0] [client 20.0.136.137] ModSecurity: Access denied with code 403 (phase 2). String match "php.suspected" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430059"] [msg "Malware.Expert - request_uri: .PHP suspected files"] [hostname "www.ampsstudio.com"] [uri "/plugins/content/apismtp/apismtp.php.suspected"] [unique_id "Yz54frk0mxAjqSAV8suW_gAAAAY"] www.ampsstudio.com [Thu Oct 06 09:17:00 2022] [error] [client 185.191.171.34:0] AH01071: Got error 'PHP message: PHP Warning: Attempt to read property "post_content" on null in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/wordpress-seo/src/memoizers/meta-tags-context-memoizer.php on line 140PHP message: PHP Warning: Attempt to read property "post_modified_gmt" on null in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/wordpress-seo/src/presentations/indexable-post-type-presentation.php on line 289PHP message: PHP Warning: Attempt to read property "post_date_gmt" on null in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/wordpress-seo/src/presentations/indexable-post-type-presentation.php on line 289PHP message: PHP Warning: Attempt to read property "post_author" on null in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/wordpress-seo/src/presenters/slack/enhanced-data-presenter.php on line 46PHP message: PHP Warning: Attempt to read property "post_date_gmt" on null in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/wordpress-seo/src/generators/schema/webpage.php on line 51PHP message: PHP Warning: Attempt to read property "post_modified_gmt" on null in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/wordpress-seo/src/generators/schema/webpage.php on line 52PHP message: PHP Warning: Undefined array key 0 in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/includes/classes/iron_sonaar.class.php on line 212PHP message: PHP Warning: Trying to access array offset on value of type null in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/includes/classes/iron_sonaar.class.php on line 212PHP message: PHP Warning: Undefined array key 0 in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/includes/classes/iron_sonaar.class.php on line 214PHP message: PHP Warning: Trying to access array offset on value of type null in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/includes/classes/iron_sonaar.class.php on line 214' cpanel.ampsstudio.com [Thu Oct 06 11:41:40 2022] [error] [client 51.140.203.88:0] [client 51.140.203.88] ModSecurity: Access denied with code 403 (phase 2). Match of "contains index.php" against "REQUEST_URI" required. [file "remote server"] [line "-1"] [id "570076"] [msg "Malware.Expert - Malware"] [hostname "cpanel.ampsstudio.com"] [uri "/wp-commentin.php"] [unique_id "Yz6w5Lk0mxAjqSAV8suX0AAAAAY"] cpanel.ampsstudio.com [Thu Oct 06 11:41:47 2022] [error] [client 51.140.203.88:0] [client 51.140.203.88] ModSecurity: Access denied with code 403 (phase 2). Match of "contains index.php" against "REQUEST_URI" required. [file "remote server"] [line "-1"] [id "570076"] [msg "Malware.Expert - Malware"] [hostname "cpanel.ampsstudio.com"] [uri "/wp-commentin.php"] [unique_id "Yz6w67Qeqse3EHGl1K8QtQAAAAQ"] www.ampsstudio.com [Thu Oct 06 14:45:49 2022] [error] [client 20.24.21.64:0] AH01276: Cannot serve directory /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-admin/css/: No matching DirectoryIndex (index.php,index.html,index.htm) found, and server-generated directory index forbidden by Options directive www.ampsstudio.com [Thu Oct 06 15:00:51 2022] [error] [client 192.210.190.19:0] AH01071: Got error 'PHP message: PHP Warning: Cannot modify header information - headers already sent by (output started at /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-includes/functions.php:5275) in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/includes/sonaar-music/css/theme/custom-style.php on line 2' ampsstudio.com [Thu Oct 06 16:53:23 2022] [error] [client 147.78.47.249:0] [client 147.78.47.249] ModSecurity: Access denied with code 403 (phase 2). String match "connector.minimal.php" at REQUEST_URI. [file "remote server"] [line "-1"] [id "500083"] [msg "Malware.Expert - request_uri: 0-Day - Wordpress filemanager plugin"] [hostname "ampsstudio.com"] [uri "/wp-content/plugins/wp-file-manager/lib/php/connector.minimal.php"] [unique_id "Yz75870vpqhrw6ByrWXJewAAAAg"] cpanel.ampsstudio.com [Thu Oct 06 17:21:55 2022] [error] [client 51.142.146.242:0] [client 51.142.146.242] ModSecurity: Access denied with code 403 (phase 2). Match of "contains index.php" against "REQUEST_URI" required. [file "remote server"] [line "-1"] [id "570076"] [msg "Malware.Expert - Malware"] [hostname "cpanel.ampsstudio.com"] [uri "/wp-includes/class-wordpress-license.php"] [unique_id "Yz8Ao70vpqhrw6ByrWXJhQAAAAg"] cpanel.ampsstudio.com [Thu Oct 06 17:22:01 2022] [error] [client 51.142.146.242:0] [client 51.142.146.242] ModSecurity: Access denied with code 403 (phase 2). Match of "contains index.php" against "REQUEST_URI" required. [file "remote server"] [line "-1"] [id "570076"] [msg "Malware.Expert - Malware"] [hostname "cpanel.ampsstudio.com"] [uri "/wp-includes/class-wordpress-license.php"] [unique_id "Yz8AqVqJyg1daVvRapJ_FQAAAAw"] cpanel.ampsstudio.com [Thu Oct 06 17:22:10 2022] [error] [client 51.142.146.242:0] [client 51.142.146.242] ModSecurity: Access denied with code 403 (phase 2). Match of "contains index.php" against "REQUEST_URI" required. [file "remote server"] [line "-1"] [id "570076"] [msg "Malware.Expert - Malware"] [hostname "cpanel.ampsstudio.com"] [uri "/wp-includes/class-index-wordpress.php"] [unique_id "Yz8AskHFNd77FwpRZBhjygAAAAc"] cpanel.ampsstudio.com [Thu Oct 06 17:22:21 2022] [error] [client 51.142.146.242:0] [client 51.142.146.242] ModSecurity: Access denied with code 403 (phase 2). Match of "contains index.php" against "REQUEST_URI" required. [file "remote server"] [line "-1"] [id "570076"] [msg "Malware.Expert - Malware"] [hostname "cpanel.ampsstudio.com"] [uri "/wp-includes/class-index-wordpress.php"] [unique_id "Yz8AvaEwpFEQ3V9jp0GfAAAAAA0"] www.ampsstudio.com [Thu Oct 06 17:24:20 2022] [error] [client 44.226.207.152:0] AH01071: Got error 'PHP message: PHP Warning: Attempt to read property "post_content" on null in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/wordpress-seo/src/memoizers/meta-tags-context-memoizer.php on line 140' webdisk.ampsstudio.com [Thu Oct 06 18:11:15 2022] [error] [client 51.142.146.242:0] [client 51.142.146.242] ModSecurity: Access denied with code 403 (phase 2). Match of "contains index.php" against "REQUEST_URI" required. [file "remote server"] [line "-1"] [id "570076"] [msg "Malware.Expert - Malware"] [hostname "webdisk.ampsstudio.com"] [uri "/wp-includes/class-wordpress-license.php"] [unique_id "Yz8MMxnaxM4YVf3dIAxJzQAAAAI"] webdisk.ampsstudio.com [Thu Oct 06 18:11:17 2022] [error] [client 51.142.146.242:0] [client 51.142.146.242] ModSecurity: Access denied with code 403 (phase 2). Match of "contains index.php" against "REQUEST_URI" required. [file "remote server"] [line "-1"] [id "570076"] [msg "Malware.Expert - Malware"] [hostname "webdisk.ampsstudio.com"] [uri "/wp-includes/class-wordpress-license.php"] [unique_id "Yz8MNb0vpqhrw6ByrWXJlgAAAAg"] webdisk.ampsstudio.com [Thu Oct 06 18:11:31 2022] [error] [client 51.142.146.242:0] [client 51.142.146.242] ModSecurity: Access denied with code 403 (phase 2). Match of "contains index.php" against "REQUEST_URI" required. [file "remote server"] [line "-1"] [id "570076"] [msg "Malware.Expert - Malware"] [hostname "webdisk.ampsstudio.com"] [uri "/wp-includes/class-index-wordpress.php"] [unique_id "Yz8MQ4zb6wW4_fxXRINPwgAAAAs"] webdisk.ampsstudio.com [Thu Oct 06 18:11:47 2022] [error] [client 51.142.146.242:0] [client 51.142.146.242] ModSecurity: Access denied with code 403 (phase 2). Match of "contains index.php" against "REQUEST_URI" required. [file "remote server"] [line "-1"] [id "570076"] [msg "Malware.Expert - Malware"] [hostname "webdisk.ampsstudio.com"] [uri "/wp-includes/class-index-wordpress.php"] [unique_id "Yz8MU1qJyg1daVvRapJ_JgAAAAw"] webmail.ampsstudio.com [Thu Oct 06 22:21:38 2022] [error] [client 51.142.146.242:0] [client 51.142.146.242] ModSecurity: Access denied with code 403 (phase 2). Match of "contains index.php" against "REQUEST_URI" required. [file "remote server"] [line "-1"] [id "570076"] [msg "Malware.Expert - Malware"] [hostname "webmail.ampsstudio.com"] [uri "/wp-includes/class-wordpress-license.php"] [unique_id "Yz9G4s0WAPqbRLLYcF2UIgAAAAk"] webmail.ampsstudio.com [Thu Oct 06 22:21:40 2022] [error] [client 51.142.146.242:0] [client 51.142.146.242] ModSecurity: Access denied with code 403 (phase 2). Match of "contains index.php" against "REQUEST_URI" required. [file "remote server"] [line "-1"] [id "570076"] [msg "Malware.Expert - Malware"] [hostname "webmail.ampsstudio.com"] [uri "/wp-includes/class-wordpress-license.php"] [unique_id "Yz9G5Lk0mxAjqSAV8suZLwAAAAY"] webmail.ampsstudio.com [Thu Oct 06 22:21:47 2022] [error] [client 51.142.146.242:0] [client 51.142.146.242] ModSecurity: Access denied with code 403 (phase 2). Match of "contains index.php" against "REQUEST_URI" required. [file "remote server"] [line "-1"] [id "570076"] [msg "Malware.Expert - Malware"] [hostname "webmail.ampsstudio.com"] [uri "/wp-includes/class-index-wordpress.php"] [unique_id "Yz9G69raQCx6WedxAPiSbAAAAAA"] webmail.ampsstudio.com [Thu Oct 06 22:21:53 2022] [error] [client 51.142.146.242:0] [client 51.142.146.242] ModSecurity: Access denied with code 403 (phase 2). Match of "contains index.php" against "REQUEST_URI" required. [file "remote server"] [line "-1"] [id "570076"] [msg "Malware.Expert - Malware"] [hostname "webmail.ampsstudio.com"] [uri "/wp-includes/class-index-wordpress.php"] [unique_id "Yz9G8Yzb6wW4_fxXRINQPgAAAAs"] ampsstudio.com [Fri Oct 07 00:07:05 2022] [error] [client 51.142.146.242:0] [client 51.142.146.242] ModSecurity: Access denied with code 403 (phase 2). Match of "contains index.php" against "REQUEST_URI" required. [file "remote server"] [line "-1"] [id "570076"] [msg "Malware.Expert - Malware"] [hostname "ampsstudio.com"] [uri "/wp-includes/class-wordpress-license.php"] [unique_id "Yz9fmUHFNd77FwpRZBhkbAAAAAc"] ampsstudio.com [Fri Oct 07 00:07:16 2022] [error] [client 51.142.146.242:0] [client 51.142.146.242] ModSecurity: Access denied with code 403 (phase 2). Match of "contains index.php" against "REQUEST_URI" required. [file "remote server"] [line "-1"] [id "570076"] [msg "Malware.Expert - Malware"] [hostname "ampsstudio.com"] [uri "/wp-includes/class-wordpress-license.php"] [unique_id "Yz9fpFqJyg1daVvRapJ_ugAAAAw"] ampsstudio.com [Fri Oct 07 00:07:25 2022] [error] [client 51.142.146.242:0] [client 51.142.146.242] ModSecurity: Access denied with code 403 (phase 2). Match of "contains index.php" against "REQUEST_URI" required. [file "remote server"] [line "-1"] [id "570076"] [msg "Malware.Expert - Malware"] [hostname "ampsstudio.com"] [uri "/wp-includes/class-index-wordpress.php"] [unique_id "Yz9frc0WAPqbRLLYcF2UPQAAAAk"] ampsstudio.com [Fri Oct 07 00:07:28 2022] [error] [client 51.142.146.242:0] [client 51.142.146.242] ModSecurity: Access denied with code 403 (phase 2). Match of "contains index.php" against "REQUEST_URI" required. [file "remote server"] [line "-1"] [id "570076"] [msg "Malware.Expert - Malware"] [hostname "ampsstudio.com"] [uri "/wp-includes/class-index-wordpress.php"] [unique_id "Yz9fsDdGAedH1UAwTkzlLAAAAAE"] mail.ampsstudio.com [Fri Oct 07 00:51:06 2022] [error] [client 51.142.146.242:0] [client 51.142.146.242] ModSecurity: Access denied with code 403 (phase 2). Match of "contains index.php" against "REQUEST_URI" required. [file "remote server"] [line "-1"] [id "570076"] [msg "Malware.Expert - Malware"] [hostname "mail.ampsstudio.com"] [uri "/wp-includes/class-wordpress-license.php"] [unique_id "Yz9p6jdGAedH1UAwTkzlPAAAAAE"] mail.ampsstudio.com [Fri Oct 07 00:51:08 2022] [error] [client 51.142.146.242:0] [client 51.142.146.242] ModSecurity: Access denied with code 403 (phase 2). Match of "contains index.php" against "REQUEST_URI" required. [file "remote server"] [line "-1"] [id "570076"] [msg "Malware.Expert - Malware"] [hostname "mail.ampsstudio.com"] [uri "/wp-includes/class-wordpress-license.php"] [unique_id "Yz9p7LQeqse3EHGl1K8SMwAAAAQ"] mail.ampsstudio.com [Fri Oct 07 00:51:11 2022] [error] [client 51.142.146.242:0] [client 51.142.146.242] ModSecurity: Access denied with code 403 (phase 2). Match of "contains index.php" against "REQUEST_URI" required. [file "remote server"] [line "-1"] [id "570076"] [msg "Malware.Expert - Malware"] [hostname "mail.ampsstudio.com"] [uri "/wp-includes/class-index-wordpress.php"] [unique_id "Yz9p70WchD_OSvbSfoYcYAAAAAM"] mail.ampsstudio.com [Fri Oct 07 00:51:13 2022] [error] [client 51.142.146.242:0] [client 51.142.146.242] ModSecurity: Access denied with code 403 (phase 2). Match of "contains index.php" against "REQUEST_URI" required. [file "remote server"] [line "-1"] [id "570076"] [msg "Malware.Expert - Malware"] [hostname "mail.ampsstudio.com"] [uri "/wp-includes/class-index-wordpress.php"] [unique_id "Yz9p8b0vpqhrw6ByrWXKOgAAAAg"] ampsstudio.com [Fri Oct 07 03:12:28 2022] [error] [client 5.188.62.134:0] [client 5.188.62.134] ModSecurity: Access denied with code 403 (phase 2). Pattern match "/wp-config\\\\.php" at QUERY_STRING. [file "remote server"] [line "-1"] [id "410018"] [msg "Malware.Expert - query_string: unwanted wordpress config access"] [hostname "ampsstudio.com"] [uri "/wp-content/plugins/wp-hide-security-enhancer/router/file-process.php"] [unique_id "Yz-LDLQeqse3EHGl1K8SaQAAAAQ"] ampsstudio.com [Fri Oct 07 06:02:05 2022] [error] [client 20.254.151.249:0] [client 20.254.151.249] ModSecurity: Access denied with code 403 (phase 1). Pattern match "\\\\.\\\\./\\\\.\\\\." at REQUEST_URI. [file "remote server"] [line "-1"] [id "430064"] [msg "Malware.Expert - request_uri: directory travel"] [hostname "ampsstudio.com"] [uri "/wp-admin/admin-post.php"] [unique_id "Yz-yzX3roFtGTvFJQLS8UgAAAAg"] www.ampsstudio.com [Fri Oct 07 06:33:58 2022] [error] [client 20.254.151.249:0] [client 20.254.151.249] ModSecurity: Access denied with code 403 (phase 1). Pattern match "\\\\.\\\\./\\\\.\\\\." at REQUEST_URI. [file "remote server"] [line "-1"] [id "430064"] [msg "Malware.Expert - request_uri: directory travel"] [hostname "www.ampsstudio.com"] [uri "/wp-admin/admin-post.php"] [unique_id "Yz-6Rnmkwgf1bBeI3QNE0wAAAAA"] www.ampsstudio.com [Fri Oct 07 06:47:55 2022] [error] [client 176.99.135.117:0] [client 176.99.135.117] ModSecurity: Access denied with code 403 (phase 2). String match "/xleet-shell.php" at REQUEST_URI. [file "remote server"] [line "-1"] [id "570071"] [msg "Malware.Expert - PHP Command Shell"] [hostname "www.ampsstudio.com"] [uri "/wp-content/xleet-shell.php"] [unique_id "Yz-9i1xn_cz2lIXia4S9bgAAAAs"] www.ampsstudio.com [Fri Oct 07 10:06:57 2022] [error] [client 178.168.207.185:0] AH01071: Got error 'PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179' www.ampsstudio.com [Fri Oct 07 10:06:57 2022] [error] [client 178.168.207.185:0] AH01071: Got error 'PHP message: PHP Warning: Cannot modify header information - headers already sent by (output started at /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-includes/functions.php:5275) in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/includes/sonaar-music/css/theme/custom-style.php on line 2' www.ampsstudio.com [Fri Oct 07 12:38:48 2022] [error] [client 27.76.211.116:0] AH01071: Got error 'PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179' www.ampsstudio.com [Fri Oct 07 12:38:48 2022] [error] [client 27.76.211.116:0] AH01071: Got error 'PHP message: PHP Warning: Cannot modify header information - headers already sent by (output started at /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-includes/functions.php:5275) in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/includes/sonaar-music/css/theme/custom-style.php on line 2' ampsstudio.com [Fri Oct 07 13:08:39 2022] [error] [client 20.254.151.249:0] [client 20.254.151.249] ModSecurity: Access denied with code 403 (phase 1). Pattern match "\\\\.\\\\./\\\\.\\\\." at REQUEST_URI. [file "remote server"] [line "-1"] [id "430064"] [msg "Malware.Expert - request_uri: directory travel"] [hostname "ampsstudio.com"] [uri "/wp-admin/admin-post.php"] [unique_id "Y0AWx_QeYf-sExTMfpr9IwAAAAc"] www.ampsstudio.com [Fri Oct 07 13:39:16 2022] [error] [client 157.55.39.27:0] AH01276: Cannot serve directory /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/includes/sonaar-music/: No matching DirectoryIndex (index.php,index.html,index.htm) found, and server-generated directory index forbidden by Options directive www.ampsstudio.com [Fri Oct 07 19:14:39 2022] [error] [client 192.99.4.116:0] AH01071: Got error 'PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179' www.ampsstudio.com [Fri Oct 07 19:14:39 2022] [error] [client 192.99.4.116:0] AH01071: Got error 'PHP message: PHP Warning: Cannot modify header information - headers already sent by (output started at /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-includes/functions.php:5275) in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/includes/sonaar-music/css/theme/custom-style.php on line 2' www.ampsstudio.com [Fri Oct 07 19:16:11 2022] [error] [client 181.214.218.38:0] AH01071: Got error 'PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179' www.ampsstudio.com [Fri Oct 07 19:16:11 2022] [error] [client 181.214.218.38:0] AH01071: Got error 'PHP message: PHP Warning: Cannot modify header information - headers already sent by (output started at /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-includes/functions.php:5275) in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/includes/sonaar-music/css/theme/custom-style.php on line 2' www.ampsstudio.com [Fri Oct 07 19:43:37 2022] [error] [client 178.45.179.163:0] AH01071: Got error 'PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179' www.ampsstudio.com [Fri Oct 07 19:43:37 2022] [error] [client 178.45.179.163:0] AH01071: Got error 'PHP message: PHP Warning: Cannot modify header information - headers already sent by (output started at /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-includes/functions.php:5275) in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/includes/sonaar-music/css/theme/custom-style.php on line 2' www.ampsstudio.com [Fri Oct 07 20:00:04 2022] [error] [client 156.146.63.148:0] AH01071: Got error 'PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179' www.ampsstudio.com [Fri Oct 07 20:00:04 2022] [error] [client 156.146.63.148:0] AH01071: Got error 'PHP message: PHP Warning: Cannot modify header information - headers already sent by (output started at /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-includes/functions.php:5275) in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/includes/sonaar-music/css/theme/custom-style.php on line 2' ampsstudio.com [Fri Oct 07 21:09:22 2022] [error] [client 174.138.42.149:0] [client 174.138.42.149] ModSecurity: Access denied with code 403 (phase 2). String match "/wp-admin/install.php" at REQUEST_URI. [file "remote server"] [line "-1"] [id "570074"] [msg "Malware.Expert - Malware"] [hostname "ampsstudio.com"] [uri "/wp-admin/install.php"] [unique_id "Y0CHcpD7x3qGbLK890GByQAAAAg"] ampsstudio.com [Fri Oct 07 21:09:23 2022] [error] [client 174.138.42.149:0] [client 174.138.42.149] ModSecurity: Access denied with code 403 (phase 2). String match "/wp-admin/install.php" at REQUEST_URI. [file "remote server"] [line "-1"] [id "570074"] [msg "Malware.Expert - Malware"] [hostname "ampsstudio.com"] [uri "/wp/wp-admin/install.php"] [unique_id "Y0CHc4VMSfXQ1oVQwGqXyQAAAAM"] ampsstudio.com [Fri Oct 07 21:09:23 2022] [error] [client 174.138.42.149:0] [client 174.138.42.149] ModSecurity: Access denied with code 403 (phase 2). String match "/wp-admin/install.php" at REQUEST_URI. [file "remote server"] [line "-1"] [id "570074"] [msg "Malware.Expert - Malware"] [hostname "ampsstudio.com"] [uri "/new/wp-admin/install.php"] [unique_id "Y0CHczvz3lhyT6kC24E6QAAAAAA"] ampsstudio.com [Fri Oct 07 21:09:24 2022] [error] [client 174.138.42.149:0] [client 174.138.42.149] ModSecurity: Access denied with code 403 (phase 2). String match "/wp-admin/install.php" at REQUEST_URI. [file "remote server"] [line "-1"] [id "570074"] [msg "Malware.Expert - Malware"] [hostname "ampsstudio.com"] [uri "/old/wp-admin/install.php"] [unique_id "Y0CHdLIb1rtzxA0XZ1UmLgAAABA"] ampsstudio.com [Fri Oct 07 21:09:25 2022] [error] [client 174.138.42.149:0] [client 174.138.42.149] ModSecurity: Access denied with code 403 (phase 2). String match "/wp-admin/install.php" at REQUEST_URI. [file "remote server"] [line "-1"] [id "570074"] [msg "Malware.Expert - Malware"] [hostname "ampsstudio.com"] [uri "/wordpress/wp-admin/install.php"] [unique_id "Y0CHddWqn7PYxQ10HuL0OQAAAAc"] ampsstudio.com [Fri Oct 07 21:09:25 2022] [error] [client 174.138.42.149:0] [client 174.138.42.149] ModSecurity: Access denied with code 403 (phase 2). String match "/wp-admin/install.php" at REQUEST_URI. [file "remote server"] [line "-1"] [id "570074"] [msg "Malware.Expert - Malware"] [hostname "ampsstudio.com"] [uri "/test/wp-admin/install.php"] [unique_id "Y0CHdULp59JEfmpw8-Y2QgAAAAI"] ampsstudio.com [Fri Oct 07 21:09:26 2022] [error] [client 174.138.42.149:0] [client 174.138.42.149] ModSecurity: Access denied with code 403 (phase 2). String match "/wp-admin/install.php" at REQUEST_URI. [file "remote server"] [line "-1"] [id "570074"] [msg "Malware.Expert - Malware"] [hostname "ampsstudio.com"] [uri "/blog/wp-admin/install.php"] [unique_id "Y0CHdlxn_cz2lIXia4S_vAAAAAs"] ampsstudio.com [Fri Oct 07 21:09:26 2022] [error] [client 174.138.42.149:0] [client 174.138.42.149] ModSecurity: Access denied with code 403 (phase 2). String match "/wp-admin/install.php" at REQUEST_URI. [file "remote server"] [line "-1"] [id "570074"] [msg "Malware.Expert - Malware"] [hostname "ampsstudio.com"] [uri "/cms/wp-admin/install.php"] [unique_id "Y0CHdqPcJ0FmcZT85_r6zQAAAA4"] ampsstudio.com [Fri Oct 07 21:09:27 2022] [error] [client 174.138.42.149:0] [client 174.138.42.149] ModSecurity: Access denied with code 403 (phase 2). String match "/wp-admin/install.php" at REQUEST_URI. [file "remote server"] [line "-1"] [id "570074"] [msg "Malware.Expert - Malware"] [hostname "ampsstudio.com"] [uri "/web/wp-admin/install.php"] [unique_id "Y0CHdwq5KegdAKR3fNEWfwAAAAo"] ampsstudio.com [Fri Oct 07 21:09:28 2022] [error] [client 174.138.42.149:0] [client 174.138.42.149] ModSecurity: Access denied with code 403 (phase 2). String match "/wp-admin/install.php" at REQUEST_URI. [file "remote server"] [line "-1"] [id "570074"] [msg "Malware.Expert - Malware"] [hostname "ampsstudio.com"] [uri "/backup/wp-admin/install.php"] [unique_id "Y0CHeGoVo3FQ2QVKHzrfFwAAAAE"] ampsstudio.com [Fri Oct 07 21:09:28 2022] [error] [client 174.138.42.149:0] [client 174.138.42.149] ModSecurity: Access denied with code 403 (phase 2). String match "/wp-admin/install.php" at REQUEST_URI. [file "remote server"] [line "-1"] [id "570074"] [msg "Malware.Expert - Malware"] [hostname "ampsstudio.com"] [uri "/site/wp-admin/install.php"] [unique_id "Y0CHeJD7x3qGbLK890GBygAAAAg"] ampsstudio.com [Fri Oct 07 21:09:29 2022] [error] [client 174.138.42.149:0] [client 174.138.42.149] ModSecurity: Access denied with code 403 (phase 2). String match "/wp-admin/install.php" at REQUEST_URI. [file "remote server"] [line "-1"] [id "570074"] [msg "Malware.Expert - Malware"] [hostname "ampsstudio.com"] [uri "/oldsite/wp-admin/install.php"] [unique_id "Y0CHeYVMSfXQ1oVQwGqXygAAAAM"] ampsstudio.com [Sat Oct 08 01:59:00 2022] [error] [client 185.36.81.23:0] [client 185.36.81.23] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "ampsstudio.com"] [uri "/.env"] [unique_id "Y0DLVIVMSfXQ1oVQwGqYegAAAAM"] www.ampsstudio.com [Sat Oct 08 02:06:54 2022] [error] [client 20.68.180.229:0] AH01071: Got error 'PHP message: PHP Warning: Undefined array key "HTTP_USER_AGENT" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/bookly-responsive-appointment-booking-tool/frontend/modules/booking/ShortCode.php on line 66' www.ampsstudio.com [Sat Oct 08 02:06:55 2022] [error] [client 20.68.180.229:0] AH01071: Got error 'PHP message: PHP Warning: Undefined array key "HTTP_USER_AGENT" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/bookly-responsive-appointment-booking-tool/frontend/modules/booking/ShortCode.php on line 66' www.ampsstudio.com [Sat Oct 08 02:06:56 2022] [error] [client 20.68.180.229:0] AH01071: Got error 'PHP message: PHP Warning: Undefined array key "HTTP_USER_AGENT" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/bookly-responsive-appointment-booking-tool/frontend/modules/booking/ShortCode.php on line 66' www.ampsstudio.com [Sat Oct 08 02:06:57 2022] [error] [client 20.68.180.229:0] AH01071: Got error 'PHP message: PHP Warning: Undefined array key "HTTP_USER_AGENT" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/bookly-responsive-appointment-booking-tool/frontend/modules/booking/ShortCode.php on line 66' www.ampsstudio.com [Sat Oct 08 02:06:58 2022] [error] [client 20.68.180.229:0] AH01071: Got error 'PHP message: PHP Warning: Undefined array key "HTTP_USER_AGENT" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/bookly-responsive-appointment-booking-tool/frontend/modules/booking/ShortCode.php on line 66' ampsstudio.com [Sat Oct 08 02:06:59 2022] [error] [client 20.68.180.229:0] AH01276: Cannot serve directory /home/virtual/vps-aa3942/a/aede5353c4/public_html/test/: No matching DirectoryIndex (index.php,index.html,index.htm) found, and server-generated directory index forbidden by Options directive www.ampsstudio.com [Sat Oct 08 02:07:00 2022] [error] [client 20.68.180.229:0] AH01071: Got error 'PHP message: PHP Warning: Undefined array key "HTTP_USER_AGENT" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/bookly-responsive-appointment-booking-tool/frontend/modules/booking/ShortCode.php on line 66' www.ampsstudio.com [Sat Oct 08 02:07:01 2022] [error] [client 20.68.180.229:0] AH01071: Got error 'PHP message: PHP Warning: Undefined array key "HTTP_USER_AGENT" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/bookly-responsive-appointment-booking-tool/frontend/modules/booking/ShortCode.php on line 66' www.ampsstudio.com [Sat Oct 08 02:07:02 2022] [error] [client 20.68.180.229:0] AH01071: Got error 'PHP message: PHP Warning: Undefined array key "HTTP_USER_AGENT" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/bookly-responsive-appointment-booking-tool/frontend/modules/booking/ShortCode.php on line 66' www.ampsstudio.com [Sat Oct 08 02:25:48 2022] [error] [client 78.29.92.51:0] AH01071: Got error 'PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179' www.ampsstudio.com [Sat Oct 08 02:25:48 2022] [error] [client 78.29.92.51:0] AH01071: Got error 'PHP message: PHP Warning: Cannot modify header information - headers already sent by (output started at /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-includes/functions.php:5275) in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/includes/sonaar-music/css/theme/custom-style.php on line 2' cpanel.ampsstudio.com [Sat Oct 08 02:34:23 2022] [error] [client 185.36.81.23:0] [client 185.36.81.23] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "cpanel.ampsstudio.com"] [uri "/.env"] [unique_id "Y0DTnwq5KegdAKR3fNEXNQAAAAo"] ampsstudio.com [Sat Oct 08 06:13:24 2022] [error] [client 195.178.120.231:0] [client 195.178.120.231] ModSecurity: Access denied with code 403 (phase 1). Pattern match "\\\\.\\\\./\\\\.\\\\." at REQUEST_URI. [file "remote server"] [line "-1"] [id "430064"] [msg "Malware.Expert - request_uri: directory travel"] [hostname "ampsstudio.com"] [uri "/wp-admin/admin-post.php"] [unique_id "Y0EG9FzWsFoU3NXkIFrZtgAAAA4"] mail.ampsstudio.com [Sat Oct 08 06:15:02 2022] [error] [client 185.36.81.23:0] [client 185.36.81.23] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "mail.ampsstudio.com"] [uri "/.env"] [unique_id "Y0EHVlWVbzNa9Et4GojlyQAAAAM"] ampsstudio.com [Sat Oct 08 06:33:08 2022] [error] [client 185.83.146.154:0] [client 185.83.146.154] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "ampsstudio.com"] [uri "/.env"] [unique_id "Y0ELlEc_J5wF3geW9dP6OQAAAAE"] webdisk.ampsstudio.com [Sat Oct 08 08:38:15 2022] [error] [client 185.36.81.23:0] [client 185.36.81.23] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "webdisk.ampsstudio.com"] [uri "/.env"] [unique_id "Y0Eo50c_J5wF3geW9dP6cQAAAAE"] webmail.ampsstudio.com [Sat Oct 08 08:49:01 2022] [error] [client 185.36.81.23:0] [client 185.36.81.23] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "webmail.ampsstudio.com"] [uri "/.env"] [unique_id "Y0ErbVzWsFoU3NXkIFraCwAAAA4"] ampsstudio.com [Sat Oct 08 10:19:16 2022] [error] [client 20.68.180.229:0] [client 20.68.180.229] ModSecurity: Access denied with code 403 (phase 2). Match of "contains index.php" against "REQUEST_URI" required. [file "remote server"] [line "-1"] [id "570076"] [msg "Malware.Expert - Malware"] [hostname "ampsstudio.com"] [uri "/wp-plain.php"] [unique_id "Y0FAlL8KnNggM-U3NpjGXwAAAAo"] www.ampsstudio.com [Sat Oct 08 10:19:19 2022] [error] [client 20.68.180.229:0] [client 20.68.180.229] ModSecurity: Access denied with code 403 (phase 2). String match "php.suspected" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430059"] [msg "Malware.Expert - request_uri: .PHP suspected files"] [hostname "www.ampsstudio.com"] [uri "/wp-content/plugins/apikey/apikey.php.suspected"] [unique_id "Y0FAl2aMQvVZkWT0gez7ugAAAAA"] www.ampsstudio.com [Sat Oct 08 10:19:19 2022] [error] [client 20.68.180.229:0] [client 20.68.180.229] ModSecurity: Access denied with code 403 (phase 2). String match "php.suspected" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430059"] [msg "Malware.Expert - request_uri: .PHP suspected files"] [hostname "www.ampsstudio.com"] [uri "/plugins/content/apismtp/apismtp.php.suspected"] [unique_id "Y0FAl6HfWlmbNt8JwjgxbgAAAAg"] ampsstudio.com [Sat Oct 08 12:10:33 2022] [error] [client 20.171.59.197:0] AH01276: Cannot serve directory /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-admin/css/: No matching DirectoryIndex (index.php,index.html,index.htm) found, and server-generated directory index forbidden by Options directive ampsstudio.com [Sat Oct 08 12:31:47 2022] [error] [client 4.228.211.135:0] [client 4.228.211.135] ModSecurity: Access denied with code 403 (phase 2). Match of "contains index.php" against "REQUEST_URI" required. [file "remote server"] [line "-1"] [id "570076"] [msg "Malware.Expert - Malware"] [hostname "ampsstudio.com"] [uri "/wp-plain.php"] [unique_id "Y0Ffo7OSjHwvbf-pgjUP9QAAAAI"] www.ampsstudio.com [Sat Oct 08 12:57:02 2022] [error] [client 109.70.100.24:0] AH01071: Got error 'PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179' www.ampsstudio.com [Sat Oct 08 12:57:02 2022] [error] [client 109.70.100.24:0] AH01071: Got error 'PHP message: PHP Warning: Cannot modify header information - headers already sent by (output started at /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-includes/functions.php:5275) in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/includes/sonaar-music/css/theme/custom-style.php on line 2' www.ampsstudio.com [Sat Oct 08 17:01:01 2022] [error] [client 2001:19f0:6c01:2155:5400:2ff:fe7e:a19d:0] [client 2001:19f0:6c01:2155:5400:2ff:fe7e:a19d] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_HEADERS_NAMES. [file "remote server"] [line "-1"] [id "580001"] [msg "Malware.Expert - Wordpress - Referer missing"] [hostname "www.ampsstudio.com"] [uri "/wp-content/themes/pridmag/about.php"] [unique_id "Y0Gevb8KnNggM-U3NpjG7QAAAAo"] www.ampsstudio.com [Sat Oct 08 17:01:04 2022] [error] [client 2001:19f0:6c01:2155:5400:2ff:fe7e:a19d:0] [client 2001:19f0:6c01:2155:5400:2ff:fe7e:a19d] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_HEADERS_NAMES. [file "remote server"] [line "-1"] [id "580001"] [msg "Malware.Expert - Wordpress - Referer missing"] [hostname "www.ampsstudio.com"] [uri "/wp-content/themes/seotheme/about.php"] [unique_id "Y0GewEc_J5wF3geW9dP7HQAAAAE"] www.ampsstudio.com [Sat Oct 08 17:01:06 2022] [error] [client 2001:19f0:6c01:2155:5400:2ff:fe7e:a19d:0] [client 2001:19f0:6c01:2155:5400:2ff:fe7e:a19d] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_HEADERS_NAMES. [file "remote server"] [line "-1"] [id "431000"] [msg "Malware.Expert - request_uri: CSS - prevent PHP files from executing"] [hostname "www.ampsstudio.com"] [uri "/css/index.php"] [unique_id "Y0GewoiVgkKhLt4urnL2WwAAAAY"] www.ampsstudio.com [Sat Oct 08 17:01:07 2022] [error] [client 2001:19f0:6c01:2155:5400:2ff:fe7e:a19d:0] [client 2001:19f0:6c01:2155:5400:2ff:fe7e:a19d] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_HEADERS_NAMES. [file "remote server"] [line "-1"] [id "431000"] [msg "Malware.Expert - request_uri: CSS - prevent PHP files from executing"] [hostname "www.ampsstudio.com"] [uri "/css/index.php"] [unique_id "Y0Gew1WVbzNa9Et4GojmwQAAAAM"] www.ampsstudio.com [Sat Oct 08 17:01:08 2022] [error] [client 2001:19f0:6c01:2155:5400:2ff:fe7e:a19d:0] [client 2001:19f0:6c01:2155:5400:2ff:fe7e:a19d] ModSecurity: Access denied with connection close (phase 2). String match "/wp-content/index.php" at REQUEST_URI. [file "remote server"] [line "-1"] [id "570017"] [msg "Malware.Expert - Wordpress - Malware"] [hostname "www.ampsstudio.com"] [uri "/wp-content/index.php"] [unique_id "Y0GexNfYxb5AXCLzr6tlhQAAAAQ"] www.ampsstudio.com [Sat Oct 08 17:01:09 2022] [error] [client 2001:19f0:6c01:2155:5400:2ff:fe7e:a19d:0] [client 2001:19f0:6c01:2155:5400:2ff:fe7e:a19d] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_HEADERS_NAMES. [file "remote server"] [line "-1"] [id "431000"] [msg "Malware.Expert - request_uri: CSS - prevent PHP files from executing"] [hostname "www.ampsstudio.com"] [uri "/css/contents.php"] [unique_id "Y0GexVzWsFoU3NXkIFratgAAAA4"] www.ampsstudio.com [Sat Oct 08 17:01:09 2022] [error] [client 2001:19f0:6c01:2155:5400:2ff:fe7e:a19d:0] [client 2001:19f0:6c01:2155:5400:2ff:fe7e:a19d] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_HEADERS_NAMES. [file "remote server"] [line "-1"] [id "431000"] [msg "Malware.Expert - request_uri: CSS - prevent PHP files from executing"] [hostname "www.ampsstudio.com"] [uri "/css/contents.php"] [unique_id "Y0GexaHfWlmbNt8Jwjgx-wAAAAg"] www.ampsstudio.com [Sat Oct 08 17:01:12 2022] [error] [client 2001:19f0:6c01:2155:5400:2ff:fe7e:a19d:0] [client 2001:19f0:6c01:2155:5400:2ff:fe7e:a19d] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_HEADERS_NAMES. [file "remote server"] [line "-1"] [id "431000"] [msg "Malware.Expert - request_uri: CSS - prevent PHP files from executing"] [hostname "www.ampsstudio.com"] [uri "/css/load.php"] [unique_id "Y0GeyIiVgkKhLt4urnL2XAAAAAY"] www.ampsstudio.com [Sat Oct 08 17:01:13 2022] [error] [client 2001:19f0:6c01:2155:5400:2ff:fe7e:a19d:0] [client 2001:19f0:6c01:2155:5400:2ff:fe7e:a19d] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_HEADERS_NAMES. [file "remote server"] [line "-1"] [id "431000"] [msg "Malware.Expert - request_uri: CSS - prevent PHP files from executing"] [hostname "www.ampsstudio.com"] [uri "/css/load.php"] [unique_id "Y0GeyVWVbzNa9Et4GojmwgAAAAM"] www.ampsstudio.com [Sat Oct 08 17:01:33 2022] [error] [client 2001:19f0:6c01:2155:5400:2ff:fe7e:a19d:0] [client 2001:19f0:6c01:2155:5400:2ff:fe7e:a19d] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_HEADERS_NAMES. [file "remote server"] [line "-1"] [id "431000"] [msg "Malware.Expert - request_uri: CSS - prevent PHP files from executing"] [hostname "www.ampsstudio.com"] [uri "/css/votes.php"] [unique_id "Y0Ge3QjZJxKiDDEhkt2t-QAAAAs"] www.ampsstudio.com [Sat Oct 08 17:01:34 2022] [error] [client 2001:19f0:6c01:2155:5400:2ff:fe7e:a19d:0] [client 2001:19f0:6c01:2155:5400:2ff:fe7e:a19d] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_HEADERS_NAMES. [file "remote server"] [line "-1"] [id "431000"] [msg "Malware.Expert - request_uri: CSS - prevent PHP files from executing"] [hostname "www.ampsstudio.com"] [uri "/css/votes.php"] [unique_id "Y0Ge3qkTFUGku5giR119nQAAAAI"] www.ampsstudio.com [Sat Oct 08 17:01:40 2022] [error] [client 2001:19f0:6c01:2155:5400:2ff:fe7e:a19d:0] [client 2001:19f0:6c01:2155:5400:2ff:fe7e:a19d] ModSecurity: Access denied with code 403 (phase 2). Pattern match "/wp-admin/js/.*\\\\.php" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430031"] [msg "Malware.Expert - request_uri: Wordpress - prevent PHP files from executing"] [hostname "www.ampsstudio.com"] [uri "/wp-admin/js/widgets/radio.php"] [unique_id "Y0Ge5FWVbzNa9Et4GojmxAAAAAM"] www.ampsstudio.com [Sat Oct 08 17:01:41 2022] [error] [client 2001:19f0:6c01:2155:5400:2ff:fe7e:a19d:0] [client 2001:19f0:6c01:2155:5400:2ff:fe7e:a19d] ModSecurity: Access denied with code 403 (phase 2). Pattern match "/wp-admin/js/.*\\\\.php" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430031"] [msg "Malware.Expert - request_uri: Wordpress - prevent PHP files from executing"] [hostname "www.ampsstudio.com"] [uri "/wp-admin/js/widgets/radio.php"] [unique_id "Y0Ge5YiVgkKhLt4urnL2XgAAAAY"] www.ampsstudio.com [Sat Oct 08 17:01:42 2022] [error] [client 2001:19f0:6c01:2155:5400:2ff:fe7e:a19d:0] [client 2001:19f0:6c01:2155:5400:2ff:fe7e:a19d] ModSecurity: Access denied with code 403 (phase 2). Pattern match "/wp-admin/css/.*\\\\.php" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430027"] [msg "Malware.Expert - request_uri: Wordpress - prevent PHP files from executing"] [hostname "www.ampsstudio.com"] [uri "/wp-admin/css/colors/radio.php"] [unique_id "Y0Ge5lzWsFoU3NXkIFrauQAAAA4"] www.ampsstudio.com [Sat Oct 08 17:01:43 2022] [error] [client 2001:19f0:6c01:2155:5400:2ff:fe7e:a19d:0] [client 2001:19f0:6c01:2155:5400:2ff:fe7e:a19d] ModSecurity: Access denied with code 403 (phase 2). Pattern match "/wp-admin/css/.*\\\\.php" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430027"] [msg "Malware.Expert - request_uri: Wordpress - prevent PHP files from executing"] [hostname "www.ampsstudio.com"] [uri "/wp-admin/css/colors/radio.php"] [unique_id "Y0Ge56HfWlmbNt8Jwjgx_gAAAAg"] www.ampsstudio.com [Sat Oct 08 17:01:45 2022] [error] [client 2001:19f0:6c01:2155:5400:2ff:fe7e:a19d:0] [client 2001:19f0:6c01:2155:5400:2ff:fe7e:a19d] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_HEADERS_NAMES. [file "remote server"] [line "-1"] [id "580001"] [msg "Malware.Expert - Wordpress - Referer missing"] [hostname "www.ampsstudio.com"] [uri "/wp-content/themes/classic/inc/admin.php"] [unique_id "Y0Ge6akTFUGku5giR119ngAAAAI"] www.ampsstudio.com [Sat Oct 08 17:01:50 2022] [error] [client 2001:19f0:6c01:2155:5400:2ff:fe7e:a19d:0] [client 2001:19f0:6c01:2155:5400:2ff:fe7e:a19d] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES. [file "remote server"] [line "-1"] [id "580000"] [msg "Malware.Expert - Wordpress - Referer missing"] [hostname "www.ampsstudio.com"] [uri "/wp-admin/wikindex.php"] [unique_id "Y0Ge7oiVgkKhLt4urnL2XwAAAAY"] www.ampsstudio.com [Sat Oct 08 17:01:51 2022] [error] [client 2001:19f0:6c01:2155:5400:2ff:fe7e:a19d:0] [client 2001:19f0:6c01:2155:5400:2ff:fe7e:a19d] ModSecurity: Access denied with code 403 (phase 2). String match "/wp-content/plugins/core-engine/" at REQUEST_URI. [file "remote server"] [line "-1"] [id "570064"] [msg "Malware.Expert - Wordpress Malware"] [hostname "www.ampsstudio.com"] [uri "/wp-content/plugins/core-engine/admin.php"] [unique_id "Y0Ge7xQvk8sSci8ZS5oUBgAAAAU"] www.ampsstudio.com [Sat Oct 08 17:01:52 2022] [error] [client 2001:19f0:6c01:2155:5400:2ff:fe7e:a19d:0] [client 2001:19f0:6c01:2155:5400:2ff:fe7e:a19d] ModSecurity: Access denied with code 403 (phase 2). String match "/wp-content/plugins/core-engine/" at REQUEST_URI. [file "remote server"] [line "-1"] [id "570064"] [msg "Malware.Expert - Wordpress Malware"] [hostname "www.ampsstudio.com"] [uri "/wp-content/plugins/core-engine/admin.php"] [unique_id "Y0Ge8FzWsFoU3NXkIFraugAAAA4"] ampsstudio.com [Sat Oct 08 21:17:24 2022] [error] [client 5.188.62.134:0] [client 5.188.62.134] ModSecurity: Access denied with code 403 (phase 1). Pattern match "\\\\.\\\\./\\\\.\\\\." at REQUEST_URI. [file "remote server"] [line "-1"] [id "430064"] [msg "Malware.Expert - request_uri: directory travel"] [hostname "ampsstudio.com"] [uri "/wp-content/themes/mTheme-Unus/css/css.php"] [unique_id "Y0Ha1IiVgkKhLt4urnL2qQAAAAY"] www.ampsstudio.com [Sat Oct 08 22:14:16 2022] [error] [client 109.169.225.205:0] AH01071: Got error 'PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179' www.ampsstudio.com [Sat Oct 08 22:14:16 2022] [error] [client 109.169.225.205:0] AH01071: Got error 'PHP message: PHP Warning: Cannot modify header information - headers already sent by (output started at /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-includes/functions.php:5275) in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/includes/sonaar-music/css/theme/custom-style.php on line 2' www.ampsstudio.com [Sun Oct 09 03:05:50 2022] [error] [client 95.181.150.133:0] AH01071: Got error 'PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179' www.ampsstudio.com [Sun Oct 09 03:05:50 2022] [error] [client 95.181.150.133:0] AH01071: Got error 'PHP message: PHP Warning: Cannot modify header information - headers already sent by (output started at /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-includes/functions.php:5275) in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/includes/sonaar-music/css/theme/custom-style.php on line 2' www.ampsstudio.com [Sun Oct 09 04:31:48 2022] [error] [client 109.248.175.173:0] [client 109.248.175.173] ModSecurity: Access denied with code 403 (phase 2). Pattern match "/\\\\..+\\\\.php" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430015"] [msg "Malware.Expert - request_uri: hidden .php execute"] [hostname "www.ampsstudio.com"] [uri "/.Wp-back.phP"] [unique_id "Y0JApII9cinGKcgTsuFiVQAAAAg"] www.ampsstudio.com [Sun Oct 09 07:21:13 2022] [error] [client 183.87.231.38:0] AH01071: Got error 'PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179' www.ampsstudio.com [Sun Oct 09 07:21:13 2022] [error] [client 183.87.231.38:0] AH01071: Got error 'PHP message: PHP Warning: Cannot modify header information - headers already sent by (output started at /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-includes/functions.php:5275) in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/includes/sonaar-music/css/theme/custom-style.php on line 2' ampsstudio.com [Sun Oct 09 07:45:47 2022] [error] [client 141.98.252.168:0] [client 141.98.252.168] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "ampsstudio.com"] [uri "/.env"] [unique_id "Y0JuG8IGJklE-DJqiebFHAAAAAc"] ampsstudio.com [Sun Oct 09 07:56:08 2022] [error] [client 141.98.252.168:0] [client 141.98.252.168] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "ampsstudio.com"] [uri "/.env"] [unique_id "Y0JwiLzzuO1bwC2r8EYS3QAAAAw"] cpanel.ampsstudio.com [Sun Oct 09 08:30:44 2022] [error] [client 154.239.202.72:0] [client 154.239.202.72] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "cpanel.ampsstudio.com"] [uri "/.env"] [unique_id "Y0J4pMztHAGcNnhJrWaXuAAAAAQ"] www.ampsstudio.com [Sun Oct 09 11:29:41 2022] [error] [client 213.139.193.30:0] AH01071: Got error 'PHP message: PHP Warning: Cannot modify header information - headers already sent by (output started at /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-includes/functions.php:5275) in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/includes/sonaar-music/css/theme/custom-style.php on line 2' ampsstudio.com [Sun Oct 09 12:03:57 2022] [error] [client 141.98.252.168:0] [client 141.98.252.168] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "ampsstudio.com"] [uri "/.env"] [unique_id "Y0KqnWiHVsUvMW7qWT5TdgAAAAs"] www.ampsstudio.com [Sun Oct 09 13:45:52 2022] [error] [client 78.29.94.97:0] AH01071: Got error 'PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179' www.ampsstudio.com [Sun Oct 09 13:45:52 2022] [error] [client 78.29.94.97:0] AH01071: Got error 'PHP message: PHP Warning: Cannot modify header information - headers already sent by (output started at /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-includes/functions.php:5275) in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/includes/sonaar-music/css/theme/custom-style.php on line 2' webdisk.ampsstudio.com [Sun Oct 09 14:27:28 2022] [error] [client 154.236.126.44:0] [client 154.236.126.44] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "webdisk.ampsstudio.com"] [uri "/.env"] [unique_id "Y0LMQFrZNnqA__apmp5cKAAAAAA"] ampsstudio.com [Sun Oct 09 14:59:30 2022] [error] [client 94.198.43.10:0] [client 94.198.43.10] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "ampsstudio.com"] [uri "/.env"] [unique_id "Y0LTwpPIGhDPZVNjpD6r2AAAAAk"] ampsstudio.com [Sun Oct 09 15:38:16 2022] [error] [client 94.198.43.10:0] [client 94.198.43.10] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "ampsstudio.com"] [uri "/.env"] [unique_id "Y0Lc2GpkWk2Wi7rYM08TqwAAAAU"] cpanel.ampsstudio.com [Sun Oct 09 16:11:33 2022] [error] [client 154.236.126.44:0] [client 154.236.126.44] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "cpanel.ampsstudio.com"] [uri "/.env"] [unique_id "Y0LkpZrNEY6NF-7to-c3dQAAAAQ"] webmail.ampsstudio.com [Sun Oct 09 18:05:03 2022] [error] [client 51.105.26.73:0] [client 51.105.26.73] ModSecurity: Access denied with code 403 (phase 2). Match of "contains index.php" against "REQUEST_URI" required. [file "remote server"] [line "-1"] [id "570076"] [msg "Malware.Expert - Malware"] [hostname "webmail.ampsstudio.com"] [uri "/wp-commentin.php"] [unique_id "Y0L_P-C_Jd04qvOHg3NnVgAAAAo"] webmail.ampsstudio.com [Sun Oct 09 18:05:11 2022] [error] [client 51.105.26.73:0] [client 51.105.26.73] ModSecurity: Access denied with code 403 (phase 2). Match of "contains index.php" against "REQUEST_URI" required. [file "remote server"] [line "-1"] [id "570076"] [msg "Malware.Expert - Malware"] [hostname "webmail.ampsstudio.com"] [uri "/wp-commentin.php"] [unique_id "Y0L_R3QvYqhvUKmRS9VXaAAAAAE"] ampsstudio.com [Sun Oct 09 19:37:47 2022] [error] [client 51.105.26.73:0] [client 51.105.26.73] ModSecurity: Access denied with code 403 (phase 2). Match of "contains index.php" against "REQUEST_URI" required. [file "remote server"] [line "-1"] [id "570076"] [msg "Malware.Expert - Malware"] [hostname "ampsstudio.com"] [uri "/wp-commentin.php"] [unique_id "Y0MU-8IGJklE-DJqiebGhgAAAAc"] ampsstudio.com [Sun Oct 09 19:37:52 2022] [error] [client 51.105.26.73:0] [client 51.105.26.73] ModSecurity: Access denied with code 403 (phase 2). Match of "contains index.php" against "REQUEST_URI" required. [file "remote server"] [line "-1"] [id "570076"] [msg "Malware.Expert - Malware"] [hostname "ampsstudio.com"] [uri "/wp-commentin.php"] [unique_id "Y0MVAHQvYqhvUKmRS9VXkwAAAAE"] mail.ampsstudio.com [Sun Oct 09 20:04:48 2022] [error] [client 51.105.26.73:0] [client 51.105.26.73] ModSecurity: Access denied with code 403 (phase 2). Match of "contains index.php" against "REQUEST_URI" required. [file "remote server"] [line "-1"] [id "570076"] [msg "Malware.Expert - Malware"] [hostname "mail.ampsstudio.com"] [uri "/wp-commentin.php"] [unique_id "Y0MbUFrZNnqA__apmp5cxQAAAAA"] mail.ampsstudio.com [Sun Oct 09 20:04:58 2022] [error] [client 51.105.26.73:0] [client 51.105.26.73] ModSecurity: Access denied with code 403 (phase 2). Match of "contains index.php" against "REQUEST_URI" required. [file "remote server"] [line "-1"] [id "570076"] [msg "Malware.Expert - Malware"] [hostname "mail.ampsstudio.com"] [uri "/wp-commentin.php"] [unique_id "Y0MbWnQvYqhvUKmRS9VXmwAAAAE"] www.ampsstudio.com [Sun Oct 09 23:42:31 2022] [crit] [client 66.249.92.151:0] AH00529: /home/virtual/vps-aa3942/a/aede5353c4/public_html/.well-known/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/virtual/vps-aa3942/a/aede5353c4/public_html/.well-known/' is executable cpanel.ampsstudio.com [Sun Oct 09 23:46:06 2022] [error] [client 51.105.26.73:0] [client 51.105.26.73] ModSecurity: Access denied with code 403 (phase 2). Match of "contains index.php" against "REQUEST_URI" required. [file "remote server"] [line "-1"] [id "570076"] [msg "Malware.Expert - Malware"] [hostname "cpanel.ampsstudio.com"] [uri "/wp-commentin.php"] [unique_id "Y0NPLmpkWk2Wi7rYM08UYQAAAAU"] cpanel.ampsstudio.com [Sun Oct 09 23:46:11 2022] [error] [client 51.105.26.73:0] [client 51.105.26.73] ModSecurity: Access denied with code 403 (phase 2). Match of "contains index.php" against "REQUEST_URI" required. [file "remote server"] [line "-1"] [id "570076"] [msg "Malware.Expert - Malware"] [hostname "cpanel.ampsstudio.com"] [uri "/wp-commentin.php"] [unique_id "Y0NPM8IGJklE-DJqiebGzAAAAAc"] webdisk.ampsstudio.com [Mon Oct 10 01:09:17 2022] [error] [client 51.105.26.73:0] [client 51.105.26.73] ModSecurity: Access denied with code 403 (phase 2). Match of "contains index.php" against "REQUEST_URI" required. [file "remote server"] [line "-1"] [id "570076"] [msg "Malware.Expert - Malware"] [hostname "webdisk.ampsstudio.com"] [uri "/wp-commentin.php"] [unique_id "Y0NirZrNEY6NF-7to-c4PwAAAAQ"] webdisk.ampsstudio.com [Mon Oct 10 01:09:28 2022] [error] [client 51.105.26.73:0] [client 51.105.26.73] ModSecurity: Access denied with code 403 (phase 2). Match of "contains index.php" against "REQUEST_URI" required. [file "remote server"] [line "-1"] [id "570076"] [msg "Malware.Expert - Malware"] [hostname "webdisk.ampsstudio.com"] [uri "/wp-commentin.php"] [unique_id "Y0NiuGpkWk2Wi7rYM08UhAAAAAU"] ampsstudio.com [Mon Oct 10 01:59:47 2022] [error] [client 20.163.141.249:0] [client 20.163.141.249] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "ampsstudio.com"] [uri "/.env"] [unique_id "Y0Nug_nFAor3daCHge2akAAAAAI"] ampsstudio.com [Mon Oct 10 01:59:53 2022] [error] [client 20.163.141.249:0] [client 20.163.141.249] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "ampsstudio.com"] [uri "/.env"] [unique_id "Y0NuicIGJklE-DJqiebHAgAAAAc"] ampsstudio.com [Mon Oct 10 02:00:05 2022] [error] [client 20.163.141.249:0] [client 20.163.141.249] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "ampsstudio.com"] [uri "/.env"] [unique_id "Y0NulXQvYqhvUKmRS9VYFAAAAAE"] www.ampsstudio.com [Mon Oct 10 03:01:47 2022] [error] [client 185.220.101.25:0] AH01071: Got error 'PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179' www.ampsstudio.com [Mon Oct 10 03:01:47 2022] [error] [client 185.220.101.25:0] AH01071: Got error 'PHP message: PHP Warning: Cannot modify header information - headers already sent by (output started at /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-includes/functions.php:5275) in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/includes/sonaar-music/css/theme/custom-style.php on line 2' www.ampsstudio.com [Mon Oct 10 03:13:55 2022] [error] [client 181.214.218.71:0] AH01071: Got error 'PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179' www.ampsstudio.com [Mon Oct 10 03:13:55 2022] [error] [client 181.214.218.71:0] AH01071: Got error 'PHP message: PHP Warning: Cannot modify header information - headers already sent by (output started at /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-includes/functions.php:5275) in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/includes/sonaar-music/css/theme/custom-style.php on line 2' www.ampsstudio.com [Mon Oct 10 05:14:57 2022] [error] [client 95.84.248.246:0] AH01071: Got error 'PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179' www.ampsstudio.com [Mon Oct 10 05:14:57 2022] [error] [client 95.84.248.246:0] AH01071: Got error 'PHP message: PHP Warning: Cannot modify header information - headers already sent by (output started at /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-includes/functions.php:5275) in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/includes/sonaar-music/css/theme/custom-style.php on line 2' www.ampsstudio.com [Mon Oct 10 07:32:13 2022] [error] [client 191.101.217.26:0] AH01071: Got error 'PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179' www.ampsstudio.com [Mon Oct 10 07:32:13 2022] [error] [client 191.101.217.26:0] AH01071: Got error 'PHP message: PHP Warning: Cannot modify header information - headers already sent by (output started at /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-includes/functions.php:5275) in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/includes/sonaar-music/css/theme/custom-style.php on line 2' www.ampsstudio.com [Mon Oct 10 08:25:41 2022] [error] [client 213.202.223.95:0] AH01071: Got error 'PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179' www.ampsstudio.com [Mon Oct 10 08:25:41 2022] [error] [client 213.202.223.95:0] AH01071: Got error 'PHP message: PHP Warning: Cannot modify header information - headers already sent by (output started at /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-includes/functions.php:5275) in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/includes/sonaar-music/css/theme/custom-style.php on line 2' www.ampsstudio.com [Mon Oct 10 09:03:22 2022] [error] [client 66.249.66.71:0] AH01071: Got error 'PHP message: PHP Warning: Attempt to read property "ID" on null in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/archive-event.php on line 15PHP message: PHP Warning: Undefined array key 0 in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/includes/classes/iron_sonaar.class.php on line 212PHP message: PHP Warning: Trying to access array offset on value of type null in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/includes/classes/iron_sonaar.class.php on line 212PHP message: PHP Warning: Undefined array key 0 in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/includes/classes/iron_sonaar.class.php on line 214PHP message: PHP Warning: Trying to access array offset on value of type null in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/includes/classes/iron_sonaar.class.php on line 214' ampsstudio.com [Mon Oct 10 11:46:56 2022] [error] [client 20.211.161.70:0] AH01075: Error dispatching request to : (polling) webdisk.ampsstudio.com [Mon Oct 10 12:31:48 2022] [error] [client 51.105.26.73:0] [client 51.105.26.73] ModSecurity: Access denied with code 403 (phase 2). Match of "contains index.php" against "REQUEST_URI" required. [file "remote server"] [line "-1"] [id "570076"] [msg "Malware.Expert - Malware"] [hostname "webdisk.ampsstudio.com"] [uri "/wp-commentin.php"] [unique_id "Y0QCpHnAUrxx4sbsOrX90gAAABA"] webdisk.ampsstudio.com [Mon Oct 10 12:31:56 2022] [error] [client 51.105.26.73:0] [client 51.105.26.73] ModSecurity: Access denied with code 403 (phase 2). Match of "contains index.php" against "REQUEST_URI" required. [file "remote server"] [line "-1"] [id "570076"] [msg "Malware.Expert - Malware"] [hostname "webdisk.ampsstudio.com"] [uri "/wp-commentin.php"] [unique_id "Y0QCrBrNr7Dwuvt9X7sr3AAAAAk"] ampsstudio.com [Mon Oct 10 13:04:42 2022] [error] [client 41.216.188.218:0] [client 41.216.188.218] ModSecurity: Access denied with code 403 (phase 2). Pattern match "/wp-content/uploads/$" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430061"] [msg "Malware.Expert - Wordpress - Protect uploads diretory listing files"] [hostname "ampsstudio.com"] [uri "/wp-content/uploads/"] [unique_id "Y0QKWi3SUieEQyJUj39ILwAAAA0"] ampsstudio.com [Mon Oct 10 13:05:02 2022] [error] [client 41.216.188.218:0] AH01276: Cannot serve directory /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-includes/: No matching DirectoryIndex (index.php,index.html,index.htm) found, and server-generated directory index forbidden by Options directive ampsstudio.com [Mon Oct 10 13:05:40 2022] [error] [client 41.216.188.218:0] AH01276: Cannot serve directory /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-includes/css/: No matching DirectoryIndex (index.php,index.html,index.htm) found, and server-generated directory index forbidden by Options directive ampsstudio.com [Mon Oct 10 13:05:54 2022] [error] [client 41.216.188.218:0] AH01276: Cannot serve directory /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-includes/ID3/: No matching DirectoryIndex (index.php,index.html,index.htm) found, and server-generated directory index forbidden by Options directive ampsstudio.com [Mon Oct 10 13:06:18 2022] [error] [client 41.216.188.218:0] AH01276: Cannot serve directory /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-includes/IXR/: No matching DirectoryIndex (index.php,index.html,index.htm) found, and server-generated directory index forbidden by Options directive ampsstudio.com [Mon Oct 10 13:06:35 2022] [error] [client 41.216.188.218:0] AH01276: Cannot serve directory /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-includes/Requests/: No matching DirectoryIndex (index.php,index.html,index.htm) found, and server-generated directory index forbidden by Options directive ampsstudio.com [Mon Oct 10 13:06:50 2022] [error] [client 41.216.188.218:0] AH01276: Cannot serve directory /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-includes/SimplePie/: No matching DirectoryIndex (index.php,index.html,index.htm) found, and server-generated directory index forbidden by Options directive ampsstudio.com [Mon Oct 10 13:07:02 2022] [error] [client 41.216.188.218:0] AH01276: Cannot serve directory /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-includes/Text/: No matching DirectoryIndex (index.php,index.html,index.htm) found, and server-generated directory index forbidden by Options directive ampsstudio.com [Mon Oct 10 13:08:36 2022] [error] [client 41.216.188.218:0] AH01276: Cannot serve directory /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/mu-plugins/: No matching DirectoryIndex (index.php,index.html,index.htm) found, and server-generated directory index forbidden by Options directive ampsstudio.com [Mon Oct 10 13:08:53 2022] [error] [client 41.216.188.218:0] AH01276: Cannot serve directory /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-includes/Text/Diff/Renderer/: No matching DirectoryIndex (index.php,index.html,index.htm) found, and server-generated directory index forbidden by Options directive ampsstudio.com [Mon Oct 10 13:09:05 2022] [error] [client 41.216.188.218:0] AH01071: Got error 'PHP message: PHP Fatal error: Uncaught Error: Undefined constant "ABSPATH" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-includes/blocks/index.php:9\nStack trace:\n#0 {main}\n thrown in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-includes/blocks/index.php on line 9' ampsstudio.com [Mon Oct 10 13:09:18 2022] [error] [client 41.216.188.218:0] AH01276: Cannot serve directory /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-includes/certificates/: No matching DirectoryIndex (index.php,index.html,index.htm) found, and server-generated directory index forbidden by Options directive ampsstudio.com [Mon Oct 10 13:09:41 2022] [error] [client 41.216.188.218:0] AH01276: Cannot serve directory /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-includes/customize/: No matching DirectoryIndex (index.php,index.html,index.htm) found, and server-generated directory index forbidden by Options directive ampsstudio.com [Mon Oct 10 14:09:14 2022] [crit] [client 20.163.206.187:0] AH00529: /home/virtual/vps-aa3942/a/aede5353c4/public_html/.well-known/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/virtual/vps-aa3942/a/aede5353c4/public_html/.well-known/' is executable ampsstudio.com [Mon Oct 10 14:09:31 2022] [crit] [client 20.163.206.187:0] AH00529: /home/virtual/vps-aa3942/a/aede5353c4/public_html/.well-known/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/virtual/vps-aa3942/a/aede5353c4/public_html/.well-known/' is executable ampsstudio.com [Mon Oct 10 14:10:18 2022] [crit] [client 20.163.206.187:0] AH00529: /home/virtual/vps-aa3942/a/aede5353c4/public_html/.well-known/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/virtual/vps-aa3942/a/aede5353c4/public_html/.well-known/' is executable ampsstudio.com [Mon Oct 10 14:10:46 2022] [crit] [client 20.163.206.187:0] AH00529: /home/virtual/vps-aa3942/a/aede5353c4/public_html/.well-known/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/virtual/vps-aa3942/a/aede5353c4/public_html/.well-known/' is executable ampsstudio.com [Mon Oct 10 14:11:10 2022] [crit] [client 20.163.206.187:0] AH00529: /home/virtual/vps-aa3942/a/aede5353c4/public_html/.well-known/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/virtual/vps-aa3942/a/aede5353c4/public_html/.well-known/' is executable ampsstudio.com [Mon Oct 10 14:11:37 2022] [crit] [client 20.163.206.187:0] AH00529: /home/virtual/vps-aa3942/a/aede5353c4/public_html/.well-known/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/virtual/vps-aa3942/a/aede5353c4/public_html/.well-known/' is executable www.ampsstudio.com [Mon Oct 10 14:29:15 2022] [error] [client 84.17.43.164:0] AH01071: Got error 'PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179' www.ampsstudio.com [Mon Oct 10 14:29:15 2022] [error] [client 84.17.43.164:0] AH01071: Got error 'PHP message: PHP Warning: Cannot modify header information - headers already sent by (output started at /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-includes/functions.php:5275) in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/includes/sonaar-music/css/theme/custom-style.php on line 2' www.ampsstudio.com [Mon Oct 10 14:30:37 2022] [error] [client 13.66.163.197:0] AH01071: Got error 'PHP message: PHP Warning: Undefined array key "HTTP_USER_AGENT" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/bookly-responsive-appointment-booking-tool/frontend/modules/booking/ShortCode.php on line 66' ampsstudio.com [Mon Oct 10 15:15:44 2022] [error] [client 5.188.62.134:0] [client 5.188.62.134] ModSecurity: Access denied with code 403 (phase 1). Pattern match "\\\\.\\\\./\\\\.\\\\." at REQUEST_URI. [file "remote server"] [line "-1"] [id "430064"] [msg "Malware.Expert - request_uri: directory travel"] [hostname "ampsstudio.com"] [uri "/wp-content/themes/NativeChurch/download/download.php"] [unique_id "Y0QpEHUCv9KvzrFwX-zTVgAAAAY"] ampsstudio.com [Mon Oct 10 17:59:03 2022] [error] [client 51.105.26.73:0] [client 51.105.26.73] ModSecurity: Access denied with code 403 (phase 2). Match of "contains index.php" against "REQUEST_URI" required. [file "remote server"] [line "-1"] [id "570076"] [msg "Malware.Expert - Malware"] [hostname "ampsstudio.com"] [uri "/wp-commentin.php"] [unique_id "Y0RPV9OgXRVHONCUV4MjtgAAAAQ"] ampsstudio.com [Mon Oct 10 17:59:08 2022] [error] [client 51.105.26.73:0] [client 51.105.26.73] ModSecurity: Access denied with code 403 (phase 2). Match of "contains index.php" against "REQUEST_URI" required. [file "remote server"] [line "-1"] [id "570076"] [msg "Malware.Expert - Malware"] [hostname "ampsstudio.com"] [uri "/wp-commentin.php"] [unique_id "Y0RPXBrNr7Dwuvt9X7sskgAAAAk"] mail.ampsstudio.com [Mon Oct 10 18:28:12 2022] [error] [client 51.105.26.73:0] [client 51.105.26.73] ModSecurity: Access denied with code 403 (phase 2). Match of "contains index.php" against "REQUEST_URI" required. [file "remote server"] [line "-1"] [id "570076"] [msg "Malware.Expert - Malware"] [hostname "mail.ampsstudio.com"] [uri "/wp-commentin.php"] [unique_id "Y0RWLNOgXRVHONCUV4MjxQAAAAQ"] mail.ampsstudio.com [Mon Oct 10 18:28:15 2022] [error] [client 51.105.26.73:0] [client 51.105.26.73] ModSecurity: Access denied with code 403 (phase 2). Match of "contains index.php" against "REQUEST_URI" required. [file "remote server"] [line "-1"] [id "570076"] [msg "Malware.Expert - Malware"] [hostname "mail.ampsstudio.com"] [uri "/wp-commentin.php"] [unique_id "Y0RWL8-7ilWxjFGSX2yXoQAAAAo"] www.ampsstudio.com [Mon Oct 10 18:35:08 2022] [error] [client 194.26.192.186:0] AH01071: Got error 'PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179' www.ampsstudio.com [Mon Oct 10 18:35:08 2022] [error] [client 194.26.192.186:0] AH01071: Got error 'PHP message: PHP Warning: Cannot modify header information - headers already sent by (output started at /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-includes/functions.php:5275) in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/includes/sonaar-music/css/theme/custom-style.php on line 2' webmail.ampsstudio.com [Mon Oct 10 18:53:38 2022] [error] [client 51.105.26.73:0] [client 51.105.26.73] ModSecurity: Access denied with code 403 (phase 2). Match of "contains index.php" against "REQUEST_URI" required. [file "remote server"] [line "-1"] [id "570076"] [msg "Malware.Expert - Malware"] [hostname "webmail.ampsstudio.com"] [uri "/wp-commentin.php"] [unique_id "Y0RcIl_OIc5r6fLEd2xfOAAAAAE"] cpanel.ampsstudio.com [Mon Oct 10 19:55:22 2022] [error] [client 51.105.26.73:0] [client 51.105.26.73] ModSecurity: Access denied with code 403 (phase 2). Match of "contains index.php" against "REQUEST_URI" required. [file "remote server"] [line "-1"] [id "570076"] [msg "Malware.Expert - Malware"] [hostname "cpanel.ampsstudio.com"] [uri "/wp-commentin.php"] [unique_id "Y0RqmrmFyzogHnCc6_2wJwAAACI"] mail.ampsstudio.com [Mon Oct 10 21:27:45 2022] [error] [client 92.205.56.212:0] AH01276: Cannot serve directory /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-admin/css/: No matching DirectoryIndex (index.php,index.html,index.htm) found, and server-generated directory index forbidden by Options directive ampsstudio.com [Mon Oct 10 21:46:36 2022] [error] [client 41.216.188.48:0] AH01276: Cannot serve directory /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-admin/includes/: No matching DirectoryIndex (index.php,index.html,index.htm) found, and server-generated directory index forbidden by Options directive ampsstudio.com [Mon Oct 10 21:47:16 2022] [error] [client 41.216.188.48:0] AH01276: Cannot serve directory /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-includes/SimplePie/: No matching DirectoryIndex (index.php,index.html,index.htm) found, and server-generated directory index forbidden by Options directive ampsstudio.com [Mon Oct 10 21:47:32 2022] [error] [client 41.216.188.48:0] AH01276: Cannot serve directory /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-includes/customize/: No matching DirectoryIndex (index.php,index.html,index.htm) found, and server-generated directory index forbidden by Options directive ampsstudio.com [Mon Oct 10 21:47:42 2022] [error] [client 41.216.188.48:0] AH01276: Cannot serve directory /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-includes/Requests/: No matching DirectoryIndex (index.php,index.html,index.htm) found, and server-generated directory index forbidden by Options directive ampsstudio.com [Mon Oct 10 21:47:59 2022] [error] [client 41.216.188.48:0] AH01276: Cannot serve directory /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-includes/IXR/: No matching DirectoryIndex (index.php,index.html,index.htm) found, and server-generated directory index forbidden by Options directive ampsstudio.com [Mon Oct 10 21:48:18 2022] [error] [client 41.216.188.48:0] AH01276: Cannot serve directory /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-includes/ID3/: No matching DirectoryIndex (index.php,index.html,index.htm) found, and server-generated directory index forbidden by Options directive ampsstudio.com [Mon Oct 10 21:48:29 2022] [error] [client 41.216.188.48:0] AH01071: Got error 'PHP message: PHP Fatal error: Uncaught Error: Undefined constant "ABSPATH" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-includes/blocks/index.php:9\nStack trace:\n#0 {main}\n thrown in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-includes/blocks/index.php on line 9' ampsstudio.com [Mon Oct 10 21:48:39 2022] [error] [client 41.216.188.48:0] AH01276: Cannot serve directory /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-includes/rest-api/: No matching DirectoryIndex (index.php,index.html,index.htm) found, and server-generated directory index forbidden by Options directive ampsstudio.com [Mon Oct 10 21:48:49 2022] [error] [client 41.216.188.48:0] AH01276: Cannot serve directory /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-includes/images/: No matching DirectoryIndex (index.php,index.html,index.htm) found, and server-generated directory index forbidden by Options directive ampsstudio.com [Mon Oct 10 21:49:02 2022] [error] [client 41.216.188.48:0] AH01276: Cannot serve directory /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-includes/pomo/: No matching DirectoryIndex (index.php,index.html,index.htm) found, and server-generated directory index forbidden by Options directive ampsstudio.com [Mon Oct 10 22:37:23 2022] [error] [client 20.171.59.197:0] AH01276: Cannot serve directory /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-admin/css/: No matching DirectoryIndex (index.php,index.html,index.htm) found, and server-generated directory index forbidden by Options directive ampsstudio.com [Tue Oct 11 00:16:52 2022] [error] [client 185.83.144.103:0] [client 185.83.144.103] ModSecurity: Access denied with code 403 (phase 2). String match ".php.bak" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430068"] [msg "Malware.Expert - request_uri: .PHP backup files"] [hostname "ampsstudio.com"] [uri "/phpinfo.php.bak"] [unique_id "Y0Sn5JagosX52t98B43HiwAAABQ"] www.ampsstudio.com [Tue Oct 11 01:09:07 2022] [error] [client 37.139.53.40:0] AH01071: Got error 'PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179' www.ampsstudio.com [Tue Oct 11 01:09:07 2022] [error] [client 37.139.53.40:0] AH01071: Got error 'PHP message: PHP Warning: Cannot modify header information - headers already sent by (output started at /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-includes/functions.php:5275) in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/includes/sonaar-music/css/theme/custom-style.php on line 2' www.ampsstudio.com [Tue Oct 11 01:19:22 2022] [error] [client 41.216.188.48:0] AH01276: Cannot serve directory /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-admin/includes/: No matching DirectoryIndex (index.php,index.html,index.htm) found, and server-generated directory index forbidden by Options directive www.ampsstudio.com [Tue Oct 11 01:19:39 2022] [error] [client 41.216.188.48:0] AH01276: Cannot serve directory /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-includes/SimplePie/: No matching DirectoryIndex (index.php,index.html,index.htm) found, and server-generated directory index forbidden by Options directive www.ampsstudio.com [Tue Oct 11 01:19:57 2022] [error] [client 41.216.188.48:0] AH01276: Cannot serve directory /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-includes/customize/: No matching DirectoryIndex (index.php,index.html,index.htm) found, and server-generated directory index forbidden by Options directive www.ampsstudio.com [Tue Oct 11 01:20:13 2022] [error] [client 41.216.188.48:0] AH01276: Cannot serve directory /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-includes/Requests/: No matching DirectoryIndex (index.php,index.html,index.htm) found, and server-generated directory index forbidden by Options directive www.ampsstudio.com [Tue Oct 11 01:20:31 2022] [error] [client 41.216.188.48:0] AH01276: Cannot serve directory /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-includes/IXR/: No matching DirectoryIndex (index.php,index.html,index.htm) found, and server-generated directory index forbidden by Options directive www.ampsstudio.com [Tue Oct 11 01:20:51 2022] [error] [client 41.216.188.48:0] AH01276: Cannot serve directory /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-includes/ID3/: No matching DirectoryIndex (index.php,index.html,index.htm) found, and server-generated directory index forbidden by Options directive www.ampsstudio.com [Tue Oct 11 06:05:33 2022] [error] [client 95.84.42.234:0] AH01071: Got error 'PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179' www.ampsstudio.com [Tue Oct 11 06:05:33 2022] [error] [client 95.84.42.234:0] AH01071: Got error 'PHP message: PHP Warning: Cannot modify header information - headers already sent by (output started at /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-includes/functions.php:5275) in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/includes/sonaar-music/css/theme/custom-style.php on line 2' www.ampsstudio.com [Tue Oct 11 06:30:58 2022] [error] [client 185.220.102.248:0] AH01071: Got error 'PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179' www.ampsstudio.com [Tue Oct 11 06:30:58 2022] [error] [client 185.220.102.248:0] AH01071: Got error 'PHP message: PHP Warning: Cannot modify header information - headers already sent by (output started at /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-includes/functions.php:5275) in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/includes/sonaar-music/css/theme/custom-style.php on line 2' www.ampsstudio.com [Tue Oct 11 08:35:31 2022] [error] [client 37.139.53.20:0] AH01071: Got error 'PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179' www.ampsstudio.com [Tue Oct 11 08:35:31 2022] [error] [client 37.139.53.20:0] AH01071: Got error 'PHP message: PHP Warning: Cannot modify header information - headers already sent by (output started at /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-includes/functions.php:5275) in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/includes/sonaar-music/css/theme/custom-style.php on line 2' www.ampsstudio.com [Tue Oct 11 10:46:39 2022] [error] [client 5.227.24.26:0] AH01071: Got error 'PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179' www.ampsstudio.com [Tue Oct 11 10:46:39 2022] [error] [client 5.227.24.26:0] AH01071: Got error 'PHP message: PHP Warning: Cannot modify header information - headers already sent by (output started at /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-includes/functions.php:5275) in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/includes/sonaar-music/css/theme/custom-style.php on line 2' www.ampsstudio.com [Tue Oct 11 10:52:04 2022] [error] [client 23.81.50.52:0] AH01071: Got error 'PHP message: PHP Warning: Cannot modify header information - headers already sent by (output started at /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-includes/functions.php:5275) in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/includes/sonaar-music/css/theme/custom-style.php on line 2' www.ampsstudio.com [Tue Oct 11 11:38:08 2022] [crit] [client 66.249.93.40:0] AH00529: /home/virtual/vps-aa3942/a/aede5353c4/public_html/.well-known/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/virtual/vps-aa3942/a/aede5353c4/public_html/.well-known/' is executable www.ampsstudio.com [Tue Oct 11 11:41:04 2022] [error] [client 45.72.54.227:0] AH01071: Got error 'PHP message: PHP Warning: Cannot modify header information - headers already sent by (output started at /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-includes/functions.php:5275) in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/includes/sonaar-music/css/theme/custom-style.php on line 2' www.ampsstudio.com [Tue Oct 11 12:40:47 2022] [error] [client 95.79.88.211:0] AH01071: Got error 'PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179' www.ampsstudio.com [Tue Oct 11 12:40:47 2022] [error] [client 95.79.88.211:0] AH01071: Got error 'PHP message: PHP Warning: Cannot modify header information - headers already sent by (output started at /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-includes/functions.php:5275) in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/includes/sonaar-music/css/theme/custom-style.php on line 2' ampsstudio.com [Tue Oct 11 19:54:21 2022] [error] [client 41.216.188.218:0] [client 41.216.188.218] ModSecurity: Access denied with code 403 (phase 2). Pattern match "/ioptimization/.*\\\\.php\\\\?rchk" at REQUEST_URI. [file "remote server"] [line "-1"] [id "570039"] [msg "Malware.Expert - Wordpress malware plugin - ioptimization"] [hostname "ampsstudio.com"] [uri "/wp-content/plugins/ioptimization/IOptimize.php"] [unique_id "Y0W73YeduCTFfyCk9621XwAAAAk"] www.ampsstudio.com [Tue Oct 11 21:02:12 2022] [error] [client 181.214.206.57:0] AH01071: Got error 'PHP message: PHP Warning: Cannot modify header information - headers already sent by (output started at /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-includes/functions.php:5275) in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/includes/sonaar-music/css/theme/custom-style.php on line 2' www.ampsstudio.com [Tue Oct 11 23:40:48 2022] [error] [client 27.76.211.116:0] AH01071: Got error 'PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179' www.ampsstudio.com [Tue Oct 11 23:40:48 2022] [error] [client 27.76.211.116:0] AH01071: Got error 'PHP message: PHP Warning: Cannot modify header information - headers already sent by (output started at /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-includes/functions.php:5275) in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/includes/sonaar-music/css/theme/custom-style.php on line 2' ampsstudio.com [Wed Oct 12 00:22:31 2022] [error] [client 41.216.188.48:0] AH01276: Cannot serve directory /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-admin/includes/: No matching DirectoryIndex (index.php,index.html,index.htm) found, and server-generated directory index forbidden by Options directive www.ampsstudio.com [Wed Oct 12 01:24:13 2022] [error] [client 185.220.101.59:0] AH01071: Got error 'PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179' www.ampsstudio.com [Wed Oct 12 01:24:13 2022] [error] [client 185.220.101.59:0] AH01071: Got error 'PHP message: PHP Warning: Cannot modify header information - headers already sent by (output started at /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-includes/functions.php:5275) in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/includes/sonaar-music/css/theme/custom-style.php on line 2' www.ampsstudio.com [Wed Oct 12 02:35:50 2022] [error] [client 185.220.103.5:0] AH01071: Got error 'PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179' www.ampsstudio.com [Wed Oct 12 02:35:50 2022] [error] [client 185.220.103.5:0] AH01071: Got error 'PHP message: PHP Warning: Cannot modify header information - headers already sent by (output started at /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-includes/functions.php:5275) in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/includes/sonaar-music/css/theme/custom-style.php on line 2' www.ampsstudio.com [Wed Oct 12 04:54:29 2022] [error] [client 20.21.0.18:0] AH01071: Got error 'PHP message: PHP Warning: Undefined array key "HTTP_USER_AGENT" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/bookly-responsive-appointment-booking-tool/frontend/modules/booking/ShortCode.php on line 66' www.ampsstudio.com [Wed Oct 12 04:54:32 2022] [error] [client 20.21.0.18:0] AH01071: Got error 'PHP message: PHP Warning: Undefined array key "HTTP_USER_AGENT" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/bookly-responsive-appointment-booking-tool/frontend/modules/booking/ShortCode.php on line 66' www.ampsstudio.com [Wed Oct 12 04:54:36 2022] [error] [client 20.21.0.18:0] AH01071: Got error 'PHP message: PHP Warning: Undefined array key "HTTP_USER_AGENT" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/bookly-responsive-appointment-booking-tool/frontend/modules/booking/ShortCode.php on line 66' www.ampsstudio.com [Wed Oct 12 04:54:39 2022] [error] [client 20.21.0.18:0] AH01071: Got error 'PHP message: PHP Warning: Undefined array key "HTTP_USER_AGENT" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/bookly-responsive-appointment-booking-tool/frontend/modules/booking/ShortCode.php on line 66' www.ampsstudio.com [Wed Oct 12 04:54:42 2022] [error] [client 20.21.0.18:0] AH01071: Got error 'PHP message: PHP Warning: Undefined array key "HTTP_USER_AGENT" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/bookly-responsive-appointment-booking-tool/frontend/modules/booking/ShortCode.php on line 66' ampsstudio.com [Wed Oct 12 04:54:52 2022] [error] [client 20.21.0.18:0] AH01276: Cannot serve directory /home/virtual/vps-aa3942/a/aede5353c4/public_html/test/: No matching DirectoryIndex (index.php,index.html,index.htm) found, and server-generated directory index forbidden by Options directive www.ampsstudio.com [Wed Oct 12 04:54:56 2022] [error] [client 20.21.0.18:0] AH01071: Got error 'PHP message: PHP Warning: Undefined array key "HTTP_USER_AGENT" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/bookly-responsive-appointment-booking-tool/frontend/modules/booking/ShortCode.php on line 66' www.ampsstudio.com [Wed Oct 12 04:54:59 2022] [error] [client 20.21.0.18:0] AH01071: Got error 'PHP message: PHP Warning: Undefined array key "HTTP_USER_AGENT" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/bookly-responsive-appointment-booking-tool/frontend/modules/booking/ShortCode.php on line 66' www.ampsstudio.com [Wed Oct 12 04:55:03 2022] [error] [client 20.21.0.18:0] AH01071: Got error 'PHP message: PHP Warning: Undefined array key "HTTP_USER_AGENT" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/bookly-responsive-appointment-booking-tool/frontend/modules/booking/ShortCode.php on line 66' ampsstudio.com [Wed Oct 12 05:28:44 2022] [error] [client 20.21.0.18:0] [client 20.21.0.18] ModSecurity: Access denied with code 403 (phase 2). Match of "contains index.php" against "REQUEST_URI" required. [file "remote server"] [line "-1"] [id "570076"] [msg "Malware.Expert - Malware"] [hostname "ampsstudio.com"] [uri "/wp-plain.php"] [unique_id "Y0ZCfOfYMY58QXD6gQFqdwAAAAA"] www.ampsstudio.com [Wed Oct 12 05:28:53 2022] [error] [client 20.21.0.18:0] [client 20.21.0.18] ModSecurity: Access denied with code 403 (phase 2). String match "php.suspected" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430059"] [msg "Malware.Expert - request_uri: .PHP suspected files"] [hostname "www.ampsstudio.com"] [uri "/wp-content/plugins/apikey/apikey.php.suspected"] [unique_id "Y0ZChQSNN_X0xEwhi1Fn9gAAAAM"] www.ampsstudio.com [Wed Oct 12 05:28:54 2022] [error] [client 20.21.0.18:0] [client 20.21.0.18] ModSecurity: Access denied with code 403 (phase 2). String match "php.suspected" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430059"] [msg "Malware.Expert - request_uri: .PHP suspected files"] [hostname "www.ampsstudio.com"] [uri "/plugins/content/apismtp/apismtp.php.suspected"] [unique_id "Y0ZChpUvBQU8V6jWVEGCTQAAAAk"] ampsstudio.com [Wed Oct 12 06:27:27 2022] [error] [client 167.235.25.89:0] [client 167.235.25.89] ModSecurity: Access denied with code 403 (phase 2). String match "anonymousfox" at REQUEST_HEADERS:referer. [file "remote server"] [line "-1"] [id "425001"] [msg "Malware.Expert - Referer: anonymousfox.co"] [hostname "ampsstudio.com"] [uri "/wp-content/plugins/wpdiscuz/themes/default/style-rtl.css"] [unique_id "Y0ZQPufYMY58QXD6gQFqkAAAAAA"] www.ampsstudio.com [Wed Oct 12 06:59:15 2022] [error] [client 83.136.240.234:0] AH01071: Got error 'PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179' www.ampsstudio.com [Wed Oct 12 06:59:15 2022] [error] [client 83.136.240.234:0] AH01071: Got error 'PHP message: PHP Warning: Cannot modify header information - headers already sent by (output started at /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-includes/functions.php:5275) in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/includes/sonaar-music/css/theme/custom-style.php on line 2' www.ampsstudio.com [Wed Oct 12 07:03:56 2022] [error] [client 194.9.176.94:0] AH01071: Got error 'PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179' www.ampsstudio.com [Wed Oct 12 07:03:56 2022] [error] [client 194.9.176.94:0] AH01071: Got error 'PHP message: PHP Warning: Cannot modify header information - headers already sent by (output started at /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-includes/functions.php:5275) in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/includes/sonaar-music/css/theme/custom-style.php on line 2' www.ampsstudio.com [Wed Oct 12 07:41:01 2022] [error] [client 20.199.177.156:0] AH01071: Got error 'PHP message: PHP Warning: Undefined array key "HTTP_USER_AGENT" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/bookly-responsive-appointment-booking-tool/frontend/modules/booking/ShortCode.php on line 66' www.ampsstudio.com [Wed Oct 12 07:41:03 2022] [error] [client 20.199.177.156:0] AH01071: Got error 'PHP message: PHP Warning: Undefined array key "HTTP_USER_AGENT" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/bookly-responsive-appointment-booking-tool/frontend/modules/booking/ShortCode.php on line 66' www.ampsstudio.com [Wed Oct 12 07:41:05 2022] [error] [client 20.199.177.156:0] AH01071: Got error 'PHP message: PHP Warning: Undefined array key "HTTP_USER_AGENT" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/bookly-responsive-appointment-booking-tool/frontend/modules/booking/ShortCode.php on line 66' www.ampsstudio.com [Wed Oct 12 07:41:06 2022] [error] [client 20.199.177.156:0] AH01071: Got error 'PHP message: PHP Warning: Undefined array key "HTTP_USER_AGENT" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/bookly-responsive-appointment-booking-tool/frontend/modules/booking/ShortCode.php on line 66' www.ampsstudio.com [Wed Oct 12 07:41:08 2022] [error] [client 20.199.177.156:0] AH01071: Got error 'PHP message: PHP Warning: Undefined array key "HTTP_USER_AGENT" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/bookly-responsive-appointment-booking-tool/frontend/modules/booking/ShortCode.php on line 66' ampsstudio.com [Wed Oct 12 07:41:13 2022] [error] [client 20.199.177.156:0] AH01276: Cannot serve directory /home/virtual/vps-aa3942/a/aede5353c4/public_html/test/: No matching DirectoryIndex (index.php,index.html,index.htm) found, and server-generated directory index forbidden by Options directive www.ampsstudio.com [Wed Oct 12 07:41:15 2022] [error] [client 20.199.177.156:0] AH01071: Got error 'PHP message: PHP Warning: Undefined array key "HTTP_USER_AGENT" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/bookly-responsive-appointment-booking-tool/frontend/modules/booking/ShortCode.php on line 66' www.ampsstudio.com [Wed Oct 12 07:41:16 2022] [error] [client 20.199.177.156:0] AH01071: Got error 'PHP message: PHP Warning: Undefined array key "HTTP_USER_AGENT" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/bookly-responsive-appointment-booking-tool/frontend/modules/booking/ShortCode.php on line 66' www.ampsstudio.com [Wed Oct 12 07:41:18 2022] [error] [client 20.199.177.156:0] AH01071: Got error 'PHP message: PHP Warning: Undefined array key "HTTP_USER_AGENT" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/bookly-responsive-appointment-booking-tool/frontend/modules/booking/ShortCode.php on line 66' www.ampsstudio.com [Wed Oct 12 08:05:09 2022] [error] [client 37.146.244.105:0] AH01071: Got error 'PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179' www.ampsstudio.com [Wed Oct 12 08:05:09 2022] [error] [client 37.146.244.105:0] AH01071: Got error 'PHP message: PHP Warning: Cannot modify header information - headers already sent by (output started at /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-includes/functions.php:5275) in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/includes/sonaar-music/css/theme/custom-style.php on line 2' mail.ampsstudio.com [Wed Oct 12 08:16:09 2022] [error] [client 212.193.29.42:0] [client 212.193.29.42] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "mail.ampsstudio.com"] [uri "/.env"] [unique_id "Y0ZpuQ51W38Cb0nT-0HTkQAAAAg"] ampsstudio.com [Wed Oct 12 09:16:44 2022] [error] [client 5.188.62.134:0] [client 5.188.62.134] ModSecurity: Access denied with code 403 (phase 2). Pattern match "/wp-config\\\\.php" at QUERY_STRING. [file "remote server"] [line "-1"] [id "410018"] [msg "Malware.Expert - query_string: unwanted wordpress config access"] [hostname "ampsstudio.com"] [uri "/wp-content/force-download.php"] [unique_id "Y0Z37ASNN_X0xEwhi1FoRgAAAAM"] ampsstudio.com [Wed Oct 12 09:30:28 2022] [error] [client 20.199.177.156:0] [client 20.199.177.156] ModSecurity: Access denied with code 403 (phase 2). Match of "contains index.php" against "REQUEST_URI" required. [file "remote server"] [line "-1"] [id "570076"] [msg "Malware.Expert - Malware"] [hostname "ampsstudio.com"] [uri "/wp-plain.php"] [unique_id "Y0Z7JA51W38Cb0nT-0HTtgAAAAg"] www.ampsstudio.com [Wed Oct 12 09:30:32 2022] [error] [client 20.199.177.156:0] [client 20.199.177.156] ModSecurity: Access denied with code 403 (phase 2). String match "php.suspected" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430059"] [msg "Malware.Expert - request_uri: .PHP suspected files"] [hostname "www.ampsstudio.com"] [uri "/wp-content/plugins/apikey/apikey.php.suspected"] [unique_id "Y0Z7KA51W38Cb0nT-0HTtwAAAAg"] www.ampsstudio.com [Wed Oct 12 09:30:32 2022] [error] [client 20.199.177.156:0] [client 20.199.177.156] ModSecurity: Access denied with code 403 (phase 2). String match "php.suspected" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430059"] [msg "Malware.Expert - request_uri: .PHP suspected files"] [hostname "www.ampsstudio.com"] [uri "/plugins/content/apismtp/apismtp.php.suspected"] [unique_id "Y0Z7KFuAk4rMc1iEYYo8LwAAAAY"] www.ampsstudio.com [Wed Oct 12 10:15:16 2022] [error] [client 217.146.2.41:0] AH01071: Got error 'PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179' www.ampsstudio.com [Wed Oct 12 10:15:16 2022] [error] [client 217.146.2.41:0] AH01071: Got error 'PHP message: PHP Warning: Cannot modify header information - headers already sent by (output started at /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-includes/functions.php:5275) in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/includes/sonaar-music/css/theme/custom-style.php on line 2' ampsstudio.com [Wed Oct 12 11:04:52 2022] [error] [client 41.216.188.218:0] [client 41.216.188.218] ModSecurity: Access denied with code 403 (phase 2). Pattern match "/ioptimization/.*\\\\.php\\\\?rchk" at REQUEST_URI. [file "remote server"] [line "-1"] [id "570039"] [msg "Malware.Expert - Wordpress malware plugin - ioptimization"] [hostname "ampsstudio.com"] [uri "/wp-content/plugins/ioptimization/IOptimize.php"] [unique_id "Y0aRRNRR7tM_PssjTA2kPQAAAAE"] ampsstudio.com [Wed Oct 12 11:49:04 2022] [error] [client 217.160.159.251:0] AH01276: Cannot serve directory /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-admin/css/: No matching DirectoryIndex (index.php,index.html,index.htm) found, and server-generated directory index forbidden by Options directive www.ampsstudio.com [Wed Oct 12 12:37:03 2022] [error] [client 212.21.66.6:0] AH01071: Got error 'PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179' www.ampsstudio.com [Wed Oct 12 12:37:03 2022] [error] [client 212.21.66.6:0] AH01071: Got error 'PHP message: PHP Warning: Cannot modify header information - headers already sent by (output started at /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-includes/functions.php:5275) in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/includes/sonaar-music/css/theme/custom-style.php on line 2' www.ampsstudio.com [Wed Oct 12 14:02:13 2022] [error] [client 188.68.36.68:0] AH01071: Got error 'PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179' www.ampsstudio.com [Wed Oct 12 14:02:13 2022] [error] [client 188.68.36.68:0] AH01071: Got error 'PHP message: PHP Warning: Cannot modify header information - headers already sent by (output started at /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-includes/functions.php:5275) in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/includes/sonaar-music/css/theme/custom-style.php on line 2' www.ampsstudio.com [Wed Oct 12 15:15:20 2022] [error] [client 181.214.218.74:0] AH01071: Got error 'PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179' www.ampsstudio.com [Wed Oct 12 15:15:20 2022] [error] [client 181.214.218.74:0] AH01071: Got error 'PHP message: PHP Warning: Cannot modify header information - headers already sent by (output started at /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-includes/functions.php:5275) in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/includes/sonaar-music/css/theme/custom-style.php on line 2' www.ampsstudio.com [Wed Oct 12 20:35:01 2022] [error] [client 2a00:23c8:948e:5001:bd60:d9a6:8156:31c6:0] AH01071: Got error 'PHP message: PHP Warning: Cannot modify header information - headers already sent by (output started at /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-includes/functions.php:5275) in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/includes/sonaar-music/css/theme/custom-style.php on line 2' www.ampsstudio.com [Thu Oct 13 00:43:52 2022] [error] [client 5.227.24.26:0] AH01071: Got error 'PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179' www.ampsstudio.com [Thu Oct 13 00:43:52 2022] [error] [client 5.227.24.26:0] AH01071: Got error 'PHP message: PHP Warning: Cannot modify header information - headers already sent by (output started at /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-includes/functions.php:5275) in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/includes/sonaar-music/css/theme/custom-style.php on line 2' www.ampsstudio.com [Thu Oct 13 01:02:57 2022] [error] [client 176.124.220.43:0] AH01071: Got error 'PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179' www.ampsstudio.com [Thu Oct 13 01:02:57 2022] [error] [client 176.124.220.43:0] AH01071: Got error 'PHP message: PHP Warning: Cannot modify header information - headers already sent by (output started at /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-includes/functions.php:5275) in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/includes/sonaar-music/css/theme/custom-style.php on line 2' ampsstudio.com [Thu Oct 13 01:24:19 2022] [error] [client 103.191.51.28:0] [client 103.191.51.28] ModSecurity: Access denied with code 403 (phase 2). Match of "contains index.php" against "REQUEST_URI" required. [file "remote server"] [line "-1"] [id "570076"] [msg "Malware.Expert - Malware"] [hostname "ampsstudio.com"] [uri "/wp-admin/admin-ajax.php"] [unique_id "Y0das0Rkh1sieq5JC0mUcQAAAAA"] ampsstudio.com [Thu Oct 13 01:24:26 2022] [error] [client 103.191.51.28:0] [client 103.191.51.28] ModSecurity: Access denied with code 403 (phase 2). Pattern match "/\\\\..+\\\\.php" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430015"] [msg "Malware.Expert - request_uri: hidden .php execute"] [hostname "ampsstudio.com"] [uri "/wp-content/uploads/typehub/custom/kkutmhzy/.ph.php"] [unique_id "Y0dauhP6ovPQD5raSznc7gAAAAE"] ampsstudio.com [Thu Oct 13 01:24:29 2022] [error] [client 103.191.51.28:0] [client 103.191.51.28] ModSecurity: Access denied with code 403 (phase 2). Match of "contains index.php" against "REQUEST_URI" required. [file "remote server"] [line "-1"] [id "570076"] [msg "Malware.Expert - Malware"] [hostname "ampsstudio.com"] [uri "/wp-admin/admin-ajax.php"] [unique_id "Y0davRv1Sz-klMztikWuYQAAAAg"] ampsstudio.com [Thu Oct 13 01:24:32 2022] [error] [client 103.191.51.28:0] [client 103.191.51.28] ModSecurity: Access denied with code 403 (phase 2). Pattern match "/\\\\..+\\\\.php" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430015"] [msg "Malware.Expert - request_uri: hidden .php execute"] [hostname "ampsstudio.com"] [uri "/wp-content/uploads/typehub/custom/slrpxlvn/.ph.php"] [unique_id "Y0dawPhJ8PCVUYiJuSdYUQAAAAc"] www.ampsstudio.com [Thu Oct 13 03:23:12 2022] [error] [client 20.163.24.127:0] [client 20.163.24.127] ModSecurity: Access denied with code 403 (phase 2). Match of "contains index.php" against "REQUEST_URI" required. [file "remote server"] [line "-1"] [id "570076"] [msg "Malware.Expert - Malware"] [hostname "www.ampsstudio.com"] [uri "/wp-plain.php"] [unique_id "Y0d2kICyZ8JIWvECizC0swAAAAM"] www.ampsstudio.com [Thu Oct 13 03:23:17 2022] [error] [client 20.163.24.127:0] [client 20.163.24.127] ModSecurity: Access denied with code 403 (phase 2). String match "php.suspected" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430059"] [msg "Malware.Expert - request_uri: .PHP suspected files"] [hostname "www.ampsstudio.com"] [uri "/wp-content/plugins/apikey/apikey.php.suspected"] [unique_id "Y0d2lYCyZ8JIWvECizC0tAAAAAM"] www.ampsstudio.com [Thu Oct 13 03:23:17 2022] [error] [client 20.163.24.127:0] [client 20.163.24.127] ModSecurity: Access denied with code 403 (phase 2). String match "php.suspected" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430059"] [msg "Malware.Expert - request_uri: .PHP suspected files"] [hostname "www.ampsstudio.com"] [uri "/plugins/content/apismtp/apismtp.php.suspected"] [unique_id "Y0d2lWduxwwBurkz6-NciAAAAAY"] ampsstudio.com [Thu Oct 13 04:20:26 2022] [error] [client 54.198.106.101:0] [client 54.198.106.101] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "ampsstudio.com"] [uri "/.env"] [unique_id "Y0eD-tON8k9l2ObP5Ab0NgAAAAc"] www.ampsstudio.com [Thu Oct 13 04:44:50 2022] [error] [client 109.107.184.211:0] AH01071: Got error 'PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179' www.ampsstudio.com [Thu Oct 13 04:44:50 2022] [error] [client 109.107.184.211:0] AH01071: Got error 'PHP message: PHP Warning: Cannot modify header information - headers already sent by (output started at /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-includes/functions.php:5275) in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/includes/sonaar-music/css/theme/custom-style.php on line 2' www.ampsstudio.com [Thu Oct 13 06:27:07 2022] [error] [client 193.188.21.9:0] AH01071: Got error 'PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179' www.ampsstudio.com [Thu Oct 13 06:27:07 2022] [error] [client 193.188.21.9:0] AH01071: Got error 'PHP message: PHP Warning: Cannot modify header information - headers already sent by (output started at /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-includes/functions.php:5275) in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/includes/sonaar-music/css/theme/custom-style.php on line 2' ampsstudio.com [Thu Oct 13 08:04:32 2022] [error] [client 41.216.188.218:0] [client 41.216.188.218] ModSecurity: Access denied with code 403 (phase 2). Pattern match "/ioptimization/.*\\\\.php\\\\?rchk" at REQUEST_URI. [file "remote server"] [line "-1"] [id "570039"] [msg "Malware.Expert - Wordpress malware plugin - ioptimization"] [hostname "ampsstudio.com"] [uri "/wp-content/plugins/ioptimization/IOptimize.php"] [unique_id "Y0e4gOwVL7aajbqOhC_DeQAAAAQ"] www.ampsstudio.com [Thu Oct 13 08:25:53 2022] [error] [client 193.188.21.9:0] AH01071: Got error 'PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179' www.ampsstudio.com [Thu Oct 13 08:25:53 2022] [error] [client 193.188.21.9:0] AH01071: Got error 'PHP message: PHP Warning: Cannot modify header information - headers already sent by (output started at /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-includes/functions.php:5275) in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/includes/sonaar-music/css/theme/custom-style.php on line 2' www.ampsstudio.com [Thu Oct 13 13:36:46 2022] [error] [client 216.127.171.235:0] [client 216.127.171.235] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_HEADERS_NAMES. [file "remote server"] [line "-1"] [id "431000"] [msg "Malware.Expert - request_uri: CSS - prevent PHP files from executing"] [hostname "www.ampsstudio.com"] [uri "/css/index.php"] [unique_id "Y0gGXq-kynYZ3c8B7az50QAAAAA"] www.ampsstudio.com [Thu Oct 13 13:36:48 2022] [error] [client 216.127.171.235:0] [client 216.127.171.235] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_HEADERS_NAMES. [file "remote server"] [line "-1"] [id "431000"] [msg "Malware.Expert - request_uri: CSS - prevent PHP files from executing"] [hostname "www.ampsstudio.com"] [uri "/css/index.php"] [unique_id "Y0gGYOwVL7aajbqOhC_EtQAAAAQ"] www.ampsstudio.com [Thu Oct 13 13:36:49 2022] [error] [client 216.127.171.235:0] [client 216.127.171.235] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_HEADERS_NAMES. [file "remote server"] [line "-1"] [id "431000"] [msg "Malware.Expert - request_uri: CSS - prevent PHP files from executing"] [hostname "www.ampsstudio.com"] [uri "/css/contents.php"] [unique_id "Y0gGYWTJIxVZHLNrkAYq6wAAAAw"] www.ampsstudio.com [Thu Oct 13 13:36:51 2022] [error] [client 216.127.171.235:0] [client 216.127.171.235] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_HEADERS_NAMES. [file "remote server"] [line "-1"] [id "431000"] [msg "Malware.Expert - request_uri: CSS - prevent PHP files from executing"] [hostname "www.ampsstudio.com"] [uri "/css/contents.php"] [unique_id "Y0gGY5-b2mt9mXlx7xF9oQAAAAo"] www.ampsstudio.com [Thu Oct 13 13:36:57 2022] [error] [client 216.127.171.235:0] [client 216.127.171.235] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_HEADERS_NAMES. [file "remote server"] [line "-1"] [id "431000"] [msg "Malware.Expert - request_uri: CSS - prevent PHP files from executing"] [hostname "www.ampsstudio.com"] [uri "/css/load.php"] [unique_id "Y0gGaXdYtPGwQsQLocm4RQAAAAg"] www.ampsstudio.com [Thu Oct 13 13:36:59 2022] [error] [client 216.127.171.235:0] [client 216.127.171.235] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_HEADERS_NAMES. [file "remote server"] [line "-1"] [id "431000"] [msg "Malware.Expert - request_uri: CSS - prevent PHP files from executing"] [hostname "www.ampsstudio.com"] [uri "/css/load.php"] [unique_id "Y0gGa4yMMxK-0QDhPvlNhAAAAAE"] www.ampsstudio.com [Thu Oct 13 13:37:39 2022] [error] [client 216.127.171.235:0] [client 216.127.171.235] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_HEADERS_NAMES. [file "remote server"] [line "-1"] [id "431000"] [msg "Malware.Expert - request_uri: CSS - prevent PHP files from executing"] [hostname "www.ampsstudio.com"] [uri "/css/votes.php"] [unique_id "Y0gGk3dYtPGwQsQLocm4RwAAAAg"] www.ampsstudio.com [Thu Oct 13 13:37:40 2022] [error] [client 216.127.171.235:0] [client 216.127.171.235] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_HEADERS_NAMES. [file "remote server"] [line "-1"] [id "431000"] [msg "Malware.Expert - request_uri: CSS - prevent PHP files from executing"] [hostname "www.ampsstudio.com"] [uri "/css/votes.php"] [unique_id "Y0gGlGyoYEH_XW2pqWNzuAAAAAY"] www.ampsstudio.com [Thu Oct 13 13:37:52 2022] [error] [client 216.127.171.235:0] [client 216.127.171.235] ModSecurity: Access denied with code 403 (phase 2). String match "/wp-static.php" at REQUEST_URI. [file "remote server"] [line "-1"] [id "570085"] [msg "Malware.Expert - Wordpress - Malware"] [hostname "www.ampsstudio.com"] [uri "/wp-static.php"] [unique_id "Y0gGoBJqhWCrx04NL0mcBQAAAAI"] ampsstudio.com [Thu Oct 13 14:37:28 2022] [error] [client 20.110.232.0:0] [client 20.110.232.0] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "ampsstudio.com"] [uri "/.env"] [unique_id "Y0gUmHzPMrLG3xMzybXcIwAAAAk"] ampsstudio.com [Thu Oct 13 14:37:28 2022] [error] [client 20.110.232.0:0] [client 20.110.232.0] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "ampsstudio.com"] [uri "/.env.bak"] [unique_id "Y0gUmICyZ8JIWvECizC2ggAAAAM"] ampsstudio.com [Thu Oct 13 14:37:31 2022] [error] [client 20.110.232.0:0] [client 20.110.232.0] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "ampsstudio.com"] [uri "/laravel/.env"] [unique_id "Y0gUm7LONSrqzsa54f2H2wAAABA"] ampsstudio.com [Thu Oct 13 14:37:32 2022] [error] [client 20.110.232.0:0] [client 20.110.232.0] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "ampsstudio.com"] [uri "/local/.env"] [unique_id "Y0gUnGTJIxVZHLNrkAYrBgAAAAw"] ampsstudio.com [Thu Oct 13 14:37:33 2022] [error] [client 20.110.232.0:0] [client 20.110.232.0] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "ampsstudio.com"] [uri "/cgi-bin/.env"] [unique_id "Y0gUnWyoYEH_XW2pqWNzzgAAAAY"] ampsstudio.com [Thu Oct 13 14:37:33 2022] [error] [client 20.110.232.0:0] [client 20.110.232.0] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "ampsstudio.com"] [uri "/backend/.env"] [unique_id "Y0gUnZ-b2mt9mXlx7xF9vgAAAAo"] ampsstudio.com [Thu Oct 13 14:37:38 2022] [error] [client 20.110.232.0:0] [client 20.110.232.0] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "ampsstudio.com"] [uri "/protected/.env"] [unique_id "Y0gUohJqhWCrx04NL0mcHAAAAAI"] ampsstudio.com [Thu Oct 13 14:37:39 2022] [error] [client 20.110.232.0:0] [client 20.110.232.0] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "ampsstudio.com"] [uri "/database/.env"] [unique_id "Y0gUo34UhZronAVPnApqLAAAAAs"] ampsstudio.com [Thu Oct 13 14:37:44 2022] [error] [client 20.110.232.0:0] [client 20.110.232.0] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "ampsstudio.com"] [uri "/public/.env"] [unique_id "Y0gUqLLONSrqzsa54f2H3AAAABA"] ampsstudio.com [Thu Oct 13 14:37:44 2022] [error] [client 20.110.232.0:0] [client 20.110.232.0] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "ampsstudio.com"] [uri "/app/config/.env"] [unique_id "Y0gUqGTJIxVZHLNrkAYrBwAAAAw"] ampsstudio.com [Thu Oct 13 14:37:45 2022] [error] [client 20.110.232.0:0] [client 20.110.232.0] ModSecurity: Access denied with code 403 (phase 2). String match ".aws/credentials" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430069"] [msg "Malware.Expert - request_uri: AWS Credentials"] [hostname "ampsstudio.com"] [uri "/.aws/credentials"] [unique_id "Y0gUqWyoYEH_XW2pqWNzzwAAAAY"] www.ampsstudio.com [Thu Oct 13 14:55:41 2022] [error] [client 46.39.249.181:0] AH01071: Got error 'PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179' www.ampsstudio.com [Thu Oct 13 14:55:41 2022] [error] [client 46.39.249.181:0] AH01071: Got error 'PHP message: PHP Warning: Cannot modify header information - headers already sent by (output started at /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-includes/functions.php:5275) in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/includes/sonaar-music/css/theme/custom-style.php on line 2' www.ampsstudio.com [Thu Oct 13 17:09:03 2022] [error] [client 45.88.97.143:0] AH01071: Got error 'PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179' www.ampsstudio.com [Thu Oct 13 17:09:03 2022] [error] [client 45.88.97.143:0] AH01071: Got error 'PHP message: PHP Warning: Cannot modify header information - headers already sent by (output started at /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-includes/functions.php:5275) in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/includes/sonaar-music/css/theme/custom-style.php on line 2' ampsstudio.com [Thu Oct 13 18:50:09 2022] [error] [client 20.110.232.0:0] [client 20.110.232.0] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "ampsstudio.com"] [uri "/.env"] [unique_id "Y0hP0WTJIxVZHLNrkAYroAAAAAw"] ampsstudio.com [Thu Oct 13 18:50:09 2022] [error] [client 20.110.232.0:0] [client 20.110.232.0] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "ampsstudio.com"] [uri "/.env.bak"] [unique_id "Y0hP0WyoYEH_XW2pqWN0aAAAAAY"] ampsstudio.com [Thu Oct 13 18:50:11 2022] [error] [client 20.110.232.0:0] [client 20.110.232.0] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "ampsstudio.com"] [uri "/laravel/.env"] [unique_id "Y0hP0xJqhWCrx04NL0mcsQAAAAI"] ampsstudio.com [Thu Oct 13 18:50:12 2022] [error] [client 20.110.232.0:0] [client 20.110.232.0] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "ampsstudio.com"] [uri "/local/.env"] [unique_id "Y0hP1LLONSrqzsa54f2IeAAAABA"] ampsstudio.com [Thu Oct 13 18:50:12 2022] [error] [client 20.110.232.0:0] [client 20.110.232.0] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "ampsstudio.com"] [uri "/cgi-bin/.env"] [unique_id "Y0hP1OdlWy6KVpi_sgJUhgAAAAE"] ampsstudio.com [Thu Oct 13 18:50:12 2022] [error] [client 20.110.232.0:0] [client 20.110.232.0] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "ampsstudio.com"] [uri "/backend/.env"] [unique_id "Y0hP1GTJIxVZHLNrkAYroQAAAAw"] ampsstudio.com [Thu Oct 13 18:50:19 2022] [error] [client 20.110.232.0:0] [client 20.110.232.0] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "ampsstudio.com"] [uri "/protected/.env"] [unique_id "Y0hP26-kynYZ3c8B7az6hQAAAAA"] ampsstudio.com [Thu Oct 13 18:50:20 2022] [error] [client 20.110.232.0:0] [client 20.110.232.0] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "ampsstudio.com"] [uri "/database/.env"] [unique_id "Y0hP3GTJIxVZHLNrkAYrogAAAAw"] ampsstudio.com [Thu Oct 13 18:50:22 2022] [error] [client 20.110.232.0:0] [client 20.110.232.0] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "ampsstudio.com"] [uri "/public/.env"] [unique_id "Y0hP3p8YDPg1eMtqAu9OywAAAAM"] ampsstudio.com [Thu Oct 13 18:50:22 2022] [error] [client 20.110.232.0:0] [client 20.110.232.0] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "ampsstudio.com"] [uri "/app/config/.env"] [unique_id "Y0hP3myoYEH_XW2pqWN0agAAAAY"] ampsstudio.com [Thu Oct 13 18:50:22 2022] [error] [client 20.110.232.0:0] [client 20.110.232.0] ModSecurity: Access denied with code 403 (phase 2). String match ".aws/credentials" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430069"] [msg "Malware.Expert - request_uri: AWS Credentials"] [hostname "ampsstudio.com"] [uri "/.aws/credentials"] [unique_id "Y0hP3hJqhWCrx04NL0mcsgAAAAI"] www.ampsstudio.com [Thu Oct 13 19:02:40 2022] [error] [client 46.148.206.226:0] AH01071: Got error 'PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179' www.ampsstudio.com [Thu Oct 13 19:02:40 2022] [error] [client 46.148.206.226:0] AH01071: Got error 'PHP message: PHP Warning: Cannot modify header information - headers already sent by (output started at /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-includes/functions.php:5275) in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/includes/sonaar-music/css/theme/custom-style.php on line 2' www.ampsstudio.com [Thu Oct 13 19:52:32 2022] [error] [client 20.21.0.18:0] AH01071: Got error 'PHP message: PHP Warning: Undefined array key "HTTP_USER_AGENT" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/bookly-responsive-appointment-booking-tool/frontend/modules/booking/ShortCode.php on line 66' www.ampsstudio.com [Thu Oct 13 19:52:37 2022] [error] [client 20.21.0.18:0] AH01071: Got error 'PHP message: PHP Warning: Undefined array key "HTTP_USER_AGENT" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/bookly-responsive-appointment-booking-tool/frontend/modules/booking/ShortCode.php on line 66' www.ampsstudio.com [Thu Oct 13 19:52:41 2022] [error] [client 20.21.0.18:0] AH01071: Got error 'PHP message: PHP Warning: Undefined array key "HTTP_USER_AGENT" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/bookly-responsive-appointment-booking-tool/frontend/modules/booking/ShortCode.php on line 66' www.ampsstudio.com [Thu Oct 13 19:52:44 2022] [error] [client 20.21.0.18:0] AH01071: Got error 'PHP message: PHP Warning: Undefined array key "HTTP_USER_AGENT" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/bookly-responsive-appointment-booking-tool/frontend/modules/booking/ShortCode.php on line 66' www.ampsstudio.com [Thu Oct 13 19:52:46 2022] [error] [client 20.21.0.18:0] AH01071: Got error 'PHP message: PHP Warning: Undefined array key "HTTP_USER_AGENT" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/bookly-responsive-appointment-booking-tool/frontend/modules/booking/ShortCode.php on line 66' ampsstudio.com [Thu Oct 13 19:52:50 2022] [error] [client 20.21.0.18:0] AH01276: Cannot serve directory /home/virtual/vps-aa3942/a/aede5353c4/public_html/test/: No matching DirectoryIndex (index.php,index.html,index.htm) found, and server-generated directory index forbidden by Options directive www.ampsstudio.com [Thu Oct 13 19:52:52 2022] [error] [client 20.21.0.18:0] AH01071: Got error 'PHP message: PHP Warning: Undefined array key "HTTP_USER_AGENT" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/bookly-responsive-appointment-booking-tool/frontend/modules/booking/ShortCode.php on line 66' www.ampsstudio.com [Thu Oct 13 19:52:53 2022] [error] [client 20.21.0.18:0] AH01071: Got error 'PHP message: PHP Warning: Undefined array key "HTTP_USER_AGENT" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/bookly-responsive-appointment-booking-tool/frontend/modules/booking/ShortCode.php on line 66' www.ampsstudio.com [Thu Oct 13 19:52:56 2022] [error] [client 20.21.0.18:0] AH01071: Got error 'PHP message: PHP Warning: Undefined array key "HTTP_USER_AGENT" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/bookly-responsive-appointment-booking-tool/frontend/modules/booking/ShortCode.php on line 66' ampsstudio.com [Thu Oct 13 21:06:55 2022] [error] [client 20.21.0.18:0] [client 20.21.0.18] ModSecurity: Access denied with code 403 (phase 2). Match of "contains index.php" against "REQUEST_URI" required. [file "remote server"] [line "-1"] [id "570076"] [msg "Malware.Expert - Malware"] [hostname "ampsstudio.com"] [uri "/wp-plain.php"] [unique_id "Y0hv358YDPg1eMtqAu9PEwAAAAM"] www.ampsstudio.com [Thu Oct 13 21:07:03 2022] [error] [client 20.21.0.18:0] [client 20.21.0.18] ModSecurity: Access denied with code 403 (phase 2). String match "php.suspected" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430059"] [msg "Malware.Expert - request_uri: .PHP suspected files"] [hostname "www.ampsstudio.com"] [uri "/wp-content/plugins/apikey/apikey.php.suspected"] [unique_id "Y0hv52yoYEH_XW2pqWN0sQAAAAY"] www.ampsstudio.com [Thu Oct 13 21:07:03 2022] [error] [client 20.21.0.18:0] [client 20.21.0.18] ModSecurity: Access denied with code 403 (phase 2). String match "php.suspected" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430059"] [msg "Malware.Expert - request_uri: .PHP suspected files"] [hostname "www.ampsstudio.com"] [uri "/plugins/content/apismtp/apismtp.php.suspected"] [unique_id "Y0hv5-dlWy6KVpi_sgJU0AAAAAE"] www.ampsstudio.com [Thu Oct 13 22:00:52 2022] [error] [client 178.168.199.113:0] AH01071: Got error 'PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179' www.ampsstudio.com [Thu Oct 13 22:00:52 2022] [error] [client 178.168.199.113:0] AH01071: Got error 'PHP message: PHP Warning: Cannot modify header information - headers already sent by (output started at /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-includes/functions.php:5275) in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/includes/sonaar-music/css/theme/custom-style.php on line 2' www.ampsstudio.com [Thu Oct 13 22:51:12 2022] [crit] [client 66.249.93.40:0] AH00529: /home/virtual/vps-aa3942/a/aede5353c4/public_html/.well-known/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/virtual/vps-aa3942/a/aede5353c4/public_html/.well-known/' is executable ampsstudio.com [Thu Oct 13 22:55:30 2022] [error] [client 35.184.132.95:0] [client 35.184.132.95] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "ampsstudio.com"] [uri "/.env"] [unique_id "Y0iJUg1c4mz_qyhRyGpI-QAAAAQ"] www.ampsstudio.com [Thu Oct 13 23:08:08 2022] [error] [client 185.191.171.6:0] AH01071: Got error 'PHP message: PHP Warning: Attempt to read property "ID" on null in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/includes/classes/iron_sonaar_archive.class.php on line 59PHP message: PHP Warning: Undefined array key 0 in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/includes/classes/iron_sonaar.class.php on line 212PHP message: PHP Warning: Trying to access array offset on value of type null in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/includes/classes/iron_sonaar.class.php on line 212PHP message: PHP Warning: Undefined array key 0 in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/includes/classes/iron_sonaar.class.php on line 214PHP message: PHP Warning: Trying to access array offset on value of type null in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/includes/classes/iron_sonaar.class.php on line 214PHP message: PHP Warning: Attempt to read property "ID" on null in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/includes/classes/iron_sonaar_archive.class.php on line 166PHP message: PHP Warning: Undefined variable $my_post_array in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/archive-podcast.php on line 94PHP message: PHP Fatal error: Uncaught TypeError: implode(): Argument #1 ($pieces) must be of type array, string given in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/archive-podcast.php:94\nStack trace:\n#0 /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/archive-podcast.php(94): implode(',', NULL)\n#1 /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-includes/template-loader.php(106): include('/home/virtual/v...')\n#2 /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-blog-header.php(19): require_once('/home/virtual/v...')\n#3 /home/virtual/vps-aa3942/a/aede5353c4/public_html/index.php(17): require('/home/virtual/v...')\n#4 {main}\n thrown in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/archive-podcast.php on line 94' ampsstudio.com [Fri Oct 14 00:16:40 2022] [error] [client 195.178.120.231:0] [client 195.178.120.231] ModSecurity: Access denied with code 403 (phase 1). Pattern match "\\\\.\\\\./\\\\.\\\\." at REQUEST_URI. [file "remote server"] [line "-1"] [id "430064"] [msg "Malware.Expert - request_uri: directory travel"] [hostname "ampsstudio.com"] [uri "/wp-admin/admin-post.php"] [unique_id "Y0icWGTJIxVZHLNrkAYsPwAAAAw"] ampsstudio.com [Fri Oct 14 01:55:28 2022] [error] [client 178.128.96.238:0] [client 178.128.96.238] ModSecurity: Access denied with code 403 (phase 2). String match "/wp-admin/install.php" at REQUEST_URI. [file "remote server"] [line "-1"] [id "570074"] [msg "Malware.Expert - Malware"] [hostname "ampsstudio.com"] [uri "/wp-admin/install.php"] [unique_id "Y0izgE6ZStibrHJZnCtEOQAAAAU"] ampsstudio.com [Fri Oct 14 01:56:01 2022] [error] [client 178.128.96.238:0] [client 178.128.96.238] ModSecurity: Access denied with code 403 (phase 2). String match "/wp-admin/install.php" at REQUEST_URI. [file "remote server"] [line "-1"] [id "570074"] [msg "Malware.Expert - Malware"] [hostname "ampsstudio.com"] [uri "/wp/wp-admin/install.php"] [unique_id "Y0izoXzPMrLG3xMzybXdkQAAAAk"] ampsstudio.com [Fri Oct 14 01:57:52 2022] [error] [client 178.128.96.238:0] [client 178.128.96.238] ModSecurity: Access denied with code 403 (phase 2). String match "/wp-admin/install.php" at REQUEST_URI. [file "remote server"] [line "-1"] [id "570074"] [msg "Malware.Expert - Malware"] [hostname "ampsstudio.com"] [uri "/new/wp-admin/install.php"] [unique_id "Y0i0EHzPMrLG3xMzybXdkgAAAAk"] ampsstudio.com [Fri Oct 14 02:00:35 2022] [error] [client 178.128.96.238:0] [client 178.128.96.238] ModSecurity: Access denied with code 403 (phase 2). String match "/wp-admin/install.php" at REQUEST_URI. [file "remote server"] [line "-1"] [id "570074"] [msg "Malware.Expert - Malware"] [hostname "ampsstudio.com"] [uri "/old/wp-admin/install.php"] [unique_id "Y0i0s6-kynYZ3c8B7az7ZAAAAAA"] ampsstudio.com [Fri Oct 14 02:01:12 2022] [error] [client 178.128.96.238:0] [client 178.128.96.238] ModSecurity: Access denied with code 403 (phase 2). String match "/wp-admin/install.php" at REQUEST_URI. [file "remote server"] [line "-1"] [id "570074"] [msg "Malware.Expert - Malware"] [hostname "ampsstudio.com"] [uri "/wordpress/wp-admin/install.php"] [unique_id "Y0i02GyoYEH_XW2pqWN1QwAAAAY"] ampsstudio.com [Fri Oct 14 02:01:41 2022] [error] [client 178.128.96.238:0] [client 178.128.96.238] ModSecurity: Access denied with code 403 (phase 2). String match "/wp-admin/install.php" at REQUEST_URI. [file "remote server"] [line "-1"] [id "570074"] [msg "Malware.Expert - Malware"] [hostname "ampsstudio.com"] [uri "/test/wp-admin/install.php"] [unique_id "Y0i09VZv3jW3owZRv-iK-QAAAAg"] ampsstudio.com [Fri Oct 14 02:02:12 2022] [error] [client 178.128.96.238:0] [client 178.128.96.238] ModSecurity: Access denied with code 403 (phase 2). String match "/wp-admin/install.php" at REQUEST_URI. [file "remote server"] [line "-1"] [id "570074"] [msg "Malware.Expert - Malware"] [hostname "ampsstudio.com"] [uri "/blog/wp-admin/install.php"] [unique_id "Y0i1FHzPMrLG3xMzybXdlAAAAAk"] ampsstudio.com [Fri Oct 14 02:02:39 2022] [error] [client 178.128.96.238:0] [client 178.128.96.238] ModSecurity: Access denied with code 403 (phase 2). String match "/wp-admin/install.php" at REQUEST_URI. [file "remote server"] [line "-1"] [id "570074"] [msg "Malware.Expert - Malware"] [hostname "ampsstudio.com"] [uri "/cms/wp-admin/install.php"] [unique_id "Y0i1L-xw52wGUOlARBWnTgAAAAI"] ampsstudio.com [Fri Oct 14 02:03:07 2022] [error] [client 178.128.96.238:0] [client 178.128.96.238] ModSecurity: Access denied with code 403 (phase 2). String match "/wp-admin/install.php" at REQUEST_URI. [file "remote server"] [line "-1"] [id "570074"] [msg "Malware.Expert - Malware"] [hostname "ampsstudio.com"] [uri "/web/wp-admin/install.php"] [unique_id "Y0i1Sw1c4mz_qyhRyGpJWwAAAAQ"] ampsstudio.com [Fri Oct 14 02:03:37 2022] [error] [client 178.128.96.238:0] [client 178.128.96.238] ModSecurity: Access denied with code 403 (phase 2). String match "/wp-admin/install.php" at REQUEST_URI. [file "remote server"] [line "-1"] [id "570074"] [msg "Malware.Expert - Malware"] [hostname "ampsstudio.com"] [uri "/backup/wp-admin/install.php"] [unique_id "Y0i1aVZv3jW3owZRv-iK-gAAAAg"] ampsstudio.com [Fri Oct 14 02:04:11 2022] [error] [client 178.128.96.238:0] [client 178.128.96.238] ModSecurity: Access denied with code 403 (phase 2). String match "/wp-admin/install.php" at REQUEST_URI. [file "remote server"] [line "-1"] [id "570074"] [msg "Malware.Expert - Malware"] [hostname "ampsstudio.com"] [uri "/site/wp-admin/install.php"] [unique_id "Y0i1i6-kynYZ3c8B7az7ZgAAAAA"] ampsstudio.com [Fri Oct 14 02:04:38 2022] [error] [client 178.128.96.238:0] [client 178.128.96.238] ModSecurity: Access denied with code 403 (phase 2). String match "/wp-admin/install.php" at REQUEST_URI. [file "remote server"] [line "-1"] [id "570074"] [msg "Malware.Expert - Malware"] [hostname "ampsstudio.com"] [uri "/oldsite/wp-admin/install.php"] [unique_id "Y0i1pp8YDPg1eMtqAu9PoQAAAAM"] www.ampsstudio.com [Fri Oct 14 05:27:38 2022] [error] [client 5.253.204.150:0] AH01071: Got error 'PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179' www.ampsstudio.com [Fri Oct 14 05:27:38 2022] [error] [client 5.253.204.150:0] AH01071: Got error 'PHP message: PHP Warning: Cannot modify header information - headers already sent by (output started at /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-includes/functions.php:5275) in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/includes/sonaar-music/css/theme/custom-style.php on line 2' ampsstudio.com [Fri Oct 14 07:05:57 2022] [error] [client 41.216.188.48:0] [client 41.216.188.48] ModSecurity: Access denied with code 403 (phase 2). Pattern match "/ioptimization/.*\\\\.php\\\\?rchk" at REQUEST_URI. [file "remote server"] [line "-1"] [id "570039"] [msg "Malware.Expert - Wordpress malware plugin - ioptimization"] [hostname "ampsstudio.com"] [uri "/wp-content/plugins/ioptimization/IOptimize.php"] [unique_id "Y0j8Rd8ZvraeKnoEhe53EwAAAAc"] cpanel.ampsstudio.com [Fri Oct 14 08:51:44 2022] [error] [client 4.231.217.110:0] [client 4.231.217.110] ModSecurity: Access denied with code 403 (phase 2). Match of "contains index.php" against "REQUEST_URI" required. [file "remote server"] [line "-1"] [id "570076"] [msg "Malware.Expert - Malware"] [hostname "cpanel.ampsstudio.com"] [uri "/wp-commentin.php"] [unique_id "Y0kVEBdFEr5Rr3Q6NKpv0QAAAAg"] cpanel.ampsstudio.com [Fri Oct 14 08:52:00 2022] [error] [client 4.231.217.110:0] [client 4.231.217.110] ModSecurity: Access denied with code 403 (phase 2). Match of "contains index.php" against "REQUEST_URI" required. [file "remote server"] [line "-1"] [id "570076"] [msg "Malware.Expert - Malware"] [hostname "cpanel.ampsstudio.com"] [uri "/wp-commentin.php"] [unique_id "Y0kVICT7UzFIQCTabXiOQgAAAAI"] ampsstudio.com [Fri Oct 14 09:38:13 2022] [error] [client 143.244.37.7:0] [client 143.244.37.7] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "ampsstudio.com"] [uri "/.env"] [unique_id "Y0kf9RdFEr5Rr3Q6NKpv8wAAAAg"] ampsstudio.com [Fri Oct 14 09:45:20 2022] [error] [client 41.216.188.48:0] [client 41.216.188.48] ModSecurity: Access denied with code 403 (phase 2). Pattern match "/ioptimization/.*\\\\.php\\\\?rchk" at REQUEST_URI. [file "remote server"] [line "-1"] [id "570039"] [msg "Malware.Expert - Wordpress malware plugin - ioptimization"] [hostname "ampsstudio.com"] [uri "/wp-content/plugins/ioptimization/IOptimize.php"] [unique_id "Y0khoJdywe5l2UV6CZUImAAAAAQ"] www.ampsstudio.com [Fri Oct 14 10:24:06 2022] [crit] [client 66.249.92.138:0] AH00529: /home/virtual/vps-aa3942/a/aede5353c4/public_html/.well-known/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/virtual/vps-aa3942/a/aede5353c4/public_html/.well-known/' is executable www.ampsstudio.com [Fri Oct 14 10:51:15 2022] [crit] [client 66.249.93.42:0] AH00529: /home/virtual/vps-aa3942/a/aede5353c4/public_html/.well-known/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/virtual/vps-aa3942/a/aede5353c4/public_html/.well-known/' is executable ampsstudio.com [Fri Oct 14 11:13:57 2022] [error] [client 185.81.157.43:0] [client 185.81.157.43] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "ampsstudio.com"] [uri "/.env"] [unique_id "Y0k2ZfdzCEtdU1KkuXLyFwAAAAc"] ampsstudio.com [Fri Oct 14 11:14:16 2022] [error] [client 185.81.157.43:0] [client 185.81.157.43] ModSecurity: Access denied with code 403 (phase 2). String match "/Util/PHP/eval-stdin.php" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430046"] [msg "Malware.Expert - request_uri: CVE-2017-9841"] [hostname "ampsstudio.com"] [uri "/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php"] [unique_id "Y0k2ePqWO7nKzuL_LF8EjQAAABA"] www.ampsstudio.com [Fri Oct 14 11:52:19 2022] [crit] [client 66.249.93.44:0] AH00529: /home/virtual/vps-aa3942/a/aede5353c4/public_html/.well-known/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/virtual/vps-aa3942/a/aede5353c4/public_html/.well-known/' is executable www.ampsstudio.com [Fri Oct 14 11:52:59 2022] [crit] [client 66.249.93.44:0] AH00529: /home/virtual/vps-aa3942/a/aede5353c4/public_html/.well-known/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/virtual/vps-aa3942/a/aede5353c4/public_html/.well-known/' is executable www.ampsstudio.com [Fri Oct 14 13:15:29 2022] [crit] [client 66.249.93.40:0] AH00529: /home/virtual/vps-aa3942/a/aede5353c4/public_html/.well-known/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/virtual/vps-aa3942/a/aede5353c4/public_html/.well-known/' is executable webmail.ampsstudio.com [Fri Oct 14 13:40:56 2022] [error] [client 212.193.29.42:0] [client 212.193.29.42] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "webmail.ampsstudio.com"] [uri "/.env"] [unique_id "Y0lY2Evcy30LkYyk0xyNswAAAA8"] www.ampsstudio.com [Fri Oct 14 13:54:13 2022] [error] [client 178.184.234.72:0] AH01071: Got error 'PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179' www.ampsstudio.com [Fri Oct 14 13:54:13 2022] [error] [client 178.184.234.72:0] AH01071: Got error 'PHP message: PHP Warning: Cannot modify header information - headers already sent by (output started at /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-includes/functions.php:5275) in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/includes/sonaar-music/css/theme/custom-style.php on line 2' mail.ampsstudio.com [Fri Oct 14 14:58:54 2022] [error] [client 185.81.157.43:0] [client 185.81.157.43] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "mail.ampsstudio.com"] [uri "/.env"] [unique_id "Y0lrHtdxvPfMeWTEk_MadQAAAAU"] mail.ampsstudio.com [Fri Oct 14 14:59:27 2022] [error] [client 185.81.157.43:0] [client 185.81.157.43] ModSecurity: Access denied with code 403 (phase 2). String match "/Util/PHP/eval-stdin.php" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430046"] [msg "Malware.Expert - request_uri: CVE-2017-9841"] [hostname "mail.ampsstudio.com"] [uri "/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php"] [unique_id "Y0lrP_jS7SAaCEy8SzMkswAAAAo"] webdisk.ampsstudio.com [Fri Oct 14 16:44:29 2022] [error] [client 212.193.29.42:0] [client 212.193.29.42] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "webdisk.ampsstudio.com"] [uri "/.env"] [unique_id "Y0mD3SDaVILXMZf7zIw-aQAAABI"] www.ampsstudio.com [Fri Oct 14 17:34:58 2022] [error] [client 185.101.200.34:0] AH01071: Got error 'PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179' www.ampsstudio.com [Fri Oct 14 17:34:58 2022] [error] [client 185.101.200.34:0] AH01071: Got error 'PHP message: PHP Warning: Cannot modify header information - headers already sent by (output started at /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-includes/functions.php:5275) in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/includes/sonaar-music/css/theme/custom-style.php on line 2' webdisk.ampsstudio.com [Fri Oct 14 18:52:11 2022] [error] [client 4.231.217.110:0] [client 4.231.217.110] ModSecurity: Access denied with code 403 (phase 2). Match of "contains index.php" against "REQUEST_URI" required. [file "remote server"] [line "-1"] [id "570076"] [msg "Malware.Expert - Malware"] [hostname "webdisk.ampsstudio.com"] [uri "/wp-commentin.php"] [unique_id "Y0mhy8hmWQ-2wpvT8EYDYAAAAAU"] webdisk.ampsstudio.com [Fri Oct 14 18:52:21 2022] [error] [client 4.231.217.110:0] [client 4.231.217.110] ModSecurity: Access denied with code 403 (phase 2). Match of "contains index.php" against "REQUEST_URI" required. [file "remote server"] [line "-1"] [id "570076"] [msg "Malware.Expert - Malware"] [hostname "webdisk.ampsstudio.com"] [uri "/wp-commentin.php"] [unique_id "Y0mh1emt2p8rWGPxxf9V0wAAAAQ"] ampsstudio.com [Fri Oct 14 18:56:46 2022] [error] [client 3.144.34.206:0] [client 3.144.34.206] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "ampsstudio.com"] [uri "/.env"] [unique_id "Y0mi3uijsnNDKKFnS8RnDQAAAAk"] ampsstudio.com [Fri Oct 14 18:56:51 2022] [error] [client 3.144.34.206:0] [client 3.144.34.206] ModSecurity: Access denied with code 403 (phase 2). String match "/Util/PHP/eval-stdin.php" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430046"] [msg "Malware.Expert - request_uri: CVE-2017-9841"] [hostname "ampsstudio.com"] [uri "/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php"] [unique_id "Y0mi48hmWQ-2wpvT8EYDYQAAAAU"] www.ampsstudio.com [Fri Oct 14 19:39:56 2022] [error] [client 193.35.48.118:0] AH01071: Got error 'PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179' www.ampsstudio.com [Fri Oct 14 19:39:56 2022] [error] [client 193.35.48.118:0] AH01071: Got error 'PHP message: PHP Warning: Cannot modify header information - headers already sent by (output started at /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-includes/functions.php:5275) in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/includes/sonaar-music/css/theme/custom-style.php on line 2' mail.ampsstudio.com [Fri Oct 14 20:11:59 2022] [error] [client 3.144.34.206:0] [client 3.144.34.206] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "mail.ampsstudio.com"] [uri "/.env"] [unique_id "Y0m0f94kFb2ax-SmLJB2UQAAAAc"] mail.ampsstudio.com [Fri Oct 14 20:12:06 2022] [error] [client 3.144.34.206:0] [client 3.144.34.206] ModSecurity: Access denied with code 403 (phase 2). String match "/Util/PHP/eval-stdin.php" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430046"] [msg "Malware.Expert - request_uri: CVE-2017-9841"] [hostname "mail.ampsstudio.com"] [uri "/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php"] [unique_id "Y0m0hicVbXha1fMyL4e5IAAAAAo"] ampsstudio.com [Fri Oct 14 20:39:00 2022] [error] [client 4.231.217.110:0] [client 4.231.217.110] ModSecurity: Access denied with code 403 (phase 2). Match of "contains index.php" against "REQUEST_URI" required. [file "remote server"] [line "-1"] [id "570076"] [msg "Malware.Expert - Malware"] [hostname "ampsstudio.com"] [uri "/wp-commentin.php"] [unique_id "Y0m61H_pvauECbrLptcthwAAAA8"] ampsstudio.com [Fri Oct 14 20:39:17 2022] [error] [client 4.231.217.110:0] [client 4.231.217.110] ModSecurity: Access denied with code 403 (phase 2). Match of "contains index.php" against "REQUEST_URI" required. [file "remote server"] [line "-1"] [id "570076"] [msg "Malware.Expert - Malware"] [hostname "ampsstudio.com"] [uri "/wp-commentin.php"] [unique_id "Y0m65SDaVILXMZf7zIw-0gAAABI"] webmail.ampsstudio.com [Fri Oct 14 22:07:33 2022] [error] [client 4.231.217.110:0] [client 4.231.217.110] ModSecurity: Access denied with code 403 (phase 2). Match of "contains index.php" against "REQUEST_URI" required. [file "remote server"] [line "-1"] [id "570076"] [msg "Malware.Expert - Malware"] [hostname "webmail.ampsstudio.com"] [uri "/wp-commentin.php"] [unique_id "Y0nPleED2EG9CoGcNyYEsQAAAAo"] webmail.ampsstudio.com [Fri Oct 14 22:07:40 2022] [error] [client 4.231.217.110:0] [client 4.231.217.110] ModSecurity: Access denied with code 403 (phase 2). Match of "contains index.php" against "REQUEST_URI" required. [file "remote server"] [line "-1"] [id "570076"] [msg "Malware.Expert - Malware"] [hostname "webmail.ampsstudio.com"] [uri "/wp-commentin.php"] [unique_id "Y0nPnP_6rZ9TYv_GiJT0sAAAAAI"] cpanel.ampsstudio.com [Fri Oct 14 22:31:09 2022] [error] [client 212.193.29.42:0] [client 212.193.29.42] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "cpanel.ampsstudio.com"] [uri "/.env"] [unique_id "Y0nVHSDaVILXMZf7zIw_AQAAABI"] webmail.ampsstudio.com [Fri Oct 14 22:55:21 2022] [error] [client 3.144.34.206:0] [client 3.144.34.206] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "webmail.ampsstudio.com"] [uri "/.env"] [unique_id "Y0naydZgCtrdDf_7UpjaPgAAAAY"] webmail.ampsstudio.com [Fri Oct 14 22:55:24 2022] [error] [client 3.144.34.206:0] [client 3.144.34.206] ModSecurity: Access denied with code 403 (phase 2). String match "/Util/PHP/eval-stdin.php" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430046"] [msg "Malware.Expert - request_uri: CVE-2017-9841"] [hostname "webmail.ampsstudio.com"] [uri "/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php"] [unique_id "Y0nazCDaVILXMZf7zIw_BgAAABI"] webdisk.ampsstudio.com [Fri Oct 14 23:17:48 2022] [error] [client 3.144.34.206:0] [client 3.144.34.206] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "webdisk.ampsstudio.com"] [uri "/.env"] [unique_id "Y0ngDNZgCtrdDf_7UpjaRwAAAAY"] webdisk.ampsstudio.com [Fri Oct 14 23:17:51 2022] [error] [client 3.144.34.206:0] [client 3.144.34.206] ModSecurity: Access denied with code 403 (phase 2). String match "/Util/PHP/eval-stdin.php" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430046"] [msg "Malware.Expert - request_uri: CVE-2017-9841"] [hostname "webdisk.ampsstudio.com"] [uri "/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php"] [unique_id "Y0ngD-ED2EG9CoGcNyYExAAAAAo"] www.ampsstudio.com [Sat Oct 15 01:16:26 2022] [error] [client 178.45.179.163:0] AH01071: Got error 'PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179' www.ampsstudio.com [Sat Oct 15 01:16:26 2022] [error] [client 178.45.179.163:0] AH01071: Got error 'PHP message: PHP Warning: Cannot modify header information - headers already sent by (output started at /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-includes/functions.php:5275) in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/includes/sonaar-music/css/theme/custom-style.php on line 2' www.ampsstudio.com [Sat Oct 15 02:27:32 2022] [error] [client 77.35.191.79:0] AH01071: Got error 'PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179' www.ampsstudio.com [Sat Oct 15 02:27:32 2022] [error] [client 77.35.191.79:0] AH01071: Got error 'PHP message: PHP Warning: Cannot modify header information - headers already sent by (output started at /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-includes/functions.php:5275) in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/includes/sonaar-music/css/theme/custom-style.php on line 2' www.ampsstudio.com [Sat Oct 15 03:07:56 2022] [error] [client 193.188.22.181:0] AH01071: Got error 'PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179' www.ampsstudio.com [Sat Oct 15 03:07:56 2022] [error] [client 193.188.22.181:0] AH01071: Got error 'PHP message: PHP Warning: Cannot modify header information - headers already sent by (output started at /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-includes/functions.php:5275) in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/includes/sonaar-music/css/theme/custom-style.php on line 2' www.ampsstudio.com [Sat Oct 15 03:29:28 2022] [error] [client 172.105.119.71:0] [client 172.105.119.71] ModSecurity: Access denied with code 403 (phase 2). Match of "contains index.php" against "REQUEST_URI" required. [file "remote server"] [line "-1"] [id "570076"] [msg "Malware.Expert - Malware"] [hostname "www.ampsstudio.com"] [uri "/wp-plain.php"] [unique_id "Y0obCNh14a5VM_ry7vaNMwAAAAA"] www.ampsstudio.com [Sat Oct 15 03:29:33 2022] [error] [client 172.105.119.71:0] [client 172.105.119.71] ModSecurity: Access denied with code 403 (phase 2). String match "php.suspected" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430059"] [msg "Malware.Expert - request_uri: .PHP suspected files"] [hostname "www.ampsstudio.com"] [uri "/wp-content/plugins/apikey/apikey.php.suspected"] [unique_id "Y0obDSkCogp-hDvzbTTzcwAAAAM"] www.ampsstudio.com [Sat Oct 15 03:29:34 2022] [error] [client 172.105.119.71:0] [client 172.105.119.71] ModSecurity: Access denied with code 403 (phase 2). String match "php.suspected" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430059"] [msg "Malware.Expert - request_uri: .PHP suspected files"] [hostname "www.ampsstudio.com"] [uri "/plugins/content/apismtp/apismtp.php.suspected"] [unique_id "Y0obDmD2-YMrU4HxCeyRmQAAAAE"] ampsstudio.com [Sat Oct 15 04:17:17 2022] [error] [client 20.94.58.51:0] [client 20.94.58.51] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "ampsstudio.com"] [uri "/.env"] [unique_id "Y0omPUlTQJGOxY-P0ezIbQAAAAU"] www.ampsstudio.com [Sat Oct 15 04:27:26 2022] [error] [client 185.220.103.4:0] AH01071: Got error 'PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179' www.ampsstudio.com [Sat Oct 15 04:27:26 2022] [error] [client 185.220.103.4:0] AH01071: Got error 'PHP message: PHP Warning: Cannot modify header information - headers already sent by (output started at /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-includes/functions.php:5275) in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/includes/sonaar-music/css/theme/custom-style.php on line 2' www.ampsstudio.com [Sat Oct 15 04:29:50 2022] [error] [client 49.204.161.178:0] AH01071: Got error 'PHP message: PHP Warning: Cannot modify header information - headers already sent by (output started at /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-includes/functions.php:5275) in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/includes/sonaar-music/css/theme/custom-style.php on line 2' ampsstudio.com [Sat Oct 15 04:57:08 2022] [error] [client 41.216.188.48:0] [client 41.216.188.48] ModSecurity: Access denied with code 403 (phase 2). Pattern match "/ioptimization/.*\\\\.php\\\\?rchk" at REQUEST_URI. [file "remote server"] [line "-1"] [id "570039"] [msg "Malware.Expert - Wordpress malware plugin - ioptimization"] [hostname "ampsstudio.com"] [uri "/wp-content/plugins/ioptimization/IOptimize.php"] [unique_id "Y0ovlCkCogp-hDvzbTTzrAAAAAM"] webmail.ampsstudio.com [Sat Oct 15 06:16:18 2022] [error] [client 20.94.58.51:0] [client 20.94.58.51] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "webmail.ampsstudio.com"] [uri "/.env"] [unique_id "Y0pCIhwS6F4VdM2avi4_fwAAAAY"] webdisk.ampsstudio.com [Sat Oct 15 06:23:35 2022] [error] [client 185.81.157.43:0] [client 185.81.157.43] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "webdisk.ampsstudio.com"] [uri "/.env"] [unique_id "Y0pD10lTQJGOxY-P0ezInAAAAAU"] webdisk.ampsstudio.com [Sat Oct 15 06:23:54 2022] [error] [client 185.81.157.43:0] [client 185.81.157.43] ModSecurity: Access denied with code 403 (phase 2). String match "/Util/PHP/eval-stdin.php" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430046"] [msg "Malware.Expert - request_uri: CVE-2017-9841"] [hostname "webdisk.ampsstudio.com"] [uri "/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php"] [unique_id "Y0pD6mD2-YMrU4HxCeyR4wAAAAE"] www.ampsstudio.com [Sat Oct 15 06:48:15 2022] [crit] [client 66.240.236.119:0] AH00529: /home/virtual/vps-aa3942/a/aede5353c4/public_html/.well-known/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/virtual/vps-aa3942/a/aede5353c4/public_html/.well-known/' is executable ampsstudio.com [Sat Oct 15 06:49:29 2022] [error] [client 188.127.227.68:0] [client 188.127.227.68] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "ampsstudio.com"] [uri "/.env"] [unique_id "Y0pJ6SkCogp-hDvzbTTzyQAAAAM"] ampsstudio.com [Sat Oct 15 06:49:41 2022] [error] [client 188.127.227.68:0] [client 188.127.227.68] ModSecurity: Access denied with code 403 (phase 2). String match "/Util/PHP/eval-stdin.php" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430046"] [msg "Malware.Expert - request_uri: CVE-2017-9841"] [hostname "ampsstudio.com"] [uri "/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php"] [unique_id "Y0pJ9RY1wtymK7vibbR7ugAAAAI"] www.ampsstudio.com [Sat Oct 15 07:39:51 2022] [error] [client 20.58.191.245:0] AH01071: Got error 'PHP message: PHP Warning: Undefined array key "HTTP_USER_AGENT" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/bookly-responsive-appointment-booking-tool/frontend/modules/booking/ShortCode.php on line 66' ampsstudio.com [Sat Oct 15 07:48:11 2022] [error] [client 188.127.227.68:0] [client 188.127.227.68] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "ampsstudio.com"] [uri "/.env"] [unique_id "Y0pXq5rU7f3WX6_fcRwT9wAAAAc"] ampsstudio.com [Sat Oct 15 07:48:24 2022] [error] [client 188.127.227.68:0] [client 188.127.227.68] ModSecurity: Access denied with code 403 (phase 2). String match "/Util/PHP/eval-stdin.php" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430046"] [msg "Malware.Expert - request_uri: CVE-2017-9841"] [hostname "ampsstudio.com"] [uri "/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php"] [unique_id "Y0pXuH-JZMLzg83ha0jabQAAAAQ"] ampsstudio.com [Sat Oct 15 07:48:40 2022] [error] [client 188.127.227.68:0] [client 188.127.227.68] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "ampsstudio.com"] [uri "/.env"] [unique_id "Y0pXyBY1wtymK7vibbR7zgAAAAI"] ampsstudio.com [Sat Oct 15 07:48:48 2022] [error] [client 188.127.227.68:0] [client 188.127.227.68] ModSecurity: Access denied with code 403 (phase 2). String match "/Util/PHP/eval-stdin.php" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430046"] [msg "Malware.Expert - request_uri: CVE-2017-9841"] [hostname "ampsstudio.com"] [uri "/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php"] [unique_id "Y0pX0Nh14a5VM_ry7vaNnAAAAAA"] www.ampsstudio.com [Sat Oct 15 09:18:01 2022] [error] [client 185.191.171.25:0] AH01071: Got error 'PHP message: PHP Warning: Attempt to read property "ID" on null in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/archive-event.php on line 15PHP message: PHP Warning: Undefined array key 0 in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/includes/classes/iron_sonaar.class.php on line 212PHP message: PHP Warning: Trying to access array offset on value of type null in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/includes/classes/iron_sonaar.class.php on line 212PHP message: PHP Warning: Undefined array key 0 in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/includes/classes/iron_sonaar.class.php on line 214PHP message: PHP Warning: Trying to access array offset on value of type null in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/includes/classes/iron_sonaar.class.php on line 214' ampsstudio.com [Sat Oct 15 10:03:16 2022] [error] [client 188.127.227.68:0] [client 188.127.227.68] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "ampsstudio.com"] [uri "/.env"] [unique_id "Y0p3VBwS6F4VdM2avi4_zwAAAAY"] ampsstudio.com [Sat Oct 15 10:03:28 2022] [error] [client 188.127.227.68:0] [client 188.127.227.68] ModSecurity: Access denied with code 403 (phase 2). String match "/Util/PHP/eval-stdin.php" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430046"] [msg "Malware.Expert - request_uri: CVE-2017-9841"] [hostname "ampsstudio.com"] [uri "/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php"] [unique_id "Y0p3YJrU7f3WX6_fcRwUKAAAAAc"] mail.ampsstudio.com [Sat Oct 15 10:21:18 2022] [error] [client 20.94.58.51:0] [client 20.94.58.51] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "mail.ampsstudio.com"] [uri "/.env"] [unique_id "Y0p7jprU7f3WX6_fcRwUMAAAAAc"] cpanel.ampsstudio.com [Sat Oct 15 11:22:16 2022] [error] [client 20.94.58.51:0] [client 20.94.58.51] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "cpanel.ampsstudio.com"] [uri "/.env"] [unique_id "Y0qJ2H-JZMLzg83ha0javwAAAAQ"] ampsstudio.com [Sat Oct 15 12:28:46 2022] [error] [client 20.219.160.215:0] [client 20.219.160.215] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "ampsstudio.com"] [uri "/.env"] [unique_id "Y0qZbl82g_yLkO8-SIE5hQAAAAo"] ampsstudio.com [Sat Oct 15 12:58:52 2022] [error] [client 188.127.227.68:0] [client 188.127.227.68] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "ampsstudio.com"] [uri "/.env"] [unique_id "Y0qgfBY1wtymK7vibbR8RQAAAAI"] ampsstudio.com [Sat Oct 15 12:59:08 2022] [error] [client 188.127.227.68:0] [client 188.127.227.68] ModSecurity: Access denied with code 403 (phase 2). String match "/Util/PHP/eval-stdin.php" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430046"] [msg "Malware.Expert - request_uri: CVE-2017-9841"] [hostname "ampsstudio.com"] [uri "/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php"] [unique_id "Y0qgjH-JZMLzg83ha0ja6gAAAAQ"] ampsstudio.com [Sat Oct 15 13:01:18 2022] [error] [client 74.208.118.205:0] [client 74.208.118.205] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "ampsstudio.com"] [uri "/.env"] [unique_id "Y0qhDuSkmGn5KpflkqZkGwAAABI"] ampsstudio.com [Sat Oct 15 13:27:40 2022] [error] [client 188.127.227.68:0] [client 188.127.227.68] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "ampsstudio.com"] [uri "/.env"] [unique_id "Y0qnPBwS6F4VdM2avi5AIgAAAAY"] ampsstudio.com [Sat Oct 15 13:28:47 2022] [error] [client 188.127.227.68:0] [client 188.127.227.68] ModSecurity: Access denied with code 403 (phase 2). String match "/Util/PHP/eval-stdin.php" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430046"] [msg "Malware.Expert - request_uri: CVE-2017-9841"] [hostname "ampsstudio.com"] [uri "/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php"] [unique_id "Y0qnfwkLs_06fugQKRYgGwAAAAk"] www.ampsstudio.com [Sat Oct 15 15:10:08 2022] [error] [client 95.79.88.211:0] AH01071: Got error 'PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179' www.ampsstudio.com [Sat Oct 15 15:10:08 2022] [error] [client 95.79.88.211:0] AH01071: Got error 'PHP message: PHP Warning: Cannot modify header information - headers already sent by (output started at /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-includes/functions.php:5275) in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/includes/sonaar-music/css/theme/custom-style.php on line 2' cpanel.ampsstudio.com [Sat Oct 15 16:10:18 2022] [error] [client 20.219.160.215:0] [client 20.219.160.215] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "cpanel.ampsstudio.com"] [uri "/.env"] [unique_id "Y0rNWtmFPBYKhCI7gEyI5QAAAAg"] www.ampsstudio.com [Sat Oct 15 16:44:12 2022] [error] [client 185.191.171.39:0] AH01071: Got error 'PHP message: PHP Warning: Undefined array key "block" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/includes/classes/iron_sonaar.class.php on line 212PHP message: PHP Warning: Trying to access array offset on value of type null in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/includes/classes/iron_sonaar.class.php on line 212PHP message: PHP Warning: Undefined array key "block" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/includes/classes/iron_sonaar.class.php on line 214PHP message: PHP Warning: Trying to access array offset on value of type null in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/includes/classes/iron_sonaar.class.php on line 214' www.ampsstudio.com [Sat Oct 15 17:10:34 2022] [error] [client 4.228.87.3:0] AH01071: Got error 'PHP message: PHP Warning: Undefined array key "HTTP_USER_AGENT" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/bookly-responsive-appointment-booking-tool/frontend/modules/booking/ShortCode.php on line 66' www.ampsstudio.com [Sat Oct 15 17:10:36 2022] [error] [client 4.228.87.3:0] AH01071: Got error 'PHP message: PHP Warning: Undefined array key "HTTP_USER_AGENT" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/bookly-responsive-appointment-booking-tool/frontend/modules/booking/ShortCode.php on line 66' www.ampsstudio.com [Sat Oct 15 17:10:38 2022] [error] [client 4.228.87.3:0] AH01071: Got error 'PHP message: PHP Warning: Undefined array key "HTTP_USER_AGENT" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/bookly-responsive-appointment-booking-tool/frontend/modules/booking/ShortCode.php on line 66' www.ampsstudio.com [Sat Oct 15 17:10:40 2022] [error] [client 4.228.87.3:0] AH01071: Got error 'PHP message: PHP Warning: Undefined array key "HTTP_USER_AGENT" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/bookly-responsive-appointment-booking-tool/frontend/modules/booking/ShortCode.php on line 66' www.ampsstudio.com [Sat Oct 15 17:10:41 2022] [error] [client 4.228.87.3:0] AH01071: Got error 'PHP message: PHP Warning: Undefined array key "HTTP_USER_AGENT" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/bookly-responsive-appointment-booking-tool/frontend/modules/booking/ShortCode.php on line 66' ampsstudio.com [Sat Oct 15 17:10:43 2022] [error] [client 4.228.87.3:0] AH01276: Cannot serve directory /home/virtual/vps-aa3942/a/aede5353c4/public_html/test/: No matching DirectoryIndex (index.php,index.html,index.htm) found, and server-generated directory index forbidden by Options directive www.ampsstudio.com [Sat Oct 15 17:10:44 2022] [error] [client 4.228.87.3:0] AH01071: Got error 'PHP message: PHP Warning: Undefined array key "HTTP_USER_AGENT" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/bookly-responsive-appointment-booking-tool/frontend/modules/booking/ShortCode.php on line 66' www.ampsstudio.com [Sat Oct 15 17:10:47 2022] [error] [client 4.228.87.3:0] AH01071: Got error 'PHP message: PHP Warning: Undefined array key "HTTP_USER_AGENT" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/bookly-responsive-appointment-booking-tool/frontend/modules/booking/ShortCode.php on line 66' www.ampsstudio.com [Sat Oct 15 17:10:48 2022] [error] [client 4.228.87.3:0] AH01071: Got error 'PHP message: PHP Warning: Undefined array key "HTTP_USER_AGENT" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/bookly-responsive-appointment-booking-tool/frontend/modules/booking/ShortCode.php on line 66' ampsstudio.com [Sat Oct 15 17:56:27 2022] [error] [client 4.228.87.3:0] [client 4.228.87.3] ModSecurity: Access denied with code 403 (phase 2). Match of "contains index.php" against "REQUEST_URI" required. [file "remote server"] [line "-1"] [id "570076"] [msg "Malware.Expert - Malware"] [hostname "ampsstudio.com"] [uri "/wp-plain.php"] [unique_id "Y0rmOzdvTvKODP_X2zy3IgAAAAA"] www.ampsstudio.com [Sat Oct 15 17:56:32 2022] [error] [client 4.228.87.3:0] [client 4.228.87.3] ModSecurity: Access denied with code 403 (phase 2). String match "php.suspected" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430059"] [msg "Malware.Expert - request_uri: .PHP suspected files"] [hostname "www.ampsstudio.com"] [uri "/wp-content/plugins/apikey/apikey.php.suspected"] [unique_id "Y0rmQDdvTvKODP_X2zy3IwAAAAA"] www.ampsstudio.com [Sat Oct 15 17:56:33 2022] [error] [client 4.228.87.3:0] [client 4.228.87.3] ModSecurity: Access denied with code 403 (phase 2). String match "php.suspected" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430059"] [msg "Malware.Expert - request_uri: .PHP suspected files"] [hostname "www.ampsstudio.com"] [uri "/plugins/content/apismtp/apismtp.php.suspected"] [unique_id "Y0rmQSkCogp-hDvzbTT0_QAAAAM"] ampsstudio.com [Sat Oct 15 19:01:48 2022] [error] [client 45.227.254.5:0] [client 45.227.254.5] ModSecurity: Access denied with connection close (phase 2). Pattern match "^wp_is_mobile$" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "420038"] [msg "Malware.Expert - user-agent: Webshell user-agent"] [hostname "ampsstudio.com"] [uri "/wp-load.php"] [unique_id "Y0r1jH-JZMLzg83ha0jbsAAAAAQ"] ampsstudio.com [Sat Oct 15 19:01:50 2022] [error] [client 45.227.254.5:0] [client 45.227.254.5] ModSecurity: Access denied with connection close (phase 2). Pattern match "^wp_is_mobile$" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "420038"] [msg "Malware.Expert - user-agent: Webshell user-agent"] [hostname "ampsstudio.com"] [uri "/wp-load.php"] [unique_id "Y0r1jhwS6F4VdM2avi5A6AAAAAY"] ampsstudio.com [Sat Oct 15 19:01:53 2022] [error] [client 45.227.254.5:0] [client 45.227.254.5] ModSecurity: Access denied with connection close (phase 2). Pattern match "^wp_is_mobile$" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "420038"] [msg "Malware.Expert - user-agent: Webshell user-agent"] [hostname "ampsstudio.com"] [uri "/style.php"] [unique_id "Y0r1kSkCogp-hDvzbTT1JAAAAAM"] ampsstudio.com [Sat Oct 15 19:01:53 2022] [error] [client 45.227.254.5:0] [client 45.227.254.5] ModSecurity: Access denied with connection close (phase 2). Pattern match "^wp_is_mobile$" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "420038"] [msg "Malware.Expert - user-agent: Webshell user-agent"] [hostname "ampsstudio.com"] [uri "/wp-admin/style.php"] [unique_id "Y0r1kUlTQJGOxY-P0ezJ_AAAAAU"] ampsstudio.com [Sat Oct 15 19:01:55 2022] [error] [client 45.227.254.5:0] [client 45.227.254.5] ModSecurity: Access denied with connection close (phase 2). Pattern match "^wp_is_mobile$" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "420038"] [msg "Malware.Expert - user-agent: Webshell user-agent"] [hostname "ampsstudio.com"] [uri "/s_e.php"] [unique_id "Y0r1k1ouKGdgA3V2L-LGswAAAAg"] ampsstudio.com [Sat Oct 15 19:02:05 2022] [error] [client 45.227.254.5:0] [client 45.227.254.5] ModSecurity: Access denied with connection close (phase 2). Pattern match "^wp_is_mobile$" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "420038"] [msg "Malware.Expert - user-agent: Webshell user-agent"] [hostname "ampsstudio.com"] [uri "/s_ne.php"] [unique_id "Y0r1nTdvTvKODP_X2zy3RgAAAAA"] ampsstudio.com [Sat Oct 15 19:02:23 2022] [error] [client 45.227.254.5:0] [client 45.227.254.5] ModSecurity: Access denied with connection close (phase 2). Pattern match "^wp_is_mobile$" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "420038"] [msg "Malware.Expert - user-agent: Webshell user-agent"] [hostname "ampsstudio.com"] [uri "/radio.php"] [unique_id "Y0r1r5rU7f3WX6_fcRwVPAAAAAc"] ampsstudio.com [Sat Oct 15 19:02:28 2022] [error] [client 45.227.254.5:0] [client 45.227.254.5] ModSecurity: Access denied with connection close (phase 2). Pattern match "^wp_is_mobile$" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "420038"] [msg "Malware.Expert - user-agent: Webshell user-agent"] [hostname "ampsstudio.com"] [uri "/lock360.php"] [unique_id "Y0r1tElTQJGOxY-P0ezJ_gAAAAU"] ampsstudio.com [Sat Oct 15 19:02:30 2022] [error] [client 45.227.254.5:0] [client 45.227.254.5] ModSecurity: Access denied with connection close (phase 2). Pattern match "^wp_is_mobile$" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "420038"] [msg "Malware.Expert - user-agent: Webshell user-agent"] [hostname "ampsstudio.com"] [uri "/wp-load.php"] [unique_id "Y0r1tlouKGdgA3V2L-LGtQAAAAg"] ampsstudio.com [Sat Oct 15 19:02:56 2022] [error] [client 45.227.254.5:0] [client 45.227.254.5] ModSecurity: Access denied with connection close (phase 2). Pattern match "^wp_is_mobile$" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "420038"] [msg "Malware.Expert - user-agent: Webshell user-agent"] [hostname "ampsstudio.com"] [uri "/xmlrpcs.php"] [unique_id "Y0r10DdvTvKODP_X2zy3SAAAAAA"] ampsstudio.com [Sat Oct 15 19:02:58 2022] [error] [client 45.227.254.5:0] [client 45.227.254.5] ModSecurity: Access denied with connection close (phase 2). Pattern match "^wp_is_mobile$" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "420038"] [msg "Malware.Expert - user-agent: Webshell user-agent"] [hostname "ampsstudio.com"] [uri "/wp-admin.php"] [unique_id "Y0r10l82g_yLkO8-SIE6bgAAAAo"] ampsstudio.com [Sat Oct 15 19:03:44 2022] [error] [client 45.227.254.5:0] [client 45.227.254.5] ModSecurity: Access denied with connection close (phase 2). Pattern match "^wp_is_mobile$" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "420038"] [msg "Malware.Expert - user-agent: Webshell user-agent"] [hostname "ampsstudio.com"] [uri "/qindex.php"] [unique_id "Y0r2AJrU7f3WX6_fcRwVPQAAAAc"] ampsstudio.com [Sat Oct 15 19:03:56 2022] [error] [client 45.227.254.5:0] [client 45.227.254.5] ModSecurity: Access denied with code 403 (phase 2). Match of "contains index.php" against "REQUEST_URI" required. [file "remote server"] [line "-1"] [id "570075"] [msg "Malware.Expert - Malware"] [hostname "ampsstudio.com"] [uri "/wp_wrong_datlib.php"] [unique_id "Y0r2DElTQJGOxY-P0ezJ_wAAAAU"] ampsstudio.com [Sat Oct 15 19:03:59 2022] [error] [client 45.227.254.5:0] [client 45.227.254.5] ModSecurity: Access denied with connection close (phase 2). Pattern match "^wp_is_mobile$" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "420038"] [msg "Malware.Expert - user-agent: Webshell user-agent"] [hostname "ampsstudio.com"] [uri "/ups.php"] [unique_id "Y0r2DxwS6F4VdM2avi5A6wAAAAY"] ampsstudio.com [Sat Oct 15 19:04:01 2022] [error] [client 45.227.254.5:0] [client 45.227.254.5] ModSecurity: Access denied with connection close (phase 2). Pattern match "^wp_is_mobile$" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "420038"] [msg "Malware.Expert - user-agent: Webshell user-agent"] [hostname "ampsstudio.com"] [uri "/wp-signin.php"] [unique_id "Y0r2EVouKGdgA3V2L-LGtgAAAAg"] ampsstudio.com [Sat Oct 15 19:04:03 2022] [error] [client 45.227.254.5:0] [client 45.227.254.5] ModSecurity: Access denied with connection close (phase 2). Pattern match "^wp_is_mobile$" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "420038"] [msg "Malware.Expert - user-agent: Webshell user-agent"] [hostname "ampsstudio.com"] [uri "/media-admin.php"] [unique_id "Y0r2E3-JZMLzg83ha0jbswAAAAQ"] ampsstudio.com [Sat Oct 15 19:04:06 2022] [error] [client 45.227.254.5:0] [client 45.227.254.5] ModSecurity: Access denied with code 403 (phase 2). Match of "contains index.php" against "REQUEST_URI" required. [file "remote server"] [line "-1"] [id "570075"] [msg "Malware.Expert - Malware"] [hostname "ampsstudio.com"] [uri "/export.php"] [unique_id "Y0r2FjdvTvKODP_X2zy3SQAAAAA"] ampsstudio.com [Sat Oct 15 19:04:07 2022] [error] [client 45.227.254.5:0] [client 45.227.254.5] ModSecurity: Access denied with code 403 (phase 2). Match of "contains index.php" against "REQUEST_URI" required. [file "remote server"] [line "-1"] [id "570075"] [msg "Malware.Expert - Malware"] [hostname "ampsstudio.com"] [uri "/wp-content/export.php"] [unique_id "Y0r2F182g_yLkO8-SIE6bwAAAAo"] ampsstudio.com [Sat Oct 15 19:04:12 2022] [error] [client 45.227.254.5:0] [client 45.227.254.5] ModSecurity: Access denied with connection close (phase 2). Pattern match "^wp_is_mobile$" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "420038"] [msg "Malware.Expert - user-agent: Webshell user-agent"] [hostname "ampsstudio.com"] [uri "/wp-includes/wp-class.php"] [unique_id "Y0r2HCkCogp-hDvzbTT1JwAAAAM"] ampsstudio.com [Sat Oct 15 19:04:28 2022] [error] [client 45.227.254.5:0] [client 45.227.254.5] ModSecurity: Access denied with code 403 (phase 2). Match of "contains index.php" against "REQUEST_URI" required. [file "remote server"] [line "-1"] [id "570075"] [msg "Malware.Expert - Malware"] [hostname "ampsstudio.com"] [uri "/defau1t.php"] [unique_id "Y0r2LF5VMjVGQTj_gAXaFQAAAAI"] ampsstudio.com [Sat Oct 15 19:04:32 2022] [error] [client 45.227.254.5:0] [client 45.227.254.5] ModSecurity: Access denied with code 403 (phase 2). Match of "contains index.php" against "REQUEST_URI" required. [file "remote server"] [line "-1"] [id "570075"] [msg "Malware.Expert - Malware"] [hostname "ampsstudio.com"] [uri "/moduless.php"] [unique_id "Y0r2MAkLs_06fugQKRYg4gAAAAk"] ampsstudio.com [Sat Oct 15 19:04:34 2022] [error] [client 45.227.254.5:0] [client 45.227.254.5] ModSecurity: Access denied with connection close (phase 2). Pattern match "^wp_is_mobile$" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "420038"] [msg "Malware.Expert - user-agent: Webshell user-agent"] [hostname "ampsstudio.com"] [uri "/wp-booking.php"] [unique_id "Y0r2MprU7f3WX6_fcRwVPgAAAAc"] ampsstudio.com [Sat Oct 15 19:04:52 2022] [error] [client 45.227.254.5:0] [client 45.227.254.5] ModSecurity: Access denied with connection close (phase 2). Pattern match "^wp_is_mobile$" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "420038"] [msg "Malware.Expert - user-agent: Webshell user-agent"] [hostname "ampsstudio.com"] [uri "/wp-content/plugins/backup_index.php"] [unique_id "Y0r2RBwS6F4VdM2avi5A7AAAAAY"] ampsstudio.com [Sat Oct 15 19:05:04 2022] [error] [client 45.227.254.5:0] [client 45.227.254.5] ModSecurity: Access denied with connection close (phase 2). Pattern match "^wp_is_mobile$" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "420038"] [msg "Malware.Expert - user-agent: Webshell user-agent"] [hostname "ampsstudio.com"] [uri "/wp-includes/css/wp-config.php"] [unique_id "Y0r2UFouKGdgA3V2L-LGtwAAAAg"] ampsstudio.com [Sat Oct 15 19:05:10 2022] [error] [client 45.227.254.5:0] [client 45.227.254.5] ModSecurity: Access denied with connection close (phase 2). Pattern match "^wp_is_mobile$" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "420038"] [msg "Malware.Expert - user-agent: Webshell user-agent"] [hostname "ampsstudio.com"] [uri "/config.bak.php"] [unique_id "Y0r2VjdvTvKODP_X2zy3SgAAAAA"] ampsstudio.com [Sat Oct 15 19:05:10 2022] [error] [client 45.227.254.5:0] [client 45.227.254.5] ModSecurity: Access denied with connection close (phase 2). Pattern match "^wp_is_mobile$" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "420038"] [msg "Malware.Expert - user-agent: Webshell user-agent"] [hostname "ampsstudio.com"] [uri "/wp-content/themes/config.bak.php"] [unique_id "Y0r2Vl82g_yLkO8-SIE6cAAAAAo"] ampsstudio.com [Sat Oct 15 19:05:16 2022] [error] [client 45.227.254.5:0] [client 45.227.254.5] ModSecurity: Access denied with connection close (phase 2). Pattern match "^wp_is_mobile$" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "420038"] [msg "Malware.Expert - user-agent: Webshell user-agent"] [hostname "ampsstudio.com"] [uri "/legion.php"] [unique_id "Y0r2XCkCogp-hDvzbTT1KAAAAAM"] ampsstudio.com [Sat Oct 15 19:05:24 2022] [error] [client 45.227.254.5:0] [client 45.227.254.5] ModSecurity: Access denied with connection close (phase 2). Pattern match "^wp_is_mobile$" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "420038"] [msg "Malware.Expert - user-agent: Webshell user-agent"] [hostname "ampsstudio.com"] [uri "/wp-plugins.php"] [unique_id "Y0r2ZF5VMjVGQTj_gAXaFgAAAAI"] ampsstudio.com [Sat Oct 15 19:05:37 2022] [error] [client 45.227.254.5:0] [client 45.227.254.5] ModSecurity: Access denied with connection close (phase 2). Pattern match "^wp_is_mobile$" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "420038"] [msg "Malware.Expert - user-agent: Webshell user-agent"] [hostname "ampsstudio.com"] [uri "/wp-content/db-cache.php"] [unique_id "Y0r2cQkLs_06fugQKRYg4wAAAAk"] ampsstudio.com [Sat Oct 15 19:06:17 2022] [error] [client 45.227.254.5:0] [client 45.227.254.5] ModSecurity: Access denied with code 403 (phase 2). Match of "contains index.php" against "REQUEST_URI" required. [file "remote server"] [line "-1"] [id "570075"] [msg "Malware.Expert - Malware"] [hostname "ampsstudio.com"] [uri "/archives.php"] [unique_id "Y0r2mVouKGdgA3V2L-LGuAAAAAg"] ampsstudio.com [Sat Oct 15 19:06:37 2022] [error] [client 45.227.254.5:0] [client 45.227.254.5] ModSecurity: Access denied with connection close (phase 2). Pattern match "^wp_is_mobile$" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "420038"] [msg "Malware.Expert - user-agent: Webshell user-agent"] [hostname "ampsstudio.com"] [uri "/xindex.php"] [unique_id "Y0r2rX-JZMLzg83ha0jbtQAAAAQ"] ampsstudio.com [Sat Oct 15 19:08:09 2022] [error] [client 45.227.254.5:0] [client 45.227.254.5] ModSecurity: Access denied with connection close (phase 2). Pattern match "^wp_is_mobile$" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "420038"] [msg "Malware.Expert - user-agent: Webshell user-agent"] [hostname "ampsstudio.com"] [uri "/system_log.php"] [unique_id "Y0r3CRwS6F4VdM2avi5A7gAAAAY"] ampsstudio.com [Sat Oct 15 19:08:23 2022] [error] [client 45.227.254.5:0] [client 45.227.254.5] ModSecurity: Access denied with connection close (phase 2). Pattern match "^wp_is_mobile$" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "420038"] [msg "Malware.Expert - user-agent: Webshell user-agent"] [hostname "ampsstudio.com"] [uri "/wp-backup-sql-302.php"] [unique_id "Y0r3F1ouKGdgA3V2L-LGuQAAAAg"] ampsstudio.com [Sat Oct 15 19:08:25 2022] [error] [client 45.227.254.5:0] [client 45.227.254.5] ModSecurity: Access denied with connection close (phase 2). Pattern match "^wp_is_mobile$" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "420038"] [msg "Malware.Expert - user-agent: Webshell user-agent"] [hostname "ampsstudio.com"] [uri "/error.php"] [unique_id "Y0r3GX-JZMLzg83ha0jbtgAAAAQ"] ampsstudio.com [Sat Oct 15 19:08:28 2022] [error] [client 45.227.254.5:0] [client 45.227.254.5] ModSecurity: Access denied with connection close (phase 2). Pattern match "^wp_is_mobile$" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "420038"] [msg "Malware.Expert - user-agent: Webshell user-agent"] [hostname "ampsstudio.com"] [uri "/ALFA_DATA"] [unique_id "Y0r3HF82g_yLkO8-SIE6cgAAAAo"] ampsstudio.com [Sat Oct 15 19:08:30 2022] [error] [client 45.227.254.5:0] [client 45.227.254.5] ModSecurity: Access denied with connection close (phase 2). Pattern match "^wp_is_mobile$" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "420038"] [msg "Malware.Expert - user-agent: Webshell user-agent"] [hostname "ampsstudio.com"] [uri "/wp-content/uploads/cgialfa"] [unique_id "Y0r3HjdvTvKODP_X2zy3TAAAAAA"] ampsstudio.com [Sat Oct 15 19:08:31 2022] [error] [client 45.227.254.5:0] [client 45.227.254.5] ModSecurity: Access denied with connection close (phase 2). Pattern match "^wp_is_mobile$" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "420038"] [msg "Malware.Expert - user-agent: Webshell user-agent"] [hostname "ampsstudio.com"] [uri "/wp-includes/ALFA_DATA"] [unique_id "Y0r3HykCogp-hDvzbTT1KgAAAAM"] ampsstudio.com [Sat Oct 15 19:08:31 2022] [error] [client 45.227.254.5:0] [client 45.227.254.5] ModSecurity: Access denied with connection close (phase 2). Pattern match "^wp_is_mobile$" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "420038"] [msg "Malware.Expert - user-agent: Webshell user-agent"] [hostname "ampsstudio.com"] [uri "/wp-includes/alfacgiapi"] [unique_id "Y0r3H15VMjVGQTj_gAXaGAAAAAI"] ampsstudio.com [Sat Oct 15 19:08:32 2022] [error] [client 45.227.254.5:0] [client 45.227.254.5] ModSecurity: Access denied with connection close (phase 2). Pattern match "^wp_is_mobile$" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "420038"] [msg "Malware.Expert - user-agent: Webshell user-agent"] [hostname "ampsstudio.com"] [uri "/templates/beez3/cgialfa"] [unique_id "Y0r3IJrU7f3WX6_fcRwVQQAAAAc"] ampsstudio.com [Sat Oct 15 19:08:32 2022] [error] [client 45.227.254.5:0] [client 45.227.254.5] ModSecurity: Access denied with connection close (phase 2). Pattern match "^wp_is_mobile$" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "420038"] [msg "Malware.Expert - user-agent: Webshell user-agent"] [hostname "ampsstudio.com"] [uri "/sites/default/files/ALFA_DATA"] [unique_id "Y0r3IAkLs_06fugQKRYg5QAAAAk"] ampsstudio.com [Sat Oct 15 19:08:33 2022] [error] [client 45.227.254.5:0] [client 45.227.254.5] ModSecurity: Access denied with connection close (phase 2). Pattern match "^wp_is_mobile$" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "420038"] [msg "Malware.Expert - user-agent: Webshell user-agent"] [hostname "ampsstudio.com"] [uri "/sites/default/files/alfacgiapi"] [unique_id "Y0r3IRwS6F4VdM2avi5A7wAAAAY"] ampsstudio.com [Sat Oct 15 19:08:35 2022] [error] [client 45.227.254.5:0] [client 45.227.254.5] ModSecurity: Access denied with connection close (phase 2). Pattern match "^wp_is_mobile$" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "420038"] [msg "Malware.Expert - user-agent: Webshell user-agent"] [hostname "ampsstudio.com"] [uri "/sites/default/files/cgialfa"] [unique_id "Y0r3I1ouKGdgA3V2L-LGugAAAAg"] ampsstudio.com [Sat Oct 15 19:08:36 2022] [error] [client 45.227.254.5:0] [client 45.227.254.5] ModSecurity: Access denied with connection close (phase 2). Pattern match "^wp_is_mobile$" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "420038"] [msg "Malware.Expert - user-agent: Webshell user-agent"] [hostname "ampsstudio.com"] [uri "/admin/controller/extension/extension/ALFA_DATA"] [unique_id "Y0r3JH-JZMLzg83ha0jbtwAAAAQ"] ampsstudio.com [Sat Oct 15 19:08:36 2022] [error] [client 45.227.254.5:0] [client 45.227.254.5] ModSecurity: Access denied with connection close (phase 2). Pattern match "^wp_is_mobile$" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "420038"] [msg "Malware.Expert - user-agent: Webshell user-agent"] [hostname "ampsstudio.com"] [uri "/admin/controller/extension/extension/alfacgiapi"] [unique_id "Y0r3JF82g_yLkO8-SIE6cwAAAAo"] ampsstudio.com [Sat Oct 15 19:08:36 2022] [error] [client 45.227.254.5:0] [client 45.227.254.5] ModSecurity: Access denied with connection close (phase 2). Pattern match "^wp_is_mobile$" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "420038"] [msg "Malware.Expert - user-agent: Webshell user-agent"] [hostname "ampsstudio.com"] [uri "/admin/controller/extension/extension/cgialfa"] [unique_id "Y0r3JDdvTvKODP_X2zy3TQAAAAA"] ampsstudio.com [Sat Oct 15 19:08:43 2022] [error] [client 45.227.254.5:0] [client 45.227.254.5] ModSecurity: Access denied with connection close (phase 2). Pattern match "^wp_is_mobile$" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "420038"] [msg "Malware.Expert - user-agent: Webshell user-agent"] [hostname "ampsstudio.com"] [uri "/wp-content/plugins/ubh/up.php"] [unique_id "Y0r3KykCogp-hDvzbTT1KwAAAAM"] ampsstudio.com [Sat Oct 15 19:08:44 2022] [error] [client 45.227.254.5:0] [client 45.227.254.5] ModSecurity: Access denied with connection close (phase 2). Pattern match "^wp_is_mobile$" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "420038"] [msg "Malware.Expert - user-agent: Webshell user-agent"] [hostname "ampsstudio.com"] [uri "/index.php"] [unique_id "Y0r3LF5VMjVGQTj_gAXaGQAAAAI"] ampsstudio.com [Sat Oct 15 19:08:44 2022] [error] [client 45.227.254.5:0] [client 45.227.254.5] ModSecurity: Access denied with connection close (phase 2). Pattern match "^wp_is_mobile$" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "420038"] [msg "Malware.Expert - user-agent: Webshell user-agent"] [hostname "ampsstudio.com"] [uri "/about.php"] [unique_id "Y0r3LJrU7f3WX6_fcRwVQgAAAAc"] ampsstudio.com [Sat Oct 15 19:08:44 2022] [error] [client 45.227.254.5:0] [client 45.227.254.5] ModSecurity: Access denied with connection close (phase 2). Pattern match "^wp_is_mobile$" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "420038"] [msg "Malware.Expert - user-agent: Webshell user-agent"] [hostname "ampsstudio.com"] [uri "/shells.php"] [unique_id "Y0r3LAkLs_06fugQKRYg5gAAAAk"] ampsstudio.com [Sat Oct 15 19:08:44 2022] [error] [client 45.227.254.5:0] [client 45.227.254.5] ModSecurity: Access denied with connection close (phase 2). Pattern match "^wp_is_mobile$" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "420038"] [msg "Malware.Expert - user-agent: Webshell user-agent"] [hostname "ampsstudio.com"] [uri "/olux.php"] [unique_id "Y0r3LElTQJGOxY-P0ezKBAAAAAU"] ampsstudio.com [Sat Oct 15 19:08:44 2022] [error] [client 45.227.254.5:0] [client 45.227.254.5] ModSecurity: Access denied with connection close (phase 2). Pattern match "^wp_is_mobile$" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "420038"] [msg "Malware.Expert - user-agent: Webshell user-agent"] [hostname "ampsstudio.com"] [uri "/xleet.php"] [unique_id "Y0r3LBwS6F4VdM2avi5A8AAAAAY"] ampsstudio.com [Sat Oct 15 19:08:44 2022] [error] [client 45.227.254.5:0] [client 45.227.254.5] ModSecurity: Access denied with connection close (phase 2). Pattern match "^wp_is_mobile$" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "420038"] [msg "Malware.Expert - user-agent: Webshell user-agent"] [hostname "ampsstudio.com"] [uri "/wso.php"] [unique_id "Y0r3LFouKGdgA3V2L-LGuwAAAAg"] ampsstudio.com [Sat Oct 15 19:08:45 2022] [error] [client 45.227.254.5:0] [client 45.227.254.5] ModSecurity: Access denied with connection close (phase 2). Pattern match "^wp_is_mobile$" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "420038"] [msg "Malware.Expert - user-agent: Webshell user-agent"] [hostname "ampsstudio.com"] [uri "/shell.php"] [unique_id "Y0r3LX-JZMLzg83ha0jbuAAAAAQ"] ampsstudio.com [Sat Oct 15 19:08:45 2022] [error] [client 45.227.254.5:0] [client 45.227.254.5] ModSecurity: Access denied with connection close (phase 2). Pattern match "^wp_is_mobile$" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "420038"] [msg "Malware.Expert - user-agent: Webshell user-agent"] [hostname "ampsstudio.com"] [uri "/up.php"] [unique_id "Y0r3LV82g_yLkO8-SIE6dAAAAAo"] ampsstudio.com [Sat Oct 15 19:08:45 2022] [error] [client 45.227.254.5:0] [client 45.227.254.5] ModSecurity: Access denied with connection close (phase 2). Pattern match "^wp_is_mobile$" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "420038"] [msg "Malware.Expert - user-agent: Webshell user-agent"] [hostname "ampsstudio.com"] [uri "/upload.php"] [unique_id "Y0r3LTdvTvKODP_X2zy3TgAAAAA"] ampsstudio.com [Sat Oct 15 19:08:45 2022] [error] [client 45.227.254.5:0] [client 45.227.254.5] ModSecurity: Access denied with connection close (phase 2). Pattern match "^wp_is_mobile$" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "420038"] [msg "Malware.Expert - user-agent: Webshell user-agent"] [hostname "ampsstudio.com"] [uri "/1.php"] [unique_id "Y0r3LSkCogp-hDvzbTT1LAAAAAM"] ampsstudio.com [Sat Oct 15 19:08:45 2022] [error] [client 45.227.254.5:0] [client 45.227.254.5] ModSecurity: Access denied with connection close (phase 2). Pattern match "^wp_is_mobile$" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "420038"] [msg "Malware.Expert - user-agent: Webshell user-agent"] [hostname "ampsstudio.com"] [uri "/x.php"] [unique_id "Y0r3LV5VMjVGQTj_gAXaGgAAAAI"] ampsstudio.com [Sat Oct 15 19:08:45 2022] [error] [client 45.227.254.5:0] [client 45.227.254.5] ModSecurity: Access denied with connection close (phase 2). Pattern match "^wp_is_mobile$" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "420038"] [msg "Malware.Expert - user-agent: Webshell user-agent"] [hostname "ampsstudio.com"] [uri "/z.php"] [unique_id "Y0r3LZrU7f3WX6_fcRwVQwAAAAc"] ampsstudio.com [Sat Oct 15 19:08:45 2022] [error] [client 45.227.254.5:0] [client 45.227.254.5] ModSecurity: Access denied with connection close (phase 2). Pattern match "^wp_is_mobile$" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "420038"] [msg "Malware.Expert - user-agent: Webshell user-agent"] [hostname "ampsstudio.com"] [uri "/a.php"] [unique_id "Y0r3LQkLs_06fugQKRYg5wAAAAk"] ampsstudio.com [Sat Oct 15 19:08:46 2022] [error] [client 45.227.254.5:0] [client 45.227.254.5] ModSecurity: Access denied with connection close (phase 2). Pattern match "^wp_is_mobile$" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "420038"] [msg "Malware.Expert - user-agent: Webshell user-agent"] [hostname "ampsstudio.com"] [uri "/test.php"] [unique_id "Y0r3LklTQJGOxY-P0ezKBQAAAAU"] ampsstudio.com [Sat Oct 15 19:08:46 2022] [error] [client 45.227.254.5:0] [client 45.227.254.5] ModSecurity: Access denied with connection close (phase 2). Pattern match "^wp_is_mobile$" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "420038"] [msg "Malware.Expert - user-agent: Webshell user-agent"] [hostname "ampsstudio.com"] [uri "/wp.php"] [unique_id "Y0r3LhwS6F4VdM2avi5A8QAAAAY"] ampsstudio.com [Sat Oct 15 19:08:46 2022] [error] [client 45.227.254.5:0] [client 45.227.254.5] ModSecurity: Access denied with connection close (phase 2). Pattern match "^wp_is_mobile$" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "420038"] [msg "Malware.Expert - user-agent: Webshell user-agent"] [hostname "ampsstudio.com"] [uri "/alfa.php"] [unique_id "Y0r3LlouKGdgA3V2L-LGvAAAAAg"] ampsstudio.com [Sat Oct 15 19:08:46 2022] [error] [client 45.227.254.5:0] [client 45.227.254.5] ModSecurity: Access denied with connection close (phase 2). Pattern match "^wp_is_mobile$" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "420038"] [msg "Malware.Expert - user-agent: Webshell user-agent"] [hostname "ampsstudio.com"] [uri "/config.php"] [unique_id "Y0r3Ln-JZMLzg83ha0jbuQAAAAQ"] ampsstudio.com [Sat Oct 15 19:08:46 2022] [error] [client 45.227.254.5:0] [client 45.227.254.5] ModSecurity: Access denied with connection close (phase 2). Pattern match "^wp_is_mobile$" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "420038"] [msg "Malware.Expert - user-agent: Webshell user-agent"] [hostname "ampsstudio.com"] [uri "/templates/beez3/index.php"] [unique_id "Y0r3Ll82g_yLkO8-SIE6dQAAAAo"] www.ampsstudio.com [Sat Oct 15 19:09:48 2022] [error] [client 194.9.176.94:0] AH01071: Got error 'PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179' www.ampsstudio.com [Sat Oct 15 19:09:48 2022] [error] [client 194.9.176.94:0] AH01071: Got error 'PHP message: PHP Warning: Cannot modify header information - headers already sent by (output started at /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-includes/functions.php:5275) in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/includes/sonaar-music/css/theme/custom-style.php on line 2' webdisk.ampsstudio.com [Sat Oct 15 20:39:24 2022] [error] [client 20.94.58.51:0] [client 20.94.58.51] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "webdisk.ampsstudio.com"] [uri "/.env"] [unique_id "Y0sMbDxNjRyaAS9rx_AfiAAAAAw"] ampsstudio.com [Sat Oct 15 21:06:59 2022] [error] [client 51.132.219.196:0] [client 51.132.219.196] ModSecurity: Access denied with connection close (phase 2). Pattern match "^wp_is_mobile$" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "420038"] [msg "Malware.Expert - user-agent: Webshell user-agent"] [hostname "ampsstudio.com"] [uri "/wp-load.php"] [unique_id "Y0sS43-JZMLzg83ha0jb_QAAAAQ"] ampsstudio.com [Sat Oct 15 21:06:59 2022] [error] [client 51.132.219.196:0] [client 51.132.219.196] ModSecurity: Access denied with connection close (phase 2). Pattern match "^wp_is_mobile$" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "420038"] [msg "Malware.Expert - user-agent: Webshell user-agent"] [hostname "ampsstudio.com"] [uri "/wp-load.php"] [unique_id "Y0sS415VMjVGQTj_gAXaXwAAAAI"] ampsstudio.com [Sat Oct 15 21:06:59 2022] [error] [client 51.132.219.196:0] [client 51.132.219.196] ModSecurity: Access denied with connection close (phase 2). Pattern match "^wp_is_mobile$" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "420038"] [msg "Malware.Expert - user-agent: Webshell user-agent"] [hostname "ampsstudio.com"] [uri "/style.php"] [unique_id "Y0sS41ouKGdgA3V2L-LHBAAAAAg"] ampsstudio.com [Sat Oct 15 21:06:59 2022] [error] [client 51.132.219.196:0] [client 51.132.219.196] ModSecurity: Access denied with connection close (phase 2). Pattern match "^wp_is_mobile$" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "420038"] [msg "Malware.Expert - user-agent: Webshell user-agent"] [hostname "ampsstudio.com"] [uri "/wp-admin/style.php"] [unique_id "Y0sS40lTQJGOxY-P0ezKSQAAAAU"] ampsstudio.com [Sat Oct 15 21:06:59 2022] [error] [client 51.132.219.196:0] [client 51.132.219.196] ModSecurity: Access denied with connection close (phase 2). Pattern match "^wp_is_mobile$" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "420038"] [msg "Malware.Expert - user-agent: Webshell user-agent"] [hostname "ampsstudio.com"] [uri "/s_e.php"] [unique_id "Y0sS4xwS6F4VdM2avi5BNAAAAAY"] ampsstudio.com [Sat Oct 15 21:06:59 2022] [error] [client 51.132.219.196:0] [client 51.132.219.196] ModSecurity: Access denied with connection close (phase 2). Pattern match "^wp_is_mobile$" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "420038"] [msg "Malware.Expert - user-agent: Webshell user-agent"] [hostname "ampsstudio.com"] [uri "/s_ne.php"] [unique_id "Y0sS4zdvTvKODP_X2zy3kQAAAAA"] ampsstudio.com [Sat Oct 15 21:07:01 2022] [error] [client 51.132.219.196:0] [client 51.132.219.196] ModSecurity: Access denied with connection close (phase 2). Pattern match "^wp_is_mobile$" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "420038"] [msg "Malware.Expert - user-agent: Webshell user-agent"] [hostname "ampsstudio.com"] [uri "/radio.php"] [unique_id "Y0sS5SkCogp-hDvzbTT1bwAAAAM"] ampsstudio.com [Sat Oct 15 21:07:01 2022] [error] [client 51.132.219.196:0] [client 51.132.219.196] ModSecurity: Access denied with connection close (phase 2). Pattern match "^wp_is_mobile$" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "420038"] [msg "Malware.Expert - user-agent: Webshell user-agent"] [hostname "ampsstudio.com"] [uri "/doc.php"] [unique_id "Y0sS5X-JZMLzg83ha0jb_gAAAAQ"] ampsstudio.com [Sat Oct 15 21:07:02 2022] [error] [client 51.132.219.196:0] [client 51.132.219.196] ModSecurity: Access denied with code 403 (phase 2). Match of "contains index.php" against "REQUEST_URI" required. [file "remote server"] [line "-1"] [id "570075"] [msg "Malware.Expert - Malware"] [hostname "ampsstudio.com"] [uri "/wp_wrong_datlib.php"] [unique_id "Y0sS5l5VMjVGQTj_gAXaYAAAAAI"] ampsstudio.com [Sat Oct 15 21:07:02 2022] [error] [client 51.132.219.196:0] [client 51.132.219.196] ModSecurity: Access denied with code 403 (phase 2). Match of "contains index.php" against "REQUEST_URI" required. [file "remote server"] [line "-1"] [id "570075"] [msg "Malware.Expert - Malware"] [hostname "ampsstudio.com"] [uri "/beence.php"] [unique_id "Y0sS5louKGdgA3V2L-LHBQAAAAg"] ampsstudio.com [Sat Oct 15 21:07:02 2022] [error] [client 51.132.219.196:0] [client 51.132.219.196] ModSecurity: Access denied with connection close (phase 2). Pattern match "^wp_is_mobile$" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "420038"] [msg "Malware.Expert - user-agent: Webshell user-agent"] [hostname "ampsstudio.com"] [uri "/ups.php"] [unique_id "Y0sS5klTQJGOxY-P0ezKSgAAAAU"] ampsstudio.com [Sat Oct 15 21:07:02 2022] [error] [client 51.132.219.196:0] [client 51.132.219.196] ModSecurity: Access denied with connection close (phase 2). Pattern match "^wp_is_mobile$" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "420038"] [msg "Malware.Expert - user-agent: Webshell user-agent"] [hostname "ampsstudio.com"] [uri "/wp-signin.php"] [unique_id "Y0sS5hwS6F4VdM2avi5BNQAAAAY"] ampsstudio.com [Sat Oct 15 21:07:02 2022] [error] [client 51.132.219.196:0] [client 51.132.219.196] ModSecurity: Access denied with connection close (phase 2). Pattern match "^wp_is_mobile$" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "420038"] [msg "Malware.Expert - user-agent: Webshell user-agent"] [hostname "ampsstudio.com"] [uri "/media-admin.php"] [unique_id "Y0sS5jdvTvKODP_X2zy3kgAAAAA"] ampsstudio.com [Sat Oct 15 21:07:02 2022] [error] [client 51.132.219.196:0] [client 51.132.219.196] ModSecurity: Access denied with code 403 (phase 2). Match of "contains index.php" against "REQUEST_URI" required. [file "remote server"] [line "-1"] [id "570075"] [msg "Malware.Expert - Malware"] [hostname "ampsstudio.com"] [uri "/export.php"] [unique_id "Y0sS5gkLs_06fugQKRYhKgAAAAk"] ampsstudio.com [Sat Oct 15 21:07:02 2022] [error] [client 51.132.219.196:0] [client 51.132.219.196] ModSecurity: Access denied with code 403 (phase 2). Match of "contains index.php" against "REQUEST_URI" required. [file "remote server"] [line "-1"] [id "570075"] [msg "Malware.Expert - Malware"] [hostname "ampsstudio.com"] [uri "/wp-content/export.php"] [unique_id "Y0sS5jxNjRyaAS9rx_AfkAAAAAw"] ampsstudio.com [Sat Oct 15 21:07:02 2022] [error] [client 51.132.219.196:0] [client 51.132.219.196] ModSecurity: Access denied with connection close (phase 2). Pattern match "^wp_is_mobile$" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "420038"] [msg "Malware.Expert - user-agent: Webshell user-agent"] [hostname "ampsstudio.com"] [uri "/wp-includes/wp-class.php"] [unique_id "Y0sS5ikCogp-hDvzbTT1cAAAAAM"] ampsstudio.com [Sat Oct 15 21:07:03 2022] [error] [client 51.132.219.196:0] [client 51.132.219.196] ModSecurity: Access denied with code 403 (phase 2). Match of "contains index.php" against "REQUEST_URI" required. [file "remote server"] [line "-1"] [id "570075"] [msg "Malware.Expert - Malware"] [hostname "ampsstudio.com"] [uri "/wp-includes/wp-atom.php"] [unique_id "Y0sS53-JZMLzg83ha0jb_wAAAAQ"] ampsstudio.com [Sat Oct 15 21:07:03 2022] [error] [client 51.132.219.196:0] [client 51.132.219.196] ModSecurity: Access denied with code 403 (phase 2). Pattern match "/wp-includes/images/.*\\\\.php" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430032"] [msg "Malware.Expert - request_uri: Wordpress - prevent PHP files from executing"] [hostname "ampsstudio.com"] [uri "/wp-includes/images/css.php"] [unique_id "Y0sS515VMjVGQTj_gAXaYQAAAAI"] ampsstudio.com [Sat Oct 15 21:07:03 2022] [error] [client 51.132.219.196:0] [client 51.132.219.196] ModSecurity: Access denied with code 403 (phase 2). Pattern match "/wp-includes/css/.*\\\\.php" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430035"] [msg "Malware.Expert - request_uri: Wordpress - prevent PHP files from executing"] [hostname "ampsstudio.com"] [uri "/wp-includes/css/css.php"] [unique_id "Y0sS51ouKGdgA3V2L-LHBgAAAAg"] ampsstudio.com [Sat Oct 15 21:07:03 2022] [error] [client 51.132.219.196:0] [client 51.132.219.196] ModSecurity: Access denied with code 403 (phase 2). Match of "contains index.php" against "REQUEST_URI" required. [file "remote server"] [line "-1"] [id "570075"] [msg "Malware.Expert - Malware"] [hostname "ampsstudio.com"] [uri "/defau1t.php"] [unique_id "Y0sS50lTQJGOxY-P0ezKSwAAAAU"] ampsstudio.com [Sat Oct 15 21:07:03 2022] [error] [client 51.132.219.196:0] [client 51.132.219.196] ModSecurity: Access denied with code 403 (phase 2). Match of "contains index.php" against "REQUEST_URI" required. [file "remote server"] [line "-1"] [id "570075"] [msg "Malware.Expert - Malware"] [hostname "ampsstudio.com"] [uri "/moduless.php"] [unique_id "Y0sS5xwS6F4VdM2avi5BNgAAAAY"] ampsstudio.com [Sat Oct 15 21:07:03 2022] [error] [client 51.132.219.196:0] [client 51.132.219.196] ModSecurity: Access denied with connection close (phase 2). Pattern match "^wp_is_mobile$" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "420038"] [msg "Malware.Expert - user-agent: Webshell user-agent"] [hostname "ampsstudio.com"] [uri "/wp-booking.php"] [unique_id "Y0sS5zdvTvKODP_X2zy3kwAAAAA"] ampsstudio.com [Sat Oct 15 21:07:03 2022] [error] [client 51.132.219.196:0] [client 51.132.219.196] ModSecurity: Access denied with connection close (phase 2). Pattern match "^wp_is_mobile$" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "420038"] [msg "Malware.Expert - user-agent: Webshell user-agent"] [hostname "ampsstudio.com"] [uri "/wp-content/plugins/backup_index.php"] [unique_id "Y0sS5wkLs_06fugQKRYhKwAAAAk"] ampsstudio.com [Sat Oct 15 21:07:03 2022] [error] [client 51.132.219.196:0] [client 51.132.219.196] ModSecurity: Access denied with connection close (phase 2). Pattern match "^wp_is_mobile$" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "420038"] [msg "Malware.Expert - user-agent: Webshell user-agent"] [hostname "ampsstudio.com"] [uri "/wp-content/mu-plugins/db-safe-mode.php"] [unique_id "Y0sS5zxNjRyaAS9rx_AfkQAAAAw"] ampsstudio.com [Sat Oct 15 21:07:03 2022] [error] [client 51.132.219.196:0] [client 51.132.219.196] ModSecurity: Access denied with connection close (phase 2). Pattern match "^wp_is_mobile$" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "420038"] [msg "Malware.Expert - user-agent: Webshell user-agent"] [hostname "ampsstudio.com"] [uri "/wp-includes/css/wp-config.php"] [unique_id "Y0sS5ykCogp-hDvzbTT1cQAAAAM"] ampsstudio.com [Sat Oct 15 21:07:03 2022] [error] [client 51.132.219.196:0] [client 51.132.219.196] ModSecurity: Access denied with connection close (phase 2). Pattern match "^wp_is_mobile$" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "420038"] [msg "Malware.Expert - user-agent: Webshell user-agent"] [hostname "ampsstudio.com"] [uri "/config.bak.php"] [unique_id "Y0sS53-JZMLzg83ha0jcAAAAAAQ"] ampsstudio.com [Sat Oct 15 21:07:04 2022] [error] [client 51.132.219.196:0] [client 51.132.219.196] ModSecurity: Access denied with connection close (phase 2). Pattern match "^wp_is_mobile$" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "420038"] [msg "Malware.Expert - user-agent: Webshell user-agent"] [hostname "ampsstudio.com"] [uri "/wp-content/themes/config.bak.php"] [unique_id "Y0sS6F5VMjVGQTj_gAXaYgAAAAI"] ampsstudio.com [Sat Oct 15 21:07:04 2022] [error] [client 51.132.219.196:0] [client 51.132.219.196] ModSecurity: Access denied with connection close (phase 2). Pattern match "^wp_is_mobile$" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "420038"] [msg "Malware.Expert - user-agent: Webshell user-agent"] [hostname "ampsstudio.com"] [uri "/legion.php"] [unique_id "Y0sS6FouKGdgA3V2L-LHBwAAAAg"] ampsstudio.com [Sat Oct 15 21:07:05 2022] [error] [client 51.132.219.196:0] [client 51.132.219.196] ModSecurity: Access denied with connection close (phase 2). Pattern match "^wp_is_mobile$" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "420038"] [msg "Malware.Expert - user-agent: Webshell user-agent"] [hostname "ampsstudio.com"] [uri "/wp-plugins.php"] [unique_id "Y0sS6TxNjRyaAS9rx_AfkgAAAAw"] ampsstudio.com [Sat Oct 15 21:07:05 2022] [error] [client 51.132.219.196:0] [client 51.132.219.196] ModSecurity: Access denied with connection close (phase 2). Pattern match "^wp_is_mobile$" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "420038"] [msg "Malware.Expert - user-agent: Webshell user-agent"] [hostname "ampsstudio.com"] [uri "/gank.php.PhP"] [unique_id "Y0sS6SkCogp-hDvzbTT1cgAAAAM"] ampsstudio.com [Sat Oct 15 21:07:05 2022] [error] [client 51.132.219.196:0] [client 51.132.219.196] ModSecurity: Access denied with connection close (phase 2). Pattern match "^wp_is_mobile$" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "420038"] [msg "Malware.Expert - user-agent: Webshell user-agent"] [hostname "ampsstudio.com"] [uri "/wp-content/db-cache.php"] [unique_id "Y0sS6X-JZMLzg83ha0jcAQAAAAQ"] ampsstudio.com [Sat Oct 15 21:07:05 2022] [error] [client 51.132.219.196:0] [client 51.132.219.196] ModSecurity: Access denied with code 403 (phase 2). Match of "contains index.php" against "REQUEST_URI" required. [file "remote server"] [line "-1"] [id "570075"] [msg "Malware.Expert - Malware"] [hostname "ampsstudio.com"] [uri "/archives.php"] [unique_id "Y0sS6V5VMjVGQTj_gAXaYwAAAAI"] ampsstudio.com [Sat Oct 15 21:07:05 2022] [error] [client 51.132.219.196:0] [client 51.132.219.196] ModSecurity: Access denied with code 403 (phase 2). Match of "contains index.php" against "REQUEST_URI" required. [file "remote server"] [line "-1"] [id "570075"] [msg "Malware.Expert - Malware"] [hostname "ampsstudio.com"] [uri "/defau11.php"] [unique_id "Y0sS6VouKGdgA3V2L-LHCAAAAAg"] ampsstudio.com [Sat Oct 15 21:07:06 2022] [error] [client 51.132.219.196:0] [client 51.132.219.196] ModSecurity: Access denied with connection close (phase 2). Pattern match "^wp_is_mobile$" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "420038"] [msg "Malware.Expert - user-agent: Webshell user-agent"] [hostname "ampsstudio.com"] [uri "/wp-content/outcms.php"] [unique_id "Y0sS6prU7f3WX6_fcRwViQAAAAc"] ampsstudio.com [Sat Oct 15 21:07:06 2022] [error] [client 51.132.219.196:0] [client 51.132.219.196] ModSecurity: Access denied with connection close (phase 2). Pattern match "^wp_is_mobile$" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "420038"] [msg "Malware.Expert - user-agent: Webshell user-agent"] [hostname "ampsstudio.com"] [uri "/system_log.php"] [unique_id "Y0sS6gkLs_06fugQKRYhLQAAAAk"] ampsstudio.com [Sat Oct 15 21:07:06 2022] [error] [client 51.132.219.196:0] [client 51.132.219.196] ModSecurity: Access denied with connection close (phase 2). Pattern match "^wp_is_mobile$" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "420038"] [msg "Malware.Expert - user-agent: Webshell user-agent"] [hostname "ampsstudio.com"] [uri "/wp-backup-sql-302.php"] [unique_id "Y0sS6jdvTvKODP_X2zy3lQAAAAA"] ampsstudio.com [Sat Oct 15 21:07:06 2022] [error] [client 51.132.219.196:0] [client 51.132.219.196] ModSecurity: Access denied with connection close (phase 2). Pattern match "^wp_is_mobile$" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "420038"] [msg "Malware.Expert - user-agent: Webshell user-agent"] [hostname "ampsstudio.com"] [uri "/error.php"] [unique_id "Y0sS6jxNjRyaAS9rx_AfkwAAAAw"] ampsstudio.com [Sat Oct 15 21:07:06 2022] [error] [client 51.132.219.196:0] [client 51.132.219.196] ModSecurity: Access denied with connection close (phase 2). Pattern match "^wp_is_mobile$" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "420038"] [msg "Malware.Expert - user-agent: Webshell user-agent"] [hostname "ampsstudio.com"] [uri "/ALFA_DATA"] [unique_id "Y0sS6ikCogp-hDvzbTT1cwAAAAM"] ampsstudio.com [Sat Oct 15 21:07:06 2022] [error] [client 51.132.219.196:0] [client 51.132.219.196] ModSecurity: Access denied with connection close (phase 2). Pattern match "^wp_is_mobile$" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "420038"] [msg "Malware.Expert - user-agent: Webshell user-agent"] [hostname "ampsstudio.com"] [uri "/alfacgiapi"] [unique_id "Y0sS6n-JZMLzg83ha0jcAgAAAAQ"] ampsstudio.com [Sat Oct 15 21:07:07 2022] [error] [client 51.132.219.196:0] [client 51.132.219.196] ModSecurity: Access denied with connection close (phase 2). Pattern match "^wp_is_mobile$" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "420038"] [msg "Malware.Expert - user-agent: Webshell user-agent"] [hostname "ampsstudio.com"] [uri "/cgialfa"] [unique_id "Y0sS615VMjVGQTj_gAXaZAAAAAI"] ampsstudio.com [Sat Oct 15 21:07:07 2022] [crit] [client 51.132.219.196:0] AH00529: /home/virtual/vps-aa3942/a/aede5353c4/public_html/.well-known/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/virtual/vps-aa3942/a/aede5353c4/public_html/.well-known/' is executable ampsstudio.com [Sat Oct 15 21:07:07 2022] [crit] [client 51.132.219.196:0] AH00529: /home/virtual/vps-aa3942/a/aede5353c4/public_html/.well-known/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/virtual/vps-aa3942/a/aede5353c4/public_html/.well-known/' is executable ampsstudio.com [Sat Oct 15 21:07:08 2022] [crit] [client 51.132.219.196:0] AH00529: /home/virtual/vps-aa3942/a/aede5353c4/public_html/.well-known/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/virtual/vps-aa3942/a/aede5353c4/public_html/.well-known/' is executable ampsstudio.com [Sat Oct 15 21:07:08 2022] [error] [client 51.132.219.196:0] [client 51.132.219.196] ModSecurity: Access denied with connection close (phase 2). Pattern match "^wp_is_mobile$" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "420038"] [msg "Malware.Expert - user-agent: Webshell user-agent"] [hostname "ampsstudio.com"] [uri "/wp-content/uploads/ALFA_DATA"] [unique_id "Y0sS7DdvTvKODP_X2zy3lgAAAAA"] ampsstudio.com [Sat Oct 15 21:07:08 2022] [error] [client 51.132.219.196:0] [client 51.132.219.196] ModSecurity: Access denied with connection close (phase 2). Pattern match "^wp_is_mobile$" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "420038"] [msg "Malware.Expert - user-agent: Webshell user-agent"] [hostname "ampsstudio.com"] [uri "/wp-content/uploads/alfacgiapi"] [unique_id "Y0sS7ElTQJGOxY-P0ezKTAAAAAU"] ampsstudio.com [Sat Oct 15 21:07:08 2022] [error] [client 51.132.219.196:0] [client 51.132.219.196] ModSecurity: Access denied with connection close (phase 2). Pattern match "^wp_is_mobile$" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "420038"] [msg "Malware.Expert - user-agent: Webshell user-agent"] [hostname "ampsstudio.com"] [uri "/wp-content/uploads/cgialfa"] [unique_id "Y0sS7BwS6F4VdM2avi5BNwAAAAY"] ampsstudio.com [Sat Oct 15 21:07:08 2022] [error] [client 51.132.219.196:0] [client 51.132.219.196] ModSecurity: Access denied with connection close (phase 2). Pattern match "^wp_is_mobile$" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "420038"] [msg "Malware.Expert - user-agent: Webshell user-agent"] [hostname "ampsstudio.com"] [uri "/wp-includes/ALFA_DATA"] [unique_id "Y0sS7DxNjRyaAS9rx_AflAAAAAw"] ampsstudio.com [Sat Oct 15 21:07:09 2022] [error] [client 51.132.219.196:0] [client 51.132.219.196] ModSecurity: Access denied with connection close (phase 2). Pattern match "^wp_is_mobile$" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "420038"] [msg "Malware.Expert - user-agent: Webshell user-agent"] [hostname "ampsstudio.com"] [uri "/wp-includes/alfacgiapi"] [unique_id "Y0sS7SkCogp-hDvzbTT1dAAAAAM"] ampsstudio.com [Sat Oct 15 21:07:09 2022] [error] [client 51.132.219.196:0] [client 51.132.219.196] ModSecurity: Access denied with connection close (phase 2). Pattern match "^wp_is_mobile$" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "420038"] [msg "Malware.Expert - user-agent: Webshell user-agent"] [hostname "ampsstudio.com"] [uri "/wp-includes/cgialfa"] [unique_id "Y0sS7X-JZMLzg83ha0jcAwAAAAQ"] ampsstudio.com [Sat Oct 15 21:07:09 2022] [error] [client 51.132.219.196:0] [client 51.132.219.196] ModSecurity: Access denied with connection close (phase 2). Pattern match "^wp_is_mobile$" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "420038"] [msg "Malware.Expert - user-agent: Webshell user-agent"] [hostname "ampsstudio.com"] [uri "/wp-admin/ALFA_DATA"] [unique_id "Y0sS7V5VMjVGQTj_gAXaZQAAAAI"] ampsstudio.com [Sat Oct 15 21:07:09 2022] [error] [client 51.132.219.196:0] [client 51.132.219.196] ModSecurity: Access denied with connection close (phase 2). Pattern match "^wp_is_mobile$" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "420038"] [msg "Malware.Expert - user-agent: Webshell user-agent"] [hostname "ampsstudio.com"] [uri "/wp-admin/alfacgiapi"] [unique_id "Y0sS7VouKGdgA3V2L-LHCgAAAAg"] ampsstudio.com [Sat Oct 15 21:07:10 2022] [error] [client 51.132.219.196:0] [client 51.132.219.196] ModSecurity: Access denied with connection close (phase 2). Pattern match "^wp_is_mobile$" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "420038"] [msg "Malware.Expert - user-agent: Webshell user-agent"] [hostname "ampsstudio.com"] [uri "/wp-admin/cgialfa"] [unique_id "Y0sS7prU7f3WX6_fcRwViwAAAAc"] ampsstudio.com [Sat Oct 15 21:07:10 2022] [error] [client 51.132.219.196:0] [client 51.132.219.196] ModSecurity: Access denied with connection close (phase 2). Pattern match "^wp_is_mobile$" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "420038"] [msg "Malware.Expert - user-agent: Webshell user-agent"] [hostname "ampsstudio.com"] [uri "/wp-content/ALFA_DATA"] [unique_id "Y0sS7gkLs_06fugQKRYhLwAAAAk"] ampsstudio.com [Sat Oct 15 21:07:10 2022] [error] [client 51.132.219.196:0] [client 51.132.219.196] ModSecurity: Access denied with connection close (phase 2). Pattern match "^wp_is_mobile$" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "420038"] [msg "Malware.Expert - user-agent: Webshell user-agent"] [hostname "ampsstudio.com"] [uri "/wp-content/alfacgiapi"] [unique_id "Y0sS7jdvTvKODP_X2zy3lwAAAAA"] ampsstudio.com [Sat Oct 15 21:07:10 2022] [error] [client 51.132.219.196:0] [client 51.132.219.196] ModSecurity: Access denied with connection close (phase 2). Pattern match "^wp_is_mobile$" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "420038"] [msg "Malware.Expert - user-agent: Webshell user-agent"] [hostname "ampsstudio.com"] [uri "/wp-content/cgialfa"] [unique_id "Y0sS7klTQJGOxY-P0ezKTQAAAAU"] ampsstudio.com [Sat Oct 15 21:07:10 2022] [error] [client 51.132.219.196:0] [client 51.132.219.196] ModSecurity: Access denied with connection close (phase 2). Pattern match "^wp_is_mobile$" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "420038"] [msg "Malware.Expert - user-agent: Webshell user-agent"] [hostname "ampsstudio.com"] [uri "/templates/beez3/ALFA_DATA"] [unique_id "Y0sS7hwS6F4VdM2avi5BOAAAAAY"] ampsstudio.com [Sat Oct 15 21:07:11 2022] [error] [client 51.132.219.196:0] [client 51.132.219.196] ModSecurity: Access denied with connection close (phase 2). Pattern match "^wp_is_mobile$" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "420038"] [msg "Malware.Expert - user-agent: Webshell user-agent"] [hostname "ampsstudio.com"] [uri "/templates/beez3/alfacgiapi"] [unique_id "Y0sS7zxNjRyaAS9rx_AflQAAAAw"] ampsstudio.com [Sat Oct 15 21:07:11 2022] [error] [client 51.132.219.196:0] [client 51.132.219.196] ModSecurity: Access denied with connection close (phase 2). Pattern match "^wp_is_mobile$" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "420038"] [msg "Malware.Expert - user-agent: Webshell user-agent"] [hostname "ampsstudio.com"] [uri "/templates/beez3/cgialfa"] [unique_id "Y0sS7ykCogp-hDvzbTT1dQAAAAM"] ampsstudio.com [Sat Oct 15 21:07:11 2022] [error] [client 51.132.219.196:0] [client 51.132.219.196] ModSecurity: Access denied with connection close (phase 2). Pattern match "^wp_is_mobile$" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "420038"] [msg "Malware.Expert - user-agent: Webshell user-agent"] [hostname "ampsstudio.com"] [uri "/sites/default/files/ALFA_DATA"] [unique_id "Y0sS73-JZMLzg83ha0jcBAAAAAQ"] ampsstudio.com [Sat Oct 15 21:07:11 2022] [error] [client 51.132.219.196:0] [client 51.132.219.196] ModSecurity: Access denied with connection close (phase 2). Pattern match "^wp_is_mobile$" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "420038"] [msg "Malware.Expert - user-agent: Webshell user-agent"] [hostname "ampsstudio.com"] [uri "/sites/default/files/alfacgiapi"] [unique_id "Y0sS715VMjVGQTj_gAXaZgAAAAI"] ampsstudio.com [Sat Oct 15 21:07:11 2022] [error] [client 51.132.219.196:0] [client 51.132.219.196] ModSecurity: Access denied with connection close (phase 2). Pattern match "^wp_is_mobile$" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "420038"] [msg "Malware.Expert - user-agent: Webshell user-agent"] [hostname "ampsstudio.com"] [uri "/sites/default/files/cgialfa"] [unique_id "Y0sS71ouKGdgA3V2L-LHCwAAAAg"] ampsstudio.com [Sat Oct 15 21:07:11 2022] [error] [client 51.132.219.196:0] [client 51.132.219.196] ModSecurity: Access denied with connection close (phase 2). Pattern match "^wp_is_mobile$" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "420038"] [msg "Malware.Expert - user-agent: Webshell user-agent"] [hostname "ampsstudio.com"] [uri "/admin/controller/extension/extension/ALFA_DATA"] [unique_id "Y0sS75rU7f3WX6_fcRwVjAAAAAc"] ampsstudio.com [Sat Oct 15 21:07:12 2022] [error] [client 51.132.219.196:0] [client 51.132.219.196] ModSecurity: Access denied with connection close (phase 2). Pattern match "^wp_is_mobile$" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "420038"] [msg "Malware.Expert - user-agent: Webshell user-agent"] [hostname "ampsstudio.com"] [uri "/admin/controller/extension/extension/alfacgiapi"] [unique_id "Y0sS8AkLs_06fugQKRYhMAAAAAk"] ampsstudio.com [Sat Oct 15 21:07:12 2022] [error] [client 51.132.219.196:0] [client 51.132.219.196] ModSecurity: Access denied with connection close (phase 2). Pattern match "^wp_is_mobile$" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "420038"] [msg "Malware.Expert - user-agent: Webshell user-agent"] [hostname "ampsstudio.com"] [uri "/admin/controller/extension/extension/cgialfa"] [unique_id "Y0sS8DdvTvKODP_X2zy3mAAAAAA"] ampsstudio.com [Sat Oct 15 21:07:12 2022] [error] [client 51.132.219.196:0] [client 51.132.219.196] ModSecurity: Access denied with connection close (phase 2). Pattern match "^wp_is_mobile$" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "420038"] [msg "Malware.Expert - user-agent: Webshell user-agent"] [hostname "ampsstudio.com"] [uri "/wp-content/plugins/ubh/up.php"] [unique_id "Y0sS8ElTQJGOxY-P0ezKTgAAAAU"] ampsstudio.com [Sat Oct 15 21:07:12 2022] [error] [client 51.132.219.196:0] [client 51.132.219.196] ModSecurity: Access denied with connection close (phase 2). Pattern match "^wp_is_mobile$" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "420038"] [msg "Malware.Expert - user-agent: Webshell user-agent"] [hostname "ampsstudio.com"] [uri "/index.php"] [unique_id "Y0sS8BwS6F4VdM2avi5BOQAAAAY"] ampsstudio.com [Sat Oct 15 21:07:12 2022] [error] [client 51.132.219.196:0] [client 51.132.219.196] ModSecurity: Access denied with connection close (phase 2). Pattern match "^wp_is_mobile$" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "420038"] [msg "Malware.Expert - user-agent: Webshell user-agent"] [hostname "ampsstudio.com"] [uri "/olux.php"] [unique_id "Y0sS8DxNjRyaAS9rx_AflgAAAAw"] ampsstudio.com [Sat Oct 15 21:07:12 2022] [error] [client 51.132.219.196:0] [client 51.132.219.196] ModSecurity: Access denied with connection close (phase 2). Pattern match "^wp_is_mobile$" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "420038"] [msg "Malware.Expert - user-agent: Webshell user-agent"] [hostname "ampsstudio.com"] [uri "/xleet.php"] [unique_id "Y0sS8CkCogp-hDvzbTT1dgAAAAM"] ampsstudio.com [Sat Oct 15 21:07:12 2022] [error] [client 51.132.219.196:0] [client 51.132.219.196] ModSecurity: Access denied with connection close (phase 2). Pattern match "^wp_is_mobile$" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "420038"] [msg "Malware.Expert - user-agent: Webshell user-agent"] [hostname "ampsstudio.com"] [uri "/wso.php"] [unique_id "Y0sS8H-JZMLzg83ha0jcBQAAAAQ"] ampsstudio.com [Sat Oct 15 21:07:12 2022] [error] [client 51.132.219.196:0] [client 51.132.219.196] ModSecurity: Access denied with connection close (phase 2). Pattern match "^wp_is_mobile$" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "420038"] [msg "Malware.Expert - user-agent: Webshell user-agent"] [hostname "ampsstudio.com"] [uri "/shell.php"] [unique_id "Y0sS8F5VMjVGQTj_gAXaZwAAAAI"] ampsstudio.com [Sat Oct 15 21:07:12 2022] [error] [client 51.132.219.196:0] [client 51.132.219.196] ModSecurity: Access denied with connection close (phase 2). Pattern match "^wp_is_mobile$" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "420038"] [msg "Malware.Expert - user-agent: Webshell user-agent"] [hostname "ampsstudio.com"] [uri "/up.php"] [unique_id "Y0sS8FouKGdgA3V2L-LHDAAAAAg"] ampsstudio.com [Sat Oct 15 21:07:12 2022] [error] [client 51.132.219.196:0] [client 51.132.219.196] ModSecurity: Access denied with connection close (phase 2). Pattern match "^wp_is_mobile$" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "420038"] [msg "Malware.Expert - user-agent: Webshell user-agent"] [hostname "ampsstudio.com"] [uri "/upload.php"] [unique_id "Y0sS8JrU7f3WX6_fcRwVjQAAAAc"] ampsstudio.com [Sat Oct 15 21:07:12 2022] [error] [client 51.132.219.196:0] [client 51.132.219.196] ModSecurity: Access denied with connection close (phase 2). Pattern match "^wp_is_mobile$" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "420038"] [msg "Malware.Expert - user-agent: Webshell user-agent"] [hostname "ampsstudio.com"] [uri "/1.php"] [unique_id "Y0sS8AkLs_06fugQKRYhMQAAAAk"] ampsstudio.com [Sat Oct 15 21:07:12 2022] [error] [client 51.132.219.196:0] [client 51.132.219.196] ModSecurity: Access denied with connection close (phase 2). Pattern match "^wp_is_mobile$" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "420038"] [msg "Malware.Expert - user-agent: Webshell user-agent"] [hostname "ampsstudio.com"] [uri "/x.php"] [unique_id "Y0sS8DdvTvKODP_X2zy3mQAAAAA"] ampsstudio.com [Sat Oct 15 21:07:12 2022] [error] [client 51.132.219.196:0] [client 51.132.219.196] ModSecurity: Access denied with connection close (phase 2). Pattern match "^wp_is_mobile$" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "420038"] [msg "Malware.Expert - user-agent: Webshell user-agent"] [hostname "ampsstudio.com"] [uri "/z.php"] [unique_id "Y0sS8ElTQJGOxY-P0ezKTwAAAAU"] ampsstudio.com [Sat Oct 15 21:07:13 2022] [error] [client 51.132.219.196:0] [client 51.132.219.196] ModSecurity: Access denied with connection close (phase 2). Pattern match "^wp_is_mobile$" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "420038"] [msg "Malware.Expert - user-agent: Webshell user-agent"] [hostname "ampsstudio.com"] [uri "/a.php"] [unique_id "Y0sS8RwS6F4VdM2avi5BOgAAAAY"] ampsstudio.com [Sat Oct 15 21:07:13 2022] [error] [client 51.132.219.196:0] [client 51.132.219.196] ModSecurity: Access denied with connection close (phase 2). Pattern match "^wp_is_mobile$" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "420038"] [msg "Malware.Expert - user-agent: Webshell user-agent"] [hostname "ampsstudio.com"] [uri "/test.php"] [unique_id "Y0sS8TxNjRyaAS9rx_AflwAAAAw"] ampsstudio.com [Sat Oct 15 21:07:13 2022] [error] [client 51.132.219.196:0] [client 51.132.219.196] ModSecurity: Access denied with connection close (phase 2). Pattern match "^wp_is_mobile$" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "420038"] [msg "Malware.Expert - user-agent: Webshell user-agent"] [hostname "ampsstudio.com"] [uri "/wp.php"] [unique_id "Y0sS8SkCogp-hDvzbTT1dwAAAAM"] ampsstudio.com [Sat Oct 15 21:07:13 2022] [error] [client 51.132.219.196:0] [client 51.132.219.196] ModSecurity: Access denied with connection close (phase 2). Pattern match "^wp_is_mobile$" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "420038"] [msg "Malware.Expert - user-agent: Webshell user-agent"] [hostname "ampsstudio.com"] [uri "/alfa.php"] [unique_id "Y0sS8X-JZMLzg83ha0jcBgAAAAQ"] ampsstudio.com [Sat Oct 15 21:07:13 2022] [error] [client 51.132.219.196:0] [client 51.132.219.196] ModSecurity: Access denied with connection close (phase 2). Pattern match "^wp_is_mobile$" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "420038"] [msg "Malware.Expert - user-agent: Webshell user-agent"] [hostname "ampsstudio.com"] [uri "/config.php"] [unique_id "Y0sS8V5VMjVGQTj_gAXaaAAAAAI"] ampsstudio.com [Sat Oct 15 21:07:13 2022] [error] [client 51.132.219.196:0] [client 51.132.219.196] ModSecurity: Access denied with connection close (phase 2). Pattern match "^wp_is_mobile$" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "420038"] [msg "Malware.Expert - user-agent: Webshell user-agent"] [hostname "ampsstudio.com"] [uri "/templates/beez3/index.php"] [unique_id "Y0sS8VouKGdgA3V2L-LHDQAAAAg"] ampsstudio.com [Sat Oct 15 21:07:13 2022] [error] [client 51.132.219.196:0] [client 51.132.219.196] ModSecurity: Access denied with connection close (phase 2). Pattern match "^wp_is_mobile$" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "420038"] [msg "Malware.Expert - user-agent: Webshell user-agent"] [hostname "ampsstudio.com"] [uri "/about.php"] [unique_id "Y0sS8ZrU7f3WX6_fcRwVjgAAAAc"] ampsstudio.com [Sat Oct 15 21:07:13 2022] [error] [client 51.132.219.196:0] [client 51.132.219.196] ModSecurity: Access denied with connection close (phase 2). Pattern match "^wp_is_mobile$" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "420038"] [msg "Malware.Expert - user-agent: Webshell user-agent"] [hostname "ampsstudio.com"] [uri "/shells.php"] [unique_id "Y0sS8QkLs_06fugQKRYhMgAAAAk"] www.ampsstudio.com [Sat Oct 15 21:33:05 2022] [error] [client 74.208.25.63:0] AH01071: Got error 'PHP message: PHP Warning: Undefined array key "HTTP_USER_AGENT" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/bookly-responsive-appointment-booking-tool/frontend/modules/booking/ShortCode.php on line 66' webdisk.ampsstudio.com [Sat Oct 15 21:45:09 2022] [error] [client 20.108.0.207:0] [client 20.108.0.207] ModSecurity: Access denied with code 403 (phase 2). Match of "contains index.php" against "REQUEST_URI" required. [file "remote server"] [line "-1"] [id "570076"] [msg "Malware.Expert - Malware"] [hostname "webdisk.ampsstudio.com"] [uri "/wp-commentin.php"] [unique_id "Y0sb1QkLs_06fugQKRYhOwAAAAk"] webdisk.ampsstudio.com [Sat Oct 15 21:45:12 2022] [error] [client 20.108.0.207:0] [client 20.108.0.207] ModSecurity: Access denied with code 403 (phase 2). Match of "contains index.php" against "REQUEST_URI" required. [file "remote server"] [line "-1"] [id "570076"] [msg "Malware.Expert - Malware"] [hostname "webdisk.ampsstudio.com"] [uri "/wp-commentin.php"] [unique_id "Y0sb2DdvTvKODP_X2zy3owAAAAA"] mail.ampsstudio.com [Sat Oct 15 22:25:25 2022] [error] [client 20.108.0.207:0] [client 20.108.0.207] ModSecurity: Access denied with code 403 (phase 2). Match of "contains index.php" against "REQUEST_URI" required. [file "remote server"] [line "-1"] [id "570076"] [msg "Malware.Expert - Malware"] [hostname "mail.ampsstudio.com"] [uri "/wp-commentin.php"] [unique_id "Y0slRTdvTvKODP_X2zy3swAAAAA"] mail.ampsstudio.com [Sat Oct 15 22:25:32 2022] [error] [client 20.108.0.207:0] [client 20.108.0.207] ModSecurity: Access denied with code 403 (phase 2). Match of "contains index.php" against "REQUEST_URI" required. [file "remote server"] [line "-1"] [id "570076"] [msg "Malware.Expert - Malware"] [hostname "mail.ampsstudio.com"] [uri "/wp-commentin.php"] [unique_id "Y0slTH-JZMLzg83ha0jcHwAAAAQ"] www.ampsstudio.com [Sat Oct 15 22:54:46 2022] [error] [client 46.148.206.226:0] AH01071: Got error 'PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179' www.ampsstudio.com [Sat Oct 15 22:54:46 2022] [error] [client 46.148.206.226:0] AH01071: Got error 'PHP message: PHP Warning: Cannot modify header information - headers already sent by (output started at /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-includes/functions.php:5275) in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/includes/sonaar-music/css/theme/custom-style.php on line 2' ampsstudio.com [Sat Oct 15 23:25:58 2022] [error] [client 20.108.0.207:0] [client 20.108.0.207] ModSecurity: Access denied with code 403 (phase 2). Match of "contains index.php" against "REQUEST_URI" required. [file "remote server"] [line "-1"] [id "570076"] [msg "Malware.Expert - Malware"] [hostname "ampsstudio.com"] [uri "/wp-commentin.php"] [unique_id "Y0szdgkLs_06fugQKRYhXwAAAAk"] ampsstudio.com [Sat Oct 15 23:26:16 2022] [error] [client 20.108.0.207:0] [client 20.108.0.207] ModSecurity: Access denied with code 403 (phase 2). Match of "contains index.php" against "REQUEST_URI" required. [file "remote server"] [line "-1"] [id "570076"] [msg "Malware.Expert - Malware"] [hostname "ampsstudio.com"] [uri "/wp-commentin.php"] [unique_id "Y0sziElTQJGOxY-P0ezKewAAAAU"] webmail.ampsstudio.com [Sun Oct 16 00:16:24 2022] [error] [client 20.108.0.207:0] [client 20.108.0.207] ModSecurity: Access denied with code 403 (phase 2). Match of "contains index.php" against "REQUEST_URI" required. [file "remote server"] [line "-1"] [id "570076"] [msg "Malware.Expert - Malware"] [hostname "webmail.ampsstudio.com"] [uri "/wp-commentin.php"] [unique_id "Y0s_SH-JZMLzg83ha0jcSAAAAAQ"] webmail.ampsstudio.com [Sun Oct 16 00:16:30 2022] [error] [client 20.108.0.207:0] [client 20.108.0.207] ModSecurity: Access denied with code 403 (phase 2). Match of "contains index.php" against "REQUEST_URI" required. [file "remote server"] [line "-1"] [id "570076"] [msg "Malware.Expert - Malware"] [hostname "webmail.ampsstudio.com"] [uri "/wp-commentin.php"] [unique_id "Y0s_TjdvTvKODP_X2zy34AAAAAA"] cpanel.ampsstudio.com [Sun Oct 16 00:21:25 2022] [error] [client 51.132.219.196:0] [client 51.132.219.196] ModSecurity: Access denied with connection close (phase 2). Pattern match "^wp_is_mobile$" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "420038"] [msg "Malware.Expert - user-agent: Webshell user-agent"] [hostname "cpanel.ampsstudio.com"] [uri "/wp-load.php"] [unique_id "Y0tAdVouKGdgA3V2L-LHXgAAAAg"] cpanel.ampsstudio.com [Sun Oct 16 00:21:25 2022] [error] [client 51.132.219.196:0] [client 51.132.219.196] ModSecurity: Access denied with connection close (phase 2). Pattern match "^wp_is_mobile$" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "420038"] [msg "Malware.Expert - user-agent: Webshell user-agent"] [hostname "cpanel.ampsstudio.com"] [uri "/wp-load.php"] [unique_id "Y0tAdQkLs_06fugQKRYhfAAAAAk"] cpanel.ampsstudio.com [Sun Oct 16 00:21:25 2022] [error] [client 51.132.219.196:0] [client 51.132.219.196] ModSecurity: Access denied with connection close (phase 2). Pattern match "^wp_is_mobile$" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "420038"] [msg "Malware.Expert - user-agent: Webshell user-agent"] [hostname "cpanel.ampsstudio.com"] [uri "/style.php"] [unique_id "Y0tAdX-JZMLzg83ha0jcSgAAAAQ"] cpanel.ampsstudio.com [Sun Oct 16 00:21:25 2022] [error] [client 51.132.219.196:0] [client 51.132.219.196] ModSecurity: Access denied with connection close (phase 2). Pattern match "^wp_is_mobile$" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "420038"] [msg "Malware.Expert - user-agent: Webshell user-agent"] [hostname "cpanel.ampsstudio.com"] [uri "/wp-admin/style.php"] [unique_id "Y0tAdTdvTvKODP_X2zy34gAAAAA"] cpanel.ampsstudio.com [Sun Oct 16 00:21:25 2022] [error] [client 51.132.219.196:0] [client 51.132.219.196] ModSecurity: Access denied with connection close (phase 2). Pattern match "^wp_is_mobile$" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "420038"] [msg "Malware.Expert - user-agent: Webshell user-agent"] [hostname "cpanel.ampsstudio.com"] [uri "/s_e.php"] [unique_id "Y0tAdZrU7f3WX6_fcRwV2AAAAAc"] cpanel.ampsstudio.com [Sun Oct 16 00:21:25 2022] [error] [client 51.132.219.196:0] [client 51.132.219.196] ModSecurity: Access denied with connection close (phase 2). Pattern match "^wp_is_mobile$" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "420038"] [msg "Malware.Expert - user-agent: Webshell user-agent"] [hostname "cpanel.ampsstudio.com"] [uri "/s_ne.php"] [unique_id "Y0tAdV5VMjVGQTj_gAXasQAAAAI"] cpanel.ampsstudio.com [Sun Oct 16 00:21:27 2022] [error] [client 51.132.219.196:0] [client 51.132.219.196] ModSecurity: Access denied with connection close (phase 2). Pattern match "^wp_is_mobile$" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "420038"] [msg "Malware.Expert - user-agent: Webshell user-agent"] [hostname "cpanel.ampsstudio.com"] [uri "/radio.php"] [unique_id "Y0tAdykCogp-hDvzbTT1vAAAAAM"] cpanel.ampsstudio.com [Sun Oct 16 00:21:27 2022] [error] [client 51.132.219.196:0] [client 51.132.219.196] ModSecurity: Access denied with connection close (phase 2). Pattern match "^wp_is_mobile$" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "420038"] [msg "Malware.Expert - user-agent: Webshell user-agent"] [hostname "cpanel.ampsstudio.com"] [uri "/doc.php"] [unique_id "Y0tAd0lTQJGOxY-P0ezKnQAAAAU"] cpanel.ampsstudio.com [Sun Oct 16 00:21:27 2022] [error] [client 51.132.219.196:0] [client 51.132.219.196] ModSecurity: Access denied with code 403 (phase 2). Match of "contains index.php" against "REQUEST_URI" required. [file "remote server"] [line "-1"] [id "570075"] [msg "Malware.Expert - Malware"] [hostname "cpanel.ampsstudio.com"] [uri "/wp_wrong_datlib.php"] [unique_id "Y0tAd1ouKGdgA3V2L-LHXwAAAAg"] cpanel.ampsstudio.com [Sun Oct 16 00:21:27 2022] [error] [client 51.132.219.196:0] [client 51.132.219.196] ModSecurity: Access denied with code 403 (phase 2). Match of "contains index.php" against "REQUEST_URI" required. [file "remote server"] [line "-1"] [id "570075"] [msg "Malware.Expert - Malware"] [hostname "cpanel.ampsstudio.com"] [uri "/beence.php"] [unique_id "Y0tAdwkLs_06fugQKRYhfQAAAAk"] cpanel.ampsstudio.com [Sun Oct 16 00:21:29 2022] [error] [client 51.132.219.196:0] [client 51.132.219.196] ModSecurity: Access denied with connection close (phase 2). Pattern match "^wp_is_mobile$" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "420038"] [msg "Malware.Expert - user-agent: Webshell user-agent"] [hostname "cpanel.ampsstudio.com"] [uri "/ups.php"] [unique_id "Y0tAeX-JZMLzg83ha0jcSwAAAAQ"] cpanel.ampsstudio.com [Sun Oct 16 00:21:29 2022] [error] [client 51.132.219.196:0] [client 51.132.219.196] ModSecurity: Access denied with connection close (phase 2). Pattern match "^wp_is_mobile$" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "420038"] [msg "Malware.Expert - user-agent: Webshell user-agent"] [hostname "cpanel.ampsstudio.com"] [uri "/wp-signin.php"] [unique_id "Y0tAeTdvTvKODP_X2zy34wAAAAA"] cpanel.ampsstudio.com [Sun Oct 16 00:21:29 2022] [error] [client 51.132.219.196:0] [client 51.132.219.196] ModSecurity: Access denied with connection close (phase 2). Pattern match "^wp_is_mobile$" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "420038"] [msg "Malware.Expert - user-agent: Webshell user-agent"] [hostname "cpanel.ampsstudio.com"] [uri "/media-admin.php"] [unique_id "Y0tAeZrU7f3WX6_fcRwV2QAAAAc"] cpanel.ampsstudio.com [Sun Oct 16 00:21:30 2022] [error] [client 51.132.219.196:0] [client 51.132.219.196] ModSecurity: Access denied with code 403 (phase 2). Match of "contains index.php" against "REQUEST_URI" required. [file "remote server"] [line "-1"] [id "570075"] [msg "Malware.Expert - Malware"] [hostname "cpanel.ampsstudio.com"] [uri "/export.php"] [unique_id "Y0tAel5VMjVGQTj_gAXasgAAAAI"] cpanel.ampsstudio.com [Sun Oct 16 00:21:30 2022] [error] [client 51.132.219.196:0] [client 51.132.219.196] ModSecurity: Access denied with code 403 (phase 2). Match of "contains index.php" against "REQUEST_URI" required. [file "remote server"] [line "-1"] [id "570075"] [msg "Malware.Expert - Malware"] [hostname "cpanel.ampsstudio.com"] [uri "/wp-content/export.php"] [unique_id "Y0tAejxNjRyaAS9rx_Af6QAAAAw"] cpanel.ampsstudio.com [Sun Oct 16 00:21:30 2022] [error] [client 51.132.219.196:0] [client 51.132.219.196] ModSecurity: Access denied with connection close (phase 2). Pattern match "^wp_is_mobile$" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "420038"] [msg "Malware.Expert - user-agent: Webshell user-agent"] [hostname "cpanel.ampsstudio.com"] [uri "/wp-includes/wp-class.php"] [unique_id "Y0tAehwS6F4VdM2avi5BhwAAAAY"] cpanel.ampsstudio.com [Sun Oct 16 00:21:30 2022] [error] [client 51.132.219.196:0] [client 51.132.219.196] ModSecurity: Access denied with code 403 (phase 2). Match of "contains index.php" against "REQUEST_URI" required. [file "remote server"] [line "-1"] [id "570075"] [msg "Malware.Expert - Malware"] [hostname "cpanel.ampsstudio.com"] [uri "/wp-includes/wp-atom.php"] [unique_id "Y0tAeikCogp-hDvzbTT1vQAAAAM"] cpanel.ampsstudio.com [Sun Oct 16 00:21:30 2022] [error] [client 51.132.219.196:0] [client 51.132.219.196] ModSecurity: Access denied with code 403 (phase 2). Pattern match "/wp-includes/images/.*\\\\.php" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430032"] [msg "Malware.Expert - request_uri: Wordpress - prevent PHP files from executing"] [hostname "cpanel.ampsstudio.com"] [uri "/wp-includes/images/css.php"] [unique_id "Y0tAeklTQJGOxY-P0ezKngAAAAU"] cpanel.ampsstudio.com [Sun Oct 16 00:21:30 2022] [error] [client 51.132.219.196:0] [client 51.132.219.196] ModSecurity: Access denied with code 403 (phase 2). Pattern match "/wp-includes/css/.*\\\\.php" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430035"] [msg "Malware.Expert - request_uri: Wordpress - prevent PHP files from executing"] [hostname "cpanel.ampsstudio.com"] [uri "/wp-includes/css/css.php"] [unique_id "Y0tAelouKGdgA3V2L-LHYAAAAAg"] cpanel.ampsstudio.com [Sun Oct 16 00:21:30 2022] [error] [client 51.132.219.196:0] [client 51.132.219.196] ModSecurity: Access denied with code 403 (phase 2). Match of "contains index.php" against "REQUEST_URI" required. [file "remote server"] [line "-1"] [id "570075"] [msg "Malware.Expert - Malware"] [hostname "cpanel.ampsstudio.com"] [uri "/defau1t.php"] [unique_id "Y0tAegkLs_06fugQKRYhfgAAAAk"] cpanel.ampsstudio.com [Sun Oct 16 00:21:30 2022] [error] [client 51.132.219.196:0] [client 51.132.219.196] ModSecurity: Access denied with code 403 (phase 2). Match of "contains index.php" against "REQUEST_URI" required. [file "remote server"] [line "-1"] [id "570075"] [msg "Malware.Expert - Malware"] [hostname "cpanel.ampsstudio.com"] [uri "/moduless.php"] [unique_id "Y0tAen-JZMLzg83ha0jcTAAAAAQ"] cpanel.ampsstudio.com [Sun Oct 16 00:21:30 2022] [error] [client 51.132.219.196:0] [client 51.132.219.196] ModSecurity: Access denied with connection close (phase 2). Pattern match "^wp_is_mobile$" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "420038"] [msg "Malware.Expert - user-agent: Webshell user-agent"] [hostname "cpanel.ampsstudio.com"] [uri "/wp-booking.php"] [unique_id "Y0tAejdvTvKODP_X2zy35AAAAAA"] cpanel.ampsstudio.com [Sun Oct 16 00:21:30 2022] [error] [client 51.132.219.196:0] [client 51.132.219.196] ModSecurity: Access denied with connection close (phase 2). Pattern match "^wp_is_mobile$" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "420038"] [msg "Malware.Expert - user-agent: Webshell user-agent"] [hostname "cpanel.ampsstudio.com"] [uri "/wp-content/plugins/backup_index.php"] [unique_id "Y0tAeprU7f3WX6_fcRwV2gAAAAc"] cpanel.ampsstudio.com [Sun Oct 16 00:21:31 2022] [error] [client 51.132.219.196:0] [client 51.132.219.196] ModSecurity: Access denied with connection close (phase 2). Pattern match "^wp_is_mobile$" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "420038"] [msg "Malware.Expert - user-agent: Webshell user-agent"] [hostname "cpanel.ampsstudio.com"] [uri "/wp-content/mu-plugins/db-safe-mode.php"] [unique_id "Y0tAe15VMjVGQTj_gAXaswAAAAI"] cpanel.ampsstudio.com [Sun Oct 16 00:21:31 2022] [error] [client 51.132.219.196:0] [client 51.132.219.196] ModSecurity: Access denied with connection close (phase 2). Pattern match "^wp_is_mobile$" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "420038"] [msg "Malware.Expert - user-agent: Webshell user-agent"] [hostname "cpanel.ampsstudio.com"] [uri "/wp-includes/css/wp-config.php"] [unique_id "Y0tAezxNjRyaAS9rx_Af6gAAAAw"] cpanel.ampsstudio.com [Sun Oct 16 00:21:31 2022] [error] [client 51.132.219.196:0] [client 51.132.219.196] ModSecurity: Access denied with connection close (phase 2). Pattern match "^wp_is_mobile$" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "420038"] [msg "Malware.Expert - user-agent: Webshell user-agent"] [hostname "cpanel.ampsstudio.com"] [uri "/config.bak.php"] [unique_id "Y0tAexwS6F4VdM2avi5BiAAAAAY"] cpanel.ampsstudio.com [Sun Oct 16 00:21:31 2022] [error] [client 51.132.219.196:0] [client 51.132.219.196] ModSecurity: Access denied with connection close (phase 2). Pattern match "^wp_is_mobile$" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "420038"] [msg "Malware.Expert - user-agent: Webshell user-agent"] [hostname "cpanel.ampsstudio.com"] [uri "/wp-content/themes/config.bak.php"] [unique_id "Y0tAeykCogp-hDvzbTT1vgAAAAM"] cpanel.ampsstudio.com [Sun Oct 16 00:21:31 2022] [error] [client 51.132.219.196:0] [client 51.132.219.196] ModSecurity: Access denied with connection close (phase 2). Pattern match "^wp_is_mobile$" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "420038"] [msg "Malware.Expert - user-agent: Webshell user-agent"] [hostname "cpanel.ampsstudio.com"] [uri "/legion.php"] [unique_id "Y0tAe0lTQJGOxY-P0ezKnwAAAAU"] cpanel.ampsstudio.com [Sun Oct 16 00:21:32 2022] [error] [client 51.132.219.196:0] [client 51.132.219.196] ModSecurity: Access denied with connection close (phase 2). Pattern match "^wp_is_mobile$" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "420038"] [msg "Malware.Expert - user-agent: Webshell user-agent"] [hostname "cpanel.ampsstudio.com"] [uri "/wp-plugins.php"] [unique_id "Y0tAfAkLs_06fugQKRYhfwAAAAk"] cpanel.ampsstudio.com [Sun Oct 16 00:21:32 2022] [error] [client 51.132.219.196:0] [client 51.132.219.196] ModSecurity: Access denied with connection close (phase 2). Pattern match "^wp_is_mobile$" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "420038"] [msg "Malware.Expert - user-agent: Webshell user-agent"] [hostname "cpanel.ampsstudio.com"] [uri "/gank.php.PhP"] [unique_id "Y0tAfH-JZMLzg83ha0jcTQAAAAQ"] cpanel.ampsstudio.com [Sun Oct 16 00:21:32 2022] [error] [client 51.132.219.196:0] [client 51.132.219.196] ModSecurity: Access denied with connection close (phase 2). Pattern match "^wp_is_mobile$" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "420038"] [msg "Malware.Expert - user-agent: Webshell user-agent"] [hostname "cpanel.ampsstudio.com"] [uri "/wp-content/db-cache.php"] [unique_id "Y0tAfDdvTvKODP_X2zy35QAAAAA"] cpanel.ampsstudio.com [Sun Oct 16 00:21:32 2022] [error] [client 51.132.219.196:0] [client 51.132.219.196] ModSecurity: Access denied with code 403 (phase 2). Match of "contains index.php" against "REQUEST_URI" required. [file "remote server"] [line "-1"] [id "570075"] [msg "Malware.Expert - Malware"] [hostname "cpanel.ampsstudio.com"] [uri "/archives.php"] [unique_id "Y0tAfJrU7f3WX6_fcRwV2wAAAAc"] cpanel.ampsstudio.com [Sun Oct 16 00:21:32 2022] [error] [client 51.132.219.196:0] [client 51.132.219.196] ModSecurity: Access denied with code 403 (phase 2). Match of "contains index.php" against "REQUEST_URI" required. [file "remote server"] [line "-1"] [id "570075"] [msg "Malware.Expert - Malware"] [hostname "cpanel.ampsstudio.com"] [uri "/defau11.php"] [unique_id "Y0tAfF5VMjVGQTj_gAXatAAAAAI"] cpanel.ampsstudio.com [Sun Oct 16 00:21:32 2022] [error] [client 51.132.219.196:0] [client 51.132.219.196] ModSecurity: Access denied with connection close (phase 2). Pattern match "^wp_is_mobile$" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "420038"] [msg "Malware.Expert - user-agent: Webshell user-agent"] [hostname "cpanel.ampsstudio.com"] [uri "/wp-content/outcms.php"] [unique_id "Y0tAfDxNjRyaAS9rx_Af6wAAAAw"] cpanel.ampsstudio.com [Sun Oct 16 00:21:32 2022] [error] [client 51.132.219.196:0] [client 51.132.219.196] ModSecurity: Access denied with connection close (phase 2). Pattern match "^wp_is_mobile$" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "420038"] [msg "Malware.Expert - user-agent: Webshell user-agent"] [hostname "cpanel.ampsstudio.com"] [uri "/system_log.php"] [unique_id "Y0tAfBwS6F4VdM2avi5BiQAAAAY"] cpanel.ampsstudio.com [Sun Oct 16 00:21:33 2022] [error] [client 51.132.219.196:0] [client 51.132.219.196] ModSecurity: Access denied with connection close (phase 2). Pattern match "^wp_is_mobile$" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "420038"] [msg "Malware.Expert - user-agent: Webshell user-agent"] [hostname "cpanel.ampsstudio.com"] [uri "/wp-backup-sql-302.php"] [unique_id "Y0tAfSkCogp-hDvzbTT1vwAAAAM"] cpanel.ampsstudio.com [Sun Oct 16 00:21:33 2022] [error] [client 51.132.219.196:0] [client 51.132.219.196] ModSecurity: Access denied with connection close (phase 2). Pattern match "^wp_is_mobile$" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "420038"] [msg "Malware.Expert - user-agent: Webshell user-agent"] [hostname "cpanel.ampsstudio.com"] [uri "/error.php"] [unique_id "Y0tAfUlTQJGOxY-P0ezKoAAAAAU"] cpanel.ampsstudio.com [Sun Oct 16 00:21:33 2022] [error] [client 51.132.219.196:0] [client 51.132.219.196] ModSecurity: Access denied with connection close (phase 2). Pattern match "^wp_is_mobile$" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "420038"] [msg "Malware.Expert - user-agent: Webshell user-agent"] [hostname "cpanel.ampsstudio.com"] [uri "/ALFA_DATA"] [unique_id "Y0tAfVouKGdgA3V2L-LHYgAAAAg"] cpanel.ampsstudio.com [Sun Oct 16 00:21:33 2022] [error] [client 51.132.219.196:0] [client 51.132.219.196] ModSecurity: Access denied with connection close (phase 2). Pattern match "^wp_is_mobile$" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "420038"] [msg "Malware.Expert - user-agent: Webshell user-agent"] [hostname "cpanel.ampsstudio.com"] [uri "/alfacgiapi"] [unique_id "Y0tAfQkLs_06fugQKRYhgAAAAAk"] cpanel.ampsstudio.com [Sun Oct 16 00:21:33 2022] [error] [client 51.132.219.196:0] [client 51.132.219.196] ModSecurity: Access denied with connection close (phase 2). Pattern match "^wp_is_mobile$" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "420038"] [msg "Malware.Expert - user-agent: Webshell user-agent"] [hostname "cpanel.ampsstudio.com"] [uri "/cgialfa"] [unique_id "Y0tAfX-JZMLzg83ha0jcTgAAAAQ"] cpanel.ampsstudio.com [Sun Oct 16 00:21:33 2022] [crit] [client 51.132.219.196:0] AH00529: /home/virtual/vps-aa3942/a/aede5353c4/public_html/.well-known/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/virtual/vps-aa3942/a/aede5353c4/public_html/.well-known/' is executable cpanel.ampsstudio.com [Sun Oct 16 00:21:33 2022] [crit] [client 51.132.219.196:0] AH00529: /home/virtual/vps-aa3942/a/aede5353c4/public_html/.well-known/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/virtual/vps-aa3942/a/aede5353c4/public_html/.well-known/' is executable cpanel.ampsstudio.com [Sun Oct 16 00:21:33 2022] [crit] [client 51.132.219.196:0] AH00529: /home/virtual/vps-aa3942/a/aede5353c4/public_html/.well-known/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/virtual/vps-aa3942/a/aede5353c4/public_html/.well-known/' is executable cpanel.ampsstudio.com [Sun Oct 16 00:21:34 2022] [error] [client 51.132.219.196:0] [client 51.132.219.196] ModSecurity: Access denied with connection close (phase 2). Pattern match "^wp_is_mobile$" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "420038"] [msg "Malware.Expert - user-agent: Webshell user-agent"] [hostname "cpanel.ampsstudio.com"] [uri "/wp-content/uploads/ALFA_DATA"] [unique_id "Y0tAfjxNjRyaAS9rx_Af7AAAAAw"] cpanel.ampsstudio.com [Sun Oct 16 00:21:34 2022] [error] [client 51.132.219.196:0] [client 51.132.219.196] ModSecurity: Access denied with connection close (phase 2). Pattern match "^wp_is_mobile$" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "420038"] [msg "Malware.Expert - user-agent: Webshell user-agent"] [hostname "cpanel.ampsstudio.com"] [uri "/wp-content/uploads/alfacgiapi"] [unique_id "Y0tAfhwS6F4VdM2avi5BigAAAAY"] cpanel.ampsstudio.com [Sun Oct 16 00:21:34 2022] [error] [client 51.132.219.196:0] [client 51.132.219.196] ModSecurity: Access denied with connection close (phase 2). Pattern match "^wp_is_mobile$" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "420038"] [msg "Malware.Expert - user-agent: Webshell user-agent"] [hostname "cpanel.ampsstudio.com"] [uri "/wp-content/uploads/cgialfa"] [unique_id "Y0tAfikCogp-hDvzbTT1wAAAAAM"] cpanel.ampsstudio.com [Sun Oct 16 00:21:34 2022] [error] [client 51.132.219.196:0] [client 51.132.219.196] ModSecurity: Access denied with connection close (phase 2). Pattern match "^wp_is_mobile$" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "420038"] [msg "Malware.Expert - user-agent: Webshell user-agent"] [hostname "cpanel.ampsstudio.com"] [uri "/wp-includes/ALFA_DATA"] [unique_id "Y0tAfklTQJGOxY-P0ezKoQAAAAU"] cpanel.ampsstudio.com [Sun Oct 16 00:21:34 2022] [error] [client 51.132.219.196:0] [client 51.132.219.196] ModSecurity: Access denied with connection close (phase 2). Pattern match "^wp_is_mobile$" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "420038"] [msg "Malware.Expert - user-agent: Webshell user-agent"] [hostname "cpanel.ampsstudio.com"] [uri "/wp-includes/alfacgiapi"] [unique_id "Y0tAflouKGdgA3V2L-LHYwAAAAg"] cpanel.ampsstudio.com [Sun Oct 16 00:21:34 2022] [error] [client 51.132.219.196:0] [client 51.132.219.196] ModSecurity: Access denied with connection close (phase 2). Pattern match "^wp_is_mobile$" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "420038"] [msg "Malware.Expert - user-agent: Webshell user-agent"] [hostname "cpanel.ampsstudio.com"] [uri "/wp-includes/cgialfa"] [unique_id "Y0tAfgkLs_06fugQKRYhgQAAAAk"] cpanel.ampsstudio.com [Sun Oct 16 00:21:34 2022] [error] [client 51.132.219.196:0] [client 51.132.219.196] ModSecurity: Access denied with connection close (phase 2). Pattern match "^wp_is_mobile$" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "420038"] [msg "Malware.Expert - user-agent: Webshell user-agent"] [hostname "cpanel.ampsstudio.com"] [uri "/wp-admin/ALFA_DATA"] [unique_id "Y0tAfn-JZMLzg83ha0jcTwAAAAQ"] cpanel.ampsstudio.com [Sun Oct 16 00:21:35 2022] [error] [client 51.132.219.196:0] [client 51.132.219.196] ModSecurity: Access denied with connection close (phase 2). Pattern match "^wp_is_mobile$" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "420038"] [msg "Malware.Expert - user-agent: Webshell user-agent"] [hostname "cpanel.ampsstudio.com"] [uri "/wp-admin/alfacgiapi"] [unique_id "Y0tAfzdvTvKODP_X2zy35wAAAAA"] cpanel.ampsstudio.com [Sun Oct 16 00:21:35 2022] [error] [client 51.132.219.196:0] [client 51.132.219.196] ModSecurity: Access denied with connection close (phase 2). Pattern match "^wp_is_mobile$" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "420038"] [msg "Malware.Expert - user-agent: Webshell user-agent"] [hostname "cpanel.ampsstudio.com"] [uri "/wp-admin/cgialfa"] [unique_id "Y0tAf5rU7f3WX6_fcRwV3QAAAAc"] cpanel.ampsstudio.com [Sun Oct 16 00:21:35 2022] [error] [client 51.132.219.196:0] [client 51.132.219.196] ModSecurity: Access denied with connection close (phase 2). Pattern match "^wp_is_mobile$" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "420038"] [msg "Malware.Expert - user-agent: Webshell user-agent"] [hostname "cpanel.ampsstudio.com"] [uri "/wp-content/ALFA_DATA"] [unique_id "Y0tAf15VMjVGQTj_gAXatgAAAAI"] cpanel.ampsstudio.com [Sun Oct 16 00:21:35 2022] [error] [client 51.132.219.196:0] [client 51.132.219.196] ModSecurity: Access denied with connection close (phase 2). Pattern match "^wp_is_mobile$" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "420038"] [msg "Malware.Expert - user-agent: Webshell user-agent"] [hostname "cpanel.ampsstudio.com"] [uri "/wp-content/alfacgiapi"] [unique_id "Y0tAfzxNjRyaAS9rx_Af7QAAAAw"] cpanel.ampsstudio.com [Sun Oct 16 00:21:35 2022] [error] [client 51.132.219.196:0] [client 51.132.219.196] ModSecurity: Access denied with connection close (phase 2). Pattern match "^wp_is_mobile$" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "420038"] [msg "Malware.Expert - user-agent: Webshell user-agent"] [hostname "cpanel.ampsstudio.com"] [uri "/wp-content/cgialfa"] [unique_id "Y0tAfxwS6F4VdM2avi5BiwAAAAY"] cpanel.ampsstudio.com [Sun Oct 16 00:21:35 2022] [error] [client 51.132.219.196:0] [client 51.132.219.196] ModSecurity: Access denied with connection close (phase 2). Pattern match "^wp_is_mobile$" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "420038"] [msg "Malware.Expert - user-agent: Webshell user-agent"] [hostname "cpanel.ampsstudio.com"] [uri "/templates/beez3/ALFA_DATA"] [unique_id "Y0tAfykCogp-hDvzbTT1wQAAAAM"] cpanel.ampsstudio.com [Sun Oct 16 00:21:35 2022] [error] [client 51.132.219.196:0] [client 51.132.219.196] ModSecurity: Access denied with connection close (phase 2). Pattern match "^wp_is_mobile$" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "420038"] [msg "Malware.Expert - user-agent: Webshell user-agent"] [hostname "cpanel.ampsstudio.com"] [uri "/templates/beez3/alfacgiapi"] [unique_id "Y0tAf0lTQJGOxY-P0ezKogAAAAU"] cpanel.ampsstudio.com [Sun Oct 16 00:21:35 2022] [error] [client 51.132.219.196:0] [client 51.132.219.196] ModSecurity: Access denied with connection close (phase 2). Pattern match "^wp_is_mobile$" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "420038"] [msg "Malware.Expert - user-agent: Webshell user-agent"] [hostname "cpanel.ampsstudio.com"] [uri "/templates/beez3/cgialfa"] [unique_id "Y0tAf1ouKGdgA3V2L-LHZAAAAAg"] cpanel.ampsstudio.com [Sun Oct 16 00:21:36 2022] [error] [client 51.132.219.196:0] [client 51.132.219.196] ModSecurity: Access denied with connection close (phase 2). Pattern match "^wp_is_mobile$" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "420038"] [msg "Malware.Expert - user-agent: Webshell user-agent"] [hostname "cpanel.ampsstudio.com"] [uri "/sites/default/files/ALFA_DATA"] [unique_id "Y0tAgAkLs_06fugQKRYhggAAAAk"] cpanel.ampsstudio.com [Sun Oct 16 00:21:36 2022] [error] [client 51.132.219.196:0] [client 51.132.219.196] ModSecurity: Access denied with connection close (phase 2). Pattern match "^wp_is_mobile$" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "420038"] [msg "Malware.Expert - user-agent: Webshell user-agent"] [hostname "cpanel.ampsstudio.com"] [uri "/sites/default/files/alfacgiapi"] [unique_id "Y0tAgH-JZMLzg83ha0jcUAAAAAQ"] cpanel.ampsstudio.com [Sun Oct 16 00:21:36 2022] [error] [client 51.132.219.196:0] [client 51.132.219.196] ModSecurity: Access denied with connection close (phase 2). Pattern match "^wp_is_mobile$" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "420038"] [msg "Malware.Expert - user-agent: Webshell user-agent"] [hostname "cpanel.ampsstudio.com"] [uri "/sites/default/files/cgialfa"] [unique_id "Y0tAgDdvTvKODP_X2zy36AAAAAA"] cpanel.ampsstudio.com [Sun Oct 16 00:21:36 2022] [error] [client 51.132.219.196:0] [client 51.132.219.196] ModSecurity: Access denied with connection close (phase 2). Pattern match "^wp_is_mobile$" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "420038"] [msg "Malware.Expert - user-agent: Webshell user-agent"] [hostname "cpanel.ampsstudio.com"] [uri "/admin/controller/extension/extension/ALFA_DATA"] [unique_id "Y0tAgJrU7f3WX6_fcRwV3gAAAAc"] cpanel.ampsstudio.com [Sun Oct 16 00:21:36 2022] [error] [client 51.132.219.196:0] [client 51.132.219.196] ModSecurity: Access denied with connection close (phase 2). Pattern match "^wp_is_mobile$" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "420038"] [msg "Malware.Expert - user-agent: Webshell user-agent"] [hostname "cpanel.ampsstudio.com"] [uri "/admin/controller/extension/extension/alfacgiapi"] [unique_id "Y0tAgF5VMjVGQTj_gAXatwAAAAI"] cpanel.ampsstudio.com [Sun Oct 16 00:21:36 2022] [error] [client 51.132.219.196:0] [client 51.132.219.196] ModSecurity: Access denied with connection close (phase 2). Pattern match "^wp_is_mobile$" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "420038"] [msg "Malware.Expert - user-agent: Webshell user-agent"] [hostname "cpanel.ampsstudio.com"] [uri "/admin/controller/extension/extension/cgialfa"] [unique_id "Y0tAgDxNjRyaAS9rx_Af7gAAAAw"] cpanel.ampsstudio.com [Sun Oct 16 00:21:36 2022] [error] [client 51.132.219.196:0] [client 51.132.219.196] ModSecurity: Access denied with connection close (phase 2). Pattern match "^wp_is_mobile$" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "420038"] [msg "Malware.Expert - user-agent: Webshell user-agent"] [hostname "cpanel.ampsstudio.com"] [uri "/wp-content/plugins/ubh/up.php"] [unique_id "Y0tAgBwS6F4VdM2avi5BjAAAAAY"] cpanel.ampsstudio.com [Sun Oct 16 00:21:36 2022] [error] [client 51.132.219.196:0] [client 51.132.219.196] ModSecurity: Access denied with connection close (phase 2). Pattern match "^wp_is_mobile$" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "420038"] [msg "Malware.Expert - user-agent: Webshell user-agent"] [hostname "cpanel.ampsstudio.com"] [uri "/index.php"] [unique_id "Y0tAgCkCogp-hDvzbTT1wgAAAAM"] cpanel.ampsstudio.com [Sun Oct 16 00:21:36 2022] [error] [client 51.132.219.196:0] [client 51.132.219.196] ModSecurity: Access denied with connection close (phase 2). Pattern match "^wp_is_mobile$" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "420038"] [msg "Malware.Expert - user-agent: Webshell user-agent"] [hostname "cpanel.ampsstudio.com"] [uri "/olux.php"] [unique_id "Y0tAgElTQJGOxY-P0ezKowAAAAU"] cpanel.ampsstudio.com [Sun Oct 16 00:21:37 2022] [error] [client 51.132.219.196:0] [client 51.132.219.196] ModSecurity: Access denied with connection close (phase 2). Pattern match "^wp_is_mobile$" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "420038"] [msg "Malware.Expert - user-agent: Webshell user-agent"] [hostname "cpanel.ampsstudio.com"] [uri "/xleet.php"] [unique_id "Y0tAgVouKGdgA3V2L-LHZQAAAAg"] cpanel.ampsstudio.com [Sun Oct 16 00:21:37 2022] [error] [client 51.132.219.196:0] [client 51.132.219.196] ModSecurity: Access denied with connection close (phase 2). Pattern match "^wp_is_mobile$" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "420038"] [msg "Malware.Expert - user-agent: Webshell user-agent"] [hostname "cpanel.ampsstudio.com"] [uri "/wso.php"] [unique_id "Y0tAgQkLs_06fugQKRYhgwAAAAk"] cpanel.ampsstudio.com [Sun Oct 16 00:21:37 2022] [error] [client 51.132.219.196:0] [client 51.132.219.196] ModSecurity: Access denied with connection close (phase 2). Pattern match "^wp_is_mobile$" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "420038"] [msg "Malware.Expert - user-agent: Webshell user-agent"] [hostname "cpanel.ampsstudio.com"] [uri "/shell.php"] [unique_id "Y0tAgX-JZMLzg83ha0jcUQAAAAQ"] cpanel.ampsstudio.com [Sun Oct 16 00:21:37 2022] [error] [client 51.132.219.196:0] [client 51.132.219.196] ModSecurity: Access denied with connection close (phase 2). Pattern match "^wp_is_mobile$" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "420038"] [msg "Malware.Expert - user-agent: Webshell user-agent"] [hostname "cpanel.ampsstudio.com"] [uri "/up.php"] [unique_id "Y0tAgTdvTvKODP_X2zy36QAAAAA"] cpanel.ampsstudio.com [Sun Oct 16 00:21:37 2022] [error] [client 51.132.219.196:0] [client 51.132.219.196] ModSecurity: Access denied with connection close (phase 2). Pattern match "^wp_is_mobile$" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "420038"] [msg "Malware.Expert - user-agent: Webshell user-agent"] [hostname "cpanel.ampsstudio.com"] [uri "/upload.php"] [unique_id "Y0tAgZrU7f3WX6_fcRwV3wAAAAc"] cpanel.ampsstudio.com [Sun Oct 16 00:21:37 2022] [error] [client 51.132.219.196:0] [client 51.132.219.196] ModSecurity: Access denied with connection close (phase 2). Pattern match "^wp_is_mobile$" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "420038"] [msg "Malware.Expert - user-agent: Webshell user-agent"] [hostname "cpanel.ampsstudio.com"] [uri "/1.php"] [unique_id "Y0tAgV5VMjVGQTj_gAXauAAAAAI"] cpanel.ampsstudio.com [Sun Oct 16 00:21:37 2022] [error] [client 51.132.219.196:0] [client 51.132.219.196] ModSecurity: Access denied with connection close (phase 2). Pattern match "^wp_is_mobile$" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "420038"] [msg "Malware.Expert - user-agent: Webshell user-agent"] [hostname "cpanel.ampsstudio.com"] [uri "/x.php"] [unique_id "Y0tAgTxNjRyaAS9rx_Af7wAAAAw"] cpanel.ampsstudio.com [Sun Oct 16 00:21:37 2022] [error] [client 51.132.219.196:0] [client 51.132.219.196] ModSecurity: Access denied with connection close (phase 2). Pattern match "^wp_is_mobile$" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "420038"] [msg "Malware.Expert - user-agent: Webshell user-agent"] [hostname "cpanel.ampsstudio.com"] [uri "/z.php"] [unique_id "Y0tAgRwS6F4VdM2avi5BjQAAAAY"] cpanel.ampsstudio.com [Sun Oct 16 00:21:37 2022] [error] [client 51.132.219.196:0] [client 51.132.219.196] ModSecurity: Access denied with connection close (phase 2). Pattern match "^wp_is_mobile$" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "420038"] [msg "Malware.Expert - user-agent: Webshell user-agent"] [hostname "cpanel.ampsstudio.com"] [uri "/a.php"] [unique_id "Y0tAgSkCogp-hDvzbTT1wwAAAAM"] cpanel.ampsstudio.com [Sun Oct 16 00:21:37 2022] [error] [client 51.132.219.196:0] [client 51.132.219.196] ModSecurity: Access denied with connection close (phase 2). Pattern match "^wp_is_mobile$" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "420038"] [msg "Malware.Expert - user-agent: Webshell user-agent"] [hostname "cpanel.ampsstudio.com"] [uri "/test.php"] [unique_id "Y0tAgUlTQJGOxY-P0ezKpAAAAAU"] cpanel.ampsstudio.com [Sun Oct 16 00:21:37 2022] [error] [client 51.132.219.196:0] [client 51.132.219.196] ModSecurity: Access denied with connection close (phase 2). Pattern match "^wp_is_mobile$" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "420038"] [msg "Malware.Expert - user-agent: Webshell user-agent"] [hostname "cpanel.ampsstudio.com"] [uri "/wp.php"] [unique_id "Y0tAgVouKGdgA3V2L-LHZgAAAAg"] cpanel.ampsstudio.com [Sun Oct 16 00:21:37 2022] [error] [client 51.132.219.196:0] [client 51.132.219.196] ModSecurity: Access denied with connection close (phase 2). Pattern match "^wp_is_mobile$" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "420038"] [msg "Malware.Expert - user-agent: Webshell user-agent"] [hostname "cpanel.ampsstudio.com"] [uri "/alfa.php"] [unique_id "Y0tAgQkLs_06fugQKRYhhAAAAAk"] cpanel.ampsstudio.com [Sun Oct 16 00:21:37 2022] [error] [client 51.132.219.196:0] [client 51.132.219.196] ModSecurity: Access denied with connection close (phase 2). Pattern match "^wp_is_mobile$" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "420038"] [msg "Malware.Expert - user-agent: Webshell user-agent"] [hostname "cpanel.ampsstudio.com"] [uri "/config.php"] [unique_id "Y0tAgX-JZMLzg83ha0jcUgAAAAQ"] cpanel.ampsstudio.com [Sun Oct 16 00:21:37 2022] [error] [client 51.132.219.196:0] [client 51.132.219.196] ModSecurity: Access denied with connection close (phase 2). Pattern match "^wp_is_mobile$" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "420038"] [msg "Malware.Expert - user-agent: Webshell user-agent"] [hostname "cpanel.ampsstudio.com"] [uri "/templates/beez3/index.php"] [unique_id "Y0tAgTdvTvKODP_X2zy36gAAAAA"] cpanel.ampsstudio.com [Sun Oct 16 00:21:37 2022] [error] [client 51.132.219.196:0] [client 51.132.219.196] ModSecurity: Access denied with connection close (phase 2). Pattern match "^wp_is_mobile$" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "420038"] [msg "Malware.Expert - user-agent: Webshell user-agent"] [hostname "cpanel.ampsstudio.com"] [uri "/about.php"] [unique_id "Y0tAgZrU7f3WX6_fcRwV4AAAAAc"] cpanel.ampsstudio.com [Sun Oct 16 00:21:37 2022] [error] [client 51.132.219.196:0] [client 51.132.219.196] ModSecurity: Access denied with connection close (phase 2). Pattern match "^wp_is_mobile$" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "420038"] [msg "Malware.Expert - user-agent: Webshell user-agent"] [hostname "cpanel.ampsstudio.com"] [uri "/shells.php"] [unique_id "Y0tAgV5VMjVGQTj_gAXauQAAAAI"] www.ampsstudio.com [Sun Oct 16 01:05:28 2022] [error] [client 181.214.218.47:0] AH01071: Got error 'PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179' www.ampsstudio.com [Sun Oct 16 01:05:28 2022] [error] [client 181.214.218.47:0] AH01071: Got error 'PHP message: PHP Warning: Cannot modify header information - headers already sent by (output started at /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-includes/functions.php:5275) in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/includes/sonaar-music/css/theme/custom-style.php on line 2' www.ampsstudio.com [Sun Oct 16 01:29:34 2022] [error] [client 193.188.21.9:0] AH01071: Got error 'PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179' www.ampsstudio.com [Sun Oct 16 01:29:34 2022] [error] [client 193.188.21.9:0] AH01071: Got error 'PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179' www.ampsstudio.com [Sun Oct 16 01:29:34 2022] [error] [client 193.188.21.9:0] AH01071: Got error 'PHP message: PHP Warning: Cannot modify header information - headers already sent by (output started at /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-includes/functions.php:5275) in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/includes/sonaar-music/css/theme/custom-style.php on line 2' ampsstudio.com [Sun Oct 16 03:33:16 2022] [error] [client 20.8.171.24:0] [client 20.8.171.24] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "ampsstudio.com"] [uri "/.env"] [unique_id "Y0ttbKKGCVsHweqe8OSW9wAAAAs"] ampsstudio.com [Sun Oct 16 03:36:41 2022] [error] [client 44.210.99.110:0] [client 44.210.99.110] ModSecurity: Access denied with code 403 (phase 2). String match "/.git/config" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430058"] [msg "Malware.Expert - request_uri: .git config"] [hostname "ampsstudio.com"] [uri "/.git/config"] [unique_id "Y0tuOTJuRwn0b02o3nUj8QAAABs"] ampsstudio.com [Sun Oct 16 03:51:41 2022] [error] [client 20.168.17.182:0] [client 20.168.17.182] ModSecurity: Access denied with code 403 (phase 2). Match of "contains index.php" against "REQUEST_URI" required. [file "remote server"] [line "-1"] [id "570076"] [msg "Malware.Expert - Malware"] [hostname "ampsstudio.com"] [uri "/wp-content/themes/seotheme/mar.php"] [unique_id "Y0txvYyRD_u0jb5r6yPVhwAAABU"] ampsstudio.com [Sun Oct 16 03:51:58 2022] [error] [client 20.168.17.182:0] [client 20.168.17.182] ModSecurity: Access denied with code 403 (phase 2). Match of "contains index.php" against "REQUEST_URI" required. [file "remote server"] [line "-1"] [id "570076"] [msg "Malware.Expert - Malware"] [hostname "ampsstudio.com"] [uri "/wp-includes/shell20211028.php"] [unique_id "Y0txztU4KT8RaoK2L0Z39AAAABw"] ampsstudio.com [Sun Oct 16 03:53:36 2022] [error] [client 20.168.17.182:0] [client 20.168.17.182] ModSecurity: Access denied with code 403 (phase 2). Match of "contains index.php" against "REQUEST_URI" required. [file "remote server"] [line "-1"] [id "570076"] [msg "Malware.Expert - Malware"] [hostname "ampsstudio.com"] [uri "/wp-cron.php"] [unique_id "Y0tyMNU4KT8RaoK2L0Z3-gAAABw"] ampsstudio.com [Sun Oct 16 03:54:27 2022] [error] [client 20.168.17.182:0] [client 20.168.17.182] ModSecurity: Access denied with code 403 (phase 2). Match of "contains index.php" against "REQUEST_URI" required. [file "remote server"] [line "-1"] [id "570076"] [msg "Malware.Expert - Malware"] [hostname "ampsstudio.com"] [uri "/wp-signup.php"] [unique_id "Y0tyY9U4KT8RaoK2L0Z3-wAAABw"] ampsstudio.com [Sun Oct 16 03:54:36 2022] [error] [client 20.168.17.182:0] [client 20.168.17.182] ModSecurity: Access denied with code 403 (phase 2). Match of "contains index.php" against "REQUEST_URI" required. [file "remote server"] [line "-1"] [id "570076"] [msg "Malware.Expert - Malware"] [hostname "ampsstudio.com"] [uri "/wp-activate.php"] [unique_id "Y0tybIkQ2K508aJS-UpekwAAACI"] www.ampsstudio.com [Sun Oct 16 05:05:08 2022] [error] [client 194.32.122.56:0] AH01071: Got error 'PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179' www.ampsstudio.com [Sun Oct 16 05:05:08 2022] [error] [client 194.32.122.56:0] AH01071: Got error 'PHP message: PHP Warning: Cannot modify header information - headers already sent by (output started at /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-includes/functions.php:5275) in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/includes/sonaar-music/css/theme/custom-style.php on line 2' www.ampsstudio.com [Sun Oct 16 05:28:45 2022] [error] [client 144.172.73.34:0] AH01071: Got error 'PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179' www.ampsstudio.com [Sun Oct 16 05:28:45 2022] [error] [client 144.172.73.34:0] AH01071: Got error 'PHP message: PHP Warning: Cannot modify header information - headers already sent by (output started at /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-includes/functions.php:5275) in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/includes/sonaar-music/css/theme/custom-style.php on line 2' www.ampsstudio.com [Sun Oct 16 05:38:35 2022] [error] [client 181.215.176.24:0] AH01071: Got error 'PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179' www.ampsstudio.com [Sun Oct 16 05:38:35 2022] [error] [client 181.215.176.24:0] AH01071: Got error 'PHP message: PHP Warning: Cannot modify header information - headers already sent by (output started at /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-includes/functions.php:5275) in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/includes/sonaar-music/css/theme/custom-style.php on line 2' ampsstudio.com [Sun Oct 16 07:43:59 2022] [error] [client 20.86.6.19:0] [client 20.86.6.19] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "ampsstudio.com"] [uri "/.env"] [unique_id "Y0uoL_m4q7TGFpWSFISlIQAAAAA"] mail.ampsstudio.com [Sun Oct 16 08:32:41 2022] [error] [client 20.94.58.51:0] [client 20.94.58.51] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "mail.ampsstudio.com"] [uri "/.env"] [unique_id "Y0uzmW4FlgrpOVfMd_3NnQAAAAE"] ampsstudio.com [Sun Oct 16 09:19:36 2022] [error] [client 195.178.120.231:0] [client 195.178.120.231] ModSecurity: Access denied with code 403 (phase 2). Pattern match "/ioptimization/.*\\\\.php\\\\?rchk" at REQUEST_URI. [file "remote server"] [line "-1"] [id "570039"] [msg "Malware.Expert - Wordpress malware plugin - ioptimization"] [hostname "ampsstudio.com"] [uri "/wp-content/plugins/ioptimization/IOptimize.php"] [unique_id "Y0u-mNU4KT8RaoK2L0Z4ZQAAABw"] ampsstudio.com [Sun Oct 16 09:20:41 2022] [error] [client 195.178.120.231:0] [client 195.178.120.231] ModSecurity: Access denied with code 403 (phase 2). Pattern match "/ioptimization/.*\\\\.php\\\\?rchk" at REQUEST_URI. [file "remote server"] [line "-1"] [id "570039"] [msg "Malware.Expert - Wordpress malware plugin - ioptimization"] [hostname "ampsstudio.com"] [uri "/wp-content/plugins/ioptimization/index.php"] [unique_id "Y0u-2YkQ2K508aJS-Upe-gAAACI"] www.ampsstudio.com [Sun Oct 16 09:33:50 2022] [error] [client 83.136.240.234:0] AH01071: Got error 'PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179' www.ampsstudio.com [Sun Oct 16 09:33:50 2022] [error] [client 83.136.240.234:0] AH01071: Got error 'PHP message: PHP Warning: Cannot modify header information - headers already sent by (output started at /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-includes/functions.php:5275) in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/includes/sonaar-music/css/theme/custom-style.php on line 2' mail.ampsstudio.com [Sun Oct 16 09:34:23 2022] [error] [client 194.26.229.150:0] [client 194.26.229.150] ModSecurity: Access denied with code 403 (phase 2). String match "/.git/config" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430058"] [msg "Malware.Expert - request_uri: .git config"] [hostname "mail.ampsstudio.com"] [uri "/.git/config"] [unique_id "Y0vCD4yRD_u0jb5r6yPV8QAAABU"] webdisk.ampsstudio.com [Sun Oct 16 09:54:03 2022] [error] [client 194.26.229.150:0] [client 194.26.229.150] ModSecurity: Access denied with code 403 (phase 2). String match "/.git/config" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430058"] [msg "Malware.Expert - request_uri: .git config"] [hostname "webdisk.ampsstudio.com"] [uri "/.git/config"] [unique_id "Y0vGqxZm5UoxkcNgtiswRgAAAAU"] cpanel.ampsstudio.com [Sun Oct 16 10:09:51 2022] [error] [client 194.26.229.150:0] [client 194.26.229.150] ModSecurity: Access denied with code 403 (phase 2). String match "/.git/config" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430058"] [msg "Malware.Expert - request_uri: .git config"] [hostname "cpanel.ampsstudio.com"] [uri "/.git/config"] [unique_id "Y0vKX5Kk6VTZDgC1jT5f3AAAAAM"] www.ampsstudio.com [Sun Oct 16 10:22:58 2022] [error] [client 45.154.98.225:0] AH01071: Got error 'PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179' www.ampsstudio.com [Sun Oct 16 10:22:58 2022] [error] [client 45.154.98.225:0] AH01071: Got error 'PHP message: PHP Warning: Cannot modify header information - headers already sent by (output started at /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-includes/functions.php:5275) in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/includes/sonaar-music/css/theme/custom-style.php on line 2' ampsstudio.com [Sun Oct 16 10:38:35 2022] [error] [client 194.26.229.150:0] [client 194.26.229.150] ModSecurity: Access denied with code 403 (phase 2). String match "/.git/config" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430058"] [msg "Malware.Expert - request_uri: .git config"] [hostname "ampsstudio.com"] [uri "/.git/config"] [unique_id "Y0vRG9U4KT8RaoK2L0Z4dgAAABw"] webdisk.ampsstudio.com [Sun Oct 16 10:39:21 2022] [error] [client 20.230.37.0:0] [client 20.230.37.0] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "webdisk.ampsstudio.com"] [uri "/.env"] [unique_id "Y0vRSXpYOSkQN-Z1lXmWzwAAAAI"] ampsstudio.com [Sun Oct 16 10:39:21 2022] [error] [client 20.230.37.0:0] [client 20.230.37.0] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "ampsstudio.com"] [uri "/.env"] [unique_id "Y0vRSYyRD_u0jb5r6yPV_wAAABU"] www.ampsstudio.com [Sun Oct 16 11:10:50 2022] [error] [client 109.169.225.205:0] AH01071: Got error 'PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179' www.ampsstudio.com [Sun Oct 16 11:10:50 2022] [error] [client 109.169.225.205:0] AH01071: Got error 'PHP message: PHP Warning: Cannot modify header information - headers already sent by (output started at /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-includes/functions.php:5275) in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/includes/sonaar-music/css/theme/custom-style.php on line 2' webmail.ampsstudio.com [Sun Oct 16 11:16:32 2022] [error] [client 20.230.37.0:0] [client 20.230.37.0] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "webmail.ampsstudio.com"] [uri "/.env"] [unique_id "Y0vaAPm4q7TGFpWSFISlTwAAAAA"] ampsstudio.com [Sun Oct 16 11:31:34 2022] [error] [client 46.249.32.15:0] [client 46.249.32.15] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "ampsstudio.com"] [uri "/.env"] [unique_id "Y0vdhm4FlgrpOVfMd_3NzQAAAAE"] www.ampsstudio.com [Sun Oct 16 11:55:07 2022] [error] [client 5.254.18.230:0] AH01071: Got error 'PHP message: PHP Warning: Cannot modify header information - headers already sent by (output started at /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-includes/functions.php:5275) in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/includes/sonaar-music/css/theme/custom-style.php on line 2' webmail.ampsstudio.com [Sun Oct 16 11:57:50 2022] [error] [client 194.26.229.150:0] [client 194.26.229.150] ModSecurity: Access denied with code 403 (phase 2). String match "/.git/config" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430058"] [msg "Malware.Expert - request_uri: .git config"] [hostname "webmail.ampsstudio.com"] [uri "/.git/config"] [unique_id "Y0vjrvtRhcrbRc-kqGyW5QAAAAY"] mail.ampsstudio.com [Sun Oct 16 12:13:16 2022] [error] [client 20.230.37.0:0] [client 20.230.37.0] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "mail.ampsstudio.com"] [uri "/.env"] [unique_id "Y0vnTMMzucm0rELDFrITgQAAAAQ"] www.ampsstudio.com [Sun Oct 16 12:15:21 2022] [error] [client 23.19.125.2:0] AH01071: Got error 'PHP message: PHP Warning: Cannot modify header information - headers already sent by (output started at /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-includes/functions.php:5275) in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/includes/sonaar-music/css/theme/custom-style.php on line 2' mail.ampsstudio.com [Sun Oct 16 12:57:10 2022] [error] [client 20.86.6.19:0] [client 20.86.6.19] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "mail.ampsstudio.com"] [uri "/.env"] [unique_id "Y0vxlvtRhcrbRc-kqGyW9AAAAAY"] cpanel.ampsstudio.com [Sun Oct 16 14:03:59 2022] [error] [client 20.230.37.0:0] [client 20.230.37.0] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "cpanel.ampsstudio.com"] [uri "/.env"] [unique_id "Y0wBP8Mzucm0rELDFrITpgAAAAQ"] ampsstudio.com [Sun Oct 16 14:09:22 2022] [error] [client 46.249.32.15:0] [client 46.249.32.15] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "ampsstudio.com"] [uri "/.env"] [unique_id "Y0wCgvtRhcrbRc-kqGyXDwAAAAY"] ampsstudio.com [Sun Oct 16 15:05:10 2022] [error] [client 46.249.32.15:0] [client 46.249.32.15] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "ampsstudio.com"] [uri "/.env"] [unique_id "Y0wPloyRD_u0jb5r6yPWXQAAABU"] www.ampsstudio.com [Sun Oct 16 16:04:35 2022] [error] [client 176.124.223.175:0] AH01071: Got error 'PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179' www.ampsstudio.com [Sun Oct 16 16:04:35 2022] [error] [client 176.124.223.175:0] AH01071: Got error 'PHP message: PHP Warning: Cannot modify header information - headers already sent by (output started at /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-includes/functions.php:5275) in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/includes/sonaar-music/css/theme/custom-style.php on line 2' www.ampsstudio.com [Sun Oct 16 17:00:05 2022] [error] [client 20.210.217.180:0] [client 20.210.217.180] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "www.ampsstudio.com"] [uri "/.env"] [unique_id "Y0wqhdU4KT8RaoK2L0Z5EAAAABw"] www.ampsstudio.com [Sun Oct 16 17:00:11 2022] [error] [client 20.210.217.180:0] [client 20.210.217.180] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "www.ampsstudio.com"] [uri "/.env.example"] [unique_id "Y0wqi_tRhcrbRc-kqGyXZAAAAAY"] www.ampsstudio.com [Sun Oct 16 17:00:17 2022] [error] [client 20.210.217.180:0] [client 20.210.217.180] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "www.ampsstudio.com"] [uri "/laravel/.env"] [unique_id "Y0wqkcCWIy1nZLaZl-kdTQAAAAI"] www.ampsstudio.com [Sun Oct 16 19:04:44 2022] [error] [client 51.11.6.150:0] AH01071: Got error 'PHP message: PHP Warning: Undefined array key "HTTP_USER_AGENT" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/bookly-responsive-appointment-booking-tool/frontend/modules/booking/ShortCode.php on line 66' ampsstudio.com [Sun Oct 16 19:24:03 2022] [error] [client 20.163.48.97:0] [client 20.163.48.97] ModSecurity: Access denied with code 403 (phase 2). Match of "contains index.php" against "REQUEST_URI" required. [file "remote server"] [line "-1"] [id "570076"] [msg "Malware.Expert - Malware"] [hostname "ampsstudio.com"] [uri "/wp-admin/admin-ajax.php"] [unique_id "Y0xMQ_tRhcrbRc-kqGyXogAAAAY"] ampsstudio.com [Sun Oct 16 19:24:32 2022] [error] [client 20.163.48.97:0] [client 20.163.48.97] ModSecurity: Access denied with code 403 (phase 2). Pattern match "/\\\\..+\\\\.php" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430015"] [msg "Malware.Expert - request_uri: hidden .php execute"] [hostname "ampsstudio.com"] [uri "/wp-content/uploads/typehub/custom/jhsywgcl/.ph.php"] [unique_id "Y0xMYG4FlgrpOVfMd_3OjgAAAAE"] ampsstudio.com [Sun Oct 16 19:24:46 2022] [error] [client 20.163.48.97:0] [client 20.163.48.97] ModSecurity: Access denied with code 403 (phase 2). Match of "contains index.php" against "REQUEST_URI" required. [file "remote server"] [line "-1"] [id "570076"] [msg "Malware.Expert - Malware"] [hostname "ampsstudio.com"] [uri "/wp-admin/admin-ajax.php"] [unique_id "Y0xMbokQ2K508aJS-Upf4gAAACI"] ampsstudio.com [Sun Oct 16 19:25:01 2022] [error] [client 20.163.48.97:0] [client 20.163.48.97] ModSecurity: Access denied with code 403 (phase 2). Pattern match "/\\\\..+\\\\.php" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430015"] [msg "Malware.Expert - request_uri: hidden .php execute"] [hostname "ampsstudio.com"] [uri "/wp-content/uploads/typehub/custom/cdqehkid/.ph.php"] [unique_id "Y0xMfUBTFvYOkQ5V0_jmDgAAAAU"] cpanel.ampsstudio.com [Sun Oct 16 20:11:33 2022] [error] [client 185.81.157.43:0] [client 185.81.157.43] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "cpanel.ampsstudio.com"] [uri "/.env"] [unique_id "Y0xXZZKk6VTZDgC1jT5gzAAAAAM"] cpanel.ampsstudio.com [Sun Oct 16 20:12:01 2022] [error] [client 185.81.157.43:0] [client 185.81.157.43] ModSecurity: Access denied with code 403 (phase 2). String match "/Util/PHP/eval-stdin.php" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430046"] [msg "Malware.Expert - request_uri: CVE-2017-9841"] [hostname "cpanel.ampsstudio.com"] [uri "/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php"] [unique_id "Y0xXgW4FlgrpOVfMd_3OmgAAAAE"] ampsstudio.com [Sun Oct 16 20:15:45 2022] [error] [client 20.171.59.197:0] AH01276: Cannot serve directory /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-admin/css/: No matching DirectoryIndex (index.php,index.html,index.htm) found, and server-generated directory index forbidden by Options directive www.ampsstudio.com [Sun Oct 16 20:40:35 2022] [error] [client 47.74.152.79:0] AH01071: Got error 'PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179' www.ampsstudio.com [Sun Oct 16 20:40:35 2022] [error] [client 47.74.152.79:0] AH01071: Got error 'PHP message: PHP Warning: Cannot modify header information - headers already sent by (output started at /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-includes/functions.php:5275) in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/includes/sonaar-music/css/theme/custom-style.php on line 2' www.ampsstudio.com [Sun Oct 16 21:02:24 2022] [error] [client 5.254.230.157:0] AH01071: Got error 'PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179' www.ampsstudio.com [Sun Oct 16 21:02:24 2022] [error] [client 5.254.230.157:0] AH01071: Got error 'PHP message: PHP Warning: Cannot modify header information - headers already sent by (output started at /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-includes/functions.php:5275) in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/includes/sonaar-music/css/theme/custom-style.php on line 2' webdisk.ampsstudio.com [Sun Oct 16 22:13:50 2022] [error] [client 20.86.6.19:0] [client 20.86.6.19] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "webdisk.ampsstudio.com"] [uri "/.env"] [unique_id "Y0x0Dm5ds_tlJ-jGhNKQnQAAABA"] www.ampsstudio.com [Mon Oct 17 00:59:37 2022] [error] [client 161.117.9.99:0] AH01071: Got error 'PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179' www.ampsstudio.com [Mon Oct 17 00:59:37 2022] [error] [client 161.117.9.99:0] AH01071: Got error 'PHP message: PHP Warning: Cannot modify header information - headers already sent by (output started at /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-includes/functions.php:5275) in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/includes/sonaar-music/css/theme/custom-style.php on line 2' www.ampsstudio.com [Mon Oct 17 01:24:21 2022] [error] [client 204.85.191.9:0] AH01071: Got error 'PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179' www.ampsstudio.com [Mon Oct 17 01:24:21 2022] [error] [client 204.85.191.9:0] AH01071: Got error 'PHP message: PHP Warning: Cannot modify header information - headers already sent by (output started at /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-includes/functions.php:5275) in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/includes/sonaar-music/css/theme/custom-style.php on line 2' www.ampsstudio.com [Mon Oct 17 03:27:22 2022] [error] [client 20.199.46.180:0] [client 20.199.46.180] ModSecurity: Access denied with code 403 (phase 2). Match of "contains index.php" against "REQUEST_URI" required. [file "remote server"] [line "-1"] [id "570076"] [msg "Malware.Expert - Malware"] [hostname "www.ampsstudio.com"] [uri "/wp-plain.php"] [unique_id "Y0y9ir5ykdrdwDjVvcO7sgAAABI"] www.ampsstudio.com [Mon Oct 17 03:27:24 2022] [error] [client 20.199.46.180:0] [client 20.199.46.180] ModSecurity: Access denied with code 403 (phase 2). String match "php.suspected" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430059"] [msg "Malware.Expert - request_uri: .PHP suspected files"] [hostname "www.ampsstudio.com"] [uri "/wp-content/plugins/apikey/apikey.php.suspected"] [unique_id "Y0y9jNLKEwImAIiUvDNWtQAAAAE"] www.ampsstudio.com [Mon Oct 17 03:27:24 2022] [error] [client 20.199.46.180:0] [client 20.199.46.180] ModSecurity: Access denied with code 403 (phase 2). String match "php.suspected" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430059"] [msg "Malware.Expert - request_uri: .PHP suspected files"] [hostname "www.ampsstudio.com"] [uri "/plugins/content/apismtp/apismtp.php.suspected"] [unique_id "Y0y9jN132kd6NbXOz74ZkAAAAAY"] ampsstudio.com [Mon Oct 17 06:59:24 2022] [error] [client 13.69.21.1:0] [client 13.69.21.1] ModSecurity: Access denied with code 403 (phase 2). Match of "contains index.php" against "REQUEST_URI" required. [file "remote server"] [line "-1"] [id "570076"] [msg "Malware.Expert - Malware"] [hostname "ampsstudio.com"] [uri "/wp-plain.php"] [unique_id "Y0zvPO-TQgYlEHaOQGRZhQAAAAE"] www.ampsstudio.com [Mon Oct 17 06:59:27 2022] [error] [client 13.69.21.1:0] [client 13.69.21.1] ModSecurity: Access denied with code 403 (phase 2). String match "php.suspected" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430059"] [msg "Malware.Expert - request_uri: .PHP suspected files"] [hostname "www.ampsstudio.com"] [uri "/wp-content/plugins/apikey/apikey.php.suspected"] [unique_id "Y0zvPwDI1t7T_7kRc4ioRAAAAAM"] www.ampsstudio.com [Mon Oct 17 06:59:27 2022] [error] [client 13.69.21.1:0] [client 13.69.21.1] ModSecurity: Access denied with code 403 (phase 2). String match "php.suspected" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430059"] [msg "Malware.Expert - request_uri: .PHP suspected files"] [hostname "www.ampsstudio.com"] [uri "/plugins/content/apismtp/apismtp.php.suspected"] [unique_id "Y0zvP--TQgYlEHaOQGRZhgAAAAE"] cpanel.ampsstudio.com [Mon Oct 17 08:20:48 2022] [error] [client 20.86.6.19:0] [client 20.86.6.19] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "cpanel.ampsstudio.com"] [uri "/.env"] [unique_id "Y00CUIJVp8cOAz5c5CWjCAAAAAQ"] www.ampsstudio.com [Mon Oct 17 10:57:34 2022] [error] [client 79.126.92.63:0] AH01071: Got error 'PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179' www.ampsstudio.com [Mon Oct 17 10:57:34 2022] [error] [client 79.126.92.63:0] AH01071: Got error 'PHP message: PHP Warning: Cannot modify header information - headers already sent by (output started at /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-includes/functions.php:5275) in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/includes/sonaar-music/css/theme/custom-style.php on line 2' ampsstudio.com [Mon Oct 17 12:19:56 2022] [error] [client 139.59.14.115:0] [client 139.59.14.115] ModSecurity: Access denied with code 403 (phase 2). Pattern match "/images/.*\\\\.php" at REQUEST_URI. [file "remote server"] [line "-1"] [id "470000"] [msg "Malware.Expert - request_uri: Images folder - prevent PHP files from executing"] [hostname "ampsstudio.com"] [uri "/images/izanami.php"] [unique_id "Y006XLoyvbrOLLR_mePEDAAAABA"] ampsstudio.com [Mon Oct 17 12:20:37 2022] [error] [client 139.59.14.115:0] [client 139.59.14.115] ModSecurity: Access denied with code 403 (phase 2). Pattern match "/ioptimization/.*\\\\.php\\\\?rchk" at REQUEST_URI. [file "remote server"] [line "-1"] [id "570039"] [msg "Malware.Expert - Wordpress malware plugin - ioptimization"] [hostname "ampsstudio.com"] [uri "/wp-content/plugins/ioptimization/IOptimize.php"] [unique_id "Y006hS9mvFvgFWpIBvBL2gAAAA8"] www.ampsstudio.com [Mon Oct 17 12:49:08 2022] [error] [client 46.148.206.226:0] AH01071: Got error 'PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179' www.ampsstudio.com [Mon Oct 17 12:49:08 2022] [error] [client 46.148.206.226:0] AH01071: Got error 'PHP message: PHP Warning: Cannot modify header information - headers already sent by (output started at /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-includes/functions.php:5275) in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/includes/sonaar-music/css/theme/custom-style.php on line 2' www.ampsstudio.com [Mon Oct 17 12:57:03 2022] [error] [client 5.59.133.26:0] AH01071: Got error 'PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179' www.ampsstudio.com [Mon Oct 17 12:57:03 2022] [error] [client 5.59.133.26:0] AH01071: Got error 'PHP message: PHP Warning: Cannot modify header information - headers already sent by (output started at /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-includes/functions.php:5275) in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/includes/sonaar-music/css/theme/custom-style.php on line 2' ampsstudio.com [Mon Oct 17 14:07:33 2022] [error] [client 162.214.112.164:0] [client 162.214.112.164] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "ampsstudio.com"] [uri "/.env"] [unique_id "Y01TlXh8jdzPEGL_GMk0QAAAAAI"] ampsstudio.com [Mon Oct 17 15:19:30 2022] [error] [client 143.110.242.5:0] [client 143.110.242.5] ModSecurity: Access denied with code 403 (phase 2). String match "/wp-admin/install.php" at REQUEST_URI. [file "remote server"] [line "-1"] [id "570074"] [msg "Malware.Expert - Malware"] [hostname "ampsstudio.com"] [uri "/wp-admin/install.php"] [unique_id "Y01kckDH4TVnS3S9Jq9O8AAAAA4"] ampsstudio.com [Mon Oct 17 15:19:31 2022] [error] [client 143.110.242.5:0] [client 143.110.242.5] ModSecurity: Access denied with code 403 (phase 2). String match "/wp-admin/install.php" at REQUEST_URI. [file "remote server"] [line "-1"] [id "570074"] [msg "Malware.Expert - Malware"] [hostname "ampsstudio.com"] [uri "/wp/wp-admin/install.php"] [unique_id "Y01kc5pvoYjL5OkgdjlPzgAAAAc"] ampsstudio.com [Mon Oct 17 15:19:32 2022] [error] [client 143.110.242.5:0] [client 143.110.242.5] ModSecurity: Access denied with code 403 (phase 2). String match "/wp-admin/install.php" at REQUEST_URI. [file "remote server"] [line "-1"] [id "570074"] [msg "Malware.Expert - Malware"] [hostname "ampsstudio.com"] [uri "/new/wp-admin/install.php"] [unique_id "Y01kdHh8jdzPEGL_GMk0cAAAAAI"] ampsstudio.com [Mon Oct 17 15:19:33 2022] [error] [client 143.110.242.5:0] [client 143.110.242.5] ModSecurity: Access denied with code 403 (phase 2). String match "/wp-admin/install.php" at REQUEST_URI. [file "remote server"] [line "-1"] [id "570074"] [msg "Malware.Expert - Malware"] [hostname "ampsstudio.com"] [uri "/old/wp-admin/install.php"] [unique_id "Y01kdboyvbrOLLR_mePEsQAAABA"] ampsstudio.com [Mon Oct 17 15:19:34 2022] [error] [client 143.110.242.5:0] [client 143.110.242.5] ModSecurity: Access denied with code 403 (phase 2). String match "/wp-admin/install.php" at REQUEST_URI. [file "remote server"] [line "-1"] [id "570074"] [msg "Malware.Expert - Malware"] [hostname "ampsstudio.com"] [uri "/wordpress/wp-admin/install.php"] [unique_id "Y01kdk9GUMr_xF9x-EwV-gAAAAU"] ampsstudio.com [Mon Oct 17 15:19:35 2022] [error] [client 143.110.242.5:0] [client 143.110.242.5] ModSecurity: Access denied with code 403 (phase 2). String match "/wp-admin/install.php" at REQUEST_URI. [file "remote server"] [line "-1"] [id "570074"] [msg "Malware.Expert - Malware"] [hostname "ampsstudio.com"] [uri "/test/wp-admin/install.php"] [unique_id "Y01kd6rLnghVbfSlMvJYzAAAAAA"] ampsstudio.com [Mon Oct 17 15:19:36 2022] [error] [client 143.110.242.5:0] [client 143.110.242.5] ModSecurity: Access denied with code 403 (phase 2). String match "/wp-admin/install.php" at REQUEST_URI. [file "remote server"] [line "-1"] [id "570074"] [msg "Malware.Expert - Malware"] [hostname "ampsstudio.com"] [uri "/blog/wp-admin/install.php"] [unique_id "Y01keMKVYg98ET_qXOk8bgAAAAk"] ampsstudio.com [Mon Oct 17 15:19:37 2022] [error] [client 143.110.242.5:0] [client 143.110.242.5] ModSecurity: Access denied with code 403 (phase 2). String match "/wp-admin/install.php" at REQUEST_URI. [file "remote server"] [line "-1"] [id "570074"] [msg "Malware.Expert - Malware"] [hostname "ampsstudio.com"] [uri "/cms/wp-admin/install.php"] [unique_id "Y01keWQSiq3XHpTvCa2UuAAAAAY"] ampsstudio.com [Mon Oct 17 15:19:38 2022] [error] [client 143.110.242.5:0] [client 143.110.242.5] ModSecurity: Access denied with code 403 (phase 2). String match "/wp-admin/install.php" at REQUEST_URI. [file "remote server"] [line "-1"] [id "570074"] [msg "Malware.Expert - Malware"] [hostname "ampsstudio.com"] [uri "/web/wp-admin/install.php"] [unique_id "Y01kelfcVJCk1a9iTwMnuQAAAAo"] ampsstudio.com [Mon Oct 17 15:19:39 2022] [error] [client 143.110.242.5:0] [client 143.110.242.5] ModSecurity: Access denied with code 403 (phase 2). String match "/wp-admin/install.php" at REQUEST_URI. [file "remote server"] [line "-1"] [id "570074"] [msg "Malware.Expert - Malware"] [hostname "ampsstudio.com"] [uri "/backup/wp-admin/install.php"] [unique_id "Y01ke9DlFgSjo_kIVNFAcgAAAAM"] ampsstudio.com [Mon Oct 17 15:19:40 2022] [error] [client 143.110.242.5:0] [client 143.110.242.5] ModSecurity: Access denied with code 403 (phase 2). String match "/wp-admin/install.php" at REQUEST_URI. [file "remote server"] [line "-1"] [id "570074"] [msg "Malware.Expert - Malware"] [hostname "ampsstudio.com"] [uri "/site/wp-admin/install.php"] [unique_id "Y01kfEDH4TVnS3S9Jq9O8QAAAA4"] ampsstudio.com [Mon Oct 17 15:19:41 2022] [error] [client 143.110.242.5:0] [client 143.110.242.5] ModSecurity: Access denied with code 403 (phase 2). String match "/wp-admin/install.php" at REQUEST_URI. [file "remote server"] [line "-1"] [id "570074"] [msg "Malware.Expert - Malware"] [hostname "ampsstudio.com"] [uri "/oldsite/wp-admin/install.php"] [unique_id "Y01kfZpvoYjL5OkgdjlPzwAAAAc"] ampsstudio.com [Mon Oct 17 17:25:51 2022] [error] [client 3.144.34.206:0] [client 3.144.34.206] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "ampsstudio.com"] [uri "/.env"] [unique_id "Y02CD6rLnghVbfSlMvJZHgAAAAA"] ampsstudio.com [Mon Oct 17 17:25:55 2022] [error] [client 3.144.34.206:0] [client 3.144.34.206] ModSecurity: Access denied with code 403 (phase 2). String match "/Util/PHP/eval-stdin.php" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430046"] [msg "Malware.Expert - request_uri: CVE-2017-9841"] [hostname "ampsstudio.com"] [uri "/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php"] [unique_id "Y02CE7oyvbrOLLR_mePFAgAAABA"] www.ampsstudio.com [Mon Oct 17 20:05:12 2022] [error] [client 2a02:c7e:2cb7:5e00:a4af:313f:8ee7:3c2c:0] AH01071: Got error 'PHP message: PHP Warning: Cannot modify header information - headers already sent by (output started at /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-includes/functions.php:5275) in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/includes/sonaar-music/css/theme/custom-style.php on line 2' www.ampsstudio.com [Mon Oct 17 21:12:00 2022] [crit] [client 66.249.93.40:0] AH00529: /home/virtual/vps-aa3942/a/aede5353c4/public_html/.well-known/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/virtual/vps-aa3942/a/aede5353c4/public_html/.well-known/' is executable www.ampsstudio.com [Mon Oct 17 21:12:10 2022] [error] [client 185.191.171.18:0] AH01071: Got error 'PHP message: PHP Warning: Attempt to read property "post_content" on null in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/wordpress-seo/src/memoizers/meta-tags-context-memoizer.php on line 140PHP message: PHP Warning: Attempt to read property "post_modified_gmt" on null in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/wordpress-seo/src/presentations/indexable-post-type-presentation.php on line 289PHP message: PHP Warning: Attempt to read property "post_date_gmt" on null in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/wordpress-seo/src/presentations/indexable-post-type-presentation.php on line 289PHP message: PHP Warning: Attempt to read property "post_author" on null in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/wordpress-seo/src/presenters/slack/enhanced-data-presenter.php on line 46PHP message: PHP Warning: Attempt to read property "post_date_gmt" on null in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/wordpress-seo/src/generators/schema/webpage.php on line 51PHP message: PHP Warning: Attempt to read property "post_modified_gmt" on null in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/wordpress-seo/src/generators/schema/webpage.php on line 52PHP message: PHP Warning: Undefined array key 0 in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/includes/classes/iron_sonaar.class.php on line 212PHP message: PHP Warning: Trying to access array offset on value of type null in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/includes/classes/iron_sonaar.class.php on line 212PHP message: PHP Warning: Undefined array key 0 in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/includes/classes/iron_sonaar.class.php on line 214PHP message: PHP Warning: Trying to access array offset on value of type null in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/includes/classes/iron_sonaar.class.php on line 214' ampsstudio.com [Tue Oct 18 05:00:51 2022] [error] [client 41.216.188.218:0] [client 41.216.188.218] ModSecurity: Access denied with code 403 (phase 2). Pattern match "/ioptimization/.*\\\\.php\\\\?rchk" at REQUEST_URI. [file "remote server"] [line "-1"] [id "570039"] [msg "Malware.Expert - Wordpress malware plugin - ioptimization"] [hostname "ampsstudio.com"] [uri "/wp-content/plugins/ioptimization/IOptimize.php"] [unique_id "Y04k8_ZYPYTwWgrYeE86EAAAAAI"] ampsstudio.com [Tue Oct 18 05:00:56 2022] [error] [client 41.216.188.218:0] [client 41.216.188.218] ModSecurity: Access denied with code 403 (phase 2). Pattern match "/ioptimization/.*\\\\.php\\\\?rchk" at REQUEST_URI. [file "remote server"] [line "-1"] [id "570039"] [msg "Malware.Expert - Wordpress malware plugin - ioptimization"] [hostname "ampsstudio.com"] [uri "/wp-content/plugins/ioptimization/IOptimize.php"] [unique_id "Y04k-Ecf_Qglx7MrfQCoZgAAABA"] www.ampsstudio.com [Tue Oct 18 05:13:41 2022] [crit] [client 66.249.92.136:0] AH00529: /home/virtual/vps-aa3942/a/aede5353c4/public_html/.well-known/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/virtual/vps-aa3942/a/aede5353c4/public_html/.well-known/' is executable ampsstudio.com [Tue Oct 18 06:48:03 2022] [error] [client 185.83.144.103:0] [client 185.83.144.103] ModSecurity: Access denied with code 403 (phase 2). String match ".php.bak" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430068"] [msg "Malware.Expert - request_uri: .PHP backup files"] [hostname "ampsstudio.com"] [uri "/phpinfo.php.bak"] [unique_id "Y04-E09IACFlYlEuOuGgqQAAAAA"] www.ampsstudio.com [Tue Oct 18 07:04:28 2022] [error] [client 109.169.225.205:0] AH01071: Got error 'PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179' www.ampsstudio.com [Tue Oct 18 07:04:28 2022] [error] [client 109.169.225.205:0] AH01071: Got error 'PHP message: PHP Warning: Cannot modify header information - headers already sent by (output started at /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-includes/functions.php:5277) in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/includes/sonaar-music/css/theme/custom-style.php on line 2' ampsstudio.com [Tue Oct 18 09:34:00 2022] [error] [client 62.210.207.206:0] [client 62.210.207.206] ModSecurity: Access denied with connection close (phase 2). Pattern match "^wp_is_mobile$" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "420038"] [msg "Malware.Expert - user-agent: Webshell user-agent"] [hostname "ampsstudio.com"] [uri "/about.php"] [unique_id "Y05k-G-Q_KgxnIX1g0qY_QAAAAE"] www.ampsstudio.com [Tue Oct 18 09:51:06 2022] [crit] [client 66.249.93.40:0] AH00529: /home/virtual/vps-aa3942/a/aede5353c4/public_html/.well-known/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/virtual/vps-aa3942/a/aede5353c4/public_html/.well-known/' is executable www.ampsstudio.com [Tue Oct 18 13:24:07 2022] [error] [client 77.232.146.121:0] AH01071: Got error 'PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179' www.ampsstudio.com [Tue Oct 18 13:24:07 2022] [error] [client 77.232.146.121:0] AH01071: Got error 'PHP message: PHP Warning: Cannot modify header information - headers already sent by (output started at /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-includes/functions.php:5277) in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/includes/sonaar-music/css/theme/custom-style.php on line 2' ampsstudio.com [Tue Oct 18 14:16:43 2022] [error] [client 138.91.108.213:0] AH01276: Cannot serve directory /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-admin/css/: No matching DirectoryIndex (index.php,index.html,index.htm) found, and server-generated directory index forbidden by Options directive ampsstudio.com [Tue Oct 18 14:26:52 2022] [error] [client 41.216.188.218:0] [client 41.216.188.218] ModSecurity: Access denied with code 403 (phase 2). Pattern match "/ioptimization/.*\\\\.php\\\\?rchk" at REQUEST_URI. [file "remote server"] [line "-1"] [id "570039"] [msg "Malware.Expert - Wordpress malware plugin - ioptimization"] [hostname "ampsstudio.com"] [uri "/wp-content/plugins/ioptimization/IOptimize.php"] [unique_id "Y06pnG-Q_KgxnIX1g0qaVgAAAAE"] www.ampsstudio.com [Tue Oct 18 17:07:38 2022] [error] [client 2.101.114.2:0] AH01071: Got error 'PHP message: PHP Warning: Cannot modify header information - headers already sent by (output started at /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-includes/functions.php:5277) in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/includes/sonaar-music/css/theme/custom-style.php on line 2' ampsstudio.com [Tue Oct 18 17:19:38 2022] [error] [client 20.163.1.144:0] AH01276: Cannot serve directory /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-admin/css/: No matching DirectoryIndex (index.php,index.html,index.htm) found, and server-generated directory index forbidden by Options directive www.ampsstudio.com [Tue Oct 18 17:34:49 2022] [crit] [client 66.249.93.44:0] AH00529: /home/virtual/vps-aa3942/a/aede5353c4/public_html/.well-known/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/virtual/vps-aa3942/a/aede5353c4/public_html/.well-known/' is executable www.ampsstudio.com [Tue Oct 18 17:56:44 2022] [error] [client 185.191.171.5:0] AH01071: Got error 'PHP message: PHP Warning: Attempt to read property "ID" on null in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/archive-event.php on line 15PHP message: PHP Warning: Undefined array key 0 in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/includes/classes/iron_sonaar.class.php on line 212PHP message: PHP Warning: Trying to access array offset on value of type null in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/includes/classes/iron_sonaar.class.php on line 212PHP message: PHP Warning: Undefined array key 0 in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/includes/classes/iron_sonaar.class.php on line 214PHP message: PHP Warning: Trying to access array offset on value of type null in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/includes/classes/iron_sonaar.class.php on line 214' ampsstudio.com [Tue Oct 18 18:43:01 2022] [error] [client 138.91.108.213:0] AH01276: Cannot serve directory /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-admin/css/: No matching DirectoryIndex (index.php,index.html,index.htm) found, and server-generated directory index forbidden by Options directive ampsstudio.com [Tue Oct 18 19:05:24 2022] [error] [client 138.91.108.213:0] AH01276: Cannot serve directory /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-admin/css/: No matching DirectoryIndex (index.php,index.html,index.htm) found, and server-generated directory index forbidden by Options directive www.ampsstudio.com [Tue Oct 18 19:06:27 2022] [error] [client 161.35.36.28:0] [client 161.35.36.28] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_HEADERS_NAMES. [file "remote server"] [line "-1"] [id "431000"] [msg "Malware.Expert - request_uri: CSS - prevent PHP files from executing"] [hostname "www.ampsstudio.com"] [uri "/css/contents.php"] [unique_id "Y07rI0Z4_fROchUUNgWPwAAAABU"] www.ampsstudio.com [Tue Oct 18 19:06:29 2022] [error] [client 161.35.36.28:0] [client 161.35.36.28] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_HEADERS_NAMES. [file "remote server"] [line "-1"] [id "431000"] [msg "Malware.Expert - request_uri: CSS - prevent PHP files from executing"] [hostname "www.ampsstudio.com"] [uri "/css/load.php"] [unique_id "Y07rJcSIhM28ZzxxW-HCbQAAABA"] www.ampsstudio.com [Tue Oct 18 19:06:38 2022] [error] [client 161.35.36.28:0] [client 161.35.36.28] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_HEADERS_NAMES. [file "remote server"] [line "-1"] [id "431000"] [msg "Malware.Expert - request_uri: CSS - prevent PHP files from executing"] [hostname "www.ampsstudio.com"] [uri "/css/votes.php"] [unique_id "Y07rLqUp0XyEYzSKiGEKawAAABM"] www.ampsstudio.com [Tue Oct 18 19:06:40 2022] [error] [client 161.35.36.28:0] [client 161.35.36.28] ModSecurity: Access denied with code 403 (phase 2). Pattern match "/wp-admin/js/.*\\\\.php" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430031"] [msg "Malware.Expert - request_uri: Wordpress - prevent PHP files from executing"] [hostname "www.ampsstudio.com"] [uri "/wp-admin/js/widgets/radio.php"] [unique_id "Y07rMMSIhM28ZzxxW-HCbgAAABA"] www.ampsstudio.com [Tue Oct 18 19:06:41 2022] [error] [client 161.35.36.28:0] [client 161.35.36.28] ModSecurity: Access denied with code 403 (phase 2). Pattern match "/wp-admin/css/.*\\\\.php" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430027"] [msg "Malware.Expert - request_uri: Wordpress - prevent PHP files from executing"] [hostname "www.ampsstudio.com"] [uri "/wp-admin/css/colors/radio.php"] [unique_id "Y07rMVqDEH3LhpJ4KPEx_gAAAAs"] www.ampsstudio.com [Tue Oct 18 19:06:45 2022] [error] [client 161.35.36.28:0] [client 161.35.36.28] ModSecurity: Access denied with code 403 (phase 2). String match "/wp-content/plugins/core-engine/" at REQUEST_URI. [file "remote server"] [line "-1"] [id "570064"] [msg "Malware.Expert - Wordpress Malware"] [hostname "www.ampsstudio.com"] [uri "/wp-content/plugins/core-engine/admin.php"] [unique_id "Y07rNaUp0XyEYzSKiGEKbAAAABM"] ampsstudio.com [Tue Oct 18 19:20:54 2022] [error] [client 18.209.237.50:0] [client 18.209.237.50] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "ampsstudio.com"] [uri "/.env"] [unique_id "Y07uhqUp0XyEYzSKiGEKbwAAABM"] ampsstudio.com [Tue Oct 18 19:20:59 2022] [error] [client 18.209.237.50:0] [client 18.209.237.50] ModSecurity: Access denied with code 403 (phase 2). String match "/Util/PHP/eval-stdin.php" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430046"] [msg "Malware.Expert - request_uri: CVE-2017-9841"] [hostname "ampsstudio.com"] [uri "/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php"] [unique_id "Y07ui2HH-OCaSWObXfB-cAAAAAc"] ampsstudio.com [Tue Oct 18 19:39:58 2022] [error] [client 18.209.237.50:0] [client 18.209.237.50] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "ampsstudio.com"] [uri "/.env"] [unique_id "Y07y_udzsdZaeWRrsVoYzwAAAAE"] ampsstudio.com [Tue Oct 18 19:40:00 2022] [error] [client 18.209.237.50:0] [client 18.209.237.50] ModSecurity: Access denied with code 403 (phase 2). String match "/Util/PHP/eval-stdin.php" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430046"] [msg "Malware.Expert - request_uri: CVE-2017-9841"] [hostname "ampsstudio.com"] [uri "/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php"] [unique_id "Y07zAEZ4_fROchUUNgWPywAAABU"] ampsstudio.com [Tue Oct 18 19:52:29 2022] [error] [client 41.216.188.218:0] [client 41.216.188.218] ModSecurity: Access denied with code 403 (phase 2). Pattern match "/ioptimization/.*\\\\.php\\\\?rchk" at REQUEST_URI. [file "remote server"] [line "-1"] [id "570039"] [msg "Malware.Expert - Wordpress malware plugin - ioptimization"] [hostname "ampsstudio.com"] [uri "/wp-content/plugins/ioptimization/IOptimize.php"] [unique_id "Y0717cSIhM28ZzxxW-HCeQAAABA"] ampsstudio.com [Tue Oct 18 19:52:34 2022] [error] [client 41.216.188.218:0] [client 41.216.188.218] ModSecurity: Access denied with code 403 (phase 2). Pattern match "/ioptimization/.*\\\\.php\\\\?rchk" at REQUEST_URI. [file "remote server"] [line "-1"] [id "570039"] [msg "Malware.Expert - Wordpress malware plugin - ioptimization"] [hostname "ampsstudio.com"] [uri "/wp-content/plugins/ioptimization/IOptimize.php"] [unique_id "Y0718lqDEH3LhpJ4KPEyCQAAAAs"] www.ampsstudio.com [Tue Oct 18 19:56:28 2022] [error] [client 20.117.158.160:0] [client 20.117.158.160] ModSecurity: Access denied with code 403 (phase 2). Match of "contains index.php" against "REQUEST_URI" required. [file "remote server"] [line "-1"] [id "570076"] [msg "Malware.Expert - Malware"] [hostname "www.ampsstudio.com"] [uri "/wp-content/plugins/dzs-zoomsounds/savepng.php"] [unique_id "Y0723OuFXS7vS9Yl2IfxHgAAAAI"] www.ampsstudio.com [Tue Oct 18 19:56:28 2022] [error] [client 20.117.158.160:0] [client 20.117.158.160] ModSecurity: Access denied with code 403 (phase 2). Match of "contains index.php" against "REQUEST_URI" required. [file "remote server"] [line "-1"] [id "570076"] [msg "Malware.Expert - Malware"] [hostname "www.ampsstudio.com"] [uri "/wp-content/plugins/dzs-zoomsounds/a57bze8931.php"] [unique_id "Y0723CONRLEh7S8guhni7wAAAA0"] www.ampsstudio.com [Tue Oct 18 19:56:28 2022] [error] [client 20.117.158.160:0] [client 20.117.158.160] ModSecurity: Access denied with connection close (phase 2). Pattern match "\\\\.php" at FILES:userfile. [file "remote server"] [line "-1"] [id "600000"] [msg "Malware.Expert - PHP files not allowed upload"] [hostname "www.ampsstudio.com"] [uri "/wp-content/plugins/ioptimizations/IOptimizes.php"] [unique_id "Y0723NRVlke5hlw5dy4yTAAAAAA"] www.ampsstudio.com [Tue Oct 18 19:56:28 2022] [error] [client 20.117.158.160:0] [client 20.117.158.160] ModSecurity: Access denied with code 403 (phase 2). Match of "contains index.php" against "REQUEST_URI" required. [file "remote server"] [line "-1"] [id "570076"] [msg "Malware.Expert - Malware"] [hostname "www.ampsstudio.com"] [uri "/wp-content/plugins/ioptimizations/a57bze8931.php"] [unique_id "Y0723EZ4_fROchUUNgWPzgAAABU"] www.ampsstudio.com [Tue Oct 18 19:56:28 2022] [error] [client 20.117.158.160:0] [client 20.117.158.160] ModSecurity: Access denied with code 403 (phase 2). Pattern match "/ioptimization/.*\\\\.php\\\\?rchk" at REQUEST_URI. [file "remote server"] [line "-1"] [id "570039"] [msg "Malware.Expert - Wordpress malware plugin - ioptimization"] [hostname "www.ampsstudio.com"] [uri "/wp-content/plugins/ioptimization/IOptimize.php"] [unique_id "Y0723OdzsdZaeWRrsVoY0gAAAAE"] www.ampsstudio.com [Tue Oct 18 19:56:28 2022] [error] [client 20.117.158.160:0] [client 20.117.158.160] ModSecurity: Access denied with code 403 (phase 2). Match of "contains index.php" against "REQUEST_URI" required. [file "remote server"] [line "-1"] [id "570076"] [msg "Malware.Expert - Malware"] [hostname "www.ampsstudio.com"] [uri "/wp-content/plugins/ioptimization/a57bze8931.php"] [unique_id "Y0723IMrcBeomoAzTMw6PwAAAAQ"] www.ampsstudio.com [Tue Oct 18 19:56:29 2022] [error] [client 20.117.158.160:0] [client 20.117.158.160] ModSecurity: Access denied with code 403 (phase 2). Match of "contains index.php" against "REQUEST_URI" required. [file "remote server"] [line "-1"] [id "570076"] [msg "Malware.Expert - Malware"] [hostname "www.ampsstudio.com"] [uri "/wp-content/plugins/wp-engine-module/wp-engine.php"] [unique_id "Y0723cSIhM28ZzxxW-HCegAAABA"] www.ampsstudio.com [Tue Oct 18 19:56:29 2022] [error] [client 20.117.158.160:0] [client 20.117.158.160] ModSecurity: Access denied with code 403 (phase 2). Match of "contains index.php" against "REQUEST_URI" required. [file "remote server"] [line "-1"] [id "570076"] [msg "Malware.Expert - Malware"] [hostname "www.ampsstudio.com"] [uri "/wp-content/plugins/wp-engine-module/a57bze8931.php"] [unique_id "Y0723VqDEH3LhpJ4KPEyCgAAAAs"] www.ampsstudio.com [Tue Oct 18 19:56:30 2022] [error] [client 20.117.158.160:0] [client 20.117.158.160] ModSecurity: Access denied with code 403 (phase 2). Pattern match "/\\\\..+\\\\.php" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430015"] [msg "Malware.Expert - request_uri: hidden .php execute"] [hostname "www.ampsstudio.com"] [uri "/wp-content/uploads/kaswara/fonts_icon/a57bze8931/.__a57bze8931.php"] [unique_id "Y0723uuFXS7vS9Yl2IfxHwAAAAI"] www.ampsstudio.com [Tue Oct 18 19:56:30 2022] [error] [client 20.117.158.160:0] [client 20.117.158.160] ModSecurity: Access denied with code 403 (phase 2). Match of "contains index.php" against "REQUEST_URI" required. [file "remote server"] [line "-1"] [id "570076"] [msg "Malware.Expert - Malware"] [hostname "www.ampsstudio.com"] [uri "/wp-content/plugins/apikey/apikey.php"] [unique_id "Y0723iONRLEh7S8guhni8AAAAA0"] www.ampsstudio.com [Tue Oct 18 19:56:30 2022] [error] [client 20.117.158.160:0] [client 20.117.158.160] ModSecurity: Access denied with code 403 (phase 2). Match of "contains index.php" against "REQUEST_URI" required. [file "remote server"] [line "-1"] [id "570076"] [msg "Malware.Expert - Malware"] [hostname "www.ampsstudio.com"] [uri "/wp-content/plugins/apikey/a57bze8931.php"] [unique_id "Y0723tRVlke5hlw5dy4yTQAAAAA"] www.ampsstudio.com [Tue Oct 18 19:56:30 2022] [error] [client 20.117.158.160:0] [client 20.117.158.160] ModSecurity: Access denied with code 403 (phase 2). Match of "contains /wp-content/plugins/dopwgg/libraries/php/upload.php" against "REQUEST_URI" required. [file "remote server"] [line "-1"] [id "430073"] [msg "Malware.Expert - request_uri: Wordpress - prevent PHP files from executing"] [hostname "www.ampsstudio.com"] [uri "/wp-content/plugins/cherry-plugin/admin/import-export/upload.php"] [unique_id "Y0723kZ4_fROchUUNgWPzwAAABU"] www.ampsstudio.com [Tue Oct 18 19:56:30 2022] [error] [client 20.117.158.160:0] [client 20.117.158.160] ModSecurity: Access denied with code 403 (phase 2). Match of "contains index.php" against "REQUEST_URI" required. [file "remote server"] [line "-1"] [id "570076"] [msg "Malware.Expert - Malware"] [hostname "www.ampsstudio.com"] [uri "/wp-content/plugins/cherry-plugin/admin/import-export/a57bze8931.php"] [unique_id "Y0723udzsdZaeWRrsVoY0wAAAAE"] www.ampsstudio.com [Tue Oct 18 19:56:31 2022] [error] [client 20.117.158.160:0] [client 20.117.158.160] ModSecurity: Access denied with connection close (phase 2). Pattern match "\\\\.php" at FILES:files[]. [file "remote server"] [line "-1"] [id "600000"] [msg "Malware.Expert - PHP files not allowed upload"] [hostname "www.ampsstudio.com"] [uri "/wp-content/plugins/formcraft/file-upload/server/php/"] [unique_id "Y07234MrcBeomoAzTMw6QAAAAAQ"] www.ampsstudio.com [Tue Oct 18 19:56:31 2022] [error] [client 20.117.158.160:0] [client 20.117.158.160] ModSecurity: Access denied with code 403 (phase 2). Match of "contains index.php" against "REQUEST_URI" required. [file "remote server"] [line "-1"] [id "570076"] [msg "Malware.Expert - Malware"] [hostname "www.ampsstudio.com"] [uri "/wp-content/plugins/formcraft/file-upload/server/php/files/a57bze8931.php"] [unique_id "Y07238SIhM28ZzxxW-HCewAAABA"] www.ampsstudio.com [Tue Oct 18 19:56:31 2022] [error] [client 20.117.158.160:0] [client 20.117.158.160] ModSecurity: Access denied with code 403 (phase 2). Match of "contains index.php" against "REQUEST_URI" required. [file "remote server"] [line "-1"] [id "570076"] [msg "Malware.Expert - Malware"] [hostname "www.ampsstudio.com"] [uri "/wp-admin/admin-ajax.php"] [unique_id "Y07231qDEH3LhpJ4KPEyCwAAAAs"] www.ampsstudio.com [Tue Oct 18 19:56:31 2022] [error] [client 20.117.158.160:0] [client 20.117.158.160] ModSecurity: Access denied with code 403 (phase 2). Pattern match "/\\\\..+\\\\.php" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430015"] [msg "Malware.Expert - request_uri: hidden .php execute"] [hostname "www.ampsstudio.com"] [uri "/wp-content/uploads/typehub/custom/a57bze8931/.__a57bze8931.php"] [unique_id "Y07232HH-OCaSWObXfB-egAAAAc"] www.ampsstudio.com [Tue Oct 18 19:56:31 2022] [error] [client 20.117.158.160:0] [client 20.117.158.160] ModSecurity: Access denied with code 403 (phase 2). Match of "contains index.php" against "REQUEST_URI" required. [file "remote server"] [line "-1"] [id "570076"] [msg "Malware.Expert - Malware"] [hostname "www.ampsstudio.com"] [uri "/wp-content/plugins/superstorefinder-wp/ssf-wp-admin/pages/import.php"] [unique_id "Y07236Up0XyEYzSKiGEKeQAAABM"] www.ampsstudio.com [Tue Oct 18 19:56:31 2022] [error] [client 20.117.158.160:0] [client 20.117.158.160] ModSecurity: Access denied with code 403 (phase 2). Match of "contains index.php" against "REQUEST_URI" required. [file "remote server"] [line "-1"] [id "570076"] [msg "Malware.Expert - Malware"] [hostname "www.ampsstudio.com"] [uri "/wp-content/plugins/superstorefinder-wp/ssf-wp-admin/pages/SSF_WP_UPLOADS_PATH/csv/import/abruzi.php"] [unique_id "Y0723-uFXS7vS9Yl2IfxIAAAAAI"] www.ampsstudio.com [Tue Oct 18 19:56:31 2022] [error] [client 20.117.158.160:0] [client 20.117.158.160] ModSecurity: Access denied with code 403 (phase 2). Match of "contains index.php" against "REQUEST_URI" required. [file "remote server"] [line "-1"] [id "570076"] [msg "Malware.Expert - Malware"] [hostname "www.ampsstudio.com"] [uri "/wp-admin/admin-ajax.php"] [unique_id "Y07239RVlke5hlw5dy4yTgAAAAA"] www.ampsstudio.com [Tue Oct 18 19:56:32 2022] [error] [client 20.117.158.160:0] [client 20.117.158.160] ModSecurity: Access denied with connection close (phase 2). Pattern match "\\\\.php" at FILES:file. [file "remote server"] [line "-1"] [id "600000"] [msg "Malware.Expert - PHP files not allowed upload"] [hostname "www.ampsstudio.com"] [uri "/wp-json/wp_live_chat_support/v1/remote_upload"] [unique_id "Y0724MSIhM28ZzxxW-HCfAAAABA"] www.ampsstudio.com [Tue Oct 18 19:56:32 2022] [error] [client 20.117.158.160:0] [client 20.117.158.160] ModSecurity: Access denied with code 403 (phase 2). Pattern match "/wp-content/uploads/.*\\\\.php" at REQUEST_FILENAME. [file "remote server"] [line "-1"] [id "430017"] [msg "Malware.Expert - request_uri: Wordpress - prevent PHP files from executing"] [hostname "www.ampsstudio.com"] [uri "/wp-content/uploads/wp_live_chat/abruzi.php"] [unique_id "Y0724FqDEH3LhpJ4KPEyDAAAAAs"] www.ampsstudio.com [Tue Oct 18 19:56:32 2022] [error] [client 20.117.158.160:0] [client 20.117.158.160] ModSecurity: Access denied with connection close (phase 2). Pattern match "\\\\.php" at FILES:local_importing[]. [file "remote server"] [line "-1"] [id "600000"] [msg "Malware.Expert - PHP files not allowed upload"] [hostname "www.ampsstudio.com"] [uri "/wp-admin/admin.php"] [unique_id "Y0724GHH-OCaSWObXfB-ewAAAAc"] www.ampsstudio.com [Tue Oct 18 19:56:32 2022] [error] [client 20.117.158.160:0] [client 20.117.158.160] ModSecurity: Access denied with code 403 (phase 2). Pattern match "/wp-content/uploads/.*\\\\.php" at REQUEST_FILENAME. [file "remote server"] [line "-1"] [id "430017"] [msg "Malware.Expert - request_uri: Wordpress - prevent PHP files from executing"] [hostname "www.ampsstudio.com"] [uri "/wp-content/uploads/html2wp/abruzi.php"] [unique_id "Y0724CONRLEh7S8guhni8QAAAA0"] www.ampsstudio.com [Tue Oct 18 19:56:32 2022] [error] [client 20.117.158.160:0] [client 20.117.158.160] ModSecurity: Access denied with code 403 (phase 1). Pattern match "\\\\.\\\\./\\\\.\\\\." at REQUEST_URI. [file "remote server"] [line "-1"] [id "430064"] [msg "Malware.Expert - request_uri: directory travel"] [hostname "www.ampsstudio.com"] [uri "/wp-content/plugins/wpcargo/includes/barcode.php"] [unique_id "Y0724KUp0XyEYzSKiGEKegAAABM"] www.ampsstudio.com [Tue Oct 18 19:56:32 2022] [error] [client 20.117.158.160:0] [client 20.117.158.160] ModSecurity: Access denied with code 403 (phase 2). String match "wget+http" at REQUEST_BODY. [file "remote server"] [line "-1"] [id "440014"] [msg "Malware.Expert - unwanted shell access"] [hostname "www.ampsstudio.com"] [uri "/wp-content/x.php"] [unique_id "Y0724OuFXS7vS9Yl2IfxIQAAAAI"] www.ampsstudio.com [Tue Oct 18 19:56:32 2022] [error] [client 20.117.158.160:0] [client 20.117.158.160] ModSecurity: Access denied with code 403 (phase 2). Match of "contains index.php" against "REQUEST_URI" required. [file "remote server"] [line "-1"] [id "570076"] [msg "Malware.Expert - Malware"] [hostname "www.ampsstudio.com"] [uri "/wp-content/king.php"] [unique_id "Y0724NRVlke5hlw5dy4yTwAAAAA"] www.ampsstudio.com [Tue Oct 18 19:56:32 2022] [error] [client 20.117.158.160:0] [client 20.117.158.160] ModSecurity: Access denied with code 403 (phase 2). String match "python" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "580102"] [msg "Malware.Expert - Wordpress - unknown python request"] [hostname "www.ampsstudio.com"] [uri "/wp-admin/admin-ajax.php"] [unique_id "Y0724IMrcBeomoAzTMw6QgAAAAQ"] www.ampsstudio.com [Tue Oct 18 19:56:32 2022] [error] [client 20.117.158.160:0] [client 20.117.158.160] ModSecurity: Access denied with code 403 (phase 2). String match "python" at REQUEST_HEADERS:user-agent. [file "remote server"] [line "-1"] [id "580102"] [msg "Malware.Expert - Wordpress - unknown python request"] [hostname "www.ampsstudio.com"] [uri "/wp-admin/admin-ajax.php"] [unique_id "Y0724EZ4_fROchUUNgWP0QAAABU"] www.ampsstudio.com [Tue Oct 18 19:56:32 2022] [error] [client 20.117.158.160:0] [client 20.117.158.160] ModSecurity: Access denied with code 403 (phase 2). String match "connector.minimal.php" at REQUEST_URI. [file "remote server"] [line "-1"] [id "500083"] [msg "Malware.Expert - request_uri: 0-Day - Wordpress filemanager plugin"] [hostname "www.ampsstudio.com"] [uri "/wp-content/plugins/wp-file-manager/lib/php/connector.minimal.php"] [unique_id "Y0724MSIhM28ZzxxW-HCfQAAABA"] www.ampsstudio.com [Tue Oct 18 19:56:32 2022] [error] [client 20.117.158.160:0] [client 20.117.158.160] ModSecurity: Access denied with code 403 (phase 2). String match "connector.minimal.php" at REQUEST_URI. [file "remote server"] [line "-1"] [id "500083"] [msg "Malware.Expert - request_uri: 0-Day - Wordpress filemanager plugin"] [hostname "www.ampsstudio.com"] [uri "/wp-content/plugins/wp-file-manager-pro/lib/php/connector.minimal.php"] [unique_id "Y0724FqDEH3LhpJ4KPEyDQAAAAs"] www.ampsstudio.com [Tue Oct 18 20:49:17 2022] [error] [client 37.139.53.20:0] AH01071: Got error 'PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179' www.ampsstudio.com [Tue Oct 18 20:49:17 2022] [error] [client 37.139.53.20:0] AH01071: Got error 'PHP message: PHP Warning: Cannot modify header information - headers already sent by (output started at /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-includes/functions.php:5277) in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/includes/sonaar-music/css/theme/custom-style.php on line 2' www.ampsstudio.com [Tue Oct 18 20:56:49 2022] [error] [client 181.215.176.68:0] AH01071: Got error 'PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179' www.ampsstudio.com [Tue Oct 18 20:56:49 2022] [error] [client 181.215.176.68:0] AH01071: Got error 'PHP message: PHP Warning: Cannot modify header information - headers already sent by (output started at /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-includes/functions.php:5277) in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/includes/sonaar-music/css/theme/custom-style.php on line 2' ampsstudio.com [Tue Oct 18 22:31:57 2022] [error] [client 18.209.237.50:0] [client 18.209.237.50] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "ampsstudio.com"] [uri "/.env"] [unique_id "Y08bTcSIhM28ZzxxW-HCpQAAABA"] ampsstudio.com [Tue Oct 18 22:32:02 2022] [error] [client 18.209.237.50:0] [client 18.209.237.50] ModSecurity: Access denied with code 403 (phase 2). String match "/Util/PHP/eval-stdin.php" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430046"] [msg "Malware.Expert - request_uri: CVE-2017-9841"] [hostname "ampsstudio.com"] [uri "/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php"] [unique_id "Y08bUtRVlke5hlw5dy4ydwAAAAA"] ampsstudio.com [Tue Oct 18 22:53:47 2022] [error] [client 18.209.237.50:0] [client 18.209.237.50] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "ampsstudio.com"] [uri "/.env"] [unique_id "Y08ga-dzsdZaeWRrsVoZBAAAAAE"] ampsstudio.com [Tue Oct 18 22:53:50 2022] [error] [client 18.209.237.50:0] [client 18.209.237.50] ModSecurity: Access denied with code 403 (phase 2). String match "/Util/PHP/eval-stdin.php" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430046"] [msg "Malware.Expert - request_uri: CVE-2017-9841"] [hostname "ampsstudio.com"] [uri "/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php"] [unique_id "Y08gblqDEH3LhpJ4KPEyPwAAAAs"] ampsstudio.com [Tue Oct 18 23:06:43 2022] [error] [client 20.163.1.144:0] AH01276: Cannot serve directory /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-admin/css/: No matching DirectoryIndex (index.php,index.html,index.htm) found, and server-generated directory index forbidden by Options directive ampsstudio.com [Tue Oct 18 23:31:12 2022] [error] [client 195.178.120.231:0] [client 195.178.120.231] ModSecurity: Access denied with code 403 (phase 2). Pattern match "/ioptimization/.*\\\\.php\\\\?rchk" at REQUEST_URI. [file "remote server"] [line "-1"] [id "570039"] [msg "Malware.Expert - Wordpress malware plugin - ioptimization"] [hostname "ampsstudio.com"] [uri "/wp-content/plugins/ioptimization/IOptimize.php"] [unique_id "Y08pMOdzsdZaeWRrsVoZEwAAAAE"] ampsstudio.com [Tue Oct 18 23:31:27 2022] [error] [client 195.178.120.231:0] [client 195.178.120.231] ModSecurity: Access denied with code 403 (phase 2). Pattern match "/ioptimization/.*\\\\.php\\\\?rchk" at REQUEST_URI. [file "remote server"] [line "-1"] [id "570039"] [msg "Malware.Expert - Wordpress malware plugin - ioptimization"] [hostname "ampsstudio.com"] [uri "/wp-content/plugins/ioptimization/index.php"] [unique_id "Y08pP1qDEH3LhpJ4KPEyTgAAAAs"] ampsstudio.com [Tue Oct 18 23:58:25 2022] [error] [client 18.209.237.50:0] [client 18.209.237.50] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "ampsstudio.com"] [uri "/.env"] [unique_id "Y08vkdRVlke5hlw5dy4ylQAAAAA"] ampsstudio.com [Tue Oct 18 23:58:28 2022] [error] [client 18.209.237.50:0] [client 18.209.237.50] ModSecurity: Access denied with code 403 (phase 2). String match "/Util/PHP/eval-stdin.php" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430046"] [msg "Malware.Expert - request_uri: CVE-2017-9841"] [hostname "ampsstudio.com"] [uri "/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php"] [unique_id "Y08vlMSIhM28ZzxxW-HCyAAAABA"] www.ampsstudio.com [Wed Oct 19 03:20:53 2022] [error] [client 66.249.66.71:0] AH01071: Got error 'PHP message: PHP Warning: Undefined array key "block" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/includes/classes/iron_sonaar.class.php on line 212PHP message: PHP Warning: Trying to access array offset on value of type null in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/includes/classes/iron_sonaar.class.php on line 212PHP message: PHP Warning: Undefined array key "block" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/includes/classes/iron_sonaar.class.php on line 214PHP message: PHP Warning: Trying to access array offset on value of type null in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/includes/classes/iron_sonaar.class.php on line 214' www.ampsstudio.com [Wed Oct 19 05:02:49 2022] [error] [client 104.244.78.6:0] AH01071: Got error 'PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179' www.ampsstudio.com [Wed Oct 19 05:02:49 2022] [error] [client 104.244.78.6:0] AH01071: Got error 'PHP message: PHP Warning: Cannot modify header information - headers already sent by (output started at /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-includes/functions.php:5277) in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/includes/sonaar-music/css/theme/custom-style.php on line 2' ampsstudio.com [Wed Oct 19 05:08:06 2022] [error] [client 193.169.254.184:0] [client 193.169.254.184] ModSecurity: Access denied with code 403 (phase 2). Match of "contains index.php" against "REQUEST_URI" required. [file "remote server"] [line "-1"] [id "570076"] [msg "Malware.Expert - Malware"] [hostname "ampsstudio.com"] [uri "/wp-plain.php"] [unique_id "Y094JgifA5NSgCqK1QyhTQAAAAE"] www.ampsstudio.com [Wed Oct 19 05:08:10 2022] [error] [client 193.169.254.184:0] [client 193.169.254.184] ModSecurity: Access denied with code 403 (phase 2). String match "php.suspected" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430059"] [msg "Malware.Expert - request_uri: .PHP suspected files"] [hostname "www.ampsstudio.com"] [uri "/wp-content/plugins/apikey/apikey.php.suspected"] [unique_id "Y094KgifA5NSgCqK1QyhTgAAAAE"] www.ampsstudio.com [Wed Oct 19 05:08:10 2022] [error] [client 193.169.254.184:0] [client 193.169.254.184] ModSecurity: Access denied with code 403 (phase 2). String match "php.suspected" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430059"] [msg "Malware.Expert - request_uri: .PHP suspected files"] [hostname "www.ampsstudio.com"] [uri "/plugins/content/apismtp/apismtp.php.suspected"] [unique_id "Y094KtjYhUuz01eDuCgZRQAAABA"] ampsstudio.com [Wed Oct 19 10:48:02 2022] [error] [client 20.19.208.117:0] [client 20.19.208.117] ModSecurity: Access denied with code 403 (phase 2). Match of "contains index.php" against "REQUEST_URI" required. [file "remote server"] [line "-1"] [id "570076"] [msg "Malware.Expert - Malware"] [hostname "ampsstudio.com"] [uri "/wp-admin/admin-post.php"] [unique_id "Y0_H0n4rE_yANElGuEH_uwAAAAg"] ampsstudio.com [Wed Oct 19 10:48:08 2022] [error] [client 20.19.208.117:0] [client 20.19.208.117] ModSecurity: Access denied with code 403 (phase 2). Pattern match "/wp-content/plugins/.*/up\\\\.php" at REQUEST_URI. [file "remote server"] [line "-1"] [id "570052"] [msg "Malware.Expert - Malware"] [hostname "ampsstudio.com"] [uri "/wp-content/plugins/instabuilder2/cache/up.php"] [unique_id "Y0_H2AioGR6VFnXOjjByAQAAAAU"] www.ampsstudio.com [Wed Oct 19 13:20:32 2022] [error] [client 37.19.223.104:0] AH01071: Got error 'PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179' www.ampsstudio.com [Wed Oct 19 13:20:32 2022] [error] [client 37.19.223.104:0] AH01071: Got error 'PHP message: PHP Warning: Cannot modify header information - headers already sent by (output started at /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-includes/functions.php:5277) in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/includes/sonaar-music/css/theme/custom-style.php on line 2' ampsstudio.com [Wed Oct 19 14:49:17 2022] [error] [client 3.144.34.206:0] [client 3.144.34.206] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "ampsstudio.com"] [uri "/.env"] [unique_id "Y1AAXSyIvhO5APiWxfFDegAAAAY"] ampsstudio.com [Wed Oct 19 14:49:23 2022] [error] [client 3.144.34.206:0] [client 3.144.34.206] ModSecurity: Access denied with code 403 (phase 2). String match "/Util/PHP/eval-stdin.php" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430046"] [msg "Malware.Expert - request_uri: CVE-2017-9841"] [hostname "ampsstudio.com"] [uri "/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php"] [unique_id "Y1AAY34rE_yANElGuEEAXwAAAAg"] ampsstudio.com [Wed Oct 19 15:46:41 2022] [error] [client 194.169.175.136:0] [client 194.169.175.136] ModSecurity: Access denied with code 403 (phase 2). Pattern match "/ioptimization/.*\\\\.php\\\\?rchk" at REQUEST_URI. [file "remote server"] [line "-1"] [id "570039"] [msg "Malware.Expert - Wordpress malware plugin - ioptimization"] [hostname "ampsstudio.com"] [uri "/wp-content/plugins/ioptimization/IOptimize.php"] [unique_id "Y1AN0QioGR6VFnXOjjBy3gAAAAU"] ampsstudio.com [Wed Oct 19 15:48:03 2022] [error] [client 194.169.175.136:0] [client 194.169.175.136] ModSecurity: Access denied with code 403 (phase 2). Pattern match "/ioptimization/.*\\\\.php\\\\?rchk" at REQUEST_URI. [file "remote server"] [line "-1"] [id "570039"] [msg "Malware.Expert - Wordpress malware plugin - ioptimization"] [hostname "ampsstudio.com"] [uri "/wp-content/plugins/ioptimization/IOptimize.php"] [unique_id "Y1AOI34rE_yANElGuEEAigAAAAg"] ampsstudio.com [Wed Oct 19 15:56:01 2022] [error] [client 18.209.237.50:0] [client 18.209.237.50] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "ampsstudio.com"] [uri "/.env"] [unique_id "Y1AQAQifA5NSgCqK1QyjAAAAAAE"] ampsstudio.com [Wed Oct 19 15:56:04 2022] [error] [client 18.209.237.50:0] [client 18.209.237.50] ModSecurity: Access denied with code 403 (phase 2). String match "/Util/PHP/eval-stdin.php" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430046"] [msg "Malware.Expert - request_uri: CVE-2017-9841"] [hostname "ampsstudio.com"] [uri "/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php"] [unique_id "Y1AQBPJ1eYaf4irD641gLwAAAAI"] ampsstudio.com [Wed Oct 19 19:59:16 2022] [error] [client 3.144.34.206:0] [client 3.144.34.206] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "ampsstudio.com"] [uri "/.env"] [unique_id "Y1BJBDKeZMWBdNBxs_vVkgAAAAM"] ampsstudio.com [Wed Oct 19 19:59:54 2022] [error] [client 3.144.34.206:0] [client 3.144.34.206] ModSecurity: Access denied with code 403 (phase 2). String match "/Util/PHP/eval-stdin.php" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430046"] [msg "Malware.Expert - request_uri: CVE-2017-9841"] [hostname "ampsstudio.com"] [uri "/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php"] [unique_id "Y1BJKq7gxdxfelBU_nKjSgAAAAo"] www.ampsstudio.com [Wed Oct 19 20:24:44 2022] [error] [client 5.252.194.59:0] AH01071: Got error 'PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179' www.ampsstudio.com [Wed Oct 19 20:24:44 2022] [error] [client 5.252.194.59:0] AH01071: Got error 'PHP message: PHP Warning: Cannot modify header information - headers already sent by (output started at /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-includes/functions.php:5277) in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/includes/sonaar-music/css/theme/custom-style.php on line 2' ampsstudio.com [Wed Oct 19 21:07:49 2022] [error] [client 3.144.34.206:0] [client 3.144.34.206] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "ampsstudio.com"] [uri "/.env"] [unique_id "Y1BZFa7gxdxfelBU_nKjdAAAAAo"] ampsstudio.com [Wed Oct 19 21:07:52 2022] [error] [client 3.144.34.206:0] [client 3.144.34.206] ModSecurity: Access denied with code 403 (phase 2). String match "/Util/PHP/eval-stdin.php" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430046"] [msg "Malware.Expert - request_uri: CVE-2017-9841"] [hostname "ampsstudio.com"] [uri "/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php"] [unique_id "Y1BZGNjYhUuz01eDuCgbnwAAABA"] ampsstudio.com [Wed Oct 19 23:01:26 2022] [error] [client 3.144.34.206:0] [client 3.144.34.206] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "ampsstudio.com"] [uri "/.env"] [unique_id "Y1Bztnd0RjgOjRr8K3nUzAAAAAQ"] ampsstudio.com [Wed Oct 19 23:01:28 2022] [error] [client 3.144.34.206:0] [client 3.144.34.206] ModSecurity: Access denied with code 403 (phase 2). String match "/Util/PHP/eval-stdin.php" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430046"] [msg "Malware.Expert - request_uri: CVE-2017-9841"] [hostname "ampsstudio.com"] [uri "/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php"] [unique_id "Y1BzuPxpMKq5D656AheFMgAAAAE"] ampsstudio.com [Wed Oct 19 23:13:04 2022] [error] [client 3.144.34.206:0] [client 3.144.34.206] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "ampsstudio.com"] [uri "/.env"] [unique_id "Y1B2cHd0RjgOjRr8K3nU0AAAAAQ"] ampsstudio.com [Wed Oct 19 23:13:11 2022] [error] [client 3.144.34.206:0] [client 3.144.34.206] ModSecurity: Access denied with code 403 (phase 2). String match "/Util/PHP/eval-stdin.php" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430046"] [msg "Malware.Expert - request_uri: CVE-2017-9841"] [hostname "ampsstudio.com"] [uri "/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php"] [unique_id "Y1B2d9jYhUuz01eDuCgb1wAAABA"] www.ampsstudio.com [Thu Oct 20 01:18:31 2022] [error] [client 185.193.125.42:0] AH01071: Got error 'PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179' www.ampsstudio.com [Thu Oct 20 01:18:31 2022] [error] [client 185.193.125.42:0] AH01071: Got error 'PHP message: PHP Warning: Cannot modify header information - headers already sent by (output started at /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-includes/functions.php:5277) in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/includes/sonaar-music/css/theme/custom-style.php on line 2' www.ampsstudio.com [Thu Oct 20 07:03:00 2022] [error] [client 104.227.170.11:0] AH01071: Got error 'PHP message: PHP Warning: Cannot modify header information - headers already sent by (output started at /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-includes/functions.php:5277) in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/includes/sonaar-music/css/theme/custom-style.php on line 2' www.ampsstudio.com [Thu Oct 20 08:00:29 2022] [error] [client 171.237.73.2:0] AH01071: Got error 'PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179' www.ampsstudio.com [Thu Oct 20 08:00:29 2022] [error] [client 171.237.73.2:0] AH01071: Got error 'PHP message: PHP Warning: Cannot modify header information - headers already sent by (output started at /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-includes/functions.php:5277) in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/includes/sonaar-music/css/theme/custom-style.php on line 2' www.ampsstudio.com [Thu Oct 20 09:00:12 2022] [error] [client 40.77.167.77:0] AH01071: Got error 'PHP message: PHP Warning: Attempt to read property "ID" on null in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/archive-event.php on line 15PHP message: PHP Warning: Undefined array key 0 in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/includes/classes/iron_sonaar.class.php on line 212PHP message: PHP Warning: Trying to access array offset on value of type null in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/includes/classes/iron_sonaar.class.php on line 212PHP message: PHP Warning: Undefined array key 0 in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/includes/classes/iron_sonaar.class.php on line 214PHP message: PHP Warning: Trying to access array offset on value of type null in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/includes/classes/iron_sonaar.class.php on line 214' www.ampsstudio.com [Thu Oct 20 09:27:43 2022] [error] [client 87.249.132.187:0] AH01071: Got error 'PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179' www.ampsstudio.com [Thu Oct 20 09:27:43 2022] [error] [client 87.249.132.187:0] AH01071: Got error 'PHP message: PHP Warning: Cannot modify header information - headers already sent by (output started at /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-includes/functions.php:5277) in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/includes/sonaar-music/css/theme/custom-style.php on line 2' ampsstudio.com [Thu Oct 20 11:05:37 2022] [error] [client 18.209.237.50:0] [client 18.209.237.50] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "ampsstudio.com"] [uri "/.env"] [unique_id "Y1EdcVcl_icloCAWaPQ8igAAAAQ"] ampsstudio.com [Thu Oct 20 11:05:41 2022] [error] [client 18.209.237.50:0] [client 18.209.237.50] ModSecurity: Access denied with code 403 (phase 2). String match "/Util/PHP/eval-stdin.php" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430046"] [msg "Malware.Expert - request_uri: CVE-2017-9841"] [hostname "ampsstudio.com"] [uri "/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php"] [unique_id "Y1EddVhaVEJ84WTTo-iDXAAAAAA"] ampsstudio.com [Thu Oct 20 11:53:36 2022] [error] [client 194.169.175.136:0] [client 194.169.175.136] ModSecurity: Access denied with code 403 (phase 2). Pattern match "/ioptimization/.*\\\\.php\\\\?rchk" at REQUEST_URI. [file "remote server"] [line "-1"] [id "570039"] [msg "Malware.Expert - Wordpress malware plugin - ioptimization"] [hostname "ampsstudio.com"] [uri "/wp-content/plugins/ioptimization/IOptimize.php"] [unique_id "Y1EosPqVXRo906em-BTgzQAAAAE"] ampsstudio.com [Thu Oct 20 11:53:44 2022] [error] [client 194.169.175.136:0] [client 194.169.175.136] ModSecurity: Access denied with code 403 (phase 2). Pattern match "/ioptimization/.*\\\\.php\\\\?rchk" at REQUEST_URI. [file "remote server"] [line "-1"] [id "570039"] [msg "Malware.Expert - Wordpress malware plugin - ioptimization"] [hostname "ampsstudio.com"] [uri "/wp-content/plugins/ioptimization/IOptimize.php"] [unique_id "Y1EouASOdKv-jyiPB2k43gAAAAk"] www.ampsstudio.com [Thu Oct 20 13:13:26 2022] [error] [client 185.220.101.1:0] AH01071: Got error 'PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179' www.ampsstudio.com [Thu Oct 20 13:13:26 2022] [error] [client 185.220.101.1:0] AH01071: Got error 'PHP message: PHP Warning: Cannot modify header information - headers already sent by (output started at /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-includes/functions.php:5277) in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/includes/sonaar-music/css/theme/custom-style.php on line 2' www.ampsstudio.com [Thu Oct 20 15:13:51 2022] [error] [client 20.199.46.180:0] [client 20.199.46.180] ModSecurity: Access denied with code 403 (phase 2). Pattern match "/ioptimization/.*\\\\.php\\\\?rchk" at REQUEST_URI. [file "remote server"] [line "-1"] [id "570039"] [msg "Malware.Expert - Wordpress malware plugin - ioptimization"] [hostname "www.ampsstudio.com"] [uri "/wp-content/plugins/ioptimization/IOptimize.php"] [unique_id "Y1FXn9uP2sybjxo120osFAAAAAU"] www.ampsstudio.com [Thu Oct 20 15:50:37 2022] [error] [client 20.111.31.149:0] [client 20.111.31.149] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "www.ampsstudio.com"] [uri "/.env"] [unique_id "Y1FgPVhaVEJ84WTTo-iD6AAAAAA"] www.ampsstudio.com [Thu Oct 20 15:50:39 2022] [error] [client 20.111.31.149:0] [client 20.111.31.149] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "www.ampsstudio.com"] [uri "/.env.example"] [unique_id "Y1FgPwSOdKv-jyiPB2k5WwAAAAk"] ampsstudio.com [Thu Oct 20 17:26:24 2022] [error] [client 3.16.82.15:0] [client 3.16.82.15] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "ampsstudio.com"] [uri "/.env"] [unique_id "Y1F2sFhaVEJ84WTTo-iEPgAAAAA"] ampsstudio.com [Thu Oct 20 17:26:30 2022] [error] [client 3.16.82.15:0] [client 3.16.82.15] ModSecurity: Access denied with code 403 (phase 2). String match "/Util/PHP/eval-stdin.php" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430046"] [msg "Malware.Expert - request_uri: CVE-2017-9841"] [hostname "ampsstudio.com"] [uri "/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php"] [unique_id "Y1F2ttAuQPjYGM5vf_F3ugAAAAY"] www.ampsstudio.com [Thu Oct 20 19:15:34 2022] [error] [client 66.249.66.71:0] AH01071: Got error 'PHP message: PHP Warning: Undefined variable $my_post_array in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/taxonomy-artist-category.php on line 45' ampsstudio.com [Thu Oct 20 20:10:01 2022] [error] [client 194.169.175.136:0] [client 194.169.175.136] ModSecurity: Access denied with code 403 (phase 2). Pattern match "/ioptimization/.*\\\\.php\\\\?rchk" at REQUEST_URI. [file "remote server"] [line "-1"] [id "570039"] [msg "Malware.Expert - Wordpress malware plugin - ioptimization"] [hostname "ampsstudio.com"] [uri "/wp-content/plugins/ioptimization/IOptimize.php"] [unique_id "Y1GdCU0-_ukdwpGQJlEt5gAAAAs"] ampsstudio.com [Thu Oct 20 20:10:13 2022] [error] [client 194.169.175.136:0] [client 194.169.175.136] ModSecurity: Access denied with code 403 (phase 2). Pattern match "/ioptimization/.*\\\\.php\\\\?rchk" at REQUEST_URI. [file "remote server"] [line "-1"] [id "570039"] [msg "Malware.Expert - Wordpress malware plugin - ioptimization"] [hostname "ampsstudio.com"] [uri "/wp-content/plugins/ioptimization/IOptimize.php"] [unique_id "Y1GdFRF6DaJGr4WLCrHooAAAAAo"] www.ampsstudio.com [Thu Oct 20 21:32:55 2022] [error] [client 23.137.251.61:0] AH01071: Got error 'PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179' www.ampsstudio.com [Thu Oct 20 21:32:55 2022] [error] [client 23.137.251.61:0] AH01071: Got error 'PHP message: PHP Warning: Cannot modify header information - headers already sent by (output started at /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-includes/functions.php:5277) in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/includes/sonaar-music/css/theme/custom-style.php on line 2' mail.ampsstudio.com [Thu Oct 20 21:56:32 2022] [error] [client 20.203.225.223:0] [client 20.203.225.223] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "mail.ampsstudio.com"] [uri "/.env"] [unique_id "Y1G2AP1j3Ylzvs1n0V1M1gAAAAg"] www.ampsstudio.com [Thu Oct 20 22:14:53 2022] [error] [client 66.249.66.71:0] AH01071: Got error 'PHP message: PHP Warning: Undefined variable $my_post_array in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/taxonomy-artist-category.php on line 45' www.ampsstudio.com [Fri Oct 21 00:31:01 2022] [error] [client 77.35.24.134:0] AH01071: Got error 'PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179' www.ampsstudio.com [Fri Oct 21 00:31:01 2022] [error] [client 77.35.24.134:0] AH01071: Got error 'PHP message: PHP Warning: Cannot modify header information - headers already sent by (output started at /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-includes/functions.php:5277) in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/includes/sonaar-music/css/theme/custom-style.php on line 2' www.ampsstudio.com [Fri Oct 21 00:43:17 2022] [error] [client 178.168.199.113:0] AH01071: Got error 'PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179' www.ampsstudio.com [Fri Oct 21 00:43:17 2022] [error] [client 178.168.199.113:0] AH01071: Got error 'PHP message: PHP Warning: Cannot modify header information - headers already sent by (output started at /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-includes/functions.php:5277) in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/includes/sonaar-music/css/theme/custom-style.php on line 2' www.ampsstudio.com [Fri Oct 21 03:49:12 2022] [error] [client 4.231.101.119:0] AH01276: Cannot serve directory /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-includes/: No matching DirectoryIndex (index.php,index.html,index.htm) found, and server-generated directory index forbidden by Options directive ampsstudio.com [Fri Oct 21 10:05:20 2022] [error] [client 194.169.175.136:0] [client 194.169.175.136] ModSecurity: Access denied with code 403 (phase 2). Pattern match "/ioptimization/.*\\\\.php\\\\?rchk" at REQUEST_URI. [file "remote server"] [line "-1"] [id "570039"] [msg "Malware.Expert - Wordpress malware plugin - ioptimization"] [hostname "ampsstudio.com"] [uri "/wp-content/plugins/ioptimization/IOptimize.php"] [unique_id "Y1Jg0AlnSxoHeXYADb-I7QAAAAc"] ampsstudio.com [Fri Oct 21 10:05:27 2022] [error] [client 194.169.175.136:0] [client 194.169.175.136] ModSecurity: Access denied with code 403 (phase 2). Pattern match "/ioptimization/.*\\\\.php\\\\?rchk" at REQUEST_URI. [file "remote server"] [line "-1"] [id "570039"] [msg "Malware.Expert - Wordpress malware plugin - ioptimization"] [hostname "ampsstudio.com"] [uri "/wp-content/plugins/ioptimization/IOptimize.php"] [unique_id "Y1Jg1wqCKxvPr1uMVF6KAgAAAAQ"] ampsstudio.com [Fri Oct 21 10:27:12 2022] [error] [client 193.169.254.184:0] [client 193.169.254.184] ModSecurity: Access denied with code 403 (phase 2). Match of "contains index.php" against "REQUEST_URI" required. [file "remote server"] [line "-1"] [id "570076"] [msg "Malware.Expert - Malware"] [hostname "ampsstudio.com"] [uri "/wp-plain.php"] [unique_id "Y1Jl8JuUqtwDBjKnNVjU-QAAAAA"] www.ampsstudio.com [Fri Oct 21 10:27:16 2022] [error] [client 193.169.254.184:0] [client 193.169.254.184] ModSecurity: Access denied with code 403 (phase 2). String match "php.suspected" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430059"] [msg "Malware.Expert - request_uri: .PHP suspected files"] [hostname "www.ampsstudio.com"] [uri "/wp-content/plugins/apikey/apikey.php.suspected"] [unique_id "Y1Jl9KXJRg91izQjWV8egQAAAAg"] www.ampsstudio.com [Fri Oct 21 10:27:16 2022] [error] [client 193.169.254.184:0] [client 193.169.254.184] ModSecurity: Access denied with code 403 (phase 2). String match "php.suspected" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430059"] [msg "Malware.Expert - request_uri: .PHP suspected files"] [hostname "www.ampsstudio.com"] [uri "/plugins/content/apismtp/apismtp.php.suspected"] [unique_id "Y1Jl9BMcomnhBIdxlJvjowAAAAk"] www.ampsstudio.com [Fri Oct 21 10:33:47 2022] [error] [client 51.11.6.150:0] AH01071: Got error 'PHP message: PHP Warning: Undefined array key "HTTP_USER_AGENT" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/bookly-responsive-appointment-booking-tool/frontend/modules/booking/ShortCode.php on line 66' www.ampsstudio.com [Fri Oct 21 10:33:48 2022] [error] [client 51.11.6.150:0] AH01071: Got error 'PHP message: PHP Warning: Undefined array key "HTTP_USER_AGENT" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/bookly-responsive-appointment-booking-tool/frontend/modules/booking/ShortCode.php on line 66' ampsstudio.com [Fri Oct 21 10:35:36 2022] [error] [client 20.203.225.223:0] [client 20.203.225.223] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "ampsstudio.com"] [uri "/.env"] [unique_id "Y1Jn6JYUhbadPLHO-zoATAAAAAo"] ampsstudio.com [Fri Oct 21 10:43:16 2022] [error] [client 20.42.116.234:0] [client 20.42.116.234] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "ampsstudio.com"] [uri "/.env"] [unique_id "Y1JptBMcomnhBIdxlJvjqQAAAAk"] webdisk.ampsstudio.com [Fri Oct 21 11:32:48 2022] [error] [client 20.203.225.223:0] [client 20.203.225.223] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "webdisk.ampsstudio.com"] [uri "/.env"] [unique_id "Y1J1UKXJRg91izQjWV8e4QAAAAg"] webmail.ampsstudio.com [Fri Oct 21 13:15:16 2022] [error] [client 20.203.225.223:0] [client 20.203.225.223] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "webmail.ampsstudio.com"] [uri "/.env"] [unique_id "Y1KNVJp8bD2lpZSWwJ5OwQAAAAY"] ampsstudio.com [Fri Oct 21 13:56:40 2022] [error] [client 20.42.116.234:0] [client 20.42.116.234] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "ampsstudio.com"] [uri "/.env"] [unique_id "Y1KXCIG4WnAU_DHAykIzRQAAABc"] cpanel.ampsstudio.com [Fri Oct 21 14:24:08 2022] [error] [client 20.203.225.223:0] [client 20.203.225.223] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "cpanel.ampsstudio.com"] [uri "/.env"] [unique_id "Y1KdeB_hvMoEgNmDSSs7FgAAABI"] www.ampsstudio.com [Fri Oct 21 14:40:24 2022] [error] [client 216.24.213.42:0] AH01071: Got error 'PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179' www.ampsstudio.com [Fri Oct 21 14:40:24 2022] [error] [client 216.24.213.42:0] AH01071: Got error 'PHP message: PHP Warning: Cannot modify header information - headers already sent by (output started at /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-includes/functions.php:5277) in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/includes/sonaar-music/css/theme/custom-style.php on line 2' www.ampsstudio.com [Fri Oct 21 15:23:11 2022] [crit] [client 66.249.93.37:0] AH00529: /home/virtual/vps-aa3942/a/aede5353c4/public_html/.well-known/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/virtual/vps-aa3942/a/aede5353c4/public_html/.well-known/' is executable www.ampsstudio.com [Fri Oct 21 18:46:44 2022] [error] [client 185.189.114.121:0] AH01071: Got error 'PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179' www.ampsstudio.com [Fri Oct 21 18:46:44 2022] [error] [client 185.189.114.121:0] AH01071: Got error 'PHP message: PHP Warning: Cannot modify header information - headers already sent by (output started at /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-includes/functions.php:5277) in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/includes/sonaar-music/css/theme/custom-style.php on line 2' www.ampsstudio.com [Fri Oct 21 20:30:54 2022] [error] [client 178.45.179.163:0] AH01071: Got error 'PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179' www.ampsstudio.com [Fri Oct 21 20:30:54 2022] [error] [client 178.45.179.163:0] AH01071: Got error 'PHP message: PHP Warning: Cannot modify header information - headers already sent by (output started at /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-includes/functions.php:5277) in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/includes/sonaar-music/css/theme/custom-style.php on line 2' cpanel.ampsstudio.com [Fri Oct 21 21:33:00 2022] [error] [client 109.206.241.182:0] [client 109.206.241.182] ModSecurity: Access denied with code 403 (phase 2). Match of "contains index.php" against "REQUEST_URI" required. [file "remote server"] [line "-1"] [id "570076"] [msg "Malware.Expert - Malware"] [hostname "cpanel.ampsstudio.com"] [uri "/wp-content/plugins/seoplugins/mar.php"] [unique_id "Y1MB_LK1k0lGrurJ7tlcTwAAAAU"] cpanel.ampsstudio.com [Fri Oct 21 21:33:09 2022] [error] [client 109.206.241.182:0] [client 109.206.241.182] ModSecurity: Access denied with code 403 (phase 2). Match of "contains index.php" against "REQUEST_URI" required. [file "remote server"] [line "-1"] [id "570076"] [msg "Malware.Expert - Malware"] [hostname "cpanel.ampsstudio.com"] [uri "/wp-content/plugins/seoplugins/mar.php"] [unique_id "Y1MCBYG4WnAU_DHAykI0SAAAABc"] cpanel.ampsstudio.com [Fri Oct 21 21:33:17 2022] [error] [client 109.206.241.182:0] [client 109.206.241.182] ModSecurity: Access denied with code 403 (phase 2). Match of "contains index.php" against "REQUEST_URI" required. [file "remote server"] [line "-1"] [id "570076"] [msg "Malware.Expert - Malware"] [hostname "cpanel.ampsstudio.com"] [uri "/wp-content/themes/seotheme/mar.php"] [unique_id "Y1MCDTT7RCeiWGGZooHmWwAAAAQ"] ampsstudio.com [Sat Oct 22 00:40:37 2022] [error] [client 20.42.116.234:0] [client 20.42.116.234] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "ampsstudio.com"] [uri "/.env"] [unique_id "Y1Mt9XMnF0npQUFYuIBzVwAAAAM"] www.ampsstudio.com [Sat Oct 22 00:49:55 2022] [error] [client 66.249.66.75:0] AH01071: Got error 'PHP message: PHP Warning: Attempt to read property "ID" on null in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/archive-event.php on line 15PHP message: PHP Warning: Undefined array key 0 in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/includes/classes/iron_sonaar.class.php on line 212PHP message: PHP Warning: Trying to access array offset on value of type null in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/includes/classes/iron_sonaar.class.php on line 212PHP message: PHP Warning: Undefined array key 0 in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/includes/classes/iron_sonaar.class.php on line 214PHP message: PHP Warning: Trying to access array offset on value of type null in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/includes/classes/iron_sonaar.class.php on line 214' www.ampsstudio.com [Sat Oct 22 01:56:09 2022] [error] [client 185.241.208.232:0] AH01071: Got error 'PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179' www.ampsstudio.com [Sat Oct 22 01:56:09 2022] [error] [client 185.241.208.232:0] AH01071: Got error 'PHP message: PHP Warning: Cannot modify header information - headers already sent by (output started at /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-includes/functions.php:5277) in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/includes/sonaar-music/css/theme/custom-style.php on line 2' www.ampsstudio.com [Sat Oct 22 05:11:17 2022] [error] [client 46.166.182.116:0] AH01071: Got error 'PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179' www.ampsstudio.com [Sat Oct 22 05:11:17 2022] [error] [client 46.166.182.116:0] AH01071: Got error 'PHP message: PHP Warning: Cannot modify header information - headers already sent by (output started at /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-includes/functions.php:5277) in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/includes/sonaar-music/css/theme/custom-style.php on line 2' ampsstudio.com [Sat Oct 22 06:17:06 2022] [error] [client 52.211.165.137:0] [client 52.211.165.137] ModSecurity: Access denied with code 403 (phase 2). String match "/.git/config" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430058"] [msg "Malware.Expert - request_uri: .git config"] [hostname "ampsstudio.com"] [uri "/.git/config"] [unique_id "Y1N80goMoOtW3_9n7CtNUQAAABI"] ampsstudio.com [Sat Oct 22 06:17:06 2022] [error] [client 52.211.165.137:0] [client 52.211.165.137] ModSecurity: Access denied with code 403 (phase 2). String match "/.git/config" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430058"] [msg "Malware.Expert - request_uri: .git config"] [hostname "ampsstudio.com"] [uri "/.git/config"] [unique_id "Y1N80vvncW6rYM2Yuo2dZwAAAAE"] ampsstudio.com [Sat Oct 22 06:17:06 2022] [error] [client 52.211.165.137:0] [client 52.211.165.137] ModSecurity: Access denied with code 403 (phase 2). String match "/.git/config" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430058"] [msg "Malware.Expert - request_uri: .git config"] [hostname "ampsstudio.com"] [uri "/.git/config"] [unique_id "Y1N80tDVXVES0rinPBpayQAAAAA"] ampsstudio.com [Sat Oct 22 06:17:06 2022] [error] [client 52.211.165.137:0] [client 52.211.165.137] ModSecurity: Access denied with code 403 (phase 2). String match "/.git/config" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430058"] [msg "Malware.Expert - request_uri: .git config"] [hostname "ampsstudio.com"] [uri "/.git/config"] [unique_id "Y1N80t1WJcVuLN6vbiCmHAAAABc"] www.ampsstudio.com [Sat Oct 22 07:27:26 2022] [crit] [client 66.249.93.34:0] AH00529: /home/virtual/vps-aa3942/a/aede5353c4/public_html/.well-known/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/virtual/vps-aa3942/a/aede5353c4/public_html/.well-known/' is executable www.ampsstudio.com [Sat Oct 22 09:18:21 2022] [crit] [client 66.249.93.34:0] AH00529: /home/virtual/vps-aa3942/a/aede5353c4/public_html/.well-known/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/virtual/vps-aa3942/a/aede5353c4/public_html/.well-known/' is executable ampsstudio.com [Sat Oct 22 09:54:07 2022] [error] [client 147.78.47.249:0] [client 147.78.47.249] ModSecurity: Access denied with code 403 (phase 2). String match "connector.minimal.php" at REQUEST_URI. [file "remote server"] [line "-1"] [id "500083"] [msg "Malware.Expert - request_uri: 0-Day - Wordpress filemanager plugin"] [hostname "ampsstudio.com"] [uri "/wp-content/plugins/wp-file-manager/lib/php/connector.minimal.php"] [unique_id "Y1Ovr46z7U3UpVUqsF7P8wAAAAY"] ampsstudio.com [Sat Oct 22 10:22:28 2022] [error] [client 109.206.241.182:0] [client 109.206.241.182] ModSecurity: Access denied with code 403 (phase 2). Match of "contains index.php" against "REQUEST_URI" required. [file "remote server"] [line "-1"] [id "570076"] [msg "Malware.Expert - Malware"] [hostname "ampsstudio.com"] [uri "/wp-content/plugins/seoplugins/mar.php"] [unique_id "Y1O2VJByK79uWh-EvdH1wAAAAAc"] ampsstudio.com [Sat Oct 22 10:22:39 2022] [error] [client 109.206.241.182:0] [client 109.206.241.182] ModSecurity: Access denied with code 403 (phase 2). Match of "contains index.php" against "REQUEST_URI" required. [file "remote server"] [line "-1"] [id "570076"] [msg "Malware.Expert - Malware"] [hostname "ampsstudio.com"] [uri "/wp-content/themes/seotheme/mar.php"] [unique_id "Y1O2X8AWVnTwdMeWZSTxQQAAAAg"] ampsstudio.com [Sat Oct 22 10:22:45 2022] [error] [client 109.206.241.182:0] [client 109.206.241.182] ModSecurity: Access denied with code 403 (phase 2). Match of "contains index.php" against "REQUEST_URI" required. [file "remote server"] [line "-1"] [id "570076"] [msg "Malware.Expert - Malware"] [hostname "ampsstudio.com"] [uri "/wp-content/themes/seotheme/mar.php"] [unique_id "Y1O2ZYNtpQJ4U2nofd9mvgAAAAI"] ampsstudio.com [Sat Oct 22 10:41:19 2022] [error] [client 194.169.175.136:0] [client 194.169.175.136] ModSecurity: Access denied with code 403 (phase 2). Pattern match "/ioptimization/.*\\\\.php\\\\?rchk" at REQUEST_URI. [file "remote server"] [line "-1"] [id "570039"] [msg "Malware.Expert - Wordpress malware plugin - ioptimization"] [hostname "ampsstudio.com"] [uri "/wp-content/plugins/ioptimization/IOptimize.php"] [unique_id "Y1O6v8YhXcPhbSRgwy1rZAAAAAU"] ampsstudio.com [Sat Oct 22 10:41:30 2022] [error] [client 194.169.175.136:0] [client 194.169.175.136] ModSecurity: Access denied with code 403 (phase 2). Pattern match "/ioptimization/.*\\\\.php\\\\?rchk" at REQUEST_URI. [file "remote server"] [line "-1"] [id "570039"] [msg "Malware.Expert - Wordpress malware plugin - ioptimization"] [hostname "ampsstudio.com"] [uri "/wp-content/plugins/ioptimization/IOptimize.php"] [unique_id "Y1O6ypByK79uWh-EvdH1xwAAAAc"] www.ampsstudio.com [Sat Oct 22 12:50:53 2022] [error] [client 185.155.99.77:0] AH01071: Got error 'PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179' www.ampsstudio.com [Sat Oct 22 12:50:53 2022] [error] [client 185.155.99.77:0] AH01071: Got error 'PHP message: PHP Warning: Cannot modify header information - headers already sent by (output started at /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-includes/functions.php:5277) in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/includes/sonaar-music/css/theme/custom-style.php on line 2' ampsstudio.com [Sat Oct 22 14:12:11 2022] [error] [client 64.227.119.234:0] [client 64.227.119.234] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [hostname "ampsstudio.com"] [uri "/.env"] [unique_id "Y1PsK4NtpQJ4U2nofd9nBQAAAAI"] www.ampsstudio.com [Sat Oct 22 16:52:58 2022] [crit] [client 66.249.93.34:0] AH00529: /home/virtual/vps-aa3942/a/aede5353c4/public_html/.well-known/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/home/virtual/vps-aa3942/a/aede5353c4/public_html/.well-known/' is executable www.ampsstudio.com [Sat Oct 22 17:54:48 2022] [error] [client 88.218.226.91:0] AH01071: Got error 'PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179' www.ampsstudio.com [Sat Oct 22 17:54:48 2022] [error] [client 88.218.226.91:0] AH01071: Got error 'PHP message: PHP Warning: Cannot modify header information - headers already sent by (output started at /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-includes/functions.php:5277) in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/includes/sonaar-music/css/theme/custom-style.php on line 2' www.ampsstudio.com [Sat Oct 22 19:24:10 2022] [error] [client 45.57.234.31:0] AH01071: Got error 'PHP message: PHP Warning: Cannot modify header information - headers already sent by (output started at /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-includes/functions.php:5277) in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/includes/sonaar-music/css/theme/custom-style.php on line 2' www.ampsstudio.com [Sat Oct 22 20:04:08 2022] [error] [client 20.166.73.17:0] AH01276: Cannot serve directory /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-admin/css/: No matching DirectoryIndex (index.php,index.html,index.htm) found, and server-generated directory index forbidden by Options directive www.ampsstudio.com [Sat Oct 22 20:15:23 2022] [error] [client 4.224.37.212:0] [client 4.224.37.212] ModSecurity: Access denied with code 403 (phase 2). Pattern match "/wp-config\\\\.php" at QUERY_STRING. [file "remote server"] [line "-1"] [id "410018"] [msg "Malware.Expert - query_string: unwanted wordpress config access"] [hostname "www.ampsstudio.com"] [uri "/wp-content/plugins/mapsvg-lite-interactive-vector-maps/gm_download.php"] [unique_id "Y1RBS04SzGbrXr06RxyWLAAAAAQ"] www.ampsstudio.com [Sat Oct 22 20:15:28 2022] [error] [client 4.224.37.212:0] [client 4.224.37.212] ModSecurity: Access denied with code 403 (phase 2). Pattern match "/wp-config\\\\.php" at QUERY_STRING. [file "remote server"] [line "-1"] [id "410018"] [msg "Malware.Expert - query_string: unwanted wordpress config access"] [hostname "www.ampsstudio.com"] [uri "/wp-content/plugins/mapsvg/gm_download.php"] [unique_id "Y1RBUNDVXVES0rinPBpcOQAAAAA"] www.ampsstudio.com [Sat Oct 22 20:15:34 2022] [error] [client 4.224.37.212:0] [client 4.224.37.212] ModSecurity: Access denied with code 403 (phase 2). Pattern match "/wp-config\\\\.php" at QUERY_STRING. [file "remote server"] [line "-1"] [id "410018"] [msg "Malware.Expert - query_string: unwanted wordpress config access"] [hostname "www.ampsstudio.com"] [uri "/wp-admin/admin-ajax.php"] [unique_id "Y1RBVjCd4IOuHeP4WmToAwAAAAk"] www.ampsstudio.com [Sat Oct 22 20:15:36 2022] [error] [client 4.224.37.212:0] [client 4.224.37.212] ModSecurity: Access denied with code 403 (phase 2). Pattern match "/wp-config\\\\.php" at QUERY_STRING. [file "remote server"] [line "-1"] [id "410018"] [msg "Malware.Expert - query_string: unwanted wordpress config access"] [hostname "www.ampsstudio.com"] [uri "/wp-admin/admin-ajax.php"] [unique_id "Y1RBWMAWVnTwdMeWZSTyBQAAAAg"] www.ampsstudio.com [Sat Oct 22 20:15:41 2022] [error] [client 4.224.37.212:0] [client 4.224.37.212] ModSecurity: Access denied with code 403 (phase 1). Pattern match "\\\\.\\\\./\\\\.\\\\." at REQUEST_URI. [file "remote server"] [line "-1"] [id "430064"] [msg "Malware.Expert - request_uri: directory travel"] [hostname "www.ampsstudio.com"] [uri "/wp-content/plugins/cherry-plugin/admin/import-export/download-content.php"] [unique_id "Y1RBXYNtpQJ4U2nofd9ngAAAAAI"] www.ampsstudio.com [Sat Oct 22 20:15:45 2022] [error] [client 4.224.37.212:0] [client 4.224.37.212] ModSecurity: Access denied with code 403 (phase 1). Pattern match "\\\\.\\\\./\\\\.\\\\." at REQUEST_URI. [file "remote server"] [line "-1"] [id "430064"] [msg "Malware.Expert - request_uri: directory travel"] [hostname "www.ampsstudio.com"] [uri "/wp-admin/admin-ajax.php"] [unique_id "Y1RBYZByK79uWh-EvdH2kgAAAAc"] www.ampsstudio.com [Sat Oct 22 20:15:50 2022] [error] [client 4.224.37.212:0] [client 4.224.37.212] ModSecurity: Access denied with code 403 (phase 1). Pattern match "\\\\.\\\\./\\\\.\\\\." at REQUEST_URI. [file "remote server"] [line "-1"] [id "430064"] [msg "Malware.Expert - request_uri: directory travel"] [hostname "www.ampsstudio.com"] [uri "/wp-content/plugins/wp-ecommerce-shop-styling/includes/download.php"] [unique_id "Y1RBZpqve_C_r31ZswwcUQAAAAU"] www.ampsstudio.com [Sat Oct 22 20:15:56 2022] [error] [client 4.224.37.212:0] [client 4.224.37.212] ModSecurity: Access denied with code 403 (phase 1). Pattern match "\\\\.\\\\./\\\\.\\\\." at REQUEST_URI. [file "remote server"] [line "-1"] [id "430064"] [msg "Malware.Expert - request_uri: directory travel"] [hostname "www.ampsstudio.com"] [uri "/wp-content/plugins/web-portal-lite-client-portal-secure-file-sharing-private-messaging/includes/libs/pdf/dompdf.php"] [unique_id "Y1RBbPvncW6rYM2Yuo2e3AAAAAE"] www.ampsstudio.com [Sat Oct 22 20:15:58 2022] [error] [client 4.224.37.212:0] [client 4.224.37.212] ModSecurity: Access denied with code 403 (phase 1). Pattern match "\\\\.\\\\./\\\\.\\\\." at REQUEST_URI. [file "remote server"] [line "-1"] [id "430064"] [msg "Malware.Expert - request_uri: directory travel"] [hostname "www.ampsstudio.com"] [uri "/wp-content/plugins/post-pdf-export/dompdf/dompdf.php"] [unique_id "Y1RBbk4SzGbrXr06RxyWLQAAAAQ"] www.ampsstudio.com [Sat Oct 22 20:48:21 2022] [error] [client 185.228.138.234:0] AH01071: Got error 'PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179' www.ampsstudio.com [Sat Oct 22 20:48:21 2022] [error] [client 185.228.138.234:0] AH01071: Got error 'PHP message: PHP Warning: Cannot modify header information - headers already sent by (output started at /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-includes/functions.php:5277) in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/includes/sonaar-music/css/theme/custom-style.php on line 2' www.ampsstudio.com [Sat Oct 22 21:58:55 2022] [error] [client 154.12.140.195:0] AH01071: Got error 'PHP message: PHP Warning: Cannot modify header information - headers already sent by (output started at /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-includes/functions.php:5277) in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/includes/sonaar-music/css/theme/custom-style.php on line 2' www.ampsstudio.com [Sat Oct 22 22:37:35 2022] [error] [client 2a02:c7e:2c28:9700:8525:a3b6:90c4:33ab:0] AH01071: Got error 'PHP message: PHP Warning: Cannot modify header information - headers already sent by (output started at /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-includes/functions.php:5277) in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/includes/sonaar-music/css/theme/custom-style.php on line 2' www.ampsstudio.com [Sat Oct 22 23:09:00 2022] [error] [client 185.14.97.176:0] AH01071: Got error 'PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179PHP message: PHP Warning: Undefined array key "referrer" in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/plugins/elementor-pro/modules/forms/classes/form-record.php on line 179' www.ampsstudio.com [Sat Oct 22 23:09:00 2022] [error] [client 185.14.97.176:0] AH01071: Got error 'PHP message: PHP Warning: Cannot modify header information - headers already sent by (output started at /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-includes/functions.php:5277) in /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-content/themes/sonaar/includes/sonaar-music/css/theme/custom-style.php on line 2' ampsstudio.com [Sun Oct 23 00:00:52 2022] [error] [client 20.55.63.208:0] AH01276: Cannot serve directory /home/virtual/vps-aa3942/a/aede5353c4/public_html/wp-admin/css/: No matching DirectoryIndex (index.php,index.html,index.htm) found, and server-generated directory index forbidden by Options directive