[Mon Feb 17 10:14:02.381245 2025] [mpm_event:notice] [pid 524:tid 524] AH00489: Apache/2.4.57 (Debian) configured -- resuming normal operations [Mon Feb 17 10:14:02.381320 2025] [core:notice] [pid 524:tid 524] AH00094: Command line: '/usr/sbin/apache2' [Mon Feb 17 10:16:44.912304 2025] [php:warn] [pid 811:tid 811] [client 185.199.108.12:51244] PHP Warning: Undefined array key "user_id" in /var/www/html/login.php on line 42 [Mon Feb 17 10:18:10.223987 2025] [security2:warn] [pid 815:tid 815] [client 203.0.113.45:49822] ModSecurity: Warning. Matched "Operator `Rx' with parameter `(?i:(union(.*?)select))' against variable `ARGS:q' (Value: '1 UNION SELECT username, password FROM users-- ') [file "/etc/modsecurity/crs/rules/REQUEST-942-APPLICATION-ATTACK-SQLI.conf"] [line "120"] [id "942100"] [msg "SQL Injection Attack Detected"] [severity "WARNING"] [Mon Feb 17 10:19:31.774120 2025] [rewrite:warn] [pid 820:tid 820] [client 198.51.100.23:43321] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden: /var/www/html/.htaccess [Mon Feb 17 10:22:05.004553 2025] [core:error] [pid 824:tid 824] [client 192.0.2.55:60211] AH00126: Invalid URI in request GET /%2e%2e/%2e%2e/etc/passwd HTTP/1.1 [Mon Feb 17 10:22:05.004612 2025] [security2:warn] [pid 824:tid 824] [client 192.0.2.55:60211] ModSecurity: Warning. Matched "Operator `Rx' with parameter `\.\./\.\./' against variable `REQUEST_URI' (Value: '/../../etc/passwd') [id "930120"] [msg "Path Traversal Attack Detected"] [severity "WARNING"] [Mon Feb 17 10:25:47.661204 2025] [php:error] [pid 830:tid 830] [client 203.0.113.88:45502] PHP Fatal error: Uncaught Error: Call to undefined function connect_database() in /var/www/html/api.php:12 [Mon Feb 17 10:31:12.992440 2025] [core:crit] [pid 524:tid 524] AH00057: apache2: apr_sockaddr_info_get() failed for debian-web-01 [Mon Feb 17 10:31:12.992481 2025] [core:emerg] [pid 524:tid 524] AH00059: ap_run_pre_config failed, exiting [Mon Feb 17 10:33:02.114882 2025] [mpm_event:crit] [pid 1024:tid 1024] AH00484: server reached MaxRequestWorkers setting, consider raising the MaxRequestWorkers setting